Edit tour

Windows Analysis Report
https://in.xero.com/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe?utm_source=invoiceEmailViewInvoiceButtonSecondary&utm_campaign=invoicesEmailStandardV2

Overview

General Information

Sample URL:	https://in.xero.com/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe?utm_source=invoiceEmailViewInvoiceButtonSecondary&utm_campaign=invoicesEmailStandardV2
Analysis ID:	1431285
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Phishing site detected (based on favicon image match)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5924 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3484 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2180,i,5531215888177487074,17761865753618945802,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6404 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://in.xero.com/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe?utm_source=invoiceEmailViewInvoiceButtonSecondary&utm_campaign=invoicesEmailStandardV2" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /events/1/bd61b676be?a=1134228971&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=7982&ck=1&ref=https://in.xero.com/m/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveContent-Length: 198sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: */*Origin: https://in.xero.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://in.xero.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=2ff4698120548831

Source: chromecache_397.2.dr, chromecache_277.2.dr	String found in binary or memory: http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/
Source: chromecache_405.2.dr	String found in binary or memory: http://opensource.org/licenses/BSD-2-Clause
Source: chromecache_405.2.dr	String found in binary or memory: http://opensource.org/licenses/GPL-2.0
Source: chromecache_252.2.dr	String found in binary or memory: http://www.amazon.com/b/?&node=7253015011.
Source: chromecache_397.2.dr, chromecache_277.2.dr	String found in binary or memory: http://www.day.com/dam/1.0
Source: chromecache_397.2.dr, chromecache_277.2.dr	String found in binary or memory: http://www.day.com/jcr/cq/1.0
Source: chromecache_455.2.dr	String found in binary or memory: https://a.quora.com/qevents.js
Source: chromecache_484.2.dr	String found in binary or memory: https://aa.agkn.com/adscores/g.pixel?sid=9211946648&tdid=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&_redir
Source: chromecache_455.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_422.2.dr, chromecache_361.2.dr, chromecache_455.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_455.2.dr	String found in binary or memory: https://ads.nextdoor.com/public/pixel/ndp.js
Source: chromecache_465.2.dr, chromecache_422.2.dr, chromecache_361.2.dr, chromecache_454.2.dr, chromecache_455.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_465.2.dr, chromecache_422.2.dr, chromecache_361.2.dr, chromecache_454.2.dr, chromecache_455.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_456.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_455.2.dr	String found in binary or memory: https://apps.rokt.com/integrations/launcher.js
Source: chromecache_455.2.dr	String found in binary or memory: https://apps.rokt.com/store/js/gtm_wrapper.min.js
Source: chromecache_285.2.dr, chromecache_371.2.dr	String found in binary or memory: https://apps.xero.com/
Source: chromecache_455.2.dr	String found in binary or memory: https://c.amazon-adsystem.com/aat/amzn.js
Source: chromecache_465.2.dr, chromecache_422.2.dr, chromecache_361.2.dr, chromecache_454.2.dr, chromecache_455.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_489.2.dr	String found in binary or memory: https://central.xero.com/s/
Source: chromecache_285.2.dr, chromecache_371.2.dr	String found in binary or memory: https://central.xero.com/s/article/Convert-to-Xero
Source: chromecache_285.2.dr, chromecache_371.2.dr	String found in binary or memory: https://central.xero.com/s/article/Xero-for-mobile
Source: chromecache_285.2.dr, chromecache_371.2.dr	String found in binary or memory: https://central.xero.com/s/article/Xero-subscriptions-and-billing
Source: chromecache_489.2.dr	String found in binary or memory: https://central.xero.com/s/learning
Source: chromecache_218.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=ZDZkMDA1MDM
Source: chromecache_243.2.dr	String found in binary or memory: https://dpm.demdex.net/ibs:dpid=903&dpuuid=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&gdpr=0&gdpr_consent=
Source: chromecache_484.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=d6d00503-92d1-41f5-9caa-ddfeeb15d
Source: chromecache_461.2.dr	String found in binary or memory: https://edge.xero.com
Source: chromecache_461.2.dr	String found in binary or memory: https://edge.xero.com/business/mybills/production/apple-touch-icon.png
Source: chromecache_461.2.dr	String found in binary or memory: https://edge.xero.com/business/mybills/production/favicon.ico
Source: chromecache_461.2.dr	String found in binary or memory: https://edge.xero.com/business/mybills/production/favicon.png
Source: chromecache_461.2.dr	String found in binary or memory: https://edge.xero.com/business/mybills/production/main.1fa941fbe0b37736643c.js
Source: chromecache_461.2.dr	String found in binary or memory: https://edge.xero.com/business/mybills/production/main.3cf9c16495486cc66bcb.css
Source: chromecache_461.2.dr	String found in binary or memory: https://edge.xero.com/common/react-dom/18.2.0/react-dom.min.js
Source: chromecache_461.2.dr	String found in binary or memory: https://edge.xero.com/common/react/18.2.0/react.min.js
Source: chromecache_461.2.dr	String found in binary or memory: https://edge.xero.com/identity/client/1.1.13/identity.js
Source: chromecache_461.2.dr	String found in binary or memory: https://edge.xero.com/style/xui/22.0.0/xui.min.css
Source: chromecache_455.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_228.2.dr	String found in binary or memory: https://go.xero.com/api/intercom/workspaces/$
Source: chromecache_455.2.dr	String found in binary or memory: https://google.com
Source: chromecache_455.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_212.2.dr, chromecache_197.2.dr, chromecache_317.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1023673485/?random
Source: chromecache_313.2.dr, chromecache_302.2.dr, chromecache_321.2.dr	String found in binary or memory: https://gusto.com/go/bd/xero?utm_source=xero
Source: chromecache_243.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid
Source: chromecache_484.2.dr	String found in binary or memory: https://idpix.media6degrees.com/orbserv/hbpix?pixId=69060&pcv=78&ptid=87&tpuv=01&tpu=d6d00503-92d1-4
Source: chromecache_243.2.dr, chromecache_218.2.dr, chromecache_484.2.dr	String found in binary or memory: https://js.adsrvr.org/universal_pixel.1.1.0.js
Source: chromecache_489.2.dr	String found in binary or memory: https://login.xero.com/identity/user/login
Source: chromecache_284.2.dr, chromecache_280.2.dr	String found in binary or memory: https://nz.trustpilot.com/evaluate/embed/www.xero.com
Source: chromecache_284.2.dr, chromecache_280.2.dr	String found in binary or memory: https://nz.trustpilot.com/evaluate/www.xero.com
Source: chromecache_284.2.dr, chromecache_280.2.dr	String found in binary or memory: https://nz.trustpilot.com/review/www.xero.com
Source: chromecache_284.2.dr, chromecache_280.2.dr	String found in binary or memory: https://nz.trustpilot.com/reviews/63bed4ab2338b6d417b6a965
Source: chromecache_284.2.dr, chromecache_280.2.dr	String found in binary or memory: https://nz.trustpilot.com/reviews/63bf03884d0773066a34ff00
Source: chromecache_284.2.dr, chromecache_280.2.dr	String found in binary or memory: https://nz.trustpilot.com/reviews/63c03b9c2338b6d417b7f488
Source: chromecache_284.2.dr, chromecache_280.2.dr	String found in binary or memory: https://nz.trustpilot.com/reviews/640d11074132c023a056981e
Source: chromecache_284.2.dr, chromecache_280.2.dr	String found in binary or memory: https://nz.trustpilot.com/reviews/642c689ac0d0ca0649a9b779
Source: chromecache_284.2.dr, chromecache_280.2.dr	String found in binary or memory: https://nz.trustpilot.com/reviews/6437fa9599c5fd22b4ab852c
Source: chromecache_455.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_465.2.dr, chromecache_422.2.dr, chromecache_361.2.dr, chromecache_454.2.dr, chromecache_455.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_243.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&gd
Source: chromecache_218.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=d6d00503-92d1-41f5-9caa-
Source: chromecache_455.2.dr	String found in binary or memory: https://q.quora.com/_/ad/
Source: chromecache_196.2.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_455.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_455.2.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_465.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_465.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_456.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_456.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_218.2.dr	String found in binary or memory: https://tags.bluekai.com/site/5386?id=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&gdpr=0&gdpr_consent=&redi
Source: chromecache_465.2.dr, chromecache_422.2.dr, chromecache_361.2.dr, chromecache_454.2.dr, chromecache_455.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_489.2.dr	String found in binary or memory: https://twitter.com/xero/
Source: chromecache_228.2.dr	String found in binary or memory: https://widget.intercom.io/widget/
Source: chromecache_455.2.dr	String found in binary or memory: https://www.awin1.com/sread.img?tt=ns&tv=2&
Source: chromecache_455.2.dr	String found in binary or memory: https://www.dwin1.com/
Source: chromecache_455.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_456.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_456.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_456.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_455.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_456.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_455.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_465.2.dr, chromecache_422.2.dr, chromecache_361.2.dr, chromecache_454.2.dr, chromecache_455.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_422.2.dr, chromecache_361.2.dr, chromecache_455.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_456.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_302.2.dr, chromecache_321.2.dr	String found in binary or memory: https://www.hubdoc.com/terms
Source: chromecache_465.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_360.2.dr	String found in binary or memory: https://www.quantcast.com/legal/license
Source: chromecache_201.2.dr, chromecache_295.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/581d359d/pixel.js
Source: chromecache_455.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/pixel.js
Source: chromecache_313.2.dr, chromecache_302.2.dr, chromecache_321.2.dr, chromecache_285.2.dr, chromecache_371.2.dr	String found in binary or memory: https://www.trustpilot.com/review/www.xero.com
Source: chromecache_326.2.dr, chromecache_481.2.dr	String found in binary or memory: https://www.xero.com/
Source: chromecache_217.2.dr, chromecache_384.2.dr, chromecache_214.2.dr, chromecache_211.2.dr, chromecache_382.2.dr, chromecache_390.2.dr, chromecache_391.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.xero.com/api/crm/v1
Source: chromecache_313.2.dr, chromecache_337.2.dr, chromecache_331.2.dr, chromecache_302.2.dr, chromecache_326.2.dr, chromecache_321.2.dr, chromecache_426.2.dr, chromecache_481.2.dr, chromecache_336.2.dr, chromecache_453.2.dr, chromecache_365.2.dr, chromecache_378.2.dr	String found in binary or memory: https://www.xero.com/api/crm/v2
Source: chromecache_313.2.dr, chromecache_337.2.dr, chromecache_331.2.dr, chromecache_302.2.dr, chromecache_326.2.dr, chromecache_321.2.dr, chromecache_426.2.dr, chromecache_481.2.dr, chromecache_336.2.dr, chromecache_453.2.dr, chromecache_365.2.dr, chromecache_378.2.dr	String found in binary or memory: https://www.xero.com/api/events/v1/
Source: chromecache_217.2.dr, chromecache_384.2.dr, chromecache_214.2.dr, chromecache_211.2.dr, chromecache_382.2.dr, chromecache_390.2.dr, chromecache_391.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.xero.com/api/signup/v1
Source: chromecache_313.2.dr, chromecache_337.2.dr, chromecache_331.2.dr, chromecache_302.2.dr, chromecache_326.2.dr, chromecache_321.2.dr, chromecache_426.2.dr, chromecache_481.2.dr, chromecache_336.2.dr, chromecache_453.2.dr, chromecache_365.2.dr, chromecache_378.2.dr	String found in binary or memory: https://www.xero.com/api/signup/v2
Source: chromecache_326.2.dr, chromecache_481.2.dr	String found in binary or memory: https://www.xero.com/au/
Source: chromecache_302.2.dr, chromecache_321.2.dr	String found in binary or memory: https://www.xero.com/au/pricing-plans/
Source: chromecache_489.2.dr	String found in binary or memory: https://www.xero.com/au/try-now/manage-invoices/
Source: chromecache_326.2.dr, chromecache_481.2.dr	String found in binary or memory: https://www.xero.com/ca/
Source: chromecache_302.2.dr, chromecache_321.2.dr	String found in binary or memory: https://www.xero.com/ca/pricing-plans/
Source: chromecache_489.2.dr	String found in binary or memory: https://www.xero.com/ca/try-now/manage-invoices/
Source: chromecache_326.2.dr, chromecache_321.2.dr, chromecache_426.2.dr, chromecache_481.2.dr, chromecache_336.2.dr, chromecache_453.2.dr, chromecache_365.2.dr, chromecache_489.2.dr, chromecache_378.2.dr	String found in binary or memory: https://www.xero.com/content/dam/xero/pilot-images/opengraph/opengraph-xero.png
Source: chromecache_326.2.dr, chromecache_481.2.dr	String found in binary or memory: https://www.xero.com/hk/
Source: chromecache_302.2.dr, chromecache_321.2.dr	String found in binary or memory: https://www.xero.com/hk/pricing-plans/
Source: chromecache_489.2.dr	String found in binary or memory: https://www.xero.com/hk/try-now/manage-invoices/
Source: chromecache_326.2.dr, chromecache_481.2.dr	String found in binary or memory: https://www.xero.com/id/
Source: chromecache_302.2.dr, chromecache_321.2.dr	String found in binary or memory: https://www.xero.com/id/pricing-plans/
Source: chromecache_489.2.dr	String found in binary or memory: https://www.xero.com/id/try-now/manage-invoices/
Source: chromecache_326.2.dr, chromecache_481.2.dr	String found in binary or memory: https://www.xero.com/ie/
Source: chromecache_302.2.dr, chromecache_321.2.dr	String found in binary or memory: https://www.xero.com/ie/pricing-plans/
Source: chromecache_489.2.dr	String found in binary or memory: https://www.xero.com/ie/try-now/manage-invoices/
Source: chromecache_326.2.dr, chromecache_481.2.dr	String found in binary or memory: https://www.xero.com/my/
Source: chromecache_302.2.dr, chromecache_321.2.dr	String found in binary or memory: https://www.xero.com/my/pricing-plans/
Source: chromecache_489.2.dr	String found in binary or memory: https://www.xero.com/my/try-now/manage-invoices/
Source: chromecache_326.2.dr, chromecache_481.2.dr	String found in binary or memory: https://www.xero.com/nz/
Source: chromecache_302.2.dr, chromecache_321.2.dr	String found in binary or memory: https://www.xero.com/nz/pricing-plans/
Source: chromecache_489.2.dr	String found in binary or memory: https://www.xero.com/nz/try-now/manage-invoices/
Source: chromecache_326.2.dr, chromecache_481.2.dr	String found in binary or memory: https://www.xero.com/ph/
Source: chromecache_302.2.dr, chromecache_321.2.dr	String found in binary or memory: https://www.xero.com/ph/pricing-plans/
Source: chromecache_489.2.dr	String found in binary or memory: https://www.xero.com/ph/try-now/manage-invoices/
Source: chromecache_302.2.dr, chromecache_321.2.dr	String found in binary or memory: https://www.xero.com/pricing-plans/
Source: chromecache_326.2.dr, chromecache_481.2.dr	String found in binary or memory: https://www.xero.com/sg/
Source: chromecache_302.2.dr, chromecache_321.2.dr	String found in binary or memory: https://www.xero.com/sg/pricing-plans/
Source: chromecache_489.2.dr	String found in binary or memory: https://www.xero.com/sg/try-now/manage-invoices/
Source: chromecache_489.2.dr	String found in binary or memory: https://www.xero.com/try-now/manage-invoices/
Source: chromecache_326.2.dr, chromecache_481.2.dr	String found in binary or memory: https://www.xero.com/uk/
Source: chromecache_302.2.dr, chromecache_321.2.dr	String found in binary or memory: https://www.xero.com/uk/pricing-plans/
Source: chromecache_489.2.dr	String found in binary or memory: https://www.xero.com/uk/try-now/manage-invoices/
Source: chromecache_481.2.dr	String found in binary or memory: https://www.xero.com/us/
Source: chromecache_302.2.dr, chromecache_321.2.dr	String found in binary or memory: https://www.xero.com/us/legal/terms/
Source: chromecache_321.2.dr, chromecache_481.2.dr, chromecache_285.2.dr, chromecache_377.2.dr, chromecache_389.2.dr, chromecache_371.2.dr	String found in binary or memory: https://www.xero.com/us/pricing-plans/
Source: chromecache_378.2.dr	String found in binary or memory: https://www.xero.com/us/pricing-plans/early/
Source: chromecache_453.2.dr	String found in binary or memory: https://www.xero.com/us/pricing-plans/established/
Source: chromecache_426.2.dr	String found in binary or memory: https://www.xero.com/us/pricing-plans/growing/
Source: chromecache_489.2.dr	String found in binary or memory: https://www.xero.com/us/try-now/manage-invoices/
Source: chromecache_326.2.dr, chromecache_481.2.dr	String found in binary or memory: https://www.xero.com/za/
Source: chromecache_302.2.dr, chromecache_321.2.dr	String found in binary or memory: https://www.xero.com/za/pricing-plans/
Source: chromecache_489.2.dr	String found in binary or memory: https://www.xero.com/za/try-now/manage-invoices/
Source: chromecache_465.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50333 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 50314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887

Source: unknown	HTTPS traffic detected: 23.202.57.177:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.202.57.177:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:50020 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@32/495@256/76

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2180,i,5531215888177487074,17761865753618945802,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://in.xero.com/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe?utm_source=invoiceEmailViewInvoiceButtonSecondary&utm_campaign=invoicesEmailStandardV2"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2180,i,5531215888177487074,17761865753618945802,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://in.xero.com/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe?utm_source=invoiceEmailViewInvoiceButtonSecondary&utm_campaign=invoicesEmailStandardV2	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://s.company-target.com/s/sync?exc=lr	0%	URL Reputation	safe
http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/	0%	URL Reputation	safe
about:blank	0%	Avira URL Cloud	safe
https://xerolimited.tt.omtrdc.net/rest/v1/delivery?client=xerolimited&version=2.3.1&sessionId=3f1be1d8-9f25-4368-bedc-dbf40f8c1e2a	0%	Avira URL Cloud	safe
https://bam.nr-data.net/events/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=22016&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/	0%	Avira URL Cloud	safe
https://bam.nr-data.net/events/1/bd61b676be?a=1134228971&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=16488&ck=1&ref=https://in.xero.com/m/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe	0%	Avira URL Cloud	safe
https://bam.nr-data.net/events/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=12037&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/	0%	Avira URL Cloud	safe
https://bam.nr-data.net/events/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=16072&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/pricing-plans/	0%	Avira URL Cloud	safe
https://bam.nr-data.net/jserrors/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=24051&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/pricing-plans/	0%	Avira URL Cloud	safe
https://bam.nr-data.net/events/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=29958&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/try-now/manage-invoices/	0%	Avira URL Cloud	safe
https://api.company-target.com/api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.xero.com%2Fus%2F&page_title=Accounting%20Software%20%E2%80%93%20Do%20Beautiful%20Business%20%7C%20Xero%20US	0%	Avira URL Cloud	safe
https://ara.paa-reporting-advertising.amazon/aat?pid=890f9a2a-f5c2-415f-82e9-09a1f0694ac9&event=PageView&ts=1713979879966	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
pacman-content-live.live.eks.hotjar.com	99.80.149.126	true	false	high
d2fashanjl7d9f.cloudfront.net	18.164.174.99	true	false	high
global.px.quantserve.com	192.184.67.70	true	false	high
segments.company-target.com	216.137.39.63	true	false	unknown
s.dsp-prod.demandbase.com	34.96.71.22	true	false	high
d20qwf0wrdtevy.cloudfront.net	18.65.25.70	true	false	high
platform.twitter.map.fastly.net	146.75.92.157	true	false	unknown
stats.g.doubleclick.net	142.250.141.157	true	false	high
t.co	104.244.42.197	true	false	high
cm.g.doubleclick.net	142.250.101.157	true	false	high
www.google.com	142.250.141.105	true	false	high
tracking.g2crowd.com	172.64.144.225	true	false	high
id.rlcdn.com	35.244.154.8	true	false	high
q.quora.com	52.200.154.95	true	false	high
js.intercomcdn.com	54.230.21.89	true	false	high
match.adsrvr.org	35.71.131.137	true	false	high
static-cdn.hotjar.com	18.173.121.47	true	false	high
star-mini.c10r.facebook.com	31.13.70.36	true	false	high
s.twitter.com	104.244.42.3	true	false	high
dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com	52.32.69.132	true	false	high
api-iam.intercom.io	54.162.198.104	true	false	high
d2ctznuk6ro1vp.cloudfront.net	99.84.203.116	true	false	high
d1ykf07e75w7ss.cloudfront.net	52.85.204.136	true	false	high
dualstack.reddit.map.fastly.net	151.101.129.140	true	false	unknown
reddit.map.fastly.net	151.101.193.140	true	false	unknown
googleads.g.doubleclick.net	142.251.2.154	true	false	high
td.doubleclick.net	142.250.101.154	true	false	high
partners-alb-1113315349.us-east-1.elb.amazonaws.com	34.239.87.50	true	false	high
wsky-live.live.eks.hotjar.com	52.50.39.109	true	false	high
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false	unknown
dart.l.doubleclick.net	142.251.2.148	true	false	high
dg2iu7dxxehbo.cloudfront.net	18.154.142.121	true	false	high
adservice.google.com	142.251.2.157	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
spdc-global.pbp.gysm.yahoodns.net	35.155.89.175	true	false	unknown
adobetarget.data.adobedc.net	63.140.37.126	true	false	unknown
insight.adsrvr.org	15.197.193.217	true	false	high
scontent.xx.fbcdn.net	31.13.70.7	true	false	high
tag.demandbase.com	108.139.10.76	true	false	high
script.hotjar.com	18.155.202.90	true	false	high
ara.paa-reporting-advertising.amazon	3.163.125.9	true	false	unknown
nexus-websocket-a.intercom.io	34.237.73.95	true	false	high
d2pbcviywxotf2.cloudfront.net	13.226.210.108	true	false	high
tag-logger.demandbase.com	18.239.199.34	true	false	high
pixel.tapad.com	34.111.113.62	true	false	high
widget.intercom.io	216.137.39.9	true	false	high
ad.doubleclick.net	142.251.2.148	true	false	high
js-agent.newrelic.com	162.247.243.39	true	false	high
aax-eu.amazon-adsystem.com	67.220.226.234	true	false	high
dsum-sec.casalemedia.com	172.64.151.101	true	false	high
api.company-target.com	18.154.144.27	true	false	unknown
tags.srv.stackadapt.com	3.225.21.46	true	false	high
xerolimited.sc.omtrdc.net	63.140.36.145	true	false	unknown
widget.trustpilot.com	18.154.132.87	true	false	high
ib.anycast.adnxs.com	104.254.150.241	true	false	high
edge.gycpi.b.yahoodns.net	209.73.190.12	true	false	unknown
alb.reddit.com	unknown	unknown	false	high
static.ads-twitter.com	unknown	unknown	false	unknown
idpix.media6degrees.com	unknown	unknown	false	high
secure.adnxs.com	unknown	unknown	false	high
cm.everesttech.net	unknown	unknown	false	high
rules.quantcount.com	unknown	unknown	false	unknown
static.hotjar.com	unknown	unknown	false	high
www.xero.com	unknown	unknown	false	high
ws.hotjar.com	unknown	unknown	false	high
www.redditstatic.com	unknown	unknown	false	high
js.adsrvr.org	unknown	unknown	false	high
s.company-target.com	unknown	unknown	false	unknown
9401320.fls.doubleclick.net	unknown	unknown	false	high
acdn.adnxs.com	unknown	unknown	false	high
pixel.rubiconproject.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
bam.nr-data.net	unknown	unknown	false	unknown
s.yimg.com	unknown	unknown	false	high
partners.tremorhub.com	unknown	unknown	false	unknown
sp.analytics.yahoo.com	unknown	unknown	false	high
a.quora.com	unknown	unknown	false	high
s.go-mpulse.net	unknown	unknown	false	unknown
w3-reporting-nel.reddit.com	unknown	unknown	false	high
product-analytics-bff.xero.com	unknown	unknown	false	high
d.agkn.com	unknown	unknown	false	high
xerolimited.tt.omtrdc.net	unknown	unknown	false	unknown
dpm.demdex.net	unknown	unknown	false	high
aa.agkn.com	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
user-tracking-api.dgt-digital-marketing.xero.com	unknown	unknown	false	high
xero.demdex.net	unknown	unknown	false	high
in.xero.com	unknown	unknown	false	high
www.dwin1.com	unknown	unknown	false	unknown
c.amazon-adsystem.com	unknown	unknown	false	high
www.linkedin.com	unknown	unknown	false	high
secure.quantserve.com	unknown	unknown	false	high
pixel.quantserve.com	unknown	unknown	false	high
analytics.twitter.com	unknown	unknown	false	high
content.hotjar.io	unknown	unknown	false	unknown
edge.xero.com	unknown	unknown	false	high
tags.bluekai.com	unknown	unknown	false	high
snap.licdn.com	unknown	unknown	false	high
ib.adnxs.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.redditstatic.com/ads/pixel.js	false		high
https://bam.nr-data.net/jserrors/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=24051&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/pricing-plans/	false	Avira URL Cloud: safe	unknown
https://w3-reporting-nel.reddit.com/reports	false		high
about:blank	false	Avira URL Cloud: safe	low
https://9401320.fls.doubleclick.net/activityi;src=9401320;type=pagev0;cat=globa000;ord=1;num=9361925215703;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=975646958;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals?	false		high
https://insight.adsrvr.org/track/up?adv=9nlrx8p&ref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&upid=e7m2c49&upv=1.1.0&td1=https://www.xero.com/us/try-now/manage-invoices/?utm_source=xero-invoice&utm_medium=referral&utm_campaign=global-d-lf-xeroinvoicereferrals	false		high
https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad	false		high
https://aa.agkn.com/adscores/g.pixel?sid=9211946648&tdid=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&_redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dadadvisor%26ttd_tpi%3D1%26gdpr%3D1%26gdpr_consent%3D	false		high
https://bam.nr-data.net/events/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=16072&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/pricing-plans/	false	Avira URL Cloud: safe	unknown
https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36&businessunitId=4becd84a00006400050b6782#locale=en-NZ&styleHeight=100%25&styleWidth=100%25&theme=light&tags=product&stars=4%2C5&schemaType=Organization&sku=Xero&name=Xero	false		high
https://analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=9771886d-050a-471a-bb88-618673ca7258&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f204cef4-02e0-4c83-8c94-00f5744fe9a4&tw_document_href=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nygt4&type=javascript&version=2.3.30	false		high
https://9401320.fls.doubleclick.net/activityi;dc_pre=CLGHkOGw24UDFS9TCAQdudkNXw;src=9401320;type=pagev0;cat=globa002;ord=1;num=2659309086237;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2F;ps=1;pcor=225406472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F?	false		high
https://www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-3776042-30&cid=1808248659.1713979875&jid=746412766&_u=YEBAAEAAAAAAACgEK~&z=275738162	false		high
https://adservice.google.com/ddm/fls/z/dc_pre=CNSLyc6w24UDFa6rOgUd8DEN-w;src=9401320;type=pagev0;cat=globa002;ord=1;num=8823647633995;npa=0;auiddc=*;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;ps=1;pcor=872077554;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals	false		high
https://aax-eu.amazon-adsystem.com/s/iu3?pid=890f9a2a-f5c2-415f-82e9-09a1f0694ac9&event=PageView&ts=1713979903026	false		high
https://9401320.fls.doubleclick.net/activityi;dc_pre=CIb5jOGw24UDFd1YCAQdJkEMrg;src=9401320;type=pagev0;cat=globa000;ord=1;num=8983422946655;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=671166263;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F?	false		high
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3Dd6d00503-92d1-41f5-9caa-ddfeeb15d4e9	false		high
https://t.co/i/adsct?bci=3&eci=2&event_id=051fde79-a6cb-4b0b-8627-02441e87e4e1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=db215465-1a74-4c4e-b811-94bd4dd8b457&tw_document_href=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nygt4&type=javascript&version=2.3.30	false		high
https://js-agent.newrelic.com/spa-aggregate.e6b09d52-1.236.0.min.js	false		high
https://adservice.google.com/ddm/fls/z/dc_pre=CLGHkOGw24UDFS9TCAQdudkNXw;src=9401320;type=pagev0;cat=globa002;ord=1;num=2659309086237;npa=0;auiddc=*;u1=%2Fus%2F;ps=1;pcor=225406472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F	false		high
https://js.adsrvr.org/up_loader.1.1.0.js	false		high
https://ib.adnxs.com/pixie?e=LandingPage&pi=a8c07fef-3f0b-43ec-b0fb-3e4bc99c03b5&it=1713979916403&v=0.0.24&u=https%3A%2F%2Fwww.xero.com%2Fus%2F&st=1713979916403&et=1713979916403&if=0	false		high
https://bam.nr-data.net/events/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=12037&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/	false	Avira URL Cloud: safe	unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=bluekai	false		high
https://tags.srv.stackadapt.com/js_tracking?url=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F&uid=XVsUfradtXcBUl5XS45ldg&v=1&host=https%3A%2F%2Fwww.xero.com	false		high
https://www.facebook.com/tr/?id=303901320544451&ev=referrerSource&dl=https%3A%2F%2Fwww.xero.com%2Fus%2F&rl=&if=false&ts=1713979916424&cd[utm_source]=organic&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=1&o=4126&fbp=fb.1.1713979879599.1913881180&ler=empty&cdl=API_unavailable&it=1713979915566&coo=false&up=hostname&rqm=GET	false		high
https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9401320;type=pagev0;cat=globa002;ord=1;num=8823647633995;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;ps=1;pcor=872077554;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals?	false		high
https://q.quora.com/_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&tag=DwellTime&ts=1713979893852&i=gtm&dwt=9510&ive=blur	false		high
https://insight.adsrvr.org/track/up?adv=9nlrx8p&ref=https%3A%2F%2Fwww.xero.com%2Fus%2F&upid=e7m2c49&upv=1.1.0&td1=https://www.xero.com/us/	false		high
https://xerolimited.tt.omtrdc.net/rest/v1/delivery?client=xerolimited&version=2.3.1&sessionId=3f1be1d8-9f25-4368-bedc-dbf40f8c1e2a	false	Avira URL Cloud: safe	unknown
https://bam.nr-data.net/events/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=29958&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/try-now/manage-invoices/	false	Avira URL Cloud: safe	unknown
https://js.intercomcdn.com/tooltips-modern.41f34148.js	false		high
https://adservice.google.com/ddm/fls/z/dc_pre=CL3E7tmw24UDFaSxOgUddFkLKw;src=9401320;type=pagev0;cat=globa002;ord=1;num=9700359326618;npa=0;auiddc=*;u1=%2Fus%2Fpricing-plans%2F;ps=1;pcor=1358158751;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F	false		high
https://sp.analytics.yahoo.com/sp.pl?a=10000&d=Wed%2C%2024%20Apr%202024%2017%3A31%3A41%20GMT&n=-2d&b=Pricing%20Plans%20%7C%20Xero%20US&.yp=10175613&f=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&enc=UTF-8&yv=1.15.1&tagmgr=gtm	false		high
https://xero.demdex.net/event?d_dil_ver=9.4&_ts=1713979872248	false		high
https://match.adsrvr.org/track/cmf/generic?ttd_pid=yjn0gup	false		high
https://js-agent.newrelic.com/async-api.30bd804e-1.236.0.min.js	false		high
https://bam.nr-data.net/events/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=22016&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/	false	Avira URL Cloud: safe	unknown
https://xero.demdex.net/event?d_dil_ver=9.4&_ts=1713979898216	false		high
https://js.intercomcdn.com/vendors~tooltips-modern.8e0f853f.js	false		high
https://xero.demdex.net/event?d_dil_ver=9.4&_ts=1713979872243	false		high
https://xero.demdex.net/event?d_dil_ver=9.4&_ts=1713979872241	false		high
https://script.hotjar.com/modules.588629dd3c10b20ab52d.js	false		high
https://api-iam.intercom.io/messenger/web/ping	false		high
https://www.facebook.com/tr/?id=303901320544451&ev=PageView&dl=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&rl=&if=false&ts=1713979902969&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.1.1713979879599.1913881180&cs_est=true&ler=empty&cdl=API_unavailable&it=1713979900948&coo=false&rqm=GET	false		high
https://www.xero.com/us/try-now/manage-invoices/?utm_source=xero-invoice&utm_medium=referral&utm_campaign=global-d-lf-xeroinvoicereferrals	false		high
https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9401320;type=pagev0;cat=globa002;ord=1;num=2659309086237;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2F;ps=1;pcor=225406472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F?	false		high
https://bam.nr-data.net/events/1/bd61b676be?a=1134228971&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=16488&ck=1&ref=https://in.xero.com/m/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe	false	Avira URL Cloud: safe	unknown
https://dpm.demdex.net/ibs:dpid=411&dpuuid=ZilB4gAAAKLUJQN2	false		high
https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=ZDZkMDA1MDMtOTJkMS00MWY1LTljYWEtZGRmZWViMTVkNGU5&gdpr=0&gdpr_consent=&ttd_tdid=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9	false		high
https://api.company-target.com/api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.xero.com%2Fus%2F&page_title=Accounting%20Software%20%E2%80%93%20Do%20Beautiful%20Business%20%7C%20Xero%20US	false	Avira URL Cloud: safe	unknown
https://static.hotjar.com/c/hotjar-3197823.js?sv=6	false		high
https://q.quora.com/_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979910868&i=gtm&dwt=32&ive=webkitHidden	false		high
https://9401320.fls.doubleclick.net/activityi;src=9401320;type=pagev0;cat=globa002;ord=1;num=8823647633995;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;ps=1;pcor=872077554;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals?	false		high
https://s.yimg.com/wi/ytc.js	false		high
https://dpm.demdex.net/ibs:dpid=903&dpuuid=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Daam	false		high
https://connect.facebook.net/signals/config/303901320544451?v=2.9.154&r=stable&domain=www.xero.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105	false		high
https://d.agkn.com/pixel/10751/?che=1713979923234&ip=154.16.105.36	false		high
https://ad.doubleclick.net/activity;register_conversion=1;src=9401320;type=pagev0;cat=globa002;ord=1;num=2659309086237;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2F;ps=1;pcor=225406472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F?	false		high
https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9401320;type=pagev0;cat=globa002;ord=1;num=9700359326618;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Fpricing-plans%2F;ps=1;pcor=1358158751;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F?	false		high
https://www.facebook.com/tr/?id=303901320544451&ev=referrerSource&dl=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&rl=&if=false&ts=1713979879612&cd[utm_source]=xero-invoice&cd[utm_medium]=referral&cd[utm_campaign]=global-d-lf-xeroinvoicereferrals&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=1&o=4126&fbp=fb.1.1713979879599.1913881180&ler=empty&cdl=API_unavailable&it=1713979876212&coo=false&up=hostname&rqm=GET	false		high
https://ara.paa-reporting-advertising.amazon/aat?pid=890f9a2a-f5c2-415f-82e9-09a1f0694ac9&event=PageView&ts=1713979879966	false	Avira URL Cloud: safe	unknown
https://aax-eu.amazon-adsystem.com/s/iu3?pid=890f9a2a-f5c2-415f-82e9-09a1f0694ac9&event=PageView&ts=1713979879966&dcc=t	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_465.2.dr	false		high
https://edge.xero.com/business/mybills/production/favicon.png	chromecache_461.2.dr	false		high
https://www.xero.com/au/try-now/manage-invoices/	chromecache_489.2.dr	false		high
https://www.xero.com/uk/try-now/manage-invoices/	chromecache_489.2.dr	false		high
https://idpix.media6degrees.com/orbserv/hbpix?pixId=69060&pcv=78&ptid=87&tpuv=01&tpu=d6d00503-92d1-4	chromecache_484.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_456.2.dr	false		high
https://www.xero.com/sg/try-now/manage-invoices/	chromecache_489.2.dr	false		high
https://q.quora.com/_/ad/	chromecache_455.2.dr	false		high
https://nz.trustpilot.com/reviews/640d11074132c023a056981e	chromecache_284.2.dr, chromecache_280.2.dr	false		high
https://www.redditstatic.com/ads/581d359d/pixel.js	chromecache_201.2.dr, chromecache_295.2.dr	false		high
https://central.xero.com/s/article/Xero-subscriptions-and-billing	chromecache_285.2.dr, chromecache_371.2.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_456.2.dr	false		high
http://www.day.com/jcr/cq/1.0	chromecache_397.2.dr, chromecache_277.2.dr	false		high
https://www.xero.com/api/signup/v2	chromecache_313.2.dr, chromecache_337.2.dr, chromecache_331.2.dr, chromecache_302.2.dr, chromecache_326.2.dr, chromecache_321.2.dr, chromecache_426.2.dr, chromecache_481.2.dr, chromecache_336.2.dr, chromecache_453.2.dr, chromecache_365.2.dr, chromecache_378.2.dr	false		high
https://www.xero.com/api/signup/v1	chromecache_217.2.dr, chromecache_384.2.dr, chromecache_214.2.dr, chromecache_211.2.dr, chromecache_382.2.dr, chromecache_390.2.dr, chromecache_391.2.dr, chromecache_308.2.dr	false		high
http://www.amazon.com/b/?&node=7253015011.	chromecache_252.2.dr	false		high
https://www.xero.com/my/pricing-plans/	chromecache_302.2.dr, chromecache_321.2.dr	false		high
https://www.xero.com/api/crm/v2	chromecache_313.2.dr, chromecache_337.2.dr, chromecache_331.2.dr, chromecache_302.2.dr, chromecache_326.2.dr, chromecache_321.2.dr, chromecache_426.2.dr, chromecache_481.2.dr, chromecache_336.2.dr, chromecache_453.2.dr, chromecache_365.2.dr, chromecache_378.2.dr	false		high
https://central.xero.com/s/article/Convert-to-Xero	chromecache_285.2.dr, chromecache_371.2.dr	false		high
https://edge.xero.com	chromecache_461.2.dr	false		high
https://www.xero.com/api/crm/v1	chromecache_217.2.dr, chromecache_384.2.dr, chromecache_214.2.dr, chromecache_211.2.dr, chromecache_382.2.dr, chromecache_390.2.dr, chromecache_391.2.dr, chromecache_308.2.dr	false		high
https://aa.agkn.com/adscores/g.pixel?sid=9211946648&tdid=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&_redir	chromecache_484.2.dr	false		high
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	chromecache_243.2.dr	false		high
http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/	chromecache_397.2.dr, chromecache_277.2.dr	false	URL Reputation: safe	unknown
https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=d6d00503-92d1-41f5-9caa-	chromecache_218.2.dr	false		high
http://opensource.org/licenses/GPL-2.0	chromecache_405.2.dr	false		high
https://www.xero.com/ph/	chromecache_326.2.dr, chromecache_481.2.dr	false		high
https://www.xero.com/id/try-now/manage-invoices/	chromecache_489.2.dr	false		high
https://www.awin1.com/sread.img?tt=ns&tv=2&	chromecache_455.2.dr	false		high
https://twitter.com/xero/	chromecache_489.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_465.2.dr	false		high
https://www.xero.com/us/pricing-plans/established/	chromecache_453.2.dr	false		high
https://edge.xero.com/business/mybills/production/favicon.ico	chromecache_461.2.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1023673485/?random	chromecache_212.2.dr, chromecache_197.2.dr, chromecache_317.2.dr	false		high
https://www.xero.com/za/try-now/manage-invoices/	chromecache_489.2.dr	false		high
https://ads.nextdoor.com/public/pixel/ndp.js	chromecache_455.2.dr	false		high
https://www.xero.com/uk/pricing-plans/	chromecache_302.2.dr, chromecache_321.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
100.26.119.80	unknown	United States	14618	AMAZON-AESUS	false
35.244.154.8	id.rlcdn.com	United States	15169	GOOGLEUS	false
54.162.198.104	api-iam.intercom.io	United States	14618	AMAZON-AESUS	false
74.125.137.157	unknown	United States	15169	GOOGLEUS	false
34.237.73.95	nexus-websocket-a.intercom.io	United States	14618	AMAZON-AESUS	false
104.254.148.252	unknown	United States	29990	ASN-APPNEXUS	false
151.101.193.140	reddit.map.fastly.net	United States	54113	FASTLYUS	false
18.173.121.47	static-cdn.hotjar.com	United States	3	MIT-GATEWAYSUS	false
63.140.36.145	xerolimited.sc.omtrdc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
3.163.125.74	unknown	United States	16509	AMAZON-02US	false
35.71.131.137	match.adsrvr.org	United States	237	MERIT-AS-14US	false
108.139.10.76	tag.demandbase.com	United States	16509	AMAZON-02US	false
18.239.199.122	unknown	United States	16509	AMAZON-02US	false
104.254.150.241	ib.anycast.adnxs.com	United States	29990	ASN-APPNEXUS	false
31.13.70.36	star-mini.c10r.facebook.com	Ireland	32934	FACEBOOKUS	false
13.226.210.108	d2pbcviywxotf2.cloudfront.net	United States	16509	AMAZON-02US	false
192.184.67.70	global.px.quantserve.com	United States	27281	QUANTCASTUS	false
142.251.2.149	unknown	United States	15169	GOOGLEUS	false
142.251.2.148	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.141.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.141.155	unknown	United States	15169	GOOGLEUS	false
18.154.132.87	widget.trustpilot.com	United States	16509	AMAZON-02US	false
18.239.199.34	tag-logger.demandbase.com	United States	16509	AMAZON-02US	false
3.163.125.9	ara.paa-reporting-advertising.amazon	United States	16509	AMAZON-02US	false
3.225.21.46	tags.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
216.137.39.9	widget.intercom.io	United States	16509	AMAZON-02US	false
216.137.39.37	unknown	United States	16509	AMAZON-02US	false
99.80.149.126	pacman-content-live.live.eks.hotjar.com	United States	16509	AMAZON-02US	false
104.244.42.197	t.co	United States	13414	TWITTERUS	false
209.73.190.12	edge.gycpi.b.yahoodns.net	United States	36229	YAHOO-YSM-SC8US	false
34.196.171.164	unknown	United States	14618	AMAZON-AESUS	false
151.101.1.140	unknown	United States	54113	FASTLYUS	false
63.140.37.206	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
209.73.190.11	unknown	United States	36229	YAHOO-YSM-SC8US	false
34.239.87.50	partners-alb-1113315349.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
52.85.204.136	d1ykf07e75w7ss.cloudfront.net	United States	16509	AMAZON-02US	false
151.101.129.140	dualstack.reddit.map.fastly.net	United States	54113	FASTLYUS	false
192.184.67.40	unknown	United States	27281	QUANTCASTUS	false
142.250.101.157	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
100.20.148.237	unknown	United States	16509	AMAZON-02US	false
18.154.142.121	dg2iu7dxxehbo.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.101.154	td.doubleclick.net	United States	15169	GOOGLEUS	false
35.155.89.175	spdc-global.pbp.gysm.yahoodns.net	United States	16509	AMAZON-02US	false
142.250.141.105	www.google.com	United States	15169	GOOGLEUS	false
142.250.141.103	unknown	United States	15169	GOOGLEUS	false
52.95.118.179	unknown	United States	16509	AMAZON-02US	false
52.209.193.176	unknown	United States	16509	AMAZON-02US	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
52.200.154.95	q.quora.com	United States	14618	AMAZON-AESUS	false
52.50.39.109	wsky-live.live.eks.hotjar.com	United States	16509	AMAZON-02US	false
216.137.39.63	segments.company-target.com	United States	16509	AMAZON-02US	false
172.64.151.101	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
54.230.21.89	js.intercomcdn.com	United States	16509	AMAZON-02US	false
15.197.193.217	insight.adsrvr.org	United States	7430	TANDEMUS	false
63.140.37.126	adobetarget.data.adobedc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
172.64.144.225	tracking.g2crowd.com	United States	13335	CLOUDFLARENETUS	false
18.154.144.27	api.company-target.com	United States	16509	AMAZON-02US	false
18.164.174.99	d2fashanjl7d9f.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
162.247.243.39	js-agent.newrelic.com	United States	13335	CLOUDFLARENETUS	false
104.254.151.68	unknown	United States	29990	ASN-APPNEXUS	false
104.244.42.3	s.twitter.com	United States	13414	TWITTERUS	false
104.244.42.5	unknown	United States	13414	TWITTERUS	false
34.111.113.62	pixel.tapad.com	United States	15169	GOOGLEUS	false
67.220.226.234	aax-eu.amazon-adsystem.com	United States	18450	WEBNXUS	false
31.13.70.7	scontent.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
146.75.92.157	platform.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
162.247.243.29	fastly-tls12-bam.nr-data.net	United States	13335	CLOUDFLARENETUS	false
18.155.202.90	script.hotjar.com	United States	16509	AMAZON-02US	false
18.65.25.70	d20qwf0wrdtevy.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
34.215.13.170	unknown	United States	16509	AMAZON-02US	false
52.32.69.132	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
99.84.203.116	d2ctznuk6ro1vp.cloudfront.net	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.16
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431285
Start date and time:	2024-04-24 19:29:41 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 54s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://in.xero.com/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe?utm_source=invoiceEmailViewInvoiceButtonSecondary&utm_campaign=invoicesEmailStandardV2
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@32/495@256/76
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.xero.com/try-now/manage-invoices/?utm_source=xero-invoice&utm_medium=referral&utm_campaign=global-d-lf-xeroinvoicereferrals Browse: https://www.xero.com/us/pricing-plans/ Browse: https://www.xero.com/us/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 74.125.137.94, 142.251.2.138, 142.251.2.113, 142.251.2.101, 142.251.2.102, 142.251.2.139, 142.251.2.100, 142.251.2.84, 34.104.35.123, 23.222.205.24, 23.222.206.4, 23.72.90.76, 13.95.31.18, 192.229.211.108, 23.42.95.234, 20.3.187.198, 23.208.8.138, 23.219.40.131, 142.250.141.95, 142.250.101.95, 142.251.2.95, 142.251.2.97, 54.201.190.38, 35.167.111.171, 52.40.51.17, 23.199.47.141, 23.199.47.143, 204.79.197.237, 13.107.21.237, 13.107.42.14, 74.125.137.138, 74.125.137.102, 74.125.137.100, 74.125.137.139, 74.125.137.113, 74.125.137.101, 23.202.56.175, 162.159.153.247, 162.159.152.17, 8.39.36.142, 8.39.36.141, 142.251.2.155, 142.251.2.157, 142.251.2.156, 142.251.2.154, 142.250.101.94, 173.222.162.26, 173.222.162.48, 23.208.9.49, 104.18.36.18, 172.64.151.238
Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, e6513.a.akamaiedge.net, bat-bing-com.dual-a-0034.a-msedge.net, www.googleadservices.com, pixel.rubiconproject.net.akadns.net, slscr.update.microsoft.com, user-tracking-api.dgt-digital-marketing.xero.com.edgekey.net, clientservices.googleapis.com, e11670.a.akamaiedge.net, a.quora.com.cdn.cloudflare.net, l-0005.l-msedge.net, e9126.x.akamaiedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, bat.bing.com, update.googleapis.com, www.xero.com.edgekey.net, secure-adnxs.edgekey.net, e124741.a.akamaiedge.net, e4518.dscx.akamaiedge.net, www.google-analytics.com, ip46.go-mpulse.net.edgekey.net, www-linkedin-com.l-0005.l-msedge.net, clients1.google.com, in.xero.com.edgekey.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, cm.everesttech.net.akadns.net, new-edge.xero.com.edgekey.net, ctldl.windowsupdate.com, product-analytics-bff.xe
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://in.xero.com/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe?utm_source=invoiceEmailViewInvoiceButtonSecondary&utm_campaign=invoicesEmailStandardV2

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (691), with no line terminators
Category:	downloaded
Size (bytes):	691
Entropy (8bit):	5.629303347136598
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEH8VNe4UsreYkjn2yO/ue73TiUMGT2IWaTfY/hr:hMiRO97q4UsreYkDpoue/8G9PLS
MD5:	1CA4091181D1033F0744B4B12246996F
SHA1:	60F842E7B17F934F68BB6983931A9FABEEB11BE6
SHA-256:	907A726F77E9F450055C19959D8B5A10439A3C0F5BBFF278ACA70476D1A70510
SHA-512:	CDAC1CE72E15978846C300EA9EFF8D7F8DA0C76435F947CEBC3F8BC5CADF201442007A1F5EC1E248BCF961BB68B75F0A2317857B50CE1A9A1FC01467C99768C4
Malicious:	false
Reputation:	low
URL:	https://9401320.fls.doubleclick.net/activityi;dc_pre=CLGHkOGw24UDFS9TCAQdudkNXw;src=9401320;type=pagev0;cat=globa002;ord=1;num=2659309086237;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2F;ps=1;pcor=225406472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CLGHkOGw24UDFS9TCAQdudkNXw;src=9401320;type=pagev0;cat=globa002;ord=1;num=2659309086237;npa=0;auiddc=*;u1=%2Fus%2F;ps=1;pcor=225406472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F"/></body></html>

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (945)
Category:	downloaded
Size (bytes):	131882
Entropy (8bit):	5.376896897488642
Encrypted:	false
SSDEEP:	1536:XtTqru1xouE1ZTnPrMiY6WRdA2qZpXnBnK3xsVdFE7zptEvp62kdS6F:JmuWl7ndK3xsVdKEd56F
MD5:	64141792105EA4861F9F33294D65AB81
SHA1:	506D9100CAA070005A890BD496DE64C437D6D008
SHA-256:	21758ED084CD0E37E735722EE4F3957EA960628A29DFA6C3CE1A1D47A2D6E4F7
SHA-512:	30E0A9AA84688AC093C09F2F41089C899BF4A9CA5138289D7A4DC64C54BA293936FB2EE6BA724894A09590509863EA7712B6055C28E61639DF4D34520B538759
Malicious:	false
Reputation:	low
URL:	https://edge.xero.com/common/react-dom/18.2.0/react-dom.min.js
Preview:	/*. @license React. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /.(function(){/. Modernizr 3.0.0pre (Custom Build) \| MIT.*/.'use strict';(function(Q,mb){"object"===typeof exports&&"undefined"!==typeof module?mb(exports,require("react")):"function"===typeof define&&define.amd?define(["exports","react"],mb):(Q=Q\|\|self,mb(Q.ReactDOM={},Q.React))})(this,function(Q,mb){function n(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,c=1;c<arguments.length;c++)b+="&args[]="+encodeURIComponent(arguments[c]);return"Minified React error #"+a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}.function nb(a,b){Ab(a,b);Ab(a+"Capture",b)}function Ab(a,b){$b[a]=b;for(a=0;a<b.length;a++)cg.add(b[a])}function cj(a){if(Zd.call(dg,a))retu

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2899), with no line terminators
Category:	downloaded
Size (bytes):	2899
Entropy (8bit):	5.974738786853284
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08EE4QCEc8pQ5zfMGbCG9A4J:wsbSUtJfxrqLWWWdV6j1QE4Qhc8pQ7SO
MD5:	7EFE8DAE3AD7AFA846A8C58956C666B9
SHA1:	54B93E796929BB75D73BC6EA4165B2F45E72C6AD
SHA-256:	79F12D1FF649EE32BC98B959D9068401637FCF3E873206387FB1A1ABD75043AD
SHA-512:	2F28566E805E5A39C9F5BE465DF9811C7E7E7B80E44F0C440AFEE125DBC20AA244671CFEEE3D5F9FD13834612F4528F8041297160959570A4DB13362648BB943
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion/1023673485/?random=1713979901079&cv=11&fst=1713979901079&bg=ffffff&guid=ON&async=1&gtm=45be44m0v883646161z8830923470za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&label=v0RbCOHw2eECEI2JkOgD&hn=www.googleadservices.com&frm=0&tiba=Pricing%20Plans%20%7C%20Xero%20US&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1776741404.1713979872&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49273)
Category:	downloaded
Size (bytes):	49276
Entropy (8bit):	5.46054574462855
Encrypted:	false
SSDEEP:	768:TCoEqoinIC7q2gh0CKUxEGWUwcvXWP6Ta8vHKPPSvCC1anVD//B/ZX8RNIB8HxKg:TPJi0LUxEpyv0StEZ/Bd8RNIsxZ
MD5:	FB2E085CDC32D0BC97C24A8A82C12946
SHA1:	194A95809592E6984151A465946EF7EDB7A47959
SHA-256:	6CC4C722A50B4152194B13E7E3C8A1A5A5F23B17988F8FA85404394EFC5C0984
SHA-512:	D9399F04E6965CC59C6A730F85E10DAF949A0BDA30DDE85710A27380650F8194362CA51E28C8D751B3B4F23C451715B14F2A3A1AB9F872DE8B3202F8F1698B0A
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function t(t,n,e){return n in t?Object.defineProperty(t,n,{value:e,enumerable:!0,configurable:!0,writable:!0}):t[n]=e,t}var n,e,r,o,i={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,s=2,f=(t(n={},a,"li_gc"),t(n,u,"li_mc"),n),d=function ar(){var t=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,n=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var o in function(t,n){if(!(t instanceof n))throw new TypeError("Cannot call a class as a function")}(this,ar),t=t\|\|{},this.consentAvailable=!1,this.issuedAt=n,this.userMode=e,this.optedInConsentMap={},i)t[o]=t[o]\|\|c,t[o]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[o]=t[o]===l\|\|t[o]===c&&r===l},v=(e=[i.ADVERTISING,i.ANALYTICS_AND_RESEARCH,i.FUNCTIONAL],r=[c,l,s,c],o=new R

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CLGHkOGw24UDFS9TCAQdudkNXw;src=9401320;type=pagev0;cat=globa002;ord=1;num=2659309086237;npa=0;auiddc=*;u1=%2Fus%2F;ps=1;pcor=225406472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1464x1464, components 3
Category:	dropped
Size (bytes):	37112
Entropy (8bit):	7.831600430771858
Encrypted:	false
SSDEEP:	768:J57ICDGZKvsaAhWZ38R2a2ZLjzgzQP5dkgAIJVSElIaxIMq:J57hDkaAMZ3kiBgoRbJVSEyyq
MD5:	EDD03DFD0473DA2D1C74126725EC45A2
SHA1:	0203304DD62F4778AC22EAF179669DD0DC5A7B26
SHA-256:	FB727F6C6B975737DA5A5ED7DD4B8290A9A4433C0C1E7E7D80CF1AD433F49949
SHA-512:	C9C06D4F8D053CBCF931CD5F1791EEDB2C23BCDD51CDDAB3121816FB87D94ED220FE987635FB282B6768D826DC34590DC2D3CE42B42C4DE8E165AA17E9FBB676
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................,..."..."...,.B.).0.).).0.).B.;.G.:.6.:.G.;.i.S.I.I.S.i.z.f.a.f.z...................F............................................,..."..."...,.B.).0.).).0.).B.;.G.:.6.:.G.;.i.S.I.I.S.i.z.f.a.f.z...................F..........."..........4.........................................................................%U.YH...e.......IE. ).B..&P..T..D.YDQ(.R.L. ........(........YD....DQ)....R....A.B...B..)..@.`..@...\.9...J........AP.)......%..P.R. ...@X....R.(.P....`..P%.......%.R.`.K..P.,.. .,.......D..l...(..YI@..T@.".".R&.2...(.........DPe....-..Q.%..PX,....J..-J...)P.1.........(..HX.P@d.J......@,.H.Q...D...T..PBP...()....Ir.X...E...QQ.E...(,..PX.....cl).......YH...T.......)...(.T..X.(.E..J..@J..`). ...B.U.AD...........X,....c.P.....,.Q...%....),"..AR...... .........).R.`.(%..2 ,....X.e...%..(.D.@)....*P.DUJ..U.X.-...........`...f......P.....%B......@..PX...(.%Ye"......R.,,..P.....B.`YD....."..B..&@"Q..$.. (.DP...

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.7092327439724695
Encrypted:	false
SSDEEP:	3:YTyLV/VffcB+xNVcSLQzRE9LduUBjd4:YWLV94iDLQmpddB4
MD5:	5143820DAEB644938735D6B28C0059E7
SHA1:	22316BB57B4FA755662FD6F5FB7F749B21AC32A1
SHA-256:	740BB313221BDA5543B6FBE0BCE3DD276CC70C4FD9AA0BAE9D46B149406BECF5
SHA-512:	ABABBC2935D02EF31FA6FD14F56CF781BA8015A0DBCF8AB05CC7CFECBCABCA4B2B4E37B5B0BBE0341948DA7902613F4BC7EEA1C1FB8E9D142B3EC1D61084FBA6
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/conversions-config/v1/pixel/config/t2_ewwvmnuh_telemetry
Preview:	{"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79
Entropy (8bit):	2.716326985350135
Encrypted:	false
SSDEEP:	3:tQTltaL5UJjV9GjUJjVE:6XG5UJjGjUJj2
MD5:	8E3DB10AF5A3E1CABE7AA67674E21188
SHA1:	E2314B0038DF2D49DDBE461F33A6797D4586CDE0
SHA-256:	87ECD5BABD6FD9F4F6F796D745AA38751FAF3985E3B55F87A2F53E506FE07362
SHA-512:	A4F136016F4591E021D54F06141896581371828BF02F662A050B2A36567DFEC6068A4C758815D481E01BD7D68692329B5EE228C854AB2D85246D05B56692FB09
Malicious:	false
Reputation:	low
Preview:	[71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1464x1464, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	21790
Entropy (8bit):	7.986928709826565
Encrypted:	false
SSDEEP:	384:TiuvW7Gvr/qLuKVTg4TjuUOCPekh63JHf2ncgdcgBiqm3nAbg3NXkFnYyps:TiYtv7qLzg4Tju1CPxcuncgdcgBi/uFS
MD5:	7187D23CE16563C985F749B7C969955F
SHA1:	C3BFD906007C66A666EE85BEE9C523EE17A3A8FD
SHA-256:	5DC3B7D1C8F34A7E8B4FFABB37E94CB7F9AE84808A16CFBAAA849A037E71FF0C
SHA-512:	7E6B84B2A3D810A084631C6E476DB1934F2710A37D057AF89EAF09FD0BB7F3453D2702B25E517C5F69481BEC7FCA3AC2AB75B288905C85B5A5824B9AA54A0C49
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/content/dam/xero/pilot-images/features/quotes/Quotes_hero.1646877478435.jpg
Preview:	RIFF.U..WEBPVP8 .U...........>.t.U).0(..x.`..gn....r.'=M\..8bdo..;....rs..S.:Z.6......g ._....n?....>.........Z............_...?[{.~...........c...............E...........K.W...o....".!N.}w..w....L......A.w.LZ....iwCL.f-wCL.f-wCL.f-wCL.f-wCM.....3...3..n..km..>..^v.4.I.WV.:....g.1l.E3....X.]Xh..Z]..p:..O.........>..]..>..P..%.3.u....]..>..]..>.".S....[+..I...7;Xir..x..''t4..L...i....}.wCY.......g.,4u'3j^.g.,4u''t.~...%..4^m......0.....S....wCL....s......-wCaMI.....zX...3.Q.dl.~...$!.Bn,...F..i............SUi...eua..P`2N.....w....F.....x.O..!9;..\|3..Rt(...S.....=LZ...Z...hon.3H.:.t6.:..I..E.7.....A.z.....g.1k..g.1O.R..ry)..}..>.A..I.... .45.Y....@.rwCP.o..m..g.3.C.1k..g.1k.....`9....Q...<.$/..W...CZa....xYA..Z-.2.....b.....a....4.......L.f-\|.?.....(.L8.x?.:.u..K.8.I...VH~J.I...3.CK..Yg.^lK..S..j;...E:.&j...&A`....W..)xj=.x,.....!\.U,.2....B.......=.B./.%........E1.%.n...Mo\|.......fI..9...JR}.g........v.....6.....?

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10978), with no line terminators
Category:	downloaded
Size (bytes):	10978
Entropy (8bit):	5.2355898199692
Encrypted:	false
SSDEEP:	192:xC8L2j7E9Ma7qS1lEpLqtP48nIGBIGAGLYsi/+Ihi0iybVEZUHO443blABEuWU2n:xCq2jAya7qS1lEpDfJZsimI1ifi4L2+J
MD5:	553D27144D4F9FBE7E31B802107A2071
SHA1:	C8B97A2504810C05288497B1A0CAC5C4654299DC
SHA-256:	F1249E3503B8A12598E09882E9DED38155AC212298143DEC459CE6820C6D3F37
SHA-512:	B794B02774E574C0D923F1530712BDEDFC5370036C15A525DAC807361900490DBCAE7B2547029DC7CB830D4EF43AD31CC5DBBCE0C2AD14B01D8AA74A0D092952
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/page_view_event-aggregate.06482edd-1.236.0.min.js
Preview:	"use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[786],{777:(e,t,n)=>{n.d(t,{e:()=>r});const r={}},5998:(e,t,n)=>{n.d(t,{uB:()=>h,wu:()=>l,zJ:()=>m});var r="Start",i="End",a="unloadEvent",o="redirect",s="domainLookup",u="onnect",c="request",f="response",d="loadEvent",p="domContentLoadedEvent",m=[];function l(e,t){let n=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{},m=arguments.length>3&&void 0!==arguments[3]&&arguments[3];if(t)return n.of=e,v(n.of,n,"n",!0),v(t[a+r],n,"u",m),v(t[o+r],n,"r",m),v(t[a+i],n,"ue",m),v(t[o+i],n,"re",m),v(t["fetch"+r],n,"f",m),v(t[s+r],n,"dn",m),v(t[s+i],n,"dne",m),v(t["c"+u+r],n,"c",m),v(t["secureC"+u+"ion"+r],n,"s",m),v(t["c"+u+i],n,"ce",m),v(t[c+r],n,"rq",m),v(t[f+r],n,"rp",m),v(t[f+i],n,"rpe",m),v(t.domLoading,n,"dl",m),v(t.domInteractive,n,"di",m),v(t[p+r],n,"ds",m),v(t[p+i],n,"de",m),v(t.domComplete,n,"dc",m),v(t[d+r],n,"l",m),v(t[d+i],n,"le",m),n}function h(e,t){var n;return v("number"==typeof(n=e.type)?n:{navigate:vo

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4643), with no line terminators
Category:	downloaded
Size (bytes):	4643
Entropy (8bit):	5.138344600303313
Encrypted:	false
SSDEEP:	96:lbD/Xk7xbyMDjyeJh10KdBVDb7a76SylPTMqqZqBcfHqmxJ/7Zqar:lb7U1rDjD/0Kxa72FqZquHqmnzZqar
MD5:	8862791DEBD0B259297A0CCF618932EB
SHA1:	9E4947BAFF917784CBB4E3274EFBEA1609EEC5D4
SHA-256:	0B09C565BAA3B8D3DE7EA5B132E22C0ED1BB8943AE83D1BFF9421E62AE8D8800
SHA-512:	682A6553AC191FE020080C181AC16389898C8D3E7AB4A3FD384C3697021BCBFD8300FA6A7B155CCC2F2FB6C4D4E202F56C2E247677270D9600D8B30FF52BE868
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/page_action-aggregate.ac76d497-1.236.0.min.js
Preview:	"use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[78],{2573:(t,e,s)=>{s.d(e,{o:()=>d});var i=s(4247),n=s(1117),r=s(8673),a=s(8310),o=s(5763),h=s(3860);class d extends n.w{constructor(t,e,s){super(s),this.endpoint=t,this.opts=e\|\|{},this.started=!1,this.timeoutHandle=null,this.aborted=!1,this.harvest=new r.M(this.sharedContext),(0,a.L)(this.unload.bind(this),(0,o.Mt)(this.sharedContext.agentIdentifier,"allow_bfcache")),this.sharedContext?.ee.on(h.wO.RESET,(()=>this.runHarvest({forceNoRetry:!0})))}unload(){this.aborted\|\|(this.opts.onUnload&&this.opts.onUnload(),this.runHarvest({unload:!0}))}startTimer(t,e){this.interval=t,this.started=!0,this.scheduleHarvest(null!=e?e:this.interval)}stopTimer(){let t=arguments.length>0&&void 0!==arguments[0]&&arguments[0];this.aborted=t,this.started=!1,this.timeoutHandle&&clearTimeout(this.timeoutHandle)}scheduleHarvest(t,e){this.timeoutHandle\|\|(null==t&&(t=this.interval),this.timeoutHandle=setTimeout((()=>{this.timeoutHandle=null,

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17191)
Category:	downloaded
Size (bytes):	17990
Entropy (8bit):	5.35330491911871
Encrypted:	false
SSDEEP:	384:NZJ57bov6hzkgl9Vv6p+wF3g/d28bH1cCFTNAU:NZJuv6ho2wF3g/dFcCFTX
MD5:	B7A91012FE354646E8A5DCBA217D6774
SHA1:	B4F1CB72389ABD4B4240DBE6AA5E2B82CB6A60FA
SHA-256:	A165ECFAAD7DA928766871B5D49907422CB04CE93E91C4549B92325E74A38E83
SHA-512:	8DB2881DFD31B173361BC8DCC2552FEC9BE80F6859FFCCBFCA14579823FA36A003808DB0839B9DE53C093ABFA136382FDBCD1730B654167CD7EFD3DDC6B3C576
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/events.js
Preview:	(function (w) {. // Begin doc.. var is_dev = false;.. if ( false ) {. is_dev = true;. }.. var disable_sync = false;.. if ( true ) {. disable_sync = true. }.. var tip = "p_rXxQ1dPjzlOXY3w3SQbafe1Djs8Ve7tFPKv5vLxJU". . var userIdCookieValue = "s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks". var userIdV2CookieValue = "s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw". var userIdV3CookieValue = "s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0". var campCookieName = "". var campCookieValue = "". var campaignCookieLiveDuration = 7776000. var userIdCookiesLiveDuration = 31536000..var globals={load_num:0,init:!1,addr:is_dev?"http://127.0.0.1":"https://tags.srv.stackadapt.com",aid:"",impid:"",default_params:"",landing_page:"",secs_passed:0,tec_secs_passed:0,hidden:!1,host:encodeURIComponent(window.location.protocol+"/

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.054229296672174
Encrypted:	false
SSDEEP:	3:3xuq3XW2C2Y:xn5O
MD5:	638FB29357D49E9A9D2889229043B078
SHA1:	C29D1B77328F39D6F2C684E33C15E61A647BAF52
SHA-256:	0FED1E72D393247E450EF385EC24D5D885A472F8CE3451F4DCC35E5C65470D25
SHA-512:	71202F7B2258706E1DCB28C840FB92AB60E4DFB542CC435627FEE812920B2C206BADFAE5FBF816EC225AD641938F0853DF8A866E95A09DD1056C04A34708F889
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnWdQflcJtVfxIFDXhvEhk=?alt=proto
Preview:	ChQKEg14bxIZGgQICRgBGgUImgEYAg==

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	225718
Entropy (8bit):	5.37949700981415
Encrypted:	false
SSDEEP:	3072:MhwvwI82wVdix0DvzxFkvYnUa3FmBRDYi:MhwvwJVExwr/kdaQbDYi
MD5:	D78F803B3665558F63F048E3A8740D4B
SHA1:	7036DE2D6CC408242C50EB01F2BA9B4A7271FDC6
SHA-256:	16CABC9D4B8AE81EED9193EC25B6D463E68290E5433069885156F7C1DC81E975
SHA-512:	F3291A4630D7F4A5A34AF6536E480C3106D34EB32A94B85454AF29E98CE4F66E34C98EF72647B056F78C5D0A049E1EAB0D78E41E25D76B2D5B2922E568673797
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/modules.588629dd3c10b20ab52d.js
Preview:	/! For license information please see modules.588629dd3c10b20ab52d.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (759), with no line terminators
Category:	downloaded
Size (bytes):	759
Entropy (8bit):	5.623825630135746
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHcNRVNe4U/2eYVmn2it0DK0XTiUMGT2IWaVGsFsYBWht:hMiRO9LRq4UBYVcB0xD8G9PV5D8
MD5:	778E05FD485B1D7484BC1B7BE2A93D97
SHA1:	4B31BC267CA8DFDF456DC74939558EA49365ADC9
SHA-256:	3048C38019986E4295BA69FA986F297995FFC80DD9C4F703F06F28FA2E49C5B8
SHA-512:	75640CE1C3E83E197CB48FAAC5A8A479D5C7ED8D9963EDDCBDACD3AD2542054545661626250978D89233D9F25D3FA1F3AE48883934F066ADAF8A79BC6CB5B768
Malicious:	false
Reputation:	low
URL:	https://9401320.fls.doubleclick.net/activityi;dc_pre=CJaV6tmw24UDFfZZCAQdl_MDNA;src=9401320;type=pagev0;cat=globa000;ord=1;num=265233616833;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Fpricing-plans%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=1662344157;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CJaV6tmw24UDFfZZCAQdl_MDNA;src=9401320;type=pagev0;cat=globa000;ord=1;num=265233616833;npa=0;auiddc=*;u1=%2Fus%2Fpricing-plans%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=1662344157;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F"/></body></html>

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	14186
Entropy (8bit):	4.85225145795087
Encrypted:	false
SSDEEP:	192:dpCW2jl35FuvSg6aFQF1HdrFhz9FU/NAKDNLQmnM3Zv4UFG4e:fCWgov96QQFhjl9FoNAsrnM3Zv4d
MD5:	EB92B9A2C0C61C675C9C4AAEE39B37FA
SHA1:	4A51016261CA3F86912C12F5F52CC537FA5CECB1
SHA-256:	963B938AD700D468396A1E28AF4C3BBE87D7B2C97C29EC5F3DB430CB56A77EF1
SHA-512:	06D2A3870698C9519EA5F02F60387A9421D69D3DA7E7E4EE80F2839F8725AB58613CC0ACE80DC18127CE67F87D8736854DD8232EFE2292FB71D7ACF6C9FE7986
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/_next/data/1712725399/us/signup/growing.json?next_id=1712725399
Preview:	{"pageProps":{"header":[],"main":[{"planHeading":"Growing","backButtonText":"Go back","recaptchaSiteKey":"6LeivbwbAAAAACadmd9FggGikXMNXyCwDJksdCAh","@type":"xero/components/content/signup/smb","showSidePanel":true,"successDescription":"We sent an email to {EmailAddress}. ","buyNow":"1","successNextSteps":[{"heading":"1. Verify your account","description":"Click on the link in the email to verify your account."},{"heading":"2. Set up your subscription","description":"Add your payment details from the Xero dashboard."},{"heading":"3. Start using Xero","description":"Log in to Xero and start exploring features."}],"signupApiUrl":"https://www.xero.com/api/signup/v1","signupGdprLabel":"Please don.t send me marketing communications","signupPoints":["Safe and secure","Cancel with one month's notice","24/7 online support"],"successHeading":"Hi {FirstName}! Confirm your email and start using Xero.","promoCode":"SPRINGSAVE60","@id":"content--909067596","signupLocationInitialValue":"US","planPr

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2936), with no line terminators
Category:	downloaded
Size (bytes):	2936
Entropy (8bit):	5.979739780463613
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08FE4AEc8pQXzHCG9A4Wca6y:wsbSUtJfxrqLWWWdV6j1JE4Lc8pES4WJ
MD5:	3EF021FB885B05949F2B72B616A52481
SHA1:	E89EEBB2A4D431D915F44AC9431B041A5D974521
SHA-256:	237E54398DD56DFAD479A07DB746068190AB4F03B8F56103F9C0A80ACAC2CAE1
SHA-512:	8A917BF54C93D0959B8D6ACEB1E817BFE6C9C18AF63514C6B79CB1F6C42807574550171DD8569B82BA431FF73690D2ED963EBC2BE7074C4D16DCA795F43C7E41
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion/1023673485/?random=1713979916325&cv=11&fst=1713979916325&bg=ffffff&guid=ON&async=1&gtm=45be44m0v883646161z8830923470za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.xero.com%2Fus%2F&label=v0RbCOHw2eECEI2JkOgD&hn=www.googleadservices.com&frm=0&tiba=Accounting%20Software%20%E2%80%93%20Do%20Beautiful%20Business%20%7C%20Xero%20US&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1776741404.1713979872&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	70468
Entropy (8bit):	5.346296584082395
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXltMHM9eEqJ1UJnTZ02LKVlEyF7:RIT7OX4s9eZYtj8ltN
MD5:	B8321C009C0B058EECC63EBADE42B9D4
SHA1:	6E21139BB907D671D9F6375EF7283029C6287792
SHA-256:	AB04FAD1F2890D94A0DB635CE0C65FBE802070E0717F7EBB3D0C1877AFE4C0EE
SHA-512:	612A641876468AC4BE7DA43F2E026A79B6397D3DC21DD8754B76EF74FC2C8ACE169174EEA4095B6158F38DF7C15607FDAE9DC0124962618C8F852BE17D722412
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/303901320544451?v=2.9.154&r=stable&domain=www.xero.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	14116
Entropy (8bit):	4.852751442895415
Encrypted:	false
SSDEEP:	192:bpJEjh35FuvSg6aFQF1HdrFhz9FU/NAKDNLQmnM3Zv4s3G4e:VJi0v96QQFhjl9FoNAsrnM3Zv4j
MD5:	8CA97297BE710BC13598A924D240F6E3
SHA1:	7AC778EC5A31729472186C018050DA70BDF8BF01
SHA-256:	54157C66C194434743881750284E9840A570B93B5CFE2FBB09AEE7263DBE272D
SHA-512:	46555A2AF79C1402C48F025FB0AAFD5B2FE255F30F54B5B6D6E79F6320376549C34689F1ECA281852947B7B9B97786F00E38DB455DC51448B8F35CEE7B7F45CA
Malicious:	false
Reputation:	low
Preview:	{"pageProps":{"header":[],"main":[{"planHeading":"Early","backButtonText":"Go back","recaptchaSiteKey":"6LeivbwbAAAAACadmd9FggGikXMNXyCwDJksdCAh","@type":"xero/components/content/signup/smb","showSidePanel":true,"successDescription":"We sent an email to {EmailAddress}. ","buyNow":"1","successNextSteps":[{"heading":"1. Verify your account","description":"Click on the link in the email to verify your account."},{"heading":"2. Set up your subscription","description":"Add your payment details from the Xero dashboard."},{"heading":"3. Start using Xero","description":"Log in to Xero and start exploring features."}],"signupApiUrl":"https://www.xero.com/api/signup/v1","signupGdprLabel":"Please don.t send me marketing communications","signupPoints":["Safe and secure","Cancel with one month's notice","24/7 online support"],"successHeading":"Hi {FirstName}! Confirm your email and start using Xero.","promoCode":"SPRINGSAVE60","@id":"content-792953382","signupLocationInitialValue":"US","planPrima

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	227843
Entropy (8bit):	5.426943373287834
Encrypted:	false
SSDEEP:	6144:WaJs6327ScWWuLPmauoesgwL0BQEPvdy2xO6WAB:5Js027ScWWDoesgwL0BQEPFy2xO6WAB
MD5:	31E53CC3A804A6014ED05D318D4310CE
SHA1:	121269CE2829A0E0C9909EBD5E04C04F86BB0A8B
SHA-256:	45DFAD3151CC1F748916DFB060584BB603AE394DA35752E689D2BAFEA19841A1
SHA-512:	BD40DBFCF3C769FD55DAC1971F01F9D0E39AF2E190F8F1C05280F9BFA3825FE7FC10EF1D184EE592350E5B939D8D977FBCEE44B9404C13D8ACDD43CCBD90A264
Malicious:	false
Reputation:	low
URL:	https://edge.xero.com/business/mybills/production/837.105aae41c2cc6739b850.chunk.js
Preview:	(self.webpackChunkmy_bills=self.webpackChunkmy_bills\|\|[]).push([[837],{82248:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default={width:11,height:7,path:"M5.5 4.2L9.625 0 11 1.4 5.5 7 0 1.4 1.375 0z"}},10966:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default={width:14,height:13,path:"M4 5.5l4-4L6.5 0 0 6.5 6.5 13 8 11.5l-4-4h10v-2z"}},44630:(e,t)=>{"use strict";t.A={width:20,height:20,path:"M10 20C15.5228 20 20 15.5228 20 10C20 4.47715 15.5228 0 10 0C4.47715 0 0 4.47715 0 10C0 15.5228 4.47715 20 10 20ZM5.8313 9.51435L4.54565 10.8L8.4026 14.6569L16.1165 6.94305L14.8308 5.65741L8.4026 12.0856L5.8313 9.51435Z"}},22664:(e,t)=>{"use strict";t.A={width:15,height:15,path:"M4 3h10c.5 0 1 .5 1 1.09v9.82c0 .545-.5 1.09-1 1.09H4c-.5 0-1-.545-1-1.09l.01-9.82C3 3.546 3.5 3 4 3zm0 11h10V4H4v10zM1 0h10c.5 0 1 .5 1 1.09V2h-1v-.91H1V11l1 .018V12H1c-.5 0-1-.5-1-.982V1.09C-.01.545.77 0 1 0z"}},81890:(e,t)=>{"use strict";t.A={width:15,height:15,path

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (885), with no line terminators
Category:	downloaded
Size (bytes):	885
Entropy (8bit):	5.593853087404169
Encrypted:	false
SSDEEP:	24:hMiRO9Qoq4UBgDJGgP0xH8G9PV5D6JGPHFBx:NOKS5JGgsxcG9d5uJG/Fj
MD5:	9EB8E71B61DA480A601C40B3A679007A
SHA1:	DD10805409F5EB18CDAFDEDAACA371B58395D527
SHA-256:	09A9341F2ED7ECC7A9E2DF0796CF3294C22E10983DA38933A8D0968257D9389F
SHA-512:	DA915E8B0FA7546F8BE5B12459001962DCC361BEA6195C15CC5CAB1DE832EE06BC4F99326FECDFCA28E2DCF5DC83ABC77B5C97E8DEC00DEC50004876A320C1B3
Malicious:	false
Reputation:	low
URL:	https://9401320.fls.doubleclick.net/activityi;dc_pre=CK3dyM6w24UDFaywOgUd4ZMBrw;src=9401320;type=pagev0;cat=globa000;ord=1;num=9361925215703;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=975646958;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CK3dyM6w24UDFaywOgUd4ZMBrw;src=9401320;type=pagev0;cat=globa000;ord=1;num=9361925215703;npa=0;auiddc=*;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=975646958;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals"/></body></html>

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	14417
Entropy (8bit):	4.849944546066173
Encrypted:	false
SSDEEP:	192:OpFG5IOjU35FuvSg6aFQF1HdrFhz9FU/NAKDNLQmnM0cv4LmYG4e:MF+IYXv96QQFhjl9FoNAsrnM0cv4LK
MD5:	2737D40F9DDD3635C29AC7BBC1140F93
SHA1:	192C44AEA4B5CA9E419B86BD61A6B799A199C808
SHA-256:	068C5925698F78899A720962D4F67CD0280D3216AF30A6FC0A2391575F6D64FF
SHA-512:	2EFB9037FBBFB91A0B5DCCDB26A88B4943AC3079583653B555A9BC71FA04BFD6E07F414BF4AAE7C4231A29E4DD88DFE831BA043A04ECC87B61D7290832763E8F
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/_next/data/1712725399/us/signup/established.json?next_id=1712725399
Preview:	{"pageProps":{"header":[],"main":[{"planHeading":"Established","backButtonText":"Go back","recaptchaSiteKey":"6LeivbwbAAAAACadmd9FggGikXMNXyCwDJksdCAh","@type":"xero/components/content/signup/smb","showSidePanel":true,"successDescription":"We sent an email to {EmailAddress}. ","buyNow":"1","successNextSteps":[{"heading":"1. Verify your account","description":"Click on the link in the email to verify your account."},{"heading":"2. Set up your subscription","description":"Add your payment details from the Xero dashboard."},{"heading":"3. Start using Xero","description":"Log in to Xero and start exploring features."}],"signupApiUrl":"https://www.xero.com/api/signup/v1","signupGdprLabel":"Please don.t send me marketing communications","signupPoints":["Safe and secure","Cancel with one month's notice","24/7 online support"],"successHeading":"Hi {FirstName}! Confirm your email and start using Xero.","promoCode":"SPRINGSAVE60","@id":"content-997853355","signupLocationInitialValue":"US","pla

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (618)
Category:	downloaded
Size (bytes):	967
Entropy (8bit):	5.4302907766313675
Encrypted:	false
SSDEEP:	24:si2N1V4NxwZG1QBfULU7GKrhWL1jzANTM49jzk9Y:rN3uB8LxKdWxo+49cC
MD5:	803A90E8BE423B98D57A0D9F2968F0EF
SHA1:	482675D1FE7EF5D108BFAE9155495A925616C751
SHA-256:	1EF77F90318D709083B70560F66ED1EBE0D172DF03EBAC7260F069C09A4AB96D
SHA-512:	D796683E59C88D70DEBF044C8FDF16A81F425123EA05D5B359EAB723471B8C7704B811182856F168785126171B06BDF79B66EC0D53847468CB3EA9656DC25D74
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/up?adv=9nlrx8p&ref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&upid=e7m2c49&upv=1.1.0&td1=https://www.xero.com/us/pricing-plans/
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( ["https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=ZDZkMDA1MDMtOTJkMS00MWY1LTljYWEtZGRmZWViMTVkNGU5&gdpr=0&gdpr_consent=&ttd_tdid=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9","https://tags.bluekai.com/site/5386?id=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbluekai","https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&partner_url=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dtapad"] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78687
Entropy (8bit):	5.316950923775964
Encrypted:	false
SSDEEP:	1536:2u23v7YtctGCxcYOKlI5Ar4j4INh7XOvnM5/Q0F:W7YtctGf7XOvnMWY
MD5:	9BA23104805B0ECDD9ECA87FA3A3467A
SHA1:	39BA8C65B15B08C3DDEFA9AE671A3166F6741B5B
SHA-256:	6488F5111B301AB43DA1C99360921528DE0903E94177C564DF5DAA090744E05E
SHA-512:	08F64B80CCE6522DD3FFB695BA4944E2F1169969ED6D5350A08B87B08BF6876D9DA2DF458929383EADE0F4D200D596B677BBACB4E7DB2A58088DFD1D4A2170DA
Malicious:	false
Reputation:	low
URL:	https://tag.demandbase.com/4cdf254ff02939a3.min.js
Preview:	var Demandbase=window.Demandbase\|\|{};!function(g){"use strict";var M,x=this&&this.__spreadArray\|\|function(t,e,i){if(i\|\|2===arguments.length)for(var n,o=0,r=e.length;o<r;o++)!n&&o in e\|\|((n=n\|\|Array.prototype.slice.call(e,0,o))[o]=e[o]);return t.concat(n\|\|Array.prototype.slice.call(e))},n=this&&this.__extends\|\|(M=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(t,e){t.__proto__=e}:function(t,e){for(var i in e)e.hasOwnProperty(i)&&(t[i]=e[i])}),function(t,e){M(t,e);function i(){this.constructor=t}t.prototype=null===e?Object.create(e):(i.prototype=e.prototype,new i)}),e=this&&this.__awaiter\|\|function(r,a,s,l){return new(s=s\|\|C)(function(t,e){function i(t){try{o(l.next(t))}catch(t){e(t)}}function n(t){try{o(l.throw(t))}catch(t){e(t)}}function o(e){e.done?t(e.value):new s(function(t){t(e.value)}).then(i,n)}o((l=l.apply(r,a\|\|[])).next())})},l=this&&this.__generator\|\|function(n,o){var r,a,s,l={label:0,sent:function(){if(1&s[0])throw s[1];return s[1]},trys:[],ops:[]},t={next:e(0

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	206885
Entropy (8bit):	5.833364094589992
Encrypted:	false
SSDEEP:	3072:9rWgBvhDJdT1SQwCReAWBUAOepO6CHJNzAVYazvePAnowKGjgqU3:P7nRRpWBlpO6CHJKVYabeUopGjrU3
MD5:	EBB1B6D57148B1E2A8F687ADD5D372E7
SHA1:	FEBDBE9DD26D3953C732E3A8F9522382A319B099
SHA-256:	818B8580C7436C9300DDCF9EA3F2EB3915170FCCF2952727D1D06019B9F12859
SHA-512:	B7709EB7E2596A370B07FF86DF2CC30E16F925D9BEEA10C44FF4BBFD921E0DCE12899228FA2DD9A8D5A6C401DDAE59D40C628374C17F451B019C4E2FA26FA517
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/e1a6bql1oMpW/jL/3zvTjNEMTU/3bOuwcr73YDY7h/FEF2AQ/biE1SAsQ/egcB
Preview:	(function kCHxPLmMcS(){Sh();dYh();MYh();WYh();var T6h=rYh();function Rbh(a,b,c){return a.indexOf(b,c);}var n6h=UYh();jYh();var Ovh;var hh;CYh();xYh();var Bh;function xYh(){Bh=[PYh,gYh,zYh,mYh,VYh,-vYh,-YYh,bYh];}var D6=function(f6,l6){return f6/l6;};var Q6=function(F6,B6){return F6===B6;};var c6=function(){return [".Z>.&5\x40:>(\t%/",".\x3fX/2JW.+=.R..","g>>9.29.3B%\x40>.=E\f4WB.6+.","2+.D<\v\"","B=.#;^.-\x40W.-","V:.7.G2.&\x008(\x3fqU8\x406.\x00","(\t%.\'1U>D<.","4.(#G.#,\r=0\x3f.F/L4\r.6I","P.!\".","7#%\x40<\x40+.","km\x00.",".%(Y8\x40\f\t\v.","K-..\x3f^","\bA=..=2=","82(9B.\x401\v..",".V5\v7%R","i#.\n","%=\\-v!.\x072I\f)Vp\x00:!._..!.","..%509u\"\x405\t..",".j\v8","IB.+\r.S<..\f","W.6.S","6\v&.F\f%+.9","E.$\x40[.;\x006","E H9..\x3fH6.CL","XDhD","\x07.#H.7K","56","S&a+3^\|\\S$r{I-M,/<m_5vW","(<#.29","8L:V","q","/\x00(.D-)3.]). .7541",".X,\r7.[,\"","!\".<1+1]\"I1","\\.2VJ.+!.Ct\r&.F:+","53%)]+K,","2%KV","55\|^!Qx\rS,M.)A..11../.>.Q{#)L%%69..\x40..)_./Km.2!",".4","\x00>=.R7\n..U5(#

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12146), with no line terminators
Category:	downloaded
Size (bytes):	12146
Entropy (8bit):	5.231155936118476
Encrypted:	false
SSDEEP:	192:bQPc4wQUDqOm02bKWSxFrstl7/s0U7J30VJvnhV2F0d4oQkpRr0rzonzDZHSjfGt:bjqYvXQH7/s0U7JkVZnbnd4oQYRrKcDd
MD5:	4EF8D054860549421E884B3D2D74B83E
SHA1:	36DC9C9225A4EA86A772E1865F8125A00F4A8D4B
SHA-256:	D0D7C9C8E398100C60B41833292522F27B1E6B12C057442536FF98995D90F08C
SHA-512:	8BD9FD27A417E91E7E9A450FCDB34E34C7405DB47A5F5F9F175B76A1AAB36E932A9239F8654D55FC2E7C0702C1428AAC8DA555A7CE63086165810ADF936A5056
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/session_trace-aggregate.83105561-1.236.0.min.js
Preview:	"use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[733],{9139:(e,t,s)=>{let r;s.d(t,{m:()=>n});const i=new Promise((e=>r=e)),n=Object.freeze({onReplayReady:r,sessionReplayInitialized:i})},2573:(e,t,s)=>{s.d(t,{o:()=>c});var r=s(4247),i=s(1117),n=s(8673),o=s(8310),a=s(5763),h=s(3860);class c extends i.w{constructor(e,t,s){super(s),this.endpoint=e,this.opts=t\|\|{},this.started=!1,this.timeoutHandle=null,this.aborted=!1,this.harvest=new n.M(this.sharedContext),(0,o.L)(this.unload.bind(this),(0,a.Mt)(this.sharedContext.agentIdentifier,"allow_bfcache")),this.sharedContext?.ee.on(h.wO.RESET,(()=>this.runHarvest({forceNoRetry:!0})))}unload(){this.aborted\|\|(this.opts.onUnload&&this.opts.onUnload(),this.runHarvest({unload:!0}))}startTimer(e,t){this.interval=e,this.started=!0,this.scheduleHarvest(null!=t?t:this.interval)}stopTimer(){let e=arguments.length>0&&void 0!==arguments[0]&&arguments[0];this.aborted=e,this.started=!1,this.timeoutHandle&&clearTimeout(this.timeoutHandl

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979910828&i=gtm&dwt=1&ive=blur
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 107, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13515
Entropy (8bit):	7.974213795883233
Encrypted:	false
SSDEEP:	384:KrYbrN6fD/mqpGIVW9elglpEWBhnZuHNI:4YbZcD+6VVyelggWLiNI
MD5:	6D9FC97288DAC32B0B3C79912DCFCCF1
SHA1:	56AFF47A52A76B67F81A22A5C7CEAFBEE05AC677
SHA-256:	E48FBF0E1DD8445F25BD9FAFC9EF1895F790506537D7E0130A900EE042ECE6C8
SHA-512:	F5F6391F3A07FE5F73EBBD7833771502C8E1DB6EA2265BF8DFFDCD976484A06ADC6115CD00AB600BCEB8F7D953A21C90DAE17814DCB0488E3D1535AE29C82689
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......k.....Y......sRGB.........gAMA......a.....pHYs..........o.d..4`IDATx^.].xUU..v.M'..e-..4@Q....Zv].HB...........V..'$.....U......0.^..B.?s.I.r..w........}..w.s.93......c...........>..e......)Y..\|...&L.9.....y..d)D9..V........<..@..p..:D.c.9t....c9....=^...-......[T.....1Q..bt:.3.BOe........tQI..d..@.....r.>#.c..w..,t.....4.dD..d.K>..1{.o.uq....h(.a..h..>.L=...E...B.q..8a7.M.u>8....RHm}.b..!.a.84.......O...!~....,j[,....q.O.%S.".O+....Kx.......XI.`...2...h:..m.[W...T}.P..c..B..M,..f.M..dm.DM..u..t....$xP.....:..{....:6'......1!%.}../<...2Z.!...=T.....k=.=.g.........#.......B........o+..y.2..i.Q.^.....@.?V.NH.;..v..>=VNQ.."Gf../........<....9..M.....90.1.Vrd&........_.i!.\|....Q....~...r...&.7.d@.&].k..7..$.V2!H..B..#23.;.......}".......+...!{...0..'.....Q_j...YH.W.IY...3........m..bn..].q..._t../.RD%j4 ...Dh..i..&......4...O..S.O.?............P.....w.E...#.i..x...r..UDCHa..=..un..{.0M..Y..X.#.V...e...P..I.q......Y..(

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713979875477&id=t2_ewwvmnuh&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=cb2d649f-3168-41a8-8246-f3b3ccc5e846&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_72595d5a&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2242
Entropy (8bit):	5.02001459266493
Encrypted:	false
SSDEEP:	48:Yt4vGKmHcw2YuBQjTl8QiG+znnsENBT2tVWERVOoOaV8mVOgVyEyCy7yHyqyEc+8:IIwfiCp41znsxbkta1B0vpOShUO
MD5:	57B575097AFC37BE97782E944273CF5D
SHA1:	9EABE7709530CBC720EAFBEFC48DAD3726861397
SHA-256:	47A4EF71B63F4D1A6711C5CF509254F17BCA7FABCC5A614137C8756B9B70BCAE
SHA-512:	CA8646E04FC9C5404E4E657CFF657C9D4845E2D0E85FF29C60023C5B9556600C2C83441E313ED99BEEF8DD5AD749F307EC794E908A9D44C18FD4ECED2C103ADA
Malicious:	false
Reputation:	low
Preview:	{"status":"AUTHORISED","organisationId":"11befb7f-0873-4b1e-bbab-775ef09a4a96","orgLegalName":"Billing Admin","orgName":"Billing Admin","organisationAddress":"Billing Admin","orgCountryCode":"US","documentType":"INVOICE","documentTitle":"INVOICE","isPdfPreview":false,"isX4XDocument":false,"isRepeatingDocument":false,"showLogo":true,"logoAlignment":"Right","contact":{"id":"8d16ab39-0494-4426-a2d4-6152f0d4b8d5","name":"USER7833","emailAddress":"E-PAY@wavestechnology3.shop","address":""},"documentNumber":"INV-06765","dateString":"2024-04-24","expiryDateString":"2024-04-24","showLineItemsHeaders":true,"taxUnitName":"Tax","lineItems":[{"description":"Bitcoin Crypto Currency (0.012)","unitAmount":795.9900,"lineAmount":795.99,"quantity":1.0000,"taxAmount":"Tax Exempt"}],"taxLines":[{"id":"TOTAL","taxString":"Tax","lineAmount":0.0}],"subTotal":795.99,"total":795.99,"navTotal":795.99,"currency":"USD","outstandingBills":795.99,"outstandingBillsCurrency":"USD","enteredByUserId":"623acfd5-429d-443

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	116
Entropy (8bit):	4.866602445362615
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHW03UQM9o3JJjWRQMBWHjV:YGKY6ZBAJ70MT6ZBAW8UZK3njWRZBAB
MD5:	9DFAC332BA53300DD79D5A6F96476423
SHA1:	524143EEA918B40E128EC00D93275251BB0AB618
SHA-256:	58DE1C15604E1D625AD854D74C6BC52D7EEDC99BD77D10A968771F88C9F8301C
SHA-512:	7C34DFA01CB406BC78BC955D41F91620F324BB27FE8612BCE0E66EDC19CD0B56B8C3F3180599990ACED864D4133BF7436530E11301B396E6CCA3240D679726DF
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/saq_pxl?uid=XVsUfradtXcBUl5XS45ldg&is_js=true&landing_url=https%3A%2F%2Fwww.xero.com%2Fus%2F&t=Accounting%20Software%20%E2%80%93%20Do%20Beautiful%20Business%20%7C%20Xero%20US&tip=p_rXxQ1dPjzlOXY3w3SQbafe1Djs8Ve7tFPKv5vLxJU&host=https%3A%2F%2Fwww.xero.com&sa_conv_data_css_value=%270-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892%27&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%252Br0VCscx3wVXJe%252F3g0&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":["qh1rAf185NXiuYhSCMROEK"],"lookalike_tracker_uids":null}

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4706)
Category:	downloaded
Size (bytes):	4707
Entropy (8bit):	5.209342867580516
Encrypted:	false
SSDEEP:	96:ofqbTG9QyFgVseQCvDbGB+EvV1IjsK21LROL6sparfS8g8VHbm6/606ni1Fm9lLN:ofqXM+QYfGJ/I4KILROLVafS8lVHbm64
MD5:	8F464F6B465E1BD7C723319B980B0A94
SHA1:	485EA8FC56E26ECFF4BB20354C3998CEB64D6766
SHA-256:	462EC91DA5F13557F7035D0BEB94E88EA21E41DD1576F1A5E1CA66CCE7FC6989
SHA-512:	2A62AFE2A43D00FA57830DDBE37E0002A99FC8006D44A8C2339888E173DC84F96B293D50E01EA0F09173A05EC9BF9DC6FF6B2E9E04CF20F4565B03BAE6F59CE4
Malicious:	false
Reputation:	low
URL:	https://edge.xero.com/i6m-wrapper/1.x/i6m-wrapper.js
Preview:	!function(){"use strict";const e=new Event("intercom-wrapper:script-loaded"),t=(e,t,n)=>{var o;null===(o=window.newrelic)\|\|void 0===o\|\|o.addPageAction(e,{kotahiId:t,deploymentEnvironment:"production",...n})},n=function(e){let t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:"";return Object.keys(e).filter((t=>null!=e[t])).reduce(((o,i)=>"object"==typeof e[i]&&null!==e[i]?[...o,...n(e[i],t+i+".")]:[...o,t+i]),[])},o=e=>e?{intercomWorkspaceId:e.app_id,intercomSettingsAttributes:n(e)}:{},i=async(e,t)=>{var n,o,i,a,s,r,d;const c=null===(n=e.user)\|\|void 0===n?void 0:n.user_id,w=null===(o=e.company)\|\|void 0===o?void 0:o.company_id,l=null!==(i=null===(a=e.user)\|\|void 0===a?void 0:a.custom_attributes)&&void 0!==i?i:{},u=null!==(s=null===(r=e.company)\|\|void 0===r?void 0:r.custom_attributes)&&void 0!==s?s:{},m={...l,...null!==(d=e.messenger)&&void 0!==d?d:{},app_id:t};return c?(m.user_id=c,m.user_hash=await(async(e,t)=>{var n,o;const i=sessionStorage.getItem(`intercom-user-hash-${e}-${t}

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=890f9a2a-f5c2-415f-82e9-09a1f0694ac9&event=PageView&ts=1713979916959
Preview:	{}

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7744)
Category:	downloaded
Size (bytes):	7826
Entropy (8bit):	5.385125178678939
Encrypted:	false
SSDEEP:	192:vy+A72mNNoj/BBVx69jARwSSnBy6fGewHmeLvu:vlJ1BBVx6VAROndir2
MD5:	BED1F74897D091A7DFC2B06E8A1E29A3
SHA1:	2905756DE30CBBFE9FDB7E5176AF938257CA4FDF
SHA-256:	3E89824DCD4A1D958C6972134BFC50E0C8E4A76D6B47569D14FD7CBA455C1F7F
SHA-512:	E9DD8EF350D50CEA4DA9E789B6E5102E800765FF2B12AF168B52CCD1DB04EF98AD356927549817F9762104AECC9AEEA39532D799E2B9F8066EB846BEF37CA93E
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/148.1a20d5fe-1.236.0.min.js
Preview:	/! For license information please see 148.1a20d5fe-1.236.0.min.js.LICENSE.txt /."use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[148],{8673:(t,e,n)=>{n.d(e,{M:()=>C});var s=n(1284),r=n(4351),a={"%2C":",","%3A":":","%2F":"/","%40":"@","%24":"$","%3B":";"},i=(0,s.D)(a,(function(t){return t})),o=new RegExp(i.join("\|"),"g");function c(t){return a[t]}function u(t){return null==t?"null":encodeURIComponent(t).replace(o,c)}function l(t,e){var n=0,a="";return(0,s.D)(t,(function(t,s){var i,o,c=[];if("string"==typeof s\|\|!Array.isArray(s)&&null!=s&&s.toString().length)i="&"+t+"="+u(s),n+=i.length,a+=i;else if(Array.isArray(s)&&s.length){for(n+=9,o=0;o<s.length&&(i=u((0,r.P)(s[o])),n+=i.length,!(void 0!==e&&n>=e));o++)c.push(i);a+="&"+t+"=%5B"+c.join(",")+"%5D"}})),a}function d(t,e){return e&&"string"==typeof e?"&"+t+"="+u(e):""}var h=n(4247);function f(){return""+location}var y=n(5763),g=n(4222),p=n(7894),b=n(3239),v=n(6141);function m(t,e){let n=arguments.length>2&&void

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	94
Entropy (8bit):	4.19215926745789
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHjzlRQMBWHjV:YGKY6ZBAJ70MT6ZBA9RZBAB
MD5:	2D12C1129F6FF37622D03DB4A2A5949E
SHA1:	BC44653C4A06E671CE423600755FED86FAD8EC24
SHA-256:	078F3DD88E751C3C421B2007E1CB27BCB65A95DAF278BD25DE81BA7B2BF3C4E4
SHA-512:	420AFB8CEB53E68C593A1242DB304C4F551C23A3C181B4D4EEBD2B74E3EB9740C803C182FFB646AF57D2E778E9D802D8A44E5C0CB9FF11FA272D1E9C0F2B0D36
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/saq_pxl?uid=IZi8ik6wpN0HnLyT9lcuoQ&is_js=true&landing_url=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&t=Manage%20Invoices%20with%20Xero%20Accounting%20Software%20%7C%20Xero%20US&tip=K3-yO62zYSgknJOjyQJz0FhpvQ9nprx7VnqHV_vSi0M&host=https%3A%2F%2Fwww.xero.com&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%252Br0VCscx3wVXJe%252F3g0&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	92
Entropy (8bit):	4.440074751043314
Encrypted:	false
SSDEEP:	3:kw3dA4jgWYHJiv3dA4jgW6QfpXD3dA4jgW6Qen:FtDjdYHJwtDjd6EpXDtDjd6h
MD5:	7C3F7E060745668041278118C0BB3D6D
SHA1:	E639F56695B3CC30D78DCE7A0084AA8299A1311A
SHA-256:	DE5341313A4DC5D982CA50AE4A491E84BC5E80B0F439D87F05FC3973C1B7E59A
SHA-512:	B12A692EF9BE5857423F2DF563B986E241F7161573B5A7F23190696D1B0A50C5DA453C7BD35641FE61695B459D0A7D76F8053A8E0E0CCBC6811F800AAB1532C6
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/_next/static/1712725399/_middlewareManifest.js
Preview:	self.__MIDDLEWARE_MANIFEST=[];self.__MIDDLEWARE_MANIFEST_CB&&self.__MIDDLEWARE_MANIFEST_CB()

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	87320
Entropy (8bit):	5.27327978825666
Encrypted:	false
SSDEEP:	1536:bgw+u9Ua5vgk5ynLfD2R9P6agOK9q4tW9t:XUHuiaRh9t
MD5:	B9964AEB356BB5D1503BC9F2E041D126
SHA1:	E866168D81054F39B8CF1BDE0A08C818B812EF47
SHA-256:	2F8DA052BCBCC1D6765B9240656E87AEABB050BD4D2A496862CD75AEDAE99EA9
SHA-512:	76211C31E907F875AC7132EFE8AA7E368698292CF7D8884D82AFD1C9055527A4952BEB4BC0DFE6D3CAD37233E138784385F0B18CAE608CA624AF68D528E97002
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/_next/static/chunks/main-0f9e5915b5af7510.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{7228:function(e){e.exports=function(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}},2858:function(e){e.exports=function(e){if(Array.isArray(e))return e}},3646:function(e,t,r){var n=r(7228);e.exports=function(e){if(Array.isArray(e))return n(e)}},1506:function(e){e.exports=function(e){if(void 0===e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}},8926:function(e){function t(e,t,r,n,a,o,i){try{var u=e[o](i),c=u.value}catch(s){return void r(s)}u.done?t(c):Promise.resolve(c).then(n,a)}e.exports=function(e){return function(){var r=this,n=arguments;return new Promise((function(a,o){var i=e.apply(r,n);function u(e){t(i,a,o,u,c,"next",e)}function c(e){t(i,a,o,u,c,"throw",e)}u(void 0)}))}}},4575:function(e){e.exports=function(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}},9100:function(e,t,r){var n=r(

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=890f9a2a-f5c2-415f-82e9-09a1f0694ac9&event=PageView&ts=1713979903026
Preview:	{}

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1388
Entropy (8bit):	4.181880697809376
Encrypted:	false
SSDEEP:	24:t4Q7zW9cohDIUVoOS4g21m/D1kQWZNvelnael2dG4aQZpmxcO:p7zAFhMMoygz/DO9gLliGspmKO
MD5:	D3BEAC69C062ABC96B9BD3DD4231F530
SHA1:	2F9406BD87B74B6ABD3472407221162C7B3F8157
SHA-256:	4A8B6268634CC24717516DC0086009E24EE6C1D7F15AF098092ADFE878CC5E61
SHA-512:	DAABAB34FE971599D7858D7B36230C3771D5524B69CD2409444037526A4758CA8B4CC619B14E15B709D1C5D869AAF7710797F62449D1D8ACDF13D52C859EFD29
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <defs>. <symbol id="ico" viewBox="0 0 20 14">. <path d="M19.9134 10.3193c0 .1735 0 .3469-.0866.5203 0 .1735 0 .2602-.0865.4336 0 .1735-.0866.3469-.1732.607-.0866.3469-.2597.6938-.4329.9539-.2597.3469-.5195.5203-.8658.7805-.2597.0867-.4329.1734-.6926.2601-.1732 0-.3464.0868-.4329.0868-.9524.0867-1.9048 0-2.8572 0H3.4632c-.17316 0-.34632 0-.51948-.0868-.17316 0-.25974 0-.4329-.0867-.17316 0-.4329-.0867-.60606-.1734-.4329-.1734-.77922-.3469-1.038959-.6937-.17316-.1735-.34632-.4336-.432901-.6938-.08658-.2601-.173162-.5203-.259742-.7804-.0865806-.1735-.0865792-.4336-.0865792-.6071C.0865788 10.5795 0 10.3193 0 9.97247v-.5203-.69374-.60702-2.34136-.69374-.34687-.34687-.5203c0-.17343-.00000132-.43358.0865788-.60702-.08658012-.26015 0-.43358 0-.69374.0865802-.26015.0865772-.43358.1731572-.60702.17316-.43358.346323-.86717.692644-1.214036.34632-.346868.69264-.520303 1.12554-.6937369C2.33766-8e-8 2.51082 0 2.77056 0H16.4502c.2598 0 .4329-8e-8.6927

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (630)
Category:	downloaded
Size (bytes):	10737
Entropy (8bit):	5.327237293204141
Encrypted:	false
SSDEEP:	96:DIxuZlZJFupWXpi0pGZBnXQd2q7s0ZiZmdUYe3egbwZqw8+mwoChzSBmqZTZ+Z33:kEXdMAFJdUTTE77tYHD4egFj2MFpKHc
MD5:	D86DCDBFED4C273C4742744941259902
SHA1:	98089A33D0CF2FA4B3E1BA9B7EEB9B8BA0AC82A7
SHA-256:	4B4969FA4EF3594324DA2C6D78CE8766FBBC2FD121FFF395AEDF997DB0A99A06
SHA-512:	F10E98F579D36CE13E24DBE3050C09D87F12F94578B80EA1891CA485DB48C83619D93A6B74D99639468A746CCE872AF8742CA4DBCECE7A36CFBF097B96B7EAAD
Malicious:	false
Reputation:	low
URL:	https://edge.xero.com/common/react/18.2.0/react.min.js
Preview:	/*. @license React. * react.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */.(function(){'use strict';(function(c,x){"object"===typeof exports&&"undefined"!==typeof module?x(exports):"function"===typeof define&&define.amd?define(["exports"],x):(c=c\|\|self,x(c.React={}))})(this,function(c){function x(a){if(null===a\|\|"object"!==typeof a)return null;a=V&&a[V]\|\|a["@@iterator"];return"function"===typeof a?a:null}function w(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Y(){}function K(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Z(a,b,.e){var m,d={},c=null,h=null;if(null!=b)for(m in void 0!==b.ref&&(h=b.ref),void 0!==b.key&&(c=""+b.key),b)aa.call(b,m)&&!ba.hasOwnProperty(m)&&(d[m]=b[m]);var l=arguments.length-2;if(1===l)d.children=e;else if(1<l){for(var f=Array(l),k=0;k<l;k++)f[k

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	51
Entropy (8bit):	4.3363671951593865
Encrypted:	false
SSDEEP:	3:YWMmqehTSZ4JtZlCn:YWMm9gZ4Jt6
MD5:	427030F29C7B0DB89D0DC8062344BE31
SHA1:	9399D02456632C4510B2F34F9F99CDB999121222
SHA-256:	388D44F383FD1E564BB7E4AB095EAE911F54634DFD70C675D06A5A3E8C623CD6
SHA-512:	15B5DAD109E4282E9462E570076BDAF640C2206BC4645CE2D65D4662495748F7BF003BC3661C2ED3DF88D32BECC46B80499745F4271429AC4C6D9A24010BE979
Malicious:	false
Reputation:	low
Preview:	{"site_domain":"arlid:534172","rate_limited":true}.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	94
Entropy (8bit):	4.19215926745789
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHjzlRQMBWHjV:YGKY6ZBAJ70MT6ZBA9RZBAB
MD5:	2D12C1129F6FF37622D03DB4A2A5949E
SHA1:	BC44653C4A06E671CE423600755FED86FAD8EC24
SHA-256:	078F3DD88E751C3C421B2007E1CB27BCB65A95DAF278BD25DE81BA7B2BF3C4E4
SHA-512:	420AFB8CEB53E68C593A1242DB304C4F551C23A3C181B4D4EEBD2B74E3EB9740C803C182FFB646AF57D2E778E9D802D8A44E5C0CB9FF11FA272D1E9C0F2B0D36
Malicious:	false
Reputation:	low
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (562)
Category:	downloaded
Size (bytes):	911
Entropy (8bit):	5.291784384011278
Encrypted:	false
SSDEEP:	12:XqJmW/m26qvfNV4NbxTHQuqJmrtr1WS2pBbJjzEvicfMpNrl/nX2p1LZYs2pB4Jm:si2N1V4NxwZG18L1jzXdD/GPWLgpY
MD5:	869C9257684AE0A9E6C69FE1CF5CF233
SHA1:	811016BA08433D9E76C9270C86425E92EF865EF9
SHA-256:	3637D4B23A085F29753F6F6B6FDF8DA352A30661BD23FDE41372DE5A6D61B7B5
SHA-512:	CD3D0FFB74CA7DA25434C988274CAC9434E0955FC37BF793A21DB09CFF60050C21BDCA11B2BBB6EBB5282E6144F0A4ED59DF98C155D6206984EBAAD632112F42
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/upb/?adv=9nlrx8p&ref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&upid=e7m2c49&upv=1.1.0&td1=https://www.xero.com/us/try-now/manage-invoices/
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( ["https://dpm.demdex.net/ibs:dpid=903&dpuuid=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Daam","https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9","https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&gdpr=0&gdpr_consent=&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon"] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.366634665454505
Encrypted:	false
SSDEEP:	3:CUdlG9h/:Xl2/
MD5:	BFF56CE49DD485D195FDFA0A02342568
SHA1:	74FB4071DEAB7D3AB083562067B735DF32C43397
SHA-256:	0E4B1E428A2198EF747010C094101C257B568A97CDCC0F31ED5E9868CC835B39
SHA-512:	15BC2B5B57144C4F71DC203E16B0F7235EC5E659532D5BAFFD3E91D57CEC61D36CA1B7EA28156AB11A3FA46982FE252A58410D7ADF6693C93EDCCA2B2FA1ABB8
Malicious:	false
Reputation:	low
URL:	https://sp.analytics.yahoo.com/sp.pl?a=10000&d=Wed%2C%2024%20Apr%202024%2017%3A31%3A41%20GMT&n=-2d&b=Pricing%20Plans%20%7C%20Xero%20US&.yp=10175613&f=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&enc=UTF-8&yv=1.15.1&tagmgr=gtm
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (350), with no line terminators
Category:	downloaded
Size (bytes):	350
Entropy (8bit):	5.467214262280508
Encrypted:	false
SSDEEP:	6:ZdYeLGmOYHKkCwv3Wqwy00pDX2WQLF3J+oqd6EpXjd6I:ZaiGmFMZqwyyN09FXjV
MD5:	77DDD4DA57F2FEBC999305F473A9F2B2
SHA1:	4FA36ACDE8F6DDCADBA448F2BED7E1DC906D4AA4
SHA-256:	AF7F624272CDD52A2CF5534DFC0388CE9FE0437C3342EEBFEA6AB2F0E2748097
SHA-512:	7057AF8F17D35CFD3B72A1E7C994FD4207BF7C927D37434A1D4EFD930A6530A20A72B7F0FF6D4E469A61822B72AB7B466A64983DE3A80520E6011F531B654F0F
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/_next/static/1712725399/_buildManifest.js
Preview:	self.__BUILD_MANIFEST={__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/_error":["static/chunks/pages/_error-593dae21ba8e39dc.js"],"/[[...slug]]":["static/chunks/696-07b0fb10ce74477d.js","static/chunks/pages/[[...slug]]-fb295630692f378b.js"],sortedPages:["/_app","/_error","/[[...slug]]"]},self.__BUILD_MANIFEST_CB&&self.__BUILD_MANIFEST_CB();

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	94
Entropy (8bit):	4.19215926745789
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHjzlRQMBWHjV:YGKY6ZBAJ70MT6ZBA9RZBAB
MD5:	2D12C1129F6FF37622D03DB4A2A5949E
SHA1:	BC44653C4A06E671CE423600755FED86FAD8EC24
SHA-256:	078F3DD88E751C3C421B2007E1CB27BCB65A95DAF278BD25DE81BA7B2BF3C4E4
SHA-512:	420AFB8CEB53E68C593A1242DB304C4F551C23A3C181B4D4EEBD2B74E3EB9740C803C182FFB646AF57D2E778E9D802D8A44E5C0CB9FF11FA272D1E9C0F2B0D36
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/saq_pxl?uid=IZi8ik6wpN0HnLyT9lcuoQ&is_js=true&landing_url=https%3A%2F%2Fwww.xero.com%2Fus%2F&t=Accounting%20Software%20%E2%80%93%20Do%20Beautiful%20Business%20%7C%20Xero%20US&tip=p_rXxQ1dPjzlOXY3w3SQbafe1Djs8Ve7tFPKv5vLxJU&host=https%3A%2F%2Fwww.xero.com&sa_conv_data_css_value=&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%252Br0VCscx3wVXJe%252F3g0&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1775x1420, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	54806
Entropy (8bit):	7.995739185609892
Encrypted:	true
SSDEEP:	1536:Tl7vUr3b0sb16jXp2Qnmvv1cmCFiHQWMLXHUHY/U/:CDh6N9mhCFiwVLXU/
MD5:	E03D4797E7B55230D440FD2C1CACC291
SHA1:	F7E70F4AB7DE334D52DE6C1C3122DE5FEE5D02A2
SHA-256:	F7D1F5B458660A3ABD6241A824D001F831E8ED41F4D4882B10039D67613E37A9
SHA-512:	52B2FF0B17F015982E97EA5429A31AC508722A47DDE82C99266F4C09A15D470B11F59958EE8514BD173B2C4EA2B54208FC60D063ED6D68D338F5A2C8AB3CB9A9
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/content/dam/xero/pilot-images/audience/real-estate/audience-real-estate-accounting-software-for-real-estate.1646877652767.jpg
Preview:	RIFF....WEBPVP8 ....p........>.b.Q'...".jc...gn.t..w(.7_....\|MW....x..._......x.....`_1...{...o.G.<.........}....Vtv;...\R.s..z.w..L.y...3...C...B.....}..k...N._.l..?W....x..g.@....m.N....A......< .U.......7...W.........7......zW.... ..=..8..........q.Q..Y...!.>..M;...sZ./..:.Y..<....&qs.$...X...........4....&..i.K.g].....V.m.`Q./M.....>.7...........y.y...bPf.........~Q~...v.#/..3e_.....A..5...x.v.H. d..........=.<....?..jB`:..3$..i....Z.H......2w...........gOH.J."A._./...j......d..S+#(g\g%..\....#f![...qvd.A.B.4x`.J...<......$...$lq..L@.i.bn..(....f.N.Y.....=-.L..K....U.O.\.FOy.-.(z.^uv.+".W....dx..gE...=.....Jf?.J..R.!%X...;.. ...eV.=.9....$o...<.........i...2.j\|..Q..o.IH.=.D}g.....Q.RCY...q-II..........:.'...;1..v..K......s.E..0..%H.h.<...Q.;+.Pb.MS.-+..M&f.e.........x..:FH./.D.5.!m...$s!..!.c.a....Yb.3<..V.[{7.W.8..L.@.U..ZG9..h.mw..Ai...+o.h56.u...s..\|.)Y....nw.....D....'w.......Mk}.....:.....'..P-....P.sBc\|..9.\|.-V....nA

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 6952
Category:	downloaded
Size (bytes):	2706
Entropy (8bit):	7.929789557224549
Encrypted:	false
SSDEEP:	48:XufB4N7hNsEcHMG/2EHl7bpuO2PxunnO9qwLDqXr6UZMZff8xxspgChZTSfeQxz:eqNdCEKM02EFh2pcO9xLuwmxxsyCmPJ
MD5:	12F1521177F3CC3FC67B6C4FFDB32663
SHA1:	3FD533C50051DEC12CA3D58F3CBE6DBE617BA86A
SHA-256:	FFB90F4EB926132238EB4A03FFD885F054FB5EDBFC034C05193400F08C2C0A86
SHA-512:	325ABF7E70BC1131BC1344D23113E7BFBA4EBAB3BCC08D84EAD6B56C5C58E5B1A19871ACC0095EF36ECCBE41105012DFB48A46F2CD1188C69DAFCB1EF8776FB2
Malicious:	false
Reputation:	low
URL:	https://widget.intercom.io/widget/
Preview:	...........Y.s.8..+.wC.0..M...e..m.m.t..&..a.Pk,.,B....G..6....v..~.~.....mM.I..H...J......'}..3..y.!.Re.c&.2d.9M}{..%.....&4.1....J3........b2.x.6I.......[V1.Q..W.&.1..R).V;.%s'.1.uv..D..A..rYY.H.w.i..HA}......6.I.h..."b{.K.{..j.%[......~.....}sBO..z.:z...2....h5S.nd...'.oN.i..9....p.y.4....-...U....\...W..Q..g.9.G2er.{#...D....ha.....qsV.82O;..[9<...^...@....L,Qf...3x,h..fsV02,8..$..e.e....).Ce..i...L$l.S...4.$.Y.c.~.3)Wk.2I.9O......u9.tko.)..Z2...`tb..3&mRg....s...UK.H...@...5..OxH..2{....e.LzDD[..xb-..b..Qm..U..o..b..c._...p.....2.X..C.v..$.p..q...s7.,.iWJ..M.:.w\....^.6..8!y1E9hZ.[/.....4q.4.....l@'T.n.....n-A.c.9z.TiK.5_h......V3/F....nW)Y-...../~.......S.s.V.ET...p+..w3.(..\|.JX.Rhq.y`...j..c....".~A.b...w?.,..z.....].P.8...S..N..m.H.=. ....j.u...z..K.M-w6.k..c...}..3..t.......dF.....`....k.........z....BgU....jv).&..4..Z.VSbC`..i<...){..J.k..kd..;.....Z.....T...y..0.1.n.H...<S[....T...."..<="..L.B..bW1.o.M

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1596x791, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	9944
Entropy (8bit):	7.893756984394216
Encrypted:	false
SSDEEP:	192:9Jgl0KQ7SKhVb8Omn9LlH/C2cQ3DefsJ7Mcm1FxokEonsX1h:Xgl0KzKw9LJsQ3Dez51FlERlh
MD5:	A372558A45C1BBC85EC8FE5F3A192451
SHA1:	F2BD24BF5E536F310C7849E9983303B730AD071D
SHA-256:	C0B67E8D80F9492EAE10E6495BEE0A32CF9086CD284BFA75A5FA4654A752C8F7
SHA-512:	9E2AEFAD57526730019AD76FA0ACE3447683E78FA46999FE431FDAA2BB5E73027C087A193AE2A84A1762E38AB1DABC62233A74DEB972C352C941A3133D304A70
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/content/dam/xero/pilot-images/features/payroll/us-payroll-xero-gusto-partnership.1646877474566.jpg
Preview:	RIFF.&..WEBPVP8 .&..p....*<...>.v.U...$...a0..gn.K..9\|.jk........?.....~..?...........0.<........~]...Y...m.'.+........I?h......\|..x.......D.\..^.'....O31{ .fb.A<...y.....3....f/d...^.'....O31{ .fb.A<...y.....3....f/d...^.'....O31{ .fb.A<...y.....3....f/d...^.'....O31{ .fb.A<...y.....3....f/d...^.'....O31{ .fb.A<...y.....3....f/d...^.'....O31{ .fb.A<...y.....3....f/d...^.'....O31{ .fb.A<...y.....3....f/d...^.'....O31{ .fb.A<...y.....3....f/d...^.'....O31{ .fb.A<...y.....3....f/d...^.'....O31{ .fb.A<...y.....3....f/d...^.'....O31{ .fb.A<...y.....3....f/d...^.'....O31{ .fb.A<...y.....3....f/d...^.'....O31{ .fb.A<...y.....3....f/d...^.'....O31{ .fb.A<...y.....3....f/d...^.'....O31{ .fb.A<...y.....3....f/d...^.'....O31{ .fb.A<...y.....3....f/d......!C....5.\|..?..G.....3....f/d...^.'....O31{ .fb.A<...y}.aO.[...?.5..:..^e...c.A{ .fb.A<...y.....3....f/d...^.'....Q.}C....a#......g#s.<...y.....3....f/a...nK.....^.'....O31{ ..#.lE...z.WV.k.}.m.E.As.A{ .fb.A<....C....6..

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1464x1464, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	16222
Entropy (8bit):	7.974631286996976
Encrypted:	false
SSDEEP:	384:IQz3b608+Hj5uOMcchswnFQsOhMq5JD3+EJe5aczCAdw9YPHKa:h3Frne4qq33+EgPCb9YPqa
MD5:	112E815D75DB59CD8B174A8C76E2ADAA
SHA1:	D6B74E4FAC35DF980E24CC85798D100AA7674E5C
SHA-256:	10F8788F35F6A43BB181CF289ADE9A5FFD68164D1F1E1D7F233B0558A8E420AE
SHA-512:	4C9CB61563B159895209CCC3093176CAC41C9C5DAC2FCBF7803962301836EEEA3C431FD564CDFA61AD50A2ECD6CC0CF8CF6F9B72BF46C7AD2D6B2CC49A50073E
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/content/dam/xero/pilot-images/features/bank-reconciliation/BankRec_hero.1646877462797.jpg
Preview:	RIFFV?..WEBPVP8 J?...........>.t.U..?. .8s...gn...}o._..6....?.?.....?=....?.L3._. ......}>............1._.....R.f...}......./d.._..f..{G.i...{.-.I.......6RZ.?.[......a.l_b..WY...M]f^/M5u.x.4..e....e.M]f^/M5v.T../...({S.&.J.....f.....:....../i....._2.\|.32....1>.....4......R...\........I@L........^....C4...WY..2.j.X...\.3/jj..v.{S..^@f.S-..Y...M]fU./..8..{...........i.,......^."e.V..c1..`...]f^/M5u.x..<>y[ .<.Q.\|..5u.U.)......C.2.zi....B./...0...^@i.[i.`p&a...{SWY.....e..N....5u.x.4..f..^/U-....n..2../........<.Z.f.......ju\|......k.A.Y.........;.....5..1..(...........20....J.2..;.....W~...:.w.&^.../......=.../...F...\|.../j.2.._.u%.&^...e...WY....Qzi......}.s...U..x.4.....N...<V...M]f^2i4..]2.k.Y...N....]2.j.0U.+.iZ..i....e.M[U...5I.9...oP........q.?....,.3....O2.8.c....C.......2...o..=..<....I.;.gO.._..y..h;.F5...3...j..x....fe.N?=........O2.zi....m.......%.[.ht...=c.4../......+a.d.\...../Q....-...2.>'.....v...W].k....=HcM]kX.

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13094)
Category:	downloaded
Size (bytes):	13289
Entropy (8bit):	5.2902385071652605
Encrypted:	false
SSDEEP:	192:qYC8Ej/DX7Vj6zXapp2nDUyyguq5f4sPe6FU2mFnRyPsRkoXrD577tlLCPEV0KhC:qY27wrapp7yyg7W92Jgh7tFoEV/5lapB
MD5:	3D13EF41AA477D7E1EC276886B9E0EC5
SHA1:	D71D858F4341CFF90E67125A6B6AA4DB10950EA5
SHA-256:	B68EFCCAE861D874C91F6607E469061F716801E4B3849E0E2CDE0DC1B60EE9A6
SHA-512:	ECBD1C4304D8B3A61852A4A5DF52C7F455AFF5A5B5DB2C4F97A67F5BE691F079C937BF162005A36DDBC0F0E9F6DB7483F9640DF8AD390CD6426755A8FB33D79C
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/aat/amzn.js
Preview:	/* Use of this pixel is subject to the Amazon ad specs and policies at http://www.amazon.com/b/?&node=7253015011. Version number: 6, Changeset: Adding in phone number support for setUserData */.this.amzn=this.amzn\|\|{},this.amzn.js=function(){"use strict";var e,t,n,r,o,s,a={nameLength:256,valueLength:1e3,eventNameLengthWarning:"Event name is longer than 256 characters.",parameterNameLengthWarning:"Length of parameter name exceeds 256 characters.",parameterValueLengthWarning:"Length of parameter value exceeds 1000 characters.",parameterKeyLengthWarning:"Length of parameter key exceeds 256 characters.",AIP_TOKEN_COOKIE_NAME:"aatToken",AIP_TOKEN_URL_QUERY_PARAM_NAME:"amznToken",NO_CONSENT_COOKIE_NAME:"AMZN-NoCookieConsent"};function i(){if(r)return n;r=1;const o=a,{checkCookieExists:s,getCookieValue:i}=t?e:(t=1,e={checkCookieExists:function(e){return document.cookie.split(";").some((t=>t.trim().startsWith(e)))},getCookieValue:function(e){return document.cookie.split(";").find((t=>t.trim().

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979910835&i=gtm&dwt=6&ive=webkitHidden
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 528473
Category:	downloaded
Size (bytes):	145103
Entropy (8bit):	7.998070638643282
Encrypted:	true
SSDEEP:	3072:H5YPbQeClUbwXeuFAEZVnQ09Gt7PGKFASe/goOzlGiC6BcUD/GCtc:HYQTUbueuFg0MNOgAy5l3COcUyL
MD5:	00BB5011FC0026CB200FA77D8CC249DB
SHA1:	BA598254DDFA322150548530E7E4AEBED2B0BE80
SHA-256:	7538B2A7DCA5F55ECE2E079BED4D5BA3FD0118D71FA062985C603DEA0D12D34D
SHA-512:	6B69463F432D9824C22369C97335550707363FD7DC5548730F2C4027EF7E972BE3335AB1A9466EC756CE5A1BC3743D8247876A97A0C7C5BEE2B547B02EA6FEF9
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/frame-modern.7065de4d.js
Preview:	............{.H. .W(^?]`..1)...V.l%+..^.$.",....4-..9...B...{w...7.2.P....0....S;(q...y.a~.q.^.WZ..S/x...>......^n.k.u.7=?r.N.......z....1.......F.o......F......L..6Pr.nR.Q...G..+.Fd....30V..7<.M...g.. ...\|`{0.............?....,.;.0.g....}...]...u./n:./n...,Z.~./.....<l....Q>..~.....`....w...3n.c?.....~..u.j...f....=..r.K..Q.b.J....{...6.MV.77..O=.o7..Y.R...B....Y.......g.....v..aK.....Fe.mm..A?.b...l.ZC.....~0RO.j...jV....v....j.=.n<.j..h.^.s..\j.[..^<.z..Ua.[..<.......ld`..\..l7.X=~..#...-. ^.j.^o.M.lz0..P..`..X.a...vms......jlW`5.[..I....J.m.j.s..7U..........\..8...{.....b....\|....X.zS...-mU.........T.......Q.....j.mV.....l.X.!....c...`.y?..j...U.....{..y...,....g.\|.l.g.b..hm..$..NS.)..cn4..v.)z..UiT.[[..-.7...^...mn.=.]...l.V.....n.....).0.&]4..#.M.`..vc..`...~4........m....o28.b%'..j...5..OcP...W.......p..<Y.-8...fM=.....&,q.p..,.NaX......\!:..!..#&%.N$l.;.I@..iG__w2..]...uz............X..j.4M...v.{.$M.Y...@.....a.'!/.Q...

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, progressive, precision 8, 1596x791, components 3
Category:	dropped
Size (bytes):	18354
Entropy (8bit):	7.126422018490339
Encrypted:	false
SSDEEP:	384:CViyWwCxup85cJhQrIqHtaMuCIs770Zmbt:RyEIJhMIStvuCI00Ap
MD5:	5AAF64C4A31E69E2273848D7CDA7C8B1
SHA1:	8649DE9054A5B04D9C7362E86BA6DED1B18A8E27
SHA-256:	4EBF788B0B05D19DEF53FC041F64B89EC9B03C17584E40582878C05FE9CCB179
SHA-512:	D1FA858BA115A739E7F44F5A3D7FA3BFE56610E0826760A0EA9FE5235D5CC8B8859E162CF7B050D57E908E96BD682D199D11DE7E54DF890B58BEAB2B778023E5
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................,..."..."...,.B.).0.).).0.).B.;.G.:.6.:.G.;.i.S.I.I.S.i.z.f.a.f.z...................F............................................,..."..."...,.B.).0.).).0.).B.;.G.:.6.:.G.;.i.S.I.I.S.i.z.f.a.f.z...................F........<.."..........3......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	37832
Entropy (8bit):	7.991621084358336
Encrypted:	true
SSDEEP:	768:tx6hqBcFztw6PDwCPXdNYWfq0UTArCm8YkguX:ahqBIm6HPtbnU0edTgu
MD5:	E98022D15DA8E1616EEE200FBA6917CF
SHA1:	419D45ABA6E2BB5B7DAFB5F617501FA66FF68F55
SHA-256:	31A4F2B4A3A2B5DFB6F06BD9A93BB7E6DC1DAEFBC0B44D7E0FBB0056AF8EB194
SHA-512:	B71FBE026FCE9F9FDA9392D9C0982FC40993F556A70BFE2045027B18451CA2A4E16504BF0EEB869A31491C8850E04C940DBB45D20A5BCF2F2DBEBFB7894A3E1A
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/content/dam/xero/pilot-images/experimentation/2024-q4-awards-badges-for-headers/US_%20Trustpilot_G2.1710383055038.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@...................0.....................8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe.......`...`....pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe.......`...`....pixi............ipma..........................iref........auxl..........mdat.......~W.T2...`.@P...}.2.}.~@......;..Tb...Hi9W.vb..v,R...p.4..].4.e.?^..T.>.."...G..1.2..5.\.1.vz^G.'....M.-...C_.n...G.y.]B@....3Cy..S.'.n...hqZ......<KO6"....Q.$i.A...5.!A...o.c.@F.c..,........d.JX.jo...c7.V1.o..$...q..Wpl....).H.....S.fd..e+w..M.."............m....K.S..h...r..n.'?.F.&.<[...b..Xv..... &.."._l..B.....4..$..^.0k=.=' 1..'...z...j.^./...x+..$F..t.d.X.%.2f%...!qi....'`s).FT.+__.(.:"!.eo.X}.."O..$_.W..1....!..eCK.f.......I1..N9../W..Q.. U... .G..9..M.K.......CJ.....PD...,.?hw..k...,..2.....>...n.\...#.

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	368
Entropy (8bit):	7.12063513642207
Encrypted:	false
SSDEEP:	6:LZ4lNvs+K5hjnZi6PIHSs1DLli20E8hmtlEsIOzOb0kjKNLuk7UHfrFWZx14RRVh:iLZ6hjw6PoSsRnIOsKNv7AFsx19Aw76
MD5:	032A0E2CAC13DFCA4A5AB55BDA676D7D
SHA1:	BAA4EAE01777B7EF91ECBE4DF00CE211976E8FCB
SHA-256:	7BCE0A5C00B7A985D2D4DDDE3578D9D03F521DE9176D63DD6C5338428E7F7D8D
SHA-512:	069CD41E52FEA3FD380C83CCC2AE3F3873D833D0EB417886C2067FCC70BF8EB87DDB44622293A2D37DBD4875E5FFD016F7E489078F74425683ACC5C38B58C6DE
Malicious:	false
Reputation:	low
URL:	https://edge.xero.com/business/mybills/production/favicon.png
Preview:	RIFFh...WEBPVP8X..............ALPHb....O.4.$5z`O.f.D>".l>j=...$[....>`......P@a.J......!..j.a...y.......U =$9...x...\|........?....VP8 ....p...........%..t........x...X..g..37.G.7...1...1........z"je ..)'...7.f0].:y.9...i..~.\Vk..t.l..?U..1.."........}x.x.k./.0.........>..RV....9q".B..4-.Ab.......H.ICDo...i...q........)...t...F.p.....+...so.H..F..3....

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	11
Entropy (8bit):	3.2776134368191165
Encrypted:	false
SSDEEP:	3:LUQ9:LUA
MD5:	825644F747BAAB2C00E420DBBC39E4B3
SHA1:	10588307553E766AB3C7D328D948DC6754893CEF
SHA-256:	7C41B898C5DA0CFA4AA049B65EF50248BCE9A72D24BEF4C723786431921B75AA
SHA-512:	BFE6E8DF36C78CBFD17BA9270C86860EE9B051B82594FB8F34A0ADF6A14E1596D2A9DCDC7EB6857101E1502AFF6FF515A36E8BA6C80DA327BC11831624A5DAEA
Malicious:	false
Reputation:	low
Preview:	Bad Request

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7044), with no line terminators
Category:	downloaded
Size (bytes):	7044
Entropy (8bit):	5.290907214974603
Encrypted:	false
SSDEEP:	192:dOmy7u1rDgxPv0Dem1rDmZWHKOHrDD8Y4MrGKV5kej3o:dhhgYF1rDwWhHrDD8p1tG3o
MD5:	07E3C83179C7DA2E2F464A72B084AACF
SHA1:	AA7A18AA7928F3345697B21E4ED409F8A9E96648
SHA-256:	FCB70CD5B8090D9144EEEF2F1665608EE4FA67DAB1FD167F49AF074A42B9101E
SHA-512:	F44A232C19C2C933BE413248FC998E4E82A63EA9D581FE162DD517B95D0AF515AE2485CA651F0ACC86FBED015D99BDCBEF036C3B4A795E53C83F80C346798B0E
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/ajax-aggregate.998ef92b-1.236.0.min.js
Preview:	"use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[898],{1199:(t,e,s)=>{s.d(e,{R:()=>a,z:()=>i});var n=[];function i(t){if(0===n.length)return!0;if(void 0===t.hostname)return!1;for(var e=0;e<n.length;e++){var s=n[e];if("*"===s.hostname)return!1;if(r(s.hostname,t.hostname)&&o(s.pathname,t.pathname))return!1}return!0}function a(t){if(n=[],t&&t.length)for(var e=0;e<t.length;e++){var s=t[e];0===s.indexOf("http://")?s=s.substring(7):0===s.indexOf("https://")&&(s=s.substring(8));var i=s.indexOf("/");i>0?n.push({hostname:s.substring(0,i),pathname:s.substring(i)}):n.push({hostname:s,pathname:""})}}function r(t,e){return!(t.length>e.length)&&e.indexOf(t)===e.length-t.length}function o(t,e){return 0===t.indexOf("/")&&(t=t.substring(1)),0===e.indexOf("/")&&(e=e.substring(1)),""===t\|\|t===e}},2573:(t,e,s)=>{s.d(e,{o:()=>d});var n=s(4247),i=s(1117),a=s(8673),r=s(8310),o=s(5763),h=s(3860);class d extends i.w{constructor(t,e,s){super(s),this.endpoint=t,this.opts=e\|\|{},this.start

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	51
Entropy (8bit):	4.3363671951593865
Encrypted:	false
SSDEEP:	3:YWMmqehTSZ4JtZlCn:YWMm9gZ4Jt6
MD5:	427030F29C7B0DB89D0DC8062344BE31
SHA1:	9399D02456632C4510B2F34F9F99CDB999121222
SHA-256:	388D44F383FD1E564BB7E4AB095EAE911F54634DFD70C675D06A5A3E8C623CD6
SHA-512:	15B5DAD109E4282E9462E570076BDAF640C2206BC4645CE2D65D4662495748F7BF003BC3661C2ED3DF88D32BECC46B80499745F4271429AC4C6D9A24010BE979
Malicious:	false
Reputation:	low
URL:	"https://c.go-mpulse.net/api/config.json?key=DXWKX-5MGMF-RCUC3-85Q7G-8PZ8A&d=www.xero.com&t=5713266&v=1.720.0&sl=0&si=f3640d25-df5e-4418-a8ec-acc57f947924-scgjbs&plugins=AK,ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,History,Angular,Backbone,Ember,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,Akamai,Early,EventTiming,LOGN&acao=&ak.ai=534172"
Preview:	{"site_domain":"arlid:534172","rate_limited":true}.

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&tag=DwellTime&ts=1713979893852&i=gtm&dwt=9510&ive=blur
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	138
Entropy (8bit):	5.213278916391078
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHWbPun2GnNXC0MT6QMBWHW03UQM9o3JJjWRQMBWHjV:YGKY6ZBAWbm2GNS0MT6ZBAW8UZK3njW4
MD5:	7EBA7EB81FEE40CABB8596B910446C78
SHA1:	A2196C485B9F2D7BC6C6F3FD5F36DDFABB0C3302
SHA-256:	3580443E67004F0B66303521E9AF62BDF658E4DAEEB78207B4955D2A489E64EA
SHA-512:	40D4AC67E8B225396B3EA2392F2AF751F402F5BE0C706A094C990E8F9D0E4448F7AD7B5AB837E4964E22D54D38AEE3DD2B90563E6819FADFE560D2A9E7361708
Malicious:	false
Reputation:	low
Preview:	{"conversion_tracker_uids":["goPjpLgXy9RB9rYkxDAD0O"],"retargeting_tracker_uids":["qh1rAf185NXiuYhSCMROEK"],"lookalike_tracker_uids":null}

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979909897&i=gtm&dwt=2995&ive=blur
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	116
Entropy (8bit):	4.866602445362615
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHW03UQM9o3JJjWRQMBWHjV:YGKY6ZBAJ70MT6ZBAW8UZK3njWRZBAB
MD5:	9DFAC332BA53300DD79D5A6F96476423
SHA1:	524143EEA918B40E128EC00D93275251BB0AB618
SHA-256:	58DE1C15604E1D625AD854D74C6BC52D7EEDC99BD77D10A968771F88C9F8301C
SHA-512:	7C34DFA01CB406BC78BC955D41F91620F324BB27FE8612BCE0E66EDC19CD0B56B8C3F3180599990ACED864D4133BF7436530E11301B396E6CCA3240D679726DF
Malicious:	false
Reputation:	low
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":["qh1rAf185NXiuYhSCMROEK"],"lookalike_tracker_uids":null}

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 209926
Category:	downloaded
Size (bytes):	53858
Entropy (8bit):	7.995253199071009
Encrypted:	true
SSDEEP:	1536:etJaNsVkKBmyWw8NkTy65gKR0dLmAOpwycIJHBo:eviEJBujkdZELmAIho
MD5:	BAECEFD335B4E7FCE271D6E3489A58A4
SHA1:	3E5D1AEAE080AC213A8ACC44475EB70908B8F0C1
SHA-256:	3E5216C5C1ECD3EF1DF3F84A9D6E32B7FC14C80B577B0BE14D426462A9B3C798
SHA-512:	18EA0B72094F41A590C749800F8E39AF221CF69AE68A1CAECE69A925D3D0B302825A99233E3053FB1A3D31E846A6FBA932359DF5A45DB049ACF584CCEEAD6080
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/app~tooltips-modern.99a3541c.js
Preview:	...........b.F.(.+.6...&.7).V...3~m...DS...4.Jb(..o._v.............@..]]].2V..Eq.Nc.~....{7w#.O....b..o\?..4X\}....<<..`Z.U4...?.....f..v..:g1.....r.1..........0X-.c..d..yzk..p..O..n.d.<v.e2......lx....."x..O...y.....'..4.6..,...f.Pw...vx...[.E..n.4..y.o]..<.....Qky_...uj..F.P.V...... 4Lf@..4:...FK.^.\.s}.x...ti;.._...m{y.:]..4..h.....(.d#t.....\|~:....Uk.P;..q...k.4...2.....Q.=;vo...h.Q..f.x....d.,......4'?M....uk0.....E...gF....;.....4.7.s.s6.Y...iC....+\|..`qX....+\|......]r.Oc.......-..~\|,..[..,........M.yp......;.\|k...5.I4.Yd.....#..hO<.;`.@B.@.X.X.1..q..`.l.....@.......1..&..[9....LW.f....P..4...k$.;..S...SQ.n...@.WbL.5H.k.....W......1@.)l.o..}o.S.......+/>.._.\|.......M8.(.g..C..,q...q.\|......h.o.Af.&s.+$Z.e.H./....ad......`Q..x4..6r............p...j@.S.h.....w'.....[C\.E.Ow.\....;..M7^.Z.0.S.]5..}.....p.j.u.,.p....p5...nY.77.j..3....s.w<~..1^...%..m.....g......j/.`.....u....nC......)...9.p...M.e.m......g.5.9..3.@..u

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	24838
Entropy (8bit):	3.496915319918756
Encrypted:	false
SSDEEP:	192:xGyAUEQmLhHD+qI4nipKs3hc9ijtukd9R08c6weS:xNAUhAhjB7rsRc8jtuk7OOweS
MD5:	C169AEE3C6F710672AE66CDB0AE20879
SHA1:	CAA44FB392A6427C7E5C22437137CB771E717C53
SHA-256:	B5107D80D618E1824D266984E1673710D3A6D766E8B3997C52E1E271FB57FA49
SHA-512:	EAE8E4EF77CF5DDCA93303DAD6B1E23E6256426EE82D0E2E20F8869D4EBCDD88E3EDF3DA9755485C3B3857F286B32CCA5F60D609FC4ED5099A82714FB51CDE8D
Malicious:	false
Reputation:	low
URL:	https://edge.xero.com/business/mybills/production/favicon.ico
Preview:	......@@.... .(B..F... .... .....nB........ ......S........ .h....\..(...@......... ..........................................................................................................................+..Y......................................].......................................................................................................................................................................................@..............................................................F................................................................................................................................................................v.............................................................................#...................................................................................................................................................................................

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	99
Entropy (8bit):	4.751161476096961
Encrypted:	false
SSDEEP:	3:k0WYL12AoNojJW6QfpX/W6Qen:UYR2Af86EpXO6h
MD5:	FE21DC72429730B3443D8CB9130A2733
SHA1:	7AEB9BD09BE0DDF00622BCEC87B5CD01108576BD
SHA-256:	11BC5C5457D219BD5836C09ACF8B0B335FF4B6BE3CB66D60E9478B09967C5029
SHA-512:	0712B40B3B0726C14B2F8C6E808E70AB521A5029C985ABCF39B2A438C467127B653D6272748F1484AC1722B5FD55BBD931E1BFD6AD69C285C99E2CC98234DD19
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/_next/static/1712725399/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set(["\u002F[[...slug]]"]);self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB()

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9401320;type=pagev0;cat=globa000;ord=1;num=265233616833;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Fpricing-plans%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=1662344157;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F?
Preview:	<html></html>

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3176), with no line terminators
Category:	downloaded
Size (bytes):	3176
Entropy (8bit):	5.210036201402933
Encrypted:	false
SSDEEP:	48:rT6fMgxOWiJDWJXLElTx4HZkTTwsTV0dO+dV445/gpfanoDhcEOdC2VM7Nbh8:SfMAbFtEwmY4V0sSV43wLdCZn8
MD5:	08F98E196C10659459A3E308C0F63E57
SHA1:	6808E34F1EF5038CEA1DE2788FC27067B30331CF
SHA-256:	0EDBB8C616E08C1E4D354255C92D032374B0192E294DFC005F268DAC8633F3CC
SHA-512:	87D8308708905C849CBDBA8304D20C5F9F26830481928A6867718DEA210C4D21180106AA24B3A7A14B2BEEF1024B76292ED42614FADBC781DA0F334D18E892DE
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/_next/static/chunks/webpack-c52075616a93dd66.js
Preview:	!function(){"use strict";var e={},n={};function t(r){var o=n[r];if(void 0!==o)return o.exports;var i=n[r]={id:r,loaded:!1,exports:{}},u=!0;try{e[r].call(i.exports,i,i.exports,t),u=!1}finally{u&&delete n[r]}return i.loaded=!0,i.exports}t.m=e,function(){var e=[];t.O=function(n,r,o,i){if(!r){var u=1/0;for(l=0;l<e.length;l++){r=e[l][0],o=e[l][1],i=e[l][2];for(var a=!0,f=0;f<r.length;f++)(!1&i\|\|u>=i)&&Object.keys(t.O).every((function(e){return t.O[e](r[f])}))?r.splice(f--,1):(a=!1,i<u&&(u=i));if(a){e.splice(l--,1);var c=o();void 0!==c&&(n=c)}}return n}i=i\|\|0;for(var l=e.length;l>0&&e[l-1][2]>i;l--)e[l]=e[l-1];e[l]=[r,o,i]}}(),t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,{a:n}),n},t.d=function(e,n){for(var r in n)t.o(n,r)&&!t.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:n[r]})},t.f={},t.e=function(e){return Promise.all(Object.keys(t.f).reduce((function(n,r){return t.f[r](e,n),n}),[]))},t.u=function(e){return"static/chunks/"+e+".

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1464 x 1026, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	141261
Entropy (8bit):	7.972626183612111
Encrypted:	false
SSDEEP:	3072:oabFuHG0leXuqQFivS3X4xsZtUhW5lYbYGbEETqdmE8TnyXVWmYtNd:TFqeXuqQF/3XCsWW5lZQ9ZoEmYtz
MD5:	2B291CEB90508D90A6E9E1AA1A3D3746
SHA1:	23059759C33788CFD60AAFED943BEA9D258DC974
SHA-256:	1A7EB486177B4F20E66D050C7DD13C365BB24150AEBC962359C3607CDE38D6C0
SHA-512:	3FE0F2377A35DB8AB7D701B02E9B7A9700709CC7F4A011AA2625911123E91117E043DAB1CD71CED7E32812A8D83D9487B6551EA1C8B0EF546B4320EDEDC2F9CC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............Y.n.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dam="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:cq="http://www.day.com/jcr/cq/1.0". xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/". dam:Physicalheightininches="-1.0". dam:Physicalwidthininches="-1.0". dam:Fileformat="PNG". dam:Progressive="no". dam:extracted="2020-03-16T17:02:52.393+13:00". dam:Bitsperpixel="8". dam:MIMEtype="image/png". dam:Physicalwidthindpi="-1". dam:Physicalheightindpi="-1". dam:Numberofimages="1". dam:Numberoftextualcomments="0". dam:sha1="b42f48af06318f46f2ec89287c154a28fbfdac15". dam:size="139734".

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	94
Entropy (8bit):	4.19215926745789
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHjzlRQMBWHjV:YGKY6ZBAJ70MT6ZBA9RZBAB
MD5:	2D12C1129F6FF37622D03DB4A2A5949E
SHA1:	BC44653C4A06E671CE423600755FED86FAD8EC24
SHA-256:	078F3DD88E751C3C421B2007E1CB27BCB65A95DAF278BD25DE81BA7B2BF3C4E4
SHA-512:	420AFB8CEB53E68C593A1242DB304C4F551C23A3C181B4D4EEBD2B74E3EB9740C803C182FFB646AF57D2E778E9D802D8A44E5C0CB9FF11FA272D1E9C0F2B0D36
Malicious:	false
Reputation:	low
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37657, version 0.0
Category:	downloaded
Size (bytes):	37657
Entropy (8bit):	7.994615531012636
Encrypted:	true
SSDEEP:	768:yLwTSh39Lagf6HcjzFXP/SjGgFcj+bHnS3HWSH4fWOJ0JNYU7:wJtOMS6gFu4HazG0H7
MD5:	92DD62B0E9F8DCDF994CD07CBE7B543D
SHA1:	7A7CB6DD9200F42AC3B199D23AA6F023E2392DC8
SHA-256:	A4EDD0473C8A5002953F7FA4C7AC3FCE78DFA8F94432FD389194D8DB3211C49C
SHA-512:	3965E8F981E204262FE8A77F60ECCF8034C6257E7F9F8D63263B48CC6D3E45A52A24A8C6F4EEF869C63602E9982B0D1F6F0BCB046799EAA62198DB7B060A0F02
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/fonts/national2-web-bold.woff2
Preview:	wOF2...................F...........m..3...............4.`..`..Z.R..a.....h..e.6.$........ ../......[.pq....%.-.fU..b..z.......L......(7..t.Jhw=j......Td.&...cCP.z.M,".d...R.-V[...kU# .2.fZ...E.d%.8..A%.N....[.n..W.....n....jT8@8P...Ak..6..YY...:...v.dU.9<..y...UWg.f.W.2.\|.c.6.......BGL.v.==..K.E.....D..?..D..:.K..]..A"-,.NE`n.....d..h.v..{.+.....}d+..LIeb...45.u`"...$.#W.x_......~..o1.....$.d......]r.%A....#M.T...G_.b..C.TD..TT.......~...."E.0.(...\....Q:'...`.:s..D.H".ED..Z.I+Ql....M.=W.]....c..=z..i.+Y.%[...u+{{.{..Z.....><....t.@2.4....8Pu..2R.={.4c.vOy.t...v_-.M..L...I&...v.......r)..I9 .....[:=...).hZ....A.;........K1kS....k.....DJ.h.00.7Z..r.2.S.....F....fX.\|....>gC.].\._]...Vn+.]9C.\|.N......Q.>l.~bVA!.C-B.4. q....hUH\...1...\|..@Qk6....l..3(B.F......2..4........p..5@..S.....5.p....ge.h....}9.*..I~I.........%K;...B.$]..%.S...\KW..BN8.zS@FN...~...'8Jr..j:.p....m.....Q........9.b.&0.....w+.>"..rwQ/.&E.?D....{vp.'..'.6.4i......,......e..S..!7`6y.

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	12125
Entropy (8bit):	5.126907683385513
Encrypted:	false
SSDEEP:	192:QtFoO/4HZkxtBfHrBXrYDx0yGpUHH1SczAEjEEFl1/rQqH6Mq7oL1+Q0UWu:QtFoQ4HZkxbf97Yd01u1SczAgEErWAHL
MD5:	2A7DA1D68B6C3557C6B9B9FDF6FBA717
SHA1:	3045D63901B122286AFAACC836AAEAAE59AEAD5F
SHA-256:	44A6EB0F92145247371F723B3622F0D933743E2459085CA327C7C67BB0B39EF4
SHA-512:	89F5B5B8D2392A43B722D32B55099219546C14B5BEFA53708C3E322F0327C6035C9B11897C07533A14A3E73136A45044DC490D83CDB397215060ED46B4490327
Malicious:	false
Reputation:	low
Preview:	{"businessUnit":{"stars":4.0,"trustScore":4.2,"displayName":"Xero","numberOfReviews":{"total":6543,"oneStar":910,"twoStars":277,"threeStars":395,"fourStars":634,"fiveStars":4327},"websiteUrl":"https://www.xero.com/"},"businessEntity":{"stars":4.0,"trustScore":4.2,"displayName":"Xero","numberOfReviews":{"total":6543,"oneStar":910,"twoStars":277,"threeStars":395,"fourStars":634,"fiveStars":4327},"websiteUrl":"https://www.xero.com/"},"reviews":[{"stars":5,"createdAt":"2023-04-13T14:50:29Z","title":"Xero is flawless.","text":"Xero is a fantastic tool that seems to have its own brain, it saves you time (and because of that most likely money).\n\nI moved from Kashflow after 6 years and the differences are amazing, with the prices being the same. It's made me want to learn more about accounting and take some of the responsibility away from my own accountant to learn more about it and do it more myself, thus learning more about my business.","reviewUrl":"https://nz.trustpilot.com/reviews/6437f

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	421
Entropy (8bit):	4.7435946287851225
Encrypted:	false
SSDEEP:	12:t4Pn4WY/ljmzTWkxR35cq9Tixc3vZNDe4A5:t4QLj8TWkx3vLXO
MD5:	2FA848925DD276C5D799963EB1A07C7D
SHA1:	D3BD8D0E4AE20653027B528AFDBF35E39268FF6B
SHA-256:	9EDAE985D631416A45E7247A93FB33B2D8362E7004EF053F2973F2826BEA0954
SHA-512:	00C8C7ED20F82C2A6A3610C40B062039FCAF9599ADEEA6DD48DD154807B5435441247BB9AC68C556EB18ABE2FD292632E5C64E629B37DE5FC46EF27387C87AF6
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/content/dam/xero/pilot-images/admin/icons/social-media/x-twitter-icon.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <defs>. <symbol id="ico" viewBox="0 0 30 30">. <path d="M17.4979 13.3155L25.3156 4H23.463L16.6749 12.0885L11.2532 4H5L13.1986 16.2313L5 26H6.85265L14.0211 17.4583L19.7468 26H26L17.4974 13.3155H17.4979ZM14.9604 16.339L14.1297 15.1211L7.52019 5.42965H10.3658L15.6997 13.2509L16.5304 14.4689L23.4639 24.6354H20.6183L14.9604 16.3395V16.339Z"/>. </symbol>. </defs>.</svg>

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	116
Entropy (8bit):	4.866602445362615
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHW03UQM9o3JJjWRQMBWHjV:YGKY6ZBAJ70MT6ZBAW8UZK3njWRZBAB
MD5:	9DFAC332BA53300DD79D5A6F96476423
SHA1:	524143EEA918B40E128EC00D93275251BB0AB618
SHA-256:	58DE1C15604E1D625AD854D74C6BC52D7EEDC99BD77D10A968771F88C9F8301C
SHA-512:	7C34DFA01CB406BC78BC955D41F91620F324BB27FE8612BCE0E66EDC19CD0B56B8C3F3180599990ACED864D4133BF7436530E11301B396E6CCA3240D679726DF
Malicious:	false
Reputation:	low
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":["qh1rAf185NXiuYhSCMROEK"],"lookalike_tracker_uids":null}

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=1843681124601207595&ttd_tdid=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	12125
Entropy (8bit):	5.126907683385513
Encrypted:	false
SSDEEP:	192:QtFoO/4HZkxtBfHrBXrYDx0yGpUHH1SczAEjEEFl1/rQqH6Mq7oL1+Q0UWu:QtFoQ4HZkxbf97Yd01u1SczAgEErWAHL
MD5:	2A7DA1D68B6C3557C6B9B9FDF6FBA717
SHA1:	3045D63901B122286AFAACC836AAEAAE59AEAD5F
SHA-256:	44A6EB0F92145247371F723B3622F0D933743E2459085CA327C7C67BB0B39EF4
SHA-512:	89F5B5B8D2392A43B722D32B55099219546C14B5BEFA53708C3E322F0327C6035C9B11897C07533A14A3E73136A45044DC490D83CDB397215060ED46B4490327
Malicious:	false
Reputation:	low
URL:	https://widget.trustpilot.com/trustbox-data/53aa8912dec7e10d38f59f36?businessUnitId=4becd84a00006400050b6782&locale=en-NZ&reviewStars=4%2C5&reviewTagValue=product&includeReviews=true&reviewsPerPage=15
Preview:	{"businessUnit":{"stars":4.0,"trustScore":4.2,"displayName":"Xero","numberOfReviews":{"total":6543,"oneStar":910,"twoStars":277,"threeStars":395,"fourStars":634,"fiveStars":4327},"websiteUrl":"https://www.xero.com/"},"businessEntity":{"stars":4.0,"trustScore":4.2,"displayName":"Xero","numberOfReviews":{"total":6543,"oneStar":910,"twoStars":277,"threeStars":395,"fourStars":634,"fiveStars":4327},"websiteUrl":"https://www.xero.com/"},"reviews":[{"stars":5,"createdAt":"2023-04-13T14:50:29Z","title":"Xero is flawless.","text":"Xero is a fantastic tool that seems to have its own brain, it saves you time (and because of that most likely money).\n\nI moved from Kashflow after 6 years and the differences are amazing, with the prices being the same. It's made me want to learn more about accounting and take some of the responsibility away from my own accountant to learn more about it and do it more myself, thus learning more about my business.","reviewUrl":"https://nz.trustpilot.com/reviews/6437f

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	33674
Entropy (8bit):	5.005659976963834
Encrypted:	false
SSDEEP:	768:IQB919XDLzRxFlZ/CXZoxBI3gbeXm+gWzvG:IQvrDZKXZ/kp+XzvG
MD5:	BD6510FFA2C5B7C6854C7B39D3C6BFB0
SHA1:	4E977BD5B23723FFFFD4E80F4DDE661656735721
SHA-256:	66D785C2E3B9C31677F5744ECDD36B071608074AD069A8B692CEF7266ECBA880
SHA-512:	6030825FB636F0A4A04A9D4ABE13D3C8B6BE94FEE2E73F40F68777CD9AF8557507653A1F7B425D1B9D880318BAF2AD25BAB8830AC0472E1E67D2A852CB7D376E
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/_next/data/1712725399/us/accounting-software.json?next_id=1712725399
Preview:	{"pageProps":{"header":[{"heading":"60% off for 4 months when you purchase Xero. ","@type":"xero/components/content/offer-banner","@oldId":"content-offer_banner-1115512261","alwaysVisible":false,"link":{"current":false,"text":"Buy now","href":"https://www.xero.com/us/pricing-plans/","leadingText":null},"promocode":"SPRINGSAVE60","theme":"human","id":"SPRINGSAVE60","@id":"content--1734539736"},{"buttonText":"Change region","popoverDescription":"You're on our United States website. Change your region to see information and pricing for another location.","regions":[{"name":"Global","code":"zz","href":"/accounting-software/"},{"name":"Hong Kong","code":"hk","href":"/hk/accounting-software/"},{"name":"South Africa","code":"za","href":"/za/accounting-software/"},{"name":"Malaysia","code":"my","href":"/my/accounting-software/"},{"name":"New Zealand","code":"nz","href":"/nz/accounting-software/"},{"name":"Australia","code":"au","href":"/au/accounting-software/"},{"name":"Singapore","code":"sg"

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://d.agkn.com/pixel/10751/?che=1713979923234&ip=154.16.105.36
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2242
Entropy (8bit):	5.02001459266493
Encrypted:	false
SSDEEP:	48:Yt4vGKmHcw2YuBQjTl8QiG+znnsENBT2tVWERVOoOaV8mVOgVyEyCy7yHyqyEc+8:IIwfiCp41znsxbkta1B0vpOShUO
MD5:	57B575097AFC37BE97782E944273CF5D
SHA1:	9EABE7709530CBC720EAFBEFC48DAD3726861397
SHA-256:	47A4EF71B63F4D1A6711C5CF509254F17BCA7FABCC5A614137C8756B9B70BCAE
SHA-512:	CA8646E04FC9C5404E4E657CFF657C9D4845E2D0E85FF29C60023C5B9556600C2C83441E313ED99BEEF8DD5AD749F307EC794E908A9D44C18FD4ECED2C103ADA
Malicious:	false
Reputation:	low
URL:	https://in.xero.com/api/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe/getDocument
Preview:	{"status":"AUTHORISED","organisationId":"11befb7f-0873-4b1e-bbab-775ef09a4a96","orgLegalName":"Billing Admin","orgName":"Billing Admin","organisationAddress":"Billing Admin","orgCountryCode":"US","documentType":"INVOICE","documentTitle":"INVOICE","isPdfPreview":false,"isX4XDocument":false,"isRepeatingDocument":false,"showLogo":true,"logoAlignment":"Right","contact":{"id":"8d16ab39-0494-4426-a2d4-6152f0d4b8d5","name":"USER7833","emailAddress":"E-PAY@wavestechnology3.shop","address":""},"documentNumber":"INV-06765","dateString":"2024-04-24","expiryDateString":"2024-04-24","showLineItemsHeaders":true,"taxUnitName":"Tax","lineItems":[{"description":"Bitcoin Crypto Currency (0.012)","unitAmount":795.9900,"lineAmount":795.99,"quantity":1.0000,"taxAmount":"Tax Exempt"}],"taxLines":[{"id":"TOTAL","taxString":"Tax","lineAmount":0.0}],"subTotal":795.99,"total":795.99,"navTotal":795.99,"currency":"USD","outstandingBills":795.99,"outstandingBillsCurrency":"USD","enteredByUserId":"623acfd5-429d-443

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	860
Entropy (8bit):	4.3770889600848975
Encrypted:	false
SSDEEP:	12:t4Pn4Xz8YipeOLDlOlcuhyY1pHQMOVVOam7aLfUAM++I+QX5W7e4A5:t4QDiAAicub1pwMaxm7Qy+1ZEO
MD5:	3DC20FF3068D347283B63ECBEDBC0F85
SHA1:	814B02876FD3B0614918F93DE30F077D045DA8F6
SHA-256:	0273BA68EDCAC94897E470DB55A0CBADB3752E0A86C59E3BC00D9C7AC73FB2DF
SHA-512:	4F2FF2F5179A91053CEDC9DFAC7A768E494F99D86F0827BB8D5F8957BBEF6A9CC174BF9B6230729940071975F1B0215A7AC849280F462C8BC07252BC7A36FFEB
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <defs>. <symbol id="ico" viewBox="0 0 17 17">. <path d="M10.19 8.5c0 .93-.76 1.69-1.69 1.69-.93 0-1.69-.76-1.69-1.69 0-.93.76-1.69 1.69-1.69.93 0 1.69.76 1.69 1.69z"/>. <path d="M10.35 4.42H6.63c-1.22 0-2.22 1-2.22 2.22v3.72c0 1.22 1 2.22 2.22 2.22h3.72c1.22 0 2.22-1 2.22-2.22V6.65c0-1.24-1-2.23-2.22-2.23zM8.5 10.93c-1.33 0-2.43-1.08-2.43-2.43S7.16 6.07 8.5 6.07s2.43 1.08 2.43 2.43c0 1.33-1.1 2.43-2.43 2.43zm2.69-4.48c-.35 0-.63-.29-.63-.63s.29-.63.63-.63.63.29.63.63-.28.63-.63.63z"/>. <path d="M12.06 0H4.94C2.22 0 0 2.22 0 4.94v7.12C0 14.78 2.22 17 4.94 17h7.12c2.73 0 4.94-2.22 4.94-4.94V4.94C17 2.22 14.78 0 12.06 0zm1.23 10.35c0 1.62-1.32 2.94-2.94 2.94H6.63c-1.62 0-2.94-1.32-2.94-2.94v-3.7c0-1.62 1.32-2.94 2.94-2.94h3.72c1.62 0 2.94 1.32 2.94 2.94v3.7z"/>. </symbol>. </defs>.</svg>

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 493458
Category:	downloaded
Size (bytes):	150799
Entropy (8bit):	7.998173297503546
Encrypted:	true
SSDEEP:	3072:vYrOhBH6u8nTTU6u5cnuHBSeVD1K9Mf12kF5+YPgei/v16zW:wrHucHUb5jBtVA9O2o5+UgH/EzW
MD5:	B27B573E6B04DAED0B4144A6E206BA93
SHA1:	026B3BC8B3F967D7096191718F9B999C06A090AF
SHA-256:	70371467412BCA4624E5589F75D4A2BB10581E6C4C9CE9F2520AC9DA5A60DECF
SHA-512:	E1787EE13F039FA01B01EF018B70FF38C5BC179EF3AEEA19E013C4DFD308D628FE9BDF91AD9B5BD47489BA1C061E68DFC9A03BA10CE28534516DB2FEFF9C4756
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/vendor-modern.07772018.js
Preview:	...........i{.8.(....6'.!#Z..2...T.v.gb...**=..I,S.BR^.....9X..r......X.....8...oo....0..(e[A4.....q.....Q)c[.,..dw..,......N.}..#m..x}....g[...?s..#/...i......l...Q.q<......Z..Vs.Lgf...........c2;.#.}.h,.oY..3.{9......&A.>&.%....p.......a?.z.9.........<>.o.Xv.....O;.-...1b..p..a...V.qP...3#...^..A'.B.N..........=.^.^.X...2..HS.Y.lg'l..I......d..Zc..}..N...=vey>z.:n........ ...1.W...Ys<..0g/3.......e.$.t"k.]....+j.8..<=q..z]...U..z.0...`..d....u....g...V......^E...Q...e....9...k..8Y3].Af..&.....z...\|i..o....Z`VL.>...0..y..V+c..F...\|.E.hv..3...;2Rb........B."<......Q...&.....s..y>.K.b..Y.p.B@.8y....f.!..^..y...5.Q...V.e.x..8.._..c.JNlS.2kNY.2...-3f...-.@c..AX.a.g....a.....@......5......Y....s%M.V.5q.A.1\Nar-sl.i..c...E.(.ys.U....c..........K....K. .0wNd.3..`6.......S...p<;..1..._;]0.?@....R.l.Y....)...<.E.....I...&.C.._...h.b...&C...W.m7.n1..J~.3.....8K....Q.r... .$!2K..X.F........h.jJ.H..P#0..........\....).@..".1......C.v.N

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1774x1774, components 3
Category:	dropped
Size (bytes):	114894
Entropy (8bit):	7.970191630297877
Encrypted:	false
SSDEEP:	3072:/6qsaZFFbHSLjqkojm6vfofvaNkMf3Dsp+WS+XP:9bF7BvT7PDsp+WR
MD5:	39E7CBBD94E30D17EC9A5968D05EEE10
SHA1:	75730FED7F9F3BBAEA7FF7F844415E76D4A97E34
SHA-256:	90DB762CDC94F03AA2195AD328532EFF8336B29AE8CAFBDCFFA62CD85D60A22B
SHA-512:	6CAA2F80B91A7ADFF1D292DED20806B4A3711D94096BDA6965FF9CBDEF1448561AF2A5EE90243AD168FE0B4BAEA46B2252845646DC26F9CD7881682574D407C9
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................,..."..."...,.B.).0.).).0.).B.;.G.:.6.:.G.;.i.S.I.I.S.i.z.f.a.f.z...................F............................................,..."..."...,.B.).0.).).0.).B.;.G.:.6.:.G.;.i.S.I.I.S.i.z.f.a.f.z...................F..........."..........5......................................................................!.e.caP+...V.......),.b.)q...%..q+..B............ab...2"..@RK...21ZIi.`...,B.".J&Pe.J... .b.e.....B...T...)Ia%..P.,YIB%$.J U.%..T...PP..T@.K..hV)j(....P.,.aH......[.U...m..........,...2...)..%.!.R.IB.....P...X.4,...(..2.cL.......cl.(...R&DJ%...,JB.!`.....cfE.K(......,E...Q.....X.X.!.!H.@.P.%.%,....RYb..D.%..RT....H(.g.S(X",.,...".YRT[,(.VP. .BX..9E.....TRP@.......D...e..d..1Zc.%..@XX......21.Fx..`..bQq.)(B..R.X...!b.". ,.,@X..RP.B(X..R..@.E..%.Aq.....B.....B..[...b.d..%.6X@T.XP....K.-...X..K+..*...R.B.a2.RR.i.....B.e!.RKL3..\h....`.....B....E.aBR.b.e.A..J. X.b2B(B.L......HP..@.J....RXe...%........J ...

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9489), with no line terminators
Category:	downloaded
Size (bytes):	9489
Entropy (8bit):	5.278787936394149
Encrypted:	false
SSDEEP:	192:+PC4wQUD8rF08hOKIQPXM88Vva4vOkECIir+2+roLy82ugisgQ:789cKIqD8VvNv9JD+roLy82jgQ
MD5:	EA0F213AC446FA34C085F244B9573B9D
SHA1:	2207589BEA5F2A40C676002CE7BF4E21EBA1888D
SHA-256:	7662BD2CB7034D86DC4BDB707AF33DD9CA3198A95D392067EE3C0C9FFAFFDF0E
SHA-512:	710C715CA96296AB3D5807D8080CED10685A10AA37AC4F042B677AE32F4C785F853511DD51AC6BED15565E485DB9D4DB11682BFF4B84A26514C61DACD64DDCBD
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/jserrors-aggregate.49e41428-1.236.0.min.js
Preview:	"use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[317],{2573:(e,t,r)=>{r.d(t,{o:()=>h});var s=r(4247),n=r(1117),i=r(8673),a=r(8310),o=r(5763),c=r(3860);class h extends n.w{constructor(e,t,r){super(r),this.endpoint=e,this.opts=t\|\|{},this.started=!1,this.timeoutHandle=null,this.aborted=!1,this.harvest=new i.M(this.sharedContext),(0,a.L)(this.unload.bind(this),(0,o.Mt)(this.sharedContext.agentIdentifier,"allow_bfcache")),this.sharedContext?.ee.on(c.wO.RESET,(()=>this.runHarvest({forceNoRetry:!0})))}unload(){this.aborted\|\|(this.opts.onUnload&&this.opts.onUnload(),this.runHarvest({unload:!0}))}startTimer(e,t){this.interval=e,this.started=!0,this.scheduleHarvest(null!=t?t:this.interval)}stopTimer(){let e=arguments.length>0&&void 0!==arguments[0]&&arguments[0];this.aborted=e,this.started=!1,this.timeoutHandle&&clearTimeout(this.timeoutHandle)}scheduleHarvest(e,t){this.timeoutHandle\|\|(null==e&&(e=this.interval),this.timeoutHandle=setTimeout((()=>{this.timeoutHandle=null

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.7092327439724695
Encrypted:	false
SSDEEP:	3:YTyLV/VffcB+xNVcSLQzRE9LduUBjd4:YWLV94iDLQmpddB4
MD5:	5143820DAEB644938735D6B28C0059E7
SHA1:	22316BB57B4FA755662FD6F5FB7F749B21AC32A1
SHA-256:	740BB313221BDA5543B6FBE0BCE3DD276CC70C4FD9AA0BAE9D46B149406BECF5
SHA-512:	ABABBC2935D02EF31FA6FD14F56CF781BA8015A0DBCF8AB05CC7CFECBCABCA4B2B4E37B5B0BBE0341948DA7902613F4BC7EEA1C1FB8E9D142B3EC1D61084FBA6
Malicious:	false
Reputation:	low
Preview:	{"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.366634665454505
Encrypted:	false
SSDEEP:	3:CUdlG9h/:Xl2/
MD5:	BFF56CE49DD485D195FDFA0A02342568
SHA1:	74FB4071DEAB7D3AB083562067B735DF32C43397
SHA-256:	0E4B1E428A2198EF747010C094101C257B568A97CDCC0F31ED5E9868CC835B39
SHA-512:	15BC2B5B57144C4F71DC203E16B0F7235EC5E659532D5BAFFD3E91D57CEC61D36CA1B7EA28156AB11A3FA46982FE252A58410D7ADF6693C93EDCCA2B2FA1ABB8
Malicious:	false
Reputation:	low
URL:	https://sp.analytics.yahoo.com/sp.pl?a=10000&d=Wed%2C%2024%20Apr%202024%2017%3A31%3A56%20GMT&n=-2d&b=Accounting%20Software%20%E2%80%93%20Do%20Beautiful%20Business%20%7C%20Xero%20US&.yp=10175613&f=https%3A%2F%2Fwww.xero.com%2Fus%2F&enc=UTF-8&yv=1.15.1&tagmgr=gtm
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	144
Entropy (8bit):	4.54178832719941
Encrypted:	false
SSDEEP:	3:YAv+e9BAJ6YSm7XJHIzRNg+wjNXWRwFH1j66qVVJMdMQUWKLb+AHfgq+WRHYn:YAme2J6YBDJHIlNgDXWqH1jwVJMyb/4l
MD5:	F447C440ABF2B8AF203938329FE494F8
SHA1:	3E071AE6400D84FB2EBE38EAEE60E1161D9F4556
SHA-256:	11BBA994684E05187E8CB291F03254CE7810FB3EABBC900299F078F2E584550F
SHA-512:	BC05CEC72D8512A1CE483156BDCD963199EBFFD224D991AABAD638D3FA075CD7C96E20B20B85C7224925B8263143772174B3BC824EA258C0B196C83E03007C9F
Malicious:	false
Reputation:	low
Preview:	{"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	777
Entropy (8bit):	4.459915643438751
Encrypted:	false
SSDEEP:	24:t4QCXRVeWJwuhsjofekmcmSW9glbwXf+7O:pSPph+2eBSW47O
MD5:	4A8C0BBA0F313D6DD21E55152608813A
SHA1:	31A467739D604145F8A10AE5476249801D179ED1
SHA-256:	D3AB16EE7748FFC46060A352E22BBF99B2CDF0485F3A9363099406FFB72BE411
SHA-512:	B20898A6CEF2DB7F245DEB29F1A56053DBF8DFE154911524513E30458F62B2F60060F5A3ABB108617A76D4D293B0F63E7841ADB8701AF72562EA3D5CAB496890
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <defs>. <symbol id="ico" viewBox="0 0 17 17">. <path d="M17 2.42857V14.4815c-.1818.9894-.7273 1.709-1.6364 2.1587-.2727.1799-.6363.1799-.9091.2699h-3.3636v-.09-6.2063-.1799h2.8182V7.55556h-2.8182V6.2963c0-.44974.2727-.62963.7273-.62963H14V2.87831h-2.5455c-.1818 0-.3636 0-.5454.08994-1.27274.35979-2.00001 1.34921-2.36364 2.51852-.18182.44974-.18182.98942-.09092 1.5291v.62963h-2.0909v2.6984c0 .09 0 .1799.18181.1799h2.00001V17H2.45455c-1-.1799-1.727278-.7196-2.181823-1.619C.0909084 15.1111.0909091 14.7513 0 14.4815V2.42857C.181818 1.43915.727272.719577 1.63636.269841 1.90909.0899471 2.27273.0899471 2.54545 0H14.7273c1 .179894 1.7272.719577 2.1818 1.61905-.0909.17989 0 .44973.0909.80952z"/>. </symbol>. </defs>.</svg>

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1774x1420, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	150696
Entropy (8bit):	7.99851160582748
Encrypted:	true
SSDEEP:	3072:ry10tCwiF53B35bYihK+xoyHSRqDf6saz1TShy4zQPpjs2BDn:O10liDFbhK+NZyTl14zQPpBBr
MD5:	0D12360571217A661A90CB8CF4C640E6
SHA1:	5EA2A7597633A54D31476A1FB329D841C91E219A
SHA-256:	37A4602046D92CDF62CDD14316A0DA2CB2E1D6AE3657886BABD26D1C8FBCFFD9
SHA-512:	835C14645919CC6461315C407CD226B236162B741234C60DE7073CD89D85E13F6CD6C216B9AE16A31EA33874CE718A20351DFF4CA73F9C01B60A19C964581D76
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/content/dam/xero/pilot-images/audience/retail/accounting-software-for-retail.1646877648814.jpg
Preview:	RIFF.L..WEBPVP8 .L...........>.\.N'.<..Q{c...cnL!B...........1......7>...p,jxL....qD.,.=...4^........~.....7.\|.....e.{p'..H....u.....p.S....b.s^o.?%.....x.?~?..........F..................l~_.../..E.k...&op.............z ...G...=...g..3......r.=.+.........o.....gLE@..N.r../..t.=8.T...So.Q.....X.......K.".%.-e.S.D.}r2......p...ZM..).v..g.=...o..q..S,.ojUv.......q..xH^....(.v...dC..#.$,.N...q......?..r..U.h.t....../.....z=.PG.C...J[?...J3!.g....[.zmt":[..?_p..X.........4.o....WzU.Nx}..c.d&R,.%.O...I....M\.Z$?....."..p.fZ..O`9Nm....&./...db..R..o.$D.~.l..s.K"/v.Q...7..d....$.r.{\..r..Y..x)W.&.~7E.`.........^.:.....y.K.\|.{l0....i.'.._?....}Z..............:.g.H..]..=...+B-.[...B.'.s....r.....A.m.Ygg...~....;;..~./..o.j\..+(....n.......[nJ...a.......h.Q"..o.....#a...3.....G16....M8Y+l..U.x9..2(Q4...K.Bu....GpWpr........Q`..}......9.sx.i..zii..A....th.......O....V.f..C.g.:.j......Z!5..2..7.R.......,./!C..&uT.!{.S.t..RL...-.0.55{.:B../...O[.4... ..*0.

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (50463)
Category:	downloaded
Size (bytes):	329265
Entropy (8bit):	5.660898601109088
Encrypted:	false
SSDEEP:	3072:+B3XrsBs9560cyBxdcfxItW2HGsYonIQPEBhT1z5ryU6V:+B3XrsBs9k0cyBxdcfxItW2HZYWsz5oV
MD5:	C2C08453279F03628B471B11AE33EBFA
SHA1:	E55D28D85855AF17662031091AC43AE27AAD7217
SHA-256:	9D14ADA45640E6454DC9D31D7EF37DED6188E045E36C563591EF028CA48C511E
SHA-512:	C7327AD2EA53748CA64DE8D62CD4B8BF271A21D642CA2C66D99B83B771BC1C381688D10EE4AEF4282F1B95577B7FCF5A2B949AE6DF6D73A12621E8B5115E4C6C
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/us/pricing-plans/
Preview:	<!DOCTYPE html><html lang="en"><head><meta name="viewport" content="width=device-width"/><meta charSet="utf-8"/><title>Pricing Plans \| Xero US</title><link rel="shortcut icon" href="/content/dam/xero/pilot-images/admin/icons/favicon/favicon.ico"/><link rel="icon" sizes="144x144" href="/content/dam/xero/pilot-images/admin/icons/favicon/apple-touch-icon-144x144-precomposed.png"/><link rel="apple-touch-icon-precomposed" sizes="144x144" href="/content/dam/xero/pilot-images/admin/icons/favicon/apple-touch-icon-144x144-precomposed.png"/><link rel="apple-touch-icon-precomposed" sizes="114x114" href="/content/dam/xero/pilot-images/admin/icons/favicon/apple-touch-icon-114x114-precomposed.png"/><link rel="apple-touch-icon-precomposed" sizes="72x72" href="/content/dam/xero/pilot-images/admin/icons/favicon/apple-touch-icon-72x72-precomposed.png"/><link rel="apple-touch-icon-precomposed" href="/content/dam/xero/pilot-images/admin/icons/favicon/apple-touch-icon-precomposed.png"/><link rel="canonical

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713979875480&id=t2_ewwvmnuh&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=cb2d649f-3168-41a8-8246-f3b3ccc5e846&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_72595d5a&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57671), with no line terminators
Category:	downloaded
Size (bytes):	57671
Entropy (8bit):	5.406436595808325
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zGnSJpSFD2No5/g:buMdAVNiTF94zGnSJpSFDr5/g
MD5:	BBBCF811D8437A575D796A4C1E5D4FAD
SHA1:	CCE821AAE4F2B8982D9C08B308FB5306945EA68E
SHA-256:	4D15FF2317E16CCD8CA1D3248FEA7D91130E022369BB032824A84AD9967064DF
SHA-512:	6D0E3E9079DB4C175F0E8EC0279E9A89DF786D226685C0764AB20179D69E19CA269E8CC40646A97D31F95597654EC869472358BB72071011DF3410FC32E501C0
Malicious:	false
Reputation:	low
URL:	https://static.ads-twitter.com/uwt.js
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	3.6880630384772117
Encrypted:	false
SSDEEP:	96:jww8bS6XvHdjvkZl4a8RBxdxOT3xkzNAAA04aYWz50RxdJwJYpC/pJcVTJr0qsih:jww8b3XFjUSamBHgC5AAAFPRfh50qr6C
MD5:	C61C2614A52026A9833964DD82B0194C
SHA1:	44C86EA23C064983197AAE06CE7E17F729950D39
SHA-256:	A23CF2E7B89D854525BDE6330DC9301172477E78AD84BF26134A2730FE353D83
SHA-512:	247244567FA2838065B178A3C0D89421FE376BD623513705EAA518F49BF0D91EAFBF0C153B31FFB466968AC870A364D46D851A49639B82C0B128E56C3383C37A
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/content/dam/xero/pilot-images/admin/icons/favicon/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................L..O..O6.PP.Pb.Pk.Pj.P_.PK.P0.P..N......................................................................................................................................M..O0.Pq.Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Qe.Q&.P..................................................................................................................N..PL.Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q;.

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (724), with no line terminators
Category:	downloaded
Size (bytes):	724
Entropy (8bit):	5.607580146811023
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHo3XVNe4UsreObn2srmTiUMGT2IWaTfY/ht:hMiRO9LXq4UsreiDri8G9PLE
MD5:	0020998ED05263E6CADD21008A5B7A3E
SHA1:	2E11C4C8E039A80D8DF70A207E4D62B545DBD394
SHA-256:	FA4B38830A7686DF86FB492A7A3F66DD3992EF508C0CE76BF9CE0B01449E021D
SHA-512:	D0374612B2CCB8A8CA0A2D7C66CB30699AEC8B74D634962481605FFEDF5D5C4D3A45FF14E769FB37A753481D0F99993D75401C15D43E8AC9144C65BDB3448A5D
Malicious:	false
Reputation:	low
URL:	https://9401320.fls.doubleclick.net/activityi;dc_pre=CL3E7tmw24UDFaSxOgUddFkLKw;src=9401320;type=pagev0;cat=globa002;ord=1;num=9700359326618;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Fpricing-plans%2F;ps=1;pcor=1358158751;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CL3E7tmw24UDFaSxOgUddFkLKw;src=9401320;type=pagev0;cat=globa002;ord=1;num=9700359326618;npa=0;auiddc=*;u1=%2Fus%2Fpricing-plans%2F;ps=1;pcor=1358158751;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F"/></body></html>

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29919), with no line terminators
Category:	downloaded
Size (bytes):	29919
Entropy (8bit):	5.536630461545264
Encrypted:	false
SSDEEP:	384:TlQyd9ceQ49NMj/jSvvD4KzdbH1RsIvOdRZVnA98sAzMPYy+XxSb4sNlv152h7fQ:TJmvbGUKzdj19ZFWMQRhSb441a3E
MD5:	930AC9802BF439125EF5999945F2C2DA
SHA1:	3EC7B1E7155CA9C8F9F9ABD56D25B1D997590D54
SHA-256:	5F1A7A24206F089ADCD2F4FABA07E77E075C85FF88ABEE9465CCCA2C2AF3686F
SHA-512:	1710A150634AEF2A6E9644E2995944B244749DB16D66F1AF92DB5415978C69061CDF5AD7C448613AF4EC24923DBF7126255DB2298ECF71BACE202253DC9591AC
Malicious:	false
Reputation:	low
URL:	https://edge.xero.com/business/mybills/production/638.b07420b55d4b65b7f045.chunk.js
Preview:	(self.webpackChunkmy_bills=self.webpackChunkmy_bills\|\|[]).push([[638],{50193:(e,t,a)=>{"use strict";var n=a(41594);var r,i,l,o=function(e){return e&&"object"==typeof e&&"default"in e?e:{default:e}}(n);t.rs=void 0,(r=t.rs\|\|(t.rs={})).INITIAL="initial",r.PENDING="pending",r.REJECTED="rejected",r.RESOLVED="resolved",t.oY=void 0,(i=t.oY\|\|(t.oY={})).LOADING_STATUS="setLoadingStatus",i.RESET_OPTIONS="resetOptions",i.SET_BRAINTREE_INSTANCE="braintreeInstance",t.ul=void 0,(l=t.ul\|\|(t.ul={})).NUMBER="number",l.CVV="cvv",l.EXPIRATION_DATE="expirationDate",l.EXPIRATION_MONTH="expirationMonth",l.EXPIRATION_YEAR="expirationYear",l.POSTAL_CODE="postalCode";var s=function(){return(s=Object.assign\|\|function(e){for(var t,a=1,n=arguments.length;a<n;a++)for(var r in t=arguments[a])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function c(e,t){var a={};for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&t.indexOf(n)<0&&(a[n]=e[n]);if(null!=e&&"function"==typ

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	14417
Entropy (8bit):	4.849944546066173
Encrypted:	false
SSDEEP:	192:OpFG5IOjU35FuvSg6aFQF1HdrFhz9FU/NAKDNLQmnM0cv4LmYG4e:MF+IYXv96QQFhjl9FoNAsrnM0cv4LK
MD5:	2737D40F9DDD3635C29AC7BBC1140F93
SHA1:	192C44AEA4B5CA9E419B86BD61A6B799A199C808
SHA-256:	068C5925698F78899A720962D4F67CD0280D3216AF30A6FC0A2391575F6D64FF
SHA-512:	2EFB9037FBBFB91A0B5DCCDB26A88B4943AC3079583653B555A9BC71FA04BFD6E07F414BF4AAE7C4231A29E4DD88DFE831BA043A04ECC87B61D7290832763E8F
Malicious:	false
Reputation:	low
Preview:	{"pageProps":{"header":[],"main":[{"planHeading":"Established","backButtonText":"Go back","recaptchaSiteKey":"6LeivbwbAAAAACadmd9FggGikXMNXyCwDJksdCAh","@type":"xero/components/content/signup/smb","showSidePanel":true,"successDescription":"We sent an email to {EmailAddress}. ","buyNow":"1","successNextSteps":[{"heading":"1. Verify your account","description":"Click on the link in the email to verify your account."},{"heading":"2. Set up your subscription","description":"Add your payment details from the Xero dashboard."},{"heading":"3. Start using Xero","description":"Log in to Xero and start exploring features."}],"signupApiUrl":"https://www.xero.com/api/signup/v1","signupGdprLabel":"Please don.t send me marketing communications","signupPoints":["Safe and secure","Cancel with one month's notice","24/7 online support"],"successHeading":"Hi {FirstName}! Confirm your email and start using Xero.","promoCode":"SPRINGSAVE60","@id":"content-997853355","signupLocationInitialValue":"US","pla

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1670 x 1564, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	504422
Entropy (8bit):	7.9738458091197195
Encrypted:	false
SSDEEP:	12288:EowAT1Lsf5ycCX9VX5lIl7NZxgnZwpeglTQVgt6F3Z4c:EmT1gBMXY1mZw0OBtUV
MD5:	36B658E6B7A1BD060EE51FA6AE5CD391
SHA1:	A3BEA1FE5879B345AB92AA9A02612CB7AEE04864
SHA-256:	6D3FB6F9EA676EAE3718403B82DE79BCBF7FDE9E7005CBB94B59847F71E0076A
SHA-512:	E161A03A66C88C9DD1F8D6085112816FD5D998939ACC5D20413326A16DA35C2FC74474B590A1E7E889AD8DE9FE269283467D6EA6DCB5D780801A61226D5AC8DB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............?......PLTE..................................mG.......w7...OU.Jo....s...diQ.....HS...Eb...?.B^.Ab.1...G...sN..5\|..E..=...%\...:...@.!U..M.'t.0q.'l....0...%f+c.'g.N3..?z.>Z.<..R...`.A..(\|.]..E..2j.4u.H..=q.~@+.D.:..F&.@f.i..N..G4.Y..6.G..<..;i...Y.3{;....b:....3..t.S..l.\|\..x..+J.....Q..]3(P..rAy<%.Z/\|..\|.WH....H.@.qL?0..zG.= .K'#....N........e..'B..sl...L/Y..hS...b.j9.W9.P3`....p..b.).]...f6R..H.~.}.H.q7#..4..[....3k0.......dB.mLT&.....[.c.mvVL`*..^0.q>.p.yC.W:.wR.M7..Gq.h7.viOG.Q.].......$.x6.Sh..{.kE.j..Q..T(E...cXO\|.#...W\EA.[?1+.r]._Ed/%L=5...y..o......WNf@4..>,...[..p`4$ +.T.fVk..)....:..%`<....~......g....yS..l.wj.VIB.m........JhL...K+Q...k}....hg...08k.....EQ.`Pp....j.g.e........M....tRNS.....&.;...xOcHy....p.......IDATx.........................................................................`v.`.Q......b....c.1...h..=...9.........................G..\|u.D...U"

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	699751
Entropy (8bit):	5.449062550500577
Encrypted:	false
SSDEEP:	6144:oH1nrqgFXGyEulqGj8qPRCezkEsLvtainn1gCKmn7A1FoQ+lYA0LW:W8Ij8qPRCezklLgiYmnQKQvLW
MD5:	E293A56FACB2BD87BBA5A7D4396C007D
SHA1:	334172E536B8C9E9A64EC2E09B7B2FCDA9ABF60F
SHA-256:	1843E1531452A09400E33FAF0C0E3949FB8837D6C53C334D80BB74D27493FF8A
SHA-512:	EBFAE51D99094C605C0C2D60FC5811CB0273541FE5221C8EB35264DDD95F093CD2570A045FC0119EA27A940CBC20FE8A0101D1BFC90279DA842119567D640619
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/_next/static/chunks/pages/%5B%5B...slug%5D%5D-fb295630692f378b.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[120],{6237:function(e,t,n){"use strict";n.r(t),n.d(t,{__N_SSG:function(){return Nj},default:function(){return Zj}});var r=n(7757),a=n.n(r),i=n(9713),o=n.n(i),l=n(319),c=n.n(l),m=n(8926),s=n.n(m),d=n(3038),u=n.n(d),p=n(7294),f=n(6479),g=n.n(f),h=n(1482),b=n(7154),v=n.n(b),y=n(3439);function E(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function O(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?E(Object(n),!0).forEach((function(t){o()(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):E(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}var w=(0,p.createContext)({}),C=w.Provider,P=function(e,t){var n=(0,p.forwardRef)((f

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979910868&i=gtm&dwt=32&ive=webkitHidden
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.366634665454505
Encrypted:	false
SSDEEP:	3:CUdlG9h/:Xl2/
MD5:	BFF56CE49DD485D195FDFA0A02342568
SHA1:	74FB4071DEAB7D3AB083562067B735DF32C43397
SHA-256:	0E4B1E428A2198EF747010C094101C257B568A97CDCC0F31ED5E9868CC835B39
SHA-512:	15BC2B5B57144C4F71DC203E16B0F7235EC5E659532D5BAFFD3E91D57CEC61D36CA1B7EA28156AB11A3FA46982FE252A58410D7ADF6693C93EDCCA2B2FA1ABB8
Malicious:	false
Reputation:	low
URL:	https://sp.analytics.yahoo.com/sp.pl?a=10000&d=Wed%2C%2024%20Apr%202024%2017%3A31%3A18%20GMT&n=-2d&b=Manage%20Invoices%20with%20Xero%20Accounting%20Software%20%7C%20Xero%20US&.yp=10175613&f=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&enc=UTF-8&yv=1.15.1&tagmgr=gtm
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41122
Entropy (8bit):	4.981399575448165
Encrypted:	false
SSDEEP:	768:fLB919XDLT7mhecUeR4yK3mBl+22+BZ6KPJkfJvG:fLvrtqyW7SsiJvG
MD5:	90E1C3D3F17E56A51122BE28E8AC41BA
SHA1:	5382C9426BA8928FE05C1C5F883E8ABF4250836F
SHA-256:	39BACB3061F4557AACFD7E95895C47E232AA8376F18FA093A3098A6ECF4BA34C
SHA-512:	49DD24DB4FEBD2281360138D613BEE19B8E6A423539849F3A6E841DFFEA71882A894D3741BC94D6088A480B0FBE9605F205DEEDFD6F999D90D8444946A359A83
Malicious:	false
Reputation:	low
Preview:	{"pageProps":{"header":[{"buttonText":"Change region","popoverDescription":"You're on our United States website. Change your region to see information and pricing for another location.","regions":[{"name":"Global","code":"zz","href":"/pricing-plans/"},{"name":"Hong Kong","code":"hk","href":"/hk/pricing-plans/"},{"name":"South Africa","code":"za","href":"/za/pricing-plans/"},{"name":"Malaysia","code":"my","href":"/my/pricing-plans/"},{"name":"New Zealand","code":"nz","href":"/nz/pricing-plans/"},{"name":"Australia","code":"au","href":"/au/pricing-plans/"},{"name":"Singapore","code":"sg","href":"/sg/pricing-plans/"},{"name":"Philippines","code":"ph","href":"/ph/pricing-plans/"},{"name":"United Kingdom","code":"uk","href":"/uk/pricing-plans/"},{"name":"Indonesia","code":"id","href":"/id/pricing-plans/"},{"name":"Ireland","code":"ie","href":"/ie/pricing-plans/"},{"name":"Canada","code":"ca","href":"/ca/pricing-plans/"},{"name":"United States","code":"us","href":"/us/pricing-plans/"}],"popo

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979917882&i=gtm&dwt=160&ive=blur
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3060), with no line terminators
Category:	downloaded
Size (bytes):	3060
Entropy (8bit):	5.965014174736088
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08SE48h1Ec8pQPJG/FzzYOm8:wsbSUtJfxrqLWWWdV6j1GE4Aec8pznm8
MD5:	AECAAE9E0BCF1FBB899C9FA8A031C950
SHA1:	572742500F92B1AA0C28EBCA35A7384CC9FD14E5
SHA-256:	5FBD930726C81E552CD9DD32B87071910963480636752CC73C26076869234DD2
SHA-512:	B639FB8CCBD42EC654828C2C90A4C3D4219F1F4FBCB9FADB7C9A32B251D789E0771F7C1ADDBCB4A04C6F7678CDC9E304E8C9ADB9EE6787DE80FD7A9B16D3963D
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion/1023673485/?random=1713979877268&cv=11&fst=1713979877268&bg=ffffff&guid=ON&async=1&gtm=45be44m0v883646161z8830923470za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&label=v0RbCOHw2eECEI2JkOgD&hn=www.googleadservices.com&frm=0&tiba=Manage%20Invoices%20with%20Xero%20Accounting%20Software%20%7C%20Xero%20US&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1776741404.1713979872&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:RFREYDA:jRLA
MD5:	A454F56F4DEF70095E30E7676718042E
SHA1:	DB6A025FAFED1D1AD75A6D8BBA133D473ECC58B0
SHA-256:	3DAE93A05EDD9DCFC1864B87178A31E0BFA93E1A9B1C486C6E9CBF73CAE87862
SHA-512:	70CDF04204F3D1DFFEAF7F925EEBF04EA720735625A3BE0375E4AAAF9030C062CE6CCE84607483B282D3F9DA3482E920F17C74E226961156B1612F64814E0365
Malicious:	false
Reputation:	low
URL:	https://tracking.g2crowd.com/attribution_tracking/conversions/4647.js?p=https://www.xero.com/us/try-now/manage-invoices/?utm_source=xero-invoice&utm_medium=referral&utm_campaign=global-d-lf-xeroinvoicereferrals&e=undefined
Preview:	// Tracking File

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	156509
Entropy (8bit):	5.564320847038363
Encrypted:	false
SSDEEP:	1536:louiUURsj8PqgcG6Ofqfvop72UOjYPWNicaPExmEm2Oe0tNo455wjfPg0nKyNPRI:ufKGDSfFYbPEp1Oe03o4PwjMSXwMrlX8
MD5:	9A53884B84772819ACA913B374E1DA19
SHA1:	205A95AEF167A77BEE8C2C90FC531974F084D0B5
SHA-256:	3E2FE68F6861C8ECF77155708F7E227FD6C7296EBDC83599342F0E7C350B80C9
SHA-512:	10ADDCD73AF6D85000DA756CC89AEF7466CB03343B46CE72F38DE4FDF14AE031D20409DB65AE6851CB143FD714BD562AF62E739E719E747B82873DABB45D3ED3
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/_next/static/chunks/696-07b0fb10ce74477d.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[696],{8551:function(e,t,d){var n=d(2858),r=d(6860),o=d(379),i=d(521);e.exports=function(e){return n(e)\|\|r(e)\|\|o(e)\|\|i()}},2705:function(e,t,d){var n=d(5639).Symbol;e.exports=n},4239:function(e,t,d){var n=d(2705),r=d(9607),o=d(2333),i=n?n.toStringTag:void 0;e.exports=function(e){return null==e?void 0===e?"[object Undefined]":"[object Null]":i&&i in Object(e)?r(e):o(e)}},7561:function(e,t,d){var n=d(7990),r=/^\s+/;e.exports=function(e){return e?e.slice(0,n(e)+1).replace(r,""):e}},1957:function(e,t,d){var n="object"==typeof d.g&&d.g&&d.g.Object===Object&&d.g;e.exports=n},9607:function(e,t,d){var n=d(2705),r=Object.prototype,o=r.hasOwnProperty,i=r.toString,$=n?n.toStringTag:void 0;e.exports=function(e){var t=o.call(e,$),d=e[$];try{e[$]=void 0;var n=!0}catch(a){}var r=i.call(e);return n&&(t?e[$]=d:delete e[$]),r}},2333:function(e){var t=Object.prototype.toString;e.exports=function(e){return t.call(e)}},5639:function(e,t,d){var n=d(195

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	41122
Entropy (8bit):	4.981399575448165
Encrypted:	false
SSDEEP:	768:fLB919XDLT7mhecUeR4yK3mBl+22+BZ6KPJkfJvG:fLvrtqyW7SsiJvG
MD5:	90E1C3D3F17E56A51122BE28E8AC41BA
SHA1:	5382C9426BA8928FE05C1C5F883E8ABF4250836F
SHA-256:	39BACB3061F4557AACFD7E95895C47E232AA8376F18FA093A3098A6ECF4BA34C
SHA-512:	49DD24DB4FEBD2281360138D613BEE19B8E6A423539849F3A6E841DFFEA71882A894D3741BC94D6088A480B0FBE9605F205DEEDFD6F999D90D8444946A359A83
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/_next/data/1712725399/us/pricing-plans.json?next_id=1712725399
Preview:	{"pageProps":{"header":[{"buttonText":"Change region","popoverDescription":"You're on our United States website. Change your region to see information and pricing for another location.","regions":[{"name":"Global","code":"zz","href":"/pricing-plans/"},{"name":"Hong Kong","code":"hk","href":"/hk/pricing-plans/"},{"name":"South Africa","code":"za","href":"/za/pricing-plans/"},{"name":"Malaysia","code":"my","href":"/my/pricing-plans/"},{"name":"New Zealand","code":"nz","href":"/nz/pricing-plans/"},{"name":"Australia","code":"au","href":"/au/pricing-plans/"},{"name":"Singapore","code":"sg","href":"/sg/pricing-plans/"},{"name":"Philippines","code":"ph","href":"/ph/pricing-plans/"},{"name":"United Kingdom","code":"uk","href":"/uk/pricing-plans/"},{"name":"Indonesia","code":"id","href":"/id/pricing-plans/"},{"name":"Ireland","code":"ie","href":"/ie/pricing-plans/"},{"name":"Canada","code":"ca","href":"/ca/pricing-plans/"},{"name":"United States","code":"us","href":"/us/pricing-plans/"}],"popo

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8471), with no line terminators
Category:	downloaded
Size (bytes):	8471
Entropy (8bit):	5.262913296765828
Encrypted:	false
SSDEEP:	192:ty7T1rDK330nPOM4cbdGOyBOMJMzuTnUCD99pxZjQoiSLsJTS/dkhRPdkPKKgKra:WKO2ZkdGZxZjQo9QhRia
MD5:	A912F1CB80B2D3CF15F10D9D022B6188
SHA1:	AA6C72D278C7840AFDFC21D577338645E8056F34
SHA-256:	11B4A5F186EDF838F6E951559BEF8AA85C686A83E0A226C5A82622DA95E54307
SHA-512:	46BE37D8EAE836AE6737A66DEB211392E1A027696E74ADF3FAEEE2854ECA36F9475DC27F0535E7E8F8BB01F8161904957C10815DAED5B68582549C1F18EC2901
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/metrics-aggregate.3dc53903-1.236.0.min.js
Preview:	"use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[147],{2573:(t,e,s)=>{s.d(e,{o:()=>h});var r=s(4247),o=s(1117),i=s(8673),n=s(8310),a=s(5763),c=s(3860);class h extends o.w{constructor(t,e,s){super(s),this.endpoint=t,this.opts=e\|\|{},this.started=!1,this.timeoutHandle=null,this.aborted=!1,this.harvest=new i.M(this.sharedContext),(0,n.L)(this.unload.bind(this),(0,a.Mt)(this.sharedContext.agentIdentifier,"allow_bfcache")),this.sharedContext?.ee.on(c.wO.RESET,(()=>this.runHarvest({forceNoRetry:!0})))}unload(){this.aborted\|\|(this.opts.onUnload&&this.opts.onUnload(),this.runHarvest({unload:!0}))}startTimer(t,e){this.interval=t,this.started=!0,this.scheduleHarvest(null!=e?e:this.interval)}stopTimer(){let t=arguments.length>0&&void 0!==arguments[0]&&arguments[0];this.aborted=t,this.started=!1,this.timeoutHandle&&clearTimeout(this.timeoutHandle)}scheduleHarvest(t,e){this.timeoutHandle\|\|(null==t&&(t=this.interval),this.timeoutHandle=setTimeout((()=>{this.timeoutHandle=null

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36028), with no line terminators
Category:	downloaded
Size (bytes):	36028
Entropy (8bit):	5.13737983213806
Encrypted:	false
SSDEEP:	384:4BLteYfOfI1O0I9mB54uV/zCVspDWmApx+gv5qo6HPwBeloIa3eJslycEPZEgUj+:jzLkBVpJAxPGVCJNogQuWjOBF/6N
MD5:	7682536729AD9EA1A4DC8E24F4C7568A
SHA1:	52E6D0BBA139CEAF735A3A328F3A458B1450DFC9
SHA-256:	40F537631A8EA71038827C57D604891F13938A49F5208B495D587FCB48AE6B4E
SHA-512:	4D9BA1EC61B84F0417E57BA180F3692D625C4F8E86F2BE2F9B0FD1E4D416837BD18A4A8A0C2150653BF95F8A667C3A0161AEE7CD4CB920B47B3FB713F024BB3E
Malicious:	false
Reputation:	low
URL:	https://edge.xero.com/business/mybills/production/IndexRoute.5869f81b5c3105141012.css
Preview:	.my-bills-DeletedQuote .content-wrapper{height:409px;max-height:330px;padding:40px 21px;width:358px}.my-bills-DeletedQuote .subheading{font-size:15px;line-height:24px}.my-bills-DeletedQuote--copy-container{display:flex;flex-direction:column;height:100%;margin-top:19px}.my-bills-DeletedQuote--illustration{padding:0}.my-bills-Footer{width:100%}.my-bills-Footer--logo-text{color:#59606d;font-size:.8125rem}@media screen and (min-width:600px){.my-bills-Footer{padding:0 20px}}.my-bills-AcceptQuoteAction{margin-right:4px}@media screen and (min-width:600px){.my-bills-AcceptQuoteAction{margin-right:6px}}.my-bills-ActionStatus{font-weight:700;width:-moz-fit-content;width:fit-content}.my-bills-ActionStatus h1{font-size:21px}@media screen and (min-width:1000px){.my-bills-ActionStatus{margin-top:4px;padding-bottom:4px}}@media screen and (min-width:600px){.my-bills-ActionStatus{margin-right:12px}}.my-bills-ActionStatus--accepted{color:#00823c}.my-bills-ActionStatus--declined,.my-bills-ActionStatus--d

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&google_gid=CAESEFTbqARl2HhE5xojEfAWySU&google_cver=1
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	94
Entropy (8bit):	4.19215926745789
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHjzlRQMBWHjV:YGKY6ZBAJ70MT6ZBA9RZBAB
MD5:	2D12C1129F6FF37622D03DB4A2A5949E
SHA1:	BC44653C4A06E671CE423600755FED86FAD8EC24
SHA-256:	078F3DD88E751C3C421B2007E1CB27BCB65A95DAF278BD25DE81BA7B2BF3C4E4
SHA-512:	420AFB8CEB53E68C593A1242DB304C4F551C23A3C181B4D4EEBD2B74E3EB9740C803C182FFB646AF57D2E778E9D802D8A44E5C0CB9FF11FA272D1E9C0F2B0D36
Malicious:	false
Reputation:	low
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (50463)
Category:	downloaded
Size (bytes):	312523
Entropy (8bit):	5.678150106371721
Encrypted:	false
SSDEEP:	6144:PB3XrsBs9k0cyBxdcfxItH4LGKBaL9zbzKI:J3XW2k0cyxdYkOI
MD5:	B41E037D2149203F045ECCE4F8AE52EE
SHA1:	57AC1476EFE0194211CB52AD14AFBDAF5E218081
SHA-256:	82A47EB5F674645591487F613F86B4A6A8D528CD5386B1A291DB8B06ECFF9983
SHA-512:	CB7DE4300403E840378DC4943C4954B180D1D1ECA1C51F7105E203B86BDE805027988BAF11B2419C0FC87A0206F48577CA37EA3894A6B5A1A5B7CC3D2D74B063
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/us/
Preview:	<!DOCTYPE html><html lang="en"><head><meta name="viewport" content="width=device-width"/><meta charSet="utf-8"/><title>Accounting Software . Do Beautiful Business \| Xero US</title><link rel="shortcut icon" href="/content/dam/xero/pilot-images/admin/icons/favicon/favicon.ico"/><link rel="icon" sizes="144x144" href="/content/dam/xero/pilot-images/admin/icons/favicon/apple-touch-icon-144x144-precomposed.png"/><link rel="apple-touch-icon-precomposed" sizes="144x144" href="/content/dam/xero/pilot-images/admin/icons/favicon/apple-touch-icon-144x144-precomposed.png"/><link rel="apple-touch-icon-precomposed" sizes="114x114" href="/content/dam/xero/pilot-images/admin/icons/favicon/apple-touch-icon-114x114-precomposed.png"/><link rel="apple-touch-icon-precomposed" sizes="72x72" href="/content/dam/xero/pilot-images/admin/icons/favicon/apple-touch-icon-72x72-precomposed.png"/><link rel="apple-touch-icon-precomposed" href="/content/dam/xero/pilot-images/admin/icons/favicon/apple-touch-icon-precom

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	210623
Entropy (8bit):	5.2657612513849426
Encrypted:	false
SSDEEP:	1536:V5GwaiVU9tn4Ae6epfSsGQMG23FkRWktjkf/FFJo6fcZGY/fn5+9+vTdjBEBrBzu:3GwaL9yLJRtjkF1fcZGY/fM9qkZnS
MD5:	F1293D9665CF5713B80B2FB0FAB4A84E
SHA1:	A8C21E2D2531F842F02B75A141B2123DF17C6A9D
SHA-256:	573C961FFC4C9ED4FFD7693640512ABCD9A31736CFD49B3EAE812DFBDB3060DB
SHA-512:	4545174F1495ED729AB956F9CFC5C67FC1549A2AA9E8D0F2D3841300F989781A51337769C2B5FB3C5E5B14B9F7A185D4CECF56D15D72AAA5EA6287B05450E826
Malicious:	false
Reputation:	low
URL:	https://edge.xero.com/identity/client/1.1.13/identity.js
Preview:	!function(){"use strict";function o(t,e){var r,n=Object.keys(t);return Object.getOwnPropertySymbols&&(r=Object.getOwnPropertySymbols(t),e&&(r=r.filter(function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable})),n.push.apply(n,r)),n}function c(n){for(var e=1;e<arguments.length;e++){var i=null!=arguments[e]?arguments[e]:{};e%2?o(Object(i),!0).forEach(function(e){var t,r;t=n,r=i[e=e],e in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}):t[e]=r}):Object.getOwnPropertyDescriptors?Object.defineProperties(n,Object.getOwnPropertyDescriptors(i)):o(Object(i)).forEach(function(e){Object.defineProperty(n,e,Object.getOwnPropertyDescriptor(i,e))})}return n}function M(e){return(M="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}function I(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (849), with no line terminators
Category:	downloaded
Size (bytes):	849
Entropy (8bit):	5.586934114885218
Encrypted:	false
SSDEEP:	24:hMiRO9Fq4UsreUNDJG+j/8G9PLCJGPHFBx:NOtnRJG+oG9zCJG/Fj
MD5:	8114C7B74247444B595A720F05CFD571
SHA1:	90AA5B08CFC660B66FAC39D6B412E2CE5F572878
SHA-256:	6E851E0B99EE7408D7F6A00A294A8E557E4CB2845462B13250417061F43573D0
SHA-512:	A10DEE6F8C4752EC9A73A543743E2147E8317C34033E9A5C37FC621212E7097B285E93948017244FCAB05452943F8AEC6BD141AFB191A0E176A6B68E0357477C
Malicious:	false
Reputation:	low
URL:	https://9401320.fls.doubleclick.net/activityi;dc_pre=CNSLyc6w24UDFa6rOgUd8DEN-w;src=9401320;type=pagev0;cat=globa002;ord=1;num=8823647633995;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;ps=1;pcor=872077554;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CNSLyc6w24UDFa6rOgUd8DEN-w;src=9401320;type=pagev0;cat=globa002;ord=1;num=8823647633995;npa=0;auiddc=*;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;ps=1;pcor=872077554;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals"/></body></html>

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (30984), with no line terminators
Category:	downloaded
Size (bytes):	30993
Entropy (8bit):	5.0011860238398675
Encrypted:	false
SSDEEP:	384:18x2ZB919XDLWT2LTzBX5C3pLH3pYEp+5y/tN0301DvG:qQB919XDL3JX5K3mED5lvG
MD5:	C84C22D7F7834797B0DEC8DAD2F0798C
SHA1:	C1A61534778B4BE259E81F0B30551284990F813E
SHA-256:	D52D7D1D16976A64176872FF784A0EA7BDC8EFB3782EB6D2A9927288FB8ED645
SHA-512:	FC4C6D11F6455DE3E961BDD3214DC19CE297ECCB8618B88C4A606D147EA36B31D5B0E7E38226AE3D010802E136C59FD130B74B03547D5CF514044AA9C50CC09A
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/_next/data/1712725399/us.json?next_id=1712725399
Preview:	{"pageProps":{"header":[{"heading":"60% off for 4 months when you purchase Xero. ","@type":"xero/components/content/offer-banner","@oldId":"content-offer_banner-1115512261","alwaysVisible":false,"link":{"current":false,"text":"Buy now","href":"https://www.xero.com/us/pricing-plans/","leadingText":null},"promocode":"SPRINGSAVE60","theme":"human","id":"SPRINGSAVE60","@id":"content--1734539736"},{"buttonText":"Change region","popoverDescription":"You're on our United States website. Change your region to see information and pricing for another location.","regions":[{"name":"Global","code":"zz","href":"/"},{"name":"Hong Kong","code":"hk","href":"/hk/"},{"name":"South Africa","code":"za","href":"/za/"},{"name":"Malaysia","code":"my","href":"/my/"},{"name":"New Zealand","code":"nz","href":"/nz/"},{"name":"Australia","code":"au","href":"/au/"},{"name":"Singapore","code":"sg","href":"/sg/"},{"name":"Philippines","code":"ph","href":"/ph/"},{"name":"United Kingdom","code":"uk","href":"/uk/"},{"n

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	777
Entropy (8bit):	4.459915643438751
Encrypted:	false
SSDEEP:	24:t4QCXRVeWJwuhsjofekmcmSW9glbwXf+7O:pSPph+2eBSW47O
MD5:	4A8C0BBA0F313D6DD21E55152608813A
SHA1:	31A467739D604145F8A10AE5476249801D179ED1
SHA-256:	D3AB16EE7748FFC46060A352E22BBF99B2CDF0485F3A9363099406FFB72BE411
SHA-512:	B20898A6CEF2DB7F245DEB29F1A56053DBF8DFE154911524513E30458F62B2F60060F5A3ABB108617A76D4D293B0F63E7841ADB8701AF72562EA3D5CAB496890
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/content/dam/xero/pilot-images/admin/icons/social-media/facebook-icon.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <defs>. <symbol id="ico" viewBox="0 0 17 17">. <path d="M17 2.42857V14.4815c-.1818.9894-.7273 1.709-1.6364 2.1587-.2727.1799-.6363.1799-.9091.2699h-3.3636v-.09-6.2063-.1799h2.8182V7.55556h-2.8182V6.2963c0-.44974.2727-.62963.7273-.62963H14V2.87831h-2.5455c-.1818 0-.3636 0-.5454.08994-1.27274.35979-2.00001 1.34921-2.36364 2.51852-.18182.44974-.18182.98942-.09092 1.5291v.62963h-2.0909v2.6984c0 .09 0 .1799.18181.1799h2.00001V17H2.45455c-1-.1799-1.727278-.7196-2.181823-1.619C.0909084 15.1111.0909091 14.7513 0 14.4815V2.42857C.181818 1.43915.727272.719577 1.63636.269841 1.90909.0899471 2.27273.0899471 2.54545 0H14.7273c1 .179894 1.7272.719577 2.1818 1.61905-.0909.17989 0 .44973.0909.80952z"/>. </symbol>. </defs>.</svg>

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14276), with no line terminators
Category:	downloaded
Size (bytes):	14276
Entropy (8bit):	5.2588608391759175
Encrypted:	false
SSDEEP:	384:qf0Kx2VMtxJjsCiof2vNwiL6HsQK5+J6g6ZSQbPWX0P:qf0Kx2V4xVsTof2vNwiLeK5+gg6ZSQbR
MD5:	5C2D33AFE15EF1EA0F7DFD3D77677165
SHA1:	F1D81AB13A4B3FEC6ABFE2D4994BAEF6B4D64C5A
SHA-256:	38068C6216D8CD0EBD227E767DEA7B85B17C68EE40A2B32C20CB879EA225D274
SHA-512:	FAE6AFD568572A43B54E2A579637155A1FEF7E12E3B3B2BB3048F935EC2CC7943FAD377C265F2EE71E5CB49C4C5048D1FC431766F5C3DB85C6AFB2A98242CE4B
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/860.03a8b7a5-1.236.0.min.js
Preview:	"use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[860],{3860:(t,e,n)=>{n.d(e,{IK:()=>g,wO:()=>b,$s:()=>E});var r=n(4402),i=n(50),s=n(4351),o=n(2177);class a{constructor(t,e){if(!t.onEnd)throw new Error("onEnd handler is required");if(!e)throw new Error("ms duration is required");this.onEnd=t.onEnd,this.initialMs=e,this.startTimestamp=Date.now(),this.timer=this.create(this.onEnd,e)}create(t,e){return this.timer&&this.clear(),setTimeout((()=>t?t():this.onEnd()),e\|\|this.initialMs)}clear(){clearTimeout(this.timer),this.timer=null}end(){this.clear(),this.onEnd()}isValid(){return this.initialMs-(Date.now()-this.startTimestamp)>0}}var c=n(385),u=n(7056),h=n(7956),l=n(7872);class f extends a{constructor(t,e){super(t,e),this.onPause="function"==typeof t.onPause?t.onPause:()=>{},this.onRefresh="function"==typeof t.onRefresh?t.onRefresh:()=>{},this.onResume="function"==typeof t.onResume?t.onResume:()=>{},this.remainingMs=void 0,t.refreshEvents\|\|(t.refreshEvents=["click","k

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10103)
Category:	downloaded
Size (bytes):	10104
Entropy (8bit):	5.25927595270407
Encrypted:	false
SSDEEP:	192:LfZB6p87rbM3DM15HYoFIqfTzvAVTwUZ/hRifBHbbQGPVT5hiyhLWS44qpK7ziK:LBB6+M3DMftzGifBHbc2VDisL14XC
MD5:	CD056B72A31972BE87DBBF0927DC2DFD
SHA1:	54C3779E6CFB48D5FDA25F3462B77A0216371FB0
SHA-256:	CFEE63B22A45F4F02E6E6BAA93AF19E68399A72F6EC390F2795E60DBD72988BA
SHA-512:	A765204469A9101444B26D8CFD9B33ECA1BF267A51F8C9E6D4D7866FDE033F433ED307F718343A926CFACC65EE99420C3A834F7E679E31692B8106775F48499C
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/up_loader.1.1.0.js
Preview:	!function(){"use strict";let c=null;const u=["debug","info","warn","error"];let a=u.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=u.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&&t<=a){for(var n=arguments.length,i=new Array(n),o=0;o<n;o++)i[o]=arguments[o];const[a,...r]=[...i];console[e](d.toUpperCase()+" - (TTD) "+a,...r)}}},e),{});function e(e){c=e}let o=null,n=null,r=[],d=[];function t(e){var t=e[0],e=e[1];if("setIdentifier"!==t)throw"method not implemented";f(e)}function l(){i();{let n=o.detectionEventType,e=(r=m(o.triggerElements),m(o.cssSelectors)),i=[];for(var t of e)t&&t.tagName&&"INPUT"===t.tagName&&i.push(t);a.debug("triggers ",r),a.debug("validInputs ",e),d=[],r.forEach(e=>{d.push(e[n])});for(let t=0;t<r.length;t++)r[t][n]=function(){a.debug("Detect event: ",n,"on element, ",r[t]);for(var e of i){e=e.value.trim();if(function(e){var t=/((([^<>()\[\].,;:\s@"]+(\.[^<>()\[\].,;:\s@"]+)*)\|(".+"))@(([^<>(

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	32340
Entropy (8bit):	4.985866177395701
Encrypted:	false
SSDEEP:	768:tQB919XDLs9Wn5dxphxfJ+BZ6KPh94SfC2vG:tQvr89WReSsh94p2vG
MD5:	AB75BFD8899B24789E58681D7532A6F5
SHA1:	0794C6E90A3650E06BC9A8B30674501EE542D96D
SHA-256:	0C738EA950AB6F26BF788BE4E2912EB8C7A2F9D5A844571E32F7D303C0CB7443
SHA-512:	58A151B2A455EA24AFAF365B383D3DABD87EB41CDBE098AE5D8B283EF9719A549B47F7CEA93143DA85F5AE7EFF850D445B74C4966204A05BF6FA6675E28B88E1
Malicious:	false
Reputation:	low
Preview:	{"pageProps":{"header":[{"buttonText":"Change region","popoverDescription":"You're on our United States website. Change your region to see information and pricing for another location.","regions":[{"name":"Global","code":"zz","href":"/pricing-plans/established/"},{"name":"Hong Kong","code":"hk","href":"/hk/pricing-plans/established/"},{"name":"South Africa","code":"za","href":"/za/pricing-plans/established/"},{"name":"Malaysia","code":"my","href":"/my/pricing-plans/established/"},{"name":"New Zealand","code":"nz","href":"/nz/pricing-plans/established/"},{"name":"Australia","code":"au","href":"/au/pricing-plans/established/"},{"name":"Singapore","code":"sg","href":"/sg/pricing-plans/established/"},{"name":"Philippines","code":"ph","href":"/ph/pricing-plans/established/"},{"name":"United Kingdom","code":"uk","href":"/uk/pricing-plans/established/"},{"name":"Indonesia","code":"id","href":"/id/pricing-plans/established/"},{"name":"Ireland","code":"ie","href":"/ie/pricing-plans/established/

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	31968
Entropy (8bit):	4.9909561547420225
Encrypted:	false
SSDEEP:	384:IQxZB919XDLWT27b/b09puK7pIcp/phpjphpiQ+BZ6tkPb50NhvG:VLB919XDLnY5dxphxfJ+BZ6KPiDvG
MD5:	8282D83C25A7A80E3854CBFDACF36E79
SHA1:	0494A0AF76DC1340A49A7D2D64A97E1B3D883D30
SHA-256:	8C656E735F717A8F3DB8AD420BD4ECE53705E600F958A7611B258EC2175902ED
SHA-512:	E5D7EAFAF3D492333F2ED55E008B673E425FBF6E18D6BF7ED3B2C37FAC3AF16FB9529A4915EA35920F564447BEAA88A03F11686AD4BBE6FEDF2DC01B87A87533
Malicious:	false
Reputation:	low
Preview:	{"pageProps":{"header":[{"buttonText":"Change region","popoverDescription":"You're on our United States website. Change your region to see information and pricing for another location.","regions":[{"name":"Global","code":"zz","href":"/pricing-plans/growing/"},{"name":"Hong Kong","code":"hk","href":"/hk/pricing-plans/growing/"},{"name":"South Africa","code":"za","href":"/za/pricing-plans/growing/"},{"name":"Malaysia","code":"my","href":"/my/pricing-plans/growing/"},{"name":"New Zealand","code":"nz","href":"/nz/pricing-plans/growing/"},{"name":"Australia","code":"au","href":"/au/pricing-plans/growing/"},{"name":"Singapore","code":"sg","href":"/sg/pricing-plans/growing/"},{"name":"Philippines","code":"ph","href":"/ph/pricing-plans/growing/"},{"name":"United Kingdom","code":"uk","href":"/uk/pricing-plans/growing/"},{"name":"Indonesia","code":"id","href":"/id/pricing-plans/growing/"},{"name":"Ireland","code":"ie","href":"/ie/pricing-plans/growing/"},{"name":"Canada","code":"ca","href":"/ca/

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=yjn0gup
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (47800), with no line terminators
Category:	downloaded
Size (bytes):	47800
Entropy (8bit):	5.582573856549628
Encrypted:	false
SSDEEP:	768:Epp9zNv2L9M8R4paKaBa6aTaxaCa1em8bMkk1nOgEnrxawgSeoBg1fRWEXQVLWcR:Wp9zB2L9M8KexbE11EnrxawReAg1fU1j
MD5:	E8FDA4642D059D5AB863A2F161E4B14C
SHA1:	EB17CC87827550FF1450134D2259A1D9F588C8D1
SHA-256:	D9CC0EBD53FFA911829F887E6E3FD24ED05B7076F839CB2239F7AAEDB2B5BDCA
SHA-512:	3B4FE19C739A805DA7433F8DFEBAC61EE5FD07797CAA5C76B9B92F5FB675B16D0A370F39ACFDC55639D7A287E5D34FB4E94B64B99D164C8127D8A72A3AE7E320
Malicious:	false
Reputation:	low
URL:	https://www.dwin1.com/20923.js
Preview:	var AWIN=AWIN\|\|{};AWIN.Tracking=AWIN.Tracking\|\|{},AWIN.sProtocol="https:"==location.protocol?"https://":"http://",AWIN.iScriptCount=0,AWIN.Tracking.device9Url="https://the.sciencebehindecommerce.com/d9core",AWIN.Tracking.flags={allowNewAWCCookie:!0,allowNewGCLIDCookie:!0},AWIN.Tracking.setFlag=function(e,n){AWIN.Tracking.flags[e]=n},AWIN.Tracking.getFlag=function(e){return AWIN.Tracking.flags[e]},AWIN.tldDomains=["com","org","edu","gov","uk","net","ca","de","jp","fr","au","us","ru","ch","it","nl","se","no","es","mil","gw","ax","wf","yt","sj","mobi","eh","mh","bv","ap","cat","kp","iq","um","arpa","pm","gb","cs","td","so","aero","biz","coop","info","jobs","museum","name","pro","travel","ac","ad","ae","af","ag","ai","al","am","an","ao","aq","ar","as","at","aw","az","ba","bb","bd","be","bf","bg","bh","bi","bj","bm","bn","bo","br","bs","bt","bw","by","bz","cc","cd","cf","cg","ci","ck","cl","cm","cn","co","cr","cu","cv","cx","cy","cz","dj","dk","dm","do","dz","ec","ee","eg","er","et","eu","f

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 887x710, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	24136
Entropy (8bit):	7.992783251187283
Encrypted:	true
SSDEEP:	384:+RYyUdF8mHTY9EK2ubSb+TbzJ9+Mv3OxqOjlZ99npwdkM9wwKbOHH4BKPeaXDt3:CYyDsc9EHqNTX7PAqEpwdkRbOHH40x
MD5:	AC6D62930BF74C68363D9C21B3AE461F
SHA1:	FD9ADD445CC704C25536C914E821D634696CB6F8
SHA-256:	19C35058E342E2D2DCE58666ECC81831F657187FA882BF8432D79F86CBCACEF4
SHA-512:	D3293DF232B42C00D876C98AEC2AA8931FCC8BB3B519194277DB695C87C7798E072FE85786BC684002EC1AEC993E33EA70F82EB6E00F81E1C28ECDE4898A9821
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/content/dam/xero/pilot-images/people/construction-brad-dodds.1646877524391.jpg
Preview:	RIFF@^..WEBPVP8 4^.......w...>.p.R..<..3.....I?y...O.>.(i.:...m.............v..U.]...3.....4.X0..x..~.z.....l._....^.~...z..d...'..G..^..=@?.za.....\.........7......._......j......3-..?p.&..O.......m.....L.b.~}U.&O.#.XP..%..z.N....\.\.+1^.....wZ......]...j).Y#...6^...Cl.!A...dh{....@..a..+...0....M..D1R...D^..]m)...5WA.-8.{.....i..+H...\..F..q.O........].....Zc.#?..?...B9...w...5....^^tWG.....D...K...Z_.n./xy.2....S.=:;.tA..Q.q......r.....cGH...J....l...%p{.s.F#....=......ZL.Hs%2'E._.v.t.e..........<..)...\|...`.9@..S.].....2`..#"..J.})......x.......3.i....F.:N...%.%tS.;..v.FN...>.j.HH:t..J(.....O..._......w.}.....&...n.5.l..a.,...\..bQ<R.8.N...}=..C%..r..GY..........Y..h.Fv.?.B...:A..........6.2..L.....1.B....U....Hh6........o..la.+x@u..)$.....c...?.L.BDcoP\|..L.....Q.s.jJ.n..........\|....k.:F..p.lO.i..Dq.xz.4.3.B....y.L"...l....?M.;..r.....i..6..[b.i.d.).~.z........p...6,`.....A5i..v..i.ya.H.'&.x.@K._..h.2.f.~.......XB5X1....

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7789)
Category:	downloaded
Size (bytes):	8914
Entropy (8bit):	5.355051563057735
Encrypted:	false
SSDEEP:	192:4bnBSH54wHePBCUoqkYPiJlipfgKiL1fIOu8yLftuh:4bnBbseWYPUurLftuh
MD5:	3BEDB9C2DD6CB7B28CF8509276DB49F3
SHA1:	600F49DC59D5EB8E9F35332D6541A312C9B3AFE2
SHA-256:	A388D8EC867665556BCF70E4A9E7C2B5A07CD51DBF8873E61FE7EA17FD60EFDA
SHA-512:	3A3F6FBDF001D0010A7075388356BA3FE565408F2DC70B0783C8233F2592B35ACF25D2593F5C988B0AABE46BE7F025486D5C1C86E9EBDC0EA28731C231B94982
Malicious:	false
Reputation:	low
URL:	https://static.hotjar.com/c/hotjar-3197823.js?sv=6
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":3197823,"rec_value":1.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":false,"anonymize_digits":true,"anonymize_emails":true,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":false,"suppress_location":false,"user_attributes_enabled":true,"legal_name":"","privacy_policy_url":"","deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[],"integrations":{"optimizely":{"tag_recordings":false},"abtasty":{"tag_recordings":false},"kissmetrics":{"send_user_id":false},"mixpanel":{"send_events":false},"unbounce":{"tag_recordings":false},"hubspot":{"enabled":false,"send_recordings":false,"send_surveys":false}},"features":["ask.popover_redesign","client_script.compression.pc","error_reporting","feedback.embeddable_widget","feedback.widgetV2","settings.billing_v2","s

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	961
Entropy (8bit):	4.335852603689657
Encrypted:	false
SSDEEP:	24:t4QboLDqqHCfg/VtEAHqxJx2BSHNfieSX95rxhd7SNgO:pb0fHCg/Eoox2Et6eSFhd2OO
MD5:	899EDAE44877FBE0F00900319F56B99C
SHA1:	9B33DA58C16165D71574F5A0EFEF5E7FF1021DED
SHA-256:	C10F78A021974B7CBC3FE1211007D5B832630390AD1BD295F4B145177D2952BF
SHA-512:	20506B3E8FC320D6176CE66777128960F8DE488F287527965082B2E1481E116323D728E72C508E88B47F31761E6676EA3676CC63BBA9F4FE92F307B3CEC10128
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/content/dam/xero/pilot-images/admin/icons/social-media/linkedin-icon.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <defs>. <symbol id="ico" viewBox="0 0 19 18">. <path d="M7.16016 17.0336v-.1774V5.58804h3.81524v1.50833c.0887-.17745.2661-.3549.3549-.44362.621-.79853 1.5083-1.24216 2.4843-1.33089 1.1534-.08872 2.2181.08873 3.1054.79853.8872.62108 1.3308 1.50834 1.597 2.57304.0887.3549.0887.79853.1775 1.24216v7.18681h-3.8152v-.3549-5.6785c0-.4436-.0888-.8872-.1775-1.33086-.3549-1.33089-1.9519-1.86324-3.0166-.97598-.6211.44362-.8873 1.0647-.8873 1.86324v6.477c-1.0647-.0888-2.30686-.0888-3.63774-.0888zM1.30469 17.0343v-.2662V5.76618 5.5h3.81518v11.5343H1.30469zM1.03795 1.68578c0-.08872.08872-.26617.08872-.3549C1.39284.443627 2.28011 0 3.25609 0c.79853 0 1.50832.354902 1.86322 1.15343.62108 1.33088-.26617 2.66177-1.68577 2.75049-.35491 0-.70981 0-1.06471-.08872-.7098-.17745-1.15343-.70981-1.33088-1.41961 0-.08873-.00001-.08873-.088731-.17745.088721-.17745.088731-.3549.088731-.53236z"/>. </symbol>. </defs>.</svg>

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	21168
Entropy (8bit):	7.979713414394185
Encrypted:	false
SSDEEP:	384:rPn1HyVlvFXdZ1KeEATf123+u5ofyJX6u/KDIBK2pYqWeS9sIPAu45BVGbI/a:jn1qzXdZfEuN23+mofqyDR2p4fByV8IS
MD5:	004FE36BE02ECA52189191E1FDF1672A
SHA1:	8778E8E604E7888B999B4A78FFFCC6F2AF6B647C
SHA-256:	E0790101557AE45886BA9393F49268F773449053D6791548718799D66B3AB319
SHA-512:	F730A0413B646EB6F3F42A18C76EF4AA3F97DD09B8C7BA9F73200C61691E6A12620B83B820D67435C5B5420FA1B76D3D244B7C8E346447C8F58FA4B9A4B2B1C6
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/content/dam/xero/pilot-images/people/accountants-and-bookkeepers/abk_partners_hero2.1687990350369.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@...................I................H....8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe.......x...H....pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe.......x...H....pixi............ipma..........................iref........auxl........P.mdat.....f'z;..2.....$P...<j..a.W]w..7.l...eI.P..E....`..9S.WWQ9...V2..._.(.l.l#...i$m..E..:Z.cQ..Zu.....5.l=L.&.....9..LfW....Lhs...<."..I...V....M........7..1.G..eJ.0D~_..v.9.S.}$.J.....G^x.,.X.G...]......T..`c...K..x...).....6..,..Wt.@~F[....Ut.&..r..b.mW.......j...q..a._....!$..y.....m...^.i.Gr......g.?..dRj...o...9 .NE..wp.`!$.aX.`.\|W.8...0.n..! g..x..s..eZs.@*Y..Y.1<y.........h5..,.....c......>.i ..Fd.......V..X....]...w..>..........L.-g.).^.."=.0.S7tj3)...R3;E.}M..$.H.).b.vE.t.$....0.X/.....:.g...G.^[7C..P...K?..',..z..!

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713979900861&id=t2_ewwvmnuh&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=cb2d649f-3168-41a8-8246-f3b3ccc5e846&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_72595d5a&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9401320;type=pagev0;cat=globa002;ord=1;num=2659309086237;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2F;ps=1;pcor=225406472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F?
Preview:	<html></html>

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 35428
Category:	downloaded
Size (bytes):	11457
Entropy (8bit):	7.9808081927848935
Encrypted:	false
SSDEEP:	192:U0tnBBMdpkFPe/dQoJLOKLDs62Ow0yvF6csoCIBT0DVP5WpUlElZGcj:UAXMd6teCnUDs3Ow0XgyZRsUlE/Lj
MD5:	549D63DC73C5770CA6C7ACD1ABDEAAA1
SHA1:	FB9655A72C0F8CEA5DAB9693F1BF14048023AAE2
SHA-256:	53BCEF9ED6F1D7D241585FF81D0B45E4251C7962EAE0E847088C21F9FA1C24CD
SHA-512:	5A61A05E8B7474A36DCE1D0AE3AA307D720D476503498921E99617621BBACBDF942D24C7EA4E3CD6786FF1E45847A2BD50C29D6AFE841947DAE7869C06B420EC
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/vendors~tooltips-modern.8e0f853f.js
Preview:	...........}ms.6.._.y:....9I..ql.IO..q.&..NJS.."U...Z..ww.. E9Io.9..3..I.c..X..u._y..4H;..j..7..Et.D.H.x..S.?_d.....\|.N....G.....GO.>vm.2..\|g-R..fI.gVo.%{.KX........g.,...1.\|8..U.?.-..:..w?.......~........._..x..&...8..s'..3..LD..x..S..q..b1,t)VE.C(Q~Z..Q.M.......5...l.8.2/.Rl..5.d..q-V.!...t...;.Ycw/.H.7zS....#{.7h..C.....y...5./...q..c9Z..3.B..F[~...i...#.^..W.R..V_......x.6`.w.q.....f+.~.V...[........d3..DN._.......dll.2.S+.Tp.H.rY.U&?.3..6._...0....o....,X...'..............i..DYt0.....VqX..jQ..#..n5.="]..Pp.\..]....E...\..s.....S.&zU.3xqI=.._^^..8G\|.5.pH..>.8...H.F@o.....i..F...`J.N..,..R....O..w..G.v...ut18.....~..^......../1.../.......z......tp.u...N...#.h...k.....q...vp...z~...y..8#............t...[......Y.,H$.Q.O..<.^l.....T.Zd..m..L.`.m..S.l.3W.....,.2q.v.\|......n".E..ye..5&G...#....7../.0..Q....Z..>...&.....y.o..p._7..YU....................l...m..~" .i..!i.3...RHGV+......g{.u-...$:i.........p..7..y..Da...U..$..0.2n.(.t..[....

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 39243
Category:	downloaded
Size (bytes):	11216
Entropy (8bit):	7.982546418474931
Encrypted:	false
SSDEEP:	192:8hrg3oYWnxKUgzCi0SeLJHs+R9HLQDqnyrBUgALTbEqW66SqgLTAI8Y9hce4:8hrgYYWnxKTQXbQDZwWtgTD9a
MD5:	E403530C0766F12C3512FC8BFD16778A
SHA1:	A1EBB0B1DD30F58AD7DE9521D62D60F8769EA605
SHA-256:	2FC60533DB4396A9965B372BC69661A60627CC76748D0A522236586DEF859201
SHA-512:	6F1CB5634AAA0DB4DBAB32A38E312B64D9B696C44AACE0804D393B288958836C7066520404AA5B35935CF35BF7607981E3BFA6096F2DD36A3BA3303389C12D73
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/pixel.js
Preview:	...........;ks.....N8......k]....<.l.XJ..P..+.8.....%.....w?.T..t...kzzF..d.;....P..G..N ....&...X...w;,8."H....8..B....q...u2fR,:Z..U...`zP..\|%`+.#\m...+..PU....qa..na...9..[)y%..V.ga.X.u'p...t[.kk.....a.. {K.-M"...?.A.G.z......#..su.s.............f.j[.D..1.m95.I ..P.....3!.,..X.c....^...jLl]..l.u.O..#.]..V[o.z;B..T...<x..2..8...Ml'..:......Q7.e...7Ec.I(n.x.V.......D.H$(.F9.&z....."{.XTY..5..C...y.wg...?.Yd....i{...JC...'.ZD..j....{.....b=#..q..B-...\|4....+..cg.....6.Z.;...l.v..c9...\|r..3-..S...w.\|.#.H.{)T......T.ah?..M.e.....C...S.w6...4=..&s][j..[.y.<.c.;.D.r...-...........J...v.6_._-.p.....s...>\|.N.......\|...u.\|..-.h.@....R_.A....4..i..D2._......j..O...`6u....v.M..i.Rk.}.H...v.\0.,...QI.I.. .u.....-....3;.>..a..a..*...V,..:........rW.Q..W..f.......J..p.Z`.r.VC.&..8X.LXf...4r......L.uf751......$...-"...[D.....Z...8.c/0.Y.h.f... .9.......,B.?.V.L...?U.S]@$~....y.g...DA."a`.q.-....M.<z.>.cA...........5.3..&..l.G...%]K...^..Q;.#.N.EB.tJ

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979910827&i=gtm&dwt=1&ive=blur
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1023673485?random=1713979877268&cv=11&fst=1713979877268&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44m0v883646161z8830923470za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&label=v0RbCOHw2eECEI2JkOgD&hn=www.googleadservices.com&frm=0&tiba=Manage%20Invoices%20with%20Xero%20Accounting%20Software%20%7C%20Xero%20US&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1776741404.1713979872&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0
Preview:	<html></html>

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CNSLyc6w24UDFa6rOgUd8DEN-w;src=9401320;type=pagev0;cat=globa002;ord=1;num=8823647633995;npa=0;auiddc=*;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;ps=1;pcor=872077554;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	421
Entropy (8bit):	4.7435946287851225
Encrypted:	false
SSDEEP:	12:t4Pn4WY/ljmzTWkxR35cq9Tixc3vZNDe4A5:t4QLj8TWkx3vLXO
MD5:	2FA848925DD276C5D799963EB1A07C7D
SHA1:	D3BD8D0E4AE20653027B528AFDBF35E39268FF6B
SHA-256:	9EDAE985D631416A45E7247A93FB33B2D8362E7004EF053F2973F2826BEA0954
SHA-512:	00C8C7ED20F82C2A6A3610C40B062039FCAF9599ADEEA6DD48DD154807B5435441247BB9AC68C556EB18ABE2FD292632E5C64E629B37DE5FC46EF27387C87AF6
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <defs>. <symbol id="ico" viewBox="0 0 30 30">. <path d="M17.4979 13.3155L25.3156 4H23.463L16.6749 12.0885L11.2532 4H5L13.1986 16.2313L5 26H6.85265L14.0211 17.4583L19.7468 26H26L17.4974 13.3155H17.4979ZM14.9604 16.339L14.1297 15.1211L7.52019 5.42965H10.3658L15.6997 13.2509L16.5304 14.4689L23.4639 24.6354H20.6183L14.9604 16.3395V16.339Z"/>. </symbol>. </defs>.</svg>

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79
Entropy (8bit):	2.716326985350135
Encrypted:	false
SSDEEP:	3:tQTltaL5UJjV9GjUJjVE:6XG5UJjGjUJj2
MD5:	8E3DB10AF5A3E1CABE7AA67674E21188
SHA1:	E2314B0038DF2D49DDBE461F33A6797D4586CDE0
SHA-256:	87ECD5BABD6FD9F4F6F796D745AA38751FAF3985E3B55F87A2F53E506FE07362
SHA-512:	A4F136016F4591E021D54F06141896581371828BF02F662A050B2A36567DFEC6068A4C758815D481E01BD7D68692329B5EE228C854AB2D85246D05B56692FB09
Malicious:	false
Reputation:	low
Preview:	[71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (727), with no line terminators
Category:	downloaded
Size (bytes):	727
Entropy (8bit):	5.6398955269929765
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHeJ8VNe4U/2eFM1n28t0DK0GTiUMGT2IWaVGsFsYBWhr:hMiRO9l8q4UBFMZL0xC8G9PV5Dq
MD5:	E1F381DBA862A4633C9838B39A2BB8BA
SHA1:	F6A30A7086116C0D3B1C348F4DC2D6E38D8DF56B
SHA-256:	502121B3D4559C873EA9B43CF61212217329823FA8DC85AE0C7C9FD8785AC3E3
SHA-512:	2FB75A958B56957F3B27D266211DFF04B01319587F0C3882F7E564B68FFA3319503047C7ED3E8F96DABAFA4C10A931BD84E79940599BA5FE7D011039EC03A10F
Malicious:	false
Reputation:	low
URL:	https://9401320.fls.doubleclick.net/activityi;dc_pre=CIb5jOGw24UDFd1YCAQdJkEMrg;src=9401320;type=pagev0;cat=globa000;ord=1;num=8983422946655;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=671166263;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CIb5jOGw24UDFd1YCAQdJkEMrg;src=9401320;type=pagev0;cat=globa000;ord=1;num=8983422946655;npa=0;auiddc=*;u1=%2Fus%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=671166263;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F"/></body></html>

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	140120
Entropy (8bit):	5.261892554284658
Encrypted:	false
SSDEEP:	1536:Gdvp4h1iZbjR4VWsiQ9hUfse0xCOCfWf/xA9X9GAkoifpUOeHU69NGeGUQqB:GdkFfUIoO43VOe06gqB
MD5:	A19B629DA6B7DB08469C64F137DE782E
SHA1:	4C0F0F6ACF541B9F6304369C99A13DBBFBFAFDB6
SHA-256:	4A31BF6F96ABE93777E24FB23D2D54AB51492AECDCFCDA71E03739EDD27C4913
SHA-512:	876E761C57E29638A8C22D84F989C982E70365303D9C9B5C9EB31E76527210039F109D63AAD3F17334BFE15561B56E58A99B373827D6075A4FA2B3A707F4FC42
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/_next/static/chunks/framework-6751a58a23a01658.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[774],{4448:function(e,n,t){var r=t(7294),l=t(3840);function a(e){for(var n="https://reactjs.org/docs/error-decoder.html?invariant="+e,t=1;t<arguments.length;t++)n+="&args[]="+encodeURIComponent(arguments[t]);return"Minified React error #"+e+"; visit "+n+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var o=new Set,u={};function i(e,n){s(e,n),s(e+"Capture",n)}function s(e,n){for(u[e]=n,e=0;e<n.length;e++)o.add(n[e])}var c=!("undefined"===typeof window\|\|"undefined"===typeof window.document\|\|"undefined"===typeof window.document.createElement),f=Object.prototype.hasOwnProperty,d=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\u

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/rubicon?gdpr=0
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23553)
Category:	downloaded
Size (bytes):	23678
Entropy (8bit):	5.427979461148156
Encrypted:	false
SSDEEP:	384:EqhROTku6loITotJt0++gdrDRvDe6AuXlnqkxXnATMqBpbKRUQ7LPxxGTyA4tt/:EJTku6lYt0mg6/qYATdBpbyxxkO/
MD5:	6EF104090AB8672EA053D27FAAFD4EE9
SHA1:	D7217A3C3A2F5D363396E28C8AE2B96DF1C2D3F5
SHA-256:	45A4C240A17A4D5F925EF0E125B86D882C6AD7549028D9CBF6F4F06FD1DD897D
SHA-512:	92205501B1B01F4173A16A57AAB0D847C9F574FC1A44A14D62E84AEC7EBCCAACC399EEC6823ADF082E7EBE766EBC8BA8C580E69C73CC7203D8C4C22B3660F6E2
Malicious:	false
Reputation:	low
URL:	https://secure.quantserve.com/quant.js
Preview:	/* Copyright (c) 2008-2023, Quantcast Corp. https://www.quantcast.com/legal/license /.!function(){"use strict";var e="qcSes";function t(){var e=r();return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,(function(t){var n=(e+16Math.random())%16\|0;return e=Math.floor(e/16),("x"===t?n:3&n\|8).toString(16)}))}var n=function(){try{if(!window.sessionStorage)return t()}catch(e){return t()}var n;try{if(n=window.sessionStorage.getItem(e))return n}catch(e){return t()}n=t();try{window.sessionStorage.setItem(e,n)}catch(e){}return n}();function r(){return(new Date).getTime()}function o(){return new Date}function i(e){var t=new Date(2e3,e,1,0,0,0,0),n=t.toUTCString(),r=new Date(n.substring(0,n.lastIndexOf(" ")-1));return t.getTime()-r.getTime()}function a(){return Math.round(2147483647*Math.random())}/qcdbgc=1$/.test(window.location.toString());function c(e,t){"undefined"!=typeof console&&console.log.apply(console,[e+" "+o().toString()].concat([].slice.call(t)))}var u=function(){for(var e=[]

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	211270
Entropy (8bit):	5.539498513659552
Encrypted:	false
SSDEEP:	3072:TQhzgNSNow8VNPb1q8jF1+TYc20DCSY1KGowDDbolWDe5L+aVsQCL+R:MhewMNPdqO3De5LfV9CLS
MD5:	5607B391B6BECD738208FCDCC706D26C
SHA1:	3325714C662560DF02FC5A89EEDB69B61AE9D73F
SHA-256:	52A33352714EE803BF1FCDF8871FC80C2467253D55421EB295C89080BD6C5B9A
SHA-512:	0028770E3132C75E7FEA19F1ACF8893D6612A5E8EE07582E783165A868F3C38775A5251FE589E8D162FE640CBB455778CC2859227466D41FAAAAC40BBE8AC3EB
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=DC-9401320
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":1,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":4},{"function":"__r

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:RFREYDA:jRLA
MD5:	A454F56F4DEF70095E30E7676718042E
SHA1:	DB6A025FAFED1D1AD75A6D8BBA133D473ECC58B0
SHA-256:	3DAE93A05EDD9DCFC1864B87178A31E0BFA93E1A9B1C486C6E9CBF73CAE87862
SHA-512:	70CDF04204F3D1DFFEAF7F925EEBF04EA720735625A3BE0375E4AAAF9030C062CE6CCE84607483B282D3F9DA3482E920F17C74E226961156B1612F64814E0365
Malicious:	false
Reputation:	low
URL:	https://tracking.g2crowd.com/attribution_tracking/conversions/4647.js?p=https://www.xero.com/us/pricing-plans/&e=undefined
Preview:	// Tracking File

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=890f9a2a-f5c2-415f-82e9-09a1f0694ac9&event=PageView&ts=1713979879966
Preview:	{}

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	32486
Entropy (8bit):	4.987386893886161
Encrypted:	false
SSDEEP:	384:wqxZB919XDLWT2Fc7/bx9puK7pIcp/phpjphpiQ+BZ6tkPJhRGF0NnvG:/LB919XDLJq5dxphxfJ+BZ6KPTRFdvG
MD5:	77FC11FA1986B4677BF3AA32C67427F3
SHA1:	1DD7FD9C65774EEC65B3C15795CE28B320852F43
SHA-256:	DE09B8EA91D88B0A1BD894BE0CFBF8E54028FEA3381761613CE257B583C191B1
SHA-512:	A0286714518425A520BC428D1F53A94987FFE2CCA031D96F71915ED912E16B4C7A8847EA0021082F12E9789B5F252519DFED79E72D41634C72AADA93F5A1BEA4
Malicious:	false
Reputation:	low
Preview:	{"pageProps":{"header":[{"buttonText":"Change region","popoverDescription":"You're on our United States website. Change your region to see information and pricing for another location.","regions":[{"name":"Global","code":"zz","href":"/pricing-plans/early/"},{"name":"Hong Kong","code":"hk","href":"/hk/pricing-plans/early/"},{"name":"South Africa","code":"za","href":"/za/pricing-plans/early/"},{"name":"Malaysia","code":"my","href":"/my/pricing-plans/early/"},{"name":"New Zealand","code":"nz","href":"/nz/pricing-plans/early/"},{"name":"Australia","code":"au","href":"/au/pricing-plans/early/"},{"name":"Singapore","code":"sg","href":"/sg/pricing-plans/early/"},{"name":"Philippines","code":"ph","href":"/ph/pricing-plans/early/"},{"name":"United Kingdom","code":"uk","href":"/uk/pricing-plans/early/"},{"name":"Indonesia","code":"id","href":"/id/pricing-plans/early/"},{"name":"Ireland","code":"ie","href":"/ie/pricing-plans/early/"},{"name":"Canada","code":"ca","href":"/ca/pricing-plans/early/"}

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	79
Entropy (8bit):	3.9905520344529988
Encrypted:	false
SSDEEP:	3:U3KTDW3MiLLUHcjVXlVBnWJ:H6NLgHWXZnWJ
MD5:	708FD37768AAAC4FAC6B11B43BC538A3
SHA1:	A47D5B07394D4447EAFE830DBC6A4ACBCB40CF33
SHA-256:	F2205C30AB0D0A86CD0D715CF483BAFD550C0EA9D4DDB24E2C182F1D7F024144
SHA-512:	6BED68D78AC26DA769975B5C20D389173B36A1301CA1F118D8EF362DD548DDFF696AC84ABF774882982C4CC61B9F0D337A57BB4FA4E1C4C776F0D901152F3116
Malicious:	false
Reputation:	low
URL:	"https://bam.nr-data.net/1/bd61b676be?a=1134228971&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=6488&ck=1&ref=https://in.xero.com/m/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe&be=1612&fe=4778&dc=4760&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1713979837278,%22n%22:0,%22r%22:4,%22re%22:1054,%22f%22:1054,%22dn%22:1054,%22dne%22:1054,%22c%22:1054,%22ce%22:1054,%22rq%22:1057,%22rp%22:1425,%22rpe%22:1626,%22dl%22:1430,%22di%22:3108,%22ds%22:4760,%22de%22:4760,%22dc%22:4778,%22l%22:4778,%22le%22:4782%7D,%22navigation%22:%7B%22rc%22:1%7D%7D&fp=3604&jsonp=NREUM.setToken"
Preview:	NREUM.setToken({'stn':0,'err':1,'ins':1,'spa':1,'sr':0,'srs':0,'st':0,'sts':0})

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65103)
Category:	downloaded
Size (bytes):	209939
Entropy (8bit):	5.366006952026174
Encrypted:	false
SSDEEP:	3072:1P6RsHIwj0PdUgdbs8kvdYkODdlm9AZoZXs+eSc:1msHIxHMvd8dtZoZDc
MD5:	FA4C76A7FDE62B18054CF7EB8E946012
SHA1:	B20150066A879D2B78DD3D4908F4ACD148EE66F8
SHA-256:	09EBD7F407439990AAC227E70DA23E1A819E8E30282928E324370805F480BEC4
SHA-512:	D72F5D078675C7ADBF6BFC1980712542A10668AEC9163137A2EC70A5E117F8FFDD0F06A6C4C6636E35C04F2754F33D40C65C59D452AFAA8EA4A382F24F200ABD
Malicious:	false
Reputation:	low
URL:	https://s.go-mpulse.net/boomerang/DXWKX-5MGMF-RCUC3-85Q7G-8PZ8A
Preview:	/. Copyright (c) 2011, Yahoo! Inc. All rights reserved.. * Copyright (c) 2011-2012, Log-Normal, Inc. All rights reserved.. * Copyright (c) 2012-2017, SOASTA, Inc. All rights reserved.. * Copyright (c) 2017, Akamai Technologies, Inc. All rights reserved.. * Copyrights licensed under the BSD License. See the accompanying LICENSE.txt file for terms.. /./ Boomerang Version: 1.720.0 b17966bb92f8ac2ddcda4ac1d9c0aaea6d2eda7b */..BOOMR_start=(new Date).getTime();function BOOMR_check_doc_domain(e){if(window){if(!e){if(window.parent===window\|\|!document.getElementById("boomr-if-as"))return;if(window.BOOMR&&BOOMR.boomerang_frame&&BOOMR.window)try{BOOMR.boomerang_frame.document.domain!==BOOMR.window.document.domain&&(BOOMR.boomerang_frame.document.domain=BOOMR.window.document.domain)}catch(t){BOOMR.isCrossOriginError(t)\|\|BOOMR.addError(t,"BOOMR_check_doc_domain.domainFix")}e=document.domain}if(e&&-1!==e.indexOf(".")&&window.parent){try{window.parent.document;return}catch(t){try{document.doma

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79
Entropy (8bit):	2.716326985350135
Encrypted:	false
SSDEEP:	3:tQTltaL5UJjV9GjUJjVE:6XG5UJjGjUJj2
MD5:	8E3DB10AF5A3E1CABE7AA67674E21188
SHA1:	E2314B0038DF2D49DDBE461F33A6797D4586CDE0
SHA-256:	87ECD5BABD6FD9F4F6F796D745AA38751FAF3985E3B55F87A2F53E506FE07362
SHA-512:	A4F136016F4591E021D54F06141896581371828BF02F662A050B2A36567DFEC6068A4C758815D481E01BD7D68692329B5EE228C854AB2D85246D05B56692FB09
Malicious:	false
Reputation:	low
Preview:	[71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14879), with no line terminators
Category:	downloaded
Size (bytes):	14879
Entropy (8bit):	5.217852889913246
Encrypted:	false
SSDEEP:	384:J+Ewl8QBLREOSUV0VdcQnMVBOpgXWJR189IN59qo7X0+:J+plnSUjQQOpgXWJRdqoQ+
MD5:	01E96E9FF5C360298D13581AD38E60A8
SHA1:	01EC886B3FA7DA345755F5C8DB0FA4880FA3AD93
SHA-256:	6DC5A41A72F6C1B4148D0629284183A4DB42A28FEF188FF4D55D5872D0EA3561
SHA-512:	107B237D1ADE6F2DD6D4D3AA852DA4A09ADCA06EDD9A5195A6EA4996FD010688E748AAD0513DD8C84E3B0A563FA8D88E431C39C8E7573958BC606D631791C797
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/page_view_timing-aggregate.bd6de33a-1.236.0.min.js
Preview:	"use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[348],{2573:(e,t,n)=>{n.d(t,{o:()=>c});var i=n(4247),r=n(1117),a=n(8673),s=n(8310),o=n(5763),u=n(3860);class c extends r.w{constructor(e,t,n){super(n),this.endpoint=e,this.opts=t\|\|{},this.started=!1,this.timeoutHandle=null,this.aborted=!1,this.harvest=new a.M(this.sharedContext),(0,s.L)(this.unload.bind(this),(0,o.Mt)(this.sharedContext.agentIdentifier,"allow_bfcache")),this.sharedContext?.ee.on(u.wO.RESET,(()=>this.runHarvest({forceNoRetry:!0})))}unload(){this.aborted\|\|(this.opts.onUnload&&this.opts.onUnload(),this.runHarvest({unload:!0}))}startTimer(e,t){this.interval=e,this.started=!0,this.scheduleHarvest(null!=t?t:this.interval)}stopTimer(){let e=arguments.length>0&&void 0!==arguments[0]&&arguments[0];this.aborted=e,this.started=!1,this.timeoutHandle&&clearTimeout(this.timeoutHandle)}scheduleHarvest(e,t){this.timeoutHandle\|\|(null==e&&(e=this.interval),this.timeoutHandle=setTimeout((()=>{this.timeoutHandle=null

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	94
Entropy (8bit):	4.19215926745789
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHjzlRQMBWHjV:YGKY6ZBAJ70MT6ZBA9RZBAB
MD5:	2D12C1129F6FF37622D03DB4A2A5949E
SHA1:	BC44653C4A06E671CE423600755FED86FAD8EC24
SHA-256:	078F3DD88E751C3C421B2007E1CB27BCB65A95DAF278BD25DE81BA7B2BF3C4E4
SHA-512:	420AFB8CEB53E68C593A1242DB304C4F551C23A3C181B4D4EEBD2B74E3EB9740C803C182FFB646AF57D2E778E9D802D8A44E5C0CB9FF11FA272D1E9C0F2B0D36
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/saq_pxl?uid=IZi8ik6wpN0HnLyT9lcuoQ&is_js=true&landing_url=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&t=Pricing%20Plans%20%7C%20Xero%20US&tip=b73IWEe6fWW6DOIZ6lZVCY5tgJGOWCralUxuaafXOlo&host=https%3A%2F%2Fwww.xero.com&sa_conv_data_css_value=&sa_conv_data_image_value=ffd8ffe000104a46494600010101006000600000ffdb004300080606070605080707070909080a0c140d0c0b0b0c1912130f141d1a1f1e1d1a1c1c20242e2720222c231c1c2837292c30313434341f27393d38323c2e333432ffdb0043010909090c0b0c180d0d1832211c213232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232ffc00011080001000103012200021101031101ffc4001f0000010501010101010100000000000000000102030405060708090a0bffc400b5100002010303020403050504040000017d01020300041105122131410613516107227114328191a1082342b1c11552d1f02433627282090a161718191a25262728292a3435363738393a434445464748494a535455565758595a636465666768696a737475767778797a838485868788898a92939495969798999aa2a3a4a5a6a7a8a9aab2b3b4b5b6b7b8b9bac2c3c4c5c6c7c8c9cad2d3d4d5d6d7d8d9dae1e2e3e4e5e6e7e8e9eaf1f2f3f4f5f6f7f8f9faffc4001f0100030101010101010101010000000000000102030405060708090a0bffc400b51100020102040403040705040400010277000102031104052131061241510761711322328108144291a1b1c109233352f0156272d10a162434e125f11718191a262728292a35363738393a434445464748494a535455565758595a636465666768696a737475767778797a82838485868788898a92939495969798999aa2a3a4a5a6a7a8a9aab2b3b4b5b6b7b8b9bac2c3c4c5c6c7c8c9cad2d3d4d5d6d7d8d9dae2e3e4e5e6e7e8e9eaf2f3f4f5f6f7f8f9faffda000c03010002110311003f00f7fa28a2803fffd9ccfb22a29a9c5cf15bd0627a80ad78929a106924&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%252Br0VCscx3wVXJe%252F3g0&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	33674
Entropy (8bit):	5.005659976963834
Encrypted:	false
SSDEEP:	768:IQB919XDLzRxFlZ/CXZoxBI3gbeXm+gWzvG:IQvrDZKXZ/kp+XzvG
MD5:	BD6510FFA2C5B7C6854C7B39D3C6BFB0
SHA1:	4E977BD5B23723FFFFD4E80F4DDE661656735721
SHA-256:	66D785C2E3B9C31677F5744ECDD36B071608074AD069A8B692CEF7266ECBA880
SHA-512:	6030825FB636F0A4A04A9D4ABE13D3C8B6BE94FEE2E73F40F68777CD9AF8557507653A1F7B425D1B9D880318BAF2AD25BAB8830AC0472E1E67D2A852CB7D376E
Malicious:	false
Reputation:	low
Preview:	{"pageProps":{"header":[{"heading":"60% off for 4 months when you purchase Xero. ","@type":"xero/components/content/offer-banner","@oldId":"content-offer_banner-1115512261","alwaysVisible":false,"link":{"current":false,"text":"Buy now","href":"https://www.xero.com/us/pricing-plans/","leadingText":null},"promocode":"SPRINGSAVE60","theme":"human","id":"SPRINGSAVE60","@id":"content--1734539736"},{"buttonText":"Change region","popoverDescription":"You're on our United States website. Change your region to see information and pricing for another location.","regions":[{"name":"Global","code":"zz","href":"/accounting-software/"},{"name":"Hong Kong","code":"hk","href":"/hk/accounting-software/"},{"name":"South Africa","code":"za","href":"/za/accounting-software/"},{"name":"Malaysia","code":"my","href":"/my/accounting-software/"},{"name":"New Zealand","code":"nz","href":"/nz/accounting-software/"},{"name":"Australia","code":"au","href":"/au/accounting-software/"},{"name":"Singapore","code":"sg"

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	113591
Entropy (8bit):	7.997941021972184
Encrypted:	true
SSDEEP:	3072:9jpidW9VpCeYwNzFVZnGRRp1j9x6yXcQUumk7RJFEERAvSZ2ozGcuvaebi:9tFQwNztnGp1jCgVUpyMEWvSX
MD5:	A48124DC9DEF7B6997A68C2D38037AC4
SHA1:	1CDB63094D591AD4749B32C8D24B793A5A9795E5
SHA-256:	64409879C1E7080AD2056B7FFA0B97B108AB2E565EC78122537FEAB496B96DC7
SHA-512:	A8C7CAB24F422A218CA0EE71E1464A3513FB122328602F1502DB740F7A9ACD3079E3FB1736AA5671010552A5E503C817687692013DE244EA71D6DB005E4716A4
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/content/dam/xero/pilot-images/events/xero-beautiful-business-fund/BBF_Dotcom%20Landing.1692594732982.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@..................'.......)d.........S...8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe................pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe................pixi............ipma..........................iref........auxl..........mdat.........P2.O...$P..4g.T.Y...././..5..e.4e8........Q.P..Tf.i.....f)....+...a$`9......#...Q..............wZ.g$`.\x...w.X...t.P...L.:L...U13....>.E.X._.F,.....P/...dd.Io......?...<#...yB.R...MF.(..m9y..8..T.I-y./.>=G..".....~.......'.B......)/p.`.I..8.k0,.Tb&......o.2.~...!.B.P.1bJ....<.&.../^;z...........p.I1......Nx.HL6..2.[.....!..f.c]N..6.A~....? _`.Q2.+w[k......Y..\|..._.!..4:.."..........b.u....u<...A.x..N>..[.e.<.....j6LY..B..w.h.!/.f..;A....C.j...T.s.0.2..i....M.....-j.?....q...L(....(....\......[.U...D/.}.`"....

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1464x1464, components 3
Category:	dropped
Size (bytes):	92054
Entropy (8bit):	7.9432464272422125
Encrypted:	false
SSDEEP:	1536:Fq4pKVckYrDedGVYMpEtrxbYQm0+DdENvaf3JLPw9iKBbOhI:ZEfYrJeKEVxEB0rm3JCc6
MD5:	CBD296C3CC2B12F67F09D39A0FC63DD6
SHA1:	29BE208496087C9E1F54D473E3CDF78443314C79
SHA-256:	6B138E2D8632991105E0E6B1E962A04F6D7F881F38D82A3AC0FB61BC40A719D2
SHA-512:	4BCE5A659DCE593B1C559A22F567D45F16B0099385A2B26132B0F1BC31F54D34F35FF85E79B397495ECC25ABED2FCCC15F9BF12DB31A0E96F252BDAEDB9028B1
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................,..."..."...,.B.).0.).).0.).B.;.G.:.6.:.G.;.i.S.I.I.S.i.z.f.a.f.z...................F............................................,..."..."...,.B.).0.).).0.).B.;.G.:.6.:.G.;.i.S.I.I.S.i.z.f.a.f.z...................F..........."..........4.................................................................h...XB.d.Z..Y..wa.Q.-.b.$j.SXEBMYM.)...:.i..g....Z....VU....%.....\.)tQ8F+.%..I+.QCb..H.+.%.T.i.I.Q.. .V.cfYz`.8.8.fe\.h.`]Y.E,.F.H\...!.j$..Ne.....5gd96......y+.Ye.=79..cN.gAs.f..@..V#..(..l.:...Z\.h+i.YZ.......@d$..a0$%.I[...J...#T..U..PH5..i\Z..I.M...Q.!@.......Pk(U. ..H...TRE.".QH.VI...CT9....b..U.XR)..X.n\U5...J.I.V7s$..K.s........+.kx..s....%......i.(..uY].k\.7;Q....4.s.. :.\.4..I9V..@t.."Z`I5.M@.41.0.h5.&..!...D.V...UEE0...f....4e.s,t.KfZ.J.....D...h5..o$UNSQc.......#.+,.t.MX....h.W:.\|.S..k.5..fi...r.D..K:.DH.P.N.J..W...60....i..T....X.*KY...@.........2.C%$%...IS..L....y..D.)tR.\..eD..@.0.hc5Y$

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, progressive, precision 8, 887x710, components 3
Category:	dropped
Size (bytes):	44059
Entropy (8bit):	7.978011905566205
Encrypted:	false
SSDEEP:	768:8/CjQSp9hBN682D7P13CFl334xHIQ/xfHMlfRHNKhpTInKgE1J69MfC1WQ:8/Xy9sXDjlgYdIQ/8BUhpFq9Mq1V
MD5:	FA9DD2C18288AA5AC063BCF39A188C6B
SHA1:	F93EC5D77DDFCF457D353742126D5F1210FB56BC
SHA-256:	3ACD5AD26CB0F7E94F853572A0EF0F4BEEE74FA570D0F743461FF8B0C31D8B3F
SHA-512:	24E879217E111C1914AD086768A94B9915D8E776AABAC615E3A0BFD9FBFD4EF6C3F69CC4B3AE2348DFE477D3D0AB38EAAD4D561C90D3290316DB7D5BF3F48FA9
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................,..."..."...,.B.).0.).).0.).B.;.G.:.6.:.G.;.i.S.I.I.S.i.z.f.a.f.z...................F............................................,..."..."...,.B.).0.).).0.).B.;.G.:.6.:.G.;.i.S.I.I.S.i.z.f.a.f.z...................F........w.."..........3.................................................................R............G.c..<.....1.N...o..35.u....Y:."`.+..f7g.y.G...W.J...YS.0EbP.f7......z..Q..(A....4.M..d.uL6...l.G{D..igh.y....}T[..+M.....OE..8]7S....$....+.z9.]....i.......Sw;-G..........s"..Q.V.n.+jS../..(N...[...k.....n%.V.....le.FT.9.g. .s.ru.H.F..d,F...o...c..gu...u.T..Q.L2.\.1V..=mTP.2....u6=......'..`.;X,..f9.j8...,[....k..1..2..`.OE..(]F..LNu."..J.zY......zGMq.0C...3.k1.. ....5.jq...\......7..!.':d/..V$N..O:..v.....6 ...:.,....(a4.....m=\.]a...Y,.m.K..'W&H..]Fa..v.te..(L%.#.*PRj..Di..(+...n.G:..`.`.f.]GR..u....[\)h..mV..1.[=..k..b.Q...i...<....).$z.53r...[...}>...>.......F.E..Tw

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/9cf7274f1587405384d41bb446f7e005/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	53433
Entropy (8bit):	4.989744933898178
Encrypted:	false
SSDEEP:	768:5LB919XDL1mwI3aB1WB4nn6PxpmkHh+Yh3TRR/txK3fNuXvG:5LvrtIiO86ZZh9CfNuXvG
MD5:	C90435C3963C7D4B7495B5BC8E60D4E0
SHA1:	BCD9BACB42B43DFC4700C4855D1C0553C49C97FF
SHA-256:	D3F88CA7B71363615C83F6DD199A4DBCCC0FD50D41B9A380C0D445014BCBA5B4
SHA-512:	F83546E97FF74EDDBF2B2FAE7BBC41388859EA401133BAFA371403B9A1DFAE6612A99F4D7FD791BBAFABCFA974C5195BFF56DF148A80BA829F12976F4D502CF8
Malicious:	false
Reputation:	low
Preview:	{"pageProps":{"header":[{"heading":"60% off for 4 months when you purchase Xero. ","@oldId":"content-offer_banner-1115512261","@type":"xero/components/content/offer-banner","alwaysVisible":false,"link":{"current":false,"text":"Buy now","href":"https://www.xero.com/us/pricing-plans/","leadingText":null},"promocode":"SPRINGSAVE60","theme":"human","id":"SPRINGSAVE60","@id":"content--1734539736"},{"buttonText":"Change region","popoverDescription":"You're on our United States website. Change your region to see information and pricing for another location.","regions":[{"name":"Global","code":"zz","href":"/accounting-software/all-features/"},{"name":"Hong Kong","code":"hk","href":"/hk/accounting-software/all-features/"},{"name":"South Africa","code":"za","href":"/za/accounting-software/all-features/"},{"name":"Malaysia","code":"my","href":"/my/accounting-software/all-features/"},{"name":"New Zealand","code":"nz","href":"/nz/accounting-software/all-features/"},{"name":"Australia","code":"au","

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	32486
Entropy (8bit):	4.987386893886161
Encrypted:	false
SSDEEP:	384:wqxZB919XDLWT2Fc7/bx9puK7pIcp/phpjphpiQ+BZ6tkPJhRGF0NnvG:/LB919XDLJq5dxphxfJ+BZ6KPTRFdvG
MD5:	77FC11FA1986B4677BF3AA32C67427F3
SHA1:	1DD7FD9C65774EEC65B3C15795CE28B320852F43
SHA-256:	DE09B8EA91D88B0A1BD894BE0CFBF8E54028FEA3381761613CE257B583C191B1
SHA-512:	A0286714518425A520BC428D1F53A94987FFE2CCA031D96F71915ED912E16B4C7A8847EA0021082F12E9789B5F252519DFED79E72D41634C72AADA93F5A1BEA4
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/_next/data/1712725399/us/pricing-plans/early.json?next_id=1712725399
Preview:	{"pageProps":{"header":[{"buttonText":"Change region","popoverDescription":"You're on our United States website. Change your region to see information and pricing for another location.","regions":[{"name":"Global","code":"zz","href":"/pricing-plans/early/"},{"name":"Hong Kong","code":"hk","href":"/hk/pricing-plans/early/"},{"name":"South Africa","code":"za","href":"/za/pricing-plans/early/"},{"name":"Malaysia","code":"my","href":"/my/pricing-plans/early/"},{"name":"New Zealand","code":"nz","href":"/nz/pricing-plans/early/"},{"name":"Australia","code":"au","href":"/au/pricing-plans/early/"},{"name":"Singapore","code":"sg","href":"/sg/pricing-plans/early/"},{"name":"Philippines","code":"ph","href":"/ph/pricing-plans/early/"},{"name":"United Kingdom","code":"uk","href":"/uk/pricing-plans/early/"},{"name":"Indonesia","code":"id","href":"/id/pricing-plans/early/"},{"name":"Ireland","code":"ie","href":"/ie/pricing-plans/early/"},{"name":"Canada","code":"ca","href":"/ca/pricing-plans/early/"}

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1085), with no line terminators
Category:	downloaded
Size (bytes):	1085
Entropy (8bit):	5.1249043891106725
Encrypted:	false
SSDEEP:	24:YCT5z5knwBD/1Nh/k2ry4PMD4yrrb+R5sNnFs:YCT5qnwBr1D7u4kkyrv+TGFs
MD5:	E43B565F398109176254B8A9394DE5BA
SHA1:	BE450710EAD4ECBBC6E1AA57FA1C3CB6D366F878
SHA-256:	D9BAFBAA07911D0596A806A1177DA26C107F735052D28603BC5EB8FA0DC63B55
SHA-512:	1995EB45FA3BEE129D028D4FD68988DEDCD2A8A9B88CAFBF3DFD85C09F502CCC8E00F034BCDFB7FEF33CBB0C3FA6C297C169FFC406B853CBC1381FAE7F798E4B
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/lazy-feature-loader.2f55ce66-1.236.0.min.js
Preview:	;"use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[412],{8582:(e,n,r)=>{r.d(n,{lazyFeatureLoader:()=>t});var a=r(3325);function t(e,n){if("aggregate"===n)switch(e){case a.D.ajax:return Promise.all([r.e(860),r.e(148),r.e(898)]).then(r.bind(r,5039));case a.D.jserrors:return Promise.all([r.e(860),r.e(148),r.e(317)]).then(r.bind(r,1028));case a.D.metrics:return Promise.all([r.e(860),r.e(148),r.e(147)]).then(r.bind(r,9026));case a.D.pageAction:return Promise.all([r.e(860),r.e(148),r.e(78)]).then(r.bind(r,1832));case a.D.pageViewEvent:return Promise.all([r.e(148),r.e(786)]).then(r.bind(r,3609));case a.D.pageViewTiming:return Promise.all([r.e(860),r.e(148),r.e(348)]).then(r.bind(r,3307));case a.D.sessionReplay:return Promise.all([r.e(860),r.e(148),r.e(590)]).then(r.bind(r,2990));case a.D.sessionTrace:return Promise.all([r.e(860),r.e(148),r.e(733)]).then(r.bind(r,6209));case a.D.spa:return Promise.all([r.e(860),r.e(148),r.e(873)]).then(r.bind(r,2782));default:throw new

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	26
Entropy (8bit):	2.738149333192866
Encrypted:	false
SSDEEP:	3:CUWJ/3e:4JW
MD5:	6A43099D5C8FE991A7AA7EBACA53069D
SHA1:	5BCE2F0D57305C58C7B05BFCE29EBB39A18F5570
SHA-256:	3B7B8A4B411DDF8DB9BACC2F3AABF406F8E4C0C087829B336CA331C40ADFDFF1
SHA-512:	B82C6AA1AE927ADE5FADBBAB478CFAEF26D21C1AC441F48E69CFC04CDB779B1E46D7668B4368B933213276068E52F9060228907720492A70FD9BC897191EE77C
Malicious:	false
Reputation:	low
URL:	https://segments.company-target.com/log?vendor=liveramp&user_id=Xc1297RCZqjCKaMYtrVX5b-1GinLGwoALW3nomJOZMM9LMhXY
Preview:	GIF89a.......,...........;

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1464x1464, components 3
Category:	dropped
Size (bytes):	45357
Entropy (8bit):	7.8014266532784315
Encrypted:	false
SSDEEP:	768:+xSPyFjMzK0ZNlf6iAZkGcRlUH71Rh68ru1Ers+60s2HPwB3AGjSI:fy+20ZNUiAaC5RhNrTsDFAQ
MD5:	19CE90B10570E0F4650231F3AB8F08F2
SHA1:	9C25CDBD675211514B306DBA28D8BD329557626D
SHA-256:	F828DAE62FE798952526E9FC9ADD0F67326325C556388E0FF78DCD96CD5F215F
SHA-512:	CC48B18A21B08A499133F4F5368E299F59FFF69B1009681D49F3654B000BFB9B702260B0F86D5769637FBFA8628C0FB1E94FDD7886DE948131021DB0CFDCD05D
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................,..."..."...,.B.).0.).).0.).B.;.G.:.6.:.G.;.i.S.I.I.S.i.z.f.a.f.z...................F............................................,..."..."...,.B.).0.).).0.).B.;.G.:.6.:.G.;.i.S.I.I.S.i.z.f.a.f.z...................F..........."..........5..................................................................O.................................P.........P.......................A...........B......,....u..Q.E..Q.@,..%.A....................Q(...................`.T..B.X..............K.\.........(...%B..@..(................!l..".................D.)b..P@......K......&[............X.........`.....-J.......E....@..............................E.`..........Q(....T.(AR......Q.........@.... (.DP!P.(.Q............................`.............(.........e..B................,....."...............P.......(.@..........%........X....AA.PT....A`.............E.....^w7.o..9s^.4.Z..\|....U.,........k...=^N.z.............................)..

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	14116
Entropy (8bit):	4.852751442895415
Encrypted:	false
SSDEEP:	192:bpJEjh35FuvSg6aFQF1HdrFhz9FU/NAKDNLQmnM3Zv4s3G4e:VJi0v96QQFhjl9FoNAsrnM3Zv4j
MD5:	8CA97297BE710BC13598A924D240F6E3
SHA1:	7AC778EC5A31729472186C018050DA70BDF8BF01
SHA-256:	54157C66C194434743881750284E9840A570B93B5CFE2FBB09AEE7263DBE272D
SHA-512:	46555A2AF79C1402C48F025FB0AAFD5B2FE255F30F54B5B6D6E79F6320376549C34689F1ECA281852947B7B9B97786F00E38DB455DC51448B8F35CEE7B7F45CA
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/_next/data/1712725399/us/signup/early.json?next_id=1712725399
Preview:	{"pageProps":{"header":[],"main":[{"planHeading":"Early","backButtonText":"Go back","recaptchaSiteKey":"6LeivbwbAAAAACadmd9FggGikXMNXyCwDJksdCAh","@type":"xero/components/content/signup/smb","showSidePanel":true,"successDescription":"We sent an email to {EmailAddress}. ","buyNow":"1","successNextSteps":[{"heading":"1. Verify your account","description":"Click on the link in the email to verify your account."},{"heading":"2. Set up your subscription","description":"Add your payment details from the Xero dashboard."},{"heading":"3. Start using Xero","description":"Log in to Xero and start exploring features."}],"signupApiUrl":"https://www.xero.com/api/signup/v1","signupGdprLabel":"Please don.t send me marketing communications","signupPoints":["Safe and secure","Cancel with one month's notice","24/7 online support"],"successHeading":"Hi {FirstName}! Confirm your email and start using Xero.","promoCode":"SPRINGSAVE60","@id":"content-792953382","signupLocationInitialValue":"US","planPrima

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	369
Entropy (8bit):	6.872823617470407
Encrypted:	false
SSDEEP:	6:6v/lhPfgNIlM2M2M2M2M2M2M2MWIVIrkcyZqgWA9gHTScY3TrxQri3lwbgpBbket:6v/7DWrrrrrrrAAnITp2cY3PhVwKrJhz
MD5:	B42CB6EDE27D2B5BE4F43C79AB30B9F3
SHA1:	152DE95E673E17E835D94B714555C76F91FD8F16
SHA-256:	6F59F3FEDCC6D879B48025E6ABCCCCC0934818DBE3148419DBD8D62C7C744E75
SHA-512:	A8AF5ABB91BBBF1F6A54FEC64CE40F8D8403EA5143FA61645031DF1C09B07C59FF25CDD063E2B9D8171037809C1654A30069A941E6EF166E86DE2EDA9C7155F1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S....PLTE<..<..<..<..<..<..<..<..<..<.....h..o...........R.......~..o.................u.....r.....p....................q.....=.......S.....E.......j....tRNS.F... ....^....orNT..w.....IDAT..e....0.E..6:.).... *....s&..........Rp.?...U....._.p.ry=........U...fk..C...l.g.....s}..[..;/\...W...>B....1.:)..?.....g~.....IEND.B`.

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	14521
Entropy (8bit):	4.865199432301464
Encrypted:	false
SSDEEP:	192:GzDEjh35FuvSg6aFQF1HdrFhz9FU/NAKDNLQmnM0cvAPykLt9G4e:aDi0v96QQFhjl9FoNAsrnM0cvaykx0
MD5:	4ECA731F097F2CCD0BAD8BAAF40965D5
SHA1:	A84427DA73C9E96818D4B7D77EA708C84C743863
SHA-256:	B6E5FC1A9A652A3D2B673F0072805389950040D381B53655B025D425812585CB
SHA-512:	5413539638002D81D8D735F8E37DD1F92AED45C3CE0AED11131578BA6D39DF9782151DA3BE3BAFC71BAE1077D42B82C619320EBF5DB1E41BBFB1819427652EB9
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/_next/data/1712725399/us/signup.json?next_id=1712725399
Preview:	{"pageProps":{"header":[],"main":[{"planHeading":"30-day free trial","backButtonText":"Go back","recaptchaSiteKey":"6LeivbwbAAAAACadmd9FggGikXMNXyCwDJksdCAh","@type":"xero/components/content/signup/smb","showSidePanel":false,"successDescription":"We sent an email to {EmailAddress}. ","buyNow":"0","successNextSteps":[{"heading":"1. Verify your account","description":"Click on the link in the email to verify your account."},{"heading":"2. Start using Xero","description":"Log in to Xero and start exploring features."}],"signupApiUrl":"https://www.xero.com/api/signup/v1","signupGdprLabel":"Please don.t send me marketing communications","signupPoints":["No credit card required","24/7 online support","Cancel any time"],"successHeading":"Hi {FirstName}! Confirm your email and start using Xero.","@id":"content--310370924","signupLocationInitialValue":"US","planPrimaryPoints":[{"excluded":false,"heading":"Set up with your data or a demo"},{"excluded":false,"heading":"No credit card required"}

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=206915&time=1713979874725&url=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals
Preview:	{}

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 729 x 733, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11377
Entropy (8bit):	7.890567209099171
Encrypted:	false
SSDEEP:	192:DKEgoCgj/38Pf2Yg4lfxtnd+ZICMVcZ0ZMMOz3dUKzvumHCpqS1:Ddg9gzJ4lfHdsIjNOrdUKzvumHiqE
MD5:	4B2AB93362B5F9558F994FDF12E3CA7C
SHA1:	F74E8BE1B8F85457ECDB8BDD8C9646D497257D4E
SHA-256:	786ECD2A5D662201E7F7C7F829763E5B39166453C1C33B253CBF9FE306EE24D9
SHA-512:	5869117D8F4E6C909B2CD74EDA12CCA055A733031E1E21667101C03E1D35FF9457E447A40D9A7777A2709F26D5D03E79C0EEBABFA8AC880368661F3C5243AF4D
Malicious:	false
Reputation:	low
URL:	https://edge.xero.com/business/mybills/production/e7e2131e8ee7f228180e.png
Preview:	.PNG........IHDR....................fPLTE......................................................0..@.......p....... ........P..........`.............tRNS...@.p0...` P...n.m.....orNT..w...+.IDATx...b*;.E.y...!!...Ov.3e(.-Y.........P.........................................S....>.71....\|.JX.w.....h2......t.o..r<^.Fkk..........f<...............F......I.7..~.c...A.....c....Te9ie.b...A.........".l2.Z...]R.W..30.g7.oZ.....?.u.t53......Cn..7..Q...{rb...!.w...R.C....q......z[..Q.b..n............=.^.Zd..n..k.a.....-..@2.O<MYZ.w.Hv.p......M..........+..z.u.....K...n&.CJ.......tMk'r[.w.h\|..6.A.!.u.....sI.+....?\|{..q..-.......>.N%....h.....3.l.U..nY}........^vx...fR7+......W..ZWdVsK.u.......,..n..............K._.0...Q.Y.x.......Z&g....8...l.!M.'%.v..!..s....n..jH......]6{..:.n....5{....n.4..6..f.k::n[..M..5....M......v.lx.....v.lx.....v.lx]....v..)..f)V.6.;fc^F....kS.b.pi.Dg..'.6.#f..>D...^wkS;a.......ou.6..f. ...4.6..fc..n..-A..GY.mmj...!.Ve^

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	26
Entropy (8bit):	2.738149333192866
Encrypted:	false
SSDEEP:	3:CUWJ/3e:4JW
MD5:	6A43099D5C8FE991A7AA7EBACA53069D
SHA1:	5BCE2F0D57305C58C7B05BFCE29EBB39A18F5570
SHA-256:	3B7B8A4B411DDF8DB9BACC2F3AABF406F8E4C0C087829B336CA331C40ADFDFF1
SHA-512:	B82C6AA1AE927ADE5FADBBAB478CFAEF26D21C1AC441F48E69CFC04CDB779B1E46D7668B4368B933213276068E52F9060228907720492A70FD9BC897191EE77C
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,...........;

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	53433
Entropy (8bit):	4.989744933898178
Encrypted:	false
SSDEEP:	768:5LB919XDL1mwI3aB1WB4nn6PxpmkHh+Yh3TRR/txK3fNuXvG:5LvrtIiO86ZZh9CfNuXvG
MD5:	C90435C3963C7D4B7495B5BC8E60D4E0
SHA1:	BCD9BACB42B43DFC4700C4855D1C0553C49C97FF
SHA-256:	D3F88CA7B71363615C83F6DD199A4DBCCC0FD50D41B9A380C0D445014BCBA5B4
SHA-512:	F83546E97FF74EDDBF2B2FAE7BBC41388859EA401133BAFA371403B9A1DFAE6612A99F4D7FD791BBAFABCFA974C5195BFF56DF148A80BA829F12976F4D502CF8
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/_next/data/1712725399/us/accounting-software/all-features.json?next_id=1712725399
Preview:	{"pageProps":{"header":[{"heading":"60% off for 4 months when you purchase Xero. ","@oldId":"content-offer_banner-1115512261","@type":"xero/components/content/offer-banner","alwaysVisible":false,"link":{"current":false,"text":"Buy now","href":"https://www.xero.com/us/pricing-plans/","leadingText":null},"promocode":"SPRINGSAVE60","theme":"human","id":"SPRINGSAVE60","@id":"content--1734539736"},{"buttonText":"Change region","popoverDescription":"You're on our United States website. Change your region to see information and pricing for another location.","regions":[{"name":"Global","code":"zz","href":"/accounting-software/all-features/"},{"name":"Hong Kong","code":"hk","href":"/hk/accounting-software/all-features/"},{"name":"South Africa","code":"za","href":"/za/accounting-software/all-features/"},{"name":"Malaysia","code":"my","href":"/my/accounting-software/all-features/"},{"name":"New Zealand","code":"nz","href":"/nz/accounting-software/all-features/"},{"name":"Australia","code":"au","

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	14521
Entropy (8bit):	4.865199432301464
Encrypted:	false
SSDEEP:	192:GzDEjh35FuvSg6aFQF1HdrFhz9FU/NAKDNLQmnM0cvAPykLt9G4e:aDi0v96QQFhjl9FoNAsrnM0cvaykx0
MD5:	4ECA731F097F2CCD0BAD8BAAF40965D5
SHA1:	A84427DA73C9E96818D4B7D77EA708C84C743863
SHA-256:	B6E5FC1A9A652A3D2B673F0072805389950040D381B53655B025D425812585CB
SHA-512:	5413539638002D81D8D735F8E37DD1F92AED45C3CE0AED11131578BA6D39DF9782151DA3BE3BAFC71BAE1077D42B82C619320EBF5DB1E41BBFB1819427652EB9
Malicious:	false
Reputation:	low
Preview:	{"pageProps":{"header":[],"main":[{"planHeading":"30-day free trial","backButtonText":"Go back","recaptchaSiteKey":"6LeivbwbAAAAACadmd9FggGikXMNXyCwDJksdCAh","@type":"xero/components/content/signup/smb","showSidePanel":false,"successDescription":"We sent an email to {EmailAddress}. ","buyNow":"0","successNextSteps":[{"heading":"1. Verify your account","description":"Click on the link in the email to verify your account."},{"heading":"2. Start using Xero","description":"Log in to Xero and start exploring features."}],"signupApiUrl":"https://www.xero.com/api/signup/v1","signupGdprLabel":"Please don.t send me marketing communications","signupPoints":["No credit card required","24/7 online support","Cancel any time"],"successHeading":"Hi {FirstName}! Confirm your email and start using Xero.","@id":"content--310370924","signupLocationInitialValue":"US","planPrimaryPoints":[{"excluded":false,"heading":"Set up with your data or a demo"},{"excluded":false,"heading":"No credit card required"}

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	14186
Entropy (8bit):	4.85225145795087
Encrypted:	false
SSDEEP:	192:dpCW2jl35FuvSg6aFQF1HdrFhz9FU/NAKDNLQmnM3Zv4UFG4e:fCWgov96QQFhjl9FoNAsrnM3Zv4d
MD5:	EB92B9A2C0C61C675C9C4AAEE39B37FA
SHA1:	4A51016261CA3F86912C12F5F52CC537FA5CECB1
SHA-256:	963B938AD700D468396A1E28AF4C3BBE87D7B2C97C29EC5F3DB430CB56A77EF1
SHA-512:	06D2A3870698C9519EA5F02F60387A9421D69D3DA7E7E4EE80F2839F8725AB58613CC0ACE80DC18127CE67F87D8736854DD8232EFE2292FB71D7ACF6C9FE7986
Malicious:	false
Reputation:	low
Preview:	{"pageProps":{"header":[],"main":[{"planHeading":"Growing","backButtonText":"Go back","recaptchaSiteKey":"6LeivbwbAAAAACadmd9FggGikXMNXyCwDJksdCAh","@type":"xero/components/content/signup/smb","showSidePanel":true,"successDescription":"We sent an email to {EmailAddress}. ","buyNow":"1","successNextSteps":[{"heading":"1. Verify your account","description":"Click on the link in the email to verify your account."},{"heading":"2. Set up your subscription","description":"Add your payment details from the Xero dashboard."},{"heading":"3. Start using Xero","description":"Log in to Xero and start exploring features."}],"signupApiUrl":"https://www.xero.com/api/signup/v1","signupGdprLabel":"Please don.t send me marketing communications","signupPoints":["Safe and secure","Cancel with one month's notice","24/7 online support"],"successHeading":"Hi {FirstName}! Confirm your email and start using Xero.","promoCode":"SPRINGSAVE60","@id":"content--909067596","signupLocationInitialValue":"US","planPr

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1775x1420, components 3
Category:	dropped
Size (bytes):	100804
Entropy (8bit):	7.951547442046319
Encrypted:	false
SSDEEP:	3072:T9X9GUvUjJocXekoJ/niRLiNYGFNlmY3KuCsMEt:Td9GUv2dujJQLbGFN8punMEt
MD5:	AC5BBD827B9C7BA6C89E00168751FA20
SHA1:	2035CC96757E50356FA9A453488038EC462AA86A
SHA-256:	49CA731F707474B0F9ADA44246A2BF6B79F12349B6689B6416B663239587B419
SHA-512:	D8075EF8A90821157C95C5623EA68CD87667387AAC3B2E8E5D4D929B3D5A88201DF3AA3418760F6AB974DD6EC8C213377E38E4D9692C15DF3751F92DCB172AB4
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................'...........'.<.%.+.%.%.+.%.<.5.@.4.0.4.@.5._.J.B.B.J._.m.\.W.\.m...v.v.............%............................................'...........'.<.%.+.%.%.+.%.<.5.@.4.0.4.@.5._.J.B.B.J._.m.\.W.\.m...v.v.............%..........."..........3...............................................................T.L.......@..Lb..c.H@.X..@..........C.1.... ....4.....&.....b.....!(........(..@..@..@............F..1.c....."(....@....b`.AoYk5W..]Y............l.!"...rZ.....^..d....M..j.e.....;....'qJn....da8....dr..Lz.M.}5i.....m-1.!......!X...@.. .....DX..@..@..@.... .b.!@............\K..i.......P1.@.........@..@..@.....@..@......DI!....(....#.9D$D$..1..".D...Y......".........c...NEN..=32.EeZ...Z.ei.w;jlU.j.n..f..'g.jy.u....p..Su5\g.#......NM7S....g....<.S.....DBN...H.H...4.@..&2,b. bc.. .@..@..... .+@....XF.RZ...[..qc. .......!..C.1..1..1..1..........&...".(.I.$........1.u...L2.k.5k...l`.H....h1...V.L.L.;.3.t..V.[..

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	3.6880630384772117
Encrypted:	false
SSDEEP:	96:jww8bS6XvHdjvkZl4a8RBxdxOT3xkzNAAA04aYWz50RxdJwJYpC/pJcVTJr0qsih:jww8b3XFjUSamBHgC5AAAFPRfh50qr6C
MD5:	C61C2614A52026A9833964DD82B0194C
SHA1:	44C86EA23C064983197AAE06CE7E17F729950D39
SHA-256:	A23CF2E7B89D854525BDE6330DC9301172477E78AD84BF26134A2730FE353D83
SHA-512:	247244567FA2838065B178A3C0D89421FE376BD623513705EAA518F49BF0D91EAFBF0C153B31FFB466968AC870A364D46D851A49639B82C0B128E56C3383C37A
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................L..O..O6.PP.Pb.Pk.Pj.P_.PK.P0.P..N......................................................................................................................................M..O0.Pq.Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Qe.Q&.P..................................................................................................................N..PL.Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q;.

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1464 x 941, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	183143
Entropy (8bit):	7.974569383644727
Encrypted:	false
SSDEEP:	3072:SdwblRrKD+0cBFqXsO/GqBxRbeRJsA57k+q42qyDRERxRBINIwBuI:TplKGFqXZG0xR457k+q4ZsER3Blwz
MD5:	E79B8FB579B9F71FACF6D8E124549EFE
SHA1:	4977544DC6748A1347353E4471A4979E447D8D60
SHA-256:	9117513186FD261DB899294C63C2B84252341C946DC9E3DF0E0D622BF858B323
SHA-512:	E2D9CB6025E3C8F8E608A323FD5D75A694F534385EA892AE3028466340AC0D23501F7262E3F2E0632C76EFEB19E2668DA50101D20E1DED133545721E28B6B322
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............tI......iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dam="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:cq="http://www.day.com/jcr/cq/1.0". xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/". dam:Physicalheightininches="-1.0". dam:Physicalwidthininches="-1.0". dam:Fileformat="PNG". dam:Progressive="no". dam:extracted="2020-04-30T13:16:08.545+12:00". dam:Bitsperpixel="8". dam:MIMEtype="image/png". dam:Physicalwidthindpi="-1". dam:Physicalheightindpi="-1". dam:Numberofimages="1". dam:Numberoftextualcomments="0". dam:sha1="752aace032fa66ce6d500568e79df3c85cc6c024". dam:size="181692".

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.4378490674947475
Encrypted:	false
SSDEEP:	3:fFwNyhIAn3czX3V2Y:fFvjn3ccY
MD5:	25A615EB83790CD70FEF4CAAE67769EB
SHA1:	8B068A93B0C8701358E30B002ACCCEE8EB2D2F1B
SHA-256:	C8E58ADA9DAC919D2B3F588F17209AFF029C8F1C5B7D6A7BBA1EE90403C86CEB
SHA-512:	F803103162950EC1F5F6C0C8573619060314B5D571DE26BF0373B6B1B8C679FF4581818F05F193C975DB96262477EE4BD5CE6546C74282B3C92046544DF10D64
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/sa.css
Preview:	:root {. --sa-uid: '0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892';.}

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	294433
Entropy (8bit):	4.919897960135226
Encrypted:	false
SSDEEP:	6144:M7kl5uCRQSP3qQoCgLFQu4UBnwJUvGbjycT:JuCtPc4UBnGT
MD5:	2D6E56E859C536646B2F1A76684E2227
SHA1:	374864AE4D33D9F9CA6941DF489A4CEDC4A572F4
SHA-256:	BAFADF9C618FB3D866385426D8AABCBDE2E9983CDC3961CCC2A676A7D1EE438A
SHA-512:	A16B9A803D4BB71B59BC517EAE889472AC87E6536BC9E8B7A5807CD32D34164DE53F6AE4C075E08A633A81146D92BF9FBC2F3EB3B6D7B13FECE5CD6DFA98A417
Malicious:	false
Reputation:	low
URL:	https://edge.xero.com/style/xui/22.0.0/xui.min.css
Preview:	html{font-size:100%;-webkit-text-size-adjust:100%}*,:after,:before{box-sizing:inherit}body,form{margin:0;padding:0}label:hover{cursor:pointer}input[type=number]{-moz-appearance:textfield}input::-moz-focus-inner{border:0;padding:0}input[type=number]::-webkit-inner-spin-button,input[type=number]::-webkit-outer-spin-button{-webkit-appearance:none;margin:0}input[type=search]::-webkit-search-cancel-button,input[type=search]::-webkit-search-decoration{-webkit-appearance:none}input:-webkit-autofill{-webkit-animation-fill-mode:both;-webkit-animation-name:xui-animation-autofill}textarea{overflow-x:hidden}table{border-collapse:collapse}button::-moz-focus-inner{border:0;padding:0}a{color:#0078c8;cursor:pointer}a:hover{color:#003c64}a:active{color:#002a46}a:focus-visible{color:#003c64}.xui-html{height:100%;min-height:100%}.xui-body{font-smooth:antialiased;-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;font-size:var(--x-font-size-medium, .9375rem);line-height:var(--x-line-heig

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:RFREYDA:jRLA
MD5:	A454F56F4DEF70095E30E7676718042E
SHA1:	DB6A025FAFED1D1AD75A6D8BBA133D473ECC58B0
SHA-256:	3DAE93A05EDD9DCFC1864B87178A31E0BFA93E1A9B1C486C6E9CBF73CAE87862
SHA-512:	70CDF04204F3D1DFFEAF7F925EEBF04EA720735625A3BE0375E4AAAF9030C062CE6CCE84607483B282D3F9DA3482E920F17C74E226961156B1612F64814E0365
Malicious:	false
Reputation:	low
URL:	https://tracking.g2crowd.com/attribution_tracking/conversions/4647.js?p=https://www.xero.com/us/&e=undefined
Preview:	// Tracking File

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	92170
Entropy (8bit):	7.995697995803509
Encrypted:	true
SSDEEP:	1536:1Tk8Hp+aIHB7jDg0AckMXFX6IJsYax4sFI5BfkkgpQr9QppYZa2/YnjUE:1DHp+aIh73g07kMcIJ9a+DrfkzpceXYi
MD5:	4FC0F65C3485CB75DF3DDB3152AB02E4
SHA1:	B18E15B41924FECA102D4CEACFBCABDC3B75160B
SHA-256:	EC7AE8F29A21F963420B1B064C0BC840C4BC1BEBC540ADB9A65A0CCF9261C624
SHA-512:	AFCF679878CC6B40F12FCD5CE010BC50626A4C9C69F0AA5C7837DB131DAAE7FE4A6BE785E0A911C9550073418F57B5F34EED5EDB875D237A329F61002940BB9E
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/content/dam/xero/pilot-images/campaign/covid-19/homepage-wayfinder-covid.1646877502691.png
Preview:	RIFF.h..WEBPVP8X..............ALPH.X......m$5v.\|..U.>v..>&N\D}..br....m.A...o...zfv..1...!xK.2..px...L'.]4Ok/.....j..jy.BE......M.>x.;...:..w.3..5._Z.ea.7h$Y1 .4t..+lM..X.....0...g".......P^./.&..Z?m...6r$.r.uS.sM.D....-.r2.+.!... ..]...!....j>/.m.............................j......).h.c.....<.j't.;6.B.S...`..,..t...>....bC....?.n....)..MTR.....G..P.o.].#.].cO~.v$.b....E.NC......G..7".<......v.u.(a...G.[ o]......:..\|\|....g.t.Xu..W"T...vx.<..h...:s..q.g.@...i...8.@}z[...-..M..{....n.....]..;<..R4.g](k.".+zF.9.r.......5cS...._.\|....v....mT...s.?.`..F.....O...b....../Ndk....U..}..7.E...B{...T.q.g_M.....U.x..4...&Y..<.'.P......5..Tb.C...CNuvV.....+..T1`...u3l.<....\|......D......=..P[.U....M..>\|%.t..%.v..m....\Uv.~..7e..j7$s.pA.U..sr:{%..v.A..~....g.E..4_..Aa......7j..I..`qs.......D..o-).:.ll{.:U<.I.x.1..S..W8.M.i...N.fn.....;h.....Q0CqB:U<v.4.#a..4T*..~.D..=....rg...n...mW....9../.<k.#c.....T...l...Y...8..O...]f.=.#l;..}.3.F".S

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34825, version 0.0
Category:	downloaded
Size (bytes):	34825
Entropy (8bit):	7.994246701718072
Encrypted:	true
SSDEEP:	768:sV4PIVDKsfViomwzYwfMakiwWPnzJ1cTy2nDam1uZJdCHhc:sV4QZNViomCDM7hWLJq2Lm8dC2
MD5:	3B08EFF4E35F8664F766DC9A9CCB7C65
SHA1:	42DE1E6782EE87514139960B03BBE6DB664738B8
SHA-256:	B84C1765EA7A66D0442154107093E94221C50E0DCEDC66A37411E56256CF77AC
SHA-512:	D188B8BDAF97467989B837B7D18AAD18E157DDDE6B89E7A2D3EB83525D271461D5938B1181BE80CCF7EBA00971377385CCEB5A167239994B224BEBB84D1CD0AB
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/fonts/national2-web-regular.woff2
Preview:	wOF2..................x2......x....q..3............H..4.`..`..Z.R..a.....P..;.6.$........ ..&....."[.c...c....u......s.=mw.....05..Mg..-uAd......nR..Z.HNB...t....m.5Z..4.-......U..K....0.....:.i...Tv....^jTz.:4%....P7w..>3\|.hq.$.]..f{.)D>...\d+=gs..........}.....c2.....q..?..;.&..+.j....9T(..0z......FA../....T.D....;.+,&..=...V4..I<.9.4......3..f.7...4..Y..D].{.Lnu.T..q....~y....s...$..ox.../...y~...{....h..9..{......(..0z.p.F...1.."..tZ........#....h@..(Y....F.....S.N.h.):ELl@0.0......>B.DA..M..m."u....u.~......H....{^...>...V.Y.eD.Bl.'c......,)..a.......s...:..'.u..$..g.....`\|.....Z?.....+.\|k.<......0..n%.n{..g.\B.0u....~...7.........d..7..Ou.3.>....A.s...@.....)zPJ...a.0l<......9......J.\a.....s.o..{Z%A......E...;0..r...W.{a....:.....cX.l.p.@I6..o...hK.....^.Q.T.J...D"##..@.`...p...6..;............xz.:.^k@..1.....>2.....EX'.r.C..:.:.{.(.$D.....k..s......+:.h....$....i..H..JL...:'.{.p0r.....y......[A..`.. ..w....h4..i,2.H..

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1387), with no line terminators
Category:	downloaded
Size (bytes):	1387
Entropy (8bit):	5.1799540592886
Encrypted:	false
SSDEEP:	24:iT5zohX4mZa5o0OIcGIcvQIqVIpQIKRFlqvIPLrCQXIqYlrdVW6ONQIGRi4CaLRY:iT58hXdoy0OchvQdVWQ9FlwuCWdYBAN1
MD5:	A097CB2068FB2D63E521CACF139C921D
SHA1:	6203EABF4D1E530431E33EACAFE8ADC1B44128FB
SHA-256:	C902FF18C7858648BE03999D4022C40D66AD694AE218EA4B1558E74703B854A5
SHA-512:	CB36140314C3E74400F53799AEE2260032B3AE61683386FE33E04AE0A6BF35405EFC9DD5FBDB56E3F797EBA99616925E321175B40254FF829AA2372E8C7CB2F3
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/session-manager.2a64278a-1.236.0.min.js
Preview:	"use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[242],{3228:(t,e,s)=>{s.d(e,{setupAgentSession:()=>h});var n=s(5763),o=s(8e3),r=s(2177),c=s(4322),i=s(3860);class a{get(t){try{return localStorage.getItem(t)\|\|void 0}catch(t){return""}}set(t,e){try{return null==e?this.remove(t):localStorage.setItem(t,e)}catch(t){return}}remove(t){try{localStorage.removeItem(t)}catch(t){return}}}class u{constructor(t){this.domain=t}get(t){try{var e=document.cookie.match(new RegExp("(^\| )"+t+"=([^;]+)"));if(e)return e[2]}catch(t){return""}}set(t,e){try{const s="".concat(t,"=").concat(e,"; Domain=").concat(domain,"; Path=/");document.cookie=s}catch(t){return}}remove(t){try{return document.cookie="".concat(t,"=; expires=Thu, 01 Jan 1970 00:00:00 UTC; Domain=").concat(domain,"; Path=/")}catch(t){return}}}let m=0;function h(t){const e=(0,n.OP)(t);if(m++)return e.session;const s=(0,n.P_)(t).session,h=s?.domain?new u(s.domain):new a;e.session=new i.$s({agentIdentifier:t,key:"SESSION",stor

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24605)
Category:	downloaded
Size (bytes):	41679
Entropy (8bit):	5.4936189279113625
Encrypted:	false
SSDEEP:	768:1keY2FL4rhkGfV8Cj7szizyzMzKNSu3eq9zdlN:qe/+hkGfVXFu5XN
MD5:	87B5ECAAFD0E88097CBBB1BBB7695FE9
SHA1:	085D5B2112BB1AFA26B03B94183B6EEDC2F076B4
SHA-256:	5AF5EE0B37B1F0EF31C42932BBF81424E4BB53E95E87A47E058625C1AF2245DB
SHA-512:	C760FA5130EF53C99F4DC88E8843500022E63B2324C1EC8DC6C8F510C31A3CB784F0D38908C6F932E96BD566A0464A11EFD723AD73E72CA99626138A48C73092
Malicious:	false
Reputation:	low
URL:	https://a.quora.com/qevents.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.qevents=e():t.qevents=e()}(this,function(){return function(t){function e(n){if(r[n])return r[n].exports;var i=r[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,e),i.l=!0,i.exports}var r={};return e.m=t,e.c=r,e.d=function(t,r,n){e.o(t,r)\|\|Object.defineProperty(t,r,{configurable:!1,enumerable:!0,get:n})},e.n=function(t){var r=t&&t.__esModule?function(){return t["default"]}:function(){return t};return e.d(r,"a",r),r},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="",e(e.s="./shared/qevents/main.js")}({"./shared/Class.js":function(t,e){function r(t,e){function r(){if(i\|\|(t.call(c),n(h,e,a),i=!0,e=null),this!==c){var r=this.__init__;r&&r.apply(this,arguments)}}var i,a=s.prototype=t.prototype,h=new s;return r.prototype=h,r.extend=o,h.constructor=r,r}function n(t,e,r){for(var n in e)e.ha

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1388
Entropy (8bit):	4.181880697809376
Encrypted:	false
SSDEEP:	24:t4Q7zW9cohDIUVoOS4g21m/D1kQWZNvelnael2dG4aQZpmxcO:p7zAFhMMoygz/DO9gLliGspmKO
MD5:	D3BEAC69C062ABC96B9BD3DD4231F530
SHA1:	2F9406BD87B74B6ABD3472407221162C7B3F8157
SHA-256:	4A8B6268634CC24717516DC0086009E24EE6C1D7F15AF098092ADFE878CC5E61
SHA-512:	DAABAB34FE971599D7858D7B36230C3771D5524B69CD2409444037526A4758CA8B4CC619B14E15B709D1C5D869AAF7710797F62449D1D8ACDF13D52C859EFD29
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/content/dam/xero/pilot-images/admin/icons/social-media/youtube-icon.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <defs>. <symbol id="ico" viewBox="0 0 20 14">. <path d="M19.9134 10.3193c0 .1735 0 .3469-.0866.5203 0 .1735 0 .2602-.0865.4336 0 .1735-.0866.3469-.1732.607-.0866.3469-.2597.6938-.4329.9539-.2597.3469-.5195.5203-.8658.7805-.2597.0867-.4329.1734-.6926.2601-.1732 0-.3464.0868-.4329.0868-.9524.0867-1.9048 0-2.8572 0H3.4632c-.17316 0-.34632 0-.51948-.0868-.17316 0-.25974 0-.4329-.0867-.17316 0-.4329-.0867-.60606-.1734-.4329-.1734-.77922-.3469-1.038959-.6937-.17316-.1735-.34632-.4336-.432901-.6938-.08658-.2601-.173162-.5203-.259742-.7804-.0865806-.1735-.0865792-.4336-.0865792-.6071C.0865788 10.5795 0 10.3193 0 9.97247v-.5203-.69374-.60702-2.34136-.69374-.34687-.34687-.5203c0-.17343-.00000132-.43358.0865788-.60702-.08658012-.26015 0-.43358 0-.69374.0865802-.26015.0865772-.43358.1731572-.60702.17316-.43358.346323-.86717.692644-1.214036.34632-.346868.69264-.520303 1.12554-.6937369C2.33766-8e-8 2.51082 0 2.77056 0H16.4502c.2598 0 .4329-8e-8.6927

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=206915&time=1713979915526&url=https%3A%2F%2Fwww.xero.com%2Fus%2F
Preview:	{}

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 729 x 733, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11377
Entropy (8bit):	7.890567209099171
Encrypted:	false
SSDEEP:	192:DKEgoCgj/38Pf2Yg4lfxtnd+ZICMVcZ0ZMMOz3dUKzvumHCpqS1:Ddg9gzJ4lfHdsIjNOrdUKzvumHiqE
MD5:	4B2AB93362B5F9558F994FDF12E3CA7C
SHA1:	F74E8BE1B8F85457ECDB8BDD8C9646D497257D4E
SHA-256:	786ECD2A5D662201E7F7C7F829763E5B39166453C1C33B253CBF9FE306EE24D9
SHA-512:	5869117D8F4E6C909B2CD74EDA12CCA055A733031E1E21667101C03E1D35FF9457E447A40D9A7777A2709F26D5D03E79C0EEBABFA8AC880368661F3C5243AF4D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................fPLTE......................................................0..@.......p....... ........P..........`.............tRNS...@.p0...` P...n.m.....orNT..w...+.IDATx...b*;.E.y...!!...Ov.3e(.-Y.........P.........................................S....>.71....\|.JX.w.....h2......t.o..r<^.Fkk..........f<...............F......I.7..~.c...A.....c....Te9ie.b...A.........".l2.Z...]R.W..30.g7.oZ.....?.u.t53......Cn..7..Q...{rb...!.w...R.C....q......z[..Q.b..n............=.^.Zd..n..k.a.....-..@2.O<MYZ.w.Hv.p......M..........+..z.u.....K...n&.CJ.......tMk'r[.w.h\|..6.A.!.u.....sI.+....?\|{..q..-.......>.N%....h.....3.l.U..nY}........^vx...fR7+......W..ZWdVsK.u.......,..n..............K._.0...Q.Y.x.......Z&g....8...l.!M.'%.v..!..s....n..jH......]6{..:.n....5{....n.4..6..f.k::n[..M..5....M......v.lx.....v.lx.....v.lx]....v..)..f)V.6.;fc^F....kS.b.pi.Dg..'.6.#f..>D...^wkS;a.......ou.6..f. ...4.6..fc..n..-A..GY.mmj...!.Ve^

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1774x1774, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	56066
Entropy (8bit):	7.995331445599941
Encrypted:	true
SSDEEP:	1536:muv9y36YLfVe5yKyg6A4MJYwOMEp3h8hT4wvL9Rp6gFS:muVy05aDA7zOM63e8wvxRp6US
MD5:	A0F7BB7ED0ECEFC8206359C98D39F792
SHA1:	955866F5F54115CBACEB02945B578D2DA0E237E6
SHA-256:	1BEB13B8A0B57A27E9A1E8A28E5CB885CAC50858E4FFE72CEEA9EDBCD7E45AF7
SHA-512:	97116D3BDC43F0EC338882B55BD3AD670A629A0197FAA9D4329362679AC95E8CE4D091D28B8AFDC4D7CC1837FCFDF155E1E84BE1E72ED5171EEE840F28271074
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/content/dam/xero/pilot-images/features/invoicing/create-and-send-invoices.1646877464818.jpg
Preview:	RIFF....WEBPVP8 .............>.v.T......h....gn.....6`.$..&g...t$..[......ru......~$....#..}/.m.....~fzr..9.7..._..5..._................?....^._...z....U.7....7._..\|?...@\|..^.../..._...g..i.Z..M............~.y...].x.&...o.@...^...zt...#..[...G.._^......V...g...q5Rr$....L..IM'y..#..N..0G.%4..:`."Ji;.t..D..w..<...U.>........G.......G.9..y.`l.".....E......M......PM..P.#a.....J....w...r.M..Wp #.}6YU.[....L\,..T..={....D...\....x.3...yPl...l....6.".....E..SFl.R.{1?.(.+.@..pQ.]..a...}.....{..../{L.s.L..e.;....6....G.!..y.c.N.P!.F.......pn..k.B..^...D.U...5..d_..g..y..3.&. .\|M-b.N.....M+H.F....$....PX...l[.d.s.V...[.n...eL..D........q6....-Q..dw..y...~Q..C...Oq.]..Ln8..S....f..]......`..h.].t.......Tv.#..A........c.....".....iT.1..2...Cc.!.....L.G..\.[!...._...q~w..V8`I8.2.V..#.Nk.PQ~.._.D...s..0#...b...h..V0...li..>.E.!...>..u...$..1./_.2(..[%V.X.N....\.* t..Oe...\._O.q..t.r&..'"dL8.r..=.FA.G..5...t...5.J.5!..>&......m/.{..H.1.....&

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	144
Entropy (8bit):	4.54178832719941
Encrypted:	false
SSDEEP:	3:YAv+e9BAJ6YSm7XJHIzRNg+wjNXWRwFH1j66qVVJMdMQUWKLb+AHfgq+WRHYn:YAme2J6YBDJHIlNgDXWqH1jwVJMyb/4l
MD5:	F447C440ABF2B8AF203938329FE494F8
SHA1:	3E071AE6400D84FB2EBE38EAEE60E1161D9F4556
SHA-256:	11BBA994684E05187E8CB291F03254CE7810FB3EABBC900299F078F2E584550F
SHA-512:	BC05CEC72D8512A1CE483156BDCD963199EBFFD224D991AABAD638D3FA075CD7C96E20B20B85C7224925B8263143772174B3BC824EA258C0B196C83E03007C9F
Malicious:	false
Reputation:	low
Preview:	{"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	961
Entropy (8bit):	4.335852603689657
Encrypted:	false
SSDEEP:	24:t4QboLDqqHCfg/VtEAHqxJx2BSHNfieSX95rxhd7SNgO:pb0fHCg/Eoox2Et6eSFhd2OO
MD5:	899EDAE44877FBE0F00900319F56B99C
SHA1:	9B33DA58C16165D71574F5A0EFEF5E7FF1021DED
SHA-256:	C10F78A021974B7CBC3FE1211007D5B832630390AD1BD295F4B145177D2952BF
SHA-512:	20506B3E8FC320D6176CE66777128960F8DE488F287527965082B2E1481E116323D728E72C508E88B47F31761E6676EA3676CC63BBA9F4FE92F307B3CEC10128
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <defs>. <symbol id="ico" viewBox="0 0 19 18">. <path d="M7.16016 17.0336v-.1774V5.58804h3.81524v1.50833c.0887-.17745.2661-.3549.3549-.44362.621-.79853 1.5083-1.24216 2.4843-1.33089 1.1534-.08872 2.2181.08873 3.1054.79853.8872.62108 1.3308 1.50834 1.597 2.57304.0887.3549.0887.79853.1775 1.24216v7.18681h-3.8152v-.3549-5.6785c0-.4436-.0888-.8872-.1775-1.33086-.3549-1.33089-1.9519-1.86324-3.0166-.97598-.6211.44362-.8873 1.0647-.8873 1.86324v6.477c-1.0647-.0888-2.30686-.0888-3.63774-.0888zM1.30469 17.0343v-.2662V5.76618 5.5h3.81518v11.5343H1.30469zM1.03795 1.68578c0-.08872.08872-.26617.08872-.3549C1.39284.443627 2.28011 0 3.25609 0c.79853 0 1.50832.354902 1.86322 1.15343.62108 1.33088-.26617 2.66177-1.68577 2.75049-.35491 0-.70981 0-1.06471-.08872-.7098-.17745-1.15343-.70981-1.33088-1.41961 0-.08873-.00001-.08873-.088731-.17745.088721-.17745.088731-.3549.088731-.53236z"/>. </symbol>. </defs>.</svg>

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18187), with no line terminators
Category:	downloaded
Size (bytes):	18187
Entropy (8bit):	5.347759003709589
Encrypted:	false
SSDEEP:	384:s40C/Y3uOOpp9W89rzOv4m8Avx2kjEhNgyyuek:VjOOp281UsAlErPyud
MD5:	5C6ED25DCE803FD84288922B8928409E
SHA1:	3CCC10546AE12F160BACAC1E9E422AF091EA4A41
SHA-256:	480B06B23E574B4BF386FDE1A91145A4171F97AEB5EE800E4BE1850F29B1AD91
SHA-512:	FE9265D2E6EA4ACB7E0A87E08BEDFAF48BCBAD62BB7A86E73F9AE21C8437AF3334D2A9733C6BC47A12BBF54F97EC79271CB5300F90231614F407599D1B4C05E5
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wi/ytc.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=0)}([function(e,t,n){"use strict";function r(){if("undefined"==typeof TextEncoder){window.Tex

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 107, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13515
Entropy (8bit):	7.974213795883233
Encrypted:	false
SSDEEP:	384:KrYbrN6fD/mqpGIVW9elglpEWBhnZuHNI:4YbZcD+6VVyelggWLiNI
MD5:	6D9FC97288DAC32B0B3C79912DCFCCF1
SHA1:	56AFF47A52A76B67F81A22A5C7CEAFBEE05AC677
SHA-256:	E48FBF0E1DD8445F25BD9FAFC9EF1895F790506537D7E0130A900EE042ECE6C8
SHA-512:	F5F6391F3A07FE5F73EBBD7833771502C8E1DB6EA2265BF8DFFDCD976484A06ADC6115CD00AB600BCEB8F7D953A21C90DAE17814DCB0488E3D1535AE29C82689
Malicious:	false
Reputation:	low
URL:	https://in.xero.com/api/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe/getLogo
Preview:	.PNG........IHDR.......k.....Y......sRGB.........gAMA......a.....pHYs..........o.d..4`IDATx^.].xUU..v.M'..e-..4@Q....Zv].HB...........V..'$.....U......0.^..B.?s.I.r..w........}..w.s.93......c...........>..e......)Y..\|...&L.9.....y..d)D9..V........<..@..p..:D.c.9t....c9....=^...-......[T.....1Q..bt:.3.BOe........tQI..d..@.....r.>#.c..w..,t.....4.dD..d.K>..1{.o.uq....h(.a..h..>.L=...E...B.q..8a7.M.u>8....RHm}.b..!.a.84.......O...!~....,j[,....q.O.%S.".O+....Kx.......XI.`...2...h:..m.[W...T}.P..c..B..M,..f.M..dm.DM..u..t....$xP.....:..{....:6'......1!%.}../<...2Z.!...=T.....k=.=.g.........#.......B........o+..y.2..i.Q.^.....@.?V.NH.;..v..>=VNQ.."Gf../........<....9..M.....90.1.Vrd&........_.i!.\|....Q....~...r...&.7.d@.&].k..7..$.V2!H..B..#23.;.......}".......+...!{...0..'.....Q_j...YH.W.IY...3........m..bn..].q..._t../.RD%j4 ...Dh..i..&......4...O..S.O.?............P.....w.E...#.i..x...r..UDCHa..=..un..{.0M..Y..X.#.V...e...P..I.q......Y..(

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713979900863&id=t2_ewwvmnuh&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=cb2d649f-3168-41a8-8246-f3b3ccc5e846&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_72595d5a&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9139), with no line terminators
Category:	downloaded
Size (bytes):	9139
Entropy (8bit):	5.28179916732701
Encrypted:	false
SSDEEP:	192:M6d9XOiXaJTScTaGnf/cXIiLQd3P2Tz5z6jlVYTGv:M6XXOiXa1SaaYXcPikz5z6jl
MD5:	86E4BFA6E50B4E6F89990D8B83FF9AF9
SHA1:	32C4E1DDA791DCC6CA680C6EE862504EC33D3E3A
SHA-256:	F994A546112B265CDCCF32E0B13A67B3999416BA5C7084C9C5044C182CC82B0C
SHA-512:	E79F040D86401377028F22AF488271A95349DE0984BA9B1B563AC891FCC1C3EB387547828A79E08B722BC5359E1BB8F27D341114C9763AF9A3650190754F1796
Malicious:	false
Reputation:	low
URL:	https://acdn.adnxs.com/dmp/up/pixie.js
Preview:	!function(e){var t={};function n(i){if(t[i])return t[i].exports;var r=t[i]={i:i,l:!1,exports:{}};return e[i].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:i})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)n.d(i,r,function(t){return e[t]}.bind(null,r));return i},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="./",n(n.s=27)}([,,,,,function(e,t,n){"use strict";t.__esModule=!0;var i=n(6),r=function(){function e(

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9401320;type=pagev0;cat=globa000;ord=1;num=8983422946655;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=671166263;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F?
Preview:	<html></html>

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (583), with no line terminators
Category:	downloaded
Size (bytes):	583
Entropy (8bit):	4.922866901699429
Encrypted:	false
SSDEEP:	12:yMgqGePXTK3Ay6DLDmjaU17nW21X04KKeatV4nR1XQoifr:yM/qkIF17nW21kbFnR1q
MD5:	A8CCD32EEAE2573B015B4AAC7604ED0E
SHA1:	8C9C97BEF485EDEA6E7752BEFFD4F3D8D51AA19E
SHA-256:	29108B508F3E3A2258B5FF26CD876D31B87D7861DCD999190E083D25228C8AB7
SHA-512:	B50319539ED61BB6FE3C7D1B4B838F2DDA2C5FD3A6D861F06D76F2F532BCB1CD6BC45A235B43EEA912666E9A2E5115A261D243F9ED5898743433023E22B81A0A
Malicious:	false
Reputation:	low
URL:	https://edge.xero.com/business/mybills/production/main.3cf9c16495486cc66bcb.css
Preview:	.sbt-ErrorComponent{align-items:center;display:flex;height:100%;justify-content:center}.sbt-ErrorComponent--heading{font-size:1.0625rem;line-height:1.75rem}.sbt-ErrorComponent--description{font-size:1.0625rem;margin-bottom:20px}.sbt-ErrorComponent--illustration{padding:0}@media screen and (min-width:600px){.sbt-ErrorComponent--heading{font-size:1.3125rem;line-height:2rem}.sbt-ErrorComponent--illustration{height:400px;padding:56px}}@media screen and (min-width:800px){.sbt-ErrorComponent--heading{font-size:1.875rem;line-height:2.75rem}}.my-bills-SharedLayout--loader{flex-grow:1}

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2400 x 2400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1705590
Entropy (8bit):	7.98469722950784
Encrypted:	false
SSDEEP:	49152:CmwYk8zO352Jx82uURKfQpXwd0v3Kr6fu0CrY:C/8z5x82ubQpXAgo6u0qY
MD5:	DD330FFBFA0339DBB60C7A621E01E2D7
SHA1:	FDBBA80A3776A5973886A482981A4C6E47135DC3
SHA-256:	138CA781E6BDA94CBEA8D53B1611B15D8D8243F0C466A43BB00ACED6FA3FC782
SHA-512:	EB9491F2034F483497E4D3EB7DAD1962077D63B59AFDAA7A55BD00B6A91488F552668271690DC5BC77050B8F747E8712F71830482C06D723E267BDA0202D6A75
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......M.n....orNT..w.....IDATx...y.eY~.v~...b...r.,..T...T.HjY...I.....P.K..@ka..xX..i{.^@.^mX.....ZBH...P....\Y..SD.1...w.q.w.........G..{..{.....B7.~..K..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/9cf7274f1587405384d41bb446f7e005/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.xero.com%2Fus%2F
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	211191
Entropy (8bit):	5.539458374855423
Encrypted:	false
SSDEEP:	3072:T1hzgNSNow8VNPk178D71+TYc20DCSY1KGowDDbUQWDe5L+aVsQCm+K:phewMNPPqO6De5LfV9Cm1
MD5:	2940ED4E6F128C2BCBE32ECEDA9ED594
SHA1:	ABD7F4B072A7B7FAD010B760E22E681BE411141A
SHA-256:	EDDF8309A3381674280FA540E4FD9ABF3EF2E1A0F1446834B4AA09991C29D46C
SHA-512:	C8FB5B52661842D12EA8E01A12052952F998CB92A5E15C14AC8566C888CCD75C46D6A8C6CF642D18305E19CB74BFD64436DA6E8B15CF114BAFAB474954B75D68
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=DC-9401320&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":1,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":4},{"function":"__r

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CIb5jOGw24UDFd1YCAQdJkEMrg;src=9401320;type=pagev0;cat=globa000;ord=1;num=8983422946655;npa=0;auiddc=*;u1=%2Fus%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=671166263;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1x1, components 3
Category:	downloaded
Size (bytes):	651
Entropy (8bit):	6.855422700006461
Encrypted:	false
SSDEEP:	12:FC9YM8fwy0lJ0Xx0WzOsvWGKkCHdcfmcGHMf/qXzUOrS07DAzEgOsvWGKkCHdcfd:49YMWbo0XxDuLHeOWXG4OZ7DAJuLHen1
MD5:	D3A1017060B4669F2FD8894B2B8B69C3
SHA1:	D5A37A76A94A6914123E817A7C4DB3E0D8B8BAE8
SHA-256:	DE0A3F8190808781B5658024B46926FFB7D397C60E85A7C3C3CE06CEDDEF58D7
SHA-512:	8652FF9659019922390A23924B21F08DF305F3D71096895305602C18AF208EE5CFC6CB9E58E37189DBB8AB3933A35F9836D33D18D1B18064A2884C07A2CE5147
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/sa.jpeg
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(..?...."...\.[.bz..x...i$

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	31968
Entropy (8bit):	4.9909561547420225
Encrypted:	false
SSDEEP:	384:IQxZB919XDLWT27b/b09puK7pIcp/phpjphpiQ+BZ6tkPb50NhvG:VLB919XDLnY5dxphxfJ+BZ6KPiDvG
MD5:	8282D83C25A7A80E3854CBFDACF36E79
SHA1:	0494A0AF76DC1340A49A7D2D64A97E1B3D883D30
SHA-256:	8C656E735F717A8F3DB8AD420BD4ECE53705E600F958A7611B258EC2175902ED
SHA-512:	E5D7EAFAF3D492333F2ED55E008B673E425FBF6E18D6BF7ED3B2C37FAC3AF16FB9529A4915EA35920F564447BEAA88A03F11686AD4BBE6FEDF2DC01B87A87533
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/_next/data/1712725399/us/pricing-plans/growing.json?next_id=1712725399
Preview:	{"pageProps":{"header":[{"buttonText":"Change region","popoverDescription":"You're on our United States website. Change your region to see information and pricing for another location.","regions":[{"name":"Global","code":"zz","href":"/pricing-plans/growing/"},{"name":"Hong Kong","code":"hk","href":"/hk/pricing-plans/growing/"},{"name":"South Africa","code":"za","href":"/za/pricing-plans/growing/"},{"name":"Malaysia","code":"my","href":"/my/pricing-plans/growing/"},{"name":"New Zealand","code":"nz","href":"/nz/pricing-plans/growing/"},{"name":"Australia","code":"au","href":"/au/pricing-plans/growing/"},{"name":"Singapore","code":"sg","href":"/sg/pricing-plans/growing/"},{"name":"Philippines","code":"ph","href":"/ph/pricing-plans/growing/"},{"name":"United Kingdom","code":"uk","href":"/uk/pricing-plans/growing/"},{"name":"Indonesia","code":"id","href":"/id/pricing-plans/growing/"},{"name":"Ireland","code":"ie","href":"/ie/pricing-plans/growing/"},{"name":"Canada","code":"ca","href":"/ca/

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1023673485?random=1713979901079&cv=11&fst=1713979901079&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44m0v883646161z8830923470za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&label=v0RbCOHw2eECEI2JkOgD&hn=www.googleadservices.com&frm=0&tiba=Pricing%20Plans%20%7C%20Xero%20US&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1776741404.1713979872&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0
Preview:	<html></html>

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34055), with no line terminators
Category:	downloaded
Size (bytes):	34055
Entropy (8bit):	5.382034135784619
Encrypted:	false
SSDEEP:	384:CmtU3zNc77tfmGarhLGWR0A/EssX94hQ106ZqnW7v2CViWWY2yrN1/oX1xrJfHG5:CmtEzE6hR0UEssX94hQfqAic2xHmqgD
MD5:	ED99E2C2B7E432BF1B01B17E26FEA4F1
SHA1:	31B19A9F34FEF2D8C779585F4477CD05A6784FAA
SHA-256:	C64B612E535BAE0B630160E4B0054682C16C475EE18FB18CB2ACF0E92ED99A84
SHA-512:	48E524BD8721D7DDFCEBB9EDFF0D980AA1789193001A61AD53D6A5A5C1EBF09906E4E2591311D8F831A3E83BBCDC3348D5877BE7ED88C475288A6CE4ECBE804F
Malicious:	false
Reputation:	low
URL:	https://edge.xero.com/business/mybills/production/locale.en-NZ.4a8119cde29ca710e9f3.chunk.js
Preview:	"use strict";(self.webpackChunkmy_bills=self.webpackChunkmy_bills\|\|[]).push([[229],{8301:e=>{e.exports=JSON.parse('{"ACCEPT":"Accept","ACCEPT_MODAL_HEADER_MOBILE":"Are you sure?","ACCEPT_QUOTE_ERROR":"Sorry! An error has occurred and your quote has not been accepted. Please try again.","ACCOUNT_NUMBER":"Account number","ACTIVATED_YOUR_ACCOUNT":"Activated your account?","ACTIVATED_YOUR_ACCOUNT_MESSAGE":"You should have received an email with a link to activate your Xero account.<p>Have you activated your account?</p>","ADDRESS":"Address","AMOUNT_DUE":"Amount due","APP_NAME":"My Bills","AT":"@ ","ATTACHMENTS":"Attachments ({totalCount})","DOWNLOAD_ATTACHMENTS":"Download attachments ({totalCount})","AUSTRALIA_BUSINESS_NUMBER":"ABN","BANNER_COMMENT_SUCCESS":"Your message has been sent","BANNER_ERROR":"Sorry! An error has occurred and your quote has not been {action}. Please try again later","BANNER_MESSAGE":"Thanks! Your quote has been {action} and {orgName} has been notified","BILLING_ADD

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wi/config/10175613.json
Preview:	{}

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 21980
Category:	downloaded
Size (bytes):	6759
Entropy (8bit):	7.970766444142892
Encrypted:	false
SSDEEP:	192:4HB/Zow1k0DgHJTULAcyInTYrnqJPdu3o:anL1kygHJTUVyInUrqJVD
MD5:	15864CE88FA79A3E954417D0C3396798
SHA1:	FB9C3441942954B8EF8D637CDB307CBBAE25DA56
SHA-256:	97FDE46829E88416162D1CF2BA9C0BDC0A5C45D826ECF44095782AFD7417C500
SHA-512:	AC2B648224C8DD20F4BF5DAE9A4347C57B9902AE554E84FD3506F8B3B1E7759B33CB937B04D509E1DF06E4CBBF133C09D98A06E6FE8D30F639E4B8619E778697
Malicious:	false
Reputation:	low
URL:	https://widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
Preview:	...........\.R.H..?Oa4.niI.....L.EO.Q.....,A.V.d...H.h.'...H..{N..%.zf"f#.....'..;'..?.....y>.....$E..%./...l.o.7.V=q..%):,.LS/....q......v..a.}......".0.t..`yf.2]&.....8........&y.Eg..3..<...M..}..A8.).....?~8..xy}.....{..Y.K.........%....n.Q.e>.u.1..a.zA./..oo.........CN....5.d.cX5R'{.u..{....3.O...nn.._....,e./..M.H"......R.l$.....:.aJ.L.S.g...>#...-/$.<.g..i..[....O.............^..?.6...........g.u...............w8.w..v.=...........qog.w@..n.....%Y,o....r....%5Q......\..%Y1......!..SZ$....yyz....%...\.o.'I.1......`B.........>.<X......E......#..^..eP.....,`...E...H.4..G.v.T.A.J.Y...,....x.......!.B&.6...~0.....9.\|....4.HB.K .......,..J....!.\5+p.......94O...Ar....?..+K...>L7R..s...&.v.=+.{I..M.....D..Q..\T..%..H.....Qt..P.X...L#.g.H......O.xlu<X.........pD.lJ......(..!...V..E%.4N...z.J-...o.".~...BC....T.Qf.@..p...fS.../.R.....;3.a2.e.~>.2`Z.A..R$.X.......KZ\|..y.ei.GrI..d..P...e..d......(..(gF>k.P.>.H~.Wt...dP.KY.*".....{C515... .v.

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2763)
Category:	downloaded
Size (bytes):	2851
Entropy (8bit):	5.396953850248938
Encrypted:	false
SSDEEP:	48:Q5T5DVLKTvRFisYD9JLlPuDIpeKGFKN+oQpCTJsSv0lI2SRmQqYO68xohlK/Mesf:8iLisYD9I7vFKTQpcv+hQqYjkIEMeXKn
MD5:	CE1527DB8799A0BA1913B5C7B7F666AA
SHA1:	B1F70C926090FA9B21425E1DDBE201F2F78B6202
SHA-256:	FA44BA5620FC182EB36D66B9DEA560EDEB23AF9C3104647E39E2A4D3FABCF8CD
SHA-512:	AA38C3CE14C00087D64C107A55BB60D67969E728C3A57667A55BC95FB39258FDC2AECBD370797FF29A4F5D9C3D79B0C09F4C1EBCBFC4DC7DECB62A36565A87CF
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/async-api.30bd804e-1.236.0.min.js
Preview:	/! For license information please see async-api.30bd804e-1.236.0.min.js.LICENSE.txt /."use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[439],{7872:(e,t,n)=>{function i(e){var t=this;let n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:500,i=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{};const r=i?.leading\|\|!1;let a;return function(){for(var i=arguments.length,o=new Array(i),s=0;s<i;s++)o[s]=arguments[s];r&&void 0===a&&(e.apply(t,o),a=setTimeout((()=>a=clearTimeout(a)),n)),r\|\|(clearTimeout(a),a=setTimeout((()=>{e.apply(t,o)}),n))}}function r(e){var t=this;let n=!1;return function(){if(!n){n=!0;for(var i=arguments.length,r=new Array(i),a=0;a<i;a++)r[a]=arguments[a];e.apply(t,r)}}}n.d(t,{D:()=>i,Z:()=>r})},4247:(e,t,n)=>{n.d(t,{Be:()=>a,Ne:()=>s,Zx:()=>o,qD:()=>r});var i=n(385);function r(){let{isFinalHarvest:e=!1}=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};return e&&i.il&&i.Nk?s:a}function a(e){let{url:t,body:n=null,sync:i,metho

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979910825&i=gtm&dwt=1&ive=blur
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1x1, components 3
Category:	dropped
Size (bytes):	651
Entropy (8bit):	6.855422700006461
Encrypted:	false
SSDEEP:	12:FC9YM8fwy0lJ0Xx0WzOsvWGKkCHdcfmcGHMf/qXzUOrS07DAzEgOsvWGKkCHdcfd:49YMWbo0XxDuLHeOWXG4OZ7DAJuLHen1
MD5:	D3A1017060B4669F2FD8894B2B8B69C3
SHA1:	D5A37A76A94A6914123E817A7C4DB3E0D8B8BAE8
SHA-256:	DE0A3F8190808781B5658024B46926FFB7D397C60E85A7C3C3CE06CEDDEF58D7
SHA-512:	8652FF9659019922390A23924B21F08DF305F3D71096895305602C18AF208EE5CFC6CB9E58E37189DBB8AB3933A35F9836D33D18D1B18064A2884C07A2CE5147
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(..?...."...\.[.bz..x...i$

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18812), with no line terminators
Category:	downloaded
Size (bytes):	18812
Entropy (8bit):	5.3535049001343
Encrypted:	false
SSDEEP:	384:KrCaUB4nmZTRuFRuSMJfpI0UNkJoagHxNt4DMD7YNp9VezcYAGkAGTd8WFnzVzzb:aCaUGnmZTRuFRuS4fplUNkJoagHjt4Dj
MD5:	09EC813B4574067AB37E81D05F9C25C4
SHA1:	0FB792104D812BD0376C9DC05E6D234A2589AC1F
SHA-256:	FBB1DBAE387EBE6836838EBEA3B64BDD7723B60617B80FCCDA795D555A526C31
SHA-512:	9F007B283FDB1AD227E4C48EFCD72656957CAF638D691BFB8D82FA34FB43273B1B73B41F617664234D71034282C96CC1AC713B85220372D82C61BF7E0DD4AFAA
Malicious:	false
Reputation:	low
URL:	https://edge.xero.com/business/mybills/production/564.b5a02b8d5a01ba93520c.chunk.js
Preview:	(self.webpackChunkmy_bills=self.webpackChunkmy_bills\|\|[]).push([[564],{22926:function(e,t,n){!function(e,t){"use strict";function n(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function r(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?n(Object(r),!0).forEach((function(t){o(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):n(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function a(e){return a="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},a(e)}function o(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumera

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 13268
Category:	downloaded
Size (bytes):	5172
Entropy (8bit):	7.959217412926552
Encrypted:	false
SSDEEP:	96:DHjCOiGsWXrqLxIAuTKYq4x8jAXtqnx11Mf4HNQki1/AjX+ES:DHjCOiG/e9IAue+x3XtqntI4HIAb+d
MD5:	C0A0EB66756DE21372EDD5E5F99F5DF9
SHA1:	258572978DE82EDAB428A2714B1553DA021089F1
SHA-256:	22012BC0428674906B0B13E482EDD437CC4B755A28D11F5FB304BABB4499453C
SHA-512:	E83C076AACCEB50615F151710F0A2F09F9EEF7AA61F223F4D21260560A47C93249196B0E25AEB56714A028091F3F0854F470119D12B06FD03EAD7A2C1B332CEF
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/tooltips-modern.41f34148.js
Preview:	...........[.s.6..4..s.J."%..f.7n..q..M<.."!..E.$d...owAR?....w..mk.....b..]P...JY$....4....().L.&a..d4.$..E..?~..o.,.7.&.L.qs......].m.!.d...<.yaH..<6$..b.NS..0./V.T..cq.S..L.y..Z..K..>,.,...v,.%..X}.6Y.M...&K..s..4#h...,.f..v...f...8.m...M..g..d1...=.d#\..Z0<.....!4.^..l.i..dw8...{.k:^....]..yO.zf.EyVJm..m..i..$..a..!.E.e<D(.T.E&........8.J_.I9...i6......eY?..,....mOg#...j.'b.2...fi....K..%J.(..(.....\|...&i....Wy..y.4w...r..+..X.].O..&.../l.m....vd...y....Gm......{N..ux...q...:m..w`..:.ZO..y..Tm..;4..{-.kC.8Tm..v5....i.&...D,..C...`B.&..q..QW.K...s..F.{..[n..-..v.F.....n$k...=[...3v.N.F.#Y8t(....^O...V...:.].....U.](<.....;....pu.h..w.>.*,..:.u..E+..wx..qH..y...pk.12@.7..#..o)R...k.C.....6.3...j.A..5#p.NO}...wI.H...jwp...r,<4\.o.pf .\|:pr..{].h...h.-"U...=.i%..5...?...........j.a..A.zx...[....s:.[...q...N..u...i.Y...._@....m......~....:.........f.._......c.9:Qk4...>.5....X}......a.1..h.S...rB...B.R8..'.X.Q0......l0

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20843), with no line terminators
Category:	downloaded
Size (bytes):	20843
Entropy (8bit):	5.29909541305312
Encrypted:	false
SSDEEP:	384:1s5hvhug41rMGWYkhPY5AUBlEdilMi4146Kjqejrug11Tj+xj7IWcsAubZcdLyr2:e5F0g26ZejrP11TCxjJcsAkcdLoST1hd
MD5:	27EF55DDF9EDED9CF24CE8747E8BBE04
SHA1:	F188AC48F517044E643ABD24FEB4CC404FD6A7F1
SHA-256:	167C7894014A33B184A658A4883C24C20BBD158DC04B7FEF709F80A4BCA6A7D1
SHA-512:	5702005F5BCADC7D275AA273BE66BD24F0A9298B220E8246F63866CF44ACA5C39E1ADB8752F9B84755C338F92B412338DF2E77C6A929BAFB30DC164373CFD366
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/spa-aggregate.e6b09d52-1.236.0.min.js
Preview:	"use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[873],{1199:(t,e,i)=>{i.d(e,{R:()=>s,z:()=>r});var n=[];function r(t){if(0===n.length)return!0;if(void 0===t.hostname)return!1;for(var e=0;e<n.length;e++){var i=n[e];if("*"===i.hostname)return!1;if(a(i.hostname,t.hostname)&&o(i.pathname,t.pathname))return!1}return!0}function s(t){if(n=[],t&&t.length)for(var e=0;e<t.length;e++){var i=t[e];0===i.indexOf("http://")?i=i.substring(7):0===i.indexOf("https://")&&(i=i.substring(8));var r=i.indexOf("/");r>0?n.push({hostname:i.substring(0,r),pathname:i.substring(r)}):n.push({hostname:i,pathname:""})}}function a(t,e){return!(t.length>e.length)&&e.indexOf(t)===e.length-t.length}function o(t,e){return 0===t.indexOf("/")&&(t=t.substring(1)),0===e.indexOf("/")&&(e=e.substring(1)),""===t\|\|t===e}},2573:(t,e,i)=>{i.d(e,{o:()=>u});var n=i(4247),r=i(1117),s=i(8673),a=i(8310),o=i(5763),h=i(3860);class u extends r.w{constructor(t,e,i){super(i),this.endpoint=t,this.opts=e\|\|{},this.start

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	138
Entropy (8bit):	5.213278916391078
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHWbPun2GnNXC0MT6QMBWHW03UQM9o3JJjWRQMBWHjV:YGKY6ZBAWbm2GNS0MT6ZBAW8UZK3njW4
MD5:	7EBA7EB81FEE40CABB8596B910446C78
SHA1:	A2196C485B9F2D7BC6C6F3FD5F36DDFABB0C3302
SHA-256:	3580443E67004F0B66303521E9AF62BDF658E4DAEEB78207B4955D2A489E64EA
SHA-512:	40D4AC67E8B225396B3EA2392F2AF751F402F5BE0C706A094C990E8F9D0E4448F7AD7B5AB837E4964E22D54D38AEE3DD2B90563E6819FADFE560D2A9E7361708
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/saq_pxl?uid=XVsUfradtXcBUl5XS45ldg&is_js=true&landing_url=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&t=Pricing%20Plans%20%7C%20Xero%20US&tip=b73IWEe6fWW6DOIZ6lZVCY5tgJGOWCralUxuaafXOlo&host=https%3A%2F%2Fwww.xero.com&sa_conv_data_css_value=%270-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892%27&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%252Br0VCscx3wVXJe%252F3g0&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks
Preview:	{"conversion_tracker_uids":["goPjpLgXy9RB9rYkxDAD0O"],"retargeting_tracker_uids":["qh1rAf185NXiuYhSCMROEK"],"lookalike_tracker_uids":null}

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	338349
Entropy (8bit):	5.459383453283348
Encrypted:	false
SSDEEP:	3072:KVcCodz/5koZw023suKMWUd7FKV1Cn35+RA27D36ZGg+8E+rzZKBkCTs9:QMz/Vb28uKMX7IV1Cn35++2SZGuZ4s9
MD5:	2C4774C2A3D92E91B548D454CCC4E625
SHA1:	3B89905852CC7FA572B9B4A3EE35E81A0D8B3956
SHA-256:	AEF52CA4D81284D5F3347825CCB5916F5CAD4D3E1D58A5A38578B9DB1E50CDF1
SHA-512:	2D881796156EE1846659ED3B9619B4881B1E3E89F62ECCA6559033C517CF0D35D332DE9B73B51574DE8C10E6A44D76701EDB26BB35E216E53B38A2BB95944E59
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/_next/static/chunks/pages/_app-eecd16c5dea41931.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[888],{7154:function(e){function t(){return e.exports=t=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},t.apply(this,arguments)}e.exports=t},6479:function(e,t,n){var r=n(7316);e.exports=function(e,t){if(null==e)return{};var n,o,i=r(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(o=0;o<a.length;o++)n=a[o],t.indexOf(n)>=0\|\|Object.prototype.propertyIsEnumerable.call(e,n)&&(i[n]=e[n])}return i}},7316:function(e){e.exports=function(e,t){if(null==e)return{};var n,r,o={},i=Object.keys(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0\|\|(o[n]=e[n]);return o}},9742:function(e,t){"use strict";t.byteLength=function(e){var t=c(e),n=t[0],r=t[1];return 3(n+r)/4-r},t.toByteArray=function(e){var t,n,i=c(e),a=i[0],s=i[1],u=new o(function(e,t,n){return 3(t+n)/4-n}(0,a,s)),l=0,f=s>0?a-4:a;for(n=0;n<f;n+=4)

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9401320;type=pagev0;cat=globa002;ord=1;num=8823647633995;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;ps=1;pcor=872077554;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals?
Preview:	<html></html>

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=aam
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979910872&i=gtm&dwt=1&ive=webkitHidden
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26008), with no line terminators
Category:	downloaded
Size (bytes):	26008
Entropy (8bit):	5.400205313818421
Encrypted:	false
SSDEEP:	768:bMLh54I0JjKeb56IuCi6sqoGPASm0fHLXeh:I54dxGV6Tm0fHLXo
MD5:	83C0A3AE20BDB338DE5F1C32594E8A28
SHA1:	1BB16A48E3C00715C03F6DCCFDF886543F8C28AD
SHA-256:	24C6667BF50AF02C957012F598C561091A1C690B70C154762B8116BA887081B4
SHA-512:	6B3EDC6C1BC06C8DD4EEF2D1640F609F2CF3D7601FC92AA6E4E42686EAAE512D6BBB0F7B94394DBB1E8DDF69F9D9BD2172F9D8CCBE26A933E10BA4B38FFEEDD7
Malicious:	false
Reputation:	low
URL:	https://edge.xero.com/business/mybills/production/680.6aaa81dd750ad656b318.chunk.js
Preview:	(self.webpackChunkmy_bills=self.webpackChunkmy_bills\|\|[]).push([[680],{53233:(e,t,a)=>{"use strict";Object.defineProperty(t,"Ay",{enumerable:!0,get:function(){return s.default}});var l,s=(l=a(31806))&&l.__esModule?l:{default:l}},84278:(e,t,a)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var l=p(a(71508)),s=p(a(5556)),r=p(a(41594)),i=p(a(7129)),n=a(34900),o=p(a(94238)),d=p(a(83668)),u=a(74848);function p(e){return e&&e.__esModule?e:{default:e}}const f=r.default.forwardRef(((e,t)=>{let{characterCounter:a,children:s,fieldClassName:r,hintMessage:p,isFieldLayout:f,isGroup:c,isInvalid:h,isLabelHidden:g,label:b,labelClassName:x,labelRef:m,labelTagType:v,onBlur:y,onClick:C,onKeyDown:w,qaHook:k,validationMessage:M,wrapperIds:I,wrapperProps:E}=e;const P=(0,l.default)(r,f&&`${n.ns}-field-layout`),j=(p\|\|M)&&(0,u.jsx)(o.default,{isInvalid:h,validationMessage:M,hintMessage:p,qaHook:k,wrapperIds:I})\|\|void 0;return(0,u.jsx)(i.default.Consumer,{children:e=>{let{useFl

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	24838
Entropy (8bit):	3.496915319918756
Encrypted:	false
SSDEEP:	192:xGyAUEQmLhHD+qI4nipKs3hc9ijtukd9R08c6weS:xNAUhAhjB7rsRc8jtuk7OOweS
MD5:	C169AEE3C6F710672AE66CDB0AE20879
SHA1:	CAA44FB392A6427C7E5C22437137CB771E717C53
SHA-256:	B5107D80D618E1824D266984E1673710D3A6D766E8B3997C52E1E271FB57FA49
SHA-512:	EAE8E4EF77CF5DDCA93303DAD6B1E23E6256426EE82D0E2E20F8869D4EBCDD88E3EDF3DA9755485C3B3857F286B32CCA5F60D609FC4ED5099A82714FB51CDE8D
Malicious:	false
Reputation:	low
Preview:	......@@.... .(B..F... .... .....nB........ ......S........ .h....\..(...@......... ..........................................................................................................................+..Y......................................].......................................................................................................................................................................................@..............................................................F................................................................................................................................................................v.............................................................................#...................................................................................................................................................................................

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713979915560&id=t2_ewwvmnuh&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=cb2d649f-3168-41a8-8246-f3b3ccc5e846&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_72595d5a&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9401320;type=pagev0;cat=globa002;ord=1;num=9700359326618;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Fpricing-plans%2F;ps=1;pcor=1358158751;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F?
Preview:	<html></html>

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223683
Entropy (8bit):	5.454805360153245
Encrypted:	false
SSDEEP:	3072:tt8WClBZIncVuP0bteuvQ+AMPpgArl0xYu5GKnPt:ttlWBZ7O0bvQQGArHu5GKn1
MD5:	85F41014BE15CC3E54A4123C00C5021E
SHA1:	1E5468F507A8B0216114A8D8F63309BE8CBCAB9F
SHA-256:	01E9582655224C83E6C075F44B7EECB135E108B6AD2150BF6F78A0A77C4AD5E0
SHA-512:	78F6D6CD922AA42FD340CF215D7D91DDFABEF5EC393DFA5EB578436B9B668F839747218A4DE980AEC2395194667B1E0215623EC902EAAF8CE592536172414FCD
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/9cf7274f1587405384d41bb446f7e005/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713979915558&id=t2_ewwvmnuh&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=cb2d649f-3168-41a8-8246-f3b3ccc5e846&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_72595d5a&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	860
Entropy (8bit):	4.3770889600848975
Encrypted:	false
SSDEEP:	12:t4Pn4Xz8YipeOLDlOlcuhyY1pHQMOVVOam7aLfUAM++I+QX5W7e4A5:t4QDiAAicub1pwMaxm7Qy+1ZEO
MD5:	3DC20FF3068D347283B63ECBEDBC0F85
SHA1:	814B02876FD3B0614918F93DE30F077D045DA8F6
SHA-256:	0273BA68EDCAC94897E470DB55A0CBADB3752E0A86C59E3BC00D9C7AC73FB2DF
SHA-512:	4F2FF2F5179A91053CEDC9DFAC7A768E494F99D86F0827BB8D5F8957BBEF6A9CC174BF9B6230729940071975F1B0215A7AC849280F462C8BC07252BC7A36FFEB
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/content/dam/xero/pilot-images/admin/icons/social-media/instagram-icon.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <defs>. <symbol id="ico" viewBox="0 0 17 17">. <path d="M10.19 8.5c0 .93-.76 1.69-1.69 1.69-.93 0-1.69-.76-1.69-1.69 0-.93.76-1.69 1.69-1.69.93 0 1.69.76 1.69 1.69z"/>. <path d="M10.35 4.42H6.63c-1.22 0-2.22 1-2.22 2.22v3.72c0 1.22 1 2.22 2.22 2.22h3.72c1.22 0 2.22-1 2.22-2.22V6.65c0-1.24-1-2.23-2.22-2.23zM8.5 10.93c-1.33 0-2.43-1.08-2.43-2.43S7.16 6.07 8.5 6.07s2.43 1.08 2.43 2.43c0 1.33-1.1 2.43-2.43 2.43zm2.69-4.48c-.35 0-.63-.29-.63-.63s.29-.63.63-.63.63.29.63.63-.28.63-.63.63z"/>. <path d="M12.06 0H4.94C2.22 0 0 2.22 0 4.94v7.12C0 14.78 2.22 17 4.94 17h7.12c2.73 0 4.94-2.22 4.94-4.94V4.94C17 2.22 14.78 0 12.06 0zm1.23 10.35c0 1.62-1.32 2.94-2.94 2.94H6.63c-1.62 0-2.94-1.32-2.94-2.94v-3.7c0-1.62 1.32-2.94 2.94-2.94h3.72c1.62 0 2.94 1.32 2.94 2.94v3.7z"/>. </symbol>. </defs>.</svg>

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	32340
Entropy (8bit):	4.985866177395701
Encrypted:	false
SSDEEP:	768:tQB919XDLs9Wn5dxphxfJ+BZ6KPh94SfC2vG:tQvr89WReSsh94p2vG
MD5:	AB75BFD8899B24789E58681D7532A6F5
SHA1:	0794C6E90A3650E06BC9A8B30674501EE542D96D
SHA-256:	0C738EA950AB6F26BF788BE4E2912EB8C7A2F9D5A844571E32F7D303C0CB7443
SHA-512:	58A151B2A455EA24AFAF365B383D3DABD87EB41CDBE098AE5D8B283EF9719A549B47F7CEA93143DA85F5AE7EFF850D445B74C4966204A05BF6FA6675E28B88E1
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/_next/data/1712725399/us/pricing-plans/established.json?next_id=1712725399
Preview:	{"pageProps":{"header":[{"buttonText":"Change region","popoverDescription":"You're on our United States website. Change your region to see information and pricing for another location.","regions":[{"name":"Global","code":"zz","href":"/pricing-plans/established/"},{"name":"Hong Kong","code":"hk","href":"/hk/pricing-plans/established/"},{"name":"South Africa","code":"za","href":"/za/pricing-plans/established/"},{"name":"Malaysia","code":"my","href":"/my/pricing-plans/established/"},{"name":"New Zealand","code":"nz","href":"/nz/pricing-plans/established/"},{"name":"Australia","code":"au","href":"/au/pricing-plans/established/"},{"name":"Singapore","code":"sg","href":"/sg/pricing-plans/established/"},{"name":"Philippines","code":"ph","href":"/ph/pricing-plans/established/"},{"name":"United Kingdom","code":"uk","href":"/uk/pricing-plans/established/"},{"name":"Indonesia","code":"id","href":"/id/pricing-plans/established/"},{"name":"Ireland","code":"ie","href":"/ie/pricing-plans/established/

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	254231
Entropy (8bit):	5.5456165816335075
Encrypted:	false
SSDEEP:	3072:V09hzgNSNow8VNPT1x8B71+TYc20DCSY1KGAlDHWbUs6rgD4tL+aVsQC3w9K:ChewMNPqq4pD4tLfV9CAw
MD5:	ED212C0DC816063C40E607E2401D4F1A
SHA1:	3F8A8C63EDE66E50151B05C9F8BF49B47B549D01
SHA-256:	83853937753E624863FB754D86385472F9E4DD66362E7A46C9EF25BD04B865CB
SHA-512:	426014A9A5ABBBD5E2C9CDBB8CFE47179E817EAEB6CA762351CADE8EAA7C6246DCBD6AA14A05398D41D0D9F9C1C5DC18E9FF79F982EC449121670FFD0861E8BF
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-1023673485&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":16,"vtp_instanceDestinationId":"AW-1023673485","tag_id":113},{"function":"__ogt_dma","priority":6,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":105},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstName

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45225)
Category:	downloaded
Size (bytes):	564296
Entropy (8bit):	5.548896249607124
Encrypted:	false
SSDEEP:	12288:FYvDi8KbEdCpakkxyb/Ox9HKaipPLG2U74J0nJdS:bPLG2n0nW
MD5:	AACD16E44A73ED161A860D10717919D3
SHA1:	B9B05920216ED6C69FAF96164E9ABEE56BFD9C34
SHA-256:	873C4FDED38A372C0A11F24D84C2262F49D8836F35CB9664FBFCD9C00723BFC1
SHA-512:	2D1E87759BA0024BB544AB8751C63CFCF6D49952462A89707BE646009F1F82B4009172FF4077DACB90421EF279415D5E555ACF101AC825A62F952360E7716D0B
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-M5JB2B5
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"223",. . "macros":[{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"componentLayer1"},{"function":"__jsm","vtp_javascript":["template","(function(){var b=7;return function(a){a.set(\"dimension\"+b,a.get(\"clientId\"))}})();"]},{"function":"__jsm","vtp_javascript":["template","(function(){var a=new Date;a.setTime(a.getTime()+864E5);a=\"expires\\x3d\"+a.toUTCString();document.cookie=\"reimagined\\x3d1;\"+a+\";domain\\x3d.xero.com;path\\x3d\/;\";return!0})();"]},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__cvt_30923470_349","vtp_emailRedaction":true,"vtp_params":"username\|login_hint\|firstname\|FirstName\|lastname\|LastName\|surname\|PhoneNumber\|phone

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 114672
Category:	downloaded
Size (bytes):	31409
Entropy (8bit):	7.990593558983198
Encrypted:	true
SSDEEP:	768:Ed2NyjCVk+0CCVdWWdA2D2EC6pgAvOYfhBlYBt7hX:kCDqWWK490GHaj
MD5:	60FE166092712D93CC87039640675EF6
SHA1:	D6FECA303438C5B9C717371E5492100FDF407EE4
SHA-256:	15982E98201BB48C59CE28BA7E5C2EAC42BD8C76F20AD4924BADDE014F2A4892
SHA-512:	E150F992F6C597398696D7C13A92262D712F5558386F51F5B9B8C1467B3B091F6C717F06C31BA5FAD86C3485B7B4A9DC0755871EECE9F13EF3987941BD84DC48
Malicious:	false
Reputation:	low
URL:	https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/main.js
Preview:	...........{...u'.U....p.@..&.CQ.E.IjHJ.u..U..n..P.W.....Z...8.d.n^.,.q..I..I...r.5..O}..-;..p..<.N..t7E....F.y..>.y^..../.N.A......I......O....w+..O..:p##....'G...........a...k9b.4...@/...4_.%.(<,.~....Q.F%...ab.z......K.Z.f^2... ...y..+ol^........~..+..fQ.P...0Jb.d6.....vu..~)..,Ku...J.../koo..G.XyfEVV....f.4..2g.....:.......`/.....rX..jy].2+...V...XQ.......$.:.7....h.'......q'\|X..1;.....x..^.../.7d.Y..~\:.uo<.X.S..e+x.........0....s.&......u.:e..]P=....sQ-a..&x....c"..9.....Q..>..?...d..@.Y.?^_.......s.W..U.OXt.=L..G.R..:..^.'oz...;.4.a.'..G-..:3...U..g.M^z.9'C..N..a..W./U7I...FM....gQI...X.s...?Vh.....Yu..+n....Ppl}P.YBC.W..G8.K....~x../.n..5k.....I.t.l=..x.B?....O.....;...... .j0..... c\M...7Ja.Da...i.;.K.....q.....#.F.C...0E..Dn.....:.....a8..Y.T.Xr.g....a.L&.Co...a.N&\....`.3....0+...].\|..".Z8C[..au....IrtW.`...R.x-...@&F......r.)M.%?.[A}.pY..P...Wt.....6:....B.....hy.I..z>...pm.2.P../Y.....W.......3.... ....p2%.

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	37840
Entropy (8bit):	7.985984138723152
Encrypted:	false
SSDEEP:	768:6iyEOkMIBOPyVNp0ig7T95O4O/2EcvXj+KiZAR3/6cH6nYf2GnPOELXKjb:6iyXhIBO6bp0igjONe9fN5Z/jYYe8POh
MD5:	EB1F603F66D3E9F08930A4EC3D5A4E59
SHA1:	BBB26CE9D92562E2CC7A43D0A88C72F48F9F2257
SHA-256:	04F62089B4C8A7A5401648D710F8BCCC9404074902381D135DF73F43E3748C15
SHA-512:	A2933EA8E63720F63DFE12D97A5773EF8DAAC10C0E25D57FC71A25B5BF998D57F1457F4BAFF2BFCC0CD097E32A29B8225AFC4D9944C66CFA7E8A20C65C49B98D
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/content/dam/xero/pilot-images/features/data-capture-with-hubdoc/2-up-wayfinding_wide_hubdoc-crop.1646877470313.png
Preview:	RIFF...WEBPVP8X..............ALPHv........f.e.f..S.NK`..7Z......Z..cvH.z..a...-.J...z.VN.P.z.`.?....v..?.....n.F...Mb..3-.$p.\|.....~....~....~....~....~....~....~....~....~....~....~....~....~....~....~....~.....(.BleQ..i.Xx..,/..[...!."K".V...i..ZY..F..c!u.N..hj..t.9..0..3.........U...<j.....%..,..W...q....o.@..M...y.....(-.mZ#..{..Hv.4.Be.2..(....1.e.~.....n+.e.....8....m.....+q~..4...a2K.a.DI..\|.V6....q%...,.?n.....V.R.n..y.;a...I..q.t.......V...v.2...y.*Y......t...Q]...kfsJ.....`"s.I...,..........k.qIC`>...ao%s...Ancl...L\|...i,.....T..zn........\..5\|N0..,0%.E.)G..L>I..Rio..U2...R.....$..p.s:.O"...\u.....vN.6..E.fW..2\.g5V.d.....u.g... .\|Bo..5.P.m.u`&....A5....1..J'.h{.{.k!.'....n.M..wV..+.yU..v....?.\..kf...h.$.)O.4.....Z.G4,..;.$J.....w../...$...............'.'.+W..I.1....D-.^....~XzO1.._.c../.K..yJ.-L.m..{.,..i...t..(yYV5X#...a...H..<.[xJ.....j..yG..51t....V....x...(R.v..W..E~.]..o...../3I.+.F....M..v.'.3...0^1M.,..

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=2, description=A florist prepares a bunch of flowers and checks their cash flow with Xero\342\200\231s retail accounting software., software=Adobe Photoshop 2022 Macintosh], baseline, precision 8, 1774x1420, components 3
Category:	dropped
Size (bytes):	170460
Entropy (8bit):	7.931593744802345
Encrypted:	false
SSDEEP:	3072:WPcXLa/vWsBWDBrOJS13sW2oG0PIYXaOBfz1Tlr5bNhao2XB/ZpPkth:GcbanW1aJS13r2cIYXa01TZ5bNYo6BpW
MD5:	8DAB5135ADC8709E3411DB5CDC45C8AB
SHA1:	51906534353DCF9773EE8C50BE36C247FDF831C3
SHA-256:	59A6043550DCEA667A54C16EB4943FEC3C55890762FBA868D1E510182872C549
SHA-512:	71862D7A52FA1711C6630C97080C1E6CE111F36BE0EE219C2D9F4F1AF9BCE2BDB3B1D845302A0148D7B530F8A34DD27BBFC517287BFDBFFF84401617CED4525D
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.B.............1.......".......Adobe Photoshop 2022 Macintosh........k...`...1.......".......A florist prepares a bunch of flowers and checks their cash flow with Xero.s retail accounting software.......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dam="http://www.day.com/dam/1.0" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:cq="http://www.day.com/jcr/cq/1.0" xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/" dam:Physicalheightininches="-1.0" dam:Physicalwidthininches="-1.0" dam:Fileformat="JPEG" dam:Progressive="no" dam:extracted="2022-01-24T12:17:32.038+13:00

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CL3E7tmw24UDFaSxOgUddFkLKw;src=9401320;type=pagev0;cat=globa002;ord=1;num=9700359326618;npa=0;auiddc=*;u1=%2Fus%2Fpricing-plans%2F;ps=1;pcor=1358158751;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (30711)
Category:	downloaded
Size (bytes):	32780
Entropy (8bit):	5.28589503233425
Encrypted:	false
SSDEEP:	768:w1tlXT2sfSKsvoqSeUZbnBWNGOchEeU4176F0ZP:8lXasfSq0GDhwSP
MD5:	FF2E3BF25D34969239CEA277B666302B
SHA1:	B80AA464141C6DA1A6A3C7B1A69BE833980B2F1B
SHA-256:	95F4D3871468A9CF835156C273861A08830324BCD2B98D72CD89F6158602883C
SHA-512:	A4995CF9C9EA09FCD3B3490AC9FF86D1078D7D8F26411C12A9F9517528176C0800B42F428434DA40B75DE7E9DECE12215720492C808BA0B7792AC28B123DD76C
Malicious:	false
Reputation:	low
URL:	https://in.xero.com/m/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe?utm_source=invoiceEmailViewInvoiceButtonSecondary&utm_campaign=invoicesEmailStandardV2
Preview:	<!doctype html><html lang="en-NZ" class="xui-html"><head><title>Xero</title><meta name="robots" content="noindex,nofollow"/><meta charset="UTF-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link crossorigin href="https://edge.xero.com" rel="preconnect"/><script>;window.NREUM\|\|(NREUM={});NREUM.init={distributed_tracing:{enabled:true},privacy:{cookies_enabled:true},ajax:{deny_list:["bam.nr-data.net"]}};. window.NREUM\|\|(NREUM={}),__nr_require=function(t,e,n){function r(n){if(!e[n]){var o=e[n]={exports:{}};t[n][0].call(o.exports,function(e){var o=t[n][1][e];return r(o\|\|e)},o,o.exports)}return e[n].exports}if("function"==typeof __nr_require)return __nr_require;for(var o=0;o<n.length;o++)r(n[o]);return r}({1:[function(t,e,n){function r(t){try{s.console&&console.log(t)}catch(e){}}var o,i=t("ee"),a=t(31),s={};try{o=localStorage.getItem("__nr_flags").split(","),console&&"function"==typeof console.log&&(s.console=!0,o.indexOf("dev")!==-1&&(s.dev=!0),o.indexOf("nr_dev")

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	658
Entropy (8bit):	4.362309726226205
Encrypted:	false
SSDEEP:	12:YWTL36JOfl1MlxKfw7I33xdfEsd6YWu7kTdgplw78fd8a/v6jUK8gPDjaL:Yi6JlcwsdcDerSLaL
MD5:	289BCB620B5FB3B5ADD262CA01820813
SHA1:	193D8ADC1B0041441AE4800ADDD2F2C0120EA3B6
SHA-256:	6D9347FDD5DDD690198DDF4EC3E04EDED6FB583E26C02A5C3E034D2C4DB67CED
SHA-512:	52EFD7C2239A4DC01954A8CBCE7C61F74CC69269FDBBAAC945E5D505383A100D7B77AAAA2487B78C73964D1C5966B5FB91DEE9E51B144B6F722DCB78A04BF519
Malicious:	false
Reputation:	low
URL:	https://user-tracking-api.dgt-digital-marketing.xero.com/query?client_id=GA1.1.1808248659.1713979875
Preview:	{"user_id": "New", "exclude_flag": false, "is_demo_training_or_test_org": false, "is_xero_staff_org": false, "spam_org_name": false, "spam_or_xero_org_flag": false, "no_sign_up_spam_email": false, "no_sign_up_education_sign_up": false, "no_sign_up_competitor_domain": false, "no_sign_up_xero_staff_sign_up": false, "no_sign_up_is_spam_name": false, "no_sign_up_user_has_been_disabled": false, "more_than_2_orgs_in_a_day": false, "spam_email": false, "education_sign_up": false, "competitor_domain": false, "xero_staff_sign_up": false, "is_spam_name": false, "is_online_invoicing_invite": false, "is_education_user_by_promo_code": false, "is_api_user": false}

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	300244
Entropy (8bit):	5.608540612097891
Encrypted:	false
SSDEEP:	3072:aJS4lQ8ZhzgNSNow8VNz2U1I8K71+TYc20DCSY1KGoub1QgD4tL+aVsQCtFmN8Le:ak4VhewMNz2vqSJD4tLfV9CtsN8Ssi5
MD5:	507B9469E72FF98A2E73C1DC0EB2E408
SHA1:	B58BD6F28DF1EEB6FDABB774BF4C234A3099A386
SHA-256:	03B689DEC6FED708D4D715F68C36DE7C5A2F3E5F69E28EA60622FDE3EE5F9072
SHA-512:	80F51B6B0FCF7154A8C264099433FA0BEA1BD32F1975199B2C5B20A0A5EEC87461F651082274D999B4D2335B0FA64EC1E3AFA44E8D0653DB0D6966BFB8D977D4
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-Q622B96ZEQ&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":26,"vtp_rules":["list","^xeroblog2023\\.wpenginepowered\\.com$","xero\\.com"],"tag_id":111},{"function":"__ogt_1p_data_v2","priority":16,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_S

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9401320;type=pagev0;cat=globa000;ord=1;num=9361925215703;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=975646958;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals?
Preview:	<html></html>

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65441)
Category:	downloaded
Size (bytes):	947039
Entropy (8bit):	5.428936803124091
Encrypted:	false
SSDEEP:	6144:GZjs/z2vl81Q/kFpMCjLXeamSi8VULG43E48iWYnCGxOcXnMIu2oT51zNjzDZ4hI:8ji+liL2Si86+xGIqoXNj+fKIXcP
MD5:	1D0212A390F1E5B2D0AB12D5BC075BC4
SHA1:	4AE9211C0696BD1817935258B22216B499349E39
SHA-256:	579E5C009E0E62843C2D6891C17B15A7728640E34BB69BBC3BC084E43A672BD3
SHA-512:	F82ED56C608ACB2D28F80A5A05C53143927A664BA9D6456C75FFEC7C6E53095BE900DEC79215A6CE302C6DDDF173A52100A481A43BE511EF33C4EF52A5CFB2A3
Malicious:	false
Reputation:	low
URL:	https://edge.xero.com/business/mybills/production/IndexRoute.51d4e02b1491b79fb5ea.chunk.js
Preview:	/! For license information please see IndexRoute.51d4e02b1491b79fb5ea.chunk.js.LICENSE.txt /.(self.webpackChunkmy_bills=self.webpackChunkmy_bills\|\|[]).push([[952],{8009:(e,t)=>{"use strict";function r(e){return r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},r(e)}var n,a="https://js.stripe.com/v3",i=/^https:\/\/js\.stripe\.com\/v3\/?(\?.*)?$/,o=null,u=function(e){return null!==o\|\|(o=new Promise((function(t,r){if("undefined"!=typeof window&&"undefined"!=typeof document)if(window.Stripe,window.Stripe)t(window.Stripe);else try{var n=function(){for(var e=document.querySelectorAll('script[src^="'.concat(a,'"]')),t=0;t<e.length;t++){var r=e[t];if(i.test(r.src))return r}return null}();n&&e\|\|n\|\|(n=function(e){var t=e&&!e.advancedFraudSignals?"?advancedFraudSignals=false":"",r=document.createElement("script");r.src="".concat(a).concat(t);v

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1023673485?random=1713979916325&cv=11&fst=1713979916325&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44m0v883646161z8830923470za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.xero.com%2Fus%2F&label=v0RbCOHw2eECEI2JkOgD&hn=www.googleadservices.com&frm=0&tiba=Accounting%20Software%20%E2%80%93%20Do%20Beautiful%20Business%20%7C%20Xero%20US&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1776741404.1713979872&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0
Preview:	<html></html>

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CJaV6tmw24UDFfZZCAQdl_MDNA;src=9401320;type=pagev0;cat=globa000;ord=1;num=265233616833;npa=0;auiddc=*;u1=%2Fus%2Fpricing-plans%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=1662344157;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 14719
Category:	downloaded
Size (bytes):	3267
Entropy (8bit):	7.950430370795621
Encrypted:	false
SSDEEP:	48:XiIJFNMIi+LcjgxsFSQk2eabBmssT1o/dQlRUtjp0Hz+SUfyqzYJbbqoRdnG1zEc:SeNti+L5sFSFpo/m2wkwazEfn3yQ1ja
MD5:	2922A85CE6CAF46F828C097BF7AA1036
SHA1:	AFEDBAC8E6480A8C59CC6CA3359381731F75795B
SHA-256:	12D369C3D585D564678ED15F99B53DAD29FAA1E05475825CCD0E8F4C50CFB779
SHA-512:	F9AA3D6FA6CC032D050C1C995F5D274D4F0063101F7B428B81AC0C56F129FEC377987817F3245E32CC4B56D2F6379761BC64AC076514225E0B69108C87C6FA48
Malicious:	false
Reputation:	low
URL:	https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36&businessunitId=4becd84a00006400050b6782
Preview:	...........[....~...........7A...W h...E?-(..y+K.H9.1..w...(..{-..%>.?..."}.._......O.Fn.O.../..0...<n..N...`...{7q......<.S)&N.&.%.4Iy......2f.~..!3........o.......u[!.....?..I.wDd4!4.b&I....Ix...d3#.9...-.,.fI2..i...H%#Y..%..sB.<M....a. >_..C. ...YL.(!lK.vMx".../D.A...[..D.?2.J.5........hN\|R.N.`..I..$.C...I.I.Y..+I..[.S.F..%!.....$O.".e...H\."sx 2$4.<..T..;$;...<...g!...`..U.CB..)..:O..%.I....I...&...=D....0p.0<=.Z.<%;.5..i.......x.a9.......f...+...4..<Y..!z..4....`1O.=.j6...)......b..)!8 +.8..a\|.........EY..@.2.e..E...\|.k.YD#.....R.....M&..Q.Sk]....8..`^..+@...5=...ny..M~f.!'....MHS....9..[.D..V&..K3..~)...W.....Zf.W.%]...4..E)1...Y.\..n....E.v.}.n.c`...\|.?.w?#.s.jV..xB.w.fJ.y......A=<............6^\..kp..q..)..0@91J.6...&..7.J.....M..T7..8t..9..+.^..?mY..j.I.u...@...S!=.....j(l......'_._....I.".qW..TZ.R....p?../.;...7<.Y....0f..J..%.,.O..}."\..VY8...H.B..L3U........b.[...._..=...7.Qy...&..Rky...ay...0`.J..4..@....74L.zSh

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	74
Entropy (8bit):	3.9826031985455645
Encrypted:	false
SSDEEP:	3:qVvlKMD/WAGv4qgvOs+oNGb:qFMQ/H4lnoQb
MD5:	792E7DA69F9637E2F63C0FD5245DAC86
SHA1:	589F6FE5CE5EFBD111AC635C747838A84475CD6D
SHA-256:	F5FC14181849CB5F911A632A9663DD875BD7FA4A0565D05A17D8185CF643853C
SHA-512:	E78D9812F95CA53E1F591445AD731040F7A51107CBB411B533A36C7BC9534346DEE99FF6D3A5F948898B189471C01ECC68634DCD3CAB0B38E8EA077D56746C1D
Malicious:	false
Reputation:	low
URL:	https://s.company-target.com/s/sync?exc=lr
Preview:	<html>..<head>...<title>Pixels</title>..</head>..<body>....</body>.</html>

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1464x1464, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	44352
Entropy (8bit):	7.995064052020771
Encrypted:	true
SSDEEP:	768:8DAYbJfbAEtJJnXNeeGX5HFc7wDAtaDX+WTblCuj8P6ioqwRS32/jJCELLci8p8:YvxJ9eeGX5lcctX+WbguQobWACWcc
MD5:	08F9635A8CEDB189F7DAEA7A3DE612D1
SHA1:	1323A3FB5270975A20DE1A00E5331D3E9BEAF4B4
SHA-256:	EA775E4A3466697D8584895734B71159D7BFA69AB697B680DB13FA044D43ADE9
SHA-512:	2AFC7D3AFAFCCE1A00842ACED7BC4E2B1D50CBF392DC87CF94816A3E626F47EFD765D26708FC0E96C9C89AA581329E2B3FC09A9F61EF50C27C6631A84FB77137
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/content/dam/xero/pilot-images/features/invoicing/Invoicing_hero.1646877463310.jpg
Preview:	RIFF8...WEBPVP8 ,...p........>.v.T.......zp..cn.i.n......xe..W....~G.....Q.........y.........'...d?..{....^.I.......Q...o.....o.bm/._...SN....Z......M..@..}..U...}.e....o9.[..=.=?.yz..y.y._.....g.........y.\|....w4y..t..U....#..L......=.{.`..1.b..z7.$%.-.c..1.c.....U.s.v)...u.2...\|n.:,./.1..P..%XG....+..0o..5.....!..;.6.F..YY...w.[Q.p......8....bk?.@.c..yn-....8../$.....S:e....q!R..0......>Q..%.R..J.F. \. >.z>....;.>.8...QB.......j.=..c\&.....r..^..N.a.H...ct..:.h..1...K.5\..t..I.....hm.....R.jvi.....$]......"....r.w.....o...S?.vqY..J......N...\?Z.XgF..q..v.y..+2=..aC$ H,$.[...Kx...Y...]..i.k...{...D7(..)F....Q.O.1;...3.;x{..w.X.i.....G......#.y..t.s0....C.o...gc...2r.i./.....4.m.c. ..3Qr..Ox;..+.j.U.E;{m,.e..Tct..v(e.<....X.4=....6S.;?...0.`...)7..^;....=.%.O$.j.."....s...j:..VBY..9...)...BS)Uw.}....%.P...A.%...A......807fa.....*]=.'.:....8F..QR..J...B.=....{.uY.../I._.1...LL^>..TO....w....&.<.._Q..r0.:....8J3.....].....S......

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=bluekai
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32010)
Category:	downloaded
Size (bytes):	50049
Entropy (8bit):	5.315307632257224
Encrypted:	false
SSDEEP:	768:PFFeY2oE4e2HneiJbpJuAl39FVy7bT0tUpFk8Qgm:tIyreiBphl39FsvTpFvi
MD5:	63E2DF852D15AB21D7FF8FC4363222E8
SHA1:	7EE401BA652DB0A4EC960350E17216CDA01E22FB
SHA-256:	545156ADEAE44DADC82B98D504F805EBE77FB79C928EF34EED1057BB9D4CB8FE
SHA-512:	BAAD17C762461527B270B57EF294E28BEFF92B3A66829B8DDD8788A791AEBB0A40BE849BFC79FCFC5CB0D7FFC7FD709CA6CD6A61CAC878CE60F585D40F214970
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/nr-spa-1216.min.js
Preview:	!function(t,n,e){function r(e,o){if(!n[e]){if(!t[e]){var a="function"==typeof __nr_require&&__nr_require;if(!o&&a)return a(e,!0);if(i)return i(e,!0);throw new Error("Cannot find module '"+e+"'")}var s=n[e]={exports:{}};t[e][0].call(s.exports,function(n){var i=t[e][1][n];return r(i\|\|n)},s,s.exports)}return n[e].exports}for(var i="function"==typeof __nr_require&&__nr_require,o=0;o<e.length;o++)r(e[o]);return r}({1:[function(t,n,e){var r=t(46);n.exports=function(t,n){return"addEventListener"in window?window.addEventListener(t,n,r(!1)):"attachEvent"in window?window.attachEvent("on"+t,n):void 0}},{}],2:[function(t,n,e){function r(t,n,e,r){var i=d(t,n,e);return i.stats=a(r,i.stats),i}function i(t,n,e,r,i){var a=d(t,n,e,i);return a.metrics=o(r,a.metrics),a}function o(t,n){return n\|\|(n={count:0}),n.count+=1,v(t,function(t,e){n[t]=a(e,n[t])}),n}function a(t,n){return null==t?s(n):n?(n.c\|\|(n=f(n.t)),n.c+=1,n.t+=t,n.sos+=t*t,t>n.max&&(n.max=t),t<n.min&&(n.min=t),n):{t:t}}function s(t){return t?t.

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	116
Entropy (8bit):	4.866602445362615
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHW03UQM9o3JJjWRQMBWHjV:YGKY6ZBAJ70MT6ZBAW8UZK3njWRZBAB
MD5:	9DFAC332BA53300DD79D5A6F96476423
SHA1:	524143EEA918B40E128EC00D93275251BB0AB618
SHA-256:	58DE1C15604E1D625AD854D74C6BC52D7EEDC99BD77D10A968771F88C9F8301C
SHA-512:	7C34DFA01CB406BC78BC955D41F91620F324BB27FE8612BCE0E66EDC19CD0B56B8C3F3180599990ACED864D4133BF7436530E11301B396E6CCA3240D679726DF
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/saq_pxl?uid=XVsUfradtXcBUl5XS45ldg&is_js=true&landing_url=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&t=Manage%20Invoices%20with%20Xero%20Accounting%20Software%20%7C%20Xero%20US&tip=K3-yO62zYSgknJOjyQJz0FhpvQ9nprx7VnqHV_vSi0M&host=https%3A%2F%2Fwww.xero.com&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%252Br0VCscx3wVXJe%252F3g0&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":["qh1rAf185NXiuYhSCMROEK"],"lookalike_tracker_uids":null}

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	658
Entropy (8bit):	4.362309726226205
Encrypted:	false
SSDEEP:	12:YWTL36JOfl1MlxKfw7I33xdfEsd6YWu7kTdgplw78fd8a/v6jUK8gPDjaL:Yi6JlcwsdcDerSLaL
MD5:	289BCB620B5FB3B5ADD262CA01820813
SHA1:	193D8ADC1B0041441AE4800ADDD2F2C0120EA3B6
SHA-256:	6D9347FDD5DDD690198DDF4EC3E04EDED6FB583E26C02A5C3E034D2C4DB67CED
SHA-512:	52EFD7C2239A4DC01954A8CBCE7C61F74CC69269FDBBAAC945E5D505383A100D7B77AAAA2487B78C73964D1C5966B5FB91DEE9E51B144B6F722DCB78A04BF519
Malicious:	false
Reputation:	low
Preview:	{"user_id": "New", "exclude_flag": false, "is_demo_training_or_test_org": false, "is_xero_staff_org": false, "spam_org_name": false, "spam_or_xero_org_flag": false, "no_sign_up_spam_email": false, "no_sign_up_education_sign_up": false, "no_sign_up_competitor_domain": false, "no_sign_up_xero_staff_sign_up": false, "no_sign_up_is_spam_name": false, "no_sign_up_user_has_been_disabled": false, "more_than_2_orgs_in_a_day": false, "spam_email": false, "education_sign_up": false, "competitor_domain": false, "xero_staff_sign_up": false, "is_spam_name": false, "is_online_invoicing_invite": false, "is_education_user_by_promo_code": false, "is_api_user": false}

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65453)
Category:	downloaded
Size (bytes):	703366
Entropy (8bit):	5.474221757712168
Encrypted:	false
SSDEEP:	6144:VWKRqVxGkRXguntnwXcm87+0kt6cHK51zutQcEtkQp6C7C0gqyRUlZQ79QPyKWBX:VWTVh3+NW1NpkK+0gqFy/BOyOfbTs
MD5:	217249B467829E20EDCB9CE529FF53FE
SHA1:	6B86B9A52C4C9D7102B518F3AF5C5D118983E463
SHA-256:	9CCCCBCEDFF99C9FBCFD728C83B1789E024132544A390A84EA4719756F63718B
SHA-512:	B8E4DDF8AA38E4A936A2F388495AE5F2CB3F51A912771C265F7F187C2334109779C8106DD67937B26985E51D47D4F7FD1FC7F58BA7A124710E5C97B2AB37BC3F
Malicious:	false
Reputation:	low
URL:	https://edge.xero.com/business/mybills/production/main.1fa941fbe0b37736643c.js
Preview:	/! For license information please see main.1fa941fbe0b37736643c.js.LICENSE.txt /.(()=>{var e,t,r,n,o={14147:(e,t)=>{"use strict";function r(e){if(void 0===e)return NaN;if(null===e)return 0;if("boolean"==typeof e)return e?1:0;if("number"==typeof e)return e;if("symbol"==typeof e\|\|"bigint"==typeof e)throw new TypeError("Cannot convert symbol/bigint to number");return Number(e)}function n(e,t){return Object.is?Object.is(e,t):e===t?0!==e\|\|1/e==1/t:e!=e&&t!=t}Object.defineProperty(t,"__esModule",{value:!0}),t.msFromTime=t.OrdinaryHasInstance=t.SecFromTime=t.MinFromTime=t.HourFromTime=t.DateFromTime=t.MonthFromTime=t.InLeapYear=t.DayWithinYear=t.DaysInYear=t.YearFromTime=t.TimeFromYear=t.DayFromYear=t.WeekDay=t.Day=t.Type=t.HasOwnProperty=t.ArrayCreate=t.SameValue=t.ToObject=t.TimeClip=t.ToNumber=t.ToString=void 0,t.ToString=function(e){if("symbol"==typeof e)throw TypeError("Cannot convert a Symbol value to a string");return String(e)},t.ToNumber=r,t.TimeClip=function(e){return isFinite(e)?

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (30984), with no line terminators
Category:	dropped
Size (bytes):	30993
Entropy (8bit):	5.0011860238398675
Encrypted:	false
SSDEEP:	384:18x2ZB919XDLWT2LTzBX5C3pLH3pYEp+5y/tN0301DvG:qQB919XDL3JX5K3mED5lvG
MD5:	C84C22D7F7834797B0DEC8DAD2F0798C
SHA1:	C1A61534778B4BE259E81F0B30551284990F813E
SHA-256:	D52D7D1D16976A64176872FF784A0EA7BDC8EFB3782EB6D2A9927288FB8ED645
SHA-512:	FC4C6D11F6455DE3E961BDD3214DC19CE297ECCB8618B88C4A606D147EA36B31D5B0E7E38226AE3D010802E136C59FD130B74B03547D5CF514044AA9C50CC09A
Malicious:	false
Reputation:	low
Preview:	{"pageProps":{"header":[{"heading":"60% off for 4 months when you purchase Xero. ","@type":"xero/components/content/offer-banner","@oldId":"content-offer_banner-1115512261","alwaysVisible":false,"link":{"current":false,"text":"Buy now","href":"https://www.xero.com/us/pricing-plans/","leadingText":null},"promocode":"SPRINGSAVE60","theme":"human","id":"SPRINGSAVE60","@id":"content--1734539736"},{"buttonText":"Change region","popoverDescription":"You're on our United States website. Change your region to see information and pricing for another location.","regions":[{"name":"Global","code":"zz","href":"/"},{"name":"Hong Kong","code":"hk","href":"/hk/"},{"name":"South Africa","code":"za","href":"/za/"},{"name":"Malaysia","code":"my","href":"/my/"},{"name":"New Zealand","code":"nz","href":"/nz/"},{"name":"Australia","code":"au","href":"/au/"},{"name":"Singapore","code":"sg","href":"/sg/"},{"name":"Philippines","code":"ph","href":"/ph/"},{"name":"United Kingdom","code":"uk","href":"/uk/"},{"n

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=206915&time=1713979900773&url=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F
Preview:	{}

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (487)
Category:	downloaded
Size (bytes):	488
Entropy (8bit):	4.841686487844174
Encrypted:	false
SSDEEP:	12:ZorFgHDWrwAfu1eEkLsFtdJdG8nGELUD4LxZr8a65wARn:pDWJfurG8Goa4UR
MD5:	2775054C068B37509E0798448F7FD32C
SHA1:	8CCB907373C30EB3B98D5A24EC92141A938F09F5
SHA-256:	484EF4268F1D679C1AE88C06FC2388D39AFC441465732617E5E2CDC2E3D418E2
SHA-512:	5423F06453EA452614E21391C098D252DDB65ABC958C02664D9B6F1BD3BAD858B396B053C57AA714391C8953F849FAC3B6ECB9AA0C4F74F4FB81C1242B485EB4
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/universal_pixel.1.1.0.js
Preview:	var TTDCM = function () { function n(t) { var e = "iframe_" + this.mapIndex++, i = document.createElement("iframe"); i.setAttribute("id", e), i.setAttribute("allowTransparency", !0), i.setAttribute("height", 0), i.setAttribute("width", 0), i.setAttribute("src", t), document.body.appendChild(i) } this.init = function (t) { if (this.sslOnly = "https:" == location.protocol, void 0 !== t && null != t && 0 != t.length) for (var e = t.length, i = this.mapIndex = 0; i < e; i++)n(t[i]) } };.

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (609)
Category:	downloaded
Size (bytes):	958
Entropy (8bit):	5.325764001841382
Encrypted:	false
SSDEEP:	24:si2N1V4NxwZG1A/s3elqjzsURNU9jziRcbaY:rN3uU3elqEUo96uZ
MD5:	DC0769A4F217D7D580FAF879F7B8D54C
SHA1:	CA5179D3B14C4DB2DED0487B69C15BC2C9F4AFF8
SHA-256:	A1D48D90C7A301574A365EEEA9CD3E0CCED9B4A310DD42A9805582D1A1F7C5FB
SHA-512:	D8F2578694726089E00AFAEC177706133F8E3CB1E2E2D972160D9B2F035035C273EEEFFA4A1B2AE681C51AA5C42EDA0D02B81143B602ED5D835075B8C9313333
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/up?adv=9nlrx8p&ref=https%3A%2F%2Fwww.xero.com%2Fus%2F&upid=e7m2c49&upv=1.1.0&td1=https://www.xero.com/us/
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( ["https://idpix.media6degrees.com/orbserv/hbpix?pixId=69060&pcv=78&ptid=87&tpuv=01&tpu=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dyjn0gup","https://aa.agkn.com/adscores/g.pixel?sid=9211946648&tdid=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&_redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dadadvisor%26ttd_tpi%3D1%26gdpr%3D1%26gdpr_consent%3D","https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&expiration=1716571922&gdpr=0&gdpr_consent="] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 632 x 328, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	292134
Entropy (8bit):	7.989083807796007
Encrypted:	false
SSDEEP:	6144:jZshDKg2BCr0DsVsxoiUr4jfMNZc6Cscrjxjl8u04dS78l1oQjAVoenDs:dsgo3cjsTchBdS4l1oQjAC
MD5:	77EDDFDB3AC055CD746A90A7F8D2D442
SHA1:	EF585D669BB94CAABBE6587BDD7EB304B097ECC5
SHA-256:	26FF0FE6662F2FE50073E8816DA341F3B776C5D2A8BF0BC8B5ADE56C95961427
SHA-512:	39F4C2DFCDCC6666502A64BC1C694F03BAD09C7C16B80F0135FABA83629E71853BE4C0C0D9E3C35FEACC9CFE8CFCDB268946C3F23E92E3F838401F53B26CE65E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...H.............sRGB...,.....pHYs...............t.IDATx...xVg..=s..R..!B.C...C...!... .I .M.......B..J.B.t.y.{.9/..^....sd...J....z\|?y....^._...d.I&.d.I&.d.I&.d.I&.d.I&.d...rv66...2D...`.....AOs....Bk...n......-l].`..x.=(a..GP.....??..:.7H&.d.I&.d......a}==...m....T..;d.t....g..}.8.9..E.v4l.l`hh.S.3...! s..}.....{P.....}G'.6.$.L2.$.L.....T.......dbd..G...h....U[MU...r....b.%.......B..`.......6`...L.......x...k...,O...C%.L2........N..P8y....vg.=.I&.d.P.0@mB........xm.....t(..,.9.9}]=.../L@]../.\.`in.77o.....;O...@..?8...k......x{..ut..ru....W........p..Wq..5i?..u..(.e....&.^ryR..f&%.56..t.I&.d...M.....[/.....<v:.j..........1...:...0.D....6..z....Fxp.b.......&....Bt\*..B`b`.oOo..gM...'$.`...........<<.z;...8.F.Y..Y.:.....Bm..^.z<....4zu..p`..w...].....o.j.A......:.7H...?.....y.X...\$.."-=......?N2.$...l&...=z..f@.....aO...5.]\.d..#=..........{.{...1.......<y~^>...Gdx$.ut..........<].g...W......S..=&........I.n[@@@O.. +G......!~~..l

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 705897
Category:	downloaded
Size (bytes):	166299
Entropy (8bit):	7.99719957204128
Encrypted:	true
SSDEEP:	3072:0C644QTQb2yL3KI7lOrBy8sJwssBSG+2axG5octgBkzFPnjm82bWkrArFBDbgWjh:0mm26f74DsJdsBSh24cKqnjm8urQDbV3
MD5:	D625DB79DB383FDAEF04243566C4AFCE
SHA1:	602DD72D8ACE3CAF67935FADFA7DBB2F8124AC80
SHA-256:	7F3046C46346778BB29417C58A123A51E6B192997660E5AA4315B84D5ECBC5C6
SHA-512:	50B47A9E4605FDEDDF18D54BA7B01EDB8797EEF02F480475CABF8665908D7669440708CAD92DC6BB4E34924EC613BD630668D9BFBE2780CA17233024F248E2CE
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/vendors~app~tooltips-modern.7e0e68e9.js
Preview:	............s.G./....../......6(H..)K6..D.n..N.(.e.(.P E............S.e[^..v..^...\|x......B..<=..>..k.U.Y...<..df.N..k........G..,Qrs. z.....$..G....(....z.C.E.,x}.n..K..W.x...kq...Ro\M.u/%N~$G.......39WZ.....3..#.j..+xd^r...\|..:Ka..8..c~.....g.Z..v....lf.Xe...c..).%.!...8.Y.>N...XdI..(...8.cf...S....z..ror.D....'J.$[..Yf!...A.>..y..j.<..G>\|d.-V....z....l<.G.K..,.`G...Ex..sg..h?N..v.{....g....$zyI..~.22x.M..w.&+....S.E.+..y.Y.../..B..[of..j...gT<.Y...7..K......{\..sH.W.tr2W...b...*.OG..9=?.b.......H4....B..$.......t.<.....kx}......3......R.]{...V....c..F;D..I..T...).d5.6=L4v..e.~...<..c.5N-..)>4_z.....e7sv...I...9x.d5.,zL..C...hSu.f...%..9.t.x.,X.,.PQOXE.Z(.6[..&W$....v5.?N.8.G........K..Ef............1.X........j.)..O6;,....\...^;..?...S.%.OM.z............d.<./CI.f.DG...9)...0...1=.&\|........=.T.%qn..1-)-...q.....w..uy....L......".e...v.fFJj..[i..n%......e..WsxG.-.l.0...... ..w!T.D..'..!...N.d..[N[)yW.>Yt..:....\|...>.......&.Y_=

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (532)
Category:	downloaded
Size (bytes):	3899
Entropy (8bit):	5.14595235857322
Encrypted:	false
SSDEEP:	96:r6jI8+c01yY6QwFEPmXy3+UvKJygLmM62yANtKh:OHKMEwuPymKggr2
MD5:	6EAFACFE7D21F1B942A0D5E1D14679AC
SHA1:	D6FC6CCDC3CD35A6FEF71E951DB2CC85662AE817
SHA-256:	933D2E00A1738AD482B66A4FC741299A3CEF9A2F13B11A30B277BC51E5D57019
SHA-512:	281B603E6D5262AA538C6CB34FA9E97BE345D88C3C3CFCE0B7573EBA3F69F705B29644FB73DEF94FD87808C03E86A87DF388A6BA52F5405A01CBEDBB8B4B226B
Malicious:	false
Reputation:	low
URL:	https://rules.quantcount.com/rules-p-W92Yh-Yvb160e.js
Preview:	/. Quantcast measurement tag. Copyright (c) 2008-2022, Quantcast Corp../.'use strict';(function(a,k,h){var l=function(d){var e=h.createElement("a");e.href=d;return e},m=[/^http[s]?:\/\/((adservice.google.)\|([^\/]fls\.doubleclick\.net))\/.~oref=(?<url>[^;\n])/,/^http[s]?:\/\/[^\/]tealium.\/.page_url=(?<url>[^&])/],n=function(){if(k.top!==k.self){try{for(var d=0;d<m.length;d++){var e=h.location.href.match(m[d]);if(e&&e.groups.url){var f=decodeURIComponent(e.groups.url);break}}}catch(g){}return f?l(f):l(h.referrer)}return h.location},p=function(d,e,f){return d?"nc"===.d?!e\|\|!f\|\|0>e.indexOf(f):"eq"===d?e===f:"sw"===d?0===e.indexOf(f):"ew"===d?(d=e.length-f.length,e=e.lastIndexOf(f,d),-1!==e&&e===d):"c"===d?0<=e.indexOf(f):!1:!1},c=function(d,e,f){var g=n().href;p(e,g,f)?d(g):d(!1)},b=function(d){return"array"==={}.toString.call(d).match(/\s([a-zA-Z]+)/)[1].toLowerCase()?{labels:d.join(",")}:{labels:""+d}};try{__qc("defaults",a,{labels:"_fp.event.Default"})}catch(d){}__qc.apply(nu

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (50463)
Category:	downloaded
Size (bytes):	238475
Entropy (8bit):	5.695672045014746
Encrypted:	false
SSDEEP:	3072:QB3XrsBs9560cyBxdcfxIt3XLGhGtxnIsBZd:QB3XrsBs9k0cyBxdcfxIt3XLGMtXd
MD5:	FF55CE931D6713EE2FF41A9B1C328E97
SHA1:	9EDA68FA626AB3B4BCEE00A44B0F79948531E42C
SHA-256:	9ACB04D752AD7CC492C2FCD8AEE2BE1D6E2DFC9B2B023750BAF3C6C825BC4C55
SHA-512:	8CD6BA3CE86516B41479BBCEBAB84F0E2DFFBA6F36A2855245E902A6975528EF2AE47166C9BECA35A10A824FFC1ECAD30E5A2BF1DA417E5C67E2DCD382F969A6
Malicious:	false
Reputation:	low
URL:	https://www.xero.com/us/try-now/manage-invoices/?utm_source=xero-invoice&utm_medium=referral&utm_campaign=global-d-lf-xeroinvoicereferrals
Preview:	<!DOCTYPE html><html lang="en"><head><meta name="viewport" content="width=device-width"/><meta charSet="utf-8"/><title>Manage Invoices with Xero Accounting Software \| Xero US</title><link rel="shortcut icon" href="/content/dam/xero/pilot-images/admin/icons/favicon/favicon.ico"/><link rel="icon" sizes="144x144" href="/content/dam/xero/pilot-images/admin/icons/favicon/apple-touch-icon-144x144-precomposed.png"/><link rel="apple-touch-icon-precomposed" sizes="144x144" href="/content/dam/xero/pilot-images/admin/icons/favicon/apple-touch-icon-144x144-precomposed.png"/><link rel="apple-touch-icon-precomposed" sizes="114x114" href="/content/dam/xero/pilot-images/admin/icons/favicon/apple-touch-icon-114x114-precomposed.png"/><link rel="apple-touch-icon-precomposed" sizes="72x72" href="/content/dam/xero/pilot-images/admin/icons/favicon/apple-touch-icon-72x72-precomposed.png"/><link rel="apple-touch-icon-precomposed" href="/content/dam/xero/pilot-images/admin/icons/favicon/apple-touch-icon-precom

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&expiration=1716571922&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CK3dyM6w24UDFaywOgUd4ZMBrw;src=9401320;type=pagev0;cat=globa000;ord=1;num=9361925215703;npa=0;auiddc=*;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=975646958;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals
Preview:	GIF89a.............!.......,...........D.;

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 24, 2024 19:30:28.772406101 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 24, 2024 19:30:38.382400036 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 24, 2024 19:30:39.239769936 CEST	49739	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:30:39.239871979 CEST	443	49739	142.250.141.105	192.168.2.4
Apr 24, 2024 19:30:39.239979982 CEST	49739	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:30:39.240293980 CEST	49739	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:30:39.240345955 CEST	443	49739	142.250.141.105	192.168.2.4
Apr 24, 2024 19:30:39.599924088 CEST	443	49739	142.250.141.105	192.168.2.4
Apr 24, 2024 19:30:39.600343943 CEST	49739	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:30:39.600368977 CEST	443	49739	142.250.141.105	192.168.2.4
Apr 24, 2024 19:30:39.601341963 CEST	443	49739	142.250.141.105	192.168.2.4
Apr 24, 2024 19:30:39.601406097 CEST	49739	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:30:39.603158951 CEST	49739	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:30:39.603221893 CEST	443	49739	142.250.141.105	192.168.2.4
Apr 24, 2024 19:30:39.646471024 CEST	49739	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:30:39.646490097 CEST	443	49739	142.250.141.105	192.168.2.4
Apr 24, 2024 19:30:39.695868015 CEST	49739	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:30:41.854417086 CEST	49746	443	192.168.2.4	23.202.57.177
Apr 24, 2024 19:30:41.854460955 CEST	443	49746	23.202.57.177	192.168.2.4
Apr 24, 2024 19:30:41.854532003 CEST	49746	443	192.168.2.4	23.202.57.177
Apr 24, 2024 19:30:41.912179947 CEST	49746	443	192.168.2.4	23.202.57.177
Apr 24, 2024 19:30:41.912199020 CEST	443	49746	23.202.57.177	192.168.2.4
Apr 24, 2024 19:30:42.264413118 CEST	443	49746	23.202.57.177	192.168.2.4
Apr 24, 2024 19:30:42.264492035 CEST	49746	443	192.168.2.4	23.202.57.177
Apr 24, 2024 19:30:42.274228096 CEST	49746	443	192.168.2.4	23.202.57.177
Apr 24, 2024 19:30:42.274240017 CEST	443	49746	23.202.57.177	192.168.2.4
Apr 24, 2024 19:30:42.274602890 CEST	443	49746	23.202.57.177	192.168.2.4
Apr 24, 2024 19:30:42.317323923 CEST	49746	443	192.168.2.4	23.202.57.177
Apr 24, 2024 19:30:42.586220026 CEST	49746	443	192.168.2.4	23.202.57.177
Apr 24, 2024 19:30:42.632114887 CEST	443	49746	23.202.57.177	192.168.2.4
Apr 24, 2024 19:30:42.755198956 CEST	443	49746	23.202.57.177	192.168.2.4
Apr 24, 2024 19:30:42.755598068 CEST	49746	443	192.168.2.4	23.202.57.177
Apr 24, 2024 19:30:42.755614996 CEST	443	49746	23.202.57.177	192.168.2.4
Apr 24, 2024 19:30:42.755669117 CEST	443	49746	23.202.57.177	192.168.2.4
Apr 24, 2024 19:30:42.755683899 CEST	49746	443	192.168.2.4	23.202.57.177
Apr 24, 2024 19:30:42.755702019 CEST	443	49746	23.202.57.177	192.168.2.4
Apr 24, 2024 19:30:42.891794920 CEST	49747	443	192.168.2.4	23.202.57.177
Apr 24, 2024 19:30:42.891849041 CEST	443	49747	23.202.57.177	192.168.2.4
Apr 24, 2024 19:30:42.891951084 CEST	49747	443	192.168.2.4	23.202.57.177
Apr 24, 2024 19:30:42.892241001 CEST	49747	443	192.168.2.4	23.202.57.177
Apr 24, 2024 19:30:42.892251015 CEST	443	49747	23.202.57.177	192.168.2.4
Apr 24, 2024 19:30:43.233575106 CEST	443	49747	23.202.57.177	192.168.2.4
Apr 24, 2024 19:30:43.233680010 CEST	49747	443	192.168.2.4	23.202.57.177
Apr 24, 2024 19:30:43.240339994 CEST	49747	443	192.168.2.4	23.202.57.177
Apr 24, 2024 19:30:43.240354061 CEST	443	49747	23.202.57.177	192.168.2.4
Apr 24, 2024 19:30:43.240670919 CEST	443	49747	23.202.57.177	192.168.2.4
Apr 24, 2024 19:30:43.242094040 CEST	49747	443	192.168.2.4	23.202.57.177
Apr 24, 2024 19:30:43.284111977 CEST	443	49747	23.202.57.177	192.168.2.4
Apr 24, 2024 19:30:43.516242027 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:43.516283035 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:43.516566038 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:43.516897917 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:43.516911983 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:43.567939043 CEST	443	49747	23.202.57.177	192.168.2.4
Apr 24, 2024 19:30:43.568164110 CEST	443	49747	23.202.57.177	192.168.2.4
Apr 24, 2024 19:30:43.568274975 CEST	49747	443	192.168.2.4	23.202.57.177
Apr 24, 2024 19:30:43.570543051 CEST	49747	443	192.168.2.4	23.202.57.177
Apr 24, 2024 19:30:43.570591927 CEST	443	49747	23.202.57.177	192.168.2.4
Apr 24, 2024 19:30:43.846442938 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:43.847012997 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:43.847040892 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:43.848026037 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:43.848093033 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:43.853482962 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:43.853566885 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:43.853771925 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:43.895690918 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:43.895714045 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:43.942543030 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:44.162203074 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.162664890 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.162687063 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.162703991 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:44.162727118 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.162767887 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:44.162777901 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.168023109 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.168087006 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:44.168108940 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.173315048 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.173389912 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:44.173397064 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.178627968 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.178689003 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:44.178694963 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.184000015 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.184070110 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:44.184073925 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.194606066 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.194660902 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.194660902 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:44.194669962 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.194700956 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:44.200021982 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.205317020 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.205377102 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:44.205384016 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.210793018 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.210825920 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.210874081 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:44.210880995 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.210921049 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:44.216022015 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.221323013 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.221359968 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:44.221366882 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.270647049 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:44.270665884 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.317517996 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:44.322717905 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.325320005 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.325401068 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:44.325402975 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.325429916 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.325500011 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:44.330013037 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.334712982 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.334762096 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:44.334768057 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.339189053 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.339234114 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:44.339238882 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.343405962 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.343455076 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:44.343463898 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.343668938 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.343751907 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:44.343926907 CEST	49750	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:30:44.343940973 CEST	443	49750	162.247.243.39	192.168.2.4
Apr 24, 2024 19:30:44.527564049 CEST	49754	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:44.527594090 CEST	443	49754	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:44.527648926 CEST	49754	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:44.577902079 CEST	49754	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:44.577919960 CEST	443	49754	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:44.909437895 CEST	443	49754	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:44.909830093 CEST	49754	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:44.909842968 CEST	443	49754	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:44.911309004 CEST	443	49754	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:44.911374092 CEST	49754	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:45.089253902 CEST	49754	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:45.089598894 CEST	443	49754	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:45.089975119 CEST	49754	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:45.089991093 CEST	443	49754	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:45.134839058 CEST	49754	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:45.491163969 CEST	443	49754	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:45.491483927 CEST	443	49754	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:45.491677999 CEST	49754	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:45.493261099 CEST	49754	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:45.493285894 CEST	443	49754	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:45.848352909 CEST	49757	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:45.848440886 CEST	443	49757	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:45.848539114 CEST	49757	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:45.849174023 CEST	49757	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:45.849211931 CEST	443	49757	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:46.173938036 CEST	443	49757	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:46.175863028 CEST	49757	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:46.175909042 CEST	443	49757	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:46.176255941 CEST	443	49757	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:46.176822901 CEST	49757	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:46.176887989 CEST	443	49757	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:46.178483009 CEST	49757	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:46.220155954 CEST	443	49757	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:46.222199917 CEST	49757	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:46.564040899 CEST	443	49757	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:46.564177036 CEST	443	49757	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:46.564241886 CEST	49757	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:46.565459967 CEST	49757	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:46.565501928 CEST	443	49757	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:48.763309002 CEST	49766	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:48.763351917 CEST	443	49766	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:48.763423920 CEST	49766	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:48.767831087 CEST	49766	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:48.767843008 CEST	443	49766	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:49.091590881 CEST	443	49766	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:49.091976881 CEST	49766	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:49.091994047 CEST	443	49766	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:49.093018055 CEST	443	49766	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:49.093063116 CEST	49766	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:49.094057083 CEST	49766	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:49.094116926 CEST	443	49766	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:49.094675064 CEST	49766	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:49.094680071 CEST	443	49766	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:49.147475004 CEST	49766	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:49.483200073 CEST	443	49766	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:49.483313084 CEST	443	49766	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:49.483359098 CEST	49766	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:49.484944105 CEST	49766	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:49.484960079 CEST	443	49766	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:49.608495951 CEST	443	49739	142.250.141.105	192.168.2.4
Apr 24, 2024 19:30:49.608551979 CEST	443	49739	142.250.141.105	192.168.2.4
Apr 24, 2024 19:30:49.608704090 CEST	49739	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:30:50.205089092 CEST	49739	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:30:50.205146074 CEST	443	49739	142.250.141.105	192.168.2.4
Apr 24, 2024 19:30:51.189002037 CEST	49775	443	192.168.2.4	216.137.39.9
Apr 24, 2024 19:30:51.189027071 CEST	443	49775	216.137.39.9	192.168.2.4
Apr 24, 2024 19:30:51.189201117 CEST	49775	443	192.168.2.4	216.137.39.9
Apr 24, 2024 19:30:51.189462900 CEST	49775	443	192.168.2.4	216.137.39.9
Apr 24, 2024 19:30:51.189471006 CEST	443	49775	216.137.39.9	192.168.2.4
Apr 24, 2024 19:30:51.229403973 CEST	49776	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:30:51.229434013 CEST	443	49776	13.85.23.86	192.168.2.4
Apr 24, 2024 19:30:51.229490995 CEST	49776	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:30:51.230930090 CEST	49776	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:30:51.230937958 CEST	443	49776	13.85.23.86	192.168.2.4
Apr 24, 2024 19:30:51.521378994 CEST	443	49775	216.137.39.9	192.168.2.4
Apr 24, 2024 19:30:51.521657944 CEST	49775	443	192.168.2.4	216.137.39.9
Apr 24, 2024 19:30:51.521673918 CEST	443	49775	216.137.39.9	192.168.2.4
Apr 24, 2024 19:30:51.523092031 CEST	443	49775	216.137.39.9	192.168.2.4
Apr 24, 2024 19:30:51.523148060 CEST	49775	443	192.168.2.4	216.137.39.9
Apr 24, 2024 19:30:51.524287939 CEST	49775	443	192.168.2.4	216.137.39.9
Apr 24, 2024 19:30:51.524360895 CEST	443	49775	216.137.39.9	192.168.2.4
Apr 24, 2024 19:30:51.524473906 CEST	49775	443	192.168.2.4	216.137.39.9
Apr 24, 2024 19:30:51.524481058 CEST	443	49775	216.137.39.9	192.168.2.4
Apr 24, 2024 19:30:51.667315006 CEST	49775	443	192.168.2.4	216.137.39.9
Apr 24, 2024 19:30:51.812796116 CEST	443	49776	13.85.23.86	192.168.2.4
Apr 24, 2024 19:30:51.812876940 CEST	49776	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:30:51.820346117 CEST	49776	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:30:51.820364952 CEST	443	49776	13.85.23.86	192.168.2.4
Apr 24, 2024 19:30:51.820588112 CEST	443	49776	13.85.23.86	192.168.2.4
Apr 24, 2024 19:30:51.923929930 CEST	49776	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:30:52.184451103 CEST	443	49775	216.137.39.9	192.168.2.4
Apr 24, 2024 19:30:52.184513092 CEST	443	49775	216.137.39.9	192.168.2.4
Apr 24, 2024 19:30:52.184696913 CEST	49775	443	192.168.2.4	216.137.39.9
Apr 24, 2024 19:30:52.184716940 CEST	443	49775	216.137.39.9	192.168.2.4
Apr 24, 2024 19:30:52.184736967 CEST	443	49775	216.137.39.9	192.168.2.4
Apr 24, 2024 19:30:52.184792042 CEST	49775	443	192.168.2.4	216.137.39.9
Apr 24, 2024 19:30:52.198412895 CEST	49775	443	192.168.2.4	216.137.39.9
Apr 24, 2024 19:30:52.198438883 CEST	443	49775	216.137.39.9	192.168.2.4
Apr 24, 2024 19:30:52.378437042 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:52.378523111 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:52.378604889 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:52.378710985 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:52.378798008 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:52.378858089 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:52.379364014 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:52.379396915 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:52.379806042 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:52.379847050 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:52.425887108 CEST	49776	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:30:52.468131065 CEST	443	49776	13.85.23.86	192.168.2.4
Apr 24, 2024 19:30:52.720990896 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:52.721276999 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:52.721316099 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:52.722409964 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:52.722498894 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:52.722565889 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:52.723505974 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:52.723567963 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:52.723767042 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:52.723836899 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:52.724061012 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:52.724076986 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:52.725078106 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:52.725152969 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:52.726305962 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:52.726393938 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:52.726542950 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:52.726560116 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:52.771615982 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:52.771615982 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:52.807159901 CEST	443	49776	13.85.23.86	192.168.2.4
Apr 24, 2024 19:30:52.807183027 CEST	443	49776	13.85.23.86	192.168.2.4
Apr 24, 2024 19:30:52.807189941 CEST	443	49776	13.85.23.86	192.168.2.4
Apr 24, 2024 19:30:52.807220936 CEST	443	49776	13.85.23.86	192.168.2.4
Apr 24, 2024 19:30:52.807234049 CEST	443	49776	13.85.23.86	192.168.2.4
Apr 24, 2024 19:30:52.807240009 CEST	443	49776	13.85.23.86	192.168.2.4
Apr 24, 2024 19:30:52.807284117 CEST	49776	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:30:52.807338953 CEST	443	49776	13.85.23.86	192.168.2.4
Apr 24, 2024 19:30:52.807363987 CEST	443	49776	13.85.23.86	192.168.2.4
Apr 24, 2024 19:30:52.807383060 CEST	443	49776	13.85.23.86	192.168.2.4
Apr 24, 2024 19:30:52.807395935 CEST	443	49776	13.85.23.86	192.168.2.4
Apr 24, 2024 19:30:52.807425022 CEST	49776	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:30:52.807425022 CEST	49776	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:30:52.807425022 CEST	49776	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:30:52.807425022 CEST	49776	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:30:52.807451010 CEST	443	49776	13.85.23.86	192.168.2.4
Apr 24, 2024 19:30:52.807452917 CEST	49776	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:30:52.807495117 CEST	49776	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:30:52.909066916 CEST	49776	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:30:52.909162045 CEST	443	49776	13.85.23.86	192.168.2.4
Apr 24, 2024 19:30:53.341049910 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.341078043 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.341087103 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.341104984 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.341129065 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.341134071 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.341167927 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.341192007 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.341216087 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.371390104 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.371470928 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.371490955 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.371531010 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.371556044 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.371572018 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.371597052 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.371643066 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.371648073 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.388798952 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.388864994 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.388876915 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.388916969 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.412225962 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.412234068 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.436568975 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.436589003 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.436650038 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.436661959 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.436680079 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.436701059 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.436719894 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.436736107 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.436737061 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.478250980 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.478298903 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.478352070 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.478435993 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.478477001 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.478504896 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.490418911 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.493750095 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.493798971 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.493837118 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.493853092 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.494119883 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.507436037 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.507472038 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.507513046 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.507528067 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.507586002 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.511794090 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.511857033 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.524188995 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.524219036 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.524271011 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.524301052 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.524312973 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.524321079 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.524362087 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.524372101 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.524468899 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.528593063 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.528661013 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.543997049 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.544060946 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.544132948 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.544148922 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.544209003 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.557449102 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.557528973 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.573890924 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.573981047 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.574001074 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.574035883 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.574057102 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.574177027 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.581959963 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.582011938 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.582045078 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.582062006 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.582089901 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.582108021 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.602873087 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.602935076 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.602950096 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.602957964 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.602979898 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.603003979 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.629718065 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.629782915 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.629801035 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.629816055 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.629837036 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.629863977 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.637773991 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.637813091 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.637887001 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.637953997 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.637989998 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.653320074 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.653388023 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.653404951 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.653436899 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.653454065 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.653474092 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.670059919 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.670106888 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.670145988 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.670182943 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.670203924 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.670250893 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.686017990 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.686048031 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.686095953 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.686120987 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.686132908 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.686151028 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.687129974 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.687167883 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.687191963 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.687216997 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.687239885 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.687257051 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.694082975 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.694145918 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.702218056 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.702272892 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.702287912 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.702307940 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.702362061 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.702886105 CEST	49778	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.702900887 CEST	443	49778	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.711240053 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.711262941 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.711322069 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.711340904 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.711383104 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.727377892 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.727411032 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.727451086 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.727463007 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.727494001 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.727514029 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:53.727555990 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.728540897 CEST	49779	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:53.728555918 CEST	443	49779	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:54.199107885 CEST	49782	443	192.168.2.4	54.162.198.104
Apr 24, 2024 19:30:54.199151039 CEST	443	49782	54.162.198.104	192.168.2.4
Apr 24, 2024 19:30:54.199208975 CEST	49782	443	192.168.2.4	54.162.198.104
Apr 24, 2024 19:30:54.199446917 CEST	49782	443	192.168.2.4	54.162.198.104
Apr 24, 2024 19:30:54.199459076 CEST	443	49782	54.162.198.104	192.168.2.4
Apr 24, 2024 19:30:54.354034901 CEST	49783	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:54.354121923 CEST	443	49783	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:54.354213953 CEST	49783	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:54.355743885 CEST	49783	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:54.355777979 CEST	443	49783	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:54.630162954 CEST	443	49782	54.162.198.104	192.168.2.4
Apr 24, 2024 19:30:54.630624056 CEST	49782	443	192.168.2.4	54.162.198.104
Apr 24, 2024 19:30:54.630641937 CEST	443	49782	54.162.198.104	192.168.2.4
Apr 24, 2024 19:30:54.631483078 CEST	443	49782	54.162.198.104	192.168.2.4
Apr 24, 2024 19:30:54.631552935 CEST	49782	443	192.168.2.4	54.162.198.104
Apr 24, 2024 19:30:54.683156967 CEST	443	49783	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:54.683388948 CEST	49783	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:54.683419943 CEST	443	49783	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:54.683705091 CEST	443	49783	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:54.684031010 CEST	49783	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:54.684079885 CEST	443	49783	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:54.684179068 CEST	49783	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:54.732126951 CEST	443	49783	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:54.971724987 CEST	49782	443	192.168.2.4	54.162.198.104
Apr 24, 2024 19:30:54.971934080 CEST	49782	443	192.168.2.4	54.162.198.104
Apr 24, 2024 19:30:54.971962929 CEST	443	49782	54.162.198.104	192.168.2.4
Apr 24, 2024 19:30:54.972136021 CEST	443	49782	54.162.198.104	192.168.2.4
Apr 24, 2024 19:30:55.020601988 CEST	49782	443	192.168.2.4	54.162.198.104
Apr 24, 2024 19:30:55.020622015 CEST	443	49782	54.162.198.104	192.168.2.4
Apr 24, 2024 19:30:55.068519115 CEST	49782	443	192.168.2.4	54.162.198.104
Apr 24, 2024 19:30:55.075515032 CEST	443	49783	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:55.075623989 CEST	443	49783	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:55.075700045 CEST	49783	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:55.148885965 CEST	49783	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:55.148914099 CEST	443	49783	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:55.620537043 CEST	49785	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:55.620632887 CEST	443	49785	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:55.620758057 CEST	49785	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:55.621272087 CEST	49785	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:55.621299028 CEST	443	49785	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:55.882725000 CEST	443	49782	54.162.198.104	192.168.2.4
Apr 24, 2024 19:30:55.882754087 CEST	443	49782	54.162.198.104	192.168.2.4
Apr 24, 2024 19:30:55.882761002 CEST	443	49782	54.162.198.104	192.168.2.4
Apr 24, 2024 19:30:55.882817984 CEST	49782	443	192.168.2.4	54.162.198.104
Apr 24, 2024 19:30:55.882839918 CEST	443	49782	54.162.198.104	192.168.2.4
Apr 24, 2024 19:30:55.882893085 CEST	443	49782	54.162.198.104	192.168.2.4
Apr 24, 2024 19:30:55.882936001 CEST	49782	443	192.168.2.4	54.162.198.104
Apr 24, 2024 19:30:55.884159088 CEST	49782	443	192.168.2.4	54.162.198.104
Apr 24, 2024 19:30:55.884174109 CEST	443	49782	54.162.198.104	192.168.2.4
Apr 24, 2024 19:30:55.946753025 CEST	443	49785	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:55.958137989 CEST	49785	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:55.958153963 CEST	443	49785	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:55.958570957 CEST	443	49785	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:55.962928057 CEST	49785	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:55.962989092 CEST	443	49785	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:55.963388920 CEST	49785	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:55.970722914 CEST	49786	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:55.970766068 CEST	443	49786	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:55.970825911 CEST	49786	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:55.971990108 CEST	49787	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:55.972023010 CEST	443	49787	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:55.972091913 CEST	49787	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:55.972650051 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:55.972687960 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:55.972924948 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:55.973479033 CEST	49789	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:55.973506927 CEST	443	49789	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:55.973613024 CEST	49789	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:55.973992109 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:55.974006891 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:55.974145889 CEST	49787	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:55.974160910 CEST	443	49787	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:55.974303007 CEST	49786	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:55.974317074 CEST	443	49786	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:55.974486113 CEST	49789	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:55.974503040 CEST	443	49789	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.008122921 CEST	443	49785	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:56.111088037 CEST	49790	443	192.168.2.4	34.237.73.95
Apr 24, 2024 19:30:56.111164093 CEST	443	49790	34.237.73.95	192.168.2.4
Apr 24, 2024 19:30:56.111495018 CEST	49790	443	192.168.2.4	34.237.73.95
Apr 24, 2024 19:30:56.111793041 CEST	49790	443	192.168.2.4	34.237.73.95
Apr 24, 2024 19:30:56.111814976 CEST	443	49790	34.237.73.95	192.168.2.4
Apr 24, 2024 19:30:56.138082027 CEST	49791	443	192.168.2.4	34.196.171.164
Apr 24, 2024 19:30:56.138139009 CEST	443	49791	34.196.171.164	192.168.2.4
Apr 24, 2024 19:30:56.138221025 CEST	49791	443	192.168.2.4	34.196.171.164
Apr 24, 2024 19:30:56.138513088 CEST	49791	443	192.168.2.4	34.196.171.164
Apr 24, 2024 19:30:56.138530016 CEST	443	49791	34.196.171.164	192.168.2.4
Apr 24, 2024 19:30:56.300868034 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.301217079 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.301238060 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.301723957 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.302014112 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.302118063 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.302200079 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.305661917 CEST	443	49789	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.305866003 CEST	49789	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.305880070 CEST	443	49789	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.306247950 CEST	443	49787	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.306467056 CEST	49787	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.306483030 CEST	443	49787	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.306782007 CEST	443	49789	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.306840897 CEST	49789	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.306972027 CEST	443	49787	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.307162046 CEST	49789	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.307204008 CEST	443	49789	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.307487965 CEST	49787	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.307492018 CEST	443	49786	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.307560921 CEST	443	49787	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.307698011 CEST	49786	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.307723045 CEST	443	49786	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.307746887 CEST	49789	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.307753086 CEST	443	49789	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.307847977 CEST	49787	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.308811903 CEST	443	49786	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.308873892 CEST	49786	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.309163094 CEST	49786	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.309221029 CEST	443	49786	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.309279919 CEST	49786	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.335511923 CEST	443	49785	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:56.335645914 CEST	443	49785	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:56.335787058 CEST	49785	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:56.336318016 CEST	49785	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:30:56.336335897 CEST	443	49785	162.247.243.29	192.168.2.4
Apr 24, 2024 19:30:56.344120979 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.348123074 CEST	443	49787	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.349704027 CEST	49786	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.349720955 CEST	443	49786	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.349740982 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.349745035 CEST	49789	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.396562099 CEST	49786	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.572782040 CEST	443	49791	34.196.171.164	192.168.2.4
Apr 24, 2024 19:30:56.573059082 CEST	49791	443	192.168.2.4	34.196.171.164
Apr 24, 2024 19:30:56.573124886 CEST	443	49791	34.196.171.164	192.168.2.4
Apr 24, 2024 19:30:56.574745893 CEST	443	49791	34.196.171.164	192.168.2.4
Apr 24, 2024 19:30:56.574814081 CEST	49791	443	192.168.2.4	34.196.171.164
Apr 24, 2024 19:30:56.575164080 CEST	49791	443	192.168.2.4	34.196.171.164
Apr 24, 2024 19:30:56.575272083 CEST	443	49791	34.196.171.164	192.168.2.4
Apr 24, 2024 19:30:56.575309992 CEST	49791	443	192.168.2.4	34.196.171.164
Apr 24, 2024 19:30:56.615333080 CEST	49791	443	192.168.2.4	34.196.171.164
Apr 24, 2024 19:30:56.615374088 CEST	443	49791	34.196.171.164	192.168.2.4
Apr 24, 2024 19:30:56.662199020 CEST	49791	443	192.168.2.4	34.196.171.164
Apr 24, 2024 19:30:56.764242887 CEST	443	49790	34.237.73.95	192.168.2.4
Apr 24, 2024 19:30:56.772445917 CEST	49790	443	192.168.2.4	34.237.73.95
Apr 24, 2024 19:30:56.772465944 CEST	443	49790	34.237.73.95	192.168.2.4
Apr 24, 2024 19:30:56.773446083 CEST	443	49790	34.237.73.95	192.168.2.4
Apr 24, 2024 19:30:56.773529053 CEST	49790	443	192.168.2.4	34.237.73.95
Apr 24, 2024 19:30:56.774728060 CEST	49790	443	192.168.2.4	34.237.73.95
Apr 24, 2024 19:30:56.774785042 CEST	443	49790	34.237.73.95	192.168.2.4
Apr 24, 2024 19:30:56.774976015 CEST	49790	443	192.168.2.4	34.237.73.95
Apr 24, 2024 19:30:56.774983883 CEST	443	49790	34.237.73.95	192.168.2.4
Apr 24, 2024 19:30:56.818456888 CEST	49790	443	192.168.2.4	34.237.73.95
Apr 24, 2024 19:30:56.926527023 CEST	443	49787	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.948451996 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.948479891 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.948513031 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.948539972 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.948554993 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.948594093 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.948961973 CEST	443	49787	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.948992014 CEST	443	49787	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.949038029 CEST	49787	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.949054956 CEST	443	49787	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.949070930 CEST	49787	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.949096918 CEST	49787	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.952642918 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.961913109 CEST	443	49789	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.961941957 CEST	443	49789	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.961949110 CEST	443	49789	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.961966991 CEST	443	49789	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.962013960 CEST	49789	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.962023020 CEST	443	49789	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.962057114 CEST	49789	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.970104933 CEST	443	49786	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.970169067 CEST	443	49786	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.970189095 CEST	443	49786	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.970247984 CEST	49786	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.970273018 CEST	443	49786	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.970287085 CEST	49786	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.971580982 CEST	443	49786	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.971646070 CEST	49786	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.994693041 CEST	49786	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.994712114 CEST	443	49786	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:56.996223927 CEST	49789	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:56.996253967 CEST	443	49789	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.005944967 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.007637024 CEST	443	49787	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.007714987 CEST	443	49787	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.007767916 CEST	49787	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.007783890 CEST	443	49787	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.007805109 CEST	49787	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.007819891 CEST	49787	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.028341055 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.028374910 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.028417110 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.028438091 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.028449059 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.028476000 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.028496027 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.035368919 CEST	443	49791	34.196.171.164	192.168.2.4
Apr 24, 2024 19:30:57.035384893 CEST	443	49791	34.196.171.164	192.168.2.4
Apr 24, 2024 19:30:57.035443068 CEST	49791	443	192.168.2.4	34.196.171.164
Apr 24, 2024 19:30:57.035481930 CEST	443	49791	34.196.171.164	192.168.2.4
Apr 24, 2024 19:30:57.035501003 CEST	443	49791	34.196.171.164	192.168.2.4
Apr 24, 2024 19:30:57.035557032 CEST	49791	443	192.168.2.4	34.196.171.164
Apr 24, 2024 19:30:57.051318884 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.051357031 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.051369905 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.051392078 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.051393986 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.051414967 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.051444054 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.051469088 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.093086958 CEST	443	49787	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.093125105 CEST	443	49787	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.093251944 CEST	49787	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.093276024 CEST	443	49787	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.095917940 CEST	49787	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.106319904 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.106333971 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.108488083 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.110502005 CEST	443	49787	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.110589981 CEST	49787	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.110606909 CEST	443	49787	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.110656023 CEST	443	49787	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.110702038 CEST	49787	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.130093098 CEST	49787	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.130120993 CEST	443	49787	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.137712955 CEST	49791	443	192.168.2.4	34.196.171.164
Apr 24, 2024 19:30:57.137759924 CEST	443	49791	34.196.171.164	192.168.2.4
Apr 24, 2024 19:30:57.174743891 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.174784899 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.174823046 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.174837112 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.174868107 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.174885035 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.195450068 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.195487976 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.195547104 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.195559025 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.195584059 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.195600033 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.219938993 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.219973087 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.220027924 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.220035076 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.220057964 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.220077991 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.224324942 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.224390984 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.246831894 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.246870995 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.246918917 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.246926069 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.246968031 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.263811111 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.263920069 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.279475927 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.279509068 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.279560089 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.279566050 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.279611111 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.286344051 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.286422014 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.329530954 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.329572916 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.329605103 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.329612970 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.329652071 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.347345114 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.347378016 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.347438097 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.347445965 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.347486973 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.363918066 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.363954067 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.363996029 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.364001989 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.364028931 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.364042997 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.378154039 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.378190994 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.378237963 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.378240108 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:30:57.378278017 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.379091978 CEST	49788	443	192.168.2.4	54.230.21.89
Apr 24, 2024 19:30:57.379107952 CEST	443	49788	54.230.21.89	192.168.2.4
Apr 24, 2024 19:31:11.008047104 CEST	49821	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:11.008091927 CEST	443	49821	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:11.008162975 CEST	49821	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:11.008543015 CEST	49822	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:11.008582115 CEST	443	49822	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:11.008632898 CEST	49822	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:11.012175083 CEST	49822	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:11.012187004 CEST	443	49822	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:11.012312889 CEST	49821	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:11.012329102 CEST	443	49821	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:11.339911938 CEST	443	49822	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:11.371592999 CEST	49822	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:11.371618032 CEST	443	49822	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:11.372752905 CEST	443	49822	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:11.372843027 CEST	49822	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:11.374928951 CEST	49822	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:11.375009060 CEST	443	49822	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:11.375569105 CEST	49822	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:11.375581026 CEST	443	49822	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:11.398092031 CEST	443	49821	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:11.398379087 CEST	49821	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:11.398403883 CEST	443	49821	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:11.399830103 CEST	443	49821	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:11.399893999 CEST	49821	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:11.400743961 CEST	49821	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:11.400826931 CEST	443	49821	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:11.401175022 CEST	49821	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:11.401185036 CEST	443	49821	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:11.427664995 CEST	49822	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:11.443650007 CEST	49821	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:11.769901991 CEST	443	49821	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:11.769995928 CEST	443	49821	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:11.770050049 CEST	49821	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:11.770744085 CEST	49821	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:11.770762920 CEST	443	49821	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:11.991000891 CEST	49832	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:11.991060972 CEST	443	49832	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:11.991134882 CEST	49832	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:11.991391897 CEST	49832	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:11.991442919 CEST	443	49832	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:11.992748022 CEST	49833	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:11.992808104 CEST	443	49833	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:11.992875099 CEST	49833	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:11.993055105 CEST	49833	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:11.993089914 CEST	443	49833	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:11.995006084 CEST	49834	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:11.995104074 CEST	443	49834	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:11.995177984 CEST	49834	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:11.995340109 CEST	49834	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:11.995388031 CEST	443	49834	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:12.038595915 CEST	49836	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.038614988 CEST	443	49836	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.038657904 CEST	49836	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.038882017 CEST	49836	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.038893938 CEST	443	49836	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.039684057 CEST	49837	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.039707899 CEST	443	49837	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.039767027 CEST	49837	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.039921045 CEST	49837	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.039935112 CEST	443	49837	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.181613922 CEST	443	49822	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:12.181633949 CEST	443	49822	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:12.181639910 CEST	443	49822	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:12.181703091 CEST	49822	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:12.181703091 CEST	49822	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:12.181740999 CEST	443	49822	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:12.181787968 CEST	49822	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:12.185465097 CEST	443	49822	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:12.185529947 CEST	443	49822	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:12.185559034 CEST	49822	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:12.185584068 CEST	443	49822	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:12.185611010 CEST	49822	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:12.185611010 CEST	49822	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:12.185668945 CEST	49822	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:12.372411966 CEST	443	49832	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:12.372642994 CEST	49832	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:12.372701883 CEST	443	49832	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:12.374161959 CEST	443	49832	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:12.374233007 CEST	49832	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:12.374547005 CEST	49832	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:12.374634027 CEST	443	49832	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:12.374690056 CEST	49832	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:12.374706030 CEST	443	49832	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:12.384741068 CEST	443	49834	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:12.384924889 CEST	49834	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:12.384947062 CEST	443	49834	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:12.386439085 CEST	443	49834	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:12.386492014 CEST	49834	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:12.386651993 CEST	443	49833	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:12.387588024 CEST	49833	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:12.387645960 CEST	443	49833	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:12.387713909 CEST	49834	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:12.387797117 CEST	443	49834	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:12.387845039 CEST	49834	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:12.387852907 CEST	443	49834	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:12.389139891 CEST	443	49833	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:12.389214993 CEST	49833	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:12.390249014 CEST	49833	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:12.390338898 CEST	443	49833	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:12.390507936 CEST	49833	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:12.390523911 CEST	443	49833	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:12.391537905 CEST	49839	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:12.391560078 CEST	443	49839	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:12.391607046 CEST	49839	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:12.391937017 CEST	49839	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:12.391946077 CEST	443	49839	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:12.417520046 CEST	443	49837	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.418175936 CEST	49837	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.418189049 CEST	443	49837	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.419270039 CEST	443	49837	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.419320107 CEST	49837	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.421818018 CEST	49837	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.421890974 CEST	443	49837	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.422190905 CEST	49837	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.422199011 CEST	443	49837	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.425977945 CEST	443	49836	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.426198959 CEST	49836	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.426206112 CEST	443	49836	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.428004980 CEST	443	49836	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.428054094 CEST	49836	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.428605080 CEST	49836	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.428692102 CEST	443	49836	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.430501938 CEST	49833	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:12.430502892 CEST	49832	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:12.432667971 CEST	49836	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.432676077 CEST	443	49836	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.432758093 CEST	49836	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.475254059 CEST	49834	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:12.475260973 CEST	49837	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.476111889 CEST	443	49836	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.716290951 CEST	443	49839	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:12.716500044 CEST	49839	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:12.716511011 CEST	443	49839	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:12.717600107 CEST	443	49839	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:12.717653990 CEST	49839	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:12.717994928 CEST	49839	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:12.718056917 CEST	443	49839	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:12.718213081 CEST	49839	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:12.718218088 CEST	443	49839	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:12.751365900 CEST	443	49832	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:12.751461029 CEST	443	49832	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:12.751513004 CEST	49832	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:12.751929998 CEST	49832	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:12.751944065 CEST	443	49832	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:12.760082960 CEST	49839	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:12.793450117 CEST	443	49837	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.793478966 CEST	443	49837	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.793488026 CEST	443	49837	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.793540955 CEST	49837	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.793555021 CEST	443	49837	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.793566942 CEST	443	49837	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.793591022 CEST	49837	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.793626070 CEST	49837	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.802696943 CEST	443	49834	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:12.802773952 CEST	443	49834	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:12.802823067 CEST	49834	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:12.806345940 CEST	443	49833	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:12.806416988 CEST	443	49833	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:12.806499958 CEST	49833	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:12.809185028 CEST	443	49836	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.809252977 CEST	443	49836	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.809314013 CEST	49836	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.812489986 CEST	49833	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:12.812517881 CEST	443	49833	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:12.816195965 CEST	49836	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.816200018 CEST	443	49836	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.817431927 CEST	49841	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:12.817460060 CEST	443	49841	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:12.817614079 CEST	49841	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:12.818933964 CEST	49834	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:12.818943977 CEST	443	49834	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:12.819633007 CEST	49837	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.819648027 CEST	443	49837	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.821355104 CEST	49841	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:12.821367979 CEST	443	49841	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:12.868417025 CEST	49842	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.868444920 CEST	443	49842	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.868676901 CEST	49842	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.868866920 CEST	49842	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:12.868880033 CEST	443	49842	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:12.881383896 CEST	49843	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:12.881458044 CEST	443	49843	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:12.881563902 CEST	49843	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:12.881799936 CEST	49843	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:12.881830931 CEST	443	49843	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:13.045942068 CEST	49846	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:13.046042919 CEST	443	49846	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:13.046154976 CEST	49846	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:13.046375990 CEST	49846	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:13.046411991 CEST	443	49846	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:13.048449039 CEST	49847	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:13.048544884 CEST	443	49847	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:13.048862934 CEST	49847	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:13.049034119 CEST	49847	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:13.049067020 CEST	443	49847	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:13.203519106 CEST	443	49841	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:13.203804016 CEST	49841	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:13.203819990 CEST	443	49841	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:13.204291105 CEST	443	49841	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:13.204871893 CEST	49841	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:13.204946995 CEST	443	49841	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:13.205142021 CEST	49841	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:13.248117924 CEST	443	49841	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:13.249272108 CEST	443	49842	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:13.249699116 CEST	49842	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:13.249712944 CEST	443	49842	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:13.250202894 CEST	443	49842	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:13.251033068 CEST	49842	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:13.251033068 CEST	49842	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:13.251044035 CEST	443	49842	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:13.251106024 CEST	443	49842	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:13.260529995 CEST	443	49843	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:13.260719061 CEST	49843	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:13.260731936 CEST	443	49843	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:13.261038065 CEST	443	49843	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:13.261359930 CEST	49843	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:13.261404037 CEST	443	49843	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:13.261502028 CEST	49843	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:13.304152966 CEST	443	49843	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:13.370053053 CEST	49842	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:13.430869102 CEST	443	49846	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:13.431127071 CEST	49846	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:13.431191921 CEST	443	49846	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:13.432210922 CEST	443	49846	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:13.432324886 CEST	49846	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:13.432732105 CEST	49846	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:13.432801962 CEST	443	49846	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:13.432940960 CEST	49846	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:13.435944080 CEST	443	49847	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:13.436260939 CEST	49847	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:13.436337948 CEST	443	49847	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:13.437618017 CEST	443	49847	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:13.437697887 CEST	49847	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:13.440479040 CEST	49847	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:13.440552950 CEST	443	49847	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:13.440598965 CEST	49847	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:13.474368095 CEST	49846	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:13.474391937 CEST	443	49846	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:13.481173038 CEST	49847	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:13.481199980 CEST	443	49847	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:13.521332026 CEST	49846	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:13.523291111 CEST	49847	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:13.545969963 CEST	443	49839	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:13.545994997 CEST	443	49839	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:13.546055079 CEST	49839	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:13.546081066 CEST	443	49839	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:13.546125889 CEST	49839	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:13.546937943 CEST	49839	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:13.546987057 CEST	443	49839	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:13.547040939 CEST	49839	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:13.561975956 CEST	49848	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:13.562011003 CEST	443	49848	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:13.562160969 CEST	49848	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:13.562386990 CEST	49848	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:13.562398911 CEST	443	49848	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:13.631336927 CEST	443	49842	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:13.631448984 CEST	443	49842	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:13.631629944 CEST	49842	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:13.632914066 CEST	49842	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:13.632934093 CEST	443	49842	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:13.635622025 CEST	443	49841	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:13.635757923 CEST	443	49841	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:13.635806084 CEST	49841	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:13.636626959 CEST	49841	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:13.636645079 CEST	443	49841	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:13.641391993 CEST	49853	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:13.641422033 CEST	443	49853	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:13.642333031 CEST	49854	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:13.642359018 CEST	443	49854	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:13.642363071 CEST	49853	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:13.642422915 CEST	49854	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:13.642719030 CEST	443	49843	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:13.642802954 CEST	443	49843	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:13.643049002 CEST	49843	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:13.643660069 CEST	49854	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:13.643671989 CEST	443	49854	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:13.644057035 CEST	49853	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:13.644069910 CEST	443	49853	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:13.644264936 CEST	49843	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:13.644273996 CEST	443	49843	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:13.650981903 CEST	49855	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:13.651014090 CEST	443	49855	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:13.651072979 CEST	49855	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:13.651434898 CEST	49855	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:13.651446104 CEST	443	49855	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:13.810414076 CEST	49857	443	192.168.2.4	63.140.37.206
Apr 24, 2024 19:31:13.810442924 CEST	443	49857	63.140.37.206	192.168.2.4
Apr 24, 2024 19:31:13.810560942 CEST	49857	443	192.168.2.4	63.140.37.206
Apr 24, 2024 19:31:13.810725927 CEST	49857	443	192.168.2.4	63.140.37.206
Apr 24, 2024 19:31:13.810739994 CEST	443	49857	63.140.37.206	192.168.2.4
Apr 24, 2024 19:31:13.813437939 CEST	443	49846	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:13.813507080 CEST	443	49846	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:13.813591003 CEST	49846	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:13.814373970 CEST	49846	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:13.814392090 CEST	443	49846	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:13.858180046 CEST	443	49847	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:13.858237028 CEST	443	49847	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:13.858309984 CEST	49847	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:13.858939886 CEST	49847	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:13.858959913 CEST	443	49847	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:13.887948036 CEST	443	49848	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:13.888261080 CEST	49848	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:13.888276100 CEST	443	49848	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:13.889290094 CEST	443	49848	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:13.889374018 CEST	49848	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:13.889671087 CEST	49848	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:13.889725924 CEST	443	49848	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:13.889844894 CEST	49848	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:13.889852047 CEST	443	49848	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:13.942781925 CEST	49848	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:14.023365021 CEST	443	49853	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.023713112 CEST	49853	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:14.023734093 CEST	443	49853	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.024090052 CEST	443	49853	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.024389029 CEST	49853	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:14.024456024 CEST	443	49853	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.024564981 CEST	49853	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:14.027026892 CEST	443	49854	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.027245045 CEST	49854	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:14.027309895 CEST	443	49854	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.027801991 CEST	443	49854	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.028094053 CEST	49854	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:14.028207064 CEST	49854	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:14.028220892 CEST	443	49854	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.028242111 CEST	443	49854	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.029850960 CEST	443	49855	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:14.030041933 CEST	49855	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:14.030106068 CEST	443	49855	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:14.030458927 CEST	443	49855	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:14.030750990 CEST	49855	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:14.030823946 CEST	443	49855	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:14.030842066 CEST	49855	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:14.068150043 CEST	443	49853	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.068495035 CEST	49854	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:14.076121092 CEST	443	49855	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:14.084680080 CEST	49855	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:14.191471100 CEST	443	49857	63.140.37.206	192.168.2.4
Apr 24, 2024 19:31:14.191976070 CEST	49857	443	192.168.2.4	63.140.37.206
Apr 24, 2024 19:31:14.191999912 CEST	443	49857	63.140.37.206	192.168.2.4
Apr 24, 2024 19:31:14.193069935 CEST	443	49857	63.140.37.206	192.168.2.4
Apr 24, 2024 19:31:14.193145037 CEST	49857	443	192.168.2.4	63.140.37.206
Apr 24, 2024 19:31:14.193538904 CEST	49857	443	192.168.2.4	63.140.37.206
Apr 24, 2024 19:31:14.193597078 CEST	443	49857	63.140.37.206	192.168.2.4
Apr 24, 2024 19:31:14.193706036 CEST	49857	443	192.168.2.4	63.140.37.206
Apr 24, 2024 19:31:14.193715096 CEST	443	49857	63.140.37.206	192.168.2.4
Apr 24, 2024 19:31:14.277574062 CEST	49857	443	192.168.2.4	63.140.37.206
Apr 24, 2024 19:31:14.406578064 CEST	443	49855	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:14.406666040 CEST	443	49855	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:14.406703949 CEST	49855	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:14.407877922 CEST	443	49853	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.408052921 CEST	443	49853	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.408113003 CEST	49853	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:14.410170078 CEST	443	49854	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.410290003 CEST	443	49854	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.410351992 CEST	49854	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:14.419050932 CEST	49854	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:14.419081926 CEST	443	49854	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.419667006 CEST	49853	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:14.419698954 CEST	443	49853	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.420677900 CEST	49855	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:14.420711040 CEST	443	49855	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:14.437828064 CEST	49859	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:14.437855959 CEST	443	49859	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.437972069 CEST	49859	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:14.438365936 CEST	49859	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:14.438375950 CEST	443	49859	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.576931000 CEST	49861	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:14.576980114 CEST	443	49861	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:14.577069044 CEST	49861	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:14.577312946 CEST	49861	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:14.577342033 CEST	443	49861	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:14.598999977 CEST	49866	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:14.599009991 CEST	443	49866	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.599059105 CEST	49866	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:14.599392891 CEST	49866	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:14.599402905 CEST	443	49866	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.617664099 CEST	443	49857	63.140.37.206	192.168.2.4
Apr 24, 2024 19:31:14.617892027 CEST	443	49857	63.140.37.206	192.168.2.4
Apr 24, 2024 19:31:14.617954016 CEST	49857	443	192.168.2.4	63.140.37.206
Apr 24, 2024 19:31:14.618288994 CEST	49857	443	192.168.2.4	63.140.37.206
Apr 24, 2024 19:31:14.618304968 CEST	443	49857	63.140.37.206	192.168.2.4
Apr 24, 2024 19:31:14.635761023 CEST	49868	443	192.168.2.4	13.226.210.108
Apr 24, 2024 19:31:14.635787010 CEST	443	49868	13.226.210.108	192.168.2.4
Apr 24, 2024 19:31:14.635843992 CEST	49868	443	192.168.2.4	13.226.210.108
Apr 24, 2024 19:31:14.636029959 CEST	49868	443	192.168.2.4	13.226.210.108
Apr 24, 2024 19:31:14.636044979 CEST	443	49868	13.226.210.108	192.168.2.4
Apr 24, 2024 19:31:14.724847078 CEST	443	49848	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:14.747385979 CEST	443	49848	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:14.747394085 CEST	443	49848	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:14.747422934 CEST	443	49848	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:14.747430086 CEST	443	49848	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:14.747432947 CEST	443	49848	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:14.747440100 CEST	49848	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:14.747458935 CEST	443	49848	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:14.747489929 CEST	49848	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:14.747515917 CEST	49848	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:14.821512938 CEST	443	49859	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.821769953 CEST	49859	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:14.821821928 CEST	443	49859	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.823157072 CEST	443	49859	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.823487997 CEST	49859	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:14.823627949 CEST	49859	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:14.823638916 CEST	443	49859	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.823700905 CEST	443	49859	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.851547956 CEST	443	49848	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:14.851629019 CEST	49848	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:14.851644993 CEST	443	49848	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:14.860390902 CEST	443	49848	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:14.860443115 CEST	49848	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:14.860455990 CEST	443	49848	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:14.860472918 CEST	443	49848	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:14.860521078 CEST	49848	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:14.861021996 CEST	49848	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:14.861040115 CEST	443	49848	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:14.867645979 CEST	49859	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:14.894176960 CEST	49869	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:14.894216061 CEST	443	49869	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:14.894282103 CEST	49869	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:14.894618988 CEST	49870	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:14.894669056 CEST	443	49870	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:14.894712925 CEST	49870	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:14.894925117 CEST	49869	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:14.894937038 CEST	443	49869	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:14.895390034 CEST	49870	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:14.895404100 CEST	443	49870	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:14.956419945 CEST	443	49861	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:14.956646919 CEST	49861	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:14.956670046 CEST	443	49861	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:14.957128048 CEST	443	49861	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:14.957501888 CEST	49861	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:14.957609892 CEST	443	49861	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:14.957636118 CEST	49861	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:14.965970993 CEST	443	49868	13.226.210.108	192.168.2.4
Apr 24, 2024 19:31:14.966214895 CEST	49868	443	192.168.2.4	13.226.210.108
Apr 24, 2024 19:31:14.966237068 CEST	443	49868	13.226.210.108	192.168.2.4
Apr 24, 2024 19:31:14.967611074 CEST	443	49868	13.226.210.108	192.168.2.4
Apr 24, 2024 19:31:14.967675924 CEST	49868	443	192.168.2.4	13.226.210.108
Apr 24, 2024 19:31:14.970134020 CEST	49868	443	192.168.2.4	13.226.210.108
Apr 24, 2024 19:31:14.970293999 CEST	443	49868	13.226.210.108	192.168.2.4
Apr 24, 2024 19:31:14.972245932 CEST	49868	443	192.168.2.4	13.226.210.108
Apr 24, 2024 19:31:14.972253084 CEST	443	49868	13.226.210.108	192.168.2.4
Apr 24, 2024 19:31:14.978863955 CEST	443	49866	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.979188919 CEST	49866	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:14.979222059 CEST	443	49866	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.979717016 CEST	443	49866	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.980330944 CEST	49866	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:14.980426073 CEST	443	49866	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:14.980668068 CEST	49866	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:15.004132032 CEST	443	49861	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:15.005778074 CEST	49861	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:15.014615059 CEST	49868	443	192.168.2.4	13.226.210.108
Apr 24, 2024 19:31:15.024137974 CEST	443	49866	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:15.198991060 CEST	443	49859	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:15.199095964 CEST	443	49859	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:15.199150085 CEST	49859	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:15.203785896 CEST	49859	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:15.203808069 CEST	443	49859	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:15.221415997 CEST	443	49870	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:15.222922087 CEST	49870	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:15.222935915 CEST	443	49870	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:15.223298073 CEST	443	49870	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:15.223807096 CEST	49870	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:15.223864079 CEST	443	49870	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:15.223934889 CEST	49870	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:15.225474119 CEST	443	49869	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:15.226119995 CEST	49869	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:15.226135969 CEST	443	49869	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:15.226819992 CEST	443	49869	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:15.227251053 CEST	49869	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:15.227318048 CEST	443	49869	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:15.227358103 CEST	49869	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:15.248642921 CEST	49872	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:15.248667955 CEST	443	49872	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:15.248764992 CEST	49872	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:15.248963118 CEST	49872	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:15.248975992 CEST	443	49872	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:15.268114090 CEST	443	49870	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:15.268130064 CEST	443	49869	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:15.272347927 CEST	49869	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:15.334042072 CEST	443	49861	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:15.334139109 CEST	443	49861	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:15.334263086 CEST	49861	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:15.336296082 CEST	49861	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:15.336313963 CEST	443	49861	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:15.343475103 CEST	49873	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:15.343502998 CEST	443	49873	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:15.343553066 CEST	49873	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:15.343833923 CEST	49873	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:15.343849897 CEST	443	49873	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:15.360233068 CEST	443	49866	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:15.360325098 CEST	443	49866	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:15.360433102 CEST	49866	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:15.361362934 CEST	49866	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:15.361401081 CEST	443	49866	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:15.389406919 CEST	49874	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:15.389425993 CEST	443	49874	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:15.389528990 CEST	49874	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:15.389719963 CEST	49874	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:15.389734983 CEST	443	49874	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:15.474298954 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:15.474340916 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:15.474417925 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:15.474919081 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:15.474931002 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:15.630043030 CEST	443	49872	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:15.631014109 CEST	49872	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:15.631021023 CEST	443	49872	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:15.631474972 CEST	443	49872	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:15.631894112 CEST	49872	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:15.631999016 CEST	443	49872	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:15.632133961 CEST	49872	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:15.676111937 CEST	443	49872	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:15.683835983 CEST	49872	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:15.685801983 CEST	443	49869	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:15.685873032 CEST	443	49869	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:15.685983896 CEST	49869	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:15.686283112 CEST	49869	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:15.686300993 CEST	443	49869	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:15.722337008 CEST	443	49874	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:15.722742081 CEST	49874	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:15.722764969 CEST	443	49874	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:15.724225998 CEST	443	49874	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:15.724298000 CEST	49874	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:15.725740910 CEST	443	49873	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:15.725928068 CEST	49874	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:15.726031065 CEST	443	49874	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:15.726283073 CEST	49873	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:15.726296902 CEST	443	49873	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:15.726356983 CEST	49874	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:15.726371050 CEST	443	49874	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:15.726780891 CEST	443	49873	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:15.727900982 CEST	49873	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:15.727900982 CEST	49873	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:15.728199959 CEST	443	49873	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:15.771498919 CEST	49874	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:15.772119999 CEST	49873	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:15.810219049 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:15.810472965 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:15.810512066 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:15.812053919 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:15.812114954 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:15.813122988 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:15.813204050 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:15.813282967 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:15.848351002 CEST	443	49868	13.226.210.108	192.168.2.4
Apr 24, 2024 19:31:15.856117010 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:15.863468885 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:15.863476992 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:15.870784044 CEST	443	49868	13.226.210.108	192.168.2.4
Apr 24, 2024 19:31:15.870800972 CEST	443	49868	13.226.210.108	192.168.2.4
Apr 24, 2024 19:31:15.870822906 CEST	443	49868	13.226.210.108	192.168.2.4
Apr 24, 2024 19:31:15.870882034 CEST	49868	443	192.168.2.4	13.226.210.108
Apr 24, 2024 19:31:15.870950937 CEST	443	49868	13.226.210.108	192.168.2.4
Apr 24, 2024 19:31:15.870987892 CEST	49868	443	192.168.2.4	13.226.210.108
Apr 24, 2024 19:31:15.871018887 CEST	49868	443	192.168.2.4	13.226.210.108
Apr 24, 2024 19:31:15.911878109 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:15.930159092 CEST	443	49870	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:15.930186987 CEST	443	49870	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:15.930223942 CEST	443	49870	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:15.930252075 CEST	49870	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:15.930252075 CEST	443	49870	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:15.930332899 CEST	49870	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:15.931957006 CEST	49870	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:15.931972980 CEST	443	49870	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:15.993697882 CEST	443	49868	13.226.210.108	192.168.2.4
Apr 24, 2024 19:31:15.993731022 CEST	443	49868	13.226.210.108	192.168.2.4
Apr 24, 2024 19:31:15.993766069 CEST	49868	443	192.168.2.4	13.226.210.108
Apr 24, 2024 19:31:15.993778944 CEST	443	49868	13.226.210.108	192.168.2.4
Apr 24, 2024 19:31:15.993802071 CEST	49868	443	192.168.2.4	13.226.210.108
Apr 24, 2024 19:31:15.993823051 CEST	49868	443	192.168.2.4	13.226.210.108
Apr 24, 2024 19:31:16.008604050 CEST	443	49872	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:16.008784056 CEST	443	49872	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:16.008840084 CEST	49872	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:16.009412050 CEST	49872	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:16.009424925 CEST	443	49872	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:16.020481110 CEST	443	49868	13.226.210.108	192.168.2.4
Apr 24, 2024 19:31:16.020500898 CEST	443	49868	13.226.210.108	192.168.2.4
Apr 24, 2024 19:31:16.020558119 CEST	49868	443	192.168.2.4	13.226.210.108
Apr 24, 2024 19:31:16.020567894 CEST	443	49868	13.226.210.108	192.168.2.4
Apr 24, 2024 19:31:16.020612955 CEST	49868	443	192.168.2.4	13.226.210.108
Apr 24, 2024 19:31:16.024928093 CEST	443	49868	13.226.210.108	192.168.2.4
Apr 24, 2024 19:31:16.024975061 CEST	49868	443	192.168.2.4	13.226.210.108
Apr 24, 2024 19:31:16.024980068 CEST	443	49868	13.226.210.108	192.168.2.4
Apr 24, 2024 19:31:16.024991989 CEST	443	49868	13.226.210.108	192.168.2.4
Apr 24, 2024 19:31:16.025028944 CEST	49868	443	192.168.2.4	13.226.210.108
Apr 24, 2024 19:31:16.025237083 CEST	49868	443	192.168.2.4	13.226.210.108
Apr 24, 2024 19:31:16.025252104 CEST	443	49868	13.226.210.108	192.168.2.4
Apr 24, 2024 19:31:16.036569118 CEST	443	49874	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:16.036647081 CEST	443	49874	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:16.036683083 CEST	443	49874	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:16.036724091 CEST	49874	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:16.036747932 CEST	443	49874	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:16.036833048 CEST	443	49874	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:16.036834002 CEST	49874	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:16.036848068 CEST	443	49874	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:16.036891937 CEST	49874	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:16.041682959 CEST	443	49874	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:16.046960115 CEST	443	49874	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:16.046993017 CEST	443	49874	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:16.047029018 CEST	49874	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:16.047054052 CEST	443	49874	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:16.047070026 CEST	443	49874	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:16.047111988 CEST	49874	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:16.048311949 CEST	49874	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:16.048322916 CEST	443	49874	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:16.069093943 CEST	49878	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:16.069125891 CEST	443	49878	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:16.069230080 CEST	49878	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:16.070806026 CEST	49878	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:16.070816040 CEST	443	49878	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:16.089958906 CEST	49879	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:16.089984894 CEST	443	49879	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:16.090184927 CEST	49879	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:16.090437889 CEST	49879	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:16.090455055 CEST	443	49879	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:16.103920937 CEST	443	49873	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:16.104016066 CEST	443	49873	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:16.106057882 CEST	49873	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:16.107175112 CEST	49873	443	192.168.2.4	34.215.13.170
Apr 24, 2024 19:31:16.107191086 CEST	443	49873	34.215.13.170	192.168.2.4
Apr 24, 2024 19:31:16.122956991 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.123024940 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.123065948 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.178920031 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.178931952 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.225439072 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.262850046 CEST	49880	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:16.262936115 CEST	443	49880	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:16.263006926 CEST	49880	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:16.263531923 CEST	49880	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:16.263561010 CEST	443	49880	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:16.282466888 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.282488108 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.282509089 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.282520056 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.282546997 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.282592058 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.282659054 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.282695055 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.336810112 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.354765892 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.354775906 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.354810953 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.354842901 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.354882956 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.354899883 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.354918003 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.354918003 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.354918003 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.354955912 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.354955912 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.393989086 CEST	443	49878	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:16.394275904 CEST	49878	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:16.394335032 CEST	443	49878	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:16.395354033 CEST	443	49878	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:16.395416021 CEST	49878	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:16.396490097 CEST	49878	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:16.396579981 CEST	443	49878	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:16.397150993 CEST	49878	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:16.397161007 CEST	443	49878	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:16.415733099 CEST	443	49879	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:16.416009903 CEST	49879	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:16.416023970 CEST	443	49879	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:16.417098999 CEST	443	49879	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:16.417155027 CEST	49879	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:16.417752028 CEST	49879	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:16.417826891 CEST	443	49879	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:16.417958975 CEST	49879	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:16.441721916 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.441740036 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.441761017 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.441788912 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.441800117 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.441823959 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.441843033 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.441880941 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.443892002 CEST	49878	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:16.459012032 CEST	49879	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:16.459019899 CEST	443	49879	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:16.477135897 CEST	49883	443	192.168.2.4	142.250.141.157
Apr 24, 2024 19:31:16.477174044 CEST	443	49883	142.250.141.157	192.168.2.4
Apr 24, 2024 19:31:16.477313995 CEST	49883	443	192.168.2.4	142.250.141.157
Apr 24, 2024 19:31:16.481704950 CEST	49884	443	192.168.2.4	172.64.144.225
Apr 24, 2024 19:31:16.481739044 CEST	443	49884	172.64.144.225	192.168.2.4
Apr 24, 2024 19:31:16.481806993 CEST	49884	443	192.168.2.4	172.64.144.225
Apr 24, 2024 19:31:16.482717037 CEST	49883	443	192.168.2.4	142.250.141.157
Apr 24, 2024 19:31:16.482728958 CEST	443	49883	142.250.141.157	192.168.2.4
Apr 24, 2024 19:31:16.483103991 CEST	49884	443	192.168.2.4	172.64.144.225
Apr 24, 2024 19:31:16.483114958 CEST	443	49884	172.64.144.225	192.168.2.4
Apr 24, 2024 19:31:16.483937025 CEST	49885	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:16.483944893 CEST	443	49885	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:16.483984947 CEST	49885	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:16.484879017 CEST	49885	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:16.484886885 CEST	443	49885	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:16.486952066 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.486975908 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.487016916 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.487020969 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.487032890 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.487052917 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.499429941 CEST	49879	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:16.530788898 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.530858040 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.530898094 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.530920029 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.530934095 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.531315088 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.572860956 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.572895050 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.572957039 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.572990894 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.573009968 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.573211908 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.590202093 CEST	443	49880	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:16.593638897 CEST	49880	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:16.593648911 CEST	443	49880	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:16.594005108 CEST	443	49880	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:16.597686052 CEST	49880	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:16.597773075 CEST	443	49880	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:16.597940922 CEST	49880	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:16.618545055 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.618592978 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.618638039 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.618654966 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.618685007 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.618706942 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.641911983 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.642011881 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.642021894 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.642059088 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.642085075 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.644119978 CEST	443	49880	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:16.645556927 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.645627975 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.645637035 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.646159887 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.663927078 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.663999081 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.664001942 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.664078951 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.664129972 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.664367914 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.688133955 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.688164949 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.688203096 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.688221931 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.688240051 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.688257933 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.707463026 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.707498074 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.707537889 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.707556009 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.707577944 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.707593918 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.717370987 CEST	443	49878	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:16.717629910 CEST	443	49878	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:16.717669010 CEST	49878	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:16.720217943 CEST	49878	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:16.720232964 CEST	443	49878	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:16.726337910 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.726360083 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.726416111 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.726423025 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.726460934 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.732306957 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.732362986 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.747123003 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.747173071 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.747190952 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.747198105 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.747231960 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.760606050 CEST	443	49879	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:16.761440992 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.761492968 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.761548996 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.761579037 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.761600971 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.761620998 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.761662960 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.767482042 CEST	49875	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:16.767501116 CEST	443	49875	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:16.773957968 CEST	443	49879	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:16.773972988 CEST	443	49879	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:16.773999929 CEST	443	49879	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:16.774032116 CEST	443	49879	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:16.774029016 CEST	49879	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:16.774041891 CEST	443	49879	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:16.774096966 CEST	443	49879	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:16.774133921 CEST	443	49879	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:16.774154902 CEST	49879	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:16.774156094 CEST	49879	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:16.774156094 CEST	49879	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:16.774195910 CEST	49879	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:16.786324024 CEST	49879	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:16.786374092 CEST	443	49879	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:16.798537016 CEST	443	49884	172.64.144.225	192.168.2.4
Apr 24, 2024 19:31:16.798749924 CEST	49884	443	192.168.2.4	172.64.144.225
Apr 24, 2024 19:31:16.798774004 CEST	443	49884	172.64.144.225	192.168.2.4
Apr 24, 2024 19:31:16.799771070 CEST	443	49884	172.64.144.225	192.168.2.4
Apr 24, 2024 19:31:16.799846888 CEST	49884	443	192.168.2.4	172.64.144.225
Apr 24, 2024 19:31:16.801259995 CEST	49884	443	192.168.2.4	172.64.144.225
Apr 24, 2024 19:31:16.801321983 CEST	443	49884	172.64.144.225	192.168.2.4
Apr 24, 2024 19:31:16.801709890 CEST	49884	443	192.168.2.4	172.64.144.225
Apr 24, 2024 19:31:16.801717043 CEST	443	49884	172.64.144.225	192.168.2.4
Apr 24, 2024 19:31:16.846645117 CEST	49884	443	192.168.2.4	172.64.144.225
Apr 24, 2024 19:31:16.853085995 CEST	443	49883	142.250.141.157	192.168.2.4
Apr 24, 2024 19:31:16.853399992 CEST	49883	443	192.168.2.4	142.250.141.157
Apr 24, 2024 19:31:16.853410959 CEST	443	49883	142.250.141.157	192.168.2.4
Apr 24, 2024 19:31:16.854511023 CEST	443	49883	142.250.141.157	192.168.2.4
Apr 24, 2024 19:31:16.854573965 CEST	49883	443	192.168.2.4	142.250.141.157
Apr 24, 2024 19:31:16.857295036 CEST	49883	443	192.168.2.4	142.250.141.157
Apr 24, 2024 19:31:16.857351065 CEST	443	49883	142.250.141.157	192.168.2.4
Apr 24, 2024 19:31:16.857718945 CEST	49883	443	192.168.2.4	142.250.141.157
Apr 24, 2024 19:31:16.857724905 CEST	443	49883	142.250.141.157	192.168.2.4
Apr 24, 2024 19:31:16.902040958 CEST	49883	443	192.168.2.4	142.250.141.157
Apr 24, 2024 19:31:16.920838118 CEST	49887	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:16.920891047 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:16.921437979 CEST	49887	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:16.921437979 CEST	49887	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:16.921473026 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:16.940634966 CEST	49888	443	192.168.2.4	192.184.67.70
Apr 24, 2024 19:31:16.940680981 CEST	443	49888	192.184.67.70	192.168.2.4
Apr 24, 2024 19:31:16.940748930 CEST	49888	443	192.168.2.4	192.184.67.70
Apr 24, 2024 19:31:16.941099882 CEST	49888	443	192.168.2.4	192.184.67.70
Apr 24, 2024 19:31:16.941116095 CEST	443	49888	192.184.67.70	192.168.2.4
Apr 24, 2024 19:31:16.977689028 CEST	49889	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:16.977771044 CEST	443	49889	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:16.977953911 CEST	49889	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:16.978239059 CEST	49889	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:16.978274107 CEST	443	49889	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:16.978889942 CEST	443	49880	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:16.978962898 CEST	443	49880	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:16.979007006 CEST	49880	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:16.979477882 CEST	49880	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:16.979494095 CEST	443	49880	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:17.141071081 CEST	443	49885	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:17.141526937 CEST	49885	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:17.141551018 CEST	443	49885	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:17.143030882 CEST	443	49885	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:17.143115997 CEST	49885	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:17.144397020 CEST	49885	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:17.144474983 CEST	443	49885	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:17.144629002 CEST	49885	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:17.188133955 CEST	443	49885	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:17.197118044 CEST	49885	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:17.197134018 CEST	443	49885	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:17.202820063 CEST	443	49883	142.250.141.157	192.168.2.4
Apr 24, 2024 19:31:17.203042030 CEST	443	49883	142.250.141.157	192.168.2.4
Apr 24, 2024 19:31:17.203094959 CEST	49883	443	192.168.2.4	142.250.141.157
Apr 24, 2024 19:31:17.204009056 CEST	49883	443	192.168.2.4	142.250.141.157
Apr 24, 2024 19:31:17.204027891 CEST	443	49883	142.250.141.157	192.168.2.4
Apr 24, 2024 19:31:17.224951029 CEST	443	49884	172.64.144.225	192.168.2.4
Apr 24, 2024 19:31:17.225085020 CEST	443	49884	172.64.144.225	192.168.2.4
Apr 24, 2024 19:31:17.225140095 CEST	49884	443	192.168.2.4	172.64.144.225
Apr 24, 2024 19:31:17.243077040 CEST	49884	443	192.168.2.4	172.64.144.225
Apr 24, 2024 19:31:17.243096113 CEST	443	49884	172.64.144.225	192.168.2.4
Apr 24, 2024 19:31:17.247387886 CEST	49885	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:17.248274088 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:17.252969980 CEST	49887	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:17.252979994 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:17.253336906 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:17.253395081 CEST	49887	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:17.254039049 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:17.254084110 CEST	49887	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:17.260426044 CEST	49887	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:17.260498047 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:17.260797024 CEST	49887	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:17.260804892 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:17.300932884 CEST	443	49889	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:17.301187038 CEST	49889	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:17.301222086 CEST	443	49889	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:17.302206039 CEST	443	49889	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:17.302261114 CEST	49889	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:17.303046942 CEST	49889	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:17.303112030 CEST	443	49889	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:17.304289103 CEST	49889	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:17.304306984 CEST	443	49889	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:17.305496931 CEST	49887	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:17.351355076 CEST	49889	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:17.364097118 CEST	49892	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:17.364193916 CEST	443	49892	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:17.364264965 CEST	49892	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:17.364563942 CEST	49892	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:17.364597082 CEST	443	49892	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:17.364909887 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:17.364964008 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:17.365031958 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:17.365223885 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:17.365252972 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:17.368976116 CEST	49894	443	192.168.2.4	142.250.141.155
Apr 24, 2024 19:31:17.369015932 CEST	443	49894	142.250.141.155	192.168.2.4
Apr 24, 2024 19:31:17.369086027 CEST	49894	443	192.168.2.4	142.250.141.155
Apr 24, 2024 19:31:17.369375944 CEST	49894	443	192.168.2.4	142.250.141.155
Apr 24, 2024 19:31:17.369400978 CEST	443	49894	142.250.141.155	192.168.2.4
Apr 24, 2024 19:31:17.465315104 CEST	443	49888	192.184.67.70	192.168.2.4
Apr 24, 2024 19:31:17.465610981 CEST	49888	443	192.168.2.4	192.184.67.70
Apr 24, 2024 19:31:17.465631962 CEST	443	49888	192.184.67.70	192.168.2.4
Apr 24, 2024 19:31:17.467144966 CEST	443	49888	192.184.67.70	192.168.2.4
Apr 24, 2024 19:31:17.467220068 CEST	49888	443	192.168.2.4	192.184.67.70
Apr 24, 2024 19:31:17.468482018 CEST	49888	443	192.168.2.4	192.184.67.70
Apr 24, 2024 19:31:17.468602896 CEST	443	49888	192.184.67.70	192.168.2.4
Apr 24, 2024 19:31:17.468770027 CEST	49888	443	192.168.2.4	192.184.67.70
Apr 24, 2024 19:31:17.468784094 CEST	443	49888	192.184.67.70	192.168.2.4
Apr 24, 2024 19:31:17.524075031 CEST	49888	443	192.168.2.4	192.184.67.70
Apr 24, 2024 19:31:17.575601101 CEST	443	49885	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:17.575670004 CEST	443	49885	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:17.575690031 CEST	443	49885	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:17.575726032 CEST	49885	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:17.575733900 CEST	443	49885	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:17.575740099 CEST	49885	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:17.575754881 CEST	443	49885	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:17.575776100 CEST	443	49885	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:17.575788021 CEST	49885	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:17.575807095 CEST	49885	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:17.575809002 CEST	443	49885	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:17.575817108 CEST	49885	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:17.575871944 CEST	49885	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:17.575917006 CEST	443	49885	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:17.575969934 CEST	49885	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:17.576011896 CEST	443	49885	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:17.576054096 CEST	49885	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:17.576066017 CEST	443	49885	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:17.576194048 CEST	443	49885	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:17.578782082 CEST	49885	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:17.625092030 CEST	49885	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:17.625119925 CEST	443	49885	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:17.625895977 CEST	443	49889	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:17.626043081 CEST	443	49889	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:17.626152992 CEST	49889	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:17.644063950 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:17.644174099 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:17.644208908 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:17.644248962 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:17.644371033 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:17.644397974 CEST	49887	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:17.644397974 CEST	49887	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:17.644412041 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:17.644453049 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:17.644458055 CEST	49887	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:17.644464016 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:17.644535065 CEST	49887	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:17.653378963 CEST	49896	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:17.653409004 CEST	443	49896	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:17.653464079 CEST	49896	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:17.653959036 CEST	49897	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:17.653969049 CEST	443	49897	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:17.654244900 CEST	49897	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:17.654629946 CEST	49897	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:17.654640913 CEST	443	49897	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:17.655004025 CEST	49896	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:17.655019999 CEST	443	49896	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:17.659195900 CEST	49889	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:17.659236908 CEST	443	49889	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:17.688003063 CEST	443	49888	192.184.67.70	192.168.2.4
Apr 24, 2024 19:31:17.688061953 CEST	443	49888	192.184.67.70	192.168.2.4
Apr 24, 2024 19:31:17.688086033 CEST	443	49888	192.184.67.70	192.168.2.4
Apr 24, 2024 19:31:17.688118935 CEST	443	49888	192.184.67.70	192.168.2.4
Apr 24, 2024 19:31:17.688119888 CEST	49888	443	192.168.2.4	192.184.67.70
Apr 24, 2024 19:31:17.688152075 CEST	443	49888	192.184.67.70	192.168.2.4
Apr 24, 2024 19:31:17.688159943 CEST	49888	443	192.168.2.4	192.184.67.70
Apr 24, 2024 19:31:17.688189030 CEST	49888	443	192.168.2.4	192.184.67.70
Apr 24, 2024 19:31:17.688198090 CEST	443	49888	192.184.67.70	192.168.2.4
Apr 24, 2024 19:31:17.688224077 CEST	443	49888	192.184.67.70	192.168.2.4
Apr 24, 2024 19:31:17.688251972 CEST	49888	443	192.168.2.4	192.184.67.70
Apr 24, 2024 19:31:17.688260078 CEST	443	49888	192.184.67.70	192.168.2.4
Apr 24, 2024 19:31:17.688287020 CEST	49888	443	192.168.2.4	192.184.67.70
Apr 24, 2024 19:31:17.700408936 CEST	443	49892	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:17.700675964 CEST	49892	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:17.700726032 CEST	443	49892	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:17.701770067 CEST	443	49892	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:17.701833963 CEST	49892	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:17.702959061 CEST	49892	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:17.703027010 CEST	443	49892	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:17.703142881 CEST	49892	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:17.719557047 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:17.719815969 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:17.719830990 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:17.720936060 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:17.720997095 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:17.722202063 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:17.722270012 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:17.722546101 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:17.726183891 CEST	443	49894	142.250.141.155	192.168.2.4
Apr 24, 2024 19:31:17.726583958 CEST	49894	443	192.168.2.4	142.250.141.155
Apr 24, 2024 19:31:17.726614952 CEST	443	49894	142.250.141.155	192.168.2.4
Apr 24, 2024 19:31:17.728066921 CEST	443	49894	142.250.141.155	192.168.2.4
Apr 24, 2024 19:31:17.728121996 CEST	49894	443	192.168.2.4	142.250.141.155
Apr 24, 2024 19:31:17.728548050 CEST	49894	443	192.168.2.4	142.250.141.155
Apr 24, 2024 19:31:17.728636026 CEST	443	49894	142.250.141.155	192.168.2.4
Apr 24, 2024 19:31:17.729265928 CEST	49894	443	192.168.2.4	142.250.141.155
Apr 24, 2024 19:31:17.729274035 CEST	443	49894	142.250.141.155	192.168.2.4
Apr 24, 2024 19:31:17.741063118 CEST	49888	443	192.168.2.4	192.184.67.70
Apr 24, 2024 19:31:17.744139910 CEST	443	49892	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:17.756556988 CEST	49892	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:17.756575108 CEST	443	49892	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:17.764164925 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:17.771703005 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:17.771706104 CEST	49894	443	192.168.2.4	142.250.141.155
Apr 24, 2024 19:31:17.771709919 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:17.802345991 CEST	49892	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:17.803375006 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:17.803589106 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:17.803642988 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:17.803683996 CEST	49887	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:17.803694010 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:17.803751945 CEST	49887	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:17.803797007 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:17.803941011 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:17.803994894 CEST	49887	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:17.804002047 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:17.804020882 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:17.804064035 CEST	49887	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:17.806005955 CEST	49887	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:17.806016922 CEST	443	49887	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:17.817487955 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:17.828739882 CEST	443	49888	192.184.67.70	192.168.2.4
Apr 24, 2024 19:31:17.828773022 CEST	443	49888	192.184.67.70	192.168.2.4
Apr 24, 2024 19:31:17.828805923 CEST	443	49888	192.184.67.70	192.168.2.4
Apr 24, 2024 19:31:17.828831911 CEST	49888	443	192.168.2.4	192.184.67.70
Apr 24, 2024 19:31:17.828891039 CEST	49888	443	192.168.2.4	192.184.67.70
Apr 24, 2024 19:31:17.828891993 CEST	49888	443	192.168.2.4	192.184.67.70
Apr 24, 2024 19:31:17.828919888 CEST	443	49888	192.184.67.70	192.168.2.4
Apr 24, 2024 19:31:17.829056025 CEST	443	49888	192.184.67.70	192.168.2.4
Apr 24, 2024 19:31:17.829129934 CEST	49888	443	192.168.2.4	192.184.67.70
Apr 24, 2024 19:31:17.829757929 CEST	49888	443	192.168.2.4	192.184.67.70
Apr 24, 2024 19:31:17.829768896 CEST	443	49888	192.184.67.70	192.168.2.4
Apr 24, 2024 19:31:17.964229107 CEST	49898	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:17.964277029 CEST	443	49898	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:17.964535952 CEST	49898	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:17.964795113 CEST	49898	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:17.964809895 CEST	443	49898	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:18.013031006 CEST	49900	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.013070107 CEST	443	49900	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.013178110 CEST	49901	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.013205051 CEST	443	49901	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.013299942 CEST	49900	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.013324022 CEST	49901	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.013520002 CEST	49902	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.013539076 CEST	443	49902	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.013626099 CEST	49902	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.013730049 CEST	49900	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.013746977 CEST	443	49900	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.013992071 CEST	49901	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.014017105 CEST	443	49901	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.014173031 CEST	49902	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.014189005 CEST	443	49902	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.016644955 CEST	443	49892	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:18.016762018 CEST	443	49892	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:18.016782045 CEST	443	49892	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:18.016824961 CEST	443	49892	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:18.016825914 CEST	49892	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:18.016869068 CEST	443	49892	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:18.016885042 CEST	49892	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:18.016885042 CEST	49892	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:18.016916990 CEST	443	49892	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:18.017004967 CEST	49892	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:18.017021894 CEST	443	49892	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:18.017102003 CEST	443	49892	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:18.017158985 CEST	49892	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:18.017519951 CEST	49892	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:18.017540932 CEST	443	49892	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:18.061712027 CEST	49903	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.061737061 CEST	443	49903	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:18.061842918 CEST	49903	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.062014103 CEST	49904	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.062024117 CEST	443	49904	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:18.062072039 CEST	49904	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.062429905 CEST	49903	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.062443972 CEST	443	49903	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:18.062577963 CEST	49904	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.062585115 CEST	443	49904	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:18.083769083 CEST	443	49894	142.250.141.155	192.168.2.4
Apr 24, 2024 19:31:18.083865881 CEST	443	49894	142.250.141.155	192.168.2.4
Apr 24, 2024 19:31:18.083914995 CEST	49894	443	192.168.2.4	142.250.141.155
Apr 24, 2024 19:31:18.085510015 CEST	49894	443	192.168.2.4	142.250.141.155
Apr 24, 2024 19:31:18.085535049 CEST	443	49894	142.250.141.155	192.168.2.4
Apr 24, 2024 19:31:18.086580038 CEST	443	49896	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.086810112 CEST	49896	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.086833000 CEST	443	49896	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.087205887 CEST	443	49896	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.087609053 CEST	49896	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.087694883 CEST	443	49896	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.087738037 CEST	49896	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.088530064 CEST	443	49897	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.088776112 CEST	49897	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.088790894 CEST	443	49897	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.092338085 CEST	443	49897	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.092401981 CEST	49897	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.092870951 CEST	49897	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.093034983 CEST	443	49897	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.093040943 CEST	49897	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.128123045 CEST	443	49896	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.131679058 CEST	49896	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.136120081 CEST	443	49897	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.147202969 CEST	49897	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.147216082 CEST	443	49897	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.153584957 CEST	49905	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.153633118 CEST	443	49905	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.153697014 CEST	49905	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.154011965 CEST	49906	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.154056072 CEST	443	49906	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.154104948 CEST	49906	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.154285908 CEST	49905	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.154304028 CEST	443	49905	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.154463053 CEST	49906	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.154488087 CEST	443	49906	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.192344904 CEST	49897	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.287575960 CEST	443	49898	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:18.287899017 CEST	49898	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:18.287914991 CEST	443	49898	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:18.288311958 CEST	443	49898	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:18.288430929 CEST	49898	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:18.289040089 CEST	443	49898	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:18.289143085 CEST	49898	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:18.289459944 CEST	49898	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:18.289518118 CEST	443	49898	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:18.289597034 CEST	49898	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:18.334485054 CEST	49898	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:18.334494114 CEST	443	49898	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:18.372824907 CEST	443	49901	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.373071909 CEST	49901	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.373095989 CEST	443	49901	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.374165058 CEST	443	49901	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.374222040 CEST	49901	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.375375032 CEST	49901	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.375437975 CEST	443	49901	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.375566006 CEST	49901	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.375574112 CEST	443	49901	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.377226114 CEST	443	49902	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.377475977 CEST	49902	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.377492905 CEST	443	49902	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.379095078 CEST	443	49902	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.379215956 CEST	49902	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.379533052 CEST	49902	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.379606962 CEST	443	49902	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.379616976 CEST	49902	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.379667044 CEST	443	49902	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.379964113 CEST	49898	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:18.380345106 CEST	443	49900	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.380573988 CEST	49900	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.380598068 CEST	443	49900	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.381761074 CEST	443	49900	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.381815910 CEST	49900	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.382880926 CEST	49900	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.382942915 CEST	443	49900	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.383085012 CEST	49900	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.383093119 CEST	443	49900	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.410583973 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.417840958 CEST	443	49903	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:18.418183088 CEST	49903	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.418231964 CEST	443	49903	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:18.419374943 CEST	443	49903	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:18.419437885 CEST	49903	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.420428038 CEST	49903	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.420504093 CEST	443	49903	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:18.420618057 CEST	49903	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.420638084 CEST	443	49903	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:18.423959017 CEST	443	49904	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:18.424190998 CEST	49904	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.424221039 CEST	443	49904	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:18.426701069 CEST	49900	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.426734924 CEST	49901	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.426791906 CEST	49902	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.426804066 CEST	443	49902	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.427757978 CEST	443	49904	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:18.427824020 CEST	49904	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.428483009 CEST	49904	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.428555965 CEST	443	49904	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:18.428644896 CEST	49904	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.428653955 CEST	443	49904	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:18.434674025 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.434699059 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.434739113 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:18.434741020 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.434768915 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.434782982 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:18.434782982 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:18.434784889 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.434804916 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.434825897 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:18.434832096 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.434850931 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:18.434856892 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.434873104 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:18.472553015 CEST	49902	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.472559929 CEST	49903	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.472559929 CEST	49904	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.487767935 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:18.487783909 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.494421959 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.494443893 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.494461060 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.494472027 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:18.494483948 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.494505882 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:18.494520903 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.494539976 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.494564056 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.494580984 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:18.494589090 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.494616032 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:18.515431881 CEST	443	49896	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.515521049 CEST	443	49896	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.515572071 CEST	49896	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.515775919 CEST	443	49897	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.515868902 CEST	443	49897	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.515930891 CEST	49897	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.516911983 CEST	49896	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.516930103 CEST	443	49896	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.519634962 CEST	49897	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.519661903 CEST	443	49897	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.542342901 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:18.587182045 CEST	443	49905	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.587419987 CEST	49905	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.587482929 CEST	443	49905	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.588705063 CEST	443	49905	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.588735104 CEST	443	49906	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.589449883 CEST	49905	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.589637995 CEST	443	49905	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.591465950 CEST	49906	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.591481924 CEST	443	49906	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.591770887 CEST	49905	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.591811895 CEST	443	49905	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.592612028 CEST	443	49906	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.594131947 CEST	49906	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.594304085 CEST	443	49906	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.594604969 CEST	49906	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:18.594655037 CEST	443	49906	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:18.599560976 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.599586010 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.599603891 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.599620104 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:18.599656105 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:18.599672079 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.599689960 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.599715948 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:18.599736929 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:18.604249001 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.604299068 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:18.609997988 CEST	443	49898	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:18.610091925 CEST	443	49898	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:18.610229015 CEST	49898	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:18.617079020 CEST	49898	443	192.168.2.4	209.73.190.12
Apr 24, 2024 19:31:18.617100000 CEST	443	49898	209.73.190.12	192.168.2.4
Apr 24, 2024 19:31:18.642083883 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.642107010 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.642153978 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.642193079 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:18.642220020 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.642268896 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.642282963 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:18.642654896 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:18.642661095 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.658844948 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.658902884 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.658925056 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:18.658932924 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.658987045 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:18.659291983 CEST	49893	443	192.168.2.4	108.139.10.76
Apr 24, 2024 19:31:18.659326077 CEST	443	49893	108.139.10.76	192.168.2.4
Apr 24, 2024 19:31:18.684017897 CEST	49908	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:18.684041977 CEST	443	49908	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:18.684299946 CEST	49908	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:18.684555054 CEST	49908	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:18.684568882 CEST	443	49908	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:18.733181953 CEST	443	49901	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.733316898 CEST	443	49901	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.733366966 CEST	49901	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.733792067 CEST	443	49900	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.733928919 CEST	443	49900	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.734183073 CEST	49900	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.735192060 CEST	49901	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.735204935 CEST	443	49901	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.753618956 CEST	443	49902	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.754048109 CEST	443	49902	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.754204988 CEST	49902	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.778038025 CEST	443	49903	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:18.778203011 CEST	443	49903	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:18.778431892 CEST	49903	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.782610893 CEST	443	49904	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:18.782706022 CEST	443	49904	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:18.782989979 CEST	49904	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.827750921 CEST	49900	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.827786922 CEST	443	49900	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.828403950 CEST	49904	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.828466892 CEST	443	49904	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:18.828566074 CEST	49903	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.828582048 CEST	443	49903	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:18.838768959 CEST	49902	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:18.838795900 CEST	443	49902	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:18.839754105 CEST	49909	443	192.168.2.4	209.73.190.11
Apr 24, 2024 19:31:18.839797974 CEST	443	49909	209.73.190.11	192.168.2.4
Apr 24, 2024 19:31:18.839857101 CEST	49909	443	192.168.2.4	209.73.190.11
Apr 24, 2024 19:31:18.876609087 CEST	49909	443	192.168.2.4	209.73.190.11
Apr 24, 2024 19:31:18.876641989 CEST	443	49909	209.73.190.11	192.168.2.4
Apr 24, 2024 19:31:18.876921892 CEST	49910	443	192.168.2.4	34.96.71.22
Apr 24, 2024 19:31:18.877002001 CEST	443	49910	34.96.71.22	192.168.2.4
Apr 24, 2024 19:31:18.877125978 CEST	49910	443	192.168.2.4	34.96.71.22
Apr 24, 2024 19:31:18.877444983 CEST	49911	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:18.877477884 CEST	443	49911	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:18.877537966 CEST	49911	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:18.877998114 CEST	49911	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:18.878011942 CEST	443	49911	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:18.878221035 CEST	49910	443	192.168.2.4	34.96.71.22
Apr 24, 2024 19:31:18.878282070 CEST	443	49910	34.96.71.22	192.168.2.4
Apr 24, 2024 19:31:18.881290913 CEST	49913	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.881323099 CEST	443	49913	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:18.881438017 CEST	49913	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.882061958 CEST	49914	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.882124901 CEST	443	49914	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:18.882267952 CEST	49913	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.882291079 CEST	443	49913	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:18.882292986 CEST	49914	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.882493019 CEST	49914	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:18.882503033 CEST	443	49914	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:19.015238047 CEST	443	49905	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:19.015373945 CEST	443	49905	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:19.015506983 CEST	49905	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:19.016767025 CEST	443	49906	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:19.016805887 CEST	49905	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:19.016843081 CEST	443	49906	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:19.016849041 CEST	443	49905	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:19.016891003 CEST	49906	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:19.021406889 CEST	49906	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:19.021425009 CEST	443	49906	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:19.028429031 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.028476000 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.028707027 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.029221058 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.029247999 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.079437017 CEST	49916	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.079478025 CEST	443	49916	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:19.079540968 CEST	49916	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.079807043 CEST	49916	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.079818010 CEST	443	49916	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:19.081495047 CEST	49917	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.081536055 CEST	443	49917	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:19.081655979 CEST	49917	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.082056046 CEST	49917	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.082087040 CEST	443	49917	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:19.182281017 CEST	49918	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:19.182317972 CEST	443	49918	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:19.182369947 CEST	49918	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:19.182563066 CEST	49919	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:19.182588100 CEST	443	49919	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:19.182698011 CEST	49919	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:19.183054924 CEST	49918	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:19.183069944 CEST	443	49918	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:19.183285952 CEST	49919	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:19.183300018 CEST	443	49919	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:19.199212074 CEST	443	49909	209.73.190.11	192.168.2.4
Apr 24, 2024 19:31:19.199470997 CEST	49909	443	192.168.2.4	209.73.190.11
Apr 24, 2024 19:31:19.199503899 CEST	443	49909	209.73.190.11	192.168.2.4
Apr 24, 2024 19:31:19.199913025 CEST	443	49909	209.73.190.11	192.168.2.4
Apr 24, 2024 19:31:19.199970007 CEST	49909	443	192.168.2.4	209.73.190.11
Apr 24, 2024 19:31:19.200651884 CEST	443	49909	209.73.190.11	192.168.2.4
Apr 24, 2024 19:31:19.200699091 CEST	49909	443	192.168.2.4	209.73.190.11
Apr 24, 2024 19:31:19.200876951 CEST	49909	443	192.168.2.4	209.73.190.11
Apr 24, 2024 19:31:19.200963974 CEST	443	49909	209.73.190.11	192.168.2.4
Apr 24, 2024 19:31:19.201030016 CEST	49909	443	192.168.2.4	209.73.190.11
Apr 24, 2024 19:31:19.201044083 CEST	443	49909	209.73.190.11	192.168.2.4
Apr 24, 2024 19:31:19.206408024 CEST	443	49911	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:19.206649065 CEST	49911	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:19.206679106 CEST	443	49911	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:19.207719088 CEST	443	49911	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:19.207775116 CEST	49911	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:19.210078955 CEST	49911	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:19.210151911 CEST	443	49911	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:19.210444927 CEST	49911	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:19.210457087 CEST	443	49911	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:19.230360031 CEST	443	49910	34.96.71.22	192.168.2.4
Apr 24, 2024 19:31:19.230726957 CEST	49910	443	192.168.2.4	34.96.71.22
Apr 24, 2024 19:31:19.230758905 CEST	443	49910	34.96.71.22	192.168.2.4
Apr 24, 2024 19:31:19.231820107 CEST	443	49910	34.96.71.22	192.168.2.4
Apr 24, 2024 19:31:19.231885910 CEST	49910	443	192.168.2.4	34.96.71.22
Apr 24, 2024 19:31:19.233288050 CEST	49910	443	192.168.2.4	34.96.71.22
Apr 24, 2024 19:31:19.233352900 CEST	443	49910	34.96.71.22	192.168.2.4
Apr 24, 2024 19:31:19.233597994 CEST	49910	443	192.168.2.4	34.96.71.22
Apr 24, 2024 19:31:19.233606100 CEST	443	49910	34.96.71.22	192.168.2.4
Apr 24, 2024 19:31:19.238733053 CEST	443	49913	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:19.239078045 CEST	49913	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:19.239109039 CEST	443	49913	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:19.240187883 CEST	443	49913	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:19.241151094 CEST	49913	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:19.241286039 CEST	49913	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:19.241298914 CEST	443	49913	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:19.241329908 CEST	443	49913	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:19.241393089 CEST	49909	443	192.168.2.4	209.73.190.11
Apr 24, 2024 19:31:19.243626118 CEST	443	49914	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:19.244442940 CEST	49914	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:19.244476080 CEST	443	49914	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:19.245805979 CEST	443	49914	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:19.246242046 CEST	49914	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:19.246427059 CEST	443	49914	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:19.246568918 CEST	49914	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:19.246594906 CEST	443	49914	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:19.256491899 CEST	49911	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:19.274085045 CEST	49910	443	192.168.2.4	34.96.71.22
Apr 24, 2024 19:31:19.284447908 CEST	49913	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:19.331480980 CEST	443	49908	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:19.332345009 CEST	49908	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.332364082 CEST	443	49908	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:19.333597898 CEST	443	49908	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:19.333655119 CEST	49908	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.334762096 CEST	49908	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.334824085 CEST	443	49908	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:19.334934950 CEST	49908	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.334943056 CEST	443	49908	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:19.353219032 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.353431940 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.353461981 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.354020119 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.354449034 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.354548931 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.354609013 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.381995916 CEST	49908	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.396156073 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.405342102 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.510793924 CEST	443	49919	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:19.511502981 CEST	49919	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:19.511518955 CEST	443	49919	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:19.512614012 CEST	443	49919	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:19.512693882 CEST	49919	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:19.513910055 CEST	49919	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:19.514077902 CEST	49919	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:19.514082909 CEST	443	49919	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:19.514914036 CEST	443	49919	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:19.515036106 CEST	443	49918	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:19.515214920 CEST	49918	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:19.515225887 CEST	443	49918	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:19.516635895 CEST	443	49918	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:19.516710997 CEST	49918	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:19.517748117 CEST	49918	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:19.517915010 CEST	49918	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:19.517919064 CEST	443	49918	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:19.517987013 CEST	443	49918	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:19.518675089 CEST	443	49909	209.73.190.11	192.168.2.4
Apr 24, 2024 19:31:19.518778086 CEST	443	49909	209.73.190.11	192.168.2.4
Apr 24, 2024 19:31:19.518825054 CEST	49909	443	192.168.2.4	209.73.190.11
Apr 24, 2024 19:31:19.519509077 CEST	49909	443	192.168.2.4	209.73.190.11
Apr 24, 2024 19:31:19.519529104 CEST	443	49909	209.73.190.11	192.168.2.4
Apr 24, 2024 19:31:19.550116062 CEST	443	49908	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:19.550189972 CEST	443	49908	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:19.550239086 CEST	49908	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.551191092 CEST	49908	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.551203966 CEST	443	49908	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:19.568862915 CEST	49919	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:19.568869114 CEST	49918	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:19.568877935 CEST	443	49919	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:19.568881035 CEST	443	49918	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:19.578068972 CEST	443	49911	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:19.578150034 CEST	443	49911	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:19.578233004 CEST	49911	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:19.578717947 CEST	49911	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:19.578739882 CEST	443	49911	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:19.606199026 CEST	443	49913	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:19.606403112 CEST	443	49913	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:19.606554985 CEST	49913	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:19.608268023 CEST	49913	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:19.608308077 CEST	443	49913	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:19.611280918 CEST	443	49914	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:19.611448050 CEST	443	49914	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:19.611495972 CEST	49914	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:19.613806963 CEST	49918	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:19.613807917 CEST	49919	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:19.635679007 CEST	443	49910	34.96.71.22	192.168.2.4
Apr 24, 2024 19:31:19.635880947 CEST	443	49910	34.96.71.22	192.168.2.4
Apr 24, 2024 19:31:19.635952950 CEST	49910	443	192.168.2.4	34.96.71.22
Apr 24, 2024 19:31:19.644867897 CEST	49914	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:19.644891024 CEST	443	49914	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:19.665479898 CEST	49921	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:19.665532112 CEST	443	49921	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:19.665592909 CEST	49921	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:19.665997028 CEST	49921	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:19.666013956 CEST	443	49921	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:19.666779995 CEST	49910	443	192.168.2.4	34.96.71.22
Apr 24, 2024 19:31:19.666857958 CEST	443	49910	34.96.71.22	192.168.2.4
Apr 24, 2024 19:31:19.729336023 CEST	443	49916	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:19.729562044 CEST	49916	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.729587078 CEST	443	49916	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:19.730362892 CEST	443	49917	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:19.730581999 CEST	49917	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.730637074 CEST	443	49917	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:19.731060028 CEST	443	49916	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:19.731112003 CEST	49916	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.731424093 CEST	49916	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.731488943 CEST	443	49916	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:19.731559038 CEST	49916	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.731579065 CEST	443	49916	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:19.731898069 CEST	443	49917	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:19.731972933 CEST	49917	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.732338905 CEST	49917	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.732413054 CEST	443	49917	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:19.732439995 CEST	49917	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.732470036 CEST	443	49917	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:19.759989977 CEST	49922	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:19.760013103 CEST	443	49922	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:19.760166883 CEST	49922	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:19.760468960 CEST	49923	443	192.168.2.4	18.239.199.34
Apr 24, 2024 19:31:19.760488033 CEST	443	49923	18.239.199.34	192.168.2.4
Apr 24, 2024 19:31:19.760610104 CEST	49923	443	192.168.2.4	18.239.199.34
Apr 24, 2024 19:31:19.760890007 CEST	49924	443	192.168.2.4	52.85.204.136
Apr 24, 2024 19:31:19.760912895 CEST	443	49924	52.85.204.136	192.168.2.4
Apr 24, 2024 19:31:19.761039972 CEST	49924	443	192.168.2.4	52.85.204.136
Apr 24, 2024 19:31:19.761538982 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:19.761590004 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:19.761703014 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:19.761815071 CEST	49922	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:19.761822939 CEST	443	49922	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:19.762017965 CEST	49923	443	192.168.2.4	18.239.199.34
Apr 24, 2024 19:31:19.762026072 CEST	443	49923	18.239.199.34	192.168.2.4
Apr 24, 2024 19:31:19.762223005 CEST	49924	443	192.168.2.4	52.85.204.136
Apr 24, 2024 19:31:19.762232065 CEST	443	49924	52.85.204.136	192.168.2.4
Apr 24, 2024 19:31:19.762521029 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:19.762547970 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:19.774868965 CEST	49916	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.774874926 CEST	443	49916	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:19.774877071 CEST	49917	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.774893999 CEST	443	49917	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:19.790045977 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.790108919 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.790163994 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.790210962 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.790247917 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.790251017 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.790271044 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.790306091 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.790313005 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.790352106 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.801244974 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.801311016 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.812292099 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.812346935 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.812391996 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.812436104 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.822058916 CEST	49916	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.822088957 CEST	49917	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:19.823379040 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.823431015 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.823455095 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.824927092 CEST	443	49919	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:19.825196028 CEST	443	49919	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:19.825479984 CEST	49919	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:19.827902079 CEST	443	49918	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:19.828035116 CEST	443	49918	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:19.828074932 CEST	49918	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:19.834616899 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.834722996 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.834774017 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.834789038 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.835879087 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.839365959 CEST	49929	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:19.839378119 CEST	443	49929	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:19.839553118 CEST	49929	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:19.841141939 CEST	49929	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:19.841150999 CEST	443	49929	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:19.842411041 CEST	49932	443	192.168.2.4	34.239.87.50
Apr 24, 2024 19:31:19.842453003 CEST	443	49932	34.239.87.50	192.168.2.4
Apr 24, 2024 19:31:19.842554092 CEST	49918	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:19.842561007 CEST	443	49918	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:19.842588902 CEST	49932	443	192.168.2.4	34.239.87.50
Apr 24, 2024 19:31:19.843322992 CEST	49919	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:19.843331099 CEST	443	49919	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:19.844335079 CEST	49932	443	192.168.2.4	34.239.87.50
Apr 24, 2024 19:31:19.844348907 CEST	443	49932	34.239.87.50	192.168.2.4
Apr 24, 2024 19:31:19.949467897 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.949546099 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.949568987 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.949596882 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.949723959 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.955054998 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.955115080 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.955138922 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.966164112 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.972161055 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.972176075 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.977164984 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.978168011 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.978179932 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.988360882 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.988414049 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.988461971 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.988471031 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.988621950 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.999439001 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.999490976 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:19.999516010 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:19.999557972 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.005248070 CEST	49933	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:20.005294085 CEST	443	49933	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:20.005417109 CEST	49934	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:20.005441904 CEST	443	49934	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:20.005450010 CEST	49933	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:20.005490065 CEST	49934	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:20.006352901 CEST	49934	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:20.006370068 CEST	443	49934	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:20.006607056 CEST	49933	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:20.006622076 CEST	443	49933	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:20.010730982 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.010793924 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.020651102 CEST	443	49921	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:20.020864010 CEST	49921	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:20.020872116 CEST	443	49921	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:20.021886110 CEST	443	49921	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:20.021960020 CEST	49921	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:20.022051096 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.022098064 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.022099018 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.022113085 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.022149086 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.023222923 CEST	49921	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:20.023268938 CEST	443	49921	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:20.023546934 CEST	49921	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:20.023552895 CEST	443	49921	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:20.031893969 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.031944036 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.031944990 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.031954050 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.031990051 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.042083025 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.052356005 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.052391052 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.052424908 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.052458048 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.052478075 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.062547922 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.062599897 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.062608957 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.067750931 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.067802906 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.067809105 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.070533991 CEST	49921	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:20.077852011 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.077899933 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.077905893 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.087781906 CEST	443	49922	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:20.089302063 CEST	49922	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:20.089323044 CEST	443	49922	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:20.090343952 CEST	443	49922	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:20.090405941 CEST	49922	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:20.091065884 CEST	49922	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:20.091109991 CEST	443	49922	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:20.091202974 CEST	49922	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:20.091207981 CEST	443	49922	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:20.093044996 CEST	443	49924	52.85.204.136	192.168.2.4
Apr 24, 2024 19:31:20.093358994 CEST	49924	443	192.168.2.4	52.85.204.136
Apr 24, 2024 19:31:20.093381882 CEST	443	49924	52.85.204.136	192.168.2.4
Apr 24, 2024 19:31:20.094389915 CEST	443	49924	52.85.204.136	192.168.2.4
Apr 24, 2024 19:31:20.094453096 CEST	49924	443	192.168.2.4	52.85.204.136
Apr 24, 2024 19:31:20.095383883 CEST	49924	443	192.168.2.4	52.85.204.136
Apr 24, 2024 19:31:20.095428944 CEST	443	49924	52.85.204.136	192.168.2.4
Apr 24, 2024 19:31:20.095628023 CEST	49924	443	192.168.2.4	52.85.204.136
Apr 24, 2024 19:31:20.095633030 CEST	443	49924	52.85.204.136	192.168.2.4
Apr 24, 2024 19:31:20.108681917 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.108726978 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.108777046 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.108784914 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.108871937 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.112984896 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.113023996 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.113032103 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.113070965 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.116321087 CEST	443	49923	18.239.199.34	192.168.2.4
Apr 24, 2024 19:31:20.117610931 CEST	49923	443	192.168.2.4	18.239.199.34
Apr 24, 2024 19:31:20.117624998 CEST	443	49923	18.239.199.34	192.168.2.4
Apr 24, 2024 19:31:20.118644953 CEST	443	49923	18.239.199.34	192.168.2.4
Apr 24, 2024 19:31:20.118700981 CEST	49923	443	192.168.2.4	18.239.199.34
Apr 24, 2024 19:31:20.119616985 CEST	49923	443	192.168.2.4	18.239.199.34
Apr 24, 2024 19:31:20.119673014 CEST	443	49923	18.239.199.34	192.168.2.4
Apr 24, 2024 19:31:20.119961977 CEST	49923	443	192.168.2.4	18.239.199.34
Apr 24, 2024 19:31:20.119967937 CEST	443	49923	18.239.199.34	192.168.2.4
Apr 24, 2024 19:31:20.121670961 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.121728897 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.129277945 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.129331112 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.129339933 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.129379988 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.129384041 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.131712914 CEST	49922	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:20.136964083 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.137006044 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.137007952 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.137022018 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.137068033 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.144417048 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.144467115 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.146296024 CEST	49924	443	192.168.2.4	52.85.204.136
Apr 24, 2024 19:31:20.151551008 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.151597023 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.151606083 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.151612997 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.151662111 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.157397032 CEST	443	49929	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:20.157763004 CEST	49929	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:20.157780886 CEST	443	49929	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:20.158792973 CEST	443	49929	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:20.158834934 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.158849001 CEST	49929	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:20.158886909 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.158888102 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.158899069 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.158936024 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.159854889 CEST	49929	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:20.159914017 CEST	443	49929	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:20.160192013 CEST	49929	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:20.160200119 CEST	443	49929	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:20.166146040 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.166198015 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.166227102 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.166332960 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.166376114 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.166985989 CEST	49915	443	192.168.2.4	31.13.70.7
Apr 24, 2024 19:31:20.167005062 CEST	443	49915	31.13.70.7	192.168.2.4
Apr 24, 2024 19:31:20.169867039 CEST	49923	443	192.168.2.4	18.239.199.34
Apr 24, 2024 19:31:20.206392050 CEST	443	49917	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:20.206455946 CEST	443	49917	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:20.206518888 CEST	49917	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:20.207092047 CEST	49917	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:20.207108974 CEST	443	49917	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:20.207109928 CEST	443	49916	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:20.207200050 CEST	443	49916	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:20.207248926 CEST	49916	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:20.207401991 CEST	49929	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:20.250735998 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.275055885 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.275090933 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.276527882 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.276629925 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.277934074 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.278002977 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.278194904 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.278211117 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.294163942 CEST	49916	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:20.294195890 CEST	443	49916	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:20.320612907 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.330476999 CEST	443	49934	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:20.333493948 CEST	443	49933	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:20.351757050 CEST	49933	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:20.351793051 CEST	443	49933	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:20.352035999 CEST	49934	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:20.352067947 CEST	443	49934	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:20.353599072 CEST	443	49934	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:20.353657007 CEST	49934	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:20.354130030 CEST	49934	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:20.354199886 CEST	443	49934	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:20.354464054 CEST	49934	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:20.354471922 CEST	443	49934	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:20.356266022 CEST	443	49933	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:20.356332064 CEST	49933	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:20.356666088 CEST	49933	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:20.356822968 CEST	443	49933	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:20.356836081 CEST	49933	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:20.381131887 CEST	443	49921	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:20.381217957 CEST	443	49921	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:20.381401062 CEST	49921	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:20.384943008 CEST	49921	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:20.384959936 CEST	443	49921	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:20.398106098 CEST	49934	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:20.398148060 CEST	49933	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:20.398175001 CEST	443	49933	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:20.437160015 CEST	443	49922	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:20.437479973 CEST	443	49922	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:20.437581062 CEST	49922	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:20.450617075 CEST	49933	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:20.464927912 CEST	443	49924	52.85.204.136	192.168.2.4
Apr 24, 2024 19:31:20.464958906 CEST	443	49924	52.85.204.136	192.168.2.4
Apr 24, 2024 19:31:20.464967012 CEST	443	49924	52.85.204.136	192.168.2.4
Apr 24, 2024 19:31:20.464979887 CEST	443	49924	52.85.204.136	192.168.2.4
Apr 24, 2024 19:31:20.465003014 CEST	443	49924	52.85.204.136	192.168.2.4
Apr 24, 2024 19:31:20.465040922 CEST	443	49924	52.85.204.136	192.168.2.4
Apr 24, 2024 19:31:20.465040922 CEST	49924	443	192.168.2.4	52.85.204.136
Apr 24, 2024 19:31:20.465065002 CEST	49924	443	192.168.2.4	52.85.204.136
Apr 24, 2024 19:31:20.465080976 CEST	49924	443	192.168.2.4	52.85.204.136
Apr 24, 2024 19:31:20.500358105 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.500838041 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.500889063 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.500901937 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.500910997 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.500932932 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.500952005 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.501873016 CEST	443	49932	34.239.87.50	192.168.2.4
Apr 24, 2024 19:31:20.506130934 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.506171942 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.506185055 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.506211996 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.509207010 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.511667013 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.513679028 CEST	49932	443	192.168.2.4	34.239.87.50
Apr 24, 2024 19:31:20.513710022 CEST	443	49932	34.239.87.50	192.168.2.4
Apr 24, 2024 19:31:20.514852047 CEST	443	49932	34.239.87.50	192.168.2.4
Apr 24, 2024 19:31:20.514935970 CEST	49932	443	192.168.2.4	34.239.87.50
Apr 24, 2024 19:31:20.515214920 CEST	49922	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:20.515242100 CEST	443	49922	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:20.517313004 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.517399073 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.517436028 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.518450975 CEST	49932	443	192.168.2.4	34.239.87.50
Apr 24, 2024 19:31:20.518552065 CEST	443	49932	34.239.87.50	192.168.2.4
Apr 24, 2024 19:31:20.518949986 CEST	49932	443	192.168.2.4	34.239.87.50
Apr 24, 2024 19:31:20.518966913 CEST	443	49932	34.239.87.50	192.168.2.4
Apr 24, 2024 19:31:20.522550106 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.522631884 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.522650957 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.528198004 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.528412104 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.528428078 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.533128977 CEST	443	49929	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:20.533196926 CEST	443	49929	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:20.533349991 CEST	49929	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:20.533456087 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.533519030 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.533534050 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.538903952 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.538968086 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.538980961 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.544365883 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.544434071 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.544441938 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.547925949 CEST	49924	443	192.168.2.4	52.85.204.136
Apr 24, 2024 19:31:20.547945023 CEST	443	49924	52.85.204.136	192.168.2.4
Apr 24, 2024 19:31:20.548398972 CEST	49929	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:20.548403978 CEST	443	49929	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:20.548944950 CEST	49936	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:20.548976898 CEST	443	49936	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:20.549029112 CEST	49936	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:20.549525976 CEST	49936	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:20.549545050 CEST	443	49936	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:20.549973011 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.550024033 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.550031900 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.560184956 CEST	49937	443	192.168.2.4	142.250.141.103
Apr 24, 2024 19:31:20.560201883 CEST	443	49937	142.250.141.103	192.168.2.4
Apr 24, 2024 19:31:20.560549974 CEST	49937	443	192.168.2.4	142.250.141.103
Apr 24, 2024 19:31:20.560648918 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.560672045 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.560688019 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.560697079 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.560750008 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.560905933 CEST	49937	443	192.168.2.4	142.250.141.103
Apr 24, 2024 19:31:20.560914040 CEST	443	49937	142.250.141.103	192.168.2.4
Apr 24, 2024 19:31:20.566153049 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.567543983 CEST	49932	443	192.168.2.4	34.239.87.50
Apr 24, 2024 19:31:20.615099907 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.649574995 CEST	443	49934	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:20.649903059 CEST	443	49934	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:20.649976015 CEST	49934	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:20.651091099 CEST	443	49933	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:20.651159048 CEST	49934	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:20.651190996 CEST	443	49934	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:20.651396990 CEST	443	49933	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:20.651478052 CEST	49933	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:20.656307936 CEST	49933	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:20.656348944 CEST	443	49933	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:20.660238981 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.662493944 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.662540913 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.662553072 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.667556047 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.667593002 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.667601109 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.667608976 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.667654991 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.672447920 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.676925898 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.676992893 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.677011967 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.681210041 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.681325912 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.681337118 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.685276985 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.686223984 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.686239004 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.689173937 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.689241886 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.689251900 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.693032980 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.693084002 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.697191000 CEST	49926	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:20.697213888 CEST	443	49926	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:20.702033043 CEST	443	49923	18.239.199.34	192.168.2.4
Apr 24, 2024 19:31:20.702182055 CEST	443	49923	18.239.199.34	192.168.2.4
Apr 24, 2024 19:31:20.702243090 CEST	49923	443	192.168.2.4	18.239.199.34
Apr 24, 2024 19:31:20.708746910 CEST	49940	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:20.708782911 CEST	443	49940	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:20.708841085 CEST	49940	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:20.709419966 CEST	49940	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:20.709438086 CEST	443	49940	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:20.711833000 CEST	49923	443	192.168.2.4	18.239.199.34
Apr 24, 2024 19:31:20.711848021 CEST	443	49923	18.239.199.34	192.168.2.4
Apr 24, 2024 19:31:20.720065117 CEST	49941	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:20.720086098 CEST	443	49941	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:20.720354080 CEST	49941	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:20.720612049 CEST	49941	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:20.720617056 CEST	443	49941	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:20.735172033 CEST	443	49932	34.239.87.50	192.168.2.4
Apr 24, 2024 19:31:20.735304117 CEST	443	49932	34.239.87.50	192.168.2.4
Apr 24, 2024 19:31:20.735459089 CEST	49932	443	192.168.2.4	34.239.87.50
Apr 24, 2024 19:31:20.735858917 CEST	49932	443	192.168.2.4	34.239.87.50
Apr 24, 2024 19:31:20.735877991 CEST	443	49932	34.239.87.50	192.168.2.4
Apr 24, 2024 19:31:20.743411064 CEST	49942	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:20.743436098 CEST	443	49942	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:20.743540049 CEST	49942	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:20.743700981 CEST	49943	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:20.743735075 CEST	443	49943	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:20.743944883 CEST	49942	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:20.743946075 CEST	49943	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:20.743952990 CEST	443	49942	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:20.744127035 CEST	49943	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:20.744137049 CEST	443	49943	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:20.808552980 CEST	49945	443	192.168.2.4	151.101.1.140
Apr 24, 2024 19:31:20.808605909 CEST	443	49945	151.101.1.140	192.168.2.4
Apr 24, 2024 19:31:20.808753014 CEST	49945	443	192.168.2.4	151.101.1.140
Apr 24, 2024 19:31:20.809061050 CEST	49945	443	192.168.2.4	151.101.1.140
Apr 24, 2024 19:31:20.809077024 CEST	443	49945	151.101.1.140	192.168.2.4
Apr 24, 2024 19:31:20.861778975 CEST	443	49936	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:20.862070084 CEST	49936	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:20.862095118 CEST	443	49936	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:20.862420082 CEST	443	49936	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:20.862761974 CEST	49936	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:20.862813950 CEST	443	49936	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:20.862910986 CEST	49936	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:20.873815060 CEST	49946	443	192.168.2.4	18.239.199.122
Apr 24, 2024 19:31:20.873848915 CEST	443	49946	18.239.199.122	192.168.2.4
Apr 24, 2024 19:31:20.873933077 CEST	49946	443	192.168.2.4	18.239.199.122
Apr 24, 2024 19:31:20.874171972 CEST	49946	443	192.168.2.4	18.239.199.122
Apr 24, 2024 19:31:20.874182940 CEST	443	49946	18.239.199.122	192.168.2.4
Apr 24, 2024 19:31:20.893799067 CEST	49947	443	192.168.2.4	34.239.87.50
Apr 24, 2024 19:31:20.893838882 CEST	443	49947	34.239.87.50	192.168.2.4
Apr 24, 2024 19:31:20.894007921 CEST	49947	443	192.168.2.4	34.239.87.50
Apr 24, 2024 19:31:20.894205093 CEST	49947	443	192.168.2.4	34.239.87.50
Apr 24, 2024 19:31:20.894222975 CEST	443	49947	34.239.87.50	192.168.2.4
Apr 24, 2024 19:31:20.904124022 CEST	443	49936	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:20.912854910 CEST	49936	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:20.917970896 CEST	443	49937	142.250.141.103	192.168.2.4
Apr 24, 2024 19:31:20.918193102 CEST	49937	443	192.168.2.4	142.250.141.103
Apr 24, 2024 19:31:20.918210983 CEST	443	49937	142.250.141.103	192.168.2.4
Apr 24, 2024 19:31:20.919168949 CEST	443	49937	142.250.141.103	192.168.2.4
Apr 24, 2024 19:31:20.919225931 CEST	49937	443	192.168.2.4	142.250.141.103
Apr 24, 2024 19:31:20.919527054 CEST	49937	443	192.168.2.4	142.250.141.103
Apr 24, 2024 19:31:20.919610023 CEST	443	49937	142.250.141.103	192.168.2.4
Apr 24, 2024 19:31:20.919660091 CEST	49937	443	192.168.2.4	142.250.141.103
Apr 24, 2024 19:31:20.919668913 CEST	443	49937	142.250.141.103	192.168.2.4
Apr 24, 2024 19:31:20.975128889 CEST	49937	443	192.168.2.4	142.250.141.103
Apr 24, 2024 19:31:21.096560001 CEST	443	49942	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:21.097141027 CEST	49942	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:21.097153902 CEST	443	49942	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:21.097546101 CEST	443	49942	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:21.097619057 CEST	49942	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:21.097975969 CEST	443	49943	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:21.098248005 CEST	443	49942	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:21.098295927 CEST	49942	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:21.098393917 CEST	49943	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:21.098422050 CEST	443	49943	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:21.098686934 CEST	49942	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:21.098740101 CEST	443	49942	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:21.098751068 CEST	49942	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:21.098927021 CEST	443	49943	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:21.099067926 CEST	49943	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:21.099946976 CEST	443	49943	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:21.100136042 CEST	49943	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:21.101053953 CEST	49943	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:21.101053953 CEST	49943	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:21.101067066 CEST	443	49943	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:21.101130962 CEST	443	49943	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:21.133584976 CEST	443	49945	151.101.1.140	192.168.2.4
Apr 24, 2024 19:31:21.134052038 CEST	49945	443	192.168.2.4	151.101.1.140
Apr 24, 2024 19:31:21.134073973 CEST	443	49945	151.101.1.140	192.168.2.4
Apr 24, 2024 19:31:21.135142088 CEST	443	49945	151.101.1.140	192.168.2.4
Apr 24, 2024 19:31:21.135205984 CEST	49945	443	192.168.2.4	151.101.1.140
Apr 24, 2024 19:31:21.136163950 CEST	49945	443	192.168.2.4	151.101.1.140
Apr 24, 2024 19:31:21.136226892 CEST	443	49945	151.101.1.140	192.168.2.4
Apr 24, 2024 19:31:21.136336088 CEST	49945	443	192.168.2.4	151.101.1.140
Apr 24, 2024 19:31:21.144114971 CEST	443	49942	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:21.147525072 CEST	49942	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:21.147526026 CEST	49943	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:21.147536993 CEST	443	49942	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:21.147542953 CEST	443	49943	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:21.177978992 CEST	49945	443	192.168.2.4	151.101.1.140
Apr 24, 2024 19:31:21.177998066 CEST	443	49945	151.101.1.140	192.168.2.4
Apr 24, 2024 19:31:21.193598032 CEST	49942	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:21.193603039 CEST	49943	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:21.223566055 CEST	443	49946	18.239.199.122	192.168.2.4
Apr 24, 2024 19:31:21.223826885 CEST	49946	443	192.168.2.4	18.239.199.122
Apr 24, 2024 19:31:21.223850012 CEST	443	49946	18.239.199.122	192.168.2.4
Apr 24, 2024 19:31:21.224858046 CEST	443	49946	18.239.199.122	192.168.2.4
Apr 24, 2024 19:31:21.224921942 CEST	49946	443	192.168.2.4	18.239.199.122
Apr 24, 2024 19:31:21.224967957 CEST	49945	443	192.168.2.4	151.101.1.140
Apr 24, 2024 19:31:21.226443052 CEST	49946	443	192.168.2.4	18.239.199.122
Apr 24, 2024 19:31:21.226531982 CEST	443	49946	18.239.199.122	192.168.2.4
Apr 24, 2024 19:31:21.226691961 CEST	49946	443	192.168.2.4	18.239.199.122
Apr 24, 2024 19:31:21.226699114 CEST	443	49946	18.239.199.122	192.168.2.4
Apr 24, 2024 19:31:21.251431942 CEST	443	49936	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:21.251528025 CEST	443	49936	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:21.251576900 CEST	49936	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:21.252455950 CEST	49936	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:21.252477884 CEST	443	49936	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:21.272542953 CEST	49946	443	192.168.2.4	18.239.199.122
Apr 24, 2024 19:31:21.280282974 CEST	443	49937	142.250.141.103	192.168.2.4
Apr 24, 2024 19:31:21.280484915 CEST	443	49937	142.250.141.103	192.168.2.4
Apr 24, 2024 19:31:21.280549049 CEST	49937	443	192.168.2.4	142.250.141.103
Apr 24, 2024 19:31:21.281158924 CEST	49937	443	192.168.2.4	142.250.141.103
Apr 24, 2024 19:31:21.281205893 CEST	443	49937	142.250.141.103	192.168.2.4
Apr 24, 2024 19:31:21.325247049 CEST	443	49947	34.239.87.50	192.168.2.4
Apr 24, 2024 19:31:21.325515985 CEST	49947	443	192.168.2.4	34.239.87.50
Apr 24, 2024 19:31:21.325579882 CEST	443	49947	34.239.87.50	192.168.2.4
Apr 24, 2024 19:31:21.327069998 CEST	443	49947	34.239.87.50	192.168.2.4
Apr 24, 2024 19:31:21.327148914 CEST	49947	443	192.168.2.4	34.239.87.50
Apr 24, 2024 19:31:21.327485085 CEST	49947	443	192.168.2.4	34.239.87.50
Apr 24, 2024 19:31:21.327562094 CEST	443	49947	34.239.87.50	192.168.2.4
Apr 24, 2024 19:31:21.327630997 CEST	49947	443	192.168.2.4	34.239.87.50
Apr 24, 2024 19:31:21.341973066 CEST	443	49941	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:21.342253923 CEST	49941	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:21.342288017 CEST	443	49941	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:21.343708038 CEST	443	49941	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:21.343772888 CEST	49941	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:21.343786001 CEST	443	49941	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:21.343863964 CEST	49941	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:21.345060110 CEST	49941	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:21.345148087 CEST	443	49941	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:21.345354080 CEST	49941	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:21.345361948 CEST	443	49941	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:21.358438969 CEST	443	49940	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:21.358717918 CEST	49940	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:21.358731031 CEST	443	49940	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:21.359702110 CEST	443	49940	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:21.359852076 CEST	49940	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:21.362687111 CEST	49940	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:21.362895966 CEST	49940	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:21.362905979 CEST	443	49940	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:21.363538980 CEST	443	49940	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:21.368124962 CEST	443	49947	34.239.87.50	192.168.2.4
Apr 24, 2024 19:31:21.380475998 CEST	49947	443	192.168.2.4	34.239.87.50
Apr 24, 2024 19:31:21.380502939 CEST	443	49947	34.239.87.50	192.168.2.4
Apr 24, 2024 19:31:21.395804882 CEST	49941	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:21.415173054 CEST	49940	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:21.415199041 CEST	443	49940	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:21.418077946 CEST	49948	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:21.418133020 CEST	443	49948	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:21.418199062 CEST	49948	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:21.418415070 CEST	49948	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:21.418427944 CEST	443	49948	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:21.430308104 CEST	49947	443	192.168.2.4	34.239.87.50
Apr 24, 2024 19:31:21.453433037 CEST	443	49945	151.101.1.140	192.168.2.4
Apr 24, 2024 19:31:21.453593016 CEST	443	49945	151.101.1.140	192.168.2.4
Apr 24, 2024 19:31:21.453680038 CEST	49945	443	192.168.2.4	151.101.1.140
Apr 24, 2024 19:31:21.453680038 CEST	49945	443	192.168.2.4	151.101.1.140
Apr 24, 2024 19:31:21.453715086 CEST	443	49945	151.101.1.140	192.168.2.4
Apr 24, 2024 19:31:21.453763962 CEST	49945	443	192.168.2.4	151.101.1.140
Apr 24, 2024 19:31:21.454170942 CEST	49949	443	192.168.2.4	151.101.1.140
Apr 24, 2024 19:31:21.454272032 CEST	443	49949	151.101.1.140	192.168.2.4
Apr 24, 2024 19:31:21.454338074 CEST	49949	443	192.168.2.4	151.101.1.140
Apr 24, 2024 19:31:21.454569101 CEST	49949	443	192.168.2.4	151.101.1.140
Apr 24, 2024 19:31:21.454600096 CEST	443	49949	151.101.1.140	192.168.2.4
Apr 24, 2024 19:31:21.455606937 CEST	443	49942	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:21.455780983 CEST	443	49942	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:21.456016064 CEST	49942	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:21.456286907 CEST	49942	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:21.456299067 CEST	443	49942	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:21.458749056 CEST	443	49943	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:21.458949089 CEST	443	49943	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:21.459614992 CEST	49943	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:21.460371971 CEST	49943	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:21.460386038 CEST	443	49943	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:21.460760117 CEST	49940	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:21.579186916 CEST	49950	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:21.579235077 CEST	443	49950	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:21.579317093 CEST	49951	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:21.579348087 CEST	49950	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:21.579415083 CEST	443	49951	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:21.579490900 CEST	49951	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:21.579602957 CEST	49950	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:21.579610109 CEST	443	49950	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:21.579744101 CEST	49951	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:21.579778910 CEST	443	49951	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:21.581845999 CEST	49952	443	192.168.2.4	18.164.174.99
Apr 24, 2024 19:31:21.581883907 CEST	443	49952	18.164.174.99	192.168.2.4
Apr 24, 2024 19:31:21.581943035 CEST	49952	443	192.168.2.4	18.164.174.99
Apr 24, 2024 19:31:21.582159042 CEST	49952	443	192.168.2.4	18.164.174.99
Apr 24, 2024 19:31:21.582180023 CEST	443	49952	18.164.174.99	192.168.2.4
Apr 24, 2024 19:31:21.582705021 CEST	443	49940	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:21.583033085 CEST	443	49940	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:21.583091021 CEST	49940	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:21.583391905 CEST	49940	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:21.583403111 CEST	443	49940	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:21.625761986 CEST	49953	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:21.625802040 CEST	443	49953	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:21.625864983 CEST	49953	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:21.626064062 CEST	49953	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:21.626071930 CEST	443	49953	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:21.730914116 CEST	443	49948	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:21.736939907 CEST	49948	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:21.736959934 CEST	443	49948	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:21.738009930 CEST	443	49948	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:21.738071918 CEST	49948	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:21.738491058 CEST	49948	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:21.738548994 CEST	443	49948	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:21.738658905 CEST	49948	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:21.740694046 CEST	49954	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:21.740725040 CEST	443	49954	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:21.740874052 CEST	49954	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:21.741065979 CEST	49954	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:21.741091013 CEST	443	49954	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:21.742476940 CEST	49955	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:21.742501974 CEST	443	49955	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:21.742609978 CEST	49955	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:21.742840052 CEST	49955	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:21.742851019 CEST	443	49955	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:21.754353046 CEST	443	49947	34.239.87.50	192.168.2.4
Apr 24, 2024 19:31:21.754641056 CEST	443	49947	34.239.87.50	192.168.2.4
Apr 24, 2024 19:31:21.754703999 CEST	49947	443	192.168.2.4	34.239.87.50
Apr 24, 2024 19:31:21.755759001 CEST	49947	443	192.168.2.4	34.239.87.50
Apr 24, 2024 19:31:21.755778074 CEST	443	49947	34.239.87.50	192.168.2.4
Apr 24, 2024 19:31:21.777662992 CEST	443	49949	151.101.1.140	192.168.2.4
Apr 24, 2024 19:31:21.777896881 CEST	49949	443	192.168.2.4	151.101.1.140
Apr 24, 2024 19:31:21.777930021 CEST	443	49949	151.101.1.140	192.168.2.4
Apr 24, 2024 19:31:21.778260946 CEST	443	49949	151.101.1.140	192.168.2.4
Apr 24, 2024 19:31:21.778568029 CEST	49949	443	192.168.2.4	151.101.1.140
Apr 24, 2024 19:31:21.778625011 CEST	443	49949	151.101.1.140	192.168.2.4
Apr 24, 2024 19:31:21.778742075 CEST	49949	443	192.168.2.4	151.101.1.140
Apr 24, 2024 19:31:21.784113884 CEST	443	49948	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:21.786936045 CEST	49948	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:21.786945105 CEST	443	49948	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:21.820117950 CEST	443	49949	151.101.1.140	192.168.2.4
Apr 24, 2024 19:31:21.831032038 CEST	443	49946	18.239.199.122	192.168.2.4
Apr 24, 2024 19:31:21.831244946 CEST	443	49946	18.239.199.122	192.168.2.4
Apr 24, 2024 19:31:21.831301928 CEST	49946	443	192.168.2.4	18.239.199.122
Apr 24, 2024 19:31:21.831767082 CEST	49946	443	192.168.2.4	18.239.199.122
Apr 24, 2024 19:31:21.831785917 CEST	443	49946	18.239.199.122	192.168.2.4
Apr 24, 2024 19:31:21.831799030 CEST	49946	443	192.168.2.4	18.239.199.122
Apr 24, 2024 19:31:21.831828117 CEST	49946	443	192.168.2.4	18.239.199.122
Apr 24, 2024 19:31:21.833244085 CEST	49948	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:21.906987906 CEST	443	49952	18.164.174.99	192.168.2.4
Apr 24, 2024 19:31:21.907239914 CEST	49952	443	192.168.2.4	18.164.174.99
Apr 24, 2024 19:31:21.907277107 CEST	443	49952	18.164.174.99	192.168.2.4
Apr 24, 2024 19:31:21.908294916 CEST	443	49952	18.164.174.99	192.168.2.4
Apr 24, 2024 19:31:21.908354998 CEST	49952	443	192.168.2.4	18.164.174.99
Apr 24, 2024 19:31:21.909375906 CEST	49952	443	192.168.2.4	18.164.174.99
Apr 24, 2024 19:31:21.909557104 CEST	443	49952	18.164.174.99	192.168.2.4
Apr 24, 2024 19:31:21.909594059 CEST	49952	443	192.168.2.4	18.164.174.99
Apr 24, 2024 19:31:21.934464931 CEST	443	49950	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:21.934530020 CEST	443	49951	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:21.934674025 CEST	49950	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:21.934703112 CEST	443	49950	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:21.934784889 CEST	49951	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:21.934813976 CEST	443	49951	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:21.935575962 CEST	443	49950	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:21.935635090 CEST	49950	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:21.935666084 CEST	443	49951	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:21.935714006 CEST	49951	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:21.936520100 CEST	49950	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:21.936574936 CEST	443	49950	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:21.936646938 CEST	49951	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:21.936697006 CEST	443	49951	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:21.936898947 CEST	49950	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:21.936906099 CEST	443	49950	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:21.936965942 CEST	49951	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:21.936974049 CEST	443	49951	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:21.946086884 CEST	443	49941	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:21.946419954 CEST	443	49941	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:21.946480989 CEST	49941	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:21.947175980 CEST	49941	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:21.947191000 CEST	443	49941	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:21.947220087 CEST	49941	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:21.947237015 CEST	49941	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:21.948426008 CEST	49956	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:21.948451042 CEST	443	49956	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:21.948501110 CEST	49956	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:21.948710918 CEST	49956	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:21.948719978 CEST	443	49956	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:21.952131987 CEST	443	49952	18.164.174.99	192.168.2.4
Apr 24, 2024 19:31:21.956171989 CEST	49952	443	192.168.2.4	18.164.174.99
Apr 24, 2024 19:31:21.956199884 CEST	443	49952	18.164.174.99	192.168.2.4
Apr 24, 2024 19:31:21.987404108 CEST	49951	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:21.987751007 CEST	49950	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.002645969 CEST	49952	443	192.168.2.4	18.164.174.99
Apr 24, 2024 19:31:22.114166021 CEST	443	49953	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:22.114428997 CEST	49953	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:22.114455938 CEST	443	49953	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:22.115591049 CEST	443	49953	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:22.115648985 CEST	49953	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:22.116976976 CEST	49953	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:22.117063999 CEST	443	49953	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:22.117269993 CEST	49953	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:22.117278099 CEST	443	49953	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:22.121782064 CEST	443	49948	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:22.121851921 CEST	443	49948	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:22.121901989 CEST	49948	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:22.123411894 CEST	49948	443	192.168.2.4	172.64.151.101
Apr 24, 2024 19:31:22.123425007 CEST	443	49948	172.64.151.101	192.168.2.4
Apr 24, 2024 19:31:22.128727913 CEST	443	49954	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:22.129393101 CEST	49954	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:22.129415989 CEST	443	49954	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:22.130587101 CEST	443	49954	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:22.130650043 CEST	49954	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:22.131925106 CEST	49954	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:22.131993055 CEST	443	49954	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:22.132066965 CEST	49954	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:22.157044888 CEST	443	49949	151.101.1.140	192.168.2.4
Apr 24, 2024 19:31:22.157130003 CEST	443	49949	151.101.1.140	192.168.2.4
Apr 24, 2024 19:31:22.157368898 CEST	49949	443	192.168.2.4	151.101.1.140
Apr 24, 2024 19:31:22.157383919 CEST	443	49949	151.101.1.140	192.168.2.4
Apr 24, 2024 19:31:22.157394886 CEST	49949	443	192.168.2.4	151.101.1.140
Apr 24, 2024 19:31:22.157418966 CEST	49949	443	192.168.2.4	151.101.1.140
Apr 24, 2024 19:31:22.167848110 CEST	49953	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:22.172115088 CEST	443	49954	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:22.172804117 CEST	443	49955	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:22.173088074 CEST	49955	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:22.173099041 CEST	443	49955	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:22.174542904 CEST	443	49955	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:22.174598932 CEST	49955	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:22.174913883 CEST	49955	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:22.174979925 CEST	443	49955	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:22.175065994 CEST	49955	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:22.175071955 CEST	443	49955	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:22.183397055 CEST	49954	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:22.183409929 CEST	443	49954	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:22.225177050 CEST	49955	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:22.225305080 CEST	49954	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:22.277154922 CEST	443	49953	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:22.277259111 CEST	443	49953	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:22.277441978 CEST	49953	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:22.277801991 CEST	49953	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:22.277820110 CEST	443	49953	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:22.291768074 CEST	443	49951	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.291841984 CEST	49951	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.291847944 CEST	443	49951	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.291893005 CEST	49951	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.292661905 CEST	49951	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.292682886 CEST	443	49951	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.292866945 CEST	443	49950	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.292924881 CEST	49950	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.292951107 CEST	443	49950	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.292967081 CEST	443	49950	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.293004990 CEST	49950	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.297111034 CEST	49950	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.297122002 CEST	443	49950	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.437046051 CEST	49958	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:22.437093973 CEST	443	49958	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:22.437156916 CEST	49958	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:22.439539909 CEST	49958	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:22.439553022 CEST	443	49958	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:22.440228939 CEST	49959	443	192.168.2.4	104.254.151.68
Apr 24, 2024 19:31:22.440253019 CEST	443	49959	104.254.151.68	192.168.2.4
Apr 24, 2024 19:31:22.440442085 CEST	49959	443	192.168.2.4	104.254.151.68
Apr 24, 2024 19:31:22.441348076 CEST	49959	443	192.168.2.4	104.254.151.68
Apr 24, 2024 19:31:22.441358089 CEST	443	49959	104.254.151.68	192.168.2.4
Apr 24, 2024 19:31:22.450054884 CEST	49960	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.450093985 CEST	443	49960	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.450180054 CEST	49960	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.450748920 CEST	49960	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.450762033 CEST	443	49960	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.455750942 CEST	49961	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:22.455779076 CEST	443	49961	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:22.455900908 CEST	49961	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:22.456226110 CEST	49961	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:22.456234932 CEST	443	49961	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:22.460721970 CEST	49962	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.460731983 CEST	443	49962	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.461020947 CEST	49962	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.462223053 CEST	49962	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.462232113 CEST	443	49962	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.462805986 CEST	49963	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.462908030 CEST	443	49963	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.462990046 CEST	49963	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.463120937 CEST	49964	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.463145971 CEST	443	49964	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.463383913 CEST	49964	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.463709116 CEST	49963	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.463757992 CEST	443	49963	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.464232922 CEST	49964	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.464241982 CEST	443	49964	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.508467913 CEST	443	49954	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:22.508574009 CEST	443	49954	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:22.508650064 CEST	49954	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:22.516462088 CEST	49954	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:22.516478062 CEST	443	49954	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:22.520574093 CEST	49965	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:22.520615101 CEST	443	49965	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:22.520701885 CEST	49965	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:22.521497965 CEST	49965	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:22.521509886 CEST	443	49965	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:22.566391945 CEST	443	49956	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:22.566653967 CEST	49956	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:22.566668034 CEST	443	49956	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:22.567250013 CEST	443	49956	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:22.567787886 CEST	49956	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:22.567945957 CEST	49956	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:22.567950964 CEST	443	49956	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:22.568315983 CEST	443	49956	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:22.616044998 CEST	49956	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:22.617594004 CEST	443	49952	18.164.174.99	192.168.2.4
Apr 24, 2024 19:31:22.617641926 CEST	443	49952	18.164.174.99	192.168.2.4
Apr 24, 2024 19:31:22.617726088 CEST	49952	443	192.168.2.4	18.164.174.99
Apr 24, 2024 19:31:22.617767096 CEST	443	49952	18.164.174.99	192.168.2.4
Apr 24, 2024 19:31:22.617811918 CEST	49952	443	192.168.2.4	18.164.174.99
Apr 24, 2024 19:31:22.619885921 CEST	443	49952	18.164.174.99	192.168.2.4
Apr 24, 2024 19:31:22.619965076 CEST	443	49952	18.164.174.99	192.168.2.4
Apr 24, 2024 19:31:22.620207071 CEST	49952	443	192.168.2.4	18.164.174.99
Apr 24, 2024 19:31:22.620794058 CEST	49952	443	192.168.2.4	18.164.174.99
Apr 24, 2024 19:31:22.620815039 CEST	443	49952	18.164.174.99	192.168.2.4
Apr 24, 2024 19:31:22.620826960 CEST	49952	443	192.168.2.4	18.164.174.99
Apr 24, 2024 19:31:22.620872021 CEST	49952	443	192.168.2.4	18.164.174.99
Apr 24, 2024 19:31:22.627399921 CEST	49966	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:22.627434015 CEST	443	49966	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:22.627499104 CEST	49966	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:22.628020048 CEST	49966	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:22.628034115 CEST	443	49966	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:22.644970894 CEST	443	49955	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:22.645175934 CEST	443	49955	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:22.645237923 CEST	49955	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:22.645839930 CEST	49955	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:22.645854950 CEST	443	49955	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:22.680373907 CEST	49967	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:22.680418015 CEST	443	49967	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:22.680475950 CEST	49967	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:22.680804014 CEST	49967	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:22.680821896 CEST	443	49967	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:22.782625914 CEST	443	49961	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:22.782995939 CEST	49961	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:22.783023119 CEST	443	49961	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:22.786884069 CEST	443	49961	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:22.786953926 CEST	49961	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:22.788402081 CEST	49961	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:22.788469076 CEST	443	49961	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:22.788561106 CEST	49961	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:22.788569927 CEST	443	49961	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:22.793252945 CEST	443	49958	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:22.793536901 CEST	49958	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:22.793567896 CEST	443	49958	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:22.794637918 CEST	443	49958	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:22.794714928 CEST	49958	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:22.795458078 CEST	49958	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:22.795541048 CEST	443	49958	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:22.795659065 CEST	49958	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:22.795675993 CEST	443	49958	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:22.810570002 CEST	443	49960	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.810839891 CEST	49960	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.810911894 CEST	443	49960	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.812019110 CEST	443	49960	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.812098026 CEST	49960	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.812393904 CEST	49960	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.812463045 CEST	443	49960	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.812532902 CEST	49960	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.816721916 CEST	443	49962	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.816957951 CEST	49962	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.816993952 CEST	443	49962	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.818109989 CEST	443	49962	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.818171024 CEST	49962	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.818881989 CEST	49962	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.818995953 CEST	443	49962	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.819294930 CEST	49962	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.819313049 CEST	443	49962	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.821619987 CEST	443	49964	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.821845055 CEST	49964	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.821860075 CEST	443	49964	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.822081089 CEST	443	49963	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.822315931 CEST	49963	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.822340012 CEST	443	49963	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.822933912 CEST	443	49964	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.822988987 CEST	49964	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.823262930 CEST	49964	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.823327065 CEST	443	49964	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.823416948 CEST	49964	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.823879957 CEST	443	49963	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.823936939 CEST	49963	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.824215889 CEST	49963	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.824331045 CEST	49963	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.824336052 CEST	443	49963	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.824354887 CEST	443	49963	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.828279972 CEST	49961	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:22.843369007 CEST	443	49965	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:22.843544006 CEST	49958	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:22.843704939 CEST	49965	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:22.843718052 CEST	443	49965	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:22.844707966 CEST	443	49965	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:22.844770908 CEST	49965	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:22.845079899 CEST	49965	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:22.845139027 CEST	443	49965	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:22.845204115 CEST	49965	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:22.845211029 CEST	443	49965	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:22.858850956 CEST	49960	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.858890057 CEST	443	49960	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.865916967 CEST	49962	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.866044998 CEST	49964	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.866075993 CEST	443	49964	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.872803926 CEST	49963	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.872827053 CEST	443	49963	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:22.897989988 CEST	49965	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:22.898118019 CEST	49960	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.913220882 CEST	49963	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.913228035 CEST	49964	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:22.925220966 CEST	443	49959	104.254.151.68	192.168.2.4
Apr 24, 2024 19:31:22.925507069 CEST	49959	443	192.168.2.4	104.254.151.68
Apr 24, 2024 19:31:22.925530910 CEST	443	49959	104.254.151.68	192.168.2.4
Apr 24, 2024 19:31:22.926539898 CEST	443	49959	104.254.151.68	192.168.2.4
Apr 24, 2024 19:31:22.926609993 CEST	49959	443	192.168.2.4	104.254.151.68
Apr 24, 2024 19:31:22.927026033 CEST	49959	443	192.168.2.4	104.254.151.68
Apr 24, 2024 19:31:22.927079916 CEST	443	49959	104.254.151.68	192.168.2.4
Apr 24, 2024 19:31:22.927285910 CEST	49959	443	192.168.2.4	104.254.151.68
Apr 24, 2024 19:31:22.927294016 CEST	443	49959	104.254.151.68	192.168.2.4
Apr 24, 2024 19:31:22.951728106 CEST	443	49966	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:22.952008009 CEST	49966	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:22.952025890 CEST	443	49966	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:22.953089952 CEST	443	49966	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:22.953149080 CEST	49966	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:22.953463078 CEST	49966	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:22.953540087 CEST	443	49966	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:22.953624010 CEST	49966	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:22.953629971 CEST	443	49966	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:22.975452900 CEST	49959	443	192.168.2.4	104.254.151.68
Apr 24, 2024 19:31:23.005846024 CEST	49966	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.010392904 CEST	49968	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.010421991 CEST	443	49968	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.010513067 CEST	49968	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.010763884 CEST	49968	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.010777950 CEST	443	49968	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.063600063 CEST	443	49967	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:23.063880920 CEST	49967	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:23.063903093 CEST	443	49967	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:23.065359116 CEST	443	49967	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:23.065435886 CEST	49967	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:23.065870047 CEST	49967	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:23.065947056 CEST	443	49967	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:23.066154957 CEST	49967	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:23.066162109 CEST	443	49967	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:23.087093115 CEST	443	49959	104.254.151.68	192.168.2.4
Apr 24, 2024 19:31:23.087174892 CEST	443	49959	104.254.151.68	192.168.2.4
Apr 24, 2024 19:31:23.087495089 CEST	49959	443	192.168.2.4	104.254.151.68
Apr 24, 2024 19:31:23.087840080 CEST	49959	443	192.168.2.4	104.254.151.68
Apr 24, 2024 19:31:23.087857008 CEST	443	49959	104.254.151.68	192.168.2.4
Apr 24, 2024 19:31:23.102000952 CEST	443	49961	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.102073908 CEST	443	49961	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.102231026 CEST	49961	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.102535963 CEST	49961	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.102555037 CEST	443	49961	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.102566004 CEST	49961	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.108864069 CEST	49967	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:23.108983040 CEST	49961	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.168298960 CEST	443	49960	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:23.168498039 CEST	443	49960	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:23.168756962 CEST	49960	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:23.168857098 CEST	49960	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:23.168857098 CEST	49960	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:23.168901920 CEST	443	49960	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:23.169023991 CEST	49960	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:23.173156977 CEST	443	49962	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:23.173235893 CEST	443	49962	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:23.173430920 CEST	49962	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:23.173548937 CEST	49962	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:23.173549891 CEST	49962	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:23.173593998 CEST	443	49962	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:23.173763990 CEST	49962	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:23.181957960 CEST	443	49958	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:23.182024956 CEST	443	49958	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:23.182322979 CEST	49958	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:23.183156013 CEST	49958	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:23.183182001 CEST	443	49958	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:23.183197021 CEST	49958	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:23.183219910 CEST	49958	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:23.183509111 CEST	443	49963	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:23.183569908 CEST	49963	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:23.183585882 CEST	443	49963	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:23.183621883 CEST	443	49963	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:23.183698893 CEST	49963	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:23.184026957 CEST	443	49964	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:23.184094906 CEST	49964	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:23.184113979 CEST	443	49964	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:23.184237957 CEST	49970	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:23.184257984 CEST	443	49964	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:23.184264898 CEST	443	49970	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:23.184307098 CEST	49964	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:23.184331894 CEST	49970	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:23.184695959 CEST	49970	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:23.184705973 CEST	443	49970	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:23.184967041 CEST	49963	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:23.184978008 CEST	443	49963	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:23.186453104 CEST	49964	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:23.186470985 CEST	443	49964	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:23.195087910 CEST	443	49965	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.195147991 CEST	443	49965	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.195226908 CEST	443	49965	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.195250034 CEST	49965	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.195274115 CEST	443	49965	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.195317030 CEST	49965	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.195323944 CEST	443	49965	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.195349932 CEST	443	49965	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.195389986 CEST	49965	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.196190119 CEST	49965	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.196201086 CEST	443	49965	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.266191006 CEST	49971	443	192.168.2.4	104.244.42.197
Apr 24, 2024 19:31:23.266283035 CEST	443	49971	104.244.42.197	192.168.2.4
Apr 24, 2024 19:31:23.266365051 CEST	49971	443	192.168.2.4	104.244.42.197
Apr 24, 2024 19:31:23.266829014 CEST	49971	443	192.168.2.4	104.244.42.197
Apr 24, 2024 19:31:23.266856909 CEST	443	49971	104.244.42.197	192.168.2.4
Apr 24, 2024 19:31:23.267102003 CEST	49972	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.267132998 CEST	443	49972	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.267224073 CEST	49973	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.267246008 CEST	49972	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.267261982 CEST	443	49973	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.267308950 CEST	49973	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.267529011 CEST	49972	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.267539024 CEST	443	49972	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.267740965 CEST	49973	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.267752886 CEST	443	49973	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.271398067 CEST	443	49966	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.271512032 CEST	443	49966	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.271580935 CEST	49966	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.272610903 CEST	49966	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.272628069 CEST	443	49966	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.272639036 CEST	49966	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.272670031 CEST	49966	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.277978897 CEST	49974	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.278003931 CEST	443	49974	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.278059006 CEST	49974	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.278244019 CEST	49974	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.278254986 CEST	443	49974	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.333957911 CEST	443	49956	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:23.334059954 CEST	443	49956	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:23.334158897 CEST	443	49968	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.334220886 CEST	49956	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:23.334850073 CEST	49956	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:23.334861994 CEST	443	49956	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:23.335251093 CEST	49968	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.335294962 CEST	443	49968	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.335695982 CEST	443	49968	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.337574005 CEST	49968	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.337651968 CEST	443	49968	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.338052988 CEST	49968	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.352821112 CEST	49976	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:23.352868080 CEST	443	49976	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:23.352946997 CEST	49976	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:23.353149891 CEST	49976	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:23.353163958 CEST	443	49976	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:23.384120941 CEST	443	49968	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.484913111 CEST	443	49967	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:23.485127926 CEST	443	49967	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:23.485182047 CEST	49967	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:23.485841036 CEST	49967	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:23.485858917 CEST	443	49967	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:23.485867977 CEST	49967	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:23.485902071 CEST	49967	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:23.493865013 CEST	49978	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:23.493892908 CEST	443	49978	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:23.493958950 CEST	49978	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:23.494133949 CEST	49978	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:23.494148016 CEST	443	49978	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:23.494816065 CEST	49979	443	192.168.2.4	3.163.125.9
Apr 24, 2024 19:31:23.494837999 CEST	443	49979	3.163.125.9	192.168.2.4
Apr 24, 2024 19:31:23.494908094 CEST	49979	443	192.168.2.4	3.163.125.9
Apr 24, 2024 19:31:23.495043993 CEST	49979	443	192.168.2.4	3.163.125.9
Apr 24, 2024 19:31:23.495054007 CEST	443	49979	3.163.125.9	192.168.2.4
Apr 24, 2024 19:31:23.497067928 CEST	49980	443	192.168.2.4	52.95.118.179
Apr 24, 2024 19:31:23.497179031 CEST	443	49980	52.95.118.179	192.168.2.4
Apr 24, 2024 19:31:23.497242928 CEST	49980	443	192.168.2.4	52.95.118.179
Apr 24, 2024 19:31:23.497416019 CEST	49980	443	192.168.2.4	52.95.118.179
Apr 24, 2024 19:31:23.497451067 CEST	443	49980	52.95.118.179	192.168.2.4
Apr 24, 2024 19:31:23.534584999 CEST	443	49970	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:23.534842014 CEST	49970	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:23.534861088 CEST	443	49970	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:23.536982059 CEST	443	49970	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:23.537452936 CEST	49970	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:23.537554026 CEST	443	49970	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:23.537826061 CEST	49970	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:23.580125093 CEST	443	49970	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:23.592372894 CEST	443	49973	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.592631102 CEST	49973	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.592660904 CEST	443	49973	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.593044996 CEST	443	49972	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.593302965 CEST	49972	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.593319893 CEST	443	49972	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.594022989 CEST	443	49973	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.594103098 CEST	49973	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.594424963 CEST	443	49972	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.594472885 CEST	49973	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.594489098 CEST	49972	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.594544888 CEST	443	49973	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.594899893 CEST	49972	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.594969034 CEST	443	49972	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.595133066 CEST	49973	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.595144987 CEST	443	49973	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.595249891 CEST	49972	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.595259905 CEST	443	49972	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.600701094 CEST	443	49974	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.601028919 CEST	49974	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.601044893 CEST	443	49974	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.601991892 CEST	443	49974	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.602046967 CEST	49974	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.602309942 CEST	49974	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.602354050 CEST	443	49974	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.602413893 CEST	49974	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.637070894 CEST	49972	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.637088060 CEST	49973	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.648117065 CEST	443	49974	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.651400089 CEST	443	49971	104.244.42.197	192.168.2.4
Apr 24, 2024 19:31:23.651611090 CEST	49971	443	192.168.2.4	104.244.42.197
Apr 24, 2024 19:31:23.651685953 CEST	443	49971	104.244.42.197	192.168.2.4
Apr 24, 2024 19:31:23.652781010 CEST	443	49971	104.244.42.197	192.168.2.4
Apr 24, 2024 19:31:23.652846098 CEST	49971	443	192.168.2.4	104.244.42.197
Apr 24, 2024 19:31:23.653136969 CEST	49974	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.653148890 CEST	443	49974	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.653906107 CEST	49971	443	192.168.2.4	104.244.42.197
Apr 24, 2024 19:31:23.653975010 CEST	443	49971	104.244.42.197	192.168.2.4
Apr 24, 2024 19:31:23.654059887 CEST	49971	443	192.168.2.4	104.244.42.197
Apr 24, 2024 19:31:23.654078007 CEST	443	49971	104.244.42.197	192.168.2.4
Apr 24, 2024 19:31:23.688277006 CEST	443	49968	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.688340902 CEST	443	49968	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.688410044 CEST	443	49968	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.688463926 CEST	49968	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.688535929 CEST	443	49968	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.688566923 CEST	443	49968	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.688616991 CEST	49968	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.689661980 CEST	49968	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.689697027 CEST	443	49968	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.693305016 CEST	49981	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.693340063 CEST	443	49981	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.693423033 CEST	49981	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.693650961 CEST	49981	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.693665028 CEST	443	49981	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.698899984 CEST	49971	443	192.168.2.4	104.244.42.197
Apr 24, 2024 19:31:23.698947906 CEST	49974	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.740643024 CEST	443	49976	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:23.741151094 CEST	49976	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:23.741170883 CEST	443	49976	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:23.742192030 CEST	443	49976	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:23.742264032 CEST	49976	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:23.743268013 CEST	49976	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:23.743330002 CEST	443	49976	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:23.743419886 CEST	49976	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:23.743429899 CEST	443	49976	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:23.792571068 CEST	49976	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:23.824759007 CEST	443	49979	3.163.125.9	192.168.2.4
Apr 24, 2024 19:31:23.824994087 CEST	49979	443	192.168.2.4	3.163.125.9
Apr 24, 2024 19:31:23.825006962 CEST	443	49979	3.163.125.9	192.168.2.4
Apr 24, 2024 19:31:23.825970888 CEST	443	49979	3.163.125.9	192.168.2.4
Apr 24, 2024 19:31:23.826016903 CEST	49979	443	192.168.2.4	3.163.125.9
Apr 24, 2024 19:31:23.826992989 CEST	49979	443	192.168.2.4	3.163.125.9
Apr 24, 2024 19:31:23.827049971 CEST	443	49979	3.163.125.9	192.168.2.4
Apr 24, 2024 19:31:23.827234983 CEST	49979	443	192.168.2.4	3.163.125.9
Apr 24, 2024 19:31:23.827243090 CEST	443	49979	3.163.125.9	192.168.2.4
Apr 24, 2024 19:31:23.869287968 CEST	49979	443	192.168.2.4	3.163.125.9
Apr 24, 2024 19:31:23.913044930 CEST	443	49973	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.913245916 CEST	443	49973	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.913400888 CEST	49973	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.913887024 CEST	49973	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.913924932 CEST	443	49973	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.913945913 CEST	49973	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.914150000 CEST	49973	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.920279026 CEST	443	49974	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.920456886 CEST	443	49974	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.920504093 CEST	49974	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.920778990 CEST	49974	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.920794964 CEST	443	49974	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.920804024 CEST	49974	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.920838118 CEST	49974	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.930965900 CEST	443	49970	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:23.931157112 CEST	443	49970	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:23.931214094 CEST	49970	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:23.931926012 CEST	49970	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:23.931932926 CEST	443	49970	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:23.931943893 CEST	49970	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:23.931988001 CEST	49970	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:23.942647934 CEST	443	49972	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.942730904 CEST	443	49972	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.942791939 CEST	49972	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.942802906 CEST	443	49972	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.942816973 CEST	443	49972	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.942904949 CEST	443	49972	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:23.942928076 CEST	49972	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.942970991 CEST	49972	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.943705082 CEST	49972	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:23.943708897 CEST	443	49972	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:24.010670900 CEST	443	49978	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:24.010912895 CEST	49978	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:24.010937929 CEST	443	49978	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:24.012458086 CEST	443	49978	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:24.012531996 CEST	49978	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:24.013504028 CEST	49978	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:24.013631105 CEST	443	49978	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:24.013739109 CEST	49978	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:24.013755083 CEST	443	49978	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:24.017148018 CEST	443	49981	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:24.017323017 CEST	49981	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:24.017339945 CEST	443	49981	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:24.017669916 CEST	443	49981	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:24.018002987 CEST	49981	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:24.018052101 CEST	443	49981	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:24.018069983 CEST	49981	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:24.054822922 CEST	49978	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:24.060111046 CEST	443	49981	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:24.063870907 CEST	443	49971	104.244.42.197	192.168.2.4
Apr 24, 2024 19:31:24.063926935 CEST	443	49971	104.244.42.197	192.168.2.4
Apr 24, 2024 19:31:24.064148903 CEST	49971	443	192.168.2.4	104.244.42.197
Apr 24, 2024 19:31:24.064656973 CEST	49971	443	192.168.2.4	104.244.42.197
Apr 24, 2024 19:31:24.064680099 CEST	443	49971	104.244.42.197	192.168.2.4
Apr 24, 2024 19:31:24.066132069 CEST	49981	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:24.088464975 CEST	49982	443	192.168.2.4	216.137.39.63
Apr 24, 2024 19:31:24.088514090 CEST	443	49982	216.137.39.63	192.168.2.4
Apr 24, 2024 19:31:24.088601112 CEST	49982	443	192.168.2.4	216.137.39.63
Apr 24, 2024 19:31:24.088793039 CEST	49982	443	192.168.2.4	216.137.39.63
Apr 24, 2024 19:31:24.088805914 CEST	443	49982	216.137.39.63	192.168.2.4
Apr 24, 2024 19:31:24.096517086 CEST	443	49980	52.95.118.179	192.168.2.4
Apr 24, 2024 19:31:24.096961975 CEST	49980	443	192.168.2.4	52.95.118.179
Apr 24, 2024 19:31:24.096983910 CEST	443	49980	52.95.118.179	192.168.2.4
Apr 24, 2024 19:31:24.098112106 CEST	443	49980	52.95.118.179	192.168.2.4
Apr 24, 2024 19:31:24.098177910 CEST	49980	443	192.168.2.4	52.95.118.179
Apr 24, 2024 19:31:24.098184109 CEST	443	49980	52.95.118.179	192.168.2.4
Apr 24, 2024 19:31:24.098218918 CEST	49980	443	192.168.2.4	52.95.118.179
Apr 24, 2024 19:31:24.098537922 CEST	49980	443	192.168.2.4	52.95.118.179
Apr 24, 2024 19:31:24.098593950 CEST	443	49980	52.95.118.179	192.168.2.4
Apr 24, 2024 19:31:24.098712921 CEST	49980	443	192.168.2.4	52.95.118.179
Apr 24, 2024 19:31:24.144117117 CEST	443	49980	52.95.118.179	192.168.2.4
Apr 24, 2024 19:31:24.147877932 CEST	49980	443	192.168.2.4	52.95.118.179
Apr 24, 2024 19:31:24.147886038 CEST	443	49980	52.95.118.179	192.168.2.4
Apr 24, 2024 19:31:24.156339884 CEST	49983	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:24.156373024 CEST	443	49983	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:24.156467915 CEST	49983	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:24.156708002 CEST	49983	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:24.156728029 CEST	443	49983	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:24.158654928 CEST	443	49976	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:24.158710003 CEST	443	49976	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:24.158967018 CEST	49976	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:24.159329891 CEST	49976	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:24.159353018 CEST	443	49976	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:24.172281027 CEST	443	49979	3.163.125.9	192.168.2.4
Apr 24, 2024 19:31:24.172554970 CEST	443	49979	3.163.125.9	192.168.2.4
Apr 24, 2024 19:31:24.172652006 CEST	49979	443	192.168.2.4	3.163.125.9
Apr 24, 2024 19:31:24.172972918 CEST	49979	443	192.168.2.4	3.163.125.9
Apr 24, 2024 19:31:24.172982931 CEST	443	49979	3.163.125.9	192.168.2.4
Apr 24, 2024 19:31:24.194216013 CEST	49980	443	192.168.2.4	52.95.118.179
Apr 24, 2024 19:31:24.223196030 CEST	49984	443	192.168.2.4	104.244.42.5
Apr 24, 2024 19:31:24.223243952 CEST	443	49984	104.244.42.5	192.168.2.4
Apr 24, 2024 19:31:24.223457098 CEST	49984	443	192.168.2.4	104.244.42.5
Apr 24, 2024 19:31:24.223716021 CEST	49984	443	192.168.2.4	104.244.42.5
Apr 24, 2024 19:31:24.223730087 CEST	443	49984	104.244.42.5	192.168.2.4
Apr 24, 2024 19:31:24.273682117 CEST	49985	443	192.168.2.4	54.162.198.104
Apr 24, 2024 19:31:24.273721933 CEST	443	49985	54.162.198.104	192.168.2.4
Apr 24, 2024 19:31:24.273808956 CEST	49985	443	192.168.2.4	54.162.198.104
Apr 24, 2024 19:31:24.274422884 CEST	49985	443	192.168.2.4	54.162.198.104
Apr 24, 2024 19:31:24.274431944 CEST	443	49985	54.162.198.104	192.168.2.4
Apr 24, 2024 19:31:24.317106962 CEST	49986	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:24.317145109 CEST	443	49986	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:24.317416906 CEST	49986	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:24.317416906 CEST	49986	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:24.317446947 CEST	443	49986	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:24.329965115 CEST	49987	443	192.168.2.4	3.163.125.74
Apr 24, 2024 19:31:24.330005884 CEST	443	49987	3.163.125.74	192.168.2.4
Apr 24, 2024 19:31:24.330064058 CEST	49987	443	192.168.2.4	3.163.125.74
Apr 24, 2024 19:31:24.330235958 CEST	49987	443	192.168.2.4	3.163.125.74
Apr 24, 2024 19:31:24.330248117 CEST	443	49987	3.163.125.74	192.168.2.4
Apr 24, 2024 19:31:24.377868891 CEST	443	49981	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:24.377926111 CEST	443	49981	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:24.378014088 CEST	443	49981	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:24.378053904 CEST	49981	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:24.378067970 CEST	443	49981	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:24.378087044 CEST	443	49981	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:24.378122091 CEST	49981	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:24.378122091 CEST	49981	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:24.379369020 CEST	49981	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:24.379379988 CEST	443	49981	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:24.417146921 CEST	443	49982	216.137.39.63	192.168.2.4
Apr 24, 2024 19:31:24.417372942 CEST	49982	443	192.168.2.4	216.137.39.63
Apr 24, 2024 19:31:24.417402029 CEST	443	49982	216.137.39.63	192.168.2.4
Apr 24, 2024 19:31:24.418438911 CEST	443	49982	216.137.39.63	192.168.2.4
Apr 24, 2024 19:31:24.418504953 CEST	49982	443	192.168.2.4	216.137.39.63
Apr 24, 2024 19:31:24.419451952 CEST	49982	443	192.168.2.4	216.137.39.63
Apr 24, 2024 19:31:24.419508934 CEST	443	49982	216.137.39.63	192.168.2.4
Apr 24, 2024 19:31:24.419615984 CEST	49982	443	192.168.2.4	216.137.39.63
Apr 24, 2024 19:31:24.419624090 CEST	443	49982	216.137.39.63	192.168.2.4
Apr 24, 2024 19:31:24.420111895 CEST	443	49978	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:24.420197964 CEST	443	49978	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:24.420598984 CEST	49978	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:24.420783043 CEST	49978	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:24.420792103 CEST	443	49978	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:24.466726065 CEST	49982	443	192.168.2.4	216.137.39.63
Apr 24, 2024 19:31:24.519937992 CEST	443	49983	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:24.520229101 CEST	49983	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:24.520292997 CEST	443	49983	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:24.521462917 CEST	443	49983	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:24.521977901 CEST	49983	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:24.522129059 CEST	49983	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:24.522202969 CEST	443	49983	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:24.573503971 CEST	49983	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:24.583360910 CEST	49988	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:24.583394051 CEST	443	49988	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:24.583512068 CEST	49988	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:24.584131956 CEST	49988	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:24.584145069 CEST	443	49988	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:24.601640940 CEST	443	49984	104.244.42.5	192.168.2.4
Apr 24, 2024 19:31:24.601887941 CEST	49984	443	192.168.2.4	104.244.42.5
Apr 24, 2024 19:31:24.601953983 CEST	443	49984	104.244.42.5	192.168.2.4
Apr 24, 2024 19:31:24.603032112 CEST	443	49984	104.244.42.5	192.168.2.4
Apr 24, 2024 19:31:24.603101969 CEST	49984	443	192.168.2.4	104.244.42.5
Apr 24, 2024 19:31:24.603529930 CEST	49984	443	192.168.2.4	104.244.42.5
Apr 24, 2024 19:31:24.603590012 CEST	443	49984	104.244.42.5	192.168.2.4
Apr 24, 2024 19:31:24.603715897 CEST	49984	443	192.168.2.4	104.244.42.5
Apr 24, 2024 19:31:24.603734970 CEST	443	49984	104.244.42.5	192.168.2.4
Apr 24, 2024 19:31:24.649883986 CEST	49984	443	192.168.2.4	104.244.42.5
Apr 24, 2024 19:31:24.662686110 CEST	443	49987	3.163.125.74	192.168.2.4
Apr 24, 2024 19:31:24.663065910 CEST	49987	443	192.168.2.4	3.163.125.74
Apr 24, 2024 19:31:24.663095951 CEST	443	49987	3.163.125.74	192.168.2.4
Apr 24, 2024 19:31:24.664557934 CEST	443	49987	3.163.125.74	192.168.2.4
Apr 24, 2024 19:31:24.664609909 CEST	49987	443	192.168.2.4	3.163.125.74
Apr 24, 2024 19:31:24.664988041 CEST	49987	443	192.168.2.4	3.163.125.74
Apr 24, 2024 19:31:24.665055990 CEST	443	49987	3.163.125.74	192.168.2.4
Apr 24, 2024 19:31:24.665138960 CEST	49987	443	192.168.2.4	3.163.125.74
Apr 24, 2024 19:31:24.695986032 CEST	443	49986	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:24.696211100 CEST	49986	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:24.696218014 CEST	443	49986	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:24.697237968 CEST	443	49986	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:24.697297096 CEST	49986	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:24.697689056 CEST	49986	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:24.697745085 CEST	443	49986	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:24.697870970 CEST	49986	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:24.697876930 CEST	443	49986	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:24.699007034 CEST	443	49980	52.95.118.179	192.168.2.4
Apr 24, 2024 19:31:24.699316978 CEST	443	49980	52.95.118.179	192.168.2.4
Apr 24, 2024 19:31:24.699368000 CEST	49980	443	192.168.2.4	52.95.118.179
Apr 24, 2024 19:31:24.700011969 CEST	49980	443	192.168.2.4	52.95.118.179
Apr 24, 2024 19:31:24.700033903 CEST	443	49980	52.95.118.179	192.168.2.4
Apr 24, 2024 19:31:24.711750984 CEST	443	49985	54.162.198.104	192.168.2.4
Apr 24, 2024 19:31:24.711942911 CEST	49985	443	192.168.2.4	54.162.198.104
Apr 24, 2024 19:31:24.711951971 CEST	443	49985	54.162.198.104	192.168.2.4
Apr 24, 2024 19:31:24.712111950 CEST	443	49987	3.163.125.74	192.168.2.4
Apr 24, 2024 19:31:24.712938070 CEST	443	49985	54.162.198.104	192.168.2.4
Apr 24, 2024 19:31:24.712990999 CEST	49985	443	192.168.2.4	54.162.198.104
Apr 24, 2024 19:31:24.713217974 CEST	49987	443	192.168.2.4	3.163.125.74
Apr 24, 2024 19:31:24.713227034 CEST	443	49987	3.163.125.74	192.168.2.4
Apr 24, 2024 19:31:24.713490009 CEST	49985	443	192.168.2.4	54.162.198.104
Apr 24, 2024 19:31:24.713531017 CEST	443	49985	54.162.198.104	192.168.2.4
Apr 24, 2024 19:31:24.713659048 CEST	49985	443	192.168.2.4	54.162.198.104
Apr 24, 2024 19:31:24.713664055 CEST	443	49985	54.162.198.104	192.168.2.4
Apr 24, 2024 19:31:24.713685989 CEST	49985	443	192.168.2.4	54.162.198.104
Apr 24, 2024 19:31:24.713711977 CEST	443	49985	54.162.198.104	192.168.2.4
Apr 24, 2024 19:31:24.743590117 CEST	49986	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:24.753598928 CEST	49985	443	192.168.2.4	54.162.198.104
Apr 24, 2024 19:31:24.758692980 CEST	49987	443	192.168.2.4	3.163.125.74
Apr 24, 2024 19:31:24.829504967 CEST	443	49982	216.137.39.63	192.168.2.4
Apr 24, 2024 19:31:24.829718113 CEST	443	49982	216.137.39.63	192.168.2.4
Apr 24, 2024 19:31:24.829837084 CEST	49982	443	192.168.2.4	216.137.39.63
Apr 24, 2024 19:31:24.830332041 CEST	49982	443	192.168.2.4	216.137.39.63
Apr 24, 2024 19:31:24.830352068 CEST	443	49982	216.137.39.63	192.168.2.4
Apr 24, 2024 19:31:24.909764051 CEST	443	49983	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:24.909858942 CEST	443	49983	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:24.909910917 CEST	49983	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:24.910485029 CEST	49983	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:24.910511017 CEST	443	49983	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:24.929474115 CEST	443	49988	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:24.937809944 CEST	49988	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:24.937836885 CEST	443	49988	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:24.938952923 CEST	443	49988	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:24.939027071 CEST	49988	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:24.941015959 CEST	49988	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:24.941083908 CEST	443	49988	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:24.941593885 CEST	49988	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:24.941602945 CEST	443	49988	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:24.969075918 CEST	49989	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:24.969146013 CEST	443	49989	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:24.969413996 CEST	49989	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:24.969602108 CEST	49990	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:24.969671011 CEST	443	49990	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:24.969733953 CEST	49990	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:24.969878912 CEST	49989	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:24.969897985 CEST	443	49989	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:24.970037937 CEST	49990	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:24.970061064 CEST	443	49990	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:24.970503092 CEST	49991	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:24.970592022 CEST	443	49991	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:24.970768929 CEST	49991	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:24.970948935 CEST	49991	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:24.970985889 CEST	443	49991	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:24.978368044 CEST	443	49984	104.244.42.5	192.168.2.4
Apr 24, 2024 19:31:24.978562117 CEST	443	49984	104.244.42.5	192.168.2.4
Apr 24, 2024 19:31:24.978593111 CEST	49993	443	192.168.2.4	142.250.141.103
Apr 24, 2024 19:31:24.978624105 CEST	443	49993	142.250.141.103	192.168.2.4
Apr 24, 2024 19:31:24.978647947 CEST	49984	443	192.168.2.4	104.244.42.5
Apr 24, 2024 19:31:24.978682995 CEST	49993	443	192.168.2.4	142.250.141.103
Apr 24, 2024 19:31:24.979387999 CEST	49993	443	192.168.2.4	142.250.141.103
Apr 24, 2024 19:31:24.979396105 CEST	49984	443	192.168.2.4	104.244.42.5
Apr 24, 2024 19:31:24.979414940 CEST	443	49993	142.250.141.103	192.168.2.4
Apr 24, 2024 19:31:24.979437113 CEST	443	49984	104.244.42.5	192.168.2.4
Apr 24, 2024 19:31:24.983144999 CEST	49988	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:24.989175081 CEST	49994	443	192.168.2.4	216.137.39.37
Apr 24, 2024 19:31:24.989262104 CEST	443	49994	216.137.39.37	192.168.2.4
Apr 24, 2024 19:31:24.989375114 CEST	49994	443	192.168.2.4	216.137.39.37
Apr 24, 2024 19:31:24.989622116 CEST	49994	443	192.168.2.4	216.137.39.37
Apr 24, 2024 19:31:24.989661932 CEST	443	49994	216.137.39.37	192.168.2.4
Apr 24, 2024 19:31:25.013251066 CEST	443	49987	3.163.125.74	192.168.2.4
Apr 24, 2024 19:31:25.013360023 CEST	443	49987	3.163.125.74	192.168.2.4
Apr 24, 2024 19:31:25.013509035 CEST	49987	443	192.168.2.4	3.163.125.74
Apr 24, 2024 19:31:25.015189886 CEST	49987	443	192.168.2.4	3.163.125.74
Apr 24, 2024 19:31:25.015225887 CEST	443	49987	3.163.125.74	192.168.2.4
Apr 24, 2024 19:31:25.072793961 CEST	443	49986	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:25.072871923 CEST	443	49986	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:25.072916985 CEST	49986	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:25.073570967 CEST	49986	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:25.073586941 CEST	443	49986	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:25.126147985 CEST	49995	443	192.168.2.4	15.197.193.217
Apr 24, 2024 19:31:25.126182079 CEST	443	49995	15.197.193.217	192.168.2.4
Apr 24, 2024 19:31:25.126286030 CEST	49995	443	192.168.2.4	15.197.193.217
Apr 24, 2024 19:31:25.126504898 CEST	49995	443	192.168.2.4	15.197.193.217
Apr 24, 2024 19:31:25.126517057 CEST	443	49995	15.197.193.217	192.168.2.4
Apr 24, 2024 19:31:25.190859079 CEST	443	49985	54.162.198.104	192.168.2.4
Apr 24, 2024 19:31:25.190992117 CEST	443	49985	54.162.198.104	192.168.2.4
Apr 24, 2024 19:31:25.191046953 CEST	49985	443	192.168.2.4	54.162.198.104
Apr 24, 2024 19:31:25.191415071 CEST	49985	443	192.168.2.4	54.162.198.104
Apr 24, 2024 19:31:25.191426039 CEST	443	49985	54.162.198.104	192.168.2.4
Apr 24, 2024 19:31:25.196655989 CEST	49996	443	192.168.2.4	34.196.171.164
Apr 24, 2024 19:31:25.196687937 CEST	443	49996	34.196.171.164	192.168.2.4
Apr 24, 2024 19:31:25.196758032 CEST	49996	443	192.168.2.4	34.196.171.164
Apr 24, 2024 19:31:25.196969032 CEST	49996	443	192.168.2.4	34.196.171.164
Apr 24, 2024 19:31:25.196980953 CEST	443	49996	34.196.171.164	192.168.2.4
Apr 24, 2024 19:31:25.271733046 CEST	49997	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:25.271773100 CEST	443	49997	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:25.271902084 CEST	49997	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:25.272337914 CEST	49997	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:25.272350073 CEST	443	49997	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:25.285276890 CEST	443	49988	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:25.285455942 CEST	443	49988	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:25.285517931 CEST	49988	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:25.285988092 CEST	49988	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:25.286005020 CEST	443	49988	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:25.301270962 CEST	443	49989	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.301522017 CEST	49989	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.301558018 CEST	443	49989	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.302917004 CEST	443	49991	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.303282976 CEST	443	49989	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.303772926 CEST	49991	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.303831100 CEST	443	49991	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.304086924 CEST	49989	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.304198980 CEST	49989	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.304354906 CEST	443	49989	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.304649115 CEST	443	49990	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.304918051 CEST	49990	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.304996014 CEST	443	49990	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.306242943 CEST	443	49990	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.306572914 CEST	49990	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.306715012 CEST	443	49990	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.306984901 CEST	49990	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.307028055 CEST	443	49991	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.307095051 CEST	49991	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.307580948 CEST	49991	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.307655096 CEST	443	49991	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.307671070 CEST	49991	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.320895910 CEST	443	49994	216.137.39.37	192.168.2.4
Apr 24, 2024 19:31:25.321158886 CEST	49994	443	192.168.2.4	216.137.39.37
Apr 24, 2024 19:31:25.321223021 CEST	443	49994	216.137.39.37	192.168.2.4
Apr 24, 2024 19:31:25.325146914 CEST	443	49994	216.137.39.37	192.168.2.4
Apr 24, 2024 19:31:25.325254917 CEST	49994	443	192.168.2.4	216.137.39.37
Apr 24, 2024 19:31:25.325551987 CEST	49994	443	192.168.2.4	216.137.39.37
Apr 24, 2024 19:31:25.325663090 CEST	49994	443	192.168.2.4	216.137.39.37
Apr 24, 2024 19:31:25.325727940 CEST	443	49994	216.137.39.37	192.168.2.4
Apr 24, 2024 19:31:25.348138094 CEST	443	49990	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.349239111 CEST	49989	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.349250078 CEST	49991	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.349271059 CEST	443	49991	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.365180969 CEST	49994	443	192.168.2.4	216.137.39.37
Apr 24, 2024 19:31:25.365231991 CEST	443	49994	216.137.39.37	192.168.2.4
Apr 24, 2024 19:31:25.396888018 CEST	49991	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.413930893 CEST	49994	443	192.168.2.4	216.137.39.37
Apr 24, 2024 19:31:25.596817017 CEST	443	49997	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:25.597134113 CEST	49997	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:25.597145081 CEST	443	49997	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:25.597476006 CEST	443	49997	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:25.598002911 CEST	49997	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:25.598056078 CEST	443	49997	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:25.598226070 CEST	49997	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:25.618066072 CEST	443	49989	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.618148088 CEST	443	49989	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.618186951 CEST	443	49989	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.618223906 CEST	49989	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.618257046 CEST	443	49989	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.618277073 CEST	443	49989	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.618293047 CEST	49989	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.618309975 CEST	49989	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.619266033 CEST	49989	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.619288921 CEST	443	49989	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.621243954 CEST	443	49991	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.621378899 CEST	443	49991	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.621432066 CEST	49991	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.623487949 CEST	443	49990	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.623873949 CEST	443	49990	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.623939991 CEST	49990	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.623980999 CEST	443	49990	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.624078035 CEST	443	49990	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.624119997 CEST	443	49990	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.624126911 CEST	49990	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.624140978 CEST	443	49990	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.624172926 CEST	49990	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.624958992 CEST	49991	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.624977112 CEST	443	49991	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.628891945 CEST	443	49996	34.196.171.164	192.168.2.4
Apr 24, 2024 19:31:25.629100084 CEST	443	49990	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.629318953 CEST	49996	443	192.168.2.4	34.196.171.164
Apr 24, 2024 19:31:25.629331112 CEST	443	49996	34.196.171.164	192.168.2.4
Apr 24, 2024 19:31:25.629657030 CEST	443	49996	34.196.171.164	192.168.2.4
Apr 24, 2024 19:31:25.630192041 CEST	49996	443	192.168.2.4	34.196.171.164
Apr 24, 2024 19:31:25.630273104 CEST	443	49996	34.196.171.164	192.168.2.4
Apr 24, 2024 19:31:25.630458117 CEST	49996	443	192.168.2.4	34.196.171.164
Apr 24, 2024 19:31:25.634440899 CEST	443	49990	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.634501934 CEST	443	49990	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.634531021 CEST	49990	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.634576082 CEST	443	49990	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.634645939 CEST	49990	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.639848948 CEST	443	49990	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.639926910 CEST	443	49990	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.639986992 CEST	49990	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.640134096 CEST	49990	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.640166044 CEST	443	49990	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.644115925 CEST	443	49997	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:25.645715952 CEST	49998	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.645826101 CEST	443	49998	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.645905972 CEST	49998	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.646370888 CEST	49998	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.646413088 CEST	443	49998	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.672130108 CEST	443	49996	34.196.171.164	192.168.2.4
Apr 24, 2024 19:31:25.682761908 CEST	443	49995	15.197.193.217	192.168.2.4
Apr 24, 2024 19:31:25.683012009 CEST	49995	443	192.168.2.4	15.197.193.217
Apr 24, 2024 19:31:25.683027029 CEST	443	49995	15.197.193.217	192.168.2.4
Apr 24, 2024 19:31:25.684056044 CEST	443	49995	15.197.193.217	192.168.2.4
Apr 24, 2024 19:31:25.684112072 CEST	49995	443	192.168.2.4	15.197.193.217
Apr 24, 2024 19:31:25.685465097 CEST	49995	443	192.168.2.4	15.197.193.217
Apr 24, 2024 19:31:25.685561895 CEST	443	49995	15.197.193.217	192.168.2.4
Apr 24, 2024 19:31:25.685756922 CEST	49995	443	192.168.2.4	15.197.193.217
Apr 24, 2024 19:31:25.685767889 CEST	443	49995	15.197.193.217	192.168.2.4
Apr 24, 2024 19:31:25.708067894 CEST	443	49994	216.137.39.37	192.168.2.4
Apr 24, 2024 19:31:25.708494902 CEST	443	49994	216.137.39.37	192.168.2.4
Apr 24, 2024 19:31:25.708560944 CEST	49994	443	192.168.2.4	216.137.39.37
Apr 24, 2024 19:31:25.709444046 CEST	49994	443	192.168.2.4	216.137.39.37
Apr 24, 2024 19:31:25.709470987 CEST	443	49994	216.137.39.37	192.168.2.4
Apr 24, 2024 19:31:25.725178003 CEST	49995	443	192.168.2.4	15.197.193.217
Apr 24, 2024 19:31:25.885570049 CEST	443	49993	142.250.141.103	192.168.2.4
Apr 24, 2024 19:31:25.886087894 CEST	49993	443	192.168.2.4	142.250.141.103
Apr 24, 2024 19:31:25.886137009 CEST	443	49993	142.250.141.103	192.168.2.4
Apr 24, 2024 19:31:25.886503935 CEST	443	49993	142.250.141.103	192.168.2.4
Apr 24, 2024 19:31:25.887365103 CEST	49993	443	192.168.2.4	142.250.141.103
Apr 24, 2024 19:31:25.887463093 CEST	443	49993	142.250.141.103	192.168.2.4
Apr 24, 2024 19:31:25.888175964 CEST	49993	443	192.168.2.4	142.250.141.103
Apr 24, 2024 19:31:25.888216972 CEST	443	49993	142.250.141.103	192.168.2.4
Apr 24, 2024 19:31:25.971246958 CEST	443	49998	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.972166061 CEST	49998	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.972235918 CEST	443	49998	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.972625017 CEST	443	49998	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.973239899 CEST	49998	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.973311901 CEST	443	49998	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:25.973575115 CEST	49998	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:25.988085032 CEST	443	49997	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:25.988403082 CEST	443	49997	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:25.988527060 CEST	49997	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:25.988986015 CEST	49997	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:25.989005089 CEST	443	49997	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:25.999202967 CEST	50000	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:25.999248981 CEST	443	50000	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:25.999324083 CEST	50000	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:25.999943018 CEST	50000	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:25.999962091 CEST	443	50000	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:26.016150951 CEST	443	49998	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.071899891 CEST	443	49995	15.197.193.217	192.168.2.4
Apr 24, 2024 19:31:26.071990013 CEST	443	49995	15.197.193.217	192.168.2.4
Apr 24, 2024 19:31:26.072076082 CEST	49995	443	192.168.2.4	15.197.193.217
Apr 24, 2024 19:31:26.072730064 CEST	49995	443	192.168.2.4	15.197.193.217
Apr 24, 2024 19:31:26.072746038 CEST	443	49995	15.197.193.217	192.168.2.4
Apr 24, 2024 19:31:26.086209059 CEST	443	49996	34.196.171.164	192.168.2.4
Apr 24, 2024 19:31:26.086317062 CEST	49996	443	192.168.2.4	34.196.171.164
Apr 24, 2024 19:31:26.086323977 CEST	443	49996	34.196.171.164	192.168.2.4
Apr 24, 2024 19:31:26.086359978 CEST	49996	443	192.168.2.4	34.196.171.164
Apr 24, 2024 19:31:26.086421013 CEST	443	49996	34.196.171.164	192.168.2.4
Apr 24, 2024 19:31:26.086496115 CEST	49996	443	192.168.2.4	34.196.171.164
Apr 24, 2024 19:31:26.088119984 CEST	49996	443	192.168.2.4	34.196.171.164
Apr 24, 2024 19:31:26.088129044 CEST	443	49996	34.196.171.164	192.168.2.4
Apr 24, 2024 19:31:26.229924917 CEST	50001	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:26.230000019 CEST	443	50001	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:26.230087042 CEST	50001	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:26.230375051 CEST	50001	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:26.230407953 CEST	443	50001	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:26.272811890 CEST	49790	443	192.168.2.4	34.237.73.95
Apr 24, 2024 19:31:26.273000002 CEST	443	49790	34.237.73.95	192.168.2.4
Apr 24, 2024 19:31:26.273106098 CEST	49790	443	192.168.2.4	34.237.73.95
Apr 24, 2024 19:31:26.276330948 CEST	443	49993	142.250.141.103	192.168.2.4
Apr 24, 2024 19:31:26.276420116 CEST	443	49993	142.250.141.103	192.168.2.4
Apr 24, 2024 19:31:26.276479006 CEST	49993	443	192.168.2.4	142.250.141.103
Apr 24, 2024 19:31:26.277118921 CEST	49993	443	192.168.2.4	142.250.141.103
Apr 24, 2024 19:31:26.277156115 CEST	443	49993	142.250.141.103	192.168.2.4
Apr 24, 2024 19:31:26.331532001 CEST	443	50000	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:26.331945896 CEST	50000	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:26.331979036 CEST	443	50000	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:26.333189011 CEST	443	50000	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:26.334284067 CEST	50000	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:26.334465981 CEST	443	50000	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:26.334686995 CEST	50000	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:26.376127005 CEST	443	50000	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:26.428339005 CEST	443	49998	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.428456068 CEST	443	49998	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.428524017 CEST	49998	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.431252003 CEST	49998	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.431277037 CEST	443	49998	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.478194952 CEST	50002	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.478246927 CEST	443	50002	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.478341103 CEST	50002	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.478878975 CEST	50002	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.478888035 CEST	443	50002	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.479768991 CEST	50003	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.479821920 CEST	443	50003	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.479881048 CEST	50003	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.480110884 CEST	50003	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.480125904 CEST	443	50003	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.480695009 CEST	50004	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.480717897 CEST	443	50004	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.480927944 CEST	50004	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.481103897 CEST	50004	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.481117010 CEST	443	50004	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.481795073 CEST	50005	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.481831074 CEST	443	50005	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.482151031 CEST	50005	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.482424974 CEST	50006	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.482453108 CEST	443	50006	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.482661009 CEST	50006	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.482697010 CEST	50005	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.482708931 CEST	443	50005	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.483014107 CEST	50006	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.483032942 CEST	443	50006	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.483812094 CEST	50007	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.483840942 CEST	443	50007	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.484147072 CEST	50007	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.484554052 CEST	50007	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.484568119 CEST	443	50007	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.717113972 CEST	443	50000	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:26.717272997 CEST	443	50000	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:26.717328072 CEST	50000	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:26.719153881 CEST	50000	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:26.719175100 CEST	443	50000	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:26.786202908 CEST	443	50001	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:26.786467075 CEST	50001	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:26.786499977 CEST	443	50001	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:26.787576914 CEST	443	50001	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:26.787632942 CEST	50001	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:26.802687883 CEST	443	50002	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.803894997 CEST	443	50003	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.805478096 CEST	443	50004	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.806646109 CEST	50004	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.806654930 CEST	443	50004	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.806837082 CEST	50003	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.806869030 CEST	443	50003	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.806993008 CEST	50002	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.807014942 CEST	443	50002	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.807302952 CEST	443	50003	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.807317019 CEST	443	50006	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.807435036 CEST	443	50002	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.807473898 CEST	50006	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.807492971 CEST	443	50006	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.807733059 CEST	443	50004	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.807763100 CEST	443	50005	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.807779074 CEST	50004	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.807909012 CEST	50003	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.807967901 CEST	443	50003	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.808245897 CEST	50002	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.808307886 CEST	443	50002	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.808368921 CEST	50005	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.808382988 CEST	443	50005	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.808538914 CEST	443	50006	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.808590889 CEST	50006	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.808741093 CEST	50004	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.808801889 CEST	443	50004	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.809077978 CEST	443	50007	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.809101105 CEST	50006	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.809155941 CEST	443	50006	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.809335947 CEST	50003	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.809392929 CEST	50002	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.809488058 CEST	50007	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.809500933 CEST	443	50007	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.809672117 CEST	50004	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.809676886 CEST	443	50004	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.809808016 CEST	443	50005	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.809858084 CEST	50005	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.810019016 CEST	50006	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.810035944 CEST	443	50006	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.810318947 CEST	50005	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.810380936 CEST	443	50005	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.810589075 CEST	443	50007	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.810698986 CEST	50007	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.810719967 CEST	50005	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.810725927 CEST	443	50005	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.811116934 CEST	50007	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.811199903 CEST	443	50007	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.811316967 CEST	50007	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.811326027 CEST	443	50007	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.849666119 CEST	50004	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.856110096 CEST	443	50002	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.856117010 CEST	443	50003	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:26.865278959 CEST	50006	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.865292072 CEST	50005	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:26.865293026 CEST	50007	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.123864889 CEST	443	50003	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.124032974 CEST	443	50002	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.124039888 CEST	443	50003	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.124126911 CEST	50003	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.124144077 CEST	443	50003	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.124162912 CEST	443	50002	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.124176025 CEST	443	50003	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.124232054 CEST	50002	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.124238968 CEST	50003	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.124263048 CEST	443	50003	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.124290943 CEST	443	50002	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.124336958 CEST	443	50002	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.124357939 CEST	443	50002	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.124403000 CEST	50002	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.124419928 CEST	443	50002	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.124470949 CEST	50002	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.124726057 CEST	443	50004	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.124876022 CEST	443	50004	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.124939919 CEST	50004	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.124969006 CEST	443	50004	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.125026941 CEST	443	50004	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.125080109 CEST	443	50004	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.125099897 CEST	50004	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.125113964 CEST	443	50004	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.125168085 CEST	50004	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.127254009 CEST	443	50005	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.127338886 CEST	443	50005	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.127374887 CEST	443	50005	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.127403975 CEST	50005	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.127424002 CEST	443	50005	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.127465010 CEST	443	50005	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.127535105 CEST	50005	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.128807068 CEST	443	50003	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.128870964 CEST	50003	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.128899097 CEST	443	50003	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.128978014 CEST	443	50003	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.129141092 CEST	50003	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.129213095 CEST	50003	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.129244089 CEST	443	50003	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.129471064 CEST	443	50002	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.129847050 CEST	443	50007	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.129903078 CEST	443	50007	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.129930973 CEST	443	50007	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.129964113 CEST	50007	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.129975080 CEST	443	50007	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.130032063 CEST	50007	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.130080938 CEST	443	50007	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.130120993 CEST	443	50007	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.130192995 CEST	50007	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.130198002 CEST	443	50004	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.130198956 CEST	443	50007	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.130208969 CEST	443	50007	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.130280018 CEST	50007	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.130532980 CEST	50008	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.130587101 CEST	443	50008	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.130672932 CEST	50008	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.131000996 CEST	50008	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.131031036 CEST	443	50008	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.131391048 CEST	50007	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.131407022 CEST	443	50007	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.132550955 CEST	443	50005	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.132582903 CEST	443	50005	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.132635117 CEST	50005	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.132651091 CEST	443	50005	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.132672071 CEST	443	50005	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.132705927 CEST	50005	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.132733107 CEST	50005	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.133047104 CEST	50009	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.133093119 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.133214951 CEST	50009	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.133290052 CEST	50005	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.133323908 CEST	443	50005	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.133677006 CEST	50009	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.133708000 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.134650946 CEST	443	50002	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.134730101 CEST	50002	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.134736061 CEST	443	50002	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.134836912 CEST	50002	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.135351896 CEST	443	50004	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.135385990 CEST	50010	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.135389090 CEST	443	50004	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.135401964 CEST	50004	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.135420084 CEST	443	50004	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.135437965 CEST	443	50010	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.135472059 CEST	50004	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.135508060 CEST	50010	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.135627031 CEST	50002	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.135646105 CEST	443	50002	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.135994911 CEST	50010	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.136010885 CEST	443	50010	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.140733004 CEST	443	50004	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.140957117 CEST	443	50004	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.141016960 CEST	50004	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.141143084 CEST	50004	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.141166925 CEST	443	50004	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.188095093 CEST	50001	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:27.188525915 CEST	443	50001	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:27.189388037 CEST	50001	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:27.189419985 CEST	443	50001	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:27.234874010 CEST	50011	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:27.234935999 CEST	443	50011	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:27.235014915 CEST	50011	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:27.235691071 CEST	50011	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:27.235722065 CEST	443	50011	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:27.240283012 CEST	50001	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:27.271914005 CEST	443	50006	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.271981955 CEST	443	50006	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.272053003 CEST	443	50006	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.272084951 CEST	443	50006	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.272084951 CEST	50006	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.272108078 CEST	443	50006	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.272128105 CEST	50006	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.272144079 CEST	443	50006	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.272176981 CEST	443	50006	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.272253990 CEST	443	50006	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.272283077 CEST	50006	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.272300959 CEST	50006	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.274564981 CEST	50006	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.274580002 CEST	443	50006	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.456453085 CEST	443	50008	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.457171917 CEST	50008	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.457196951 CEST	443	50008	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.457551956 CEST	443	50008	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.460905075 CEST	443	50010	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.461538076 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.462085962 CEST	50010	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.462114096 CEST	443	50010	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.462362051 CEST	50008	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.462476015 CEST	443	50008	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.462646008 CEST	50008	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.462959051 CEST	50009	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.462987900 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.463145018 CEST	443	50010	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.463206053 CEST	50010	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.463462114 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.463788986 CEST	50010	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.464335918 CEST	50010	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.464340925 CEST	443	50010	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.464581013 CEST	50009	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.464663982 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.464915991 CEST	50009	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.468199968 CEST	443	50010	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.508121014 CEST	443	50008	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.512118101 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.521548033 CEST	50010	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.521573067 CEST	443	50010	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.559995890 CEST	443	50011	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:27.560271025 CEST	50011	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:27.560280085 CEST	443	50011	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:27.560606003 CEST	443	50011	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:27.561124086 CEST	50011	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:27.561172009 CEST	443	50011	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:27.561431885 CEST	50011	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:27.568420887 CEST	50010	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.575844049 CEST	443	50001	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:27.575932026 CEST	443	50001	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:27.575980902 CEST	50001	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:27.577748060 CEST	50001	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:27.577764034 CEST	443	50001	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:27.608109951 CEST	443	50011	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:27.762267113 CEST	50012	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:27.762296915 CEST	443	50012	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:27.762356997 CEST	50012	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:27.762722969 CEST	50012	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:27.762732983 CEST	443	50012	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:27.776002884 CEST	443	50008	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.776063919 CEST	443	50008	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.776093006 CEST	443	50008	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.776118040 CEST	50008	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.776144028 CEST	443	50008	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.776180029 CEST	50008	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.776187897 CEST	443	50008	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.781200886 CEST	443	50008	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.781229019 CEST	443	50008	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.781250954 CEST	50008	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.781259060 CEST	443	50008	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.781310081 CEST	50008	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.781696081 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.781855106 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.781897068 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.781898022 CEST	50009	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.781929970 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.781968117 CEST	50009	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.781976938 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.785233021 CEST	443	50010	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.785310030 CEST	443	50010	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.785341024 CEST	443	50010	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.785353899 CEST	50010	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.785379887 CEST	443	50010	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.785418034 CEST	50010	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.785427094 CEST	443	50010	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.785458088 CEST	443	50010	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.785490990 CEST	50010	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.786542892 CEST	443	50008	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.786645889 CEST	443	50008	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.786680937 CEST	50008	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.786833048 CEST	50010	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.786847115 CEST	443	50010	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.787143946 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.787182093 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.787187099 CEST	50009	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.787223101 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.787257910 CEST	50009	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.792483091 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.794497013 CEST	50008	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.794514894 CEST	443	50008	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.797887087 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.797992945 CEST	50009	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.798012018 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.803183079 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.803234100 CEST	50009	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.803247929 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.808582067 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.808628082 CEST	50009	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.808640957 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.813983917 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.814038038 CEST	50009	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.814049959 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.814162970 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:27.814208984 CEST	50009	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.845613003 CEST	50009	443	192.168.2.4	162.247.243.39
Apr 24, 2024 19:31:27.845633030 CEST	443	50009	162.247.243.39	192.168.2.4
Apr 24, 2024 19:31:28.112040043 CEST	443	50012	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:28.112869978 CEST	50012	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:28.112885952 CEST	443	50012	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:28.113933086 CEST	443	50012	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:28.113986015 CEST	50012	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:28.115139961 CEST	50012	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:28.115190029 CEST	443	50012	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:28.115432978 CEST	50012	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:28.115438938 CEST	443	50012	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:28.162323952 CEST	50012	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:28.201483965 CEST	50013	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:28.201529026 CEST	443	50013	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:28.201590061 CEST	50013	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:28.201909065 CEST	50013	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:28.201924086 CEST	443	50013	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:28.232124090 CEST	443	50011	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:28.232233047 CEST	443	50011	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:28.232275963 CEST	50011	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:28.232671976 CEST	50011	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:28.232681036 CEST	443	50011	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:28.434376001 CEST	443	50012	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:28.434469938 CEST	443	50012	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:28.434515953 CEST	50012	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:28.435139894 CEST	50012	443	192.168.2.4	18.154.142.121
Apr 24, 2024 19:31:28.435152054 CEST	443	50012	18.154.142.121	192.168.2.4
Apr 24, 2024 19:31:28.612622023 CEST	50014	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:28.612667084 CEST	443	50014	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:28.612741947 CEST	50014	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:28.612976074 CEST	50014	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:28.612988949 CEST	443	50014	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:28.631957054 CEST	443	50013	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:28.632385015 CEST	50013	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:28.632414103 CEST	443	50013	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:28.632754087 CEST	443	50013	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:28.633064032 CEST	50013	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:28.633120060 CEST	443	50013	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:28.633220911 CEST	50013	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:28.676127911 CEST	443	50013	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:28.813800097 CEST	50015	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:28.813843012 CEST	443	50015	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:28.813936949 CEST	50015	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:28.814419031 CEST	50015	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:28.814428091 CEST	443	50015	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:28.815232992 CEST	50016	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:28.815273046 CEST	443	50016	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:28.815346003 CEST	50016	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:28.815865040 CEST	50016	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:28.815881968 CEST	443	50016	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:28.871484995 CEST	50017	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:28.871546030 CEST	443	50017	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:28.871607065 CEST	50017	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:28.872097015 CEST	50017	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:28.872117043 CEST	443	50017	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:28.888595104 CEST	50018	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:28.888645887 CEST	443	50018	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:28.888745070 CEST	50018	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:28.889852047 CEST	50018	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:28.889877081 CEST	443	50018	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:28.937881947 CEST	443	50014	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:28.938301086 CEST	50014	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:28.938327074 CEST	443	50014	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:28.938654900 CEST	443	50014	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:28.940731049 CEST	50014	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:28.940782070 CEST	443	50014	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:28.941189051 CEST	50014	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:28.941257000 CEST	50014	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:28.941270113 CEST	443	50014	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:29.060842037 CEST	443	50013	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:29.060931921 CEST	443	50013	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:29.061002016 CEST	50013	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:29.061661005 CEST	50013	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:29.061681986 CEST	443	50013	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:29.139458895 CEST	443	50016	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:29.140012980 CEST	50016	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:29.140074968 CEST	443	50016	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:29.143699884 CEST	443	50016	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:29.143795967 CEST	50016	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:29.144396067 CEST	50016	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:29.144573927 CEST	443	50016	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:29.144824028 CEST	50016	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:29.144841909 CEST	443	50016	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:29.197710991 CEST	443	50015	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:29.198149920 CEST	50016	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:29.209876060 CEST	50015	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:29.209894896 CEST	443	50015	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:29.214425087 CEST	443	50018	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:29.214951038 CEST	50018	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:29.214982986 CEST	443	50018	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:29.215447903 CEST	443	50018	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:29.215493917 CEST	443	50015	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:29.215601921 CEST	50015	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:29.215853930 CEST	50018	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:29.215928078 CEST	443	50018	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:29.216481924 CEST	50015	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:29.216742992 CEST	443	50015	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:29.216882944 CEST	50018	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:29.217176914 CEST	50015	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:29.217184067 CEST	443	50015	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:29.256874084 CEST	443	50017	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:29.257426977 CEST	50017	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:29.257456064 CEST	443	50017	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:29.257967949 CEST	443	50017	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:29.258438110 CEST	50017	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:29.258522987 CEST	443	50017	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:29.258944035 CEST	50017	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:29.260710001 CEST	50015	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:29.264123917 CEST	443	50018	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:29.300123930 CEST	443	50017	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:29.332540989 CEST	443	50014	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:29.332887888 CEST	443	50014	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:29.332966089 CEST	50014	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:29.333595991 CEST	50014	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:29.333652973 CEST	443	50014	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:29.340147972 CEST	50019	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:29.340192080 CEST	443	50019	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:29.340322971 CEST	50019	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:29.340801954 CEST	50019	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:29.340816975 CEST	443	50019	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:29.529278994 CEST	443	50016	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:29.529367924 CEST	443	50016	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:29.529423952 CEST	50016	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:29.577748060 CEST	443	50015	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:29.577835083 CEST	443	50015	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:29.577929974 CEST	50015	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:29.586333036 CEST	50020	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:31:29.586384058 CEST	443	50020	13.85.23.86	192.168.2.4
Apr 24, 2024 19:31:29.586458921 CEST	50020	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:31:29.586828947 CEST	50020	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:31:29.586842060 CEST	443	50020	13.85.23.86	192.168.2.4
Apr 24, 2024 19:31:29.600569963 CEST	443	50017	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:29.600657940 CEST	443	50017	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:29.600724936 CEST	50017	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:29.601769924 CEST	50017	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:29.601815939 CEST	443	50017	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:29.666002035 CEST	443	50019	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:29.666522026 CEST	50019	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:29.666549921 CEST	443	50019	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:29.667033911 CEST	443	50019	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:29.667380095 CEST	50019	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:29.667460918 CEST	443	50019	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:29.667552948 CEST	50019	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:29.708129883 CEST	443	50019	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:29.820307016 CEST	443	50018	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:29.820461035 CEST	443	50018	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:29.820523977 CEST	50018	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:29.821280956 CEST	50018	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:29.821300983 CEST	443	50018	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:29.964894056 CEST	50016	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:29.964968920 CEST	443	50016	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:29.965989113 CEST	50015	443	192.168.2.4	52.32.69.132
Apr 24, 2024 19:31:29.966026068 CEST	443	50015	52.32.69.132	192.168.2.4
Apr 24, 2024 19:31:29.968544960 CEST	50021	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:29.968592882 CEST	443	50021	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:29.968658924 CEST	50021	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:29.970180988 CEST	50021	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:29.970202923 CEST	443	50021	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:29.971098900 CEST	50022	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:29.971138954 CEST	443	50022	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:29.971204042 CEST	50022	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:29.971393108 CEST	50022	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:29.971405029 CEST	443	50022	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:30.060504913 CEST	443	50019	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:30.060802937 CEST	443	50019	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:30.060858965 CEST	50019	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:30.062825918 CEST	50019	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:30.062848091 CEST	443	50019	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:30.177252054 CEST	443	50020	13.85.23.86	192.168.2.4
Apr 24, 2024 19:31:30.177396059 CEST	50020	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:31:30.189699888 CEST	50020	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:31:30.189723969 CEST	443	50020	13.85.23.86	192.168.2.4
Apr 24, 2024 19:31:30.190645933 CEST	443	50020	13.85.23.86	192.168.2.4
Apr 24, 2024 19:31:30.239605904 CEST	50020	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:31:30.264276028 CEST	50020	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:31:30.291043997 CEST	443	50021	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:30.312117100 CEST	443	50020	13.85.23.86	192.168.2.4
Apr 24, 2024 19:31:30.336504936 CEST	50021	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:30.336565971 CEST	443	50021	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:30.337059021 CEST	443	50021	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:30.338145018 CEST	50021	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:30.338215113 CEST	443	50021	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:30.339442968 CEST	50021	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:30.380122900 CEST	443	50021	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:30.528659105 CEST	443	50022	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:30.529237032 CEST	50022	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:30.529268026 CEST	443	50022	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:30.529619932 CEST	443	50022	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:30.530258894 CEST	50022	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:30.530333996 CEST	443	50022	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:30.530527115 CEST	50022	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:30.576128960 CEST	443	50022	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:30.682010889 CEST	443	50021	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:30.682076931 CEST	50021	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:30.682087898 CEST	443	50021	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:30.682126999 CEST	50021	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:30.715123892 CEST	443	50022	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:30.715214968 CEST	443	50022	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:30.715270042 CEST	50022	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:30.720318079 CEST	50021	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:30.720340967 CEST	443	50021	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:30.722932100 CEST	50023	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:30.722974062 CEST	443	50023	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:30.723045111 CEST	50023	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:30.724571943 CEST	50023	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:30.724586964 CEST	443	50023	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:30.729654074 CEST	50022	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:30.729690075 CEST	443	50022	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:30.748503923 CEST	443	50020	13.85.23.86	192.168.2.4
Apr 24, 2024 19:31:30.748528957 CEST	443	50020	13.85.23.86	192.168.2.4
Apr 24, 2024 19:31:30.748536110 CEST	443	50020	13.85.23.86	192.168.2.4
Apr 24, 2024 19:31:30.748548031 CEST	443	50020	13.85.23.86	192.168.2.4
Apr 24, 2024 19:31:30.748584032 CEST	443	50020	13.85.23.86	192.168.2.4
Apr 24, 2024 19:31:30.748588085 CEST	50020	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:31:30.748625994 CEST	443	50020	13.85.23.86	192.168.2.4
Apr 24, 2024 19:31:30.748641014 CEST	50020	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:31:30.748675108 CEST	50020	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:31:30.748907089 CEST	443	50020	13.85.23.86	192.168.2.4
Apr 24, 2024 19:31:30.748933077 CEST	443	50020	13.85.23.86	192.168.2.4
Apr 24, 2024 19:31:30.748963118 CEST	50020	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:31:30.748971939 CEST	443	50020	13.85.23.86	192.168.2.4
Apr 24, 2024 19:31:30.748984098 CEST	443	50020	13.85.23.86	192.168.2.4
Apr 24, 2024 19:31:30.749027967 CEST	50020	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:31:30.756711006 CEST	50020	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:31:30.756726980 CEST	443	50020	13.85.23.86	192.168.2.4
Apr 24, 2024 19:31:30.756737947 CEST	50020	443	192.168.2.4	13.85.23.86
Apr 24, 2024 19:31:30.756742954 CEST	443	50020	13.85.23.86	192.168.2.4
Apr 24, 2024 19:31:31.281486988 CEST	443	50023	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:31.281923056 CEST	50023	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:31.281951904 CEST	443	50023	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:31.282445908 CEST	443	50023	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:31.282787085 CEST	50023	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:31.282864094 CEST	443	50023	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:31.282948971 CEST	50023	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:31.328119040 CEST	443	50023	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:31.667459011 CEST	443	50023	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:31.667568922 CEST	443	50023	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:31.667617083 CEST	50023	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:31.676076889 CEST	50023	443	192.168.2.4	35.71.131.137
Apr 24, 2024 19:31:31.676110029 CEST	443	50023	35.71.131.137	192.168.2.4
Apr 24, 2024 19:31:34.451066017 CEST	50024	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.451114893 CEST	443	50024	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.451452971 CEST	50024	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.453855038 CEST	50027	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:34.453864098 CEST	443	50027	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:34.453982115 CEST	50027	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:34.454638958 CEST	50028	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.454663038 CEST	443	50028	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.454916954 CEST	50028	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.457253933 CEST	50030	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:34.457266092 CEST	443	50030	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:34.457318068 CEST	50030	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:34.458188057 CEST	50031	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.458204031 CEST	443	50031	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.458376884 CEST	50031	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.461431980 CEST	50032	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.461437941 CEST	443	50032	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.461489916 CEST	50032	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.463150978 CEST	50031	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.463179111 CEST	443	50031	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.463442087 CEST	50030	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:34.463462114 CEST	443	50030	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:34.463979006 CEST	50028	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.463989019 CEST	443	50028	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.464137077 CEST	50027	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:34.464153051 CEST	443	50027	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:34.465027094 CEST	50024	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.465044022 CEST	443	50024	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.465167999 CEST	50032	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.465190887 CEST	443	50032	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.478699923 CEST	50033	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:34.478719950 CEST	443	50033	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:34.478828907 CEST	50033	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:34.479096889 CEST	50033	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:34.479120970 CEST	443	50033	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:34.793924093 CEST	443	50028	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.794013977 CEST	443	50032	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.796727896 CEST	443	50031	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.798046112 CEST	443	50024	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.802390099 CEST	50032	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.802412987 CEST	443	50032	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.802561998 CEST	50028	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.802575111 CEST	443	50028	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.802963972 CEST	443	50028	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.803498983 CEST	443	50032	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.803567886 CEST	50032	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.804989100 CEST	50024	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.805051088 CEST	443	50024	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.805129051 CEST	50031	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.805135965 CEST	443	50031	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.805593014 CEST	443	50031	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.806601048 CEST	443	50024	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.806673050 CEST	50024	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.807363987 CEST	50032	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.807451963 CEST	443	50032	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.808790922 CEST	50028	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.808875084 CEST	443	50028	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.809324980 CEST	50031	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.809437990 CEST	443	50031	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.810760021 CEST	50024	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.810868025 CEST	443	50024	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.811243057 CEST	50032	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.811259985 CEST	443	50032	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.811290026 CEST	50028	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.811325073 CEST	50028	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.811357975 CEST	443	50028	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.811384916 CEST	50031	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.811438084 CEST	50031	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.811481953 CEST	443	50031	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.811578989 CEST	50024	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.811590910 CEST	443	50024	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.811609030 CEST	50024	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.845273972 CEST	443	50027	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:34.845685959 CEST	50027	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:34.845701933 CEST	443	50027	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:34.846252918 CEST	443	50027	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:34.846771002 CEST	50027	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:34.846842051 CEST	443	50027	63.140.36.145	192.168.2.4
Apr 24, 2024 19:31:34.856111050 CEST	443	50024	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:34.867975950 CEST	50024	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.868154049 CEST	50032	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:34.894967079 CEST	443	50030	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:34.895287037 CEST	50030	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:34.895297050 CEST	443	50030	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:34.895626068 CEST	443	50030	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:34.895951033 CEST	50030	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:34.895993948 CEST	443	50030	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:34.897480011 CEST	50027	443	192.168.2.4	63.140.36.145
Apr 24, 2024 19:31:34.908720016 CEST	443	50033	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:34.908971071 CEST	50033	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:34.908976078 CEST	443	50033	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:34.909296989 CEST	443	50033	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:34.909603119 CEST	50033	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:34.909650087 CEST	443	50033	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:34.909786940 CEST	50033	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:34.943422079 CEST	50030	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:34.952119112 CEST	443	50033	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:34.958549976 CEST	50033	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:35.189228058 CEST	443	50024	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:35.189574003 CEST	443	50024	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:35.189665079 CEST	50024	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:35.189975023 CEST	50024	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:35.190026999 CEST	443	50024	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:35.190056086 CEST	443	50031	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:35.190198898 CEST	443	50031	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:35.190284014 CEST	50031	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:35.191265106 CEST	50031	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:35.191310883 CEST	443	50031	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:35.256361961 CEST	443	50028	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:35.256496906 CEST	443	50028	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:35.256582022 CEST	50028	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:35.258501053 CEST	443	50032	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:35.258611917 CEST	443	50032	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:35.259041071 CEST	50032	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:35.274466038 CEST	50032	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:35.274517059 CEST	443	50032	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:35.274915934 CEST	50028	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:35.274945974 CEST	443	50028	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:35.286377907 CEST	50034	443	192.168.2.4	34.237.73.95
Apr 24, 2024 19:31:35.286485910 CEST	443	50034	34.237.73.95	192.168.2.4
Apr 24, 2024 19:31:35.286596060 CEST	50034	443	192.168.2.4	34.237.73.95
Apr 24, 2024 19:31:35.287447929 CEST	50034	443	192.168.2.4	34.237.73.95
Apr 24, 2024 19:31:35.287482977 CEST	443	50034	34.237.73.95	192.168.2.4
Apr 24, 2024 19:31:35.381874084 CEST	443	50033	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:35.381958008 CEST	443	50033	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:35.382421017 CEST	50033	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:35.383400917 CEST	50033	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:35.383419991 CEST	443	50033	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:35.388909101 CEST	50035	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:35.388957977 CEST	443	50035	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:35.389045000 CEST	50035	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:35.389380932 CEST	50035	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:35.389389992 CEST	443	50035	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:35.821788073 CEST	443	50035	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:35.872816086 CEST	50035	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:35.872875929 CEST	443	50035	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:35.873414993 CEST	443	50035	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:35.873850107 CEST	50035	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:35.873927116 CEST	443	50035	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:35.874385118 CEST	50035	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:35.916122913 CEST	443	50035	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:35.936796904 CEST	443	50034	34.237.73.95	192.168.2.4
Apr 24, 2024 19:31:35.989459038 CEST	50034	443	192.168.2.4	34.237.73.95
Apr 24, 2024 19:31:35.993510008 CEST	50034	443	192.168.2.4	34.237.73.95
Apr 24, 2024 19:31:35.993532896 CEST	443	50034	34.237.73.95	192.168.2.4
Apr 24, 2024 19:31:35.995305061 CEST	443	50034	34.237.73.95	192.168.2.4
Apr 24, 2024 19:31:35.995327950 CEST	443	50034	34.237.73.95	192.168.2.4
Apr 24, 2024 19:31:35.995412111 CEST	50034	443	192.168.2.4	34.237.73.95
Apr 24, 2024 19:31:36.049468040 CEST	50034	443	192.168.2.4	34.237.73.95
Apr 24, 2024 19:31:36.049767017 CEST	443	50034	34.237.73.95	192.168.2.4
Apr 24, 2024 19:31:36.049817085 CEST	50034	443	192.168.2.4	34.237.73.95
Apr 24, 2024 19:31:36.096123934 CEST	443	50034	34.237.73.95	192.168.2.4
Apr 24, 2024 19:31:36.111421108 CEST	50034	443	192.168.2.4	34.237.73.95
Apr 24, 2024 19:31:36.111458063 CEST	443	50034	34.237.73.95	192.168.2.4
Apr 24, 2024 19:31:36.163583994 CEST	50034	443	192.168.2.4	34.237.73.95
Apr 24, 2024 19:31:36.292123079 CEST	443	50035	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:36.292212009 CEST	443	50035	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:36.292289972 CEST	50035	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:36.730684996 CEST	50035	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:36.730726957 CEST	443	50035	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:38.580540895 CEST	50041	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:38.580610991 CEST	443	50041	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:38.580741882 CEST	50041	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:38.581176996 CEST	50041	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:38.581208944 CEST	443	50041	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:38.586105108 CEST	50042	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:38.586174965 CEST	443	50042	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:38.586247921 CEST	50042	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:38.586715937 CEST	50042	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:38.586745024 CEST	443	50042	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:38.965181112 CEST	443	50041	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:38.965559959 CEST	50041	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:38.965621948 CEST	443	50041	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:38.965974092 CEST	443	50041	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:38.966331005 CEST	50041	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:38.966401100 CEST	443	50041	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:38.966775894 CEST	50041	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:38.972606897 CEST	443	50042	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:38.972831964 CEST	50042	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:38.972896099 CEST	443	50042	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:38.973273993 CEST	443	50042	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:38.973704100 CEST	50042	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:38.973777056 CEST	443	50042	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:38.973872900 CEST	50042	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:39.012132883 CEST	443	50041	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:39.020126104 CEST	443	50042	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:39.029263973 CEST	50048	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:39.029352903 CEST	443	50048	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:39.029442072 CEST	50048	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:39.029891968 CEST	50048	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:39.029927969 CEST	443	50048	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:39.136802912 CEST	50049	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:39.136840105 CEST	443	50049	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:39.136918068 CEST	50049	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:39.137702942 CEST	50049	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:39.137717962 CEST	443	50049	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:39.359194040 CEST	443	50042	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:39.359292030 CEST	443	50042	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:39.359350920 CEST	50042	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:39.360546112 CEST	50042	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:39.360570908 CEST	443	50042	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:39.367413044 CEST	443	50048	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:39.367877007 CEST	50050	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:39.367914915 CEST	443	50050	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:39.367979050 CEST	50050	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:39.368773937 CEST	50048	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:39.368834019 CEST	443	50048	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:39.369035006 CEST	50050	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:39.369051933 CEST	443	50050	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:39.369373083 CEST	443	50048	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:39.369560957 CEST	50051	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:39.369616985 CEST	443	50051	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:39.369685888 CEST	50051	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:39.369966984 CEST	50048	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:39.370064020 CEST	443	50048	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:39.370381117 CEST	50051	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:39.370420933 CEST	443	50051	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:39.370552063 CEST	50048	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:39.398365021 CEST	443	50041	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:39.398617029 CEST	443	50041	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:39.398691893 CEST	50041	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:39.399795055 CEST	50041	443	192.168.2.4	63.140.37.126
Apr 24, 2024 19:31:39.399842024 CEST	443	50041	63.140.37.126	192.168.2.4
Apr 24, 2024 19:31:39.404603958 CEST	50052	443	192.168.2.4	63.140.37.206
Apr 24, 2024 19:31:39.404660940 CEST	443	50052	63.140.37.206	192.168.2.4
Apr 24, 2024 19:31:39.404751062 CEST	50052	443	192.168.2.4	63.140.37.206
Apr 24, 2024 19:31:39.404994011 CEST	50052	443	192.168.2.4	63.140.37.206
Apr 24, 2024 19:31:39.405024052 CEST	443	50052	63.140.37.206	192.168.2.4
Apr 24, 2024 19:31:39.412138939 CEST	443	50048	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:39.497123957 CEST	443	50049	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:39.497560978 CEST	50049	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:39.497570038 CEST	443	50049	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:39.497922897 CEST	443	50049	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:39.498769999 CEST	50049	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:39.498836994 CEST	443	50049	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:39.539580107 CEST	50049	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:39.755350113 CEST	443	50050	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:39.755538940 CEST	443	50051	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:39.755645990 CEST	50050	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:39.755707979 CEST	443	50050	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:39.755773067 CEST	50051	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:39.755786896 CEST	443	50051	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:39.756361961 CEST	443	50051	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:39.756746054 CEST	443	50050	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:39.756917953 CEST	50051	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:39.757004976 CEST	443	50051	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:39.757286072 CEST	50050	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:39.757369995 CEST	443	50050	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:39.757430077 CEST	50051	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:39.757560015 CEST	50050	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:39.786144018 CEST	443	50052	63.140.37.206	192.168.2.4
Apr 24, 2024 19:31:39.786485910 CEST	50052	443	192.168.2.4	63.140.37.206
Apr 24, 2024 19:31:39.786546946 CEST	443	50052	63.140.37.206	192.168.2.4
Apr 24, 2024 19:31:39.787070036 CEST	443	50052	63.140.37.206	192.168.2.4
Apr 24, 2024 19:31:39.787658930 CEST	50052	443	192.168.2.4	63.140.37.206
Apr 24, 2024 19:31:39.787760019 CEST	443	50052	63.140.37.206	192.168.2.4
Apr 24, 2024 19:31:39.787874937 CEST	50052	443	192.168.2.4	63.140.37.206
Apr 24, 2024 19:31:39.804126024 CEST	443	50050	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:39.804146051 CEST	443	50051	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:39.828655005 CEST	443	50048	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:39.828963995 CEST	443	50048	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:39.829029083 CEST	50048	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:39.830516100 CEST	50048	443	192.168.2.4	18.154.132.87
Apr 24, 2024 19:31:39.830534935 CEST	443	50048	18.154.132.87	192.168.2.4
Apr 24, 2024 19:31:39.832117081 CEST	443	50052	63.140.37.206	192.168.2.4
Apr 24, 2024 19:31:40.142899036 CEST	443	50051	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:40.142988920 CEST	443	50051	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:40.143050909 CEST	50051	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:40.143975019 CEST	50051	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:40.143989086 CEST	443	50051	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:40.145287991 CEST	443	50050	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:40.145598888 CEST	443	50050	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:40.145673037 CEST	50050	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:40.147964001 CEST	50050	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:40.147996902 CEST	443	50050	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:40.151964903 CEST	50060	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:40.152070045 CEST	443	50060	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:40.152154922 CEST	50060	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:40.152432919 CEST	50060	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:40.152467966 CEST	443	50060	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:40.206984043 CEST	443	50052	63.140.37.206	192.168.2.4
Apr 24, 2024 19:31:40.207154989 CEST	443	50052	63.140.37.206	192.168.2.4
Apr 24, 2024 19:31:40.207227945 CEST	50052	443	192.168.2.4	63.140.37.206
Apr 24, 2024 19:31:40.207576990 CEST	50052	443	192.168.2.4	63.140.37.206
Apr 24, 2024 19:31:40.207609892 CEST	443	50052	63.140.37.206	192.168.2.4
Apr 24, 2024 19:31:40.538220882 CEST	443	50060	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:40.542666912 CEST	50060	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:40.542685986 CEST	443	50060	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:40.543190002 CEST	443	50060	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:40.544068098 CEST	50060	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:40.544159889 CEST	443	50060	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:40.544891119 CEST	50060	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:40.592111111 CEST	443	50060	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:40.920186043 CEST	443	50060	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:40.920289040 CEST	443	50060	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:40.920372963 CEST	50060	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:40.921560049 CEST	50060	443	192.168.2.4	100.20.148.237
Apr 24, 2024 19:31:40.921605110 CEST	443	50060	100.20.148.237	192.168.2.4
Apr 24, 2024 19:31:41.373029947 CEST	50072	443	192.168.2.4	172.64.144.225
Apr 24, 2024 19:31:41.373078108 CEST	443	50072	172.64.144.225	192.168.2.4
Apr 24, 2024 19:31:41.373145103 CEST	50072	443	192.168.2.4	172.64.144.225
Apr 24, 2024 19:31:41.373651028 CEST	50072	443	192.168.2.4	172.64.144.225
Apr 24, 2024 19:31:41.373667955 CEST	443	50072	172.64.144.225	192.168.2.4
Apr 24, 2024 19:31:41.484390020 CEST	50030	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:41.532118082 CEST	443	50030	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:41.677331924 CEST	50074	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:41.677401066 CEST	443	50074	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:41.677493095 CEST	50074	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:41.678081036 CEST	50074	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:41.678113937 CEST	443	50074	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:41.679657936 CEST	50075	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:41.679709911 CEST	443	50075	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:41.679817915 CEST	50075	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:41.680125952 CEST	50075	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:41.680140972 CEST	443	50075	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:41.688189030 CEST	443	50072	172.64.144.225	192.168.2.4
Apr 24, 2024 19:31:41.688425064 CEST	50072	443	192.168.2.4	172.64.144.225
Apr 24, 2024 19:31:41.688440084 CEST	443	50072	172.64.144.225	192.168.2.4
Apr 24, 2024 19:31:41.689073086 CEST	50076	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:41.689101934 CEST	443	50076	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:41.689167976 CEST	50076	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:41.689371109 CEST	50076	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:41.689388990 CEST	443	50076	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:41.690565109 CEST	443	50072	172.64.144.225	192.168.2.4
Apr 24, 2024 19:31:41.690923929 CEST	50072	443	192.168.2.4	172.64.144.225
Apr 24, 2024 19:31:41.691051006 CEST	50072	443	192.168.2.4	172.64.144.225
Apr 24, 2024 19:31:41.691056013 CEST	443	50072	172.64.144.225	192.168.2.4
Apr 24, 2024 19:31:41.691111088 CEST	443	50072	172.64.144.225	192.168.2.4
Apr 24, 2024 19:31:41.699892998 CEST	443	50030	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:41.699918032 CEST	443	50030	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:41.699964046 CEST	50030	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:41.699975014 CEST	443	50030	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:41.700016022 CEST	50030	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:41.740129948 CEST	50072	443	192.168.2.4	172.64.144.225
Apr 24, 2024 19:31:41.750247002 CEST	50077	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:41.750293970 CEST	443	50077	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:41.750416994 CEST	50077	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:41.750885963 CEST	50078	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:41.751015902 CEST	443	50078	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:41.751104116 CEST	50078	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:41.751760960 CEST	50077	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:41.751775980 CEST	443	50077	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:41.753374100 CEST	50078	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:41.753405094 CEST	443	50078	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:41.914479017 CEST	443	50030	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:41.914489985 CEST	443	50030	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:41.914530993 CEST	443	50030	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:41.914560080 CEST	50030	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:41.914572001 CEST	443	50030	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:41.914616108 CEST	50030	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:41.914618015 CEST	443	50030	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:41.914808035 CEST	50030	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:41.919424057 CEST	50030	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:41.919435978 CEST	443	50030	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:41.948493004 CEST	50084	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:41.948525906 CEST	443	50084	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:41.948595047 CEST	50084	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:41.949331045 CEST	50084	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:41.949356079 CEST	443	50084	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:41.974152088 CEST	50085	443	192.168.2.4	34.96.71.22
Apr 24, 2024 19:31:41.974176884 CEST	443	50085	34.96.71.22	192.168.2.4
Apr 24, 2024 19:31:41.974256039 CEST	50085	443	192.168.2.4	34.96.71.22
Apr 24, 2024 19:31:41.974672079 CEST	50085	443	192.168.2.4	34.96.71.22
Apr 24, 2024 19:31:41.974687099 CEST	443	50085	34.96.71.22	192.168.2.4
Apr 24, 2024 19:31:41.987241983 CEST	50086	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:41.987344027 CEST	443	50086	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:41.987572908 CEST	50086	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:41.988312960 CEST	50086	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:41.988343000 CEST	443	50086	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:41.988957882 CEST	50087	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:41.988977909 CEST	443	50087	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:41.989109993 CEST	50087	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:41.989345074 CEST	50087	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:41.989357948 CEST	443	50087	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:41.992577076 CEST	50088	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:41.992598057 CEST	443	50088	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:41.992921114 CEST	50088	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:41.993151903 CEST	50088	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:41.993164062 CEST	443	50088	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:42.035768986 CEST	443	50074	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.036072969 CEST	50074	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.036118984 CEST	443	50074	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.036528111 CEST	443	50075	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.036636114 CEST	443	50074	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.036741972 CEST	50075	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:42.036761045 CEST	443	50075	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.037065983 CEST	443	50075	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.037636042 CEST	50074	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.037722111 CEST	443	50074	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.037955999 CEST	50075	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:42.038018942 CEST	443	50075	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.038136959 CEST	50074	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.038196087 CEST	50075	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:42.045341015 CEST	443	50076	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.045552969 CEST	50076	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:42.045563936 CEST	443	50076	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.046103954 CEST	443	50076	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.046536922 CEST	50076	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:42.046623945 CEST	443	50076	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.046658993 CEST	50076	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:42.046669006 CEST	443	50076	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.077326059 CEST	50089	443	192.168.2.4	18.173.121.47
Apr 24, 2024 19:31:42.077423096 CEST	443	50089	18.173.121.47	192.168.2.4
Apr 24, 2024 19:31:42.077500105 CEST	50089	443	192.168.2.4	18.173.121.47
Apr 24, 2024 19:31:42.077688932 CEST	50089	443	192.168.2.4	18.173.121.47
Apr 24, 2024 19:31:42.077721119 CEST	443	50089	18.173.121.47	192.168.2.4
Apr 24, 2024 19:31:42.084108114 CEST	443	50075	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.084124088 CEST	443	50074	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.098553896 CEST	50076	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:42.108443022 CEST	443	50077	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.108741999 CEST	50077	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.108755112 CEST	443	50077	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.108813047 CEST	443	50078	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.108997107 CEST	50078	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:42.109062910 CEST	443	50078	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.109136105 CEST	443	50077	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.109488964 CEST	50077	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.109571934 CEST	443	50077	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.109616041 CEST	50077	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.110887051 CEST	443	50078	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.110970020 CEST	50078	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:42.111340046 CEST	50078	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:42.111433983 CEST	50078	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:42.111444950 CEST	443	50078	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.111462116 CEST	443	50078	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.121323109 CEST	443	50072	172.64.144.225	192.168.2.4
Apr 24, 2024 19:31:42.121598005 CEST	443	50072	172.64.144.225	192.168.2.4
Apr 24, 2024 19:31:42.121665955 CEST	50072	443	192.168.2.4	172.64.144.225
Apr 24, 2024 19:31:42.122431993 CEST	50072	443	192.168.2.4	172.64.144.225
Apr 24, 2024 19:31:42.122447968 CEST	443	50072	172.64.144.225	192.168.2.4
Apr 24, 2024 19:31:42.156120062 CEST	443	50077	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.160799026 CEST	50077	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.160824060 CEST	50078	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:42.160865068 CEST	443	50078	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.206396103 CEST	50078	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:42.286655903 CEST	443	50084	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:42.287038088 CEST	50084	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:42.287106037 CEST	443	50084	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:42.288378954 CEST	443	50084	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:42.288728952 CEST	50084	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:42.288852930 CEST	50084	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:42.288866043 CEST	443	50084	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:42.288997889 CEST	443	50084	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:42.312860966 CEST	443	50086	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:42.313164949 CEST	50086	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:42.313230038 CEST	443	50086	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:42.313605070 CEST	443	50086	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:42.313882113 CEST	50086	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:42.313966990 CEST	50086	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:42.313982964 CEST	443	50086	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:42.314043045 CEST	443	50086	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:42.331446886 CEST	443	50085	34.96.71.22	192.168.2.4
Apr 24, 2024 19:31:42.331651926 CEST	50085	443	192.168.2.4	34.96.71.22
Apr 24, 2024 19:31:42.331661940 CEST	443	50085	34.96.71.22	192.168.2.4
Apr 24, 2024 19:31:42.332885027 CEST	443	50085	34.96.71.22	192.168.2.4
Apr 24, 2024 19:31:42.333199024 CEST	50085	443	192.168.2.4	34.96.71.22
Apr 24, 2024 19:31:42.333278894 CEST	50085	443	192.168.2.4	34.96.71.22
Apr 24, 2024 19:31:42.333283901 CEST	443	50085	34.96.71.22	192.168.2.4
Apr 24, 2024 19:31:42.333383083 CEST	443	50085	34.96.71.22	192.168.2.4
Apr 24, 2024 19:31:42.336250067 CEST	50084	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:42.367645979 CEST	50086	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:42.383476973 CEST	50085	443	192.168.2.4	34.96.71.22
Apr 24, 2024 19:31:42.394758940 CEST	443	50074	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.394967079 CEST	443	50074	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.395039082 CEST	50074	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.395320892 CEST	50074	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.395342112 CEST	443	50074	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.395356894 CEST	50074	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.395392895 CEST	50074	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.397628069 CEST	50091	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.397680998 CEST	443	50091	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.397758007 CEST	50091	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.398070097 CEST	50091	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.398078918 CEST	443	50091	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.402113914 CEST	443	50075	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.402261972 CEST	443	50075	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.402334929 CEST	50075	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:42.402946949 CEST	50075	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:42.402961969 CEST	443	50075	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.409668922 CEST	443	50076	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.409845114 CEST	443	50076	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.409898043 CEST	50076	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:42.422913074 CEST	50076	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:42.422979116 CEST	443	50076	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.423321962 CEST	443	50087	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:42.425890923 CEST	50087	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:42.425914049 CEST	443	50087	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:42.427113056 CEST	443	50087	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:42.427114964 CEST	443	50088	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:42.429598093 CEST	50087	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:42.429759026 CEST	50088	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:42.429768085 CEST	443	50088	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:42.429799080 CEST	443	50087	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:42.429857969 CEST	50087	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:42.429948092 CEST	443	50087	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:42.430938005 CEST	443	50088	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:42.432667971 CEST	50088	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:42.432804108 CEST	50088	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:42.432843924 CEST	443	50088	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:42.440337896 CEST	443	50089	18.173.121.47	192.168.2.4
Apr 24, 2024 19:31:42.440562010 CEST	50089	443	192.168.2.4	18.173.121.47
Apr 24, 2024 19:31:42.440598011 CEST	443	50089	18.173.121.47	192.168.2.4
Apr 24, 2024 19:31:42.441792011 CEST	443	50089	18.173.121.47	192.168.2.4
Apr 24, 2024 19:31:42.441894054 CEST	50089	443	192.168.2.4	18.173.121.47
Apr 24, 2024 19:31:42.443348885 CEST	50089	443	192.168.2.4	18.173.121.47
Apr 24, 2024 19:31:42.443419933 CEST	443	50089	18.173.121.47	192.168.2.4
Apr 24, 2024 19:31:42.444020987 CEST	50089	443	192.168.2.4	18.173.121.47
Apr 24, 2024 19:31:42.444036007 CEST	443	50089	18.173.121.47	192.168.2.4
Apr 24, 2024 19:31:42.465035915 CEST	443	50077	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.465131044 CEST	443	50077	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.465190887 CEST	50077	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.465437889 CEST	50077	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.465451002 CEST	443	50077	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.465471029 CEST	50077	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.465536118 CEST	50077	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.467678070 CEST	50092	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.467739105 CEST	443	50092	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.467840910 CEST	50092	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.468067884 CEST	50092	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.468096972 CEST	443	50092	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.473058939 CEST	443	50078	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.473176003 CEST	443	50078	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.473378897 CEST	50078	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:42.473720074 CEST	50078	443	192.168.2.4	142.250.101.154
Apr 24, 2024 19:31:42.473740101 CEST	443	50078	142.250.101.154	192.168.2.4
Apr 24, 2024 19:31:42.474991083 CEST	50088	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:42.475127935 CEST	50087	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:42.486028910 CEST	50089	443	192.168.2.4	18.173.121.47
Apr 24, 2024 19:31:42.604818106 CEST	443	50084	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:42.605140924 CEST	443	50084	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:42.605207920 CEST	50084	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:42.605941057 CEST	50084	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:42.605972052 CEST	443	50084	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:42.610677958 CEST	50093	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:42.610729933 CEST	443	50093	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:42.610811949 CEST	50093	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:42.611063004 CEST	50093	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:42.611082077 CEST	443	50093	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:42.762859106 CEST	443	50091	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.763195992 CEST	50091	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.763227940 CEST	443	50091	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.764480114 CEST	443	50091	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.764904022 CEST	50091	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.765075922 CEST	50091	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.765077114 CEST	50091	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.765090942 CEST	443	50091	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.765213966 CEST	443	50091	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.768150091 CEST	443	50086	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:42.768382072 CEST	443	50086	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:42.768448114 CEST	50086	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:42.769149065 CEST	50086	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:42.769172907 CEST	443	50086	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:42.775497913 CEST	50096	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:42.775522947 CEST	443	50096	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:42.775619984 CEST	50096	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:42.775825977 CEST	50096	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:42.775840044 CEST	443	50096	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:42.783077002 CEST	50098	443	192.168.2.4	18.239.199.34
Apr 24, 2024 19:31:42.783093929 CEST	443	50098	18.239.199.34	192.168.2.4
Apr 24, 2024 19:31:42.783154964 CEST	50098	443	192.168.2.4	18.239.199.34
Apr 24, 2024 19:31:42.783360004 CEST	50098	443	192.168.2.4	18.239.199.34
Apr 24, 2024 19:31:42.783375978 CEST	443	50098	18.239.199.34	192.168.2.4
Apr 24, 2024 19:31:42.807512999 CEST	50091	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.825458050 CEST	443	50092	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.825726986 CEST	50092	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.825763941 CEST	443	50092	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.826097965 CEST	443	50092	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.826414108 CEST	50092	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.826481104 CEST	443	50092	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.826582909 CEST	50092	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:42.852679968 CEST	443	50087	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:42.852858067 CEST	443	50087	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:42.852925062 CEST	50087	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:42.853369951 CEST	50087	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:42.853384972 CEST	443	50087	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:42.855561972 CEST	443	50088	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:42.855998993 CEST	443	50088	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:42.856120110 CEST	50088	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:42.856440067 CEST	50088	443	192.168.2.4	3.225.21.46
Apr 24, 2024 19:31:42.856452942 CEST	443	50088	3.225.21.46	192.168.2.4
Apr 24, 2024 19:31:42.860172987 CEST	50099	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:42.860222101 CEST	443	50099	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:42.860302925 CEST	50099	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:42.860713005 CEST	50099	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:42.860728979 CEST	443	50099	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:42.861521959 CEST	50100	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:42.861548901 CEST	443	50100	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:42.861640930 CEST	50100	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:42.861816883 CEST	50100	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:42.861825943 CEST	443	50100	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:42.872154951 CEST	443	50092	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:42.890292883 CEST	443	50085	34.96.71.22	192.168.2.4
Apr 24, 2024 19:31:42.890671968 CEST	443	50085	34.96.71.22	192.168.2.4
Apr 24, 2024 19:31:42.890741110 CEST	50085	443	192.168.2.4	34.96.71.22
Apr 24, 2024 19:31:42.891315937 CEST	50085	443	192.168.2.4	34.96.71.22
Apr 24, 2024 19:31:42.891326904 CEST	443	50085	34.96.71.22	192.168.2.4
Apr 24, 2024 19:31:42.924245119 CEST	443	50089	18.173.121.47	192.168.2.4
Apr 24, 2024 19:31:42.932185888 CEST	443	50089	18.173.121.47	192.168.2.4
Apr 24, 2024 19:31:42.932199955 CEST	443	50089	18.173.121.47	192.168.2.4
Apr 24, 2024 19:31:42.932236910 CEST	443	50089	18.173.121.47	192.168.2.4
Apr 24, 2024 19:31:42.932265997 CEST	50089	443	192.168.2.4	18.173.121.47
Apr 24, 2024 19:31:42.932284117 CEST	443	50089	18.173.121.47	192.168.2.4
Apr 24, 2024 19:31:42.932329893 CEST	50089	443	192.168.2.4	18.173.121.47
Apr 24, 2024 19:31:42.935610056 CEST	443	50089	18.173.121.47	192.168.2.4
Apr 24, 2024 19:31:42.935723066 CEST	443	50089	18.173.121.47	192.168.2.4
Apr 24, 2024 19:31:42.935837030 CEST	50089	443	192.168.2.4	18.173.121.47
Apr 24, 2024 19:31:42.935928106 CEST	50089	443	192.168.2.4	18.173.121.47
Apr 24, 2024 19:31:42.935939074 CEST	443	50089	18.173.121.47	192.168.2.4
Apr 24, 2024 19:31:42.936580896 CEST	443	50093	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:42.942112923 CEST	50093	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:42.942142963 CEST	443	50093	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:42.942537069 CEST	443	50093	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:42.942920923 CEST	50093	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:42.942984104 CEST	443	50093	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:42.943079948 CEST	50093	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:42.984119892 CEST	443	50093	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:43.106342077 CEST	443	50096	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:43.107618093 CEST	50096	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:43.107631922 CEST	443	50096	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:43.109081984 CEST	443	50096	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:43.109564066 CEST	50096	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:43.109652042 CEST	443	50096	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:43.109896898 CEST	50096	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:43.129551888 CEST	443	50091	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:43.129978895 CEST	443	50091	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:43.130054951 CEST	50091	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:43.139177084 CEST	443	50098	18.239.199.34	192.168.2.4
Apr 24, 2024 19:31:43.140522003 CEST	50098	443	192.168.2.4	18.239.199.34
Apr 24, 2024 19:31:43.140533924 CEST	443	50098	18.239.199.34	192.168.2.4
Apr 24, 2024 19:31:43.141041040 CEST	443	50098	18.239.199.34	192.168.2.4
Apr 24, 2024 19:31:43.141541004 CEST	50098	443	192.168.2.4	18.239.199.34
Apr 24, 2024 19:31:43.141625881 CEST	443	50098	18.239.199.34	192.168.2.4
Apr 24, 2024 19:31:43.142079115 CEST	50098	443	192.168.2.4	18.239.199.34
Apr 24, 2024 19:31:43.143871069 CEST	50091	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:43.143914938 CEST	443	50091	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:43.152118921 CEST	443	50096	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:43.184118986 CEST	443	50098	18.239.199.34	192.168.2.4
Apr 24, 2024 19:31:43.189129114 CEST	443	50092	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:43.189270020 CEST	443	50092	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:43.189538956 CEST	50092	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:43.202241898 CEST	50092	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:43.202306032 CEST	443	50092	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:43.257071018 CEST	443	50093	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:43.257181883 CEST	443	50093	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:43.257333040 CEST	50093	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:43.257929087 CEST	50093	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:43.257951021 CEST	443	50093	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:43.293224096 CEST	443	50100	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:43.293716908 CEST	50100	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:43.293730974 CEST	443	50100	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:43.294086933 CEST	443	50100	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:43.294593096 CEST	50100	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:43.294595957 CEST	443	50099	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:43.294661045 CEST	443	50100	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:43.294805050 CEST	50100	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:43.294833899 CEST	443	50100	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:43.295186043 CEST	50099	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:43.295217991 CEST	443	50099	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:43.296441078 CEST	443	50099	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:43.296983004 CEST	50099	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:43.297135115 CEST	50099	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:43.297178984 CEST	443	50099	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:43.339320898 CEST	50099	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:43.451606035 CEST	443	50096	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:43.451788902 CEST	443	50096	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:43.451884031 CEST	50096	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:43.452089071 CEST	50096	443	192.168.2.4	18.154.144.27
Apr 24, 2024 19:31:43.452107906 CEST	443	50096	18.154.144.27	192.168.2.4
Apr 24, 2024 19:31:43.539594889 CEST	50103	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:43.539653063 CEST	443	50103	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:43.539874077 CEST	50103	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:43.540211916 CEST	50103	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:43.540242910 CEST	443	50103	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:43.542674065 CEST	50104	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:43.542716980 CEST	443	50104	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:43.542779922 CEST	50104	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:43.542989016 CEST	50104	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:43.543003082 CEST	443	50104	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:43.617352009 CEST	50107	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:43.617396116 CEST	443	50107	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:43.617501020 CEST	50107	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:43.617839098 CEST	50108	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:43.617861032 CEST	443	50108	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:43.617984056 CEST	50107	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:43.617995024 CEST	443	50107	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:43.618127108 CEST	50108	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:43.618201971 CEST	50108	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:43.618215084 CEST	443	50108	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:43.724586964 CEST	443	50099	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:43.724793911 CEST	443	50099	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:43.724874020 CEST	50099	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:43.725018978 CEST	443	50100	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:43.725095987 CEST	443	50100	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:43.725142002 CEST	50100	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:43.727247000 CEST	50099	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:43.727274895 CEST	443	50099	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:43.728847027 CEST	50100	443	192.168.2.4	100.26.119.80
Apr 24, 2024 19:31:43.728859901 CEST	443	50100	100.26.119.80	192.168.2.4
Apr 24, 2024 19:31:43.743067980 CEST	443	50098	18.239.199.34	192.168.2.4
Apr 24, 2024 19:31:43.743325949 CEST	443	50098	18.239.199.34	192.168.2.4
Apr 24, 2024 19:31:43.743396997 CEST	50098	443	192.168.2.4	18.239.199.34
Apr 24, 2024 19:31:43.744018078 CEST	50098	443	192.168.2.4	18.239.199.34
Apr 24, 2024 19:31:43.744033098 CEST	443	50098	18.239.199.34	192.168.2.4
Apr 24, 2024 19:31:43.748616934 CEST	50109	443	192.168.2.4	18.239.199.122
Apr 24, 2024 19:31:43.748707056 CEST	443	50109	18.239.199.122	192.168.2.4
Apr 24, 2024 19:31:43.748806000 CEST	50109	443	192.168.2.4	18.239.199.122
Apr 24, 2024 19:31:43.749267101 CEST	50109	443	192.168.2.4	18.239.199.122
Apr 24, 2024 19:31:43.749285936 CEST	443	50109	18.239.199.122	192.168.2.4
Apr 24, 2024 19:31:43.863293886 CEST	443	50103	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:43.863378048 CEST	443	50104	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:43.863883018 CEST	50103	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:43.863923073 CEST	443	50103	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:43.864202976 CEST	50104	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:43.864228964 CEST	443	50104	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:43.864336014 CEST	443	50103	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:43.864598036 CEST	443	50104	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:43.865081072 CEST	50103	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:43.865169048 CEST	443	50103	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:43.865995884 CEST	50104	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:43.866067886 CEST	443	50104	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:43.866763115 CEST	50103	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:43.866998911 CEST	50104	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:43.908138990 CEST	443	50103	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:43.908138037 CEST	443	50104	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:43.979796886 CEST	50110	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:43.979857922 CEST	443	50110	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:43.979938030 CEST	50110	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:43.980226994 CEST	50110	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:43.980249882 CEST	443	50110	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:43.983782053 CEST	50111	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:43.983818054 CEST	443	50111	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:43.984078884 CEST	50111	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:43.984703064 CEST	50111	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:43.984716892 CEST	443	50111	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:44.050484896 CEST	443	50107	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:44.051763058 CEST	50107	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:44.051800013 CEST	443	50107	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:44.052413940 CEST	443	50107	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:44.053275108 CEST	50107	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:44.053359985 CEST	443	50107	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:44.053934097 CEST	50107	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:44.096174955 CEST	443	50107	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:44.100409985 CEST	443	50109	18.239.199.122	192.168.2.4
Apr 24, 2024 19:31:44.106817007 CEST	50109	443	192.168.2.4	18.239.199.122
Apr 24, 2024 19:31:44.106874943 CEST	443	50109	18.239.199.122	192.168.2.4
Apr 24, 2024 19:31:44.107563972 CEST	443	50109	18.239.199.122	192.168.2.4
Apr 24, 2024 19:31:44.110527039 CEST	50109	443	192.168.2.4	18.239.199.122
Apr 24, 2024 19:31:44.110644102 CEST	443	50109	18.239.199.122	192.168.2.4
Apr 24, 2024 19:31:44.111470938 CEST	50109	443	192.168.2.4	18.239.199.122
Apr 24, 2024 19:31:44.156142950 CEST	443	50109	18.239.199.122	192.168.2.4
Apr 24, 2024 19:31:44.182910919 CEST	443	50103	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:44.183037043 CEST	443	50103	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:44.183147907 CEST	443	50104	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:44.183223009 CEST	50103	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:44.183228970 CEST	443	50104	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:44.183289051 CEST	50104	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:44.184873104 CEST	50104	443	192.168.2.4	146.75.92.157
Apr 24, 2024 19:31:44.184894085 CEST	443	50104	146.75.92.157	192.168.2.4
Apr 24, 2024 19:31:44.232299089 CEST	50103	443	192.168.2.4	151.101.193.140
Apr 24, 2024 19:31:44.232338905 CEST	443	50103	151.101.193.140	192.168.2.4
Apr 24, 2024 19:31:44.234378099 CEST	443	50108	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:44.235485077 CEST	50112	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:44.235517025 CEST	443	50112	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:44.235616922 CEST	50112	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:44.238687992 CEST	50108	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:44.238698006 CEST	443	50108	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:44.239357948 CEST	443	50108	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:44.239485979 CEST	50112	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:44.239500046 CEST	443	50112	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:44.241683960 CEST	50113	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:44.241704941 CEST	443	50113	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:44.241869926 CEST	50113	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:44.247071028 CEST	50108	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:44.247190952 CEST	443	50108	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:44.247849941 CEST	50113	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:44.247859955 CEST	443	50113	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:44.250646114 CEST	50108	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:44.259025097 CEST	50114	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:44.259124041 CEST	443	50114	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:44.259463072 CEST	50114	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:44.260771036 CEST	50114	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:44.260802031 CEST	443	50114	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:44.296108007 CEST	443	50108	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:44.340969086 CEST	443	50110	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:44.343697071 CEST	443	50111	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:44.344027996 CEST	50110	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:44.344082117 CEST	443	50110	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:44.344438076 CEST	50111	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:44.344455957 CEST	443	50111	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:44.344861984 CEST	443	50111	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:44.345016003 CEST	443	50110	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:44.345590115 CEST	50111	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:44.345662117 CEST	443	50111	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:44.346353054 CEST	50111	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:44.347368956 CEST	50110	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:44.347589970 CEST	443	50110	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:44.347994089 CEST	50110	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:44.386276960 CEST	50115	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:44.386310101 CEST	443	50115	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:44.386384964 CEST	50115	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:44.387795925 CEST	50115	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:44.387806892 CEST	443	50115	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:44.388158083 CEST	443	50110	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:44.392115116 CEST	443	50111	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:44.431862116 CEST	50116	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:44.431910992 CEST	443	50116	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:44.432003975 CEST	50116	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:44.433310032 CEST	50116	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:44.433330059 CEST	443	50116	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:44.510519028 CEST	443	50109	18.239.199.122	192.168.2.4
Apr 24, 2024 19:31:44.510654926 CEST	443	50109	18.239.199.122	192.168.2.4
Apr 24, 2024 19:31:44.510720015 CEST	50109	443	192.168.2.4	18.239.199.122
Apr 24, 2024 19:31:44.524121046 CEST	443	50107	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:44.524207115 CEST	443	50107	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:44.524338007 CEST	50107	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:44.583424091 CEST	50109	443	192.168.2.4	18.239.199.122
Apr 24, 2024 19:31:44.583463907 CEST	443	50109	18.239.199.122	192.168.2.4
Apr 24, 2024 19:31:44.585208893 CEST	50107	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:44.585247040 CEST	443	50107	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:44.587538958 CEST	443	50114	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:44.588524103 CEST	50114	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:44.588548899 CEST	443	50114	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:44.589046001 CEST	443	50114	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:44.590399981 CEST	50114	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:44.590497017 CEST	443	50114	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:44.590681076 CEST	50114	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:44.595789909 CEST	443	50112	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:44.603074074 CEST	443	50113	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:44.609165907 CEST	50112	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:44.609175920 CEST	443	50112	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:44.609394073 CEST	50113	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:44.609406948 CEST	443	50113	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:44.609733105 CEST	443	50112	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:44.609868050 CEST	443	50113	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:44.610464096 CEST	50112	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:44.610553026 CEST	443	50112	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:44.610775948 CEST	50113	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:44.610872030 CEST	443	50113	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:44.611063004 CEST	50112	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:44.611216068 CEST	50113	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:44.624593973 CEST	50117	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:44.624639034 CEST	443	50117	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:44.624742031 CEST	50117	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:44.625494003 CEST	50117	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:44.625513077 CEST	443	50117	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:44.632121086 CEST	443	50114	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:44.638462067 CEST	50118	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:44.638508081 CEST	443	50118	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:44.638590097 CEST	50118	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:44.639280081 CEST	50118	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:44.639292002 CEST	443	50118	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:44.656112909 CEST	443	50113	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:44.656132936 CEST	443	50112	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:44.702115059 CEST	443	50110	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:44.702328920 CEST	443	50110	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:44.702403069 CEST	50110	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:44.707334042 CEST	443	50111	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:44.707415104 CEST	443	50111	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:44.707483053 CEST	50111	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:44.708992958 CEST	443	50115	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:44.709377050 CEST	50115	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:44.709393024 CEST	443	50115	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:44.709738970 CEST	443	50115	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:44.711720943 CEST	50115	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:44.711798906 CEST	443	50115	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:44.712330103 CEST	50115	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:44.756122112 CEST	443	50115	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:44.813312054 CEST	443	50116	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:44.843733072 CEST	50116	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:44.843769073 CEST	443	50116	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:44.845082045 CEST	443	50116	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:44.853746891 CEST	443	50108	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:44.853955030 CEST	443	50108	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:44.854024887 CEST	50108	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:44.869808912 CEST	50116	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:44.870076895 CEST	443	50116	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:44.883882999 CEST	50108	443	192.168.2.4	67.220.226.234
Apr 24, 2024 19:31:44.883899927 CEST	443	50108	67.220.226.234	192.168.2.4
Apr 24, 2024 19:31:44.884526968 CEST	50110	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:44.884572983 CEST	443	50110	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:44.886306047 CEST	50111	443	192.168.2.4	74.125.137.157
Apr 24, 2024 19:31:44.886334896 CEST	443	50111	74.125.137.157	192.168.2.4
Apr 24, 2024 19:31:44.896413088 CEST	50116	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:44.906311989 CEST	443	50114	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:44.906485081 CEST	443	50114	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:44.906548023 CEST	50114	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:44.940124035 CEST	443	50116	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:44.953572989 CEST	443	50112	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:44.953672886 CEST	443	50112	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:44.953696966 CEST	50112	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:44.953761101 CEST	50112	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:44.956084967 CEST	50119	443	192.168.2.4	3.163.125.9
Apr 24, 2024 19:31:44.956129074 CEST	443	50119	3.163.125.9	192.168.2.4
Apr 24, 2024 19:31:44.956207991 CEST	50119	443	192.168.2.4	3.163.125.9
Apr 24, 2024 19:31:44.963772058 CEST	443	50113	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:44.963843107 CEST	50113	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:44.963854074 CEST	443	50113	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:44.963879108 CEST	443	50113	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:44.963963985 CEST	50113	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:44.972280025 CEST	443	50117	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:44.986387968 CEST	50119	443	192.168.2.4	3.163.125.9
Apr 24, 2024 19:31:44.986432076 CEST	443	50119	3.163.125.9	192.168.2.4
Apr 24, 2024 19:31:44.987196922 CEST	50117	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:44.987225056 CEST	443	50117	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:44.987713099 CEST	443	50117	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:44.991316080 CEST	50117	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:44.991435051 CEST	443	50117	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:44.992599010 CEST	50117	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:44.995120049 CEST	50112	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:44.995135069 CEST	443	50112	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.001982927 CEST	50114	443	192.168.2.4	151.101.129.140
Apr 24, 2024 19:31:45.002015114 CEST	443	50114	151.101.129.140	192.168.2.4
Apr 24, 2024 19:31:45.003477097 CEST	50113	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.003492117 CEST	443	50113	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.040124893 CEST	443	50117	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:45.068782091 CEST	443	50118	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:45.069092035 CEST	50118	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:45.069117069 CEST	443	50118	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:45.069483042 CEST	443	50118	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:45.069916964 CEST	50118	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:45.069982052 CEST	443	50118	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:45.070133924 CEST	50118	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:45.074233055 CEST	443	50115	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:45.074325085 CEST	443	50115	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:45.074425936 CEST	50115	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:45.074937105 CEST	50115	443	192.168.2.4	104.254.150.241
Apr 24, 2024 19:31:45.074958086 CEST	443	50115	104.254.150.241	192.168.2.4
Apr 24, 2024 19:31:45.076049089 CEST	50121	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.076091051 CEST	443	50121	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.076234102 CEST	50121	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.076518059 CEST	50121	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.076534986 CEST	443	50121	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.116126060 CEST	443	50118	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:45.169579983 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:45.169680119 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:45.169776917 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:45.170008898 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:45.170047045 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:45.170608997 CEST	50123	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.170640945 CEST	443	50123	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.170732021 CEST	50123	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.170948982 CEST	50123	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.170963049 CEST	443	50123	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.176331997 CEST	50124	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.176373959 CEST	443	50124	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.176448107 CEST	50124	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.176805019 CEST	50124	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.176821947 CEST	443	50124	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.193958044 CEST	443	50116	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:45.194046021 CEST	443	50116	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:45.194106102 CEST	50116	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:45.195791960 CEST	50116	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:45.195813894 CEST	443	50116	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:45.197534084 CEST	50125	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.197592974 CEST	443	50125	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.197690010 CEST	50125	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.197891951 CEST	50125	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.197911978 CEST	443	50125	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.313903093 CEST	443	50119	3.163.125.9	192.168.2.4
Apr 24, 2024 19:31:45.314414978 CEST	50119	443	192.168.2.4	3.163.125.9
Apr 24, 2024 19:31:45.314476967 CEST	443	50119	3.163.125.9	192.168.2.4
Apr 24, 2024 19:31:45.314937115 CEST	443	50119	3.163.125.9	192.168.2.4
Apr 24, 2024 19:31:45.315316916 CEST	50119	443	192.168.2.4	3.163.125.9
Apr 24, 2024 19:31:45.315393925 CEST	443	50119	3.163.125.9	192.168.2.4
Apr 24, 2024 19:31:45.315478086 CEST	50119	443	192.168.2.4	3.163.125.9
Apr 24, 2024 19:31:45.356128931 CEST	443	50119	3.163.125.9	192.168.2.4
Apr 24, 2024 19:31:45.377044916 CEST	443	50117	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:45.377146006 CEST	443	50117	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:45.377226114 CEST	50117	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:45.378221035 CEST	50117	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:45.378254890 CEST	443	50117	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:45.379709005 CEST	50126	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.379741907 CEST	443	50126	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.379868984 CEST	50126	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.380348921 CEST	50126	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.380367041 CEST	443	50126	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.407066107 CEST	443	50121	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.407427073 CEST	50121	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.407463074 CEST	443	50121	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.407881021 CEST	443	50121	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.408226013 CEST	50121	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.408293962 CEST	443	50121	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.408391953 CEST	50121	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.456129074 CEST	443	50121	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.517834902 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:45.518306017 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:45.518354893 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:45.519352913 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:45.519428015 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:45.520652056 CEST	443	50125	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.521704912 CEST	50125	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.521770954 CEST	443	50125	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.521939039 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:45.522011995 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:45.522134066 CEST	443	50125	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.522624969 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:45.522644043 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:45.523718119 CEST	50125	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.523808002 CEST	443	50125	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.523996115 CEST	50125	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.527971029 CEST	443	50123	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.531443119 CEST	50123	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.531455994 CEST	443	50123	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.532387972 CEST	443	50123	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.532524109 CEST	50123	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.533482075 CEST	50123	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.533546925 CEST	443	50123	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.533744097 CEST	50123	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.533760071 CEST	443	50123	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.539382935 CEST	443	50124	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.541058064 CEST	50124	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.541081905 CEST	443	50124	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.541419983 CEST	443	50118	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:45.541587114 CEST	443	50118	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:45.541676998 CEST	50118	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:45.545007944 CEST	443	50124	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.545111895 CEST	50124	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.545595884 CEST	50124	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.545768976 CEST	443	50124	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.545798063 CEST	50124	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.548871040 CEST	50118	443	192.168.2.4	52.200.154.95
Apr 24, 2024 19:31:45.548886061 CEST	443	50118	52.200.154.95	192.168.2.4
Apr 24, 2024 19:31:45.564157963 CEST	443	50125	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.570838928 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:45.583867073 CEST	50123	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.588476896 CEST	50124	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.588498116 CEST	443	50124	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.631457090 CEST	50124	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.662812948 CEST	443	50119	3.163.125.9	192.168.2.4
Apr 24, 2024 19:31:45.662925959 CEST	443	50119	3.163.125.9	192.168.2.4
Apr 24, 2024 19:31:45.663012981 CEST	50119	443	192.168.2.4	3.163.125.9
Apr 24, 2024 19:31:45.690119028 CEST	50127	443	192.168.2.4	52.95.118.179
Apr 24, 2024 19:31:45.690167904 CEST	443	50127	52.95.118.179	192.168.2.4
Apr 24, 2024 19:31:45.690362930 CEST	50127	443	192.168.2.4	52.95.118.179
Apr 24, 2024 19:31:45.690804958 CEST	50127	443	192.168.2.4	52.95.118.179
Apr 24, 2024 19:31:45.690818071 CEST	443	50127	52.95.118.179	192.168.2.4
Apr 24, 2024 19:31:45.691663980 CEST	50128	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.691709042 CEST	443	50128	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.691881895 CEST	50128	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.697216988 CEST	50128	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.697242022 CEST	443	50128	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.699215889 CEST	50129	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.699240923 CEST	443	50129	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.699407101 CEST	50129	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.699686050 CEST	50129	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.699697018 CEST	443	50129	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.702974081 CEST	50119	443	192.168.2.4	3.163.125.9
Apr 24, 2024 19:31:45.702991009 CEST	443	50119	3.163.125.9	192.168.2.4
Apr 24, 2024 19:31:45.703392982 CEST	443	50126	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.705439091 CEST	50126	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.705461025 CEST	443	50126	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.706548929 CEST	443	50126	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.706640959 CEST	50126	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.707092047 CEST	50126	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.707154036 CEST	443	50126	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.707288027 CEST	50126	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.708934069 CEST	50130	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.709014893 CEST	443	50130	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.709115028 CEST	50130	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.709491968 CEST	50130	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.709525108 CEST	443	50130	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.710378885 CEST	50131	443	192.168.2.4	104.244.42.197
Apr 24, 2024 19:31:45.710403919 CEST	443	50131	104.244.42.197	192.168.2.4
Apr 24, 2024 19:31:45.710656881 CEST	50131	443	192.168.2.4	104.244.42.197
Apr 24, 2024 19:31:45.710988998 CEST	50131	443	192.168.2.4	104.244.42.197
Apr 24, 2024 19:31:45.711000919 CEST	443	50131	104.244.42.197	192.168.2.4
Apr 24, 2024 19:31:45.713087082 CEST	50132	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:45.713139057 CEST	443	50132	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:45.713485003 CEST	50132	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:45.713706970 CEST	50132	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:45.713723898 CEST	443	50132	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:45.726469040 CEST	443	50121	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.726628065 CEST	443	50121	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.726680040 CEST	50121	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.735567093 CEST	50133	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:45.735595942 CEST	443	50133	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:45.735869884 CEST	50133	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:45.735871077 CEST	50121	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.735888958 CEST	443	50121	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.738641977 CEST	50133	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:45.738652945 CEST	443	50133	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:45.752113104 CEST	443	50126	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.755376101 CEST	50126	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.755383015 CEST	443	50126	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.791313887 CEST	50135	443	192.168.2.4	104.254.151.68
Apr 24, 2024 19:31:45.791347980 CEST	443	50135	104.254.151.68	192.168.2.4
Apr 24, 2024 19:31:45.791423082 CEST	50135	443	192.168.2.4	104.254.151.68
Apr 24, 2024 19:31:45.791701078 CEST	50135	443	192.168.2.4	104.254.151.68
Apr 24, 2024 19:31:45.791711092 CEST	443	50135	104.254.151.68	192.168.2.4
Apr 24, 2024 19:31:45.799578905 CEST	50136	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:45.799607992 CEST	443	50136	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:45.799748898 CEST	50136	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:45.799948931 CEST	50136	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:45.799959898 CEST	443	50136	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:45.805423975 CEST	50126	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.807104111 CEST	50137	443	192.168.2.4	3.163.125.74
Apr 24, 2024 19:31:45.807137966 CEST	443	50137	3.163.125.74	192.168.2.4
Apr 24, 2024 19:31:45.807477951 CEST	50137	443	192.168.2.4	3.163.125.74
Apr 24, 2024 19:31:45.808012962 CEST	50137	443	192.168.2.4	3.163.125.74
Apr 24, 2024 19:31:45.808026075 CEST	443	50137	3.163.125.74	192.168.2.4
Apr 24, 2024 19:31:45.815648079 CEST	50139	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.815665960 CEST	443	50139	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.815900087 CEST	50139	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.816467047 CEST	50139	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.816474915 CEST	443	50139	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.871587038 CEST	443	50125	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.871635914 CEST	443	50125	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.871712923 CEST	443	50125	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.871788025 CEST	50125	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.871850014 CEST	443	50125	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.871943951 CEST	443	50125	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.872009993 CEST	50125	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.873718023 CEST	50125	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.873753071 CEST	443	50125	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.882046938 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:45.882074118 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:45.882081985 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:45.882113934 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:45.882141113 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:45.882186890 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:45.882268906 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:45.882307053 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:45.882333040 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:45.883148909 CEST	50140	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.883208990 CEST	443	50140	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.883332968 CEST	50140	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.883747101 CEST	50140	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:45.883780003 CEST	443	50140	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:45.886940002 CEST	443	50123	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.887011051 CEST	443	50123	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.887069941 CEST	50123	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.887681961 CEST	50123	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.887681961 CEST	50123	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.887696981 CEST	443	50123	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.887835026 CEST	50123	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.898329020 CEST	443	50124	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.898521900 CEST	443	50124	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.898649931 CEST	50124	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.899544001 CEST	50124	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:45.899558067 CEST	443	50124	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:45.910980940 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:45.910996914 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:45.911123037 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:45.911154985 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:45.911289930 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.023399115 CEST	443	50126	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.023502111 CEST	443	50126	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.023642063 CEST	50126	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.031866074 CEST	443	50130	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.049325943 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.049348116 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.049413919 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.049432993 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.049448967 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.049484015 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.051378965 CEST	443	50128	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:46.058165073 CEST	443	50129	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:46.060561895 CEST	50129	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:46.060585976 CEST	443	50129	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:46.060825109 CEST	50128	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:46.060851097 CEST	443	50128	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:46.060944080 CEST	50130	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.060973883 CEST	443	50130	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.061059952 CEST	443	50129	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:46.061243057 CEST	443	50128	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:46.061405897 CEST	443	50130	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.061522007 CEST	50141	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:46.061546087 CEST	443	50141	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:46.061851025 CEST	50141	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:46.061980009 CEST	50128	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:46.062032938 CEST	443	50128	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:46.062938929 CEST	50129	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:46.063080072 CEST	443	50129	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:46.063385963 CEST	50130	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.063456059 CEST	443	50130	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.063740969 CEST	50141	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:46.063751936 CEST	443	50141	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:46.064145088 CEST	50128	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:46.064208031 CEST	50129	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:46.064259052 CEST	50130	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.081708908 CEST	443	50133	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:46.083152056 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.083168983 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.083245993 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.083259106 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.083302975 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.085772038 CEST	443	50131	104.244.42.197	192.168.2.4
Apr 24, 2024 19:31:46.088205099 CEST	443	50132	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:46.091187000 CEST	50132	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:46.091202021 CEST	443	50132	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:46.091442108 CEST	50131	443	192.168.2.4	104.244.42.197
Apr 24, 2024 19:31:46.091454983 CEST	443	50131	104.244.42.197	192.168.2.4
Apr 24, 2024 19:31:46.091473103 CEST	443	50132	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:46.091872931 CEST	443	50131	104.244.42.197	192.168.2.4
Apr 24, 2024 19:31:46.108176947 CEST	443	50130	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.112106085 CEST	443	50129	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:46.112114906 CEST	443	50128	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:46.112322092 CEST	443	50135	104.254.151.68	192.168.2.4
Apr 24, 2024 19:31:46.114177942 CEST	50133	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:46.114185095 CEST	443	50133	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:46.114478111 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.114511967 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.114548922 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.114556074 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.114592075 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.114628077 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.114680052 CEST	443	50133	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:46.116699934 CEST	50135	443	192.168.2.4	104.254.151.68
Apr 24, 2024 19:31:46.116710901 CEST	443	50135	104.254.151.68	192.168.2.4
Apr 24, 2024 19:31:46.117065907 CEST	443	50135	104.254.151.68	192.168.2.4
Apr 24, 2024 19:31:46.120970011 CEST	50131	443	192.168.2.4	104.244.42.197
Apr 24, 2024 19:31:46.121093035 CEST	443	50131	104.244.42.197	192.168.2.4
Apr 24, 2024 19:31:46.121800900 CEST	50132	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:46.121866941 CEST	443	50132	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:46.122158051 CEST	50131	443	192.168.2.4	104.244.42.197
Apr 24, 2024 19:31:46.122260094 CEST	50132	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:46.124672890 CEST	50135	443	192.168.2.4	104.254.151.68
Apr 24, 2024 19:31:46.124782085 CEST	443	50135	104.254.151.68	192.168.2.4
Apr 24, 2024 19:31:46.125165939 CEST	50133	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:46.125233889 CEST	443	50133	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:46.125413895 CEST	50135	443	192.168.2.4	104.254.151.68
Apr 24, 2024 19:31:46.125611067 CEST	50133	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:46.137047052 CEST	443	50137	3.163.125.74	192.168.2.4
Apr 24, 2024 19:31:46.137396097 CEST	50137	443	192.168.2.4	3.163.125.74
Apr 24, 2024 19:31:46.137414932 CEST	443	50137	3.163.125.74	192.168.2.4
Apr 24, 2024 19:31:46.137865067 CEST	443	50137	3.163.125.74	192.168.2.4
Apr 24, 2024 19:31:46.138351917 CEST	50137	443	192.168.2.4	3.163.125.74
Apr 24, 2024 19:31:46.139622927 CEST	50137	443	192.168.2.4	3.163.125.74
Apr 24, 2024 19:31:46.140336037 CEST	443	50137	3.163.125.74	192.168.2.4
Apr 24, 2024 19:31:46.141844988 CEST	443	50139	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.142075062 CEST	50139	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.142081022 CEST	443	50139	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.142525911 CEST	443	50139	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.143179893 CEST	50139	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.143246889 CEST	443	50139	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.143568039 CEST	50139	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.164114952 CEST	443	50132	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:46.164114952 CEST	443	50131	104.244.42.197	192.168.2.4
Apr 24, 2024 19:31:46.168113947 CEST	443	50135	104.254.151.68	192.168.2.4
Apr 24, 2024 19:31:46.172106981 CEST	443	50133	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:46.184024096 CEST	443	50136	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:46.184113979 CEST	443	50139	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.184792995 CEST	50136	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:46.184807062 CEST	443	50136	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:46.185132027 CEST	443	50136	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:46.185671091 CEST	50136	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:46.185719013 CEST	443	50136	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:46.186194897 CEST	50136	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:46.194698095 CEST	50137	443	192.168.2.4	3.163.125.74
Apr 24, 2024 19:31:46.199048996 CEST	50126	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.199065924 CEST	443	50126	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.208973885 CEST	443	50140	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.209239006 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.209259987 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.209331989 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.209345102 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.209456921 CEST	50140	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.209456921 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.209466934 CEST	443	50140	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.209918022 CEST	443	50140	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.211410046 CEST	50140	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.211481094 CEST	443	50140	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.212090969 CEST	50140	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.228123903 CEST	443	50136	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:46.233894110 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.233911037 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.233987093 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.233997107 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.234041929 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.256112099 CEST	443	50140	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.256895065 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.256913900 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.257014036 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.257020950 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.257076979 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.281619072 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.281636000 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.281707048 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.281724930 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.281768084 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.294703007 CEST	443	50127	52.95.118.179	192.168.2.4
Apr 24, 2024 19:31:46.306078911 CEST	50127	443	192.168.2.4	52.95.118.179
Apr 24, 2024 19:31:46.306096077 CEST	443	50127	52.95.118.179	192.168.2.4
Apr 24, 2024 19:31:46.306660891 CEST	443	50127	52.95.118.179	192.168.2.4
Apr 24, 2024 19:31:46.307195902 CEST	50127	443	192.168.2.4	52.95.118.179
Apr 24, 2024 19:31:46.307269096 CEST	443	50127	52.95.118.179	192.168.2.4
Apr 24, 2024 19:31:46.307482958 CEST	50127	443	192.168.2.4	52.95.118.179
Apr 24, 2024 19:31:46.307802916 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.307817936 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.307883978 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.307895899 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.307948112 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.330112934 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.330128908 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.330188990 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.330202103 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.330262899 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.350655079 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.350718021 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.350745916 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.350754976 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.350811958 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.352108002 CEST	443	50127	52.95.118.179	192.168.2.4
Apr 24, 2024 19:31:46.383620024 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.383667946 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.383757114 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.383766890 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.383826017 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.385277987 CEST	443	50130	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.385334969 CEST	443	50130	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.385463953 CEST	443	50130	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.385443926 CEST	50130	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.385550022 CEST	443	50130	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.385687113 CEST	443	50130	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.385725021 CEST	50130	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.385757923 CEST	50130	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.387451887 CEST	50130	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.387496948 CEST	443	50130	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.397135973 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.397178888 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.397223949 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.397231102 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.397289038 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.397294998 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.397371054 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.397417068 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.399755955 CEST	50122	443	192.168.2.4	18.155.202.90
Apr 24, 2024 19:31:46.399772882 CEST	443	50122	18.155.202.90	192.168.2.4
Apr 24, 2024 19:31:46.411453009 CEST	443	50128	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:46.411528111 CEST	443	50128	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:46.411537886 CEST	50128	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:46.411583900 CEST	50128	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:46.411657095 CEST	443	50141	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:46.420290947 CEST	443	50129	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:46.420371056 CEST	50129	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:46.420384884 CEST	443	50129	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:46.420429945 CEST	50129	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:46.438364029 CEST	50141	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:46.438380957 CEST	443	50141	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:46.439718962 CEST	443	50141	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:46.439781904 CEST	50141	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:46.442078114 CEST	50141	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:46.442173958 CEST	443	50141	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:46.461097002 CEST	443	50139	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.461260080 CEST	443	50139	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.461622000 CEST	50139	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.464884996 CEST	443	50133	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:46.464950085 CEST	443	50133	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:46.465081930 CEST	50133	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:46.465153933 CEST	50129	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:46.465176105 CEST	443	50129	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:46.470160007 CEST	50141	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:46.470170975 CEST	443	50141	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:46.471250057 CEST	50133	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:46.471259117 CEST	443	50133	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:46.472464085 CEST	443	50135	104.254.151.68	192.168.2.4
Apr 24, 2024 19:31:46.472532034 CEST	443	50135	104.254.151.68	192.168.2.4
Apr 24, 2024 19:31:46.472608089 CEST	50135	443	192.168.2.4	104.254.151.68
Apr 24, 2024 19:31:46.473320007 CEST	50135	443	192.168.2.4	104.254.151.68
Apr 24, 2024 19:31:46.473331928 CEST	443	50135	104.254.151.68	192.168.2.4
Apr 24, 2024 19:31:46.478933096 CEST	50128	443	192.168.2.4	142.251.2.148
Apr 24, 2024 19:31:46.478943110 CEST	443	50128	142.251.2.148	192.168.2.4
Apr 24, 2024 19:31:46.487106085 CEST	443	50137	3.163.125.74	192.168.2.4
Apr 24, 2024 19:31:46.487235069 CEST	443	50137	3.163.125.74	192.168.2.4
Apr 24, 2024 19:31:46.487307072 CEST	50137	443	192.168.2.4	3.163.125.74
Apr 24, 2024 19:31:46.503823996 CEST	443	50131	104.244.42.197	192.168.2.4
Apr 24, 2024 19:31:46.503905058 CEST	443	50131	104.244.42.197	192.168.2.4
Apr 24, 2024 19:31:46.503997087 CEST	50131	443	192.168.2.4	104.244.42.197
Apr 24, 2024 19:31:46.505299091 CEST	443	50132	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:46.505352020 CEST	443	50132	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:46.505443096 CEST	50132	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:46.508686066 CEST	50139	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.508698940 CEST	443	50139	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.509812117 CEST	50131	443	192.168.2.4	104.244.42.197
Apr 24, 2024 19:31:46.509825945 CEST	443	50131	104.244.42.197	192.168.2.4
Apr 24, 2024 19:31:46.510349989 CEST	50132	443	192.168.2.4	104.244.42.3
Apr 24, 2024 19:31:46.510369062 CEST	443	50132	104.244.42.3	192.168.2.4
Apr 24, 2024 19:31:46.520997047 CEST	50141	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:46.558593988 CEST	443	50140	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.558672905 CEST	443	50140	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.558748960 CEST	50140	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.558768988 CEST	443	50140	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.558842897 CEST	443	50140	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.558934927 CEST	50140	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.565160036 CEST	443	50136	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:46.565347910 CEST	443	50136	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:46.565413952 CEST	50136	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:46.576431036 CEST	50140	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.576462984 CEST	443	50140	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.700536013 CEST	50143	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:46.700563908 CEST	443	50143	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:46.700675011 CEST	50143	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:46.700998068 CEST	50137	443	192.168.2.4	3.163.125.74
Apr 24, 2024 19:31:46.701023102 CEST	443	50137	3.163.125.74	192.168.2.4
Apr 24, 2024 19:31:46.702508926 CEST	50136	443	192.168.2.4	35.155.89.175
Apr 24, 2024 19:31:46.702522039 CEST	443	50136	35.155.89.175	192.168.2.4
Apr 24, 2024 19:31:46.704524040 CEST	50143	443	192.168.2.4	142.250.141.105
Apr 24, 2024 19:31:46.704541922 CEST	443	50143	142.250.141.105	192.168.2.4
Apr 24, 2024 19:31:46.705468893 CEST	50144	443	192.168.2.4	52.50.39.109
Apr 24, 2024 19:31:46.705492973 CEST	443	50144	52.50.39.109	192.168.2.4
Apr 24, 2024 19:31:46.705610991 CEST	50144	443	192.168.2.4	52.50.39.109
Apr 24, 2024 19:31:46.706130981 CEST	50144	443	192.168.2.4	52.50.39.109
Apr 24, 2024 19:31:46.706142902 CEST	443	50144	52.50.39.109	192.168.2.4
Apr 24, 2024 19:31:46.750863075 CEST	50145	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:46.750910997 CEST	443	50145	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:46.751048088 CEST	50145	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:46.751910925 CEST	50145	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:46.751929998 CEST	443	50145	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:46.793351889 CEST	50146	443	192.168.2.4	99.80.149.126
Apr 24, 2024 19:31:46.793395042 CEST	443	50146	99.80.149.126	192.168.2.4
Apr 24, 2024 19:31:46.793540001 CEST	50146	443	192.168.2.4	99.80.149.126
Apr 24, 2024 19:31:46.794125080 CEST	50146	443	192.168.2.4	99.80.149.126
Apr 24, 2024 19:31:46.794142008 CEST	443	50146	99.80.149.126	192.168.2.4
Apr 24, 2024 19:31:46.803980112 CEST	443	50141	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:46.804073095 CEST	443	50141	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:46.804133892 CEST	50141	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:46.806260109 CEST	50141	443	192.168.2.4	35.244.154.8
Apr 24, 2024 19:31:46.806278944 CEST	443	50141	35.244.154.8	192.168.2.4
Apr 24, 2024 19:31:46.815839052 CEST	50147	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:46.815865040 CEST	443	50147	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:46.816129923 CEST	50147	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:46.816641092 CEST	50147	443	192.168.2.4	162.247.243.29
Apr 24, 2024 19:31:46.816649914 CEST	443	50147	162.247.243.29	192.168.2.4
Apr 24, 2024 19:31:46.835359097 CEST	50148	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.835381031 CEST	443	50148	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.835494995 CEST	50148	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.836476088 CEST	50148	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.836484909 CEST	443	50148	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.837632895 CEST	50149	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.837649107 CEST	443	50149	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.837769985 CEST	50149	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.837953091 CEST	50149	443	192.168.2.4	31.13.70.36
Apr 24, 2024 19:31:46.837960958 CEST	443	50149	31.13.70.36	192.168.2.4
Apr 24, 2024 19:31:46.841207981 CEST	50150	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:46.841248989 CEST	443	50150	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:46.841392040 CEST	50150	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:46.842365980 CEST	50150	443	192.168.2.4	192.184.67.40
Apr 24, 2024 19:31:46.842382908 CEST	443	50150	192.184.67.40	192.168.2.4
Apr 24, 2024 19:31:46.845797062 CEST	50151	443	192.168.2.4	104.244.42.5
Apr 24, 2024 19:31:46.845817089 CEST	443	50151	104.244.42.5	192.168.2.4
Apr 24, 2024 19:31:46.846231937 CEST	50151	443	192.168.2.4	104.244.42.5
Apr 24, 2024 19:31:46.846760988 CEST	50151	443	192.168.2.4	104.244.42.5
Apr 24, 2024 19:31:46.846769094 CEST	443	50151	104.244.42.5	192.168.2.4
Apr 24, 2024 19:31:46.848625898 CEST	50152	443	192.168.2.4	104.244.42.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 24, 2024 19:30:37.885598898 CEST	192.168.2.4	1.1.1.1	0x2a3f	Standard query (0)	in.xero.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:37.887581110 CEST	192.168.2.4	1.1.1.1	0x476a	Standard query (0)	in.xero.com	65	IN (0x0001)	false
Apr 24, 2024 19:30:39.084738016 CEST	192.168.2.4	1.1.1.1	0xa608	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:39.084953070 CEST	192.168.2.4	1.1.1.1	0xbbee	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 19:30:39.356260061 CEST	192.168.2.4	1.1.1.1	0xcd34	Standard query (0)	edge.xero.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:39.356355906 CEST	192.168.2.4	1.1.1.1	0x715a	Standard query (0)	edge.xero.com	65	IN (0x0001)	false
Apr 24, 2024 19:30:43.356915951 CEST	192.168.2.4	1.1.1.1	0xf819	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:43.357738018 CEST	192.168.2.4	1.1.1.1	0xc91f	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Apr 24, 2024 19:30:44.117110968 CEST	192.168.2.4	1.1.1.1	0x13cb	Standard query (0)	edge.xero.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:44.117686987 CEST	192.168.2.4	1.1.1.1	0x840d	Standard query (0)	edge.xero.com	65	IN (0x0001)	false
Apr 24, 2024 19:30:44.360707998 CEST	192.168.2.4	1.1.1.1	0x99f6	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:44.361306906 CEST	192.168.2.4	1.1.1.1	0x6269	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Apr 24, 2024 19:30:48.558866978 CEST	192.168.2.4	1.1.1.1	0x9e26	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:48.559251070 CEST	192.168.2.4	1.1.1.1	0xbf9d	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Apr 24, 2024 19:30:48.566077948 CEST	192.168.2.4	1.1.1.1	0x2d6	Standard query (0)	in.xero.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:48.566616058 CEST	192.168.2.4	1.1.1.1	0x6c89	Standard query (0)	in.xero.com	65	IN (0x0001)	false
Apr 24, 2024 19:30:50.257225037 CEST	192.168.2.4	1.1.1.1	0x9508	Standard query (0)	product-analytics-bff.xero.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:50.257559061 CEST	192.168.2.4	1.1.1.1	0x4cbb	Standard query (0)	product-analytics-bff.xero.com	65	IN (0x0001)	false
Apr 24, 2024 19:30:51.035013914 CEST	192.168.2.4	1.1.1.1	0xfec4	Standard query (0)	widget.intercom.io	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:51.035264015 CEST	192.168.2.4	1.1.1.1	0x6eab	Standard query (0)	widget.intercom.io	65	IN (0x0001)	false
Apr 24, 2024 19:30:52.223738909 CEST	192.168.2.4	1.1.1.1	0xfe8c	Standard query (0)	js.intercomcdn.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:52.223906994 CEST	192.168.2.4	1.1.1.1	0x1662	Standard query (0)	js.intercomcdn.com	65	IN (0x0001)	false
Apr 24, 2024 19:30:54.044465065 CEST	192.168.2.4	1.1.1.1	0x74f9	Standard query (0)	api-iam.intercom.io	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:54.044878006 CEST	192.168.2.4	1.1.1.1	0xa357	Standard query (0)	api-iam.intercom.io	65	IN (0x0001)	false
Apr 24, 2024 19:30:55.955987930 CEST	192.168.2.4	1.1.1.1	0xe944	Standard query (0)	nexus-websocket-a.intercom.io	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:55.956717014 CEST	192.168.2.4	1.1.1.1	0xbd6e	Standard query (0)	nexus-websocket-a.intercom.io	65	IN (0x0001)	false
Apr 24, 2024 19:30:55.983814001 CEST	192.168.2.4	1.1.1.1	0x10fa	Standard query (0)	api-iam.intercom.io	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:55.984296083 CEST	192.168.2.4	1.1.1.1	0xabf9	Standard query (0)	api-iam.intercom.io	65	IN (0x0001)	false
Apr 24, 2024 19:31:04.560811996 CEST	192.168.2.4	1.1.1.1	0xc38d	Standard query (0)	www.xero.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:04.560954094 CEST	192.168.2.4	1.1.1.1	0x7d5a	Standard query (0)	www.xero.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:06.452486992 CEST	192.168.2.4	1.1.1.1	0xf3e3	Standard query (0)	s.go-mpulse.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:06.452811003 CEST	192.168.2.4	1.1.1.1	0xc224	Standard query (0)	s.go-mpulse.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:07.945379019 CEST	192.168.2.4	1.1.1.1	0x725e	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:07.945648909 CEST	192.168.2.4	1.1.1.1	0x25be	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:08.705653906 CEST	192.168.2.4	1.1.1.1	0xa273	Standard query (0)	www.xero.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:08.706310987 CEST	192.168.2.4	1.1.1.1	0xb96e	Standard query (0)	www.xero.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:09.099095106 CEST	192.168.2.4	1.1.1.1	0xe9a2	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:09.099934101 CEST	192.168.2.4	1.1.1.1	0xc610	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:10.771944046 CEST	192.168.2.4	1.1.1.1	0x5061	Standard query (0)	widget.trustpilot.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:10.772368908 CEST	192.168.2.4	1.1.1.1	0xbccb	Standard query (0)	widget.trustpilot.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:10.784271002 CEST	192.168.2.4	1.1.1.1	0x7282	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:10.784507036 CEST	192.168.2.4	1.1.1.1	0x4662	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:11.800117016 CEST	192.168.2.4	1.1.1.1	0x3fa6	Standard query (0)	xerolimited.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:11.800343037 CEST	192.168.2.4	1.1.1.1	0x15dc	Standard query (0)	xerolimited.tt.omtrdc.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:11.804025888 CEST	192.168.2.4	1.1.1.1	0xa027	Standard query (0)	xero.demdex.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:11.804151058 CEST	192.168.2.4	1.1.1.1	0xcec4	Standard query (0)	xero.demdex.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:11.807841063 CEST	192.168.2.4	1.1.1.1	0x55d3	Standard query (0)	xero.demdex.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:11.808217049 CEST	192.168.2.4	1.1.1.1	0xd7ce	Standard query (0)	xero.demdex.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:11.808729887 CEST	192.168.2.4	1.1.1.1	0x7988	Standard query (0)	xerolimited.sc.omtrdc.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:11.809024096 CEST	192.168.2.4	1.1.1.1	0xef5	Standard query (0)	xerolimited.sc.omtrdc.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:11.836342096 CEST	192.168.2.4	1.1.1.1	0x6955	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:11.836476088 CEST	192.168.2.4	1.1.1.1	0x5fd6	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:12.237277031 CEST	192.168.2.4	1.1.1.1	0xe01e	Standard query (0)	widget.trustpilot.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:12.237412930 CEST	192.168.2.4	1.1.1.1	0x43b	Standard query (0)	widget.trustpilot.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:12.890882015 CEST	192.168.2.4	1.1.1.1	0x710b	Standard query (0)	xero.demdex.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:12.891446114 CEST	192.168.2.4	1.1.1.1	0x9be7	Standard query (0)	xero.demdex.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:12.893856049 CEST	192.168.2.4	1.1.1.1	0x90bb	Standard query (0)	xerolimited.sc.omtrdc.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:12.893992901 CEST	192.168.2.4	1.1.1.1	0x1db7	Standard query (0)	xerolimited.sc.omtrdc.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:13.638288021 CEST	192.168.2.4	1.1.1.1	0x950c	Standard query (0)	cm.everesttech.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:13.639842033 CEST	192.168.2.4	1.1.1.1	0x1cfa	Standard query (0)	cm.everesttech.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:13.650415897 CEST	192.168.2.4	1.1.1.1	0xa47e	Standard query (0)	xerolimited.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:13.656124115 CEST	192.168.2.4	1.1.1.1	0x805e	Standard query (0)	xerolimited.tt.omtrdc.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:14.443335056 CEST	192.168.2.4	1.1.1.1	0x1167	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:14.443469048 CEST	192.168.2.4	1.1.1.1	0x1368	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:14.444660902 CEST	192.168.2.4	1.1.1.1	0xa0a0	Standard query (0)	www.dwin1.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:14.444791079 CEST	192.168.2.4	1.1.1.1	0x52f2	Standard query (0)	www.dwin1.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:15.234421968 CEST	192.168.2.4	1.1.1.1	0x81ba	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:15.234603882 CEST	192.168.2.4	1.1.1.1	0xe454	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:15.320089102 CEST	192.168.2.4	1.1.1.1	0xfcb6	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:15.320278883 CEST	192.168.2.4	1.1.1.1	0xe704	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:15.322870016 CEST	192.168.2.4	1.1.1.1	0xc474	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:15.322906971 CEST	192.168.2.4	1.1.1.1	0xe718	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:15.935535908 CEST	192.168.2.4	1.1.1.1	0x1284	Standard query (0)	widget.trustpilot.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:15.935710907 CEST	192.168.2.4	1.1.1.1	0x26af	Standard query (0)	widget.trustpilot.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:16.298441887 CEST	192.168.2.4	1.1.1.1	0x69a6	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.298707962 CEST	192.168.2.4	1.1.1.1	0x54c0	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:16.320625067 CEST	192.168.2.4	1.1.1.1	0x12a0	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.321271896 CEST	192.168.2.4	1.1.1.1	0x6c3	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:16.324630976 CEST	192.168.2.4	1.1.1.1	0xa818	Standard query (0)	tracking.g2crowd.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.324791908 CEST	192.168.2.4	1.1.1.1	0xd9d6	Standard query (0)	tracking.g2crowd.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:16.327085972 CEST	192.168.2.4	1.1.1.1	0xc58d	Standard query (0)	tags.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.327291012 CEST	192.168.2.4	1.1.1.1	0xf0dc	Standard query (0)	tags.srv.stackadapt.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:16.766354084 CEST	192.168.2.4	1.1.1.1	0x9f88	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.766551971 CEST	192.168.2.4	1.1.1.1	0x951e	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:16.785844088 CEST	192.168.2.4	1.1.1.1	0x8ded	Standard query (0)	secure.quantserve.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.786051989 CEST	192.168.2.4	1.1.1.1	0x1bc2	Standard query (0)	secure.quantserve.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:16.822107077 CEST	192.168.2.4	1.1.1.1	0x62bd	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.822578907 CEST	192.168.2.4	1.1.1.1	0x2b88	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:17.207653046 CEST	192.168.2.4	1.1.1.1	0x48fd	Standard query (0)	acdn.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:17.207801104 CEST	192.168.2.4	1.1.1.1	0x8896	Standard query (0)	acdn.adnxs.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:17.208194971 CEST	192.168.2.4	1.1.1.1	0xc9d5	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:17.208327055 CEST	192.168.2.4	1.1.1.1	0xde8f	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Apr 24, 2024 19:31:17.208667040 CEST	192.168.2.4	1.1.1.1	0x6da8	Standard query (0)	tag.demandbase.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:17.208780050 CEST	192.168.2.4	1.1.1.1	0xa630	Standard query (0)	tag.demandbase.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:17.213319063 CEST	192.168.2.4	1.1.1.1	0x89c5	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:17.213473082 CEST	192.168.2.4	1.1.1.1	0x25fb	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:17.857292891 CEST	192.168.2.4	1.1.1.1	0xd5a9	Standard query (0)	9401320.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:17.857501984 CEST	192.168.2.4	1.1.1.1	0x78dd	Standard query (0)	9401320.fls.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:17.858228922 CEST	192.168.2.4	1.1.1.1	0x48bb	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:17.858434916 CEST	192.168.2.4	1.1.1.1	0x5ed9	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:18.529329062 CEST	192.168.2.4	1.1.1.1	0x9965	Standard query (0)	tags.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.529536009 CEST	192.168.2.4	1.1.1.1	0x29c	Standard query (0)	tags.srv.stackadapt.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:18.635596991 CEST	192.168.2.4	1.1.1.1	0x8b5a	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.635865927 CEST	192.168.2.4	1.1.1.1	0xc421	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:18.683108091 CEST	192.168.2.4	1.1.1.1	0x37	Standard query (0)	api.company-target.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.683413982 CEST	192.168.2.4	1.1.1.1	0x4dea	Standard query (0)	api.company-target.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:18.685487986 CEST	192.168.2.4	1.1.1.1	0x9ba	Standard query (0)	s.company-target.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.685803890 CEST	192.168.2.4	1.1.1.1	0x2abf	Standard query (0)	s.company-target.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:18.716506004 CEST	192.168.2.4	1.1.1.1	0x3886	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.716972113 CEST	192.168.2.4	1.1.1.1	0xf280	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:19.027175903 CEST	192.168.2.4	1.1.1.1	0xfe39	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.027501106 CEST	192.168.2.4	1.1.1.1	0x137e	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:19.511099100 CEST	192.168.2.4	1.1.1.1	0xaa98	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.511281013 CEST	192.168.2.4	1.1.1.1	0x4de0	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:19.593102932 CEST	192.168.2.4	1.1.1.1	0x7ceb	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.593274117 CEST	192.168.2.4	1.1.1.1	0xf998	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:19.593933105 CEST	192.168.2.4	1.1.1.1	0xf582	Standard query (0)	a.quora.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.594082117 CEST	192.168.2.4	1.1.1.1	0xaf3e	Standard query (0)	a.quora.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:19.594871998 CEST	192.168.2.4	1.1.1.1	0xfe3d	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.595166922 CEST	192.168.2.4	1.1.1.1	0xeea1	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:19.596082926 CEST	192.168.2.4	1.1.1.1	0xb1ad	Standard query (0)	tag-logger.demandbase.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.596375942 CEST	192.168.2.4	1.1.1.1	0x3bae	Standard query (0)	tag-logger.demandbase.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:19.598786116 CEST	192.168.2.4	1.1.1.1	0x5ec4	Standard query (0)	api.company-target.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.598982096 CEST	192.168.2.4	1.1.1.1	0xc731	Standard query (0)	api.company-target.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:19.643189907 CEST	192.168.2.4	1.1.1.1	0x32d6	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.643812895 CEST	192.168.2.4	1.1.1.1	0x512f	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:19.670878887 CEST	192.168.2.4	1.1.1.1	0x4975	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.671070099 CEST	192.168.2.4	1.1.1.1	0xaa0e	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:19.671988010 CEST	192.168.2.4	1.1.1.1	0x7aa0	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.672197104 CEST	192.168.2.4	1.1.1.1	0x9ca3	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:19.673151016 CEST	192.168.2.4	1.1.1.1	0xc1a6	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.673309088 CEST	192.168.2.4	1.1.1.1	0x9231	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:19.849936008 CEST	192.168.2.4	1.1.1.1	0xcb4e	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.850097895 CEST	192.168.2.4	1.1.1.1	0x4342	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:20.405193090 CEST	192.168.2.4	1.1.1.1	0x4ac0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.405375004 CEST	192.168.2.4	1.1.1.1	0xbd48	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:20.547245979 CEST	192.168.2.4	1.1.1.1	0xf8d2	Standard query (0)	q.quora.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.547461987 CEST	192.168.2.4	1.1.1.1	0xe4c0	Standard query (0)	q.quora.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:20.564893961 CEST	192.168.2.4	1.1.1.1	0xb9bd	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.565045118 CEST	192.168.2.4	1.1.1.1	0xb6bf	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:20.589262009 CEST	192.168.2.4	1.1.1.1	0xca6f	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.589416981 CEST	192.168.2.4	1.1.1.1	0x6689	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:20.611521006 CEST	192.168.2.4	1.1.1.1	0x8b42	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.611723900 CEST	192.168.2.4	1.1.1.1	0xf143	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:20.653240919 CEST	192.168.2.4	1.1.1.1	0xbbb2	Standard query (0)	w3-reporting-nel.reddit.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.653584003 CEST	192.168.2.4	1.1.1.1	0x787f	Standard query (0)	w3-reporting-nel.reddit.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:20.719022036 CEST	192.168.2.4	1.1.1.1	0xf860	Standard query (0)	tag-logger.demandbase.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.719444990 CEST	192.168.2.4	1.1.1.1	0xc554	Standard query (0)	tag-logger.demandbase.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:20.739161015 CEST	192.168.2.4	1.1.1.1	0x9c15	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.739331961 CEST	192.168.2.4	1.1.1.1	0xec10	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:21.263623953 CEST	192.168.2.4	1.1.1.1	0x3603	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.263788939 CEST	192.168.2.4	1.1.1.1	0x298c	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:21.424427986 CEST	192.168.2.4	1.1.1.1	0x42b2	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.424540997 CEST	192.168.2.4	1.1.1.1	0x7281	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:21.425121069 CEST	192.168.2.4	1.1.1.1	0x3a21	Standard query (0)	rules.quantcount.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.425488949 CEST	192.168.2.4	1.1.1.1	0x71a8	Standard query (0)	rules.quantcount.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:21.471441031 CEST	192.168.2.4	1.1.1.1	0xf205	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.471556902 CEST	192.168.2.4	1.1.1.1	0x3cee	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:21.586658001 CEST	192.168.2.4	1.1.1.1	0xe679	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.586963892 CEST	192.168.2.4	1.1.1.1	0x44c8	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:21.587817907 CEST	192.168.2.4	1.1.1.1	0x1055	Standard query (0)	q.quora.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.588134050 CEST	192.168.2.4	1.1.1.1	0xe55e	Standard query (0)	q.quora.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:22.280164957 CEST	192.168.2.4	1.1.1.1	0x804f	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.280431986 CEST	192.168.2.4	1.1.1.1	0x6ad1	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:22.282187939 CEST	192.168.2.4	1.1.1.1	0x9d19	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.282454014 CEST	192.168.2.4	1.1.1.1	0xfe29	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:22.295293093 CEST	192.168.2.4	1.1.1.1	0x84cc	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.295437098 CEST	192.168.2.4	1.1.1.1	0x76eb	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:22.301263094 CEST	192.168.2.4	1.1.1.1	0xb195	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.301435947 CEST	192.168.2.4	1.1.1.1	0xc338	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:22.304564953 CEST	192.168.2.4	1.1.1.1	0x6b7b	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.304716110 CEST	192.168.2.4	1.1.1.1	0xaf46	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:22.308444977 CEST	192.168.2.4	1.1.1.1	0xef4c	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.308578968 CEST	192.168.2.4	1.1.1.1	0x155	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:22.525532961 CEST	192.168.2.4	1.1.1.1	0x5599	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.525904894 CEST	192.168.2.4	1.1.1.1	0xdc66	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:23.112030983 CEST	192.168.2.4	1.1.1.1	0xe0ad	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:23.112202883 CEST	192.168.2.4	1.1.1.1	0xafe9	Standard query (0)	t.co	65	IN (0x0001)	false
Apr 24, 2024 19:31:23.113254070 CEST	192.168.2.4	1.1.1.1	0x7427	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:23.113387108 CEST	192.168.2.4	1.1.1.1	0xb591	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:23.198740959 CEST	192.168.2.4	1.1.1.1	0x2851	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:23.198896885 CEST	192.168.2.4	1.1.1.1	0x9152	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:23.276221991 CEST	192.168.2.4	1.1.1.1	0x87a6	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:23.276382923 CEST	192.168.2.4	1.1.1.1	0x5c5e	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:23.339524984 CEST	192.168.2.4	1.1.1.1	0x69b4	Standard query (0)	pixel.quantserve.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:23.339837074 CEST	192.168.2.4	1.1.1.1	0x9281	Standard query (0)	pixel.quantserve.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:23.340332985 CEST	192.168.2.4	1.1.1.1	0x2787	Standard query (0)	ara.paa-reporting-advertising.amazon	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:23.340533018 CEST	192.168.2.4	1.1.1.1	0x1fa8	Standard query (0)	ara.paa-reporting-advertising.amazon	65	IN (0x0001)	false
Apr 24, 2024 19:31:23.342124939 CEST	192.168.2.4	1.1.1.1	0x776e	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:23.342389107 CEST	192.168.2.4	1.1.1.1	0xbc0d	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:23.932653904 CEST	192.168.2.4	1.1.1.1	0xaac9	Standard query (0)	segments.company-target.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:23.932934046 CEST	192.168.2.4	1.1.1.1	0x5f7f	Standard query (0)	segments.company-target.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:24.067903996 CEST	192.168.2.4	1.1.1.1	0xe70a	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:24.068226099 CEST	192.168.2.4	1.1.1.1	0xd2cc	Standard query (0)	t.co	65	IN (0x0001)	false
Apr 24, 2024 19:31:24.162497044 CEST	192.168.2.4	1.1.1.1	0xdaaf	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:24.163136005 CEST	192.168.2.4	1.1.1.1	0x3927	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:24.175798893 CEST	192.168.2.4	1.1.1.1	0xce84	Standard query (0)	ara.paa-reporting-advertising.amazon	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:24.175798893 CEST	192.168.2.4	1.1.1.1	0x91c2	Standard query (0)	ara.paa-reporting-advertising.amazon	65	IN (0x0001)	false
Apr 24, 2024 19:31:24.423763990 CEST	192.168.2.4	1.1.1.1	0xa799	Standard query (0)	pixel.quantserve.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:24.426126957 CEST	192.168.2.4	1.1.1.1	0x6611	Standard query (0)	pixel.quantserve.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:24.834141970 CEST	192.168.2.4	1.1.1.1	0xb3ea	Standard query (0)	segments.company-target.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:24.834368944 CEST	192.168.2.4	1.1.1.1	0x8798	Standard query (0)	segments.company-target.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:24.971458912 CEST	192.168.2.4	1.1.1.1	0xfcc7	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:24.971709013 CEST	192.168.2.4	1.1.1.1	0x3c8c	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
Apr 24, 2024 19:31:26.075361967 CEST	192.168.2.4	1.1.1.1	0x206a	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:26.075992107 CEST	192.168.2.4	1.1.1.1	0x2a2e	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Apr 24, 2024 19:31:27.607407093 CEST	192.168.2.4	1.1.1.1	0x42f6	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:27.607680082 CEST	192.168.2.4	1.1.1.1	0x55dd	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Apr 24, 2024 19:31:28.635032892 CEST	192.168.2.4	1.1.1.1	0xa5f5	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:28.635632038 CEST	192.168.2.4	1.1.1.1	0x8f45	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:28.656441927 CEST	192.168.2.4	1.1.1.1	0xf381	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:28.657028913 CEST	192.168.2.4	1.1.1.1	0x64dc	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:38.756715059 CEST	192.168.2.4	1.1.1.1	0x4530	Standard query (0)	user-tracking-api.dgt-digital-marketing.xero.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:38.756921053 CEST	192.168.2.4	1.1.1.1	0x569a	Standard query (0)	user-tracking-api.dgt-digital-marketing.xero.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:40.041191101 CEST	192.168.2.4	1.1.1.1	0x4cf6	Standard query (0)	user-tracking-api.dgt-digital-marketing.xero.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:40.041356087 CEST	192.168.2.4	1.1.1.1	0xb4b6	Standard query (0)	user-tracking-api.dgt-digital-marketing.xero.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:41.923126936 CEST	192.168.2.4	1.1.1.1	0x15b8	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:41.923418999 CEST	192.168.2.4	1.1.1.1	0x52bb	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:45.013336897 CEST	192.168.2.4	1.1.1.1	0xd9f	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:45.014487982 CEST	192.168.2.4	1.1.1.1	0xd2a3	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:45.015513897 CEST	192.168.2.4	1.1.1.1	0x8de0	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:45.016530991 CEST	192.168.2.4	1.1.1.1	0x8814	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:45.021934986 CEST	192.168.2.4	1.1.1.1	0x7e79	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:45.022272110 CEST	192.168.2.4	1.1.1.1	0x9096	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:45.802500010 CEST	192.168.2.4	1.1.1.1	0x521	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:45.802998066 CEST	192.168.2.4	1.1.1.1	0xf3e4	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:46.502085924 CEST	192.168.2.4	1.1.1.1	0x5599	Standard query (0)	ws.hotjar.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:46.502531052 CEST	192.168.2.4	1.1.1.1	0x66de	Standard query (0)	ws.hotjar.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:46.628173113 CEST	192.168.2.4	1.1.1.1	0x695	Standard query (0)	content.hotjar.io	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:46.628648043 CEST	192.168.2.4	1.1.1.1	0xaa85	Standard query (0)	content.hotjar.io	65	IN (0x0001)	false
Apr 24, 2024 19:31:48.190042019 CEST	192.168.2.4	1.1.1.1	0xcc55	Standard query (0)	content.hotjar.io	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:48.190361977 CEST	192.168.2.4	1.1.1.1	0xc2cf	Standard query (0)	content.hotjar.io	65	IN (0x0001)	false
Apr 24, 2024 19:31:48.529382944 CEST	192.168.2.4	1.1.1.1	0x62a9	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:48.529613018 CEST	192.168.2.4	1.1.1.1	0x805b	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:48.557440042 CEST	192.168.2.4	1.1.1.1	0x5898	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:48.557965994 CEST	192.168.2.4	1.1.1.1	0xb	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:48.627166986 CEST	192.168.2.4	1.1.1.1	0x7248	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:48.627532959 CEST	192.168.2.4	1.1.1.1	0x6031	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:50.400044918 CEST	192.168.2.4	1.1.1.1	0x2150	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:50.400279999 CEST	192.168.2.4	1.1.1.1	0x270b	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Apr 24, 2024 19:31:59.521606922 CEST	192.168.2.4	1.1.1.1	0xeb9	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:59.522789001 CEST	192.168.2.4	1.1.1.1	0xcc81	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 19:31:59.563421011 CEST	192.168.2.4	1.1.1.1	0x9ce7	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:59.563682079 CEST	192.168.2.4	1.1.1.1	0x3b6b	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 19:32:02.483660936 CEST	192.168.2.4	1.1.1.1	0xa4c7	Standard query (0)	idpix.media6degrees.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:32:02.484088898 CEST	192.168.2.4	1.1.1.1	0x58d0	Standard query (0)	idpix.media6degrees.com	65	IN (0x0001)	false
Apr 24, 2024 19:32:02.498605013 CEST	192.168.2.4	1.1.1.1	0x8c29	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:32:02.498868942 CEST	192.168.2.4	1.1.1.1	0xcc90	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Apr 24, 2024 19:32:03.358495951 CEST	192.168.2.4	1.1.1.1	0xdef6	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:32:03.358758926 CEST	192.168.2.4	1.1.1.1	0xc36b	Standard query (0)	d.agkn.com	65	IN (0x0001)	false
Apr 24, 2024 19:32:20.663875103 CEST	192.168.2.4	1.1.1.1	0x105a	Standard query (0)	w3-reporting-nel.reddit.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:32:20.664391041 CEST	192.168.2.4	1.1.1.1	0x6920	Standard query (0)	w3-reporting-nel.reddit.com	65	IN (0x0001)	false
Apr 24, 2024 19:32:21.310472965 CEST	192.168.2.4	1.1.1.1	0xeed6	Standard query (0)	w3-reporting-nel.reddit.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:32:21.310812950 CEST	192.168.2.4	1.1.1.1	0xd58f	Standard query (0)	w3-reporting-nel.reddit.com	65	IN (0x0001)	false
Apr 24, 2024 19:32:27.277221918 CEST	192.168.2.4	1.1.1.1	0xa1e	Standard query (0)	nexus-websocket-a.intercom.io	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:32:27.277555943 CEST	192.168.2.4	1.1.1.1	0xc985	Standard query (0)	nexus-websocket-a.intercom.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 24, 2024 19:30:38.062014103 CEST	1.1.1.1	192.168.2.4	0x476a	No error (0)	in.xero.com	in.xero.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:30:38.063055038 CEST	1.1.1.1	192.168.2.4	0x2a3f	No error (0)	in.xero.com	in.xero.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:30:39.238550901 CEST	1.1.1.1	192.168.2.4	0xa608	No error (0)	www.google.com		142.250.141.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:39.238550901 CEST	1.1.1.1	192.168.2.4	0xa608	No error (0)	www.google.com		142.250.141.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:39.238550901 CEST	1.1.1.1	192.168.2.4	0xa608	No error (0)	www.google.com		142.250.141.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:39.238550901 CEST	1.1.1.1	192.168.2.4	0xa608	No error (0)	www.google.com		142.250.141.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:39.238550901 CEST	1.1.1.1	192.168.2.4	0xa608	No error (0)	www.google.com		142.250.141.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:39.238550901 CEST	1.1.1.1	192.168.2.4	0xa608	No error (0)	www.google.com		142.250.141.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:39.238627911 CEST	1.1.1.1	192.168.2.4	0xbbee	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 19:30:39.531527042 CEST	1.1.1.1	192.168.2.4	0x715a	No error (0)	edge.xero.com	new-edge.xero.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:30:39.538083076 CEST	1.1.1.1	192.168.2.4	0xcd34	No error (0)	edge.xero.com	new-edge.xero.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:30:43.511058092 CEST	1.1.1.1	192.168.2.4	0xf819	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:44.271276951 CEST	1.1.1.1	192.168.2.4	0x840d	No error (0)	edge.xero.com	new-edge.xero.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:30:44.271322012 CEST	1.1.1.1	192.168.2.4	0x13cb	No error (0)	edge.xero.com	new-edge.xero.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:30:44.514621973 CEST	1.1.1.1	192.168.2.4	0x6269	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:30:44.514621973 CEST	1.1.1.1	192.168.2.4	0x6269	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:30:44.514857054 CEST	1.1.1.1	192.168.2.4	0x99f6	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:30:44.514857054 CEST	1.1.1.1	192.168.2.4	0x99f6	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:30:44.514857054 CEST	1.1.1.1	192.168.2.4	0x99f6	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:48.712366104 CEST	1.1.1.1	192.168.2.4	0x9e26	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:30:48.712366104 CEST	1.1.1.1	192.168.2.4	0x9e26	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:30:48.712366104 CEST	1.1.1.1	192.168.2.4	0x9e26	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:48.712634087 CEST	1.1.1.1	192.168.2.4	0xbf9d	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:30:48.712634087 CEST	1.1.1.1	192.168.2.4	0xbf9d	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:30:48.720431089 CEST	1.1.1.1	192.168.2.4	0x2d6	No error (0)	in.xero.com	in.xero.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:30:48.720465899 CEST	1.1.1.1	192.168.2.4	0x6c89	No error (0)	in.xero.com	in.xero.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:30:50.412075996 CEST	1.1.1.1	192.168.2.4	0x9508	No error (0)	product-analytics-bff.xero.com	product-analytics-bff.xero.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:30:50.432905912 CEST	1.1.1.1	192.168.2.4	0x4cbb	No error (0)	product-analytics-bff.xero.com	product-analytics-bff.xero.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:30:51.188407898 CEST	1.1.1.1	192.168.2.4	0xfec4	No error (0)	widget.intercom.io		216.137.39.9	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:51.188407898 CEST	1.1.1.1	192.168.2.4	0xfec4	No error (0)	widget.intercom.io		216.137.39.128	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:51.188407898 CEST	1.1.1.1	192.168.2.4	0xfec4	No error (0)	widget.intercom.io		216.137.39.88	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:51.188407898 CEST	1.1.1.1	192.168.2.4	0xfec4	No error (0)	widget.intercom.io		216.137.39.89	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:52.377376080 CEST	1.1.1.1	192.168.2.4	0xfe8c	No error (0)	js.intercomcdn.com		54.230.21.89	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:52.377376080 CEST	1.1.1.1	192.168.2.4	0xfe8c	No error (0)	js.intercomcdn.com		54.230.21.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:52.377376080 CEST	1.1.1.1	192.168.2.4	0xfe8c	No error (0)	js.intercomcdn.com		54.230.21.121	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:52.377376080 CEST	1.1.1.1	192.168.2.4	0xfe8c	No error (0)	js.intercomcdn.com		54.230.21.9	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:53.596882105 CEST	1.1.1.1	192.168.2.4	0x53a5	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:30:53.596882105 CEST	1.1.1.1	192.168.2.4	0x53a5	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:54.198141098 CEST	1.1.1.1	192.168.2.4	0x74f9	No error (0)	api-iam.intercom.io		54.162.198.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:54.198141098 CEST	1.1.1.1	192.168.2.4	0x74f9	No error (0)	api-iam.intercom.io		44.214.72.116	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:54.198141098 CEST	1.1.1.1	192.168.2.4	0x74f9	No error (0)	api-iam.intercom.io		3.216.18.136	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:54.198141098 CEST	1.1.1.1	192.168.2.4	0x74f9	No error (0)	api-iam.intercom.io		3.219.101.117	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:54.198141098 CEST	1.1.1.1	192.168.2.4	0x74f9	No error (0)	api-iam.intercom.io		34.196.171.164	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:54.198141098 CEST	1.1.1.1	192.168.2.4	0x74f9	No error (0)	api-iam.intercom.io		34.199.118.93	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:54.198141098 CEST	1.1.1.1	192.168.2.4	0x74f9	No error (0)	api-iam.intercom.io		54.210.152.11	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:54.198141098 CEST	1.1.1.1	192.168.2.4	0x74f9	No error (0)	api-iam.intercom.io		3.214.248.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:56.109730959 CEST	1.1.1.1	192.168.2.4	0xe944	No error (0)	nexus-websocket-a.intercom.io		34.237.73.95	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:56.109730959 CEST	1.1.1.1	192.168.2.4	0xe944	No error (0)	nexus-websocket-a.intercom.io		35.174.127.31	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:56.137286901 CEST	1.1.1.1	192.168.2.4	0x10fa	No error (0)	api-iam.intercom.io		34.196.171.164	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:56.137286901 CEST	1.1.1.1	192.168.2.4	0x10fa	No error (0)	api-iam.intercom.io		34.199.118.93	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:56.137286901 CEST	1.1.1.1	192.168.2.4	0x10fa	No error (0)	api-iam.intercom.io		3.219.101.117	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:56.137286901 CEST	1.1.1.1	192.168.2.4	0x10fa	No error (0)	api-iam.intercom.io		44.214.72.116	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:56.137286901 CEST	1.1.1.1	192.168.2.4	0x10fa	No error (0)	api-iam.intercom.io		54.210.152.11	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:56.137286901 CEST	1.1.1.1	192.168.2.4	0x10fa	No error (0)	api-iam.intercom.io		3.214.248.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:56.137286901 CEST	1.1.1.1	192.168.2.4	0x10fa	No error (0)	api-iam.intercom.io		54.162.198.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:30:56.137286901 CEST	1.1.1.1	192.168.2.4	0x10fa	No error (0)	api-iam.intercom.io		3.216.18.136	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:04.722114086 CEST	1.1.1.1	192.168.2.4	0xc38d	No error (0)	www.xero.com	www.xero.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:04.764209986 CEST	1.1.1.1	192.168.2.4	0x7d5a	No error (0)	www.xero.com	www.xero.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:06.605788946 CEST	1.1.1.1	192.168.2.4	0xf3e3	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:06.606333971 CEST	1.1.1.1	192.168.2.4	0xc224	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:08.098917961 CEST	1.1.1.1	192.168.2.4	0x25be	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:08.099092960 CEST	1.1.1.1	192.168.2.4	0x725e	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:08.859647036 CEST	1.1.1.1	192.168.2.4	0xa273	No error (0)	www.xero.com	www.xero.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:08.860248089 CEST	1.1.1.1	192.168.2.4	0xb96e	No error (0)	www.xero.com	www.xero.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:09.252878904 CEST	1.1.1.1	192.168.2.4	0xe9a2	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:09.254190922 CEST	1.1.1.1	192.168.2.4	0xc610	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:09.312119961 CEST	1.1.1.1	192.168.2.4	0x1991	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:09.312119961 CEST	1.1.1.1	192.168.2.4	0x1991	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:10.925421000 CEST	1.1.1.1	192.168.2.4	0x5061	No error (0)	widget.trustpilot.com		18.154.132.87	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:10.925421000 CEST	1.1.1.1	192.168.2.4	0x5061	No error (0)	widget.trustpilot.com		18.154.132.124	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:10.925421000 CEST	1.1.1.1	192.168.2.4	0x5061	No error (0)	widget.trustpilot.com		18.154.132.48	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:10.925421000 CEST	1.1.1.1	192.168.2.4	0x5061	No error (0)	widget.trustpilot.com		18.154.132.63	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:10.937575102 CEST	1.1.1.1	192.168.2.4	0x7282	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:10.937575102 CEST	1.1.1.1	192.168.2.4	0x7282	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:10.937575102 CEST	1.1.1.1	192.168.2.4	0x7282	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:10.937575102 CEST	1.1.1.1	192.168.2.4	0x7282	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.32.69.132	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:10.937575102 CEST	1.1.1.1	192.168.2.4	0x7282	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.40.174.159	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:10.937575102 CEST	1.1.1.1	192.168.2.4	0x7282	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		100.20.115.95	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:10.937575102 CEST	1.1.1.1	192.168.2.4	0x7282	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		54.191.68.224	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:10.937575102 CEST	1.1.1.1	192.168.2.4	0x7282	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		54.186.81.225	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:10.937575102 CEST	1.1.1.1	192.168.2.4	0x7282	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		35.83.134.25	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:10.937575102 CEST	1.1.1.1	192.168.2.4	0x7282	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.43.4.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:10.937575102 CEST	1.1.1.1	192.168.2.4	0x7282	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		34.215.13.170	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:10.937807083 CEST	1.1.1.1	192.168.2.4	0x4662	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:10.937807083 CEST	1.1.1.1	192.168.2.4	0x4662	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:10.937807083 CEST	1.1.1.1	192.168.2.4	0x4662	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:11.979326963 CEST	1.1.1.1	192.168.2.4	0x15dc	No error (0)	xerolimited.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:11.989981890 CEST	1.1.1.1	192.168.2.4	0x5fd6	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:11.989981890 CEST	1.1.1.1	192.168.2.4	0x5fd6	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:11.989981890 CEST	1.1.1.1	192.168.2.4	0x5fd6	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:11.990571022 CEST	1.1.1.1	192.168.2.4	0x6955	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:11.990571022 CEST	1.1.1.1	192.168.2.4	0x6955	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:11.990571022 CEST	1.1.1.1	192.168.2.4	0x6955	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:11.990571022 CEST	1.1.1.1	192.168.2.4	0x6955	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		34.215.13.170	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:11.990571022 CEST	1.1.1.1	192.168.2.4	0x6955	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		54.191.68.224	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:11.990571022 CEST	1.1.1.1	192.168.2.4	0x6955	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.40.174.159	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:11.990571022 CEST	1.1.1.1	192.168.2.4	0x6955	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		35.83.134.25	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:11.990571022 CEST	1.1.1.1	192.168.2.4	0x6955	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		54.186.81.225	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:11.990571022 CEST	1.1.1.1	192.168.2.4	0x6955	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		100.20.115.95	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:11.990571022 CEST	1.1.1.1	192.168.2.4	0x6955	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.32.69.132	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:11.990571022 CEST	1.1.1.1	192.168.2.4	0x6955	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.43.4.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:11.992271900 CEST	1.1.1.1	192.168.2.4	0x3fa6	No error (0)	xerolimited.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:11.992271900 CEST	1.1.1.1	192.168.2.4	0x3fa6	No error (0)	adobetarget.data.adobedc.net		63.140.37.126	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:11.992271900 CEST	1.1.1.1	192.168.2.4	0x3fa6	No error (0)	adobetarget.data.adobedc.net		63.140.36.51	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:11.992271900 CEST	1.1.1.1	192.168.2.4	0x3fa6	No error (0)	adobetarget.data.adobedc.net		63.140.36.145	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:11.992271900 CEST	1.1.1.1	192.168.2.4	0x3fa6	No error (0)	adobetarget.data.adobedc.net		63.140.37.206	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:11.994601011 CEST	1.1.1.1	192.168.2.4	0x7988	No error (0)	xerolimited.sc.omtrdc.net		63.140.36.145	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:11.994601011 CEST	1.1.1.1	192.168.2.4	0x7988	No error (0)	xerolimited.sc.omtrdc.net		63.140.37.126	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:11.994601011 CEST	1.1.1.1	192.168.2.4	0x7988	No error (0)	xerolimited.sc.omtrdc.net		63.140.36.51	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:11.994601011 CEST	1.1.1.1	192.168.2.4	0x7988	No error (0)	xerolimited.sc.omtrdc.net		63.140.37.206	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:12.037823915 CEST	1.1.1.1	192.168.2.4	0xcec4	No error (0)	xero.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:12.037823915 CEST	1.1.1.1	192.168.2.4	0xcec4	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:12.037823915 CEST	1.1.1.1	192.168.2.4	0xcec4	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:12.038149118 CEST	1.1.1.1	192.168.2.4	0xa027	No error (0)	xero.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:12.038149118 CEST	1.1.1.1	192.168.2.4	0xa027	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:12.038149118 CEST	1.1.1.1	192.168.2.4	0xa027	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:12.038149118 CEST	1.1.1.1	192.168.2.4	0xa027	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		100.20.148.237	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:12.038149118 CEST	1.1.1.1	192.168.2.4	0xa027	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		35.161.28.41	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:12.038149118 CEST	1.1.1.1	192.168.2.4	0xa027	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		35.83.124.239	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:12.038149118 CEST	1.1.1.1	192.168.2.4	0xa027	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.43.228.114	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:12.038149118 CEST	1.1.1.1	192.168.2.4	0xa027	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.35.7.177	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:12.038149118 CEST	1.1.1.1	192.168.2.4	0xa027	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.42.104.131	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:12.038149118 CEST	1.1.1.1	192.168.2.4	0xa027	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.40.174.159	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:12.038149118 CEST	1.1.1.1	192.168.2.4	0xa027	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		34.215.13.170	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:12.038218975 CEST	1.1.1.1	192.168.2.4	0x55d3	No error (0)	xero.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:12.038218975 CEST	1.1.1.1	192.168.2.4	0x55d3	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:12.038218975 CEST	1.1.1.1	192.168.2.4	0x55d3	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:12.038218975 CEST	1.1.1.1	192.168.2.4	0x55d3	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		100.20.148.237	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:12.038218975 CEST	1.1.1.1	192.168.2.4	0x55d3	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		35.161.28.41	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:12.038218975 CEST	1.1.1.1	192.168.2.4	0x55d3	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		35.83.124.239	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:12.038218975 CEST	1.1.1.1	192.168.2.4	0x55d3	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.43.228.114	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:12.038218975 CEST	1.1.1.1	192.168.2.4	0x55d3	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.35.7.177	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:12.038218975 CEST	1.1.1.1	192.168.2.4	0x55d3	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.42.104.131	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:12.038218975 CEST	1.1.1.1	192.168.2.4	0x55d3	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.40.174.159	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:12.038218975 CEST	1.1.1.1	192.168.2.4	0x55d3	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		34.215.13.170	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:12.039300919 CEST	1.1.1.1	192.168.2.4	0xd7ce	No error (0)	xero.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:12.039300919 CEST	1.1.1.1	192.168.2.4	0xd7ce	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:12.039300919 CEST	1.1.1.1	192.168.2.4	0xd7ce	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:12.391110897 CEST	1.1.1.1	192.168.2.4	0xe01e	No error (0)	widget.trustpilot.com		18.154.132.87	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:12.391110897 CEST	1.1.1.1	192.168.2.4	0xe01e	No error (0)	widget.trustpilot.com		18.154.132.124	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:12.391110897 CEST	1.1.1.1	192.168.2.4	0xe01e	No error (0)	widget.trustpilot.com		18.154.132.48	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:12.391110897 CEST	1.1.1.1	192.168.2.4	0xe01e	No error (0)	widget.trustpilot.com		18.154.132.63	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:13.044442892 CEST	1.1.1.1	192.168.2.4	0x710b	No error (0)	xero.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:13.044442892 CEST	1.1.1.1	192.168.2.4	0x710b	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:13.044442892 CEST	1.1.1.1	192.168.2.4	0x710b	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:13.044442892 CEST	1.1.1.1	192.168.2.4	0x710b	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		100.20.148.237	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:13.044442892 CEST	1.1.1.1	192.168.2.4	0x710b	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.40.174.159	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:13.044442892 CEST	1.1.1.1	192.168.2.4	0x710b	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		35.83.124.239	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:13.044442892 CEST	1.1.1.1	192.168.2.4	0x710b	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.43.228.114	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:13.044442892 CEST	1.1.1.1	192.168.2.4	0x710b	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.35.7.177	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:13.044442892 CEST	1.1.1.1	192.168.2.4	0x710b	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		34.215.13.170	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:13.044442892 CEST	1.1.1.1	192.168.2.4	0x710b	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		35.161.28.41	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:13.044442892 CEST	1.1.1.1	192.168.2.4	0x710b	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.42.104.131	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:13.045308113 CEST	1.1.1.1	192.168.2.4	0x9be7	No error (0)	xero.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:13.045308113 CEST	1.1.1.1	192.168.2.4	0x9be7	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:13.045308113 CEST	1.1.1.1	192.168.2.4	0x9be7	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:13.047940016 CEST	1.1.1.1	192.168.2.4	0x90bb	No error (0)	xerolimited.sc.omtrdc.net		63.140.36.145	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:13.047940016 CEST	1.1.1.1	192.168.2.4	0x90bb	No error (0)	xerolimited.sc.omtrdc.net		63.140.37.126	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:13.047940016 CEST	1.1.1.1	192.168.2.4	0x90bb	No error (0)	xerolimited.sc.omtrdc.net		63.140.37.206	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:13.047940016 CEST	1.1.1.1	192.168.2.4	0x90bb	No error (0)	xerolimited.sc.omtrdc.net		63.140.36.51	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:13.791588068 CEST	1.1.1.1	192.168.2.4	0x950c	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:13.793092012 CEST	1.1.1.1	192.168.2.4	0x1cfa	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:13.804418087 CEST	1.1.1.1	192.168.2.4	0xa47e	No error (0)	xerolimited.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:13.804418087 CEST	1.1.1.1	192.168.2.4	0xa47e	No error (0)	adobetarget.data.adobedc.net		63.140.37.206	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:13.804418087 CEST	1.1.1.1	192.168.2.4	0xa47e	No error (0)	adobetarget.data.adobedc.net		63.140.36.145	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:13.804418087 CEST	1.1.1.1	192.168.2.4	0xa47e	No error (0)	adobetarget.data.adobedc.net		63.140.36.51	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:13.804418087 CEST	1.1.1.1	192.168.2.4	0xa47e	No error (0)	adobetarget.data.adobedc.net		63.140.37.126	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:13.809956074 CEST	1.1.1.1	192.168.2.4	0x805e	No error (0)	xerolimited.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:14.596808910 CEST	1.1.1.1	192.168.2.4	0x1167	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:14.596872091 CEST	1.1.1.1	192.168.2.4	0x1368	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:14.614381075 CEST	1.1.1.1	192.168.2.4	0xa0a0	No error (0)	www.dwin1.com	d2pbcviywxotf2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:14.614381075 CEST	1.1.1.1	192.168.2.4	0xa0a0	No error (0)	d2pbcviywxotf2.cloudfront.net		13.226.210.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:14.614381075 CEST	1.1.1.1	192.168.2.4	0xa0a0	No error (0)	d2pbcviywxotf2.cloudfront.net		13.226.210.80	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:14.614381075 CEST	1.1.1.1	192.168.2.4	0xa0a0	No error (0)	d2pbcviywxotf2.cloudfront.net		13.226.210.75	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:14.614381075 CEST	1.1.1.1	192.168.2.4	0xa0a0	No error (0)	d2pbcviywxotf2.cloudfront.net		13.226.210.109	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:14.635381937 CEST	1.1.1.1	192.168.2.4	0x52f2	No error (0)	www.dwin1.com	d2pbcviywxotf2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:15.388315916 CEST	1.1.1.1	192.168.2.4	0x81ba	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:15.388315916 CEST	1.1.1.1	192.168.2.4	0x81ba	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:15.388315916 CEST	1.1.1.1	192.168.2.4	0x81ba	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:15.388315916 CEST	1.1.1.1	192.168.2.4	0x81ba	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:15.388315916 CEST	1.1.1.1	192.168.2.4	0x81ba	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:15.388899088 CEST	1.1.1.1	192.168.2.4	0xe454	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:15.473550081 CEST	1.1.1.1	192.168.2.4	0xe704	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:15.473680019 CEST	1.1.1.1	192.168.2.4	0xfcb6	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:15.473680019 CEST	1.1.1.1	192.168.2.4	0xfcb6	No error (0)	scontent.xx.fbcdn.net		31.13.70.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:15.476268053 CEST	1.1.1.1	192.168.2.4	0xe718	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:15.476268053 CEST	1.1.1.1	192.168.2.4	0xe718	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:15.476702929 CEST	1.1.1.1	192.168.2.4	0xc474	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:15.476702929 CEST	1.1.1.1	192.168.2.4	0xc474	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:16.089452982 CEST	1.1.1.1	192.168.2.4	0x1284	No error (0)	widget.trustpilot.com		18.154.132.87	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.089452982 CEST	1.1.1.1	192.168.2.4	0x1284	No error (0)	widget.trustpilot.com		18.154.132.124	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.089452982 CEST	1.1.1.1	192.168.2.4	0x1284	No error (0)	widget.trustpilot.com		18.154.132.48	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.089452982 CEST	1.1.1.1	192.168.2.4	0x1284	No error (0)	widget.trustpilot.com		18.154.132.63	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.452334881 CEST	1.1.1.1	192.168.2.4	0x69a6	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:16.452334881 CEST	1.1.1.1	192.168.2.4	0x69a6	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:16.452357054 CEST	1.1.1.1	192.168.2.4	0x54c0	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:16.452357054 CEST	1.1.1.1	192.168.2.4	0x54c0	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:16.474577904 CEST	1.1.1.1	192.168.2.4	0x12a0	No error (0)	stats.g.doubleclick.net		142.250.141.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.474577904 CEST	1.1.1.1	192.168.2.4	0x12a0	No error (0)	stats.g.doubleclick.net		142.250.141.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.474577904 CEST	1.1.1.1	192.168.2.4	0x12a0	No error (0)	stats.g.doubleclick.net		142.250.141.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.474577904 CEST	1.1.1.1	192.168.2.4	0x12a0	No error (0)	stats.g.doubleclick.net		142.250.141.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.478504896 CEST	1.1.1.1	192.168.2.4	0xa818	No error (0)	tracking.g2crowd.com		172.64.144.225	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.478504896 CEST	1.1.1.1	192.168.2.4	0xa818	No error (0)	tracking.g2crowd.com		104.18.43.31	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.478935003 CEST	1.1.1.1	192.168.2.4	0xd9d6	No error (0)	tracking.g2crowd.com			65	IN (0x0001)	false
Apr 24, 2024 19:31:16.480413914 CEST	1.1.1.1	192.168.2.4	0xc58d	No error (0)	tags.srv.stackadapt.com		3.225.21.46	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.480413914 CEST	1.1.1.1	192.168.2.4	0xc58d	No error (0)	tags.srv.stackadapt.com		18.210.82.4	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.480413914 CEST	1.1.1.1	192.168.2.4	0xc58d	No error (0)	tags.srv.stackadapt.com		52.86.27.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.480413914 CEST	1.1.1.1	192.168.2.4	0xc58d	No error (0)	tags.srv.stackadapt.com		18.210.31.191	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.480413914 CEST	1.1.1.1	192.168.2.4	0xc58d	No error (0)	tags.srv.stackadapt.com		100.26.119.80	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.480413914 CEST	1.1.1.1	192.168.2.4	0xc58d	No error (0)	tags.srv.stackadapt.com		54.84.194.59	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.920070887 CEST	1.1.1.1	192.168.2.4	0x9f88	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:16.920070887 CEST	1.1.1.1	192.168.2.4	0x9f88	No error (0)	edge.gycpi.b.yahoodns.net		209.73.190.12	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.920070887 CEST	1.1.1.1	192.168.2.4	0x9f88	No error (0)	edge.gycpi.b.yahoodns.net		209.73.190.11	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.920146942 CEST	1.1.1.1	192.168.2.4	0x951e	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:16.939426899 CEST	1.1.1.1	192.168.2.4	0x1bc2	No error (0)	secure.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:16.939426899 CEST	1.1.1.1	192.168.2.4	0x1bc2	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:16.939574957 CEST	1.1.1.1	192.168.2.4	0x8ded	No error (0)	secure.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:16.939574957 CEST	1.1.1.1	192.168.2.4	0x8ded	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:16.939574957 CEST	1.1.1.1	192.168.2.4	0x8ded	No error (0)	global.px.quantserve.com		192.184.67.70	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.939574957 CEST	1.1.1.1	192.168.2.4	0x8ded	No error (0)	global.px.quantserve.com		192.184.67.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.939574957 CEST	1.1.1.1	192.168.2.4	0x8ded	No error (0)	global.px.quantserve.com		192.184.67.40	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.939574957 CEST	1.1.1.1	192.168.2.4	0x8ded	No error (0)	global.px.quantserve.com		192.184.67.143	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.975728989 CEST	1.1.1.1	192.168.2.4	0x62bd	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:16.975728989 CEST	1.1.1.1	192.168.2.4	0x62bd	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.975728989 CEST	1.1.1.1	192.168.2.4	0x62bd	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.975728989 CEST	1.1.1.1	192.168.2.4	0x62bd	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.975728989 CEST	1.1.1.1	192.168.2.4	0x62bd	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:16.976887941 CEST	1.1.1.1	192.168.2.4	0x2b88	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:17.361874104 CEST	1.1.1.1	192.168.2.4	0x48fd	No error (0)	acdn.adnxs.com	secure-adnxs.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:17.361895084 CEST	1.1.1.1	192.168.2.4	0xde8f	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:17.362417936 CEST	1.1.1.1	192.168.2.4	0xc9d5	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:17.362417936 CEST	1.1.1.1	192.168.2.4	0xc9d5	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.154.142.121	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:17.363395929 CEST	1.1.1.1	192.168.2.4	0x6da8	No error (0)	tag.demandbase.com		108.139.10.76	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:17.363395929 CEST	1.1.1.1	192.168.2.4	0x6da8	No error (0)	tag.demandbase.com		108.139.10.63	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:17.363395929 CEST	1.1.1.1	192.168.2.4	0x6da8	No error (0)	tag.demandbase.com		108.139.10.26	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:17.363395929 CEST	1.1.1.1	192.168.2.4	0x6da8	No error (0)	tag.demandbase.com		108.139.10.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:17.367178917 CEST	1.1.1.1	192.168.2.4	0x89c5	No error (0)	stats.g.doubleclick.net		142.250.141.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:17.367178917 CEST	1.1.1.1	192.168.2.4	0x89c5	No error (0)	stats.g.doubleclick.net		142.250.141.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:17.367178917 CEST	1.1.1.1	192.168.2.4	0x89c5	No error (0)	stats.g.doubleclick.net		142.250.141.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:17.367178917 CEST	1.1.1.1	192.168.2.4	0x89c5	No error (0)	stats.g.doubleclick.net		142.250.141.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.011470079 CEST	1.1.1.1	192.168.2.4	0x48bb	No error (0)	td.doubleclick.net		142.250.101.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.011470079 CEST	1.1.1.1	192.168.2.4	0x48bb	No error (0)	td.doubleclick.net		142.250.101.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.011470079 CEST	1.1.1.1	192.168.2.4	0x48bb	No error (0)	td.doubleclick.net		142.250.101.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.011470079 CEST	1.1.1.1	192.168.2.4	0x48bb	No error (0)	td.doubleclick.net		142.250.101.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.059499025 CEST	1.1.1.1	192.168.2.4	0x78dd	No error (0)	9401320.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:18.060571909 CEST	1.1.1.1	192.168.2.4	0xd5a9	No error (0)	9401320.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:18.060571909 CEST	1.1.1.1	192.168.2.4	0xd5a9	No error (0)	dart.l.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.060571909 CEST	1.1.1.1	192.168.2.4	0xd5a9	No error (0)	dart.l.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.682673931 CEST	1.1.1.1	192.168.2.4	0x9965	No error (0)	tags.srv.stackadapt.com		100.26.119.80	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.682673931 CEST	1.1.1.1	192.168.2.4	0x9965	No error (0)	tags.srv.stackadapt.com		18.210.82.4	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.682673931 CEST	1.1.1.1	192.168.2.4	0x9965	No error (0)	tags.srv.stackadapt.com		18.210.31.191	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.682673931 CEST	1.1.1.1	192.168.2.4	0x9965	No error (0)	tags.srv.stackadapt.com		3.225.21.46	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.682673931 CEST	1.1.1.1	192.168.2.4	0x9965	No error (0)	tags.srv.stackadapt.com		52.86.27.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.682673931 CEST	1.1.1.1	192.168.2.4	0x9965	No error (0)	tags.srv.stackadapt.com		54.84.194.59	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.789524078 CEST	1.1.1.1	192.168.2.4	0xc421	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:18.790108919 CEST	1.1.1.1	192.168.2.4	0x8b5a	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:18.790108919 CEST	1.1.1.1	192.168.2.4	0x8b5a	No error (0)	edge.gycpi.b.yahoodns.net		209.73.190.11	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.790108919 CEST	1.1.1.1	192.168.2.4	0x8b5a	No error (0)	edge.gycpi.b.yahoodns.net		209.73.190.12	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.837300062 CEST	1.1.1.1	192.168.2.4	0x37	No error (0)	api.company-target.com		18.154.144.27	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.837300062 CEST	1.1.1.1	192.168.2.4	0x37	No error (0)	api.company-target.com		18.154.144.129	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.837300062 CEST	1.1.1.1	192.168.2.4	0x37	No error (0)	api.company-target.com		18.154.144.9	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.837300062 CEST	1.1.1.1	192.168.2.4	0x37	No error (0)	api.company-target.com		18.154.144.122	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.839545012 CEST	1.1.1.1	192.168.2.4	0x9ba	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:18.839545012 CEST	1.1.1.1	192.168.2.4	0x9ba	No error (0)	s.dsp-prod.demandbase.com		34.96.71.22	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:18.840377092 CEST	1.1.1.1	192.168.2.4	0x2abf	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:18.869930029 CEST	1.1.1.1	192.168.2.4	0x3886	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:18.869930029 CEST	1.1.1.1	192.168.2.4	0x3886	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:18.870862007 CEST	1.1.1.1	192.168.2.4	0xf280	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:18.870862007 CEST	1.1.1.1	192.168.2.4	0xf280	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:19.181513071 CEST	1.1.1.1	192.168.2.4	0xfe39	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:19.181513071 CEST	1.1.1.1	192.168.2.4	0xfe39	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.181513071 CEST	1.1.1.1	192.168.2.4	0xfe39	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.181513071 CEST	1.1.1.1	192.168.2.4	0xfe39	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.181513071 CEST	1.1.1.1	192.168.2.4	0xfe39	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.181560993 CEST	1.1.1.1	192.168.2.4	0x137e	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:19.664788008 CEST	1.1.1.1	192.168.2.4	0xaa98	No error (0)	www.google.com		142.250.141.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.664788008 CEST	1.1.1.1	192.168.2.4	0xaa98	No error (0)	www.google.com		142.250.141.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.664788008 CEST	1.1.1.1	192.168.2.4	0xaa98	No error (0)	www.google.com		142.250.141.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.664788008 CEST	1.1.1.1	192.168.2.4	0xaa98	No error (0)	www.google.com		142.250.141.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.664788008 CEST	1.1.1.1	192.168.2.4	0xaa98	No error (0)	www.google.com		142.250.141.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.664788008 CEST	1.1.1.1	192.168.2.4	0xaa98	No error (0)	www.google.com		142.250.141.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.664949894 CEST	1.1.1.1	192.168.2.4	0x4de0	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 19:31:19.746527910 CEST	1.1.1.1	192.168.2.4	0x7ceb	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:19.746527910 CEST	1.1.1.1	192.168.2.4	0x7ceb	No error (0)	platform.twitter.map.fastly.net		146.75.92.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.747072935 CEST	1.1.1.1	192.168.2.4	0xf582	No error (0)	a.quora.com	a.quora.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:19.747530937 CEST	1.1.1.1	192.168.2.4	0xaf3e	No error (0)	a.quora.com	a.quora.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:19.747704983 CEST	1.1.1.1	192.168.2.4	0xf998	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:19.748238087 CEST	1.1.1.1	192.168.2.4	0xfe3d	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:19.748238087 CEST	1.1.1.1	192.168.2.4	0xfe3d	No error (0)	d1ykf07e75w7ss.cloudfront.net		52.85.204.136	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.748944998 CEST	1.1.1.1	192.168.2.4	0xeea1	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:19.750519037 CEST	1.1.1.1	192.168.2.4	0xb1ad	No error (0)	tag-logger.demandbase.com		18.239.199.34	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.750519037 CEST	1.1.1.1	192.168.2.4	0xb1ad	No error (0)	tag-logger.demandbase.com		18.239.199.124	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.750519037 CEST	1.1.1.1	192.168.2.4	0xb1ad	No error (0)	tag-logger.demandbase.com		18.239.199.122	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.750519037 CEST	1.1.1.1	192.168.2.4	0xb1ad	No error (0)	tag-logger.demandbase.com		18.239.199.12	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.753094912 CEST	1.1.1.1	192.168.2.4	0x5ec4	No error (0)	api.company-target.com		18.154.144.27	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.753094912 CEST	1.1.1.1	192.168.2.4	0x5ec4	No error (0)	api.company-target.com		18.154.144.129	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.753094912 CEST	1.1.1.1	192.168.2.4	0x5ec4	No error (0)	api.company-target.com		18.154.144.122	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.753094912 CEST	1.1.1.1	192.168.2.4	0x5ec4	No error (0)	api.company-target.com		18.154.144.9	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.796948910 CEST	1.1.1.1	192.168.2.4	0x32d6	No error (0)	adservice.google.com		142.251.2.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.796948910 CEST	1.1.1.1	192.168.2.4	0x32d6	No error (0)	adservice.google.com		142.251.2.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.796948910 CEST	1.1.1.1	192.168.2.4	0x32d6	No error (0)	adservice.google.com		142.251.2.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.796948910 CEST	1.1.1.1	192.168.2.4	0x32d6	No error (0)	adservice.google.com		142.251.2.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.797079086 CEST	1.1.1.1	192.168.2.4	0x512f	No error (0)	adservice.google.com			65	IN (0x0001)	false
Apr 24, 2024 19:31:19.824389935 CEST	1.1.1.1	192.168.2.4	0xaa0e	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 24, 2024 19:31:19.824856997 CEST	1.1.1.1	192.168.2.4	0x4975	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.824856997 CEST	1.1.1.1	192.168.2.4	0x4975	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.825438976 CEST	1.1.1.1	192.168.2.4	0x9ca3	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:19.826721907 CEST	1.1.1.1	192.168.2.4	0x9231	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:19.826773882 CEST	1.1.1.1	192.168.2.4	0xc1a6	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:19.841866016 CEST	1.1.1.1	192.168.2.4	0x7aa0	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:19.841866016 CEST	1.1.1.1	192.168.2.4	0x7aa0	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.239.87.50	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.841866016 CEST	1.1.1.1	192.168.2.4	0x7aa0	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.238.45.159	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.841866016 CEST	1.1.1.1	192.168.2.4	0x7aa0	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.234.41.35	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.841866016 CEST	1.1.1.1	192.168.2.4	0x7aa0	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.236.114.45	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.841866016 CEST	1.1.1.1	192.168.2.4	0x7aa0	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.230.195.204	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.841866016 CEST	1.1.1.1	192.168.2.4	0x7aa0	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.233.102.171	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.841866016 CEST	1.1.1.1	192.168.2.4	0x7aa0	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.221.105.180	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:19.841866016 CEST	1.1.1.1	192.168.2.4	0x7aa0	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.225.117.71	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.003189087 CEST	1.1.1.1	192.168.2.4	0xcb4e	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:20.003189087 CEST	1.1.1.1	192.168.2.4	0xcb4e	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.003189087 CEST	1.1.1.1	192.168.2.4	0xcb4e	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.003189087 CEST	1.1.1.1	192.168.2.4	0xcb4e	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.003189087 CEST	1.1.1.1	192.168.2.4	0xcb4e	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.004336119 CEST	1.1.1.1	192.168.2.4	0x4342	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:20.558820963 CEST	1.1.1.1	192.168.2.4	0x4ac0	No error (0)	www.google.com		142.250.141.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.558820963 CEST	1.1.1.1	192.168.2.4	0x4ac0	No error (0)	www.google.com		142.250.141.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.558820963 CEST	1.1.1.1	192.168.2.4	0x4ac0	No error (0)	www.google.com		142.250.141.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.558820963 CEST	1.1.1.1	192.168.2.4	0x4ac0	No error (0)	www.google.com		142.250.141.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.558820963 CEST	1.1.1.1	192.168.2.4	0x4ac0	No error (0)	www.google.com		142.250.141.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.558820963 CEST	1.1.1.1	192.168.2.4	0x4ac0	No error (0)	www.google.com		142.250.141.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.558948040 CEST	1.1.1.1	192.168.2.4	0xbd48	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 19:31:20.700886011 CEST	1.1.1.1	192.168.2.4	0xf8d2	No error (0)	q.quora.com		52.200.154.95	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.700886011 CEST	1.1.1.1	192.168.2.4	0xf8d2	No error (0)	q.quora.com		52.200.166.19	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.700886011 CEST	1.1.1.1	192.168.2.4	0xf8d2	No error (0)	q.quora.com		52.21.40.167	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.700886011 CEST	1.1.1.1	192.168.2.4	0xf8d2	No error (0)	q.quora.com		52.45.52.13	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.700886011 CEST	1.1.1.1	192.168.2.4	0xf8d2	No error (0)	q.quora.com		52.3.212.252	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.718863010 CEST	1.1.1.1	192.168.2.4	0xb9bd	No error (0)	aax-eu.amazon-adsystem.com		67.220.226.234	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.742836952 CEST	1.1.1.1	192.168.2.4	0xca6f	No error (0)	adservice.google.com		74.125.137.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.742836952 CEST	1.1.1.1	192.168.2.4	0xca6f	No error (0)	adservice.google.com		74.125.137.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.742836952 CEST	1.1.1.1	192.168.2.4	0xca6f	No error (0)	adservice.google.com		74.125.137.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.742836952 CEST	1.1.1.1	192.168.2.4	0xca6f	No error (0)	adservice.google.com		74.125.137.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.742855072 CEST	1.1.1.1	192.168.2.4	0x6689	No error (0)	adservice.google.com			65	IN (0x0001)	false
Apr 24, 2024 19:31:20.765386105 CEST	1.1.1.1	192.168.2.4	0x8b42	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:20.765605927 CEST	1.1.1.1	192.168.2.4	0xf143	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:20.807334900 CEST	1.1.1.1	192.168.2.4	0xbbb2	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:20.807334900 CEST	1.1.1.1	192.168.2.4	0xbbb2	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.807334900 CEST	1.1.1.1	192.168.2.4	0xbbb2	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.807334900 CEST	1.1.1.1	192.168.2.4	0xbbb2	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.807334900 CEST	1.1.1.1	192.168.2.4	0xbbb2	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.807353973 CEST	1.1.1.1	192.168.2.4	0x787f	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:20.872349024 CEST	1.1.1.1	192.168.2.4	0xf860	No error (0)	tag-logger.demandbase.com		18.239.199.122	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.872349024 CEST	1.1.1.1	192.168.2.4	0xf860	No error (0)	tag-logger.demandbase.com		18.239.199.12	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.872349024 CEST	1.1.1.1	192.168.2.4	0xf860	No error (0)	tag-logger.demandbase.com		18.239.199.34	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.872349024 CEST	1.1.1.1	192.168.2.4	0xf860	No error (0)	tag-logger.demandbase.com		18.239.199.124	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.892628908 CEST	1.1.1.1	192.168.2.4	0x9c15	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:20.892628908 CEST	1.1.1.1	192.168.2.4	0x9c15	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.239.87.50	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.892628908 CEST	1.1.1.1	192.168.2.4	0x9c15	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.225.117.71	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.892628908 CEST	1.1.1.1	192.168.2.4	0x9c15	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.233.102.171	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.892628908 CEST	1.1.1.1	192.168.2.4	0x9c15	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.230.195.204	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.892628908 CEST	1.1.1.1	192.168.2.4	0x9c15	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.221.105.180	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.892628908 CEST	1.1.1.1	192.168.2.4	0x9c15	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.236.114.45	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.892628908 CEST	1.1.1.1	192.168.2.4	0x9c15	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.238.45.159	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.892628908 CEST	1.1.1.1	192.168.2.4	0x9c15	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.234.41.35	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:20.893234015 CEST	1.1.1.1	192.168.2.4	0xec10	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:21.417444944 CEST	1.1.1.1	192.168.2.4	0x298c	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 24, 2024 19:31:21.417485952 CEST	1.1.1.1	192.168.2.4	0x3603	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.417485952 CEST	1.1.1.1	192.168.2.4	0x3603	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.578471899 CEST	1.1.1.1	192.168.2.4	0x3a21	No error (0)	rules.quantcount.com	d2fashanjl7d9f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:21.578471899 CEST	1.1.1.1	192.168.2.4	0x3a21	No error (0)	d2fashanjl7d9f.cloudfront.net		18.164.174.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.578471899 CEST	1.1.1.1	192.168.2.4	0x3a21	No error (0)	d2fashanjl7d9f.cloudfront.net		18.164.174.12	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.578471899 CEST	1.1.1.1	192.168.2.4	0x3a21	No error (0)	d2fashanjl7d9f.cloudfront.net		18.164.174.20	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.578471899 CEST	1.1.1.1	192.168.2.4	0x3a21	No error (0)	d2fashanjl7d9f.cloudfront.net		18.164.174.123	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.578541040 CEST	1.1.1.1	192.168.2.4	0x42b2	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.578541040 CEST	1.1.1.1	192.168.2.4	0x42b2	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.578609943 CEST	1.1.1.1	192.168.2.4	0x7281	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 19:31:21.581490040 CEST	1.1.1.1	192.168.2.4	0x71a8	No error (0)	rules.quantcount.com	d2fashanjl7d9f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:21.625178099 CEST	1.1.1.1	192.168.2.4	0xf205	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:21.625178099 CEST	1.1.1.1	192.168.2.4	0xf205	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:21.625178099 CEST	1.1.1.1	192.168.2.4	0xf205	No error (0)	ib.anycast.adnxs.com		104.254.150.241	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.625178099 CEST	1.1.1.1	192.168.2.4	0xf205	No error (0)	ib.anycast.adnxs.com		104.254.151.36	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.625178099 CEST	1.1.1.1	192.168.2.4	0xf205	No error (0)	ib.anycast.adnxs.com		104.254.151.60	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.625178099 CEST	1.1.1.1	192.168.2.4	0xf205	No error (0)	ib.anycast.adnxs.com		104.254.151.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.625178099 CEST	1.1.1.1	192.168.2.4	0xf205	No error (0)	ib.anycast.adnxs.com		104.254.151.68	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.625178099 CEST	1.1.1.1	192.168.2.4	0xf205	No error (0)	ib.anycast.adnxs.com		104.254.148.252	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.625178099 CEST	1.1.1.1	192.168.2.4	0xf205	No error (0)	ib.anycast.adnxs.com		104.254.148.251	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.740077972 CEST	1.1.1.1	192.168.2.4	0xe679	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:21.740077972 CEST	1.1.1.1	192.168.2.4	0xe679	No error (0)	spdc-global.pbp.gysm.yahoodns.net		35.155.89.175	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.740077972 CEST	1.1.1.1	192.168.2.4	0xe679	No error (0)	spdc-global.pbp.gysm.yahoodns.net		54.186.157.75	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.740128040 CEST	1.1.1.1	192.168.2.4	0x44c8	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:21.742136955 CEST	1.1.1.1	192.168.2.4	0x1055	No error (0)	q.quora.com		52.200.154.95	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.742136955 CEST	1.1.1.1	192.168.2.4	0x1055	No error (0)	q.quora.com		52.21.40.167	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.742136955 CEST	1.1.1.1	192.168.2.4	0x1055	No error (0)	q.quora.com		52.200.166.19	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.742136955 CEST	1.1.1.1	192.168.2.4	0x1055	No error (0)	q.quora.com		52.45.52.13	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:21.742136955 CEST	1.1.1.1	192.168.2.4	0x1055	No error (0)	q.quora.com		52.3.212.252	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.433607101 CEST	1.1.1.1	192.168.2.4	0x804f	No error (0)	id.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.435545921 CEST	1.1.1.1	192.168.2.4	0x9d19	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:22.435545921 CEST	1.1.1.1	192.168.2.4	0x9d19	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:22.435545921 CEST	1.1.1.1	192.168.2.4	0x9d19	No error (0)	ib.anycast.adnxs.com		104.254.151.68	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.435545921 CEST	1.1.1.1	192.168.2.4	0x9d19	No error (0)	ib.anycast.adnxs.com		104.254.151.60	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.435545921 CEST	1.1.1.1	192.168.2.4	0x9d19	No error (0)	ib.anycast.adnxs.com		104.254.151.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.435545921 CEST	1.1.1.1	192.168.2.4	0x9d19	No error (0)	ib.anycast.adnxs.com		104.254.150.241	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.435545921 CEST	1.1.1.1	192.168.2.4	0x9d19	No error (0)	ib.anycast.adnxs.com		104.254.151.36	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.435545921 CEST	1.1.1.1	192.168.2.4	0x9d19	No error (0)	ib.anycast.adnxs.com		104.254.148.252	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.435545921 CEST	1.1.1.1	192.168.2.4	0x9d19	No error (0)	ib.anycast.adnxs.com		104.254.148.251	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.448672056 CEST	1.1.1.1	192.168.2.4	0x76eb	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 19:31:22.448914051 CEST	1.1.1.1	192.168.2.4	0x84cc	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.448914051 CEST	1.1.1.1	192.168.2.4	0x84cc	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.454526901 CEST	1.1.1.1	192.168.2.4	0xc338	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:22.455199003 CEST	1.1.1.1	192.168.2.4	0xb195	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:22.455199003 CEST	1.1.1.1	192.168.2.4	0xb195	No error (0)	star-mini.c10r.facebook.com		31.13.70.36	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.458564043 CEST	1.1.1.1	192.168.2.4	0x6b7b	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.458564043 CEST	1.1.1.1	192.168.2.4	0x6b7b	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.458596945 CEST	1.1.1.1	192.168.2.4	0xaf46	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 19:31:22.461812019 CEST	1.1.1.1	192.168.2.4	0xef4c	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.461812019 CEST	1.1.1.1	192.168.2.4	0xef4c	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.461941004 CEST	1.1.1.1	192.168.2.4	0x155	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 19:31:22.679063082 CEST	1.1.1.1	192.168.2.4	0x5599	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:22.679063082 CEST	1.1.1.1	192.168.2.4	0x5599	No error (0)	spdc-global.pbp.gysm.yahoodns.net		35.155.89.175	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.679063082 CEST	1.1.1.1	192.168.2.4	0x5599	No error (0)	spdc-global.pbp.gysm.yahoodns.net		54.186.157.75	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:22.679364920 CEST	1.1.1.1	192.168.2.4	0xdc66	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:23.265552044 CEST	1.1.1.1	192.168.2.4	0xe0ad	No error (0)	t.co		104.244.42.197	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:23.266494989 CEST	1.1.1.1	192.168.2.4	0x7427	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:23.266494989 CEST	1.1.1.1	192.168.2.4	0x7427	No error (0)	star-mini.c10r.facebook.com		31.13.70.36	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:23.266581059 CEST	1.1.1.1	192.168.2.4	0xb591	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:23.352107048 CEST	1.1.1.1	192.168.2.4	0x2851	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:23.352107048 CEST	1.1.1.1	192.168.2.4	0x2851	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:23.352107048 CEST	1.1.1.1	192.168.2.4	0x2851	No error (0)	s.twitter.com		104.244.42.3	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:23.352341890 CEST	1.1.1.1	192.168.2.4	0x9152	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:23.352341890 CEST	1.1.1.1	192.168.2.4	0x9152	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:23.429312944 CEST	1.1.1.1	192.168.2.4	0x87a6	No error (0)	googleads.g.doubleclick.net		142.251.2.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:23.429312944 CEST	1.1.1.1	192.168.2.4	0x87a6	No error (0)	googleads.g.doubleclick.net		142.251.2.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:23.429312944 CEST	1.1.1.1	192.168.2.4	0x87a6	No error (0)	googleads.g.doubleclick.net		142.251.2.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:23.429312944 CEST	1.1.1.1	192.168.2.4	0x87a6	No error (0)	googleads.g.doubleclick.net		142.251.2.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:23.430553913 CEST	1.1.1.1	192.168.2.4	0x5c5e	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 19:31:23.493307114 CEST	1.1.1.1	192.168.2.4	0x69b4	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:23.493307114 CEST	1.1.1.1	192.168.2.4	0x69b4	No error (0)	global.px.quantserve.com		192.184.67.40	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:23.493307114 CEST	1.1.1.1	192.168.2.4	0x69b4	No error (0)	global.px.quantserve.com		192.184.67.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:23.493307114 CEST	1.1.1.1	192.168.2.4	0x69b4	No error (0)	global.px.quantserve.com		192.184.67.143	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:23.493307114 CEST	1.1.1.1	192.168.2.4	0x69b4	No error (0)	global.px.quantserve.com		192.184.67.70	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:23.493333101 CEST	1.1.1.1	192.168.2.4	0x9281	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:23.494508028 CEST	1.1.1.1	192.168.2.4	0x2787	No error (0)	ara.paa-reporting-advertising.amazon		3.163.125.9	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:23.494508028 CEST	1.1.1.1	192.168.2.4	0x2787	No error (0)	ara.paa-reporting-advertising.amazon		3.163.125.23	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:23.494508028 CEST	1.1.1.1	192.168.2.4	0x2787	No error (0)	ara.paa-reporting-advertising.amazon		3.163.125.67	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:23.494508028 CEST	1.1.1.1	192.168.2.4	0x2787	No error (0)	ara.paa-reporting-advertising.amazon		3.163.125.74	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:23.496531010 CEST	1.1.1.1	192.168.2.4	0x776e	No error (0)	aax-eu.amazon-adsystem.com		52.95.118.179	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:24.086206913 CEST	1.1.1.1	192.168.2.4	0xaac9	No error (0)	segments.company-target.com		216.137.39.63	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:24.086206913 CEST	1.1.1.1	192.168.2.4	0xaac9	No error (0)	segments.company-target.com		216.137.39.126	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:24.086206913 CEST	1.1.1.1	192.168.2.4	0xaac9	No error (0)	segments.company-target.com		216.137.39.37	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:24.086206913 CEST	1.1.1.1	192.168.2.4	0xaac9	No error (0)	segments.company-target.com		216.137.39.21	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:24.221236944 CEST	1.1.1.1	192.168.2.4	0xe70a	No error (0)	t.co		104.244.42.5	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:24.316127062 CEST	1.1.1.1	192.168.2.4	0xdaaf	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:24.316127062 CEST	1.1.1.1	192.168.2.4	0xdaaf	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:24.316127062 CEST	1.1.1.1	192.168.2.4	0xdaaf	No error (0)	s.twitter.com		104.244.42.3	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:24.316358089 CEST	1.1.1.1	192.168.2.4	0x3927	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:24.316358089 CEST	1.1.1.1	192.168.2.4	0x3927	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:24.329551935 CEST	1.1.1.1	192.168.2.4	0xce84	No error (0)	ara.paa-reporting-advertising.amazon		3.163.125.74	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:24.329551935 CEST	1.1.1.1	192.168.2.4	0xce84	No error (0)	ara.paa-reporting-advertising.amazon		3.163.125.23	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:24.329551935 CEST	1.1.1.1	192.168.2.4	0xce84	No error (0)	ara.paa-reporting-advertising.amazon		3.163.125.9	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:24.329551935 CEST	1.1.1.1	192.168.2.4	0xce84	No error (0)	ara.paa-reporting-advertising.amazon		3.163.125.67	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:24.580435038 CEST	1.1.1.1	192.168.2.4	0xa799	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:24.580435038 CEST	1.1.1.1	192.168.2.4	0xa799	No error (0)	global.px.quantserve.com		192.184.67.40	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:24.580435038 CEST	1.1.1.1	192.168.2.4	0xa799	No error (0)	global.px.quantserve.com		192.184.67.70	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:24.580435038 CEST	1.1.1.1	192.168.2.4	0xa799	No error (0)	global.px.quantserve.com		192.184.67.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:24.580435038 CEST	1.1.1.1	192.168.2.4	0xa799	No error (0)	global.px.quantserve.com		192.184.67.143	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:24.582843065 CEST	1.1.1.1	192.168.2.4	0x6611	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:24.987934113 CEST	1.1.1.1	192.168.2.4	0xb3ea	No error (0)	segments.company-target.com		216.137.39.37	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:24.987934113 CEST	1.1.1.1	192.168.2.4	0xb3ea	No error (0)	segments.company-target.com		216.137.39.63	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:24.987934113 CEST	1.1.1.1	192.168.2.4	0xb3ea	No error (0)	segments.company-target.com		216.137.39.21	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:24.987934113 CEST	1.1.1.1	192.168.2.4	0xb3ea	No error (0)	segments.company-target.com		216.137.39.126	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:25.125557899 CEST	1.1.1.1	192.168.2.4	0xfcc7	No error (0)	insight.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:25.125557899 CEST	1.1.1.1	192.168.2.4	0xfcc7	No error (0)	insight.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:25.125557899 CEST	1.1.1.1	192.168.2.4	0xfcc7	No error (0)	insight.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:25.125557899 CEST	1.1.1.1	192.168.2.4	0xfcc7	No error (0)	insight.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:26.228971004 CEST	1.1.1.1	192.168.2.4	0x206a	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:26.228971004 CEST	1.1.1.1	192.168.2.4	0x206a	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:26.228971004 CEST	1.1.1.1	192.168.2.4	0x206a	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:26.228971004 CEST	1.1.1.1	192.168.2.4	0x206a	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:27.761012077 CEST	1.1.1.1	192.168.2.4	0x42f6	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:27.761012077 CEST	1.1.1.1	192.168.2.4	0x42f6	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.154.142.121	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:27.761044025 CEST	1.1.1.1	192.168.2.4	0x55dd	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:28.441478968 CEST	1.1.1.1	192.168.2.4	0x69dc	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:28.441478968 CEST	1.1.1.1	192.168.2.4	0x69dc	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:28.788609982 CEST	1.1.1.1	192.168.2.4	0xa5f5	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:28.788609982 CEST	1.1.1.1	192.168.2.4	0xa5f5	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:28.788609982 CEST	1.1.1.1	192.168.2.4	0xa5f5	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:28.788609982 CEST	1.1.1.1	192.168.2.4	0xa5f5	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.32.69.132	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:28.788609982 CEST	1.1.1.1	192.168.2.4	0xa5f5	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		34.215.13.170	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:28.788609982 CEST	1.1.1.1	192.168.2.4	0xa5f5	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		100.20.115.95	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:28.788609982 CEST	1.1.1.1	192.168.2.4	0xa5f5	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		54.186.81.225	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:28.788609982 CEST	1.1.1.1	192.168.2.4	0xa5f5	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		35.83.134.25	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:28.788609982 CEST	1.1.1.1	192.168.2.4	0xa5f5	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.40.174.159	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:28.788609982 CEST	1.1.1.1	192.168.2.4	0xa5f5	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.43.4.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:28.788609982 CEST	1.1.1.1	192.168.2.4	0xa5f5	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		54.191.68.224	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:28.789150000 CEST	1.1.1.1	192.168.2.4	0x8f45	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:28.789150000 CEST	1.1.1.1	192.168.2.4	0x8f45	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:28.789150000 CEST	1.1.1.1	192.168.2.4	0x8f45	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:28.810199022 CEST	1.1.1.1	192.168.2.4	0xf381	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:28.810199022 CEST	1.1.1.1	192.168.2.4	0xf381	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:28.810199022 CEST	1.1.1.1	192.168.2.4	0xf381	No error (0)	ib.anycast.adnxs.com		104.254.150.241	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:28.810199022 CEST	1.1.1.1	192.168.2.4	0xf381	No error (0)	ib.anycast.adnxs.com		104.254.151.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:28.810199022 CEST	1.1.1.1	192.168.2.4	0xf381	No error (0)	ib.anycast.adnxs.com		104.254.148.252	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:28.810199022 CEST	1.1.1.1	192.168.2.4	0xf381	No error (0)	ib.anycast.adnxs.com		104.254.148.251	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:28.810199022 CEST	1.1.1.1	192.168.2.4	0xf381	No error (0)	ib.anycast.adnxs.com		104.254.151.68	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:28.810199022 CEST	1.1.1.1	192.168.2.4	0xf381	No error (0)	ib.anycast.adnxs.com		104.254.151.60	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:28.810199022 CEST	1.1.1.1	192.168.2.4	0xf381	No error (0)	ib.anycast.adnxs.com		104.254.151.36	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:38.948057890 CEST	1.1.1.1	192.168.2.4	0x4530	No error (0)	user-tracking-api.dgt-digital-marketing.xero.com	user-tracking-api.dgt-digital-marketing.xero.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:39.007822990 CEST	1.1.1.1	192.168.2.4	0x569a	No error (0)	user-tracking-api.dgt-digital-marketing.xero.com	user-tracking-api.dgt-digital-marketing.xero.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:40.195934057 CEST	1.1.1.1	192.168.2.4	0x4cf6	No error (0)	user-tracking-api.dgt-digital-marketing.xero.com	user-tracking-api.dgt-digital-marketing.xero.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:40.196481943 CEST	1.1.1.1	192.168.2.4	0xb4b6	No error (0)	user-tracking-api.dgt-digital-marketing.xero.com	user-tracking-api.dgt-digital-marketing.xero.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:42.076342106 CEST	1.1.1.1	192.168.2.4	0x15b8	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:42.076342106 CEST	1.1.1.1	192.168.2.4	0x15b8	No error (0)	static-cdn.hotjar.com		18.173.121.47	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:42.076342106 CEST	1.1.1.1	192.168.2.4	0x15b8	No error (0)	static-cdn.hotjar.com		18.173.121.8	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:42.076342106 CEST	1.1.1.1	192.168.2.4	0x15b8	No error (0)	static-cdn.hotjar.com		18.173.121.3	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:42.076342106 CEST	1.1.1.1	192.168.2.4	0x15b8	No error (0)	static-cdn.hotjar.com		18.173.121.33	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:42.076894045 CEST	1.1.1.1	192.168.2.4	0x52bb	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:45.167923927 CEST	1.1.1.1	192.168.2.4	0xd9f	No error (0)	script.hotjar.com		18.155.202.90	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:45.167923927 CEST	1.1.1.1	192.168.2.4	0xd9f	No error (0)	script.hotjar.com		18.155.202.52	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:45.167923927 CEST	1.1.1.1	192.168.2.4	0xd9f	No error (0)	script.hotjar.com		18.155.202.12	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:45.167923927 CEST	1.1.1.1	192.168.2.4	0xd9f	No error (0)	script.hotjar.com		18.155.202.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:45.169248104 CEST	1.1.1.1	192.168.2.4	0x8de0	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:45.169248104 CEST	1.1.1.1	192.168.2.4	0x8de0	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:45.170054913 CEST	1.1.1.1	192.168.2.4	0x8814	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 19:31:45.175748110 CEST	1.1.1.1	192.168.2.4	0x9096	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 19:31:45.175803900 CEST	1.1.1.1	192.168.2.4	0x7e79	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:45.175803900 CEST	1.1.1.1	192.168.2.4	0x7e79	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:45.955715895 CEST	1.1.1.1	192.168.2.4	0x521	No error (0)	id.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:46.655720949 CEST	1.1.1.1	192.168.2.4	0x66de	No error (0)	ws.hotjar.com	wsky-live.live.eks.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:46.656028032 CEST	1.1.1.1	192.168.2.4	0x5599	No error (0)	ws.hotjar.com	wsky-live.live.eks.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:46.656028032 CEST	1.1.1.1	192.168.2.4	0x5599	No error (0)	wsky-live.live.eks.hotjar.com		52.50.39.109	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:46.656028032 CEST	1.1.1.1	192.168.2.4	0x5599	No error (0)	wsky-live.live.eks.hotjar.com		52.208.124.196	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:46.656028032 CEST	1.1.1.1	192.168.2.4	0x5599	No error (0)	wsky-live.live.eks.hotjar.com		52.16.23.80	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:46.656028032 CEST	1.1.1.1	192.168.2.4	0x5599	No error (0)	wsky-live.live.eks.hotjar.com		54.154.74.132	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:46.656028032 CEST	1.1.1.1	192.168.2.4	0x5599	No error (0)	wsky-live.live.eks.hotjar.com		54.154.154.225	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:46.656028032 CEST	1.1.1.1	192.168.2.4	0x5599	No error (0)	wsky-live.live.eks.hotjar.com		54.76.186.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:46.656028032 CEST	1.1.1.1	192.168.2.4	0x5599	No error (0)	wsky-live.live.eks.hotjar.com		52.18.20.246	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:46.656028032 CEST	1.1.1.1	192.168.2.4	0x5599	No error (0)	wsky-live.live.eks.hotjar.com		54.77.53.19	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:46.781820059 CEST	1.1.1.1	192.168.2.4	0x695	No error (0)	content.hotjar.io	pacman-content-live.live.eks.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:46.781820059 CEST	1.1.1.1	192.168.2.4	0x695	No error (0)	pacman-content-live.live.eks.hotjar.com		99.80.149.126	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:46.781820059 CEST	1.1.1.1	192.168.2.4	0x695	No error (0)	pacman-content-live.live.eks.hotjar.com		52.209.193.176	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:46.781820059 CEST	1.1.1.1	192.168.2.4	0x695	No error (0)	pacman-content-live.live.eks.hotjar.com		54.154.35.245	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:46.783102989 CEST	1.1.1.1	192.168.2.4	0xaa85	No error (0)	content.hotjar.io	pacman-content-live.live.eks.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:48.343900919 CEST	1.1.1.1	192.168.2.4	0xc2cf	No error (0)	content.hotjar.io	pacman-content-live.live.eks.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:48.344208002 CEST	1.1.1.1	192.168.2.4	0xcc55	No error (0)	content.hotjar.io	pacman-content-live.live.eks.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:48.344208002 CEST	1.1.1.1	192.168.2.4	0xcc55	No error (0)	pacman-content-live.live.eks.hotjar.com		52.209.193.176	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:48.344208002 CEST	1.1.1.1	192.168.2.4	0xcc55	No error (0)	pacman-content-live.live.eks.hotjar.com		99.80.149.126	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:48.344208002 CEST	1.1.1.1	192.168.2.4	0xcc55	No error (0)	pacman-content-live.live.eks.hotjar.com		54.154.35.245	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:48.682936907 CEST	1.1.1.1	192.168.2.4	0x62a9	No error (0)	cm.g.doubleclick.net		142.250.101.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:48.682936907 CEST	1.1.1.1	192.168.2.4	0x62a9	No error (0)	cm.g.doubleclick.net		142.250.101.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:48.682936907 CEST	1.1.1.1	192.168.2.4	0x62a9	No error (0)	cm.g.doubleclick.net		142.250.101.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:48.682936907 CEST	1.1.1.1	192.168.2.4	0x62a9	No error (0)	cm.g.doubleclick.net		142.250.101.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:48.710700035 CEST	1.1.1.1	192.168.2.4	0x5898	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:48.711909056 CEST	1.1.1.1	192.168.2.4	0xb	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:48.780495882 CEST	1.1.1.1	192.168.2.4	0x7248	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:49.150461912 CEST	1.1.1.1	192.168.2.4	0x67cd	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:49.150461912 CEST	1.1.1.1	192.168.2.4	0x67cd	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:50.553332090 CEST	1.1.1.1	192.168.2.4	0x2150	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:50.553332090 CEST	1.1.1.1	192.168.2.4	0x2150	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:31:50.553332090 CEST	1.1.1.1	192.168.2.4	0x2150	No error (0)	ib.anycast.adnxs.com		104.254.148.252	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:50.553332090 CEST	1.1.1.1	192.168.2.4	0x2150	No error (0)	ib.anycast.adnxs.com		104.254.148.251	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:50.553332090 CEST	1.1.1.1	192.168.2.4	0x2150	No error (0)	ib.anycast.adnxs.com		104.254.151.60	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:50.553332090 CEST	1.1.1.1	192.168.2.4	0x2150	No error (0)	ib.anycast.adnxs.com		104.254.150.241	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:50.553332090 CEST	1.1.1.1	192.168.2.4	0x2150	No error (0)	ib.anycast.adnxs.com		104.254.151.68	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:50.553332090 CEST	1.1.1.1	192.168.2.4	0x2150	No error (0)	ib.anycast.adnxs.com		104.254.151.36	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:50.553332090 CEST	1.1.1.1	192.168.2.4	0x2150	No error (0)	ib.anycast.adnxs.com		104.254.151.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:59.675359011 CEST	1.1.1.1	192.168.2.4	0xeb9	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:59.675359011 CEST	1.1.1.1	192.168.2.4	0xeb9	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:59.676095009 CEST	1.1.1.1	192.168.2.4	0xcc81	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 19:31:59.716685057 CEST	1.1.1.1	192.168.2.4	0x9ce7	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:59.716685057 CEST	1.1.1.1	192.168.2.4	0x9ce7	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:31:59.717133999 CEST	1.1.1.1	192.168.2.4	0x3b6b	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 19:32:02.637012959 CEST	1.1.1.1	192.168.2.4	0xa4c7	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:32:02.637012959 CEST	1.1.1.1	192.168.2.4	0xa4c7	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:32:02.639549017 CEST	1.1.1.1	192.168.2.4	0x58d0	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:32:02.639549017 CEST	1.1.1.1	192.168.2.4	0x58d0	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:32:02.652024984 CEST	1.1.1.1	192.168.2.4	0x8c29	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:32:02.652024984 CEST	1.1.1.1	192.168.2.4	0x8c29	No error (0)	d20qwf0wrdtevy.cloudfront.net		18.65.25.70	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:32:02.652024984 CEST	1.1.1.1	192.168.2.4	0x8c29	No error (0)	d20qwf0wrdtevy.cloudfront.net		18.65.25.23	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:32:02.652024984 CEST	1.1.1.1	192.168.2.4	0x8c29	No error (0)	d20qwf0wrdtevy.cloudfront.net		18.65.25.118	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:32:02.652024984 CEST	1.1.1.1	192.168.2.4	0x8c29	No error (0)	d20qwf0wrdtevy.cloudfront.net		18.65.25.6	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:32:02.652873039 CEST	1.1.1.1	192.168.2.4	0xcc90	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:32:03.512083054 CEST	1.1.1.1	192.168.2.4	0xdef6	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:32:03.512083054 CEST	1.1.1.1	192.168.2.4	0xdef6	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:32:03.512083054 CEST	1.1.1.1	192.168.2.4	0xdef6	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.203.116	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:32:03.512083054 CEST	1.1.1.1	192.168.2.4	0xdef6	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.203.31	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:32:03.512083054 CEST	1.1.1.1	192.168.2.4	0xdef6	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.203.95	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:32:03.512083054 CEST	1.1.1.1	192.168.2.4	0xdef6	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.203.70	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:32:03.512239933 CEST	1.1.1.1	192.168.2.4	0xc36b	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:32:03.512239933 CEST	1.1.1.1	192.168.2.4	0xc36b	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:32:18.054071903 CEST	1.1.1.1	192.168.2.4	0xba	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:32:18.054071903 CEST	1.1.1.1	192.168.2.4	0xba	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:32:20.817857027 CEST	1.1.1.1	192.168.2.4	0x105a	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:32:20.817857027 CEST	1.1.1.1	192.168.2.4	0x105a	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:32:20.817857027 CEST	1.1.1.1	192.168.2.4	0x105a	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:32:20.817857027 CEST	1.1.1.1	192.168.2.4	0x105a	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:32:20.817857027 CEST	1.1.1.1	192.168.2.4	0x105a	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:32:20.818451881 CEST	1.1.1.1	192.168.2.4	0x6920	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:32:21.464301109 CEST	1.1.1.1	192.168.2.4	0xeed6	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:32:21.464301109 CEST	1.1.1.1	192.168.2.4	0xeed6	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:32:21.464301109 CEST	1.1.1.1	192.168.2.4	0xeed6	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:32:21.464301109 CEST	1.1.1.1	192.168.2.4	0xeed6	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:32:21.464301109 CEST	1.1.1.1	192.168.2.4	0xeed6	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:32:21.464723110 CEST	1.1.1.1	192.168.2.4	0xd58f	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 19:32:27.430747032 CEST	1.1.1.1	192.168.2.4	0xa1e	No error (0)	nexus-websocket-a.intercom.io		34.237.73.95	A (IP address)	IN (0x0001)	false
Apr 24, 2024 19:32:27.430747032 CEST	1.1.1.1	192.168.2.4	0xa1e	No error (0)	nexus-websocket-a.intercom.io		35.174.127.31	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49746	23.202.57.177	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:30:42 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 17:30:42 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/2518) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=221557 Date: Wed, 24 Apr 2024 17:30:42 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49747	23.202.57.177	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:30:43 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 17:30:43 UTC	521	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-MSEdge-Ref: Ref A: CC1186E36C704BA5AF8177F229D6CC87 Ref B: PAOEDGE0621 Ref C: 2023-04-04T13:32:33Z Cache-Control: public, max-age=221508 Date: Wed, 24 Apr 2024 17:30:43 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-24 17:30:43 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49750	162.247.243.39	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:30:43 UTC	534	OUT	GET /nr-spa-1216.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://in.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:30:44 UTC	833	IN	HTTP/1.1 200 OK Connection: close Content-Length: 50049 x-amz-id-2: xI0X9w0+NO7p97YD1g0khDOxCYtnbE/pf7EpOlhERbVwwl4JY11/X+ieS/SYkyzIDOmgQ4YxyXQP44IDBBDZdN9xkUsMsNmEjPOLw1UNQgo= x-amz-request-id: XBR14S5EDDQP4CZX Last-Modified: Wed, 18 Oct 2023 21:31:16 GMT ETag: "63e2df852d15ab21d7ff8fc4363222e8" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 x-amz-version-id: MElzWumrf8lREc3kORDlSWHVtEZAK4m8 Content-Type: application/javascript Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:30:44 GMT Via: 1.1 varnish X-Served-By: cache-lax-kwhp1940112-LAX X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-04-24 17:30:44 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 6f 29 7b 69 66 28 21 6e 5b 65 5d 29 7b 69 66 28 21 74 5b 65 5d 29 7b 76 61 72 20 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 5f 5f 6e 72 5f 72 65 71 75 69 72 65 26 26 5f 5f 6e 72 5f 72 65 71 75 69 72 65 3b 69 66 28 21 6f 26 26 61 29 72 65 74 75 72 6e 20 61 28 65 2c 21 30 29 3b 69 66 28 69 29 72 65 74 75 72 6e 20 69 28 65 2c 21 30 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 65 2b 22 27 22 29 7d 76 61 72 20 73 3d 6e 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 74 5b 65 5d 5b 30 5d 2e 63 61 6c 6c 28 73 2e 65 78 70 6f 72 74 73 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 Data Ascii: !function(t,n,e){function r(e,o){if(!n[e]){if(!t[e]){var a="function"==typeof __nr_require&&__nr_require;if(!o&&a)return a(e,!0);if(i)return i(e,!0);throw new Error("Cannot find module '"+e+"'")}var s=n[e]={exports:{}};t[e][0].call(s.exports,function(n){v
2024-04-24 17:30:44 UTC	1378	IN	Data Raw: 6e 3a 74 2c 6d 61 78 3a 74 2c 73 6f 73 3a 74 2a 74 2c 63 3a 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 2c 6e 2c 65 2c 72 29 7b 67 5b 74 5d 7c 7c 28 67 5b 74 5d 3d 7b 7d 29 3b 76 61 72 20 69 3d 67 5b 74 5d 5b 6e 5d 3b 72 65 74 75 72 6e 20 69 7c 7c 28 69 3d 67 5b 74 5d 5b 6e 5d 3d 7b 70 61 72 61 6d 73 3a 65 7c 7c 7b 7d 7d 2c 72 26 26 28 69 2e 63 75 73 74 6f 6d 3d 72 29 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 3f 67 5b 74 5d 26 26 67 5b 74 5d 5b 6e 5d 3a 67 5b 74 5d 7d 66 75 6e 63 74 69 6f 6e 20 68 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 7b 7d 2c 65 3d 22 22 2c 72 3d 21 31 2c 69 3d 30 3b 69 3c 74 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 65 3d 74 5b 69 5d 2c 6e 5b 65 5d 3d 70 28 67 5b 65 5d 29 2c 6e 5b 65 5d 2e 6c 65 Data Ascii: n:t,max:t,sos:t*t,c:1}}function d(t,n,e,r){g[t]\|\|(g[t]={});var i=g[t][n];return i\|\|(i=g[t][n]={params:e\|\|{}},r&&(i.custom=r)),i}function l(t,n){return n?g[t]&&g[t][n]:g[t]}function h(t){for(var n={},e="",r=!1,i=0;i<t.length;i++)e=t[i],n[e]=p(g[e]),n[e].le
2024-04-24 17:30:44 UTC	1270	IN	Data Raw: 32 30 30 29 29 7d 76 61 72 20 64 3d 74 28 31 39 29 2c 6c 3d 74 28 31 30 29 2c 68 3d 74 28 32 29 2c 70 3d 74 28 32 31 29 2c 6d 3d 74 28 32 35 29 2c 76 3d 74 28 35 32 29 2c 67 3d 74 28 22 6c 6f 61 64 65 72 22 29 2c 79 3d 74 28 22 68 61 6e 64 6c 65 22 29 2c 78 3d 74 28 34 35 29 2c 77 3d 74 28 34 39 29 2c 62 3d 30 2c 54 3d 78 2e 67 65 74 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 28 22 73 73 6c 22 29 3d 3d 3d 21 31 3f 22 68 74 74 70 22 3a 22 68 74 74 70 73 22 3b 6c 2e 6f 6e 28 22 6a 73 65 72 72 6f 72 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 62 6f 64 79 3a 68 2e 74 61 6b 65 28 5b 22 63 6d 22 2c 22 73 6d 22 5d 29 7d 7d 29 2c 64 28 22 73 74 6f 72 65 4d 65 74 72 69 63 22 2c 72 2c 22 61 70 69 22 29 2c 64 28 22 73 74 6f 72 65 45 76 65 6e 74 4d 65 Data Ascii: 200))}var d=t(19),l=t(10),h=t(2),p=t(21),m=t(25),v=t(52),g=t("loader"),y=t("handle"),x=t(45),w=t(49),b=0,T=x.getConfiguration("ssl")===!1?"http":"https";l.on("jserrors",function(){return{body:h.take(["cm","sm"])}}),d("storeMetric",r,"api"),d("storeEventMe
2024-04-24 17:30:44 UTC	1378	IN	Data Raw: 67 43 6f 6e 74 65 78 74 3a 6f 2c 61 64 64 43 75 73 74 6f 6d 41 74 74 72 69 62 75 74 65 73 3a 61 7d 3b 76 61 72 20 68 3d 2f 28 5b 2c 5c 5c 3b 5d 29 2f 67 7d 2c 7b 7d 5d 2c 35 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 76 61 72 20 72 3d 2f 28 5b 5e 3f 23 5d 2a 29 5b 5e 23 5d 2a 28 23 5b 5e 3f 5d 2a 7c 24 29 2e 2a 2f 2c 69 3d 2f 28 5b 5e 3f 23 5d 2a 29 28 29 2e 2a 2f 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 6e 3f 72 3a 69 2c 22 24 31 24 32 22 29 7d 7d 2c 7b 7d 5d 2c 36 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 6e 29 7b 76 61 72 20 65 3d 74 5b 31 5d 3b 6f 28 6e 5b 65 5d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b Data Ascii: gContext:o,addCustomAttributes:a};var h=/([,\\;])/g},{}],5:[function(t,n,e){var r=/([^?#])[^#](#[^?]\|$)./,i=/([^?#])()./;n.exports=function(t,n){return t.replace(n?r:i,"$1$2")}},{}],6:[function(t,n,e){function r(t,n){var e=t[1];o(n[e],function(n,e){
2024-04-24 17:30:44 UTC	1378	IN	Data Raw: 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 72 28 74 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 6e 26 26 21 61 5b 74 5d 26 26 28 69 2e 65 6d 69 74 28 22 66 65 61 74 2d 22 2b 74 2c 5b 5d 29 2c 61 5b 74 5d 3d 21 30 29 7d 29 2c 6f 28 22 66 65 61 74 75 72 65 22 29 29 7d 3b 76 61 72 20 61 3d 6e 2e 65 78 70 6f 72 74 73 2e 61 63 74 69 76 65 3d 7b 7d 7d 2c 7b 7d 5d 2c 39 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 6e 2c 65 29 7b 74 68 69 73 2e 6c 6f 61 64 65 72 3d 74 2c 74 68 69 73 2e 65 6e 64 70 6f 69 6e 74 3d 6e 2c 74 68 69 73 2e 6f 70 74 73 3d 65 7c 7c 7b 7d 2c 74 68 69 73 2e 73 74 61 72 74 65 64 3d 21 31 2c 74 68 69 73 2e 74 69 6d Data Ascii: orts=function(t){t&&"object"==typeof t&&(r(t,function(t,n){n&&!a[t]&&(i.emit("feat-"+t,[]),a[t]=!0)}),o("feature"))};var a=n.exports.active={}},{}],9:[function(t,n,e){function r(t,n,e){this.loader=t,this.endpoint=n,this.opts=e\|\|{},this.started=!1,this.tim
2024-04-24 17:30:44 UTC	1378	IN	Data Raw: 2c 74 68 69 73 2e 73 63 68 65 64 75 6c 65 48 61 72 76 65 73 74 28 65 2c 74 29 29 3a 21 74 68 69 73 2e 73 74 61 72 74 65 64 26 26 65 26 26 74 68 69 73 2e 73 63 68 65 64 75 6c 65 48 61 72 76 65 73 74 28 65 2c 74 29 7d 7d 7d 2c 7b 7d 5d 2c 31 30 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 69 66 28 74 2e 69 6e 66 6f 2e 62 65 61 63 6f 6e 29 7b 74 2e 69 6e 66 6f 2e 71 75 65 75 65 54 69 6d 65 26 26 53 2e 73 74 6f 72 65 28 22 6d 65 61 73 75 72 65 73 22 2c 22 71 74 22 2c 7b 76 61 6c 75 65 3a 74 2e 69 6e 66 6f 2e 71 75 65 75 65 54 69 6d 65 7d 29 2c 74 2e 69 6e 66 6f 2e 61 70 70 6c 69 63 61 74 69 6f 6e 54 69 6d 65 26 26 53 2e 73 74 6f 72 65 28 22 6d 65 61 73 75 72 65 73 22 2c 22 61 70 22 2c 7b 76 61 6c 75 65 3a 74 Data Ascii: ,this.scheduleHarvest(e,t)):!this.started&&e&&this.scheduleHarvest(e,t)}}},{}],10:[function(t,n,e){function r(t){if(t.info.beacon){t.info.queueTime&&S.store("measures","qt",{value:t.info.queueTime}),t.info.applicationTime&&S.store("measures","ap",{value:t
2024-04-24 17:30:44 UTC	1378	IN	Data Raw: 6f 2e 75 73 65 72 41 74 74 72 69 62 75 74 65 73 29 29 2c 69 2e 70 75 73 68 28 77 2e 70 61 72 61 6d 28 22 61 74 22 2c 74 2e 69 6e 66 6f 2e 61 74 74 73 29 29 3b 76 61 72 20 73 3d 62 28 74 2e 69 6e 66 6f 2e 6a 73 41 74 74 72 69 62 75 74 65 73 29 3b 69 2e 70 75 73 68 28 77 2e 70 61 72 61 6d 28 22 6a 61 22 2c 22 7b 7d 22 3d 3d 3d 73 3f 6e 75 6c 6c 3a 73 29 29 3b 76 61 72 20 75 3d 77 2e 66 72 6f 6d 41 72 72 61 79 28 69 2c 74 2e 6d 61 78 42 79 74 65 73 29 3b 54 2e 6a 73 6f 6e 70 28 49 2b 22 3a 2f 2f 22 2b 74 2e 69 6e 66 6f 2e 62 65 61 63 6f 6e 2b 22 2f 22 2b 72 2b 22 2f 22 2b 74 2e 69 6e 66 6f 2e 6c 69 63 65 6e 73 65 4b 65 79 2b 75 2c 55 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 76 61 72 20 6e 3d 79 28 4f 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 Data Ascii: o.userAttributes)),i.push(w.param("at",t.info.atts));var s=b(t.info.jsAttributes);i.push(w.param("ja","{}"===s?null:s));var u=w.fromArray(i,t.maxBytes);T.jsonp(I+"://"+t.info.beacon+"/"+r+"/"+t.info.licenseKey+u,U)}}}function i(t){var n=y(O,function(n){re
2024-04-24 17:30:44 UTC	1378	IN	Data Raw: 2e 6e 65 65 64 52 65 73 70 6f 6e 73 65 26 26 28 74 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 3d 74 68 69 73 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 29 2c 6f 28 74 29 7d 2c 48 28 21 31 29 29 7d 72 65 74 75 72 6e 20 6c 7c 7c 75 21 3d 3d 54 2e 62 65 61 63 6f 6e 7c 7c 28 75 3d 54 2e 69 6d 67 2c 6c 3d 75 28 61 2b 77 2e 6f 62 6a 28 65 2e 62 6f 64 79 2c 6e 2e 6d 61 78 42 79 74 65 73 29 29 29 2c 6c 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 2c 6e 29 7b 6e 3d 6e 7c 7c 7b 7d 3b 76 61 72 20 65 2c 72 3b 69 66 28 6e 2e 6e 65 65 64 52 65 73 70 6f 6e 73 65 29 7b 69 66 28 21 5f 29 72 65 74 75 72 6e 21 31 3b 72 3d 21 30 2c 65 3d 54 2e 78 68 72 7d 65 6c 73 65 20 69 66 28 6e 2e 75 6e 6c 6f 61 64 29 72 3d 50 2c 65 3d 50 3f 54 2e 62 65 61 63 6f 6e 3a 54 2e 69 6d 67 3b 65 6c 73 65 20 Data Ascii: .needResponse&&(t.responseText=this.responseText),o(t)},H(!1))}return l\|\|u!==T.beacon\|\|(u=T.img,l=u(a+w.obj(e.body,n.maxBytes))),l}function d(t,n){n=n\|\|{};var e,r;if(n.needResponse){if(!_)return!1;r=!0,e=T.xhr}else if(n.unload)r=P,e=P?T.beacon:T.img;else
2024-04-24 17:30:44 UTC	1378	IN	Data Raw: 30 3d 3d 3d 4c 2c 71 3d 74 28 31 37 29 2e 61 64 64 4d 65 74 72 69 63 2c 48 3d 74 28 34 36 29 3b 6e 2e 65 78 70 6f 72 74 73 3d 7b 73 65 6e 64 52 55 4d 3a 67 28 72 29 2c 73 65 6e 64 46 69 6e 61 6c 3a 69 2c 73 65 6e 64 58 3a 73 2c 73 65 6e 64 3a 75 2c 6f 6e 3a 68 2c 78 68 72 55 73 61 62 6c 65 3a 5f 2c 72 65 73 65 74 4c 69 73 74 65 6e 65 72 73 3a 70 2c 67 65 74 53 75 62 6d 69 74 4d 65 74 68 6f 64 3a 64 7d 7d 2c 7b 7d 5d 2c 31 31 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 76 61 72 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 72 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 36 5d 3e 3c 64 69 76 3e 3c 2f 64 69 76 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 3c 21 2d 2d Data Ascii: 0===L,q=t(17).addMetric,H=t(46);n.exports={sendRUM:g(r),sendFinal:i,sendX:s,send:u,on:h,xhrUsable:_,resetListeners:p,getSubmitMethod:d}},{}],11:[function(t,n,e){var r=document.createElement("div");r.innerHTML="...[if lte IE 6]><div></div><![endif]-->...
2024-04-24 17:30:44 UTC	1378	IN	Data Raw: 2b 22 3b 20 70 61 74 68 3d 2f 22 7d 76 61 72 20 6f 3d 74 28 32 30 29 2c 61 3d 74 28 32 32 29 2c 73 3d 7b 63 6f 6e 64 69 74 69 6f 6e 61 6c 6c 79 53 65 74 3a 72 2c 73 65 74 43 6f 6f 6b 69 65 3a 69 7d 3b 6e 2e 65 78 70 6f 72 74 73 3d 73 7d 2c 7b 7d 5d 2c 31 35 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 6e 29 7b 76 61 72 20 65 3d 74 5b 22 6e 61 76 69 67 61 74 69 6f 6e 22 2b 61 5d 3b 72 65 74 75 72 6e 20 6e 2e 6f 66 3d 65 2c 6f 28 65 2c 65 2c 6e 2c 22 6e 22 29 2c 6f 28 74 5b 75 2b 61 5d 2c 65 2c 6e 2c 22 75 22 29 2c 6f 28 74 5b 63 2b 61 5d 2c 65 2c 6e 2c 22 72 22 29 2c 6f 28 74 5b 75 2b 73 5d 2c 65 2c 6e 2c 22 75 65 22 29 2c 6f 28 74 5b 63 2b 73 5d 2c 65 2c 6e 2c 22 72 65 22 29 2c 6f 28 74 5b 22 66 65 74 63 68 Data Ascii: +"; path=/"}var o=t(20),a=t(22),s={conditionallySet:r,setCookie:i};n.exports=s},{}],15:[function(t,n,e){function r(t,n){var e=t["navigation"+a];return n.of=e,o(e,e,n,"n"),o(t[u+a],e,n,"u"),o(t[c+a],e,n,"r"),o(t[u+s],e,n,"ue"),o(t[c+s],e,n,"re"),o(t["fetch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49754	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:30:45 UTC	1066	OUT	GET /1/bd61b676be?a=1134228971&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=6488&ck=1&ref=https://in.xero.com/m/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe&be=1612&fe=4778&dc=4760&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1713979837278,%22n%22:0,%22r%22:4,%22re%22:1054,%22f%22:1054,%22dn%22:1054,%22dne%22:1054,%22c%22:1054,%22ce%22:1054,%22rq%22:1057,%22rp%22:1425,%22rpe%22:1626,%22dl%22:1430,%22di%22:3108,%22ds%22:4760,%22de%22:4760,%22dc%22:4778,%22l%22:4778,%22le%22:4782%7D,%22navigation%22:%7B%22rc%22:1%7D%7D&fp=3604&jsonp=NREUM.setToken HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://in.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:30:45 UTC	495	IN	HTTP/1.1 200 Connection: close Content-Length: 79 date: Wed, 24 Apr 2024 17:30:45 GMT content-type: text/javascript cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: Date timing-allow-origin: * set-cookie: JSESSIONID=2ff4698120548831; Path=/; Domain=.nr-data.net; Secure; SameSite=None x-served-by: cache-bur-kbur8200033-BUR
2024-04-24 17:30:45 UTC	79	IN	Data Raw: 4e 52 45 55 4d 2e 73 65 74 54 6f 6b 65 6e 28 7b 27 73 74 6e 27 3a 30 2c 27 65 72 72 27 3a 31 2c 27 69 6e 73 27 3a 31 2c 27 73 70 61 27 3a 31 2c 27 73 72 27 3a 30 2c 27 73 72 73 27 3a 30 2c 27 73 74 27 3a 30 2c 27 73 74 73 27 3a 30 7d 29 Data Ascii: NREUM.setToken({'stn':0,'err':1,'ins':1,'spa':1,'sr':0,'srs':0,'st':0,'sts':0})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49757	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:30:46 UTC	777	OUT	POST /events/1/bd61b676be?a=1134228971&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=7982&ck=1&ref=https://in.xero.com/m/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 198 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://in.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://in.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:30:46 UTC	198	OUT	Data Raw: 62 65 6c 2e 37 3b 31 2c 2c 2c 33 6f 74 2c 33 6f 74 2c 32 2c 27 69 6e 69 74 69 61 6c 50 61 67 65 4c 6f 61 64 2c 27 68 74 74 70 73 3a 2f 2f 69 6e 2e 78 65 72 6f 2e 63 6f 6d 2f 6d 2f 56 6d 46 55 47 71 32 44 52 30 77 30 52 72 6f 69 79 76 57 41 57 58 77 30 38 33 6a 79 70 31 74 5a 79 49 33 57 4e 67 55 65 2c 31 2c 31 2c 2c 2c 21 21 21 21 27 65 35 37 64 39 38 61 66 2d 32 66 61 65 2d 34 66 64 61 2d 38 66 65 36 2d 37 35 32 32 37 62 66 66 63 65 62 34 2c 27 31 2c 32 73 34 2c 21 3b 62 2c 21 34 2c 21 74 36 2c 2c 2c 2c 2c 21 2c 33 2c 61 38 2c 35 6c 2c 2d 35 67 2c 31 61 6d 2c 31 39 77 2c 2c 69 2c 2c 34 Data Ascii: bel.7;1,,,3ot,3ot,2,'initialPageLoad,'https://in.xero.com/m/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe,1,1,,,!!!!'e57d98af-2fae-4fda-8fe6-75227bffceb4,'1,2s4,!;b,!4,!t6,,,,,!,3,a8,5l,-5g,1am,19w,,i,,4
2024-04-24 17:30:46 UTC	309	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:30:46 GMT content-type: image/gif access-control-allow-origin: https://in.xero.com access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-lax-kwhp1940115-LAX
2024-04-24 17:30:46 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49766	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:30:49 UTC	533	OUT	GET /events/1/bd61b676be?a=1134228971&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=7982&ck=1&ref=https://in.xero.com/m/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:30:49 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:30:49 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-lax-kwhp1940021-LAX
2024-04-24 17:30:49 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49775	216.137.39.9	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:30:51 UTC	520	OUT	GET /widget/ HTTP/1.1 Host: widget.intercom.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://in.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:30:52 UTC	728	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 2706 Connection: close Date: Wed, 24 Apr 2024 17:30:53 GMT Last-Modified: Wed, 24 Apr 2024 11:22:14 GMT ETag: "12f1521177f3cc3fc67b6c4ffdb32663" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300, s-maxage=300, public Content-Encoding: gzip x-amz-version-id: 4pDhnfp7Q_NbqWOFN8J8dWMXIp.FmGM4 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Error from cloudfront Via: 1.1 666c2260eba58c2b69ea2e6ef70667be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: kO155JNS3h_-wcesGNrHbM14pmMFSskt_paVt55Ca6BL75KoMK6vcw== Cross-Origin-Resource-Policy: cross-origin Vary: Origin
2024-04-24 17:30:52 UTC	2706	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 59 0d 73 da 38 1a fe 2b c6 77 43 ec a9 30 90 a6 4d eb d4 e9 65 d3 ec 6d e6 9a 6d a7 74 f6 ee 26 e1 18 61 0b 50 6b 2c af 2c 42 d8 c0 7f bf 47 f2 07 36 90 ec ee cc 76 da c4 7e f5 7e e9 d5 fb f1 c8 6d 4d 16 49 a8 b8 48 1c f7 f1 9e 4a 8b 05 8f a7 af fb 27 7d bf a2 33 f7 91 79 ec 21 15 52 65 c1 63 26 16 32 64 a3 39 4d 7d 7b c6 a3 88 25 9d 9c d4 01 c9 26 34 e5 a3 31 cd 18 16 95 4a 33 bf db 05 a5 c3 e9 dc e3 89 62 32 14 78 10 36 49 17 e3 98 87 a3 94 aa d9 96 f3 5b 56 31 85 51 e2 e1 57 d7 26 d9 8c 31 95 8d 52 29 1e 56 3b fc 25 73 27 e7 31 02 75 76 08 b3 44 c9 d5 41 e1 e5 72 59 59 eb 48 a6 77 c7 93 69 ae c3 48 41 7d c4 1e bc 99 9a c7 36 e1 49 a6 68 1c 8f e6 22 62 7b fb 4b b7 7b c3 bf ca 6a 94 25 5b ae c9 cb de ab 88 bd 7e 1b d2 f0 Data Ascii: Ys8+wC0Memmt&aPk,,BG6v~~mMIHJ'}3y!Rec&2d9M}{%&41J3b2x6I[V1QW&1R)V;%s'1uvDArYYHwiHA}6Ih"b{K{j%[~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49776	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:30:52 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=XtBEluHe7SK2Ob8&MD=krzE3T9Y HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-24 17:30:52 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 31273aae-bb16-4ff5-acea-6a6ecde529b9 MS-RequestId: cf94178c-a266-498a-b126-06b2de1ef041 MS-CV: gIVYBHQt4EmHwW6g.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 17:30:51 GMT Connection: close Content-Length: 24490
2024-04-24 17:30:52 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-24 17:30:52 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49779	54.230.21.89	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:30:52 UTC	506	OUT	GET /frame-modern.7065de4d.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:30:53 UTC	794	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 145103 Connection: close Date: Wed, 24 Apr 2024 17:30:54 GMT Last-Modified: Wed, 24 Apr 2024 11:20:13 GMT ETag: "00bb5011fc0026cb200fa77d8cc249db" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: 1VwwCxu.DOP1XJWm5CsdFoMzqv_hugTd Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 85a473acf37dd71b869c063db2deb904.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: J7a6HopE_Mc58w5HzFDJ07C-8KuJvrTsf5Dvo6yWPBHHWaKRCzEX1g== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-04-24 17:30:53 UTC	15590	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 07 7b db 48 b6 20 fa 57 28 5e 3f 5d 60 ba 04 31 29 90 1a b6 56 c9 96 6c 25 2b d8 b2 bd 5e 1a 24 8b 22 2c 10 a0 01 90 34 2d f1 bf ef 39 a7 aa 80 42 a0 e4 ee 99 7b 77 df fb de 37 d3 32 88 50 f1 d4 c9 c1 30 cc f6 9f 8f 53 3b 28 71 16 b1 80 79 cc 61 7e fb 71 ab 5e ab 57 5a 06 dd 53 2f 78 ed c7 b2 b5 3e b0 1d 97 f7 ad d1 b8 5e 6e d5 6b db 9b 75 06 37 3d 3f 72 06 4e cf 8e 1c df 13 8f 9a cd 7a a3 8a 8f fc 31 0f ec c8 0f e4 17 db b5 46 03 6f 87 93 ee c8 89 c4 cd 46 a3 ba b1 b9 d8 19 4c bc 1e 36 50 72 0c 6e 52 8f 51 db 87 cb 9d 80 47 93 c0 2b 05 46 64 2e e2 97 f0 c9 a3 33 30 56 02 cb 37 3c c6 4d f5 89 c7 67 a5 a3 20 f0 03 a3 7c 60 7b 30 b2 d2 c0 f1 fa a5 91 df 9f b8 bc f4 9f e5 3f f8 1f e5 ff 2c 9b 3b d1 30 f0 67 a5 c8 ea f9 7d Data Ascii: {H W(^?]`1)Vl%+^$",4-9B{w72P0S;(qya~q^WZS/x>^nku7=?rNz1FoFL6PrnRQG+Fd.30V7<Mg \|`{0?,;0g}
2024-04-24 17:30:53 UTC	1131	IN	Data Raw: 6f b7 64 0e d9 f3 b9 34 3d 5d 57 a4 e9 e9 e6 50 66 8c bd 99 c8 8c b5 b7 d7 d2 4e 15 44 b2 32 f2 64 28 ad 52 53 57 5a a5 64 7a d9 39 fb f9 e1 f7 ea 17 27 b5 35 36 b7 2a 48 3e ed e4 e0 f5 88 28 d6 b6 aa 82 3e d6 2a b5 ad 86 10 0f 44 d1 62 94 0e 64 79 62 94 0e 64 d1 e2 61 c2 f1 4f db 71 79 62 dd a9 f0 ff c3 d9 5b 47 ff 25 e9 24 07 bf 93 4e f2 fe bf 37 9d e4 e0 bf 35 9d a4 1e e5 f1 ff a7 c7 fd 7f 41 7a dc 79 96 65 b0 ad fd cd 3e f0 68 c0 8e ce 53 ba c0 6e 5e 8f 64 5b c7 db 6f 18 c9 be ca 79 2d 88 13 34 64 2d 83 d9 a0 6d db 9a 9c fd 90 1d d1 a7 61 c4 c7 14 08 4a 61 00 32 1b 5c 08 5b 95 8a 23 ce 95 49 00 79 ac f1 2b 35 88 e7 6a de db d6 fd a7 bb 65 6f e7 ec 2d b6 f5 ba ef 6b 63 4c 59 5b 72 ef 3e bc fb 5c fc ee d1 6f 1b e9 42 eb 44 18 e9 a4 9d e0 68 83 7e 15 94 Data Ascii: od4=]WPfND2d(RSWZdz9'56H>(>DbdybdaOqyb[G%$N75Azye>hSn^d[oy-4d-maJa2\[#Iy+5jeo-kcLY[r>\oBDh~
2024-04-24 17:30:53 UTC	16384	IN	Data Raw: b3 23 81 57 53 27 61 da 1c 3b 32 a9 af 5f 57 56 d7 f6 3c 0e 24 78 2c 8c 62 4b 30 5a c0 7b 7e d0 2f 09 f5 2b 4c d7 5e c0 75 5f 22 3a e4 79 4a 38 ed 6f 69 0b f0 0b dc 99 9e 36 17 d9 34 5b a3 4c 7f 9f f0 c9 7d f0 8c 0b 99 92 20 cb a3 b9 1a 8f 36 59 2c 65 fb 42 46 c9 2f d1 45 52 a7 1f 27 7d 7d 8b e1 85 2f 31 be 44 46 2f 4a 84 b3 60 f1 15 36 00 d0 9d dc 7a 2e b6 9e be 6d 7d b1 2c 4b b6 f3 f4 f4 e5 6b c2 ac 4d cc af 4c c7 81 2d 64 e4 35 de 2e 8e 1b a6 c5 b9 2e 04 c3 d2 10 ce 2d d5 72 97 b9 d2 c5 0b fa 36 79 70 ee c8 3b d7 18 8b 0c 49 b1 f7 c4 72 48 c1 18 9d 42 38 c1 e4 d8 25 95 a1 4d 87 11 82 87 39 30 ed 99 b4 d0 a9 b8 bb b8 26 b5 02 6e bd 26 b5 dc e7 a2 6a d4 d3 ff e2 6a d4 31 c9 16 5a 8c 18 19 21 39 11 8f 24 33 c4 fb 1d 54 53 63 79 69 51 d7 d8 d3 dd 23 fa 56 Data Ascii: #WS'a;2_WV<$x,bK0Z{~/+L^u_":yJ8oi64[L} 6Y,eBF/ER'}}/1DF/J`6z.m},KkML-d5..-r6yp;IrHB8%M90&n&jj1Z!9$3TScyiQ#V
2024-04-24 17:30:53 UTC	16384	IN	Data Raw: 3b 0e 44 4b 18 f4 be a3 96 ff 70 06 db 57 55 ef 49 b0 66 e5 db c7 7c b9 98 1a 69 cd 9c 86 53 7a ff d6 2e 90 bb a3 32 53 69 e7 f6 4b ab 0f d6 cd e9 8e 9d aa ab 61 5a 9f fa f9 5a ae cf d7 a0 0e 40 79 fa f4 06 5e 9d 36 67 24 ba 28 db 54 d8 4c cf 98 bd aa b1 f6 58 45 03 5c 45 6b 19 50 81 49 f1 61 89 b8 27 13 25 a4 65 89 8e 7a 7f 4e ef 71 2a 3f 19 e8 9c e1 6a 95 4f 06 ea cd c5 5a 63 7c 35 fc 6a 39 d2 25 4e 3e 07 55 12 73 fd c7 03 c8 60 4e 05 fe 7e 5c b6 b6 64 cc 33 a7 6f e0 70 f9 cd 37 e7 74 f0 9f ae ee ab 6b e7 d4 b9 12 07 73 e8 9e 38 9f b2 02 7d 2d 9d d5 97 b4 5c c3 b5 4c 75 db cd d8 e6 c2 51 e5 e6 dd 73 cb ca 01 9c d6 60 63 17 78 b2 01 46 13 2d f0 16 d5 87 15 23 17 45 c0 0f 84 80 3f 1d 4f 8f f3 71 75 89 8a ae 0e 9e bd be 7c 50 5d 43 37 aa 40 76 b2 0e 64 a7 Data Ascii: ;DKpWUIf\|iSz.2SiKaZZ@y^6g$(TLXE\EkPIa'%ezNq*?jOZc\|5j9%N>Us`N~\d3op7tks8}-\LuQs`cxF-#E?Oqu\|P]C7@vd
2024-04-24 17:30:53 UTC	2048	IN	Data Raw: d3 40 99 f4 46 0c 52 7e b9 83 f8 d7 9c 22 e9 4d 52 5b a3 59 19 7e 17 7e 47 ec fc 07 8e c4 02 c9 ad 08 72 d3 15 31 6d c7 88 28 bf 2f 9c 1f 2c 08 fe d1 82 e0 1f ff a9 10 fc e3 cd 10 fc eb 0d 10 fc e3 bd 20 b8 3c e2 d3 1b 20 58 69 9d 11 04 7f 0f 38 fb fe d6 33 3e 08 e3 e8 71 ac cc e6 43 5c 80 21 26 17 ee c7 a2 7d a4 8e f0 87 8d d7 54 c6 46 67 73 f8 e4 26 97 75 1b 5d ce 71 ad 1b bc ce f1 96 f9 01 43 f9 e1 7e 43 51 2e b8 08 af 43 50 07 9b b2 68 88 14 2c bc a8 9d 60 88 c3 44 b2 13 09 c1 bb 9a 55 62 de 9f 2d a0 fd dd 02 da df ff a9 40 fb fb cd 40 fb db 0d 40 fb fb df 7a 67 fc 33 56 fa e7 fb d1 1b 42 60 e0 c6 17 51 78 39 94 31 42 10 22 c2 1b 31 3b 08 0e 9a b2 6f 52 3f 85 2c 53 34 06 85 3e 0d 5d dc ae 40 a2 69 e5 c2 d9 4e 48 a7 77 1a b8 99 ef 66 da b2 9b 18 eb 88 Data Ascii: @FR~"MR[Y~~Gr1m(/, < Xi83>qC\!&}TFgs&u]qC~CQ.CPh,`DUb-@@@zg3VB`Qx91B"1;oR?,S4>]@iNHwf
2024-04-24 17:30:53 UTC	16384	IN	Data Raw: b2 ef 43 ac fd e1 b7 91 e4 e1 58 d5 38 45 bb 12 21 02 4e 9e 90 f9 9a 0b 0e f2 05 6d bc 50 74 a0 34 f2 4a a0 50 50 e6 96 17 8a a3 54 32 e5 e2 11 ed c1 7e be 2c 70 8b 99 e8 8e c0 85 29 36 87 53 2c 12 db 0f 76 5c 68 83 5c cf 87 b6 25 88 22 ec 6f 3b e1 09 ac d2 ce 46 44 99 79 10 86 04 de 3e 51 72 fe 0e e8 68 70 f4 48 a2 e7 86 6c 72 c4 e1 7d 21 bf 43 04 49 aa bd cf b1 00 59 3f 0e b3 3d 45 9f 12 12 d5 c4 22 81 58 7b ac 32 47 41 cc de 02 1e 8b 0d a3 f2 d2 f3 cd 67 10 c7 90 f8 be 5c 41 78 ae c3 13 c8 be a4 17 48 df 42 74 22 ac 89 e2 cc 60 88 c8 85 80 a7 81 27 97 10 91 fb cc d5 84 9e a1 e4 5c 9e 05 aa bc 56 fe 70 6a e1 d1 81 85 47 07 37 15 8f 0e d6 e3 d1 c7 35 78 74 70 ad 7b e8 29 f0 e8 f4 eb f0 48 c4 0f 40 19 1f 36 20 21 f2 86 00 7c 34 82 40 f3 aa 83 b6 55 5e 0a Data Ascii: CX8E!NmPt4JPPT2~,p)6S,v\h\%"o;FDy>QrhpHlr}!CIY?=E"X{2GAg\AxHBt"`'\VpjG75xtp{)H@6 !\|4@U^
2024-04-24 17:30:53 UTC	16384	IN	Data Raw: b8 54 71 50 e8 49 66 c4 07 4f c6 9d e1 a0 fb 5e 38 e1 45 f4 99 b4 b7 16 c8 42 63 38 28 5c da 30 3d c8 86 f5 0d 66 9b 9f 0f 9b c0 36 1a 5a 9d 7a 2a 1a 5d c6 c8 69 46 c3 76 ce a9 3d c2 6f da 77 c2 42 48 a6 6d 43 b1 ba 33 05 bf b7 f2 3c 2e 9b 50 fe 97 b5 01 e3 6f 22 0a be 4c c5 f4 ed 67 31 fd ba 59 1c a6 a7 57 4c a2 9d bf 90 89 2d 3a 28 f6 d9 99 90 68 8b 08 8c 26 8c 82 70 34 7b 91 58 33 12 55 05 0f 5b a2 e6 12 96 73 d1 91 bc ab 90 38 32 11 42 49 87 1e e8 68 c5 67 a3 82 40 8d 8d 11 e5 1e da fb 88 cf 48 a9 ef 41 d6 0b 62 90 9b 03 2d 48 00 dd c9 7b 83 0d 23 3c 2e f8 90 f5 22 cd da 45 19 a3 31 85 a5 f3 28 fe cb 1c cd b7 b3 c4 cf 61 c6 b5 ac ee dd 85 83 48 f8 a0 2b ac d8 68 2b 3b 81 5d aa 4e 61 d1 c5 51 de 72 6f e8 10 14 32 d8 9b 10 ff f2 62 da 41 20 e4 46 06 cf Data Ascii: TqPIfO^8EBc8(\0=f6Zz*]iFv=owBHmC3<.Po"Lg1YWL-:(h&p4{X3U[s82BIhg@HAb-H{#<."E1(aH+h+;]NaQro2bA F
2024-04-24 17:30:53 UTC	16384	IN	Data Raw: ea a1 32 83 94 af 0d 2a e3 df 8c 9d 6e 57 83 f2 76 02 c2 52 d8 5b 6d 9d b2 57 3a 2b f5 64 49 64 8d cb da 2c 94 91 32 f5 01 c7 95 cc fa 3c ba 70 62 66 a7 87 19 15 40 d9 c9 2a 8b a0 cc fc a6 08 d0 11 de 88 d0 15 ac 01 a0 19 8c cb 44 2d 0c 71 99 d1 5e 59 ec 6f 73 b1 64 90 c9 61 d3 c1 03 15 cf 05 a5 02 12 c4 70 f2 f9 94 a4 86 a4 2f e0 53 19 8a 8d 64 90 b9 88 a7 a7 22 b4 2d 26 95 a2 b6 51 86 6c fd 61 46 b9 24 2f 46 a1 7f 1a b2 00 f8 18 a3 50 01 c6 32 60 8a 12 ad 65 d3 b0 04 cc 5e a2 37 bc 46 7b 39 e2 a9 3c f6 45 61 99 c2 4a 63 b5 36 91 ec 0a 26 8a a3 02 cb 86 43 48 d2 5e 7d 78 a9 74 5e fc 73 d7 73 23 d5 aa f8 ac 4d c1 e3 b0 76 5c 44 dd 50 be af e0 ee ae 6a 8d 13 1f de 1a 03 a5 ab 2e 71 4e c8 71 c8 87 72 ba a6 7d ab d8 df 90 62 ea e3 7d 13 22 15 fe 00 1e 35 02 Data Ascii: 2nWvR[mW:+dId,2<pbf@D-q^Yosdap/Sd"-&QlaF$/FP2`e^7F{9<EaJc6&CH^}xt^ss#Mv\DPj.qNqr}b}"5
2024-04-24 17:30:53 UTC	16384	IN	Data Raw: 63 fa f2 78 d1 d9 23 41 bd 8b 54 07 3d fe eb 88 67 62 11 bf 9b fa 3e e3 84 ff e3 e0 ee 81 28 d3 fc 5d 10 2d 40 db 80 8e 2a 4b a4 d9 a6 00 9e c7 b0 f5 4f d0 d3 18 26 22 50 34 7d 9d 3d fc 6c cf 3c b8 8d c6 8d 19 0a e1 d9 f8 cc 7f fc 07 7f fd e7 33 76 0b e7 b0 65 6f 53 0f 44 d7 23 15 72 9a 12 07 8f 9b 0c 95 ac c7 d5 13 db 45 7d 86 17 7b 6a a9 7c 0d fa 8c 09 e1 2b 42 cd 9d e7 f4 6f 22 b7 13 be 94 e9 7d 34 59 4c bb f4 d7 be 37 e6 7b 6c bf f2 9a 74 7c c9 b0 54 b8 70 e2 26 2c 52 f7 5f 25 f1 cd 7c c9 2a 5a bd 38 80 07 2e 8f 51 77 6c 07 eb b7 7a 7d 0a 21 69 6f d2 c4 80 4c b4 eb 55 c2 4d 3c 56 70 bb 6a 74 ad 51 c2 1c 09 25 3a 3d bf 21 df b7 b8 b8 bc b8 68 d9 47 f8 bc b6 b2 ba b6 a6 f1 80 cf 7e 6e 1e f0 c1 f7 e1 01 9f 4d c5 03 be bd 67 1e f0 d9 0f e2 01 df fe e2 01 Data Ascii: cx#AT=gb>(]-@KO&"P4}=l<3veoSD#rE}{j\|+Bo"}4YL7{lt\|Tp&,R_%\|Z8.Qwlz}!ioLUM<VpjtQ%:=!hG~nMg
2024-04-24 17:30:53 UTC	16384	IN	Data Raw: 4b 0b db 64 11 59 43 fa 75 e6 c7 d7 ca 30 ac 51 bf 5b 4d 07 ac b4 0c 70 1d 63 8c 8a d4 0b c2 04 40 c2 9f e6 80 01 c8 34 af c7 bc bd 25 d0 72 ef 92 85 aa cd 42 23 72 7c b9 77 0d bb f7 10 43 65 9b 2f 02 8c 75 65 4f 23 95 31 5f 04 0e a7 3d 14 a1 16 f5 ac 38 5d c3 6b 8e 4a a3 43 22 de 63 0e 44 00 6d 19 a2 e2 0b ff 1a c3 ce 27 7c 0d d9 b8 01 91 6b 0f bd cd d9 e2 2e 05 fc 7d 9d b8 c7 5f dc fd 57 a7 fb c7 cb cb d9 8b 93 a3 dd bd fd db 5b 1f 43 bd 46 dc e6 a9 77 06 cd 3d 06 89 ad a2 b5 9e aa 7c ba fb 88 4c 23 e7 22 e1 aa 2c b1 72 2d 0a 69 80 df bc bc 84 6b 60 37 48 b7 45 9b 36 d8 98 39 33 e6 40 65 98 89 84 56 c2 60 c2 ba 74 5b 1b c3 47 e6 c6 8c 32 47 d0 88 c4 df 41 2f c1 7f b7 0d 0c 5d 20 a7 7a 24 a7 2e 2c 2b 25 e3 81 58 6a dd ff d0 83 9d f5 a3 07 1e 1c 59 71 91 Data Ascii: KdYCu0Q[Mpc@4%rB#r\|wCe/ueO#1_=8]kJC"cDm'\|k.}_W[CFw=\|L#",r-ik`7HE693@eV`t[G2GA/] z$.,+%XjYq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49778	54.230.21.89	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:30:52 UTC	507	OUT	GET /vendor-modern.07772018.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:30:53 UTC	794	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 150799 Connection: close Date: Wed, 24 Apr 2024 17:30:54 GMT Last-Modified: Wed, 24 Apr 2024 11:20:14 GMT ETag: "b27b573e6b04daed0b4144a6e206ba93" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: KaMQ.6on.YHmDebx4wU8olwjJv_LBWUO Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 d98613d066046a8d57403d6a820cd8f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: lsRe0e0bc-7W0PrD9nX5D-30H-BOU7qQWuHMHNey7kAanIYyhs1ayw== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-04-24 17:30:53 UTC	15590	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 69 7b db 38 96 28 fc fd fd 15 36 27 ed 21 23 5a 96 e4 9d 32 a3 c9 e2 54 f9 76 12 67 62 a7 aa fa 2a 2a 3d 94 08 49 2c 53 a4 42 52 5e ca d2 7f 7f cf 39 58 08 2e 72 92 ea 9e e7 ce 87 ee ea 58 c4 0e 1c 9c 15 38 00 f6 9e 6f 6f bd 8d 93 ad 30 18 b3 28 65 5b 41 34 89 93 b9 97 05 71 b4 b5 08 99 07 51 29 63 5b b7 2c f2 e3 64 77 1e fb 2c 89 9a ad e3 e3 e3 4e ab 7d d2 fc 23 6d be bb 78 7d fe e1 ea bc 99 dd 67 5b cf f7 fe 3f 73 1a c6 23 2f bc 9e 05 69 f3 8e 8d 16 de f8 e6 f5 6c 19 dd 04 51 c6 92 71 3c 1f fe 91 ba df ce b2 5a f5 07 56 73 b1 4c 67 66 bf 7f d0 ee b4 07 f6 e3 f1 c1 c1 e1 89 63 32 3b b3 23 cb 7d f1 68 2c b1 6f 59 12 8c 33 a3 7b 39 fa 83 8d b3 a6 cf 26 41 c4 3e 26 f1 82 25 d9 83 99 d9 c6 70 c8 d2 f7 b1 bf 0c 99 61 3f de Data Ascii: i{8(6'!#Z2Tvgb**=I,SBR^9X.rX8oo0(e[A4qQ)c[,dw,N}#mx}g[?s#/ilQq<ZVsLgfc2;#}h,oY3{9&A>&%pa?
2024-04-24 17:30:53 UTC	1261	IN	Data Raw: 88 8d 10 c1 03 2c df 01 90 e9 77 01 64 5c 03 90 f4 7f 13 40 10 63 aa f0 40 18 7c 13 41 e8 60 40 f7 5b 68 62 82 9e eb d6 82 66 8d de 98 e5 68 03 ef 55 40 15 dd a8 00 ce b0 97 22 a9 06 7e 06 48 31 9e 58 01 61 9e 94 43 a9 c4 1c ca c9 1c ae c5 4c c4 c6 aa 39 39 b8 8d 1a be 2e f2 ea d3 60 d8 1c e0 22 a9 38 19 86 2d 26 c9 a2 45 ce 8d 33 f2 ff 08 41 c7 35 c8 39 d6 11 b3 20 1e 2a 38 5a 95 08 55 9c 7d 42 08 68 d8 ba 11 87 d7 5c 62 d6 79 b3 fe 45 f5 d2 ef 16 2f 2a 33 a4 b0 d8 a5 bb b8 76 41 f3 37 c4 3d 9f db 43 73 0c 9a f1 ad 78 83 bc 94 71 bf d9 2a 65 9c 5b e5 db 6d cb 1a c8 0b 30 74 73 43 e4 4a bc e7 bb fd 2a 8e 43 e6 c1 e8 24 a4 c8 07 c7 b2 b2 19 de f4 fc 72 4b c4 6e 11 64 b7 ee bc 74 2b 8a 33 88 8d 6f 03 9f f9 5b 59 bc 95 cd 98 48 05 c3 70 bc 0c f9 ab ee 5d a5 Data Ascii: ,wd\@c@\|A`@[hbfhU@"~H1XaCL99.`"8-&E3A59 8ZU}Bh\byE/3vA7=Csxqe[m0tsCJC$rKndt+3o[YHp]
2024-04-24 17:30:53 UTC	9482	IN	Data Raw: 51 48 60 1a 1f 54 36 83 1f b3 c7 82 af e3 f9 bc 2c e4 6b 0a 8a 6c b2 20 aa 64 8a b5 6e 3a 25 a5 98 2f 81 73 b6 cc fc f8 2e aa 80 f0 69 28 68 3e 3e aa 0a 93 76 2b 53 bc 11 2a 4b e2 07 dc 1a 68 26 0c 9f 21 da cc 32 d7 f4 f6 7c 86 66 96 e2 ce 7f bd 27 09 13 79 3f c4 77 a6 9c 05 6d 92 aa 78 92 77 1d 72 72 a9 c1 7c 4d 68 00 88 7f 65 a3 34 1e df b0 ac ae 8b 4c 13 96 fc 1a 50 7c b4 23 c4 c3 26 09 7f 72 de 58 46 28 b3 86 59 3c 64 b2 d6 21 4c f0 f0 4e d6 3b 1c b1 b1 07 a2 68 68 34 d4 35 23 4f 0b 30 75 1d c9 5f 9d a4 ef 17 36 a4 88 b3 04 37 e8 7f 66 5e 98 cd c8 e0 fb 27 e6 a8 5a 99 9a 29 94 e7 bc 9e 4a fd 15 d4 69 34 e8 5d b3 fa c4 9e 59 af 54 98 da 7b c4 3c 47 08 26 ec 9b 20 15 dd 7f 89 2e 00 21 d8 6e 73 5c 7c 36 c0 76 46 07 6d c3 ae d3 3e 77 eb 2b 90 13 58 8e 77 Data Ascii: QH`T6,kl dn:%/s.i(h>>v+S*Kh&!2\|f'y?wmxwrr\|Mhe4LP\|#&rXF(Y<d!LN;hh45#O0u_67f^'Z)Ji4]YT{<G& .!ns\\|6vFm>w+Xw
2024-04-24 17:30:53 UTC	12792	IN	Data Raw: fb ac ae 6f 6c 3e 7e f2 f4 d9 f3 17 2f b7 5e bd de de 79 f3 fd db 0f 07 3f 8d cf a0 ff 8f 97 7f 9e fc f0 c7 af 47 ff fd e5 dd d7 e9 bf 7e d9 fd fd c7 9f bd c1 b3 27 f5 72 2c c6 e3 02 08 c6 54 62 dd 28 10 b4 49 3f 4d 69 4b e0 57 51 c6 c3 2f f0 17 73 a8 79 c7 e2 5c d6 c8 0a a7 86 62 c9 d5 54 dc 93 65 0c 87 51 5c fc 95 c6 97 8d 24 29 cd 14 16 c6 b0 5a f1 9e 44 ce 8a d4 20 53 79 97 1e a4 a9 f3 06 24 49 1c 77 76 1c e1 6f a3 ee 28 f5 59 d3 29 72 55 48 2e 71 04 d7 95 84 df 56 67 5f 4d 8c f3 ab 2f 57 bc b5 b1 76 4a f6 aa 34 9e a5 07 f5 11 6d 15 91 82 2c 2b a7 2c da e4 a8 f6 0a c4 4d 9c 9f 01 50 a1 f2 4d 16 08 60 a5 fe 8d dc ce ac 40 5b 96 fe 06 46 b6 13 4b c0 1f 9f b2 1f 73 e3 d3 8d 0f 6b 0b 9c f3 f5 d4 f9 7a e9 7c 5d d6 bf ae 3f a2 be 1d ab 6f e7 ca 85 b9 fe 71 Data Ascii: ol>~/^y?G~'r,Tb(I?MiKWQ/sy\bTeQ\$)ZD Sy$Iwvo(Y)rUH.qVg_M/WvJ4m,+,MPM`@[FKskz\|]?oq
2024-04-24 17:30:53 UTC	9988	IN	Data Raw: 48 ef 7d 43 d9 30 99 d2 c2 78 55 4d 84 c6 80 31 a5 c4 92 b5 dc 55 c3 6c 30 0d 84 7b 54 07 d2 b5 08 bb 11 db a9 fb 08 73 b6 d0 dc c7 ed 3b de 53 0f 55 98 cb 7b b1 1d dd a8 cd 33 42 b6 de 4c c6 7d 8e c6 a0 09 26 7a 6b 8f 84 93 14 04 b0 65 1a 5f 26 67 fc d6 2f e8 e1 06 6f c9 c3 21 5a e3 f7 33 0e 5e 57 ce 55 b5 e1 71 40 b0 98 a2 95 33 2d f9 8d 03 8a bc 87 d3 e0 1a aa 6d 9e 02 b3 3b 8d ae 16 ef 24 39 84 f0 f4 1e f6 aa 6d ab 78 73 b5 c7 f7 be a8 43 a1 f6 84 36 80 93 83 dc fb 78 2a 38 d3 80 bd 31 17 6f 14 97 f6 0e 1d 6e 76 f1 9f 8f 91 6e fd 27 1f e4 57 78 f7 2d fe f3 33 e6 64 fb 06 ff f9 c3 34 fa 29 5a 17 3f 00 4b ae 32 42 e0 2d 93 0e 42 64 d2 dc 4c ec 4f 95 75 0d 1b 0c ed dd b1 fd 39 92 78 9e 2a 5e 4f 2d 09 4b 50 f6 da 66 c3 fc b6 90 95 ec cf 83 e3 1e 1d c0 2a Data Ascii: H}C0xUM1Ul0{Ts;SU{3BL}&zke_&g/o!Z3^WUq@3-m;$9mxsC6x81onvn'Wx-3d4)Z?K2B-BdLOu9x^O-KPf*
2024-04-24 17:30:53 UTC	9594	IN	Data Raw: cf 30 51 fa 19 3c 6d 9e 51 74 b1 9b fb 98 f2 1b 7e dc de 6a bc e0 7b ce 73 2f 00 36 48 10 c1 f8 0b 78 f6 e5 e6 33 e4 70 13 b6 c0 56 69 a8 bb 5f 0a bf 72 03 67 88 ee d9 56 a6 d8 92 fc 0e 9e 3f 5f 6f 51 8f 3b 44 03 f5 c5 2f 5e dc 3f 58 c2 43 55 33 b3 37 b2 fe 3e fa a7 d2 45 a3 3f db 8b e7 cf 5e 3e f9 0b 44 56 89 2b 6c e4 df 7c b6 d9 d4 c8 fc 35 13 42 02 03 4c 2e 81 dc 82 40 73 97 29 a1 1b 13 63 f2 e4 c5 b3 67 f7 0e b7 b2 65 66 b8 c6 64 ad 0c d3 33 65 37 47 79 dd 9d 45 db 04 96 62 10 35 3d 12 24 1a c2 af bf 8e 3c 53 bf 79 90 bc 43 2d 48 a2 78 18 20 2a 41 09 31 44 54 31 47 4f f2 97 8f d7 9f de 3b 19 c7 74 67 0c 13 30 c5 97 cf 5e 2c c4 11 c6 80 28 66 4e ca d6 9c 8a 47 3b d2 3e c8 18 31 7b d3 66 3e d6 8b b0 52 d2 f2 f2 0c 1f d8 3b 28 8d 20 06 67 73 eb cb 97 cf Data Ascii: 0Q<mQt~j{s/6Hx3pVi_rgV?_oQ;D/^?XCU37>E?^>DV+l\|5BL.@s)cgefd3e7GyEb5=$<SyC-Hx *A1DT1GO;tg0^,(fNG;>1{f>R;( gs
2024-04-24 17:30:53 UTC	2442	IN	Data Raw: 61 98 0b 67 a8 fe 71 30 c7 34 9b 84 8e 98 23 df 1d d0 41 97 ab 52 81 00 3a b2 1d ae 99 bf 09 66 aa 86 7f c0 69 95 f6 d9 d9 4b c4 57 b6 08 8c 1a 89 68 c4 4a c2 ae c6 e1 77 8a eb cc 27 30 bc e9 09 ce 8b e3 48 1a bb 01 36 96 e2 12 59 3f e4 fb a1 41 50 8b 69 ad e7 26 ee fb e0 75 65 78 a5 3b 83 a3 b9 33 2c df 11 f9 51 c4 02 88 58 85 04 28 c2 bb 51 2f 2c 97 ed 78 10 22 da 12 7d 07 0c 7a 7d 17 d7 c6 12 7d 48 10 a3 54 f9 b0 2f f2 57 f7 d5 2c 70 74 1b c3 d2 b1 f4 05 80 af b0 2f a9 11 87 fc 41 09 11 ce e4 24 16 36 16 6d ec 74 5e c6 6b fe b7 1f 32 cf 3a 50 32 cc fd da 30 65 97 04 a0 8e d5 e7 38 7c c4 79 68 f2 3b c3 bb 31 7f 1f e4 02 e2 0e 3e 8c 3d 11 cd 84 24 e6 f3 62 b4 45 cf f3 9d 82 e7 ab ca ec be 86 ef 50 92 00 8e 5b e2 37 4c a2 38 b7 cd fe 3f 47 fc ae 14 c4 83 Data Ascii: agq04#AR:fiKWhJw'0H6Y?APi&uex;3,QX(Q/,x"}z}}HT/W,pt/A$6mt^k2:P20e8\|yh;1>=$bEP[7L8?G
2024-04-24 17:30:53 UTC	9594	IN	Data Raw: 3d 42 9a 48 3a e6 a6 bd 3a b3 52 6c 23 cc de 3d dd 86 ac 40 d4 87 50 f4 e0 66 45 f8 c6 1b 7d 11 d9 1c 36 cb cb 65 ed 0e 5d d6 ee 24 5d 7f 17 36 cb 88 7d 9e 3e 37 31 20 e1 0f 88 07 34 2d 00 9e 7a b3 b4 e1 d8 68 f8 dd 5c c3 57 be d1 e3 2c 63 cc 10 c0 64 c0 b0 a0 38 93 47 37 bf 40 ca d0 40 d4 a7 73 cd 8c a4 9c 62 95 fd 80 5d 14 54 02 87 04 fb 40 bb 4a c1 e3 95 63 c8 55 09 52 2a 10 c7 00 53 22 2a 68 f4 60 18 02 03 9c 5d d0 b1 81 11 a4 d3 4a 2f 60 58 19 64 62 76 52 8d ed 50 0b 5a c2 e5 32 e0 14 b7 50 50 50 47 b9 4c a3 f4 64 1a 8f 38 e3 f2 19 18 c9 fd 1c 81 27 7c 7a 3e 4d 31 2a b7 9a c0 41 d6 26 c0 95 d9 6a e7 99 85 cf 05 2d c7 11 16 70 23 16 d0 43 04 5d e7 5c a5 f0 16 b5 78 83 b9 bc ab 38 02 02 11 82 ae 2f 53 1c b9 08 28 2a 86 30 89 7d ff 9d 30 a9 40 94 de 8c Data Ascii: =BH::Rl#=@PfE}6e]$]6}>71 4-zh\W,cd8G7@@sb]T@JcURS"h`]J/`XdbvRPZ2PPPGLd8'\|z>M1A&j-p#C]\x8/S(0}0@
2024-04-24 17:30:53 UTC	7814	IN	Data Raw: 40 27 2d 98 dc 73 eb 34 83 12 8e 26 7d c0 6e 16 7c a0 fd 79 6a 52 73 6e f7 e4 b3 1e 00 38 b8 15 11 30 f5 8c 1e 22 28 3a eb f9 5d 29 4b 9f de 9d 48 98 7f 01 d9 fb 90 88 f8 a4 9f 58 17 04 8a 39 bd 0a 54 66 b0 1b ba e8 5f 74 ab 0e a1 89 2b d7 bd 4a 8f c8 69 6a ef 7d 2a ed 2f cf 06 a7 88 b1 72 65 13 b8 4c 82 70 e1 13 06 48 a0 72 61 41 c0 15 b1 14 ca 14 5b 26 e5 b2 ce 9c 2b b6 6a b5 90 25 65 56 d8 54 13 2e 33 86 f2 87 85 aa 56 43 dd de 06 88 92 7c 7a e7 b0 2d cf da ed 78 5b a5 7c 77 04 f1 60 f9 ae 70 e4 85 09 ba 0c ba 32 f0 44 c4 5a 88 ca 5a 9d 83 42 0b d6 35 7a 6f ab 5a c5 40 39 54 63 c5 e2 8d 1c 22 dd e1 9d 76 1b ed b4 ca 52 8a 83 d1 ac b6 0b 41 37 e3 bc 6f 22 94 03 94 e3 19 2e 74 c7 69 2a fb 09 29 60 e0 99 a7 f3 5e 97 87 a5 51 df 44 02 3a 26 c5 87 bc a8 5d Data Ascii: @'-s4&}n\|yjRsn80"(:])KHX9Tf_t+Jij}/reLpHraA[&+j%eVT.3VC\|z-x[\|w`p2DZZB5zoZ@9Tc"vRA7o".ti)`^QD:&]
2024-04-24 17:30:53 UTC	12792	IN	Data Raw: 08 84 24 a1 fb b7 af 5c 47 7f dc 9c bb f5 b0 ba ca ca c4 de ba 78 1d b4 1a 49 75 7b 37 0e 09 2f 57 36 d1 59 38 32 62 5f b6 8d ac bb f5 50 5f e6 7c b9 a5 f1 b5 ce 74 3d cb 90 01 05 2f cd f5 10 36 ee b6 42 bb 6d 82 a2 82 fe 7a 13 a8 13 ad 5b a1 d8 18 37 6e fb 16 2a 4b f3 30 00 a3 ae ac eb 63 52 92 df 6c 8d 46 e9 44 a1 73 28 3e 0e 3d f7 cb 94 69 1a 1a 3a 8d 70 3b 54 c1 6c f5 76 4e 4a 10 86 a3 94 1b 06 72 1b 2f cf 31 8a 68 79 5d fd 0a ab 8f f7 6e 4d b5 a6 70 f8 56 39 46 56 51 dc 3d e2 60 15 00 63 e8 e9 19 3d 22 b3 d6 27 fa bc 21 ed 8f dc 46 62 25 5d 92 9c eb 4f 0c 7b 50 55 60 35 76 a9 02 20 30 50 95 22 17 09 e2 1f 22 99 d7 df a3 4a 75 be be 8d e9 ab ab 02 35 91 d4 53 5c 38 c6 e6 39 5e 26 ed 61 27 31 3a a7 da 4d c4 ef af 33 c6 29 ba 93 49 36 f8 df e4 9e 76 b1 Data Ascii: $\GxIu{7/W6Y82b_P_\|t=/6Bmz[7n*K0cRlFDs(>=i:p;TlvNJr/1hy]nMpV9FVQ=`c="'!Fb%]O{PU`5v 0P""Ju5S\89^&a'1:M3)I6v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49783	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:30:54 UTC	777	OUT	POST /events/1/bd61b676be?a=1134228971&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=16488&ck=1&ref=https://in.xero.com/m/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 68 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://in.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://in.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:30:54 UTC	68	OUT	Data Raw: 62 65 6c 2e 36 3b 65 2c 27 66 70 2c 32 73 34 2c 31 3b 36 2c 27 63 6c 73 2c 30 2e 3b 65 2c 27 6c 6f 61 64 2c 33 6f 71 2c 31 3b 36 2c 31 2c 30 2e 3b 65 2c 27 66 63 70 2c 36 35 6a 2c 31 3b 36 2c 31 2c 30 2e Data Ascii: bel.6;e,'fp,2s4,1;6,'cls,0.;e,'load,3oq,1;6,1,0.;e,'fcp,65j,1;6,1,0.
2024-04-24 17:30:55 UTC	309	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:30:54 GMT content-type: image/gif access-control-allow-origin: https://in.xero.com access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-lax-kwhp1940051-LAX
2024-04-24 17:30:55 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49782	54.162.198.104	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:30:54 UTC	597	OUT	POST /messenger/web/ping HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive Content-Length: 575 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://in.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:30:54 UTC	575	OUT	Data Raw: 61 70 70 5f 69 64 3d 62 74 64 6e 36 36 76 34 26 76 3d 33 26 67 3d 65 61 39 33 63 32 34 37 38 37 39 36 61 30 66 35 33 63 32 35 65 39 39 31 30 66 63 33 35 33 38 35 61 39 63 39 64 65 64 65 26 73 3d 39 34 65 65 38 62 34 38 2d 66 32 30 32 2d 34 33 63 66 2d 62 33 63 37 2d 63 35 37 33 30 66 38 37 30 32 64 37 26 72 3d 26 70 6c 61 74 66 6f 72 6d 3d 77 65 62 26 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 5f 74 79 70 65 3d 6a 73 2d 73 6e 69 70 70 65 74 26 49 64 65 6d 70 6f 74 65 6e 63 79 2d 4b 65 79 3d 33 35 38 30 62 33 32 34 65 39 34 36 63 38 66 30 26 69 6e 74 65 72 6e 61 6c 3d 25 37 42 25 37 44 26 69 73 5f 69 6e 74 65 72 73 65 63 74 69 6f 6e 5f 62 6f 6f 74 65 64 3d 66 61 6c 73 65 26 70 61 67 65 5f 74 69 74 6c 65 3d 49 6e 76 6f 69 63 65 25 32 30 49 4e 56 2d 30 36 37 36 35 Data Ascii: app_id=btdn66v4&v=3&g=ea93c2478796a0f53c25e9910fc35385a9c9dede&s=94ee8b48-f202-43cf-b3c7-c5730f8702d7&r=&platform=web&installation_type=js-snippet&Idempotency-Key=3580b324e946c8f0&internal=%7B%7D&is_intersection_booted=false&page_title=Invoice%20INV-06765
2024-04-24 17:30:55 UTC	962	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:30:55 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Status: 200 OK Cache-Control: max-age=0, private, must-revalidate Access-Control-Allow-Origin: https://in.xero.com Vary: Accept,Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload Access-Control-Expose-Headers: x-request-id X-Intercom-Version: 1db554702d8d88016ebd5aee48225dc6c04dcb42 X-XSS-Protection: 1; mode=block X-Request-Queueing: 0 X-Request-Id: 001jcqvs5e8kmmk6qsg0 Access-Control-Allow-Headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS ETag: W/"0fcbe1cc48ef8902e718693375363b72" X-Runtime: 0.417977 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Server: nginx x-ami-version: ami-07f0efd8322b9d369
2024-04-24 17:30:55 UTC	5829	IN	Data Raw: 31 36 62 64 0d 0a 7b 22 61 70 70 22 3a 7b 22 6e 61 6d 65 22 3a 22 58 65 72 6f 22 2c 22 61 75 64 69 6f 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 68 6f 77 5f 70 6f 77 65 72 65 64 5f 62 79 22 3a 66 61 6c 73 65 2c 22 74 65 61 6d 5f 69 6e 74 72 6f 22 3a 6e 75 6c 6c 2c 22 74 65 61 6d 5f 67 72 65 65 74 69 6e 67 22 3a 22 48 69 20 74 68 65 72 65 20 f0 9f 91 8b 22 2c 22 6d 65 73 73 65 6e 67 65 72 5f 62 61 63 6b 67 72 6f 75 6e 64 22 3a 6e 75 6c 6c 2c 22 65 78 70 65 63 74 65 64 5f 72 65 73 70 6f 6e 73 65 5f 64 65 6c 61 79 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 5f 6b 65 79 22 3a 22 63 6f 6e 76 65 72 73 61 74 69 6f 6e 5f 63 61 72 64 5f 75 6e 6b 6e 6f 77 6e 5f 72 65 73 70 6f 6e 73 65 5f 74 69 6d 65 22 2c 22 6c 61 75 6e 63 68 65 72 5f 65 78 70 65 63 74 65 64 5f 72 Data Ascii: 16bd{"app":{"name":"Xero","audio_enabled":true,"show_powered_by":false,"team_intro":null,"team_greeting":"Hi there ","messenger_background":null,"expected_response_delay_translation_key":"conversation_card_unknown_response_time","launcher_expected_r
2024-04-24 17:30:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49785	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:30:55 UTC	534	OUT	GET /events/1/bd61b676be?a=1134228971&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=16488&ck=1&ref=https://in.xero.com/m/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:30:56 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:30:56 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-bur-kbur8200052-BUR
2024-04-24 17:30:56 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49788	54.230.21.89	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:30:56 UTC	521	OUT	GET /vendors~app~tooltips-modern.7e0e68e9.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:30:56 UTC	794	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 166299 Connection: close Date: Wed, 24 Apr 2024 17:30:57 GMT Last-Modified: Wed, 24 Apr 2024 11:20:14 GMT ETag: "d625db79db383fdaef04243566c4afce" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: SkYrtbpFaL03zDmW4jlGHj.VQIW6EI8D Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 7a7d57e52eb96353bb079d2d7877a1c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: EWYTfeDGeERz0yW4_y8niONo0ZMHUzm-2_n7X8miC3J7BXvkyZENBA== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-04-24 17:30:56 UTC	6396	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd e9 73 1b 47 96 2f fa fd fd 15 14 a6 2f 1b 18 82 14 a9 cd 36 28 48 97 12 29 4b 36 b5 b4 44 d9 6e 8b 1a 4e 11 28 92 65 02 28 b8 50 20 45 8b 9c 0b ee fb be af e2 be ef fb ce 08 53 96 65 5b 5e ba dd 76 bb dd 5e 2a dd 0c c4 7c 78 11 f7 fd 09 ef 9c cc aa 42 81 84 3c 3d 1d fd 3e bc 88 6b 8b 55 99 59 b9 9c cc 3c cb ef 64 66 15 4e ff eb a9 a8 6b a2 14 e5 12 1c bc c7 c7 47 09 9e 2c 51 72 73 b2 20 7a a2 bc 2e 9e 83 24 1f cf 47 e5 f1 1e a7 28 f9 fe 83 f3 7a ff 43 16 45 97 2c 78 7d b1 6e d1 c9 4b 9e b8 57 f8 78 fe c2 ab fc 6b 71 ef f9 e2 52 6f 5c 4d b9 75 2f 25 4e 7e 24 47 fd eb e9 ff cb 9c ed 12 33 39 57 5a 8e e0 8b cb e7 33 bd 9c 23 f7 6a 8e df 93 2b 78 64 5e 72 88 ee 8c f7 7c f6 ff 3a 4b 61 e1 83 87 96 38 af df 97 63 7e f0 e0 fc Data Ascii: sG//6(H)K6DnN(e(P ESe[^v^*\|xB<=>kUY<dfNkG,Qrs z.$G(zCE,x}nKWxkqRo\Mu/%N~$G39WZ3#j+xd^r\|:Ka8c~
2024-04-24 17:30:56 UTC	1129	IN	Data Raw: 3b da 66 2f 60 03 93 ca 62 77 c2 ba 7d 3f d4 6d b5 97 5a 11 b6 a5 af 6f 6f 6b 5b ac 6c 6b 59 ad eb 7a 58 5d ef 87 ea a2 ee ab b6 2c c7 96 b2 05 e3 72 b3 f6 36 c7 4b 16 72 d5 35 56 c3 22 a7 d6 1f 75 d1 52 1b 00 1d ff bd cd db e9 1b 24 b6 d3 78 b0 3b 2e ff 6c 9c 28 65 9f 4e 78 ed b5 57 4f df 84 49 a0 97 9b a9 26 eb b5 88 f9 10 c8 9c a6 83 f9 d6 cb ea 79 ed f4 23 7a de 81 f6 fb 03 de fe 16 6f 7d 9d 32 d3 ef c3 c6 e0 37 da 18 bc cd 43 5b 50 dd 43 6b 16 1b ab 77 c2 f2 bd c9 db 61 98 bc 80 9b 1d 94 d5 58 ed 31 8c e1 70 ba 4f d3 d6 1e d2 a2 ef aa 12 f1 bb b0 2a de 88 60 65 a8 e3 6a b1 f2 42 c4 83 7c 51 02 5d 1d 70 b0 c3 81 78 dc ac b0 30 2c f1 9a 5a a8 c8 2a 08 c6 53 90 48 c4 3f fc ca 06 18 0a 7c 57 e3 77 7c 61 e1 ef f0 b0 14 7b 99 18 4d 83 2a 37 21 73 51 58 68 Data Ascii: ;f/`bw}?mZook[lkYzX],r6Kr5V"uR$x;.l(eNxWOI&y#zo}27C[PCkwaX1pO`ejB\|Q]px0,ZSH?\|Ww\|a{M*7!sQXh
2024-04-24 17:30:57 UTC	12792	IN	Data Raw: 37 e2 81 ba 44 b7 d7 2f 09 59 05 a6 18 b3 7c d9 f4 2f a6 18 d9 06 dd 4b 94 a5 82 d0 bb 29 46 ea cc 1e eb e3 d0 50 e0 57 84 b4 55 11 7d 40 69 62 91 a5 c8 41 3f 02 f3 b2 33 ec 69 86 f5 a6 28 d6 95 28 53 8c 27 c6 04 f9 fc 2e 67 14 78 90 51 99 7c 14 ab db 19 67 d2 8e b7 9b af 59 39 0b 8b 9c a2 03 7f e2 f5 82 df 41 af 4f ce 98 25 51 8a 8e 96 10 12 83 0f c0 17 15 59 65 41 f3 b5 98 73 29 ea 1e 66 c8 b9 04 29 13 f5 6c c7 5d 55 d5 83 d5 1c ab 63 4e 2f 14 f5 e8 45 b5 3c c6 cd 7c 13 3b 2d ac 7a a4 90 5d 52 b3 27 59 12 af 98 25 81 69 54 b8 df d6 e6 cb a7 66 b8 87 19 7c 82 f5 aa f6 c0 1f ee ac 78 cd fa 0a a7 f5 b1 7a ca dd 06 33 42 67 95 8f 0b 2d c3 a9 b9 ae e2 5a 1d be 7f c0 66 4c c0 17 b9 42 ef 53 5a 39 e1 18 67 63 35 61 6d e8 76 d6 16 ce 6b d8 06 8e 38 7e 9c c8 26 Data Ascii: 7D/Y\|/K)FPWU}@ibA?3i((S'.gxQ\|gY9AO%QYeAs)f)l]UcN/E<\|;-z]R'Y%iTf\|xz3Bg-ZfLBSZ9gc5amvk8~&
2024-04-24 17:30:57 UTC	14700	IN	Data Raw: de 60 a0 09 e4 68 b4 e6 a3 19 b2 34 44 96 26 54 a4 d1 c8 1d 8e bc 68 a7 0e d5 d2 3c 59 5a 61 a7 42 1a 01 96 ad e2 59 20 f1 c5 32 59 da 25 cb 65 78 b8 e7 d3 03 b2 5c 8c cb c9 35 b2 0f 0f 35 4f 6d 3c 03 22 dc 64 b9 99 2c b7 91 e5 2e 1c bb c5 a3 92 45 19 fd 8e 55 55 0d e1 9e 84 44 96 47 c8 f2 a4 0f 85 7c ec 40 55 40 43 1c 63 aa e5 15 b2 bc 06 a4 8d f4 c1 b8 22 0a e4 f8 6c 70 43 56 4a 3e df 24 2b 1d 64 a5 8f ac 0c ba 81 16 d1 f7 62 9c ac d4 90 95 36 0f a2 4c 1a 6b f6 0b 50 65 f7 38 87 47 8a 8e 1a fb 05 3c 6e b4 0c 99 c1 44 ad 4c 90 95 49 b2 b2 79 54 ba 01 18 bb 2c 70 b8 91 c8 12 17 3d 32 33 9e b5 95 9e 43 68 63 03 9d cb e6 16 c7 27 0b 64 95 1e 15 24 ab 35 12 54 54 37 20 02 17 d6 d5 7f 1a 70 01 2c c9 27 ab 5d 64 b5 9f ac 0e 93 b5 6a b2 d6 ee 82 69 38 0a 8c 6a Data Ascii: `h4D&Th<YZaBY 2Y%ex\55Om<"d,.EUUDG\|@U@Cc"lpCVJ>$+db6LkPe8G<nDLIyT,p=23Chc'd$5TT7 p,']dji8j
2024-04-24 17:30:57 UTC	7324	IN	Data Raw: 63 d0 33 ee 56 16 42 97 79 c8 ba 93 95 8a 05 39 35 da 2c 89 ea 87 a8 5a 67 a0 49 fb 13 49 7f f9 28 e0 51 94 47 6e 22 b3 08 f3 37 e4 02 1e fd 99 e4 1e 38 e5 2b 21 d5 35 1c 82 0a 66 db 69 38 45 84 35 18 8a 95 75 42 c4 e5 d8 6c e2 29 95 a3 16 5e 11 1b f1 f1 9c 4c 28 2f a4 f8 ec e2 67 9a 11 0e c9 1c 19 cd 0e 28 b4 2f 5c d1 6a d9 ac ae 98 5c c1 71 fa bf 6c f6 c6 d9 0f bd c7 38 33 2f e9 c3 82 42 ab 08 69 0c e7 b1 f8 c6 84 0f 65 05 79 48 4c ca 7b 66 63 a8 bb ba cc 3b c4 f1 e6 60 81 66 09 14 76 b2 9c 2f b1 2f 13 da 53 e3 00 97 31 d1 08 7a 7c 9c 3f 86 57 01 75 c8 c9 5a 20 79 f4 10 b7 11 03 45 5a 53 7d 06 7e f0 d5 9e 03 23 6c 19 2c 4d 1a e0 6e 87 5a 1e 14 6e 17 f1 9c cc e2 90 58 12 38 bd d7 a5 69 90 90 96 45 e5 3d b3 8f 16 62 99 38 91 5e 58 0d 62 4e db 06 fc 08 35 Data Ascii: c3VBy95,ZgII(QGn"78+!5fi8E5uBl)^L(/g(/\j\ql83/BieyHL{fc;`fv//S1z\|?WuZ yEZS}~#l,MnZnX8iE=b8^XbN5
2024-04-24 17:30:57 UTC	12792	IN	Data Raw: fc e4 71 fa 3b bf f4 bc f3 05 74 ef 09 f0 16 60 2d 10 99 c4 37 63 00 be 6e 78 cd 67 9a cc de 9b bd 7a 62 7c f0 c4 07 05 e0 ef 9f d9 e3 4a 4c cc 87 8c ef e4 7b 02 b2 f2 12 24 80 a2 e9 5f 71 55 99 11 e6 38 bf 62 b5 7c 65 aa 6b 56 8a 05 b0 29 b1 01 dd e3 93 c3 c6 57 96 ee f6 4e 48 0b 3a e1 3c 2d 14 d2 02 0e 88 9f a7 75 00 26 4e be 62 bd c1 01 7c c5 f0 6c b5 ec b6 a9 78 82 86 d3 12 56 6d 05 59 df 92 60 88 7f f6 18 70 03 18 02 f4 fc d7 77 9e 18 4f fe 9f 94 e4 a7 7f 76 f3 f1 13 e3 e9 9f 25 7d 79 29 39 f5 da ab 3f 41 9e 9b 68 c4 5f 51 8c eb 9c f1 ce 65 8b c9 a2 dd 58 07 9d b7 52 6f 3a e7 7b 71 af cf ba ae bd ce d3 a5 d2 07 a1 34 e6 34 2b a7 04 3c 21 6f 01 73 e4 4a 84 ba 2e e1 dd da e4 10 68 43 36 d7 51 92 92 b5 a4 b3 9c 2b 53 65 7c da f2 fa fd 53 87 49 69 c9 09 Data Ascii: q;t`-7cnxgzb\|JL{$_qU8b\|ekV)WNH:<-u&Nb\|lxVmY`pwOv%}y)9?Ah_QeXRo:{q44+<!osJ.hC6Q+Se\|SIi
2024-04-24 17:30:57 UTC	13565	IN	Data Raw: fb 8a 4e 68 16 b0 f0 24 93 49 9b 66 d2 66 9e 3c 99 7c 54 97 00 a3 cd 64 78 67 bc 29 2d 2f 2f 89 29 23 d8 fd 64 96 4e b8 65 bd 13 51 b1 8e 66 3d 15 eb a9 29 9a fa 7f 45 24 37 1c 06 7e 9e b6 5f fa f8 e4 3b 3a c3 fe 71 7a fc 39 7c 87 ce 40 42 46 7c 32 3b 8a 40 7b fd 81 c9 05 23 98 6d 4a 4e d2 a7 98 c2 ba fe 81 ce a8 4d c9 f5 26 a6 3a d2 f0 64 d9 f5 b4 33 17 53 d1 f2 a9 37 91 79 df c3 f5 0f 53 f2 71 36 a5 1f c0 47 67 cc 70 3c 8a 28 25 3e de a5 cb 7b 00 1c 56 d0 a6 9c 84 bc ef a7 5c bf 1a 17 97 72 02 67 fc e2 95 94 dc dc e4 e3 50 26 cc 69 74 5d 27 95 aa 4e c7 8a 3e a1 44 9f a7 12 c2 07 68 89 96 4d e5 03 84 3b 6f 3a 13 29 b5 1f 20 ec a5 9a e8 5e e4 45 bb 47 fb 40 9f 4d 33 44 4c b4 89 4f b4 0e 3b a4 5a c3 50 34 5c 98 50 6d 92 de 1d 32 1c 9e 4a 47 34 8f 2f 99 3b Data Ascii: Nh$Iff<\|Tdxg)-//)#dNeQf=)E$7~_;:qz9\|@BF\|2;@{#mJNM&:d3S7ySq6Ggp<(%>{V\rgP&it]'N>DhM;o:) ^EG@M3DLO;ZP4\Pm2JG4/;
2024-04-24 17:30:57 UTC	12792	IN	Data Raw: df 26 03 7d 64 60 99 0c be 20 83 35 64 b0 15 fd 2b 49 ff 12 e9 5f 45 df d0 05 54 43 40 b1 9a 3f 19 7f 01 fc 00 35 ab fe 23 32 d0 44 06 3a ec eb 2b 27 d3 53 64 a0 86 df 5b 39 99 5e 83 3d 7a 14 76 85 c3 af 9c 98 83 88 6b 4d 24 03 93 64 60 16 ad 36 a4 7d d1 36 7b c3 ee 51 29 d2 c9 c0 16 19 d8 25 03 07 a8 5b 56 d9 1c 77 90 9d 10 2e da e7 8c 1b 30 17 83 0d 64 b0 05 f5 ce da ee e3 d1 d3 a6 66 54 6a 8b c8 60 37 19 ec 39 1d 29 7b dd 5d 1f 0e 22 be 06 7b d0 bc 06 6a fb e0 04 19 9c 3c 2b 9b 81 12 53 48 3d fe e2 50 94 0c ae 93 c1 2d 32 f8 8a 0c 55 91 a1 1a 64 af 63 33 f6 f4 6c 35 b2 82 01 20 77 32 04 0c 6f 72 11 34 a9 66 9c ab fa a3 ef b0 b8 f6 38 4a 86 20 6d f0 64 b6 8c 0c 8d 91 a1 25 32 b4 cf 8f 70 1d 61 d6 fe 82 e9 da c0 9b d7 c8 d0 1c 19 5a 00 3a 6a 82 7f 2d e8 Data Ascii: &}d` 5d+I_ETC@?5#2D:+'Sd[9^=zvkM$d`6}6{Q)%[Vw.0dfTj`79){]"{j<+SH=P-2Udc3l5 w2or4f8J md%2paZ:j-
2024-04-24 17:30:57 UTC	3592	IN	Data Raw: e5 c6 88 48 ae 1c 21 dd cf ab 42 d5 39 d3 75 81 c2 25 cb dc 8e 3c e6 02 ba bd 57 4d 89 68 d4 29 71 93 58 31 71 73 75 57 d4 b3 45 c0 94 dc f2 41 86 89 20 84 45 a9 06 7d 16 c1 70 b1 b8 a7 c7 1d 81 3d b7 ef bb d7 31 2c c7 29 c9 f6 d4 0d db 71 38 4b d7 af 5f bb 7e 0d 5f 94 14 fd 50 6f bc 73 fd 5d d4 23 32 9c 0b 8b 38 92 3b e2 ed c5 4c 4b 78 e2 e8 23 11 f8 b9 98 ed 13 31 e5 ae 98 92 2b 02 f7 44 e0 2f c5 46 f3 c5 94 02 11 b8 2f 02 9f 89 c0 2f 44 e0 97 22 f0 b9 08 fc 95 08 28 22 50 28 02 7e 11 08 88 7d 2b 12 81 62 31 9b 26 02 5f 89 c0 23 11 d0 45 20 24 02 61 b1 ea 88 98 f2 58 04 4c 11 b0 44 20 2a 02 31 11 28 11 81 52 11 78 22 02 4f 45 e0 6b 07 b8 c1 54 5e e1 be ef ed 22 af 9f 99 42 7c 96 10 fe 50 08 7f 54 24 50 8a 10 ff 89 10 ce 11 c2 9f 0a e1 bb 42 38 57 08 df Data Ascii: H!B9u%<WMh)qX1qsuWEA E}p=1,)q8K_~_Pos]#28;LKx#1+D/F//D"("P(~}+b1&_#E $aXLD *1(Rx"OEkT^"B\|PT$PB8W
2024-04-24 17:30:57 UTC	12792	IN	Data Raw: 71 6c 6e 62 91 0a 45 03 71 e9 17 d4 2d e5 f6 5a c8 2a 2a 52 cf 9d 72 27 2a cf 33 8a a3 ca 0e 9c 27 72 b9 4c 76 20 d9 cd 1c 8a e0 06 00 84 eb c7 4a 38 a0 cb 46 3c d4 33 12 96 8f 2b 64 e7 75 aa 04 51 69 62 15 6f 3c 86 b8 12 e2 60 72 14 90 60 d1 37 ae 49 cc 2e 56 f3 e9 45 4b 47 2e 8e d9 c4 62 79 2a 90 20 70 a6 37 41 8a 9d 57 c6 45 62 1e 12 5f b0 c8 9b f7 78 4b 6a e2 22 dc 14 e9 15 7a 1a f6 a3 ff 88 09 cb 31 1f b8 e4 9b cd e2 b9 52 72 d7 13 b1 87 c4 15 79 39 39 59 95 a8 a6 85 c5 92 d2 df 4b bb 9a 76 25 e9 79 ea 7b ef 5e 79 ff 22 2f 2d ef b8 25 9a 8c 27 26 50 c5 7b 57 de b9 72 4e e1 75 fd 88 7c a8 e2 5e be cc cc a9 0f 1f 6a 21 2c 9c e9 9c be 24 d2 46 51 d1 f0 5c be 60 9b fb cc 16 5d c8 b9 6f c1 f6 2a 8a 2d 24 5f bb 72 fd 1a 68 cb c9 57 af be 73 05 7f af 5f 4d Data Ascii: qlnbEq-Z*Rr'3'rLv J8F<3+duQibo<`r`7I.VEKG.by* p7AWEb_xKj"z1Rry99YKv%y{^y"/-%'&P{WrNu\|^j!,$FQ\`]o*-$_rhWs_M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49789	54.230.21.89	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:30:56 UTC	517	OUT	GET /vendors~tooltips-modern.8e0f853f.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:30:56 UTC	793	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 11457 Connection: close Date: Wed, 24 Apr 2024 17:30:57 GMT Last-Modified: Wed, 24 Apr 2024 11:20:17 GMT ETag: "549d63dc73c5770ca6c7acd1abdeaaa1" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: A1XObr5MuTFturIo9vPOCSZ_nDN7Ra0m Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 8dbb022aca84dcb0b30c03cd8d06f3ea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 7fHaTXA0FvQuA1goAYeJv7G5-vJq-3CFZrTL983fsFWQw1HJPmpYZw== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-04-24 17:30:56 UTC	11457	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6d 73 db 36 b3 e8 5f b1 79 3a 1a b2 86 14 39 49 d3 84 2a aa 71 6c a5 49 4f 1c fb 71 9c 26 ad ae 4e 4a 53 90 c5 98 22 55 92 92 a5 5a fc ef 77 77 01 82 20 45 39 49 6f e6 39 f7 c3 33 e3 11 49 bc 63 b1 ef 58 c0 f6 75 18 5f 79 e1 e5 34 48 3b b7 e2 6a ee f9 37 c7 d3 45 74 13 44 99 48 fc 78 f6 f1 53 ca 3f 5f 64 b3 19 8e 9c ce 7c 91 4e ed e1 f0 c7 47 8f 9f 8c d8 dd 93 47 4f 1e 3e 76 6d c1 32 87 ff 7c 67 2d 52 b1 97 66 49 e0 67 56 6f e9 25 7b 11 4b 58 cc 02 e6 f5 b2 ce f9 84 67 9d 2c 85 9f 93 31 fc 7c 38 84 9f 55 02 3f 7f 2d e1 e7 3a 84 9f 77 3f c0 cf 8b 2e fc bc fa 15 7e ce 9f c2 cf 1f 1f e0 e7 f7 05 5f c6 c1 78 af cb 26 8b c8 cf 82 38 b2 85 73 27 86 a2 33 08 c5 4c 44 d9 f3 78 11 8d 53 de 1d 71 ab 92 62 31 2c 74 29 56 45 89 43 Data Ascii: }ms6_y:9I*qlIOq&NJS"UZww E9Io93IcXu_y4H;j7EtDHxS?_d\|NGGO>vm2\|g-RfIgVo%{KXg,1\|8U?-:w?.~_x&8s'3LDxSqb1,t)VEC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49787	54.230.21.89	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:30:56 UTC	513	OUT	GET /app~tooltips-modern.99a3541c.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:30:56 UTC	793	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 53858 Connection: close Date: Wed, 24 Apr 2024 17:30:57 GMT Last-Modified: Wed, 24 Apr 2024 11:20:13 GMT ETag: "baecefd335b4e7fce271d6e3489a58a4" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: NJvj4RCUn6SSiVMyL.Dif0W.URS.bsm3 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 1805917bae7975c146a05a871d8d67fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ATXbrf2tAACss8yFiyUETGVzamdB7hOHsOTkIGSvt_BIItK7uaMn3A== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-04-24 17:30:56 UTC	15719	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 8b 62 db 46 92 28 fa 2b 14 36 d1 10 e3 26 cc 37 29 2a 8c 56 96 ed c4 33 7e 6d e4 bc c6 eb a3 80 44 53 84 05 02 34 00 4a 62 28 ce b7 dc 6f b9 5f 76 ab aa bb 81 c6 8b a4 93 cc ec ce b9 b3 9b b1 40 a0 df 5d 5d 5d ef 32 56 11 af 45 71 e8 4e 63 e3 b4 7e ed 05 13 db 7b 37 77 23 eb 8e 4f 96 f6 f4 e6 62 be f2 6f 5c 3f e6 e1 34 58 5c 7d 8c c6 fb 8b 3c 3c bc ff 60 5a cb 55 34 af bf 7f 3f ec f6 db 1f d8 66 d8 1f 76 87 a3 3a 67 31 0b cc f1 d7 9b c0 72 ea 31 db 9c 8f ea f0 eb c9 2a 8e 03 ff 9b 30 58 2d cf 63 18 ca 64 15 f3 ad 79 7a 6b 87 b5 70 1c d4 4f fa bd 6e d3 64 2e 3c 76 e1 b9 65 32 1f df b6 86 9d b6 c9 6c 78 1c b4 86 dd ae c9 22 78 1c f6 4f da 1d 93 79 f0 d8 e9 f4 da 27 e6 e9 34 f0 a3 b8 36 1d d7 9b 2c b2 ce d7 66 dd 98 50 77 Data Ascii: bF(+6&7)V3~mDS4Jb(o_v@]]]2VEqNc~{7w#Obo\?4X\}<<`ZU4?fv:g1r10X-cdyzkpOnd.<ve2lx"xOy'46,fPw
2024-04-24 17:30:57 UTC	12792	IN	Data Raw: ef d7 c5 2c 37 8e e0 7e f4 b2 fa fb cc 5a db 40 ee ce 79 98 3a 28 c3 a2 c9 77 57 78 dd 8b 72 db 2a 0d 88 6d bd 95 59 a6 d8 86 18 d9 d1 74 cb 52 83 34 73 7b 1a e5 ae f6 0c 26 33 fe a3 d9 1c 74 27 98 dc 29 8b c4 92 0f db 84 95 89 b6 ac dd 19 f4 3a 55 57 79 c5 15 de 6e 9f a4 22 7e 7f dc 6a 36 53 ae d2 d6 05 19 74 7f 7d c7 67 f2 32 df 68 9a 21 67 25 8d 5d 6d 26 cc 65 9e 72 d4 59 24 96 93 2f 7c 20 5e 6d ef dc 87 a9 51 39 0f ef f7 a9 a0 a9 fe 86 79 ab d9 7b 87 2d b3 82 d3 16 bc 5c b0 79 f6 16 a7 ae df af d8 75 e6 b5 87 e2 3d fb 91 cf 66 e3 e8 11 fc 3d 2d 98 53 ca 1b 57 f2 36 81 e2 42 88 71 44 f7 b8 a2 d7 3b 7e 78 78 58 00 cf 18 2b cb c0 e3 e3 8c 74 32 79 2f 58 df a3 f1 14 0a 60 bd b3 fa bc 3e 35 d9 b2 8e 89 c2 80 07 cc cb 45 e7 75 29 58 9b 98 2c 69 a4 20 3d 5d Data Ascii: ,7~Z@y:(wWxr*mYtR4s{&3t'):UWyn"~j6St}g2h!g%]m&erY$/\| ^mQ9y{-\yu=f=-SW6BqD;~xxX+t2y/X`>5Eu)X,i =]
2024-04-24 17:30:57 UTC	16384	IN	Data Raw: be 04 ab 43 78 28 92 03 5f 9a b6 94 f4 0d 24 2c 57 13 00 33 bb 27 3e 30 7a 1c d1 fa 29 6f 1c c5 0b 81 74 ac a2 24 16 66 3c 25 2c ef 48 e4 b6 b6 d6 94 a9 af b1 7e 7e 7b 38 6b 89 24 93 6a ae 47 28 20 98 09 0a 25 f6 87 98 db f5 a6 a0 33 aa 03 87 f6 37 fb c3 a1 82 37 6f 8a a7 f4 4c 96 62 35 df 73 08 ff c0 e5 3b 51 0c 16 8c 64 70 c1 84 49 41 6c 64 08 24 47 0e 04 0f bf 0d d2 f6 1d 3e 19 09 73 61 84 ee a3 2f 95 d5 86 b5 16 93 ad 17 16 95 cb 2b 37 a7 b8 30 be a7 36 86 0c bc 97 70 04 7b cd 41 af 07 ec 0f 9a 06 77 3d c8 fa 15 88 64 60 52 5b 39 93 11 d4 c8 e7 ff a2 26 57 b3 60 9b cd d5 28 f8 6f ad 95 9d 06 7f 88 5a 96 ac da 0e 7a d9 cb e0 cf 55 cc aa a3 fa 33 35 b3 7c 9e ff a3 9a fd bb ab 66 8f 08 62 fc 2a ec 1b 93 4e 32 ea 5d d2 61 f8 00 79 7c 99 93 ee 66 53 c4 6a Data Ascii: Cx(_$,W3'>0z)ot$f<%,H~~{8k$jG( %377oLb5s;QdpIAld$G>sa/+706p{Aw=d`R[9&W`(oZzU35\|fb*N2]ay\|fSj
2024-04-24 17:30:57 UTC	8963	IN	Data Raw: 48 ab 4b b8 76 bc 47 73 77 f1 0e 54 4c 19 2d 90 13 f8 d3 ed d5 16 2b a6 6b 65 45 f4 1a 37 ac 6f 0a d7 66 6c 51 2a 08 c8 49 18 a4 04 ec ac 25 e0 dd f5 3b da 8b 8c f6 74 c8 bb 0d 97 5d c8 64 b3 6d 1a ff 4e 8f 80 72 65 e5 42 e9 fc e8 d1 51 94 5e 04 52 47 94 a2 55 20 a8 e8 2d e6 3b 17 dc 6a 67 c2 38 c6 e5 69 99 87 81 d7 76 7b 4d 95 65 bc 35 2b b2 03 a7 18 7d 3a 5b 5d 9e 5a 34 cd bb da b2 a1 d3 58 f0 4d ad 1a 34 96 41 e6 23 e8 79 9d da 50 f9 ca 21 51 d1 c8 1a f6 3c aa f2 16 f8 44 49 b2 ef 6b 69 b3 c5 c1 82 58 03 59 1d 7a c0 64 36 c1 65 98 39 bb 17 e5 b9 a6 77 ac 01 65 6e 53 96 35 7f a3 71 de db c0 8a b0 b2 a5 86 44 74 a3 54 93 a4 60 75 be ec 2a b1 32 6f 6f 2b 44 db 54 8d 93 ba 51 ef b4 e3 16 99 0a 51 e3 1f 74 48 cf 83 f7 a2 34 76 89 2e 3d 8e 1b ab 7f 56 90 ab Data Ascii: HKvGswTL-+keE7oflQI%;t]dmNreBQ^RGU -;jg8iv{Me5+}:[]Z4XM4A#yP!Q<DIkiXYzd6e9wenS5qDtT`u2oo+DTQQtH4v.=V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49786	54.230.21.89	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:30:56 UTC	509	OUT	GET /tooltips-modern.41f34148.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:30:56 UTC	792	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 5172 Connection: close Date: Wed, 24 Apr 2024 17:30:57 GMT Last-Modified: Wed, 24 Apr 2024 11:20:14 GMT ETag: "c0a0eb66756de21372edd5e5f99f5df9" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: 8zXotsC9trt.IySQs6PDa0IovE_Pw_GK Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 611c5d5bfc56f00ceee3056521dd94aa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: -9mIZS-TJsNigVfsQb1PZ30uHYS05mcg_aGMgKx59_LvduXEqhV_lA== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-04-24 17:30:56 UTC	5172	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e5 5b 7f 73 db 36 d2 fe 2a 34 db f1 90 73 10 4a 8a 22 25 d1 c7 66 1c 37 6e dc da 71 ea b8 e9 4d 3c 9e 84 22 21 8b 09 45 aa 24 64 c5 96 f4 dd 6f 77 41 52 3f ed e4 fe b8 77 e6 e6 6d 6b 09 04 16 d8 c5 62 f7 d9 5d 50 d5 a7 a5 d0 4a 59 24 91 d4 8f 8c bb 34 1f 84 e9 f5 28 29 f9 4c 0c 26 61 f4 e5 64 34 cd be 24 99 14 45 94 8f 3f 7e 2e 83 6f 93 2c 16 37 b7 26 9f 4c cb 91 71 73 d3 f3 1c f7 96 cd 5d c7 6d db be 21 98 64 b9 19 fc 3c cf 79 61 48 93 e5 3c 36 24 9b c7 62 18 4e 53 e9 1b 30 f4 2f 56 ca 87 54 bc c9 63 71 16 53 cf 1f 4c e6 79 2a 93 c9 5a df ef 4b f3 e8 3e 2c b4 2c c8 8d be e7 76 2c 93 25 d0 ec 58 7d cf 36 59 01 4d af db f1 ba 26 4b a1 d9 73 da 16 34 23 68 da 96 d3 eb 9b 2c 84 66 db ed 76 a1 b7 84 66 d7 f3 bc b6 c9 a6 38 ad 6d Data Ascii: [s64sJ"%f7nqM<"!E$dowAR?wmkb]PJY$4()L&ad4$E?~.o,7&Lqs]m!d<yaH<6$bNS0/VTcqSLyZK>,,v,%X}6YM&Ks4#h,fvf8m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49791	34.196.171.164	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:30:56 UTC	361	OUT	GET /messenger/web/ping HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:30:57 UTC	4209	IN	HTTP/1.1 406 Not Acceptable Date: Wed, 24 Apr 2024 17:30:56 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 144 Connection: close Status: 406 Not Acceptable Vary: Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-XSS-Protection: 1; mode=block X-Request-Id: 0003s3pjtl55lgpvoblg X-Runtime: 0.014875 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; base-uri 'self'; child-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com .sharepoint.com; connect-src 'self' app.intercom.com api-iam.intercom.io api-ping.intercom.io api-visitor-analytics.intercom.com nexus-websocket-a.intercom.io via.intercom.io wss://nexus-websocket-a.intercom.io nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io uploads.intercomcdn.com uploads.intercomcdn.eu uploads.au.intercomcdn.com static.intercomassets.com app.getsentry.com sentry.io api.stripe.com meet.intercom.com meet.eu.intercom.com meet.au.intercom.com preview.intercom.com www.google-analytics.com stats.g.doubleclick.net www.facebook.com static.intercomassets.eu app.eu.intercom.com api-iam.eu.intercom.io static.au.intercomassets.com api-iam.au.intercom.io api.au.intercom.io .intercom-chat.com wss://.nexus.intercom-chat.com .messenger.intercom-chat.com graph.facebook.com .twilio.com wss://.twilio.com frontend-telemetry.intercom.io frontend-telemetry.eu.intercom.io frontend-telemetry.au.intercom.io user-presence.intercom.com; font-src data: https:; frame-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com *.sharepoint.com; img-src data: blob: https:; media-src data: blob: https:; object-src 'none'; script-src 'self' js.intercomcdn.com static.intercomassets.com store.intercomassets.com billing-admin.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com store.intercom.io widget.intercom.io api.tiles.mapbox.com connect.facebook.net js.stripe.com platform.twitter.com switchet.s3.amazonaws.com www.google-analytics.com munchkin.marketo.net app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com dp3rct5vic41c.cloudfront.net static.intercomassets.eu static.au.intercomassets.com static.zuora.com p.trellocdn.com www.recaptcha.net; style-src 'self' 'unsafe-inline' static.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com static.intercomcdn.com marketing.intercomassets.com api.tiles.mapbox.com fonts.googleapis.com maxcdn.bootstrapcdn.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com fonts.intercomcdn.com static.intercomassets.eu static.au.intercomassets.com; report-uri https://app.getsentry.com/api/66205/csp-report/?sentry_key=0d13edc0ffce4b02bd7bc48d0b497300 Server: nginx
2024-04-24 17:30:57 UTC	144	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 6d 65 64 69 61 5f 74 79 70 65 5f 6e 6f 74 5f 61 63 63 65 70 74 61 62 6c 65 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 54 68 65 20 41 63 63 65 70 74 20 68 65 61 64 65 72 20 73 68 6f 75 6c 64 20 73 65 6e 64 20 61 20 6d 65 64 69 61 20 74 79 70 65 20 6f 66 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 5d 2c 22 74 79 70 65 22 3a 22 65 72 72 6f 72 2e 6c 69 73 74 22 7d Data Ascii: {"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49790	34.237.73.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:30:56 UTC	679	OUT	GET /pubsub/5-lh65TJofQp7BNkWK5t3KldUyUlgWm6VAsA7hWfFPvy4y0IupYoArUojr4QOga3TXnkzBBgl4sI1qJlBmnYo_9g-JpEdXUjEXhiE6?X-Nexus-New-Client=true&X-Nexus-Version=0.12.12&user_role=visitor HTTP/1.1 Host: nexus-websocket-a.intercom.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://in.xero.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: Z3VQiXfGfabybVQ9TZB2cA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49822	18.154.132.87	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:11 UTC	556	OUT	GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:12 UTC	665	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 6759 Connection: close Date: Wed, 24 Apr 2024 17:31:13 GMT Last-Modified: Thu, 26 Oct 2023 12:27:20 GMT ETag: "15864ce88fa79a3e954417d0c3396798" x-amz-server-side-encryption: AES256 Cache-Control: max-age=86400 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 460e9d24b366353afa89e5dea8489bc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: gMOm5fb-dES6S3RvdL_BD1ySDPBRDnbbfFwifcYunmOWEkaDXztkOQ== X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-04-24 17:31:12 UTC	6759	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 5c eb 52 e3 48 96 fe 3f 4f 61 34 b1 6e 69 49 84 cd 1d b9 14 4c 15 45 4f b3 51 14 15 14 dd bd b3 2c 41 c8 56 da 64 b7 ac f4 48 e9 a2 68 e3 27 db 1f fb 48 fb 0a 7b 4e de 94 b2 25 a0 7a 66 22 66 23 b6 a3 a3 90 f2 9e 27 cf e5 3b 27 8f fc 3f ff f5 df 1b e3 79 3e 12 8c e7 9d dc e7 a4 24 45 b0 b0 25 89 2f 08 0d 16 6c ec 6f 94 37 e2 56 3d 71 f9 f4 25 29 3a 2c f6 4c 53 2f 8e c5 e3 8c f2 71 a7 a0 7f 9d b3 82 76 bb fa 61 80 7d e0 95 05 05 15 f3 22 ef 30 18 74 a3 17 60 79 66 ca 32 5d 26 ee 0b fe e0 d3 38 a7 0f 9d b3 a2 e0 85 ef 9d 26 79 ce 45 67 cc f2 b4 33 e5 e9 3c a3 9d ef bc 4d b1 e9 7d e7 05 41 38 e2 29 8d bd 8b cb f7 3f 7e 38 bb fb 78 79 7d f7 fd e5 8f 1f df 7b 84 2e 59 8c 4b 8e 17 f4 eb 8c 17 a2 8c 16 cb 25 c1 a5 df f4 6e c3 51 Data Ascii: \RH?Oa4niILEOQ,AVdHh'H{N%zf"f#';'?y>$E%/lo7V=q%):,LS/qva}"0t`yf2]&8&yEg3<M}A8)?~8xy}{.YK%nQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49821	52.32.69.132	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:11 UTC	711	OUT	GET /id?d_visid_ver=5.0.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=C593280E560020957F000101%40AdobeOrg&d_nsid=0&ts=1713979870197 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:11 UTC	817	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:11 GMT Content-Type: application/json;charset=utf-8 Content-Length: 363 Connection: close X-TID: bVSsmVvXQgQ= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.xero.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-usw2-2-v056-061c786ab.edge-usw2.demdex.com 3 ms set-cookie: demdex=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:11 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-24 17:31:11 UTC	363	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 33 38 33 34 34 33 39 35 36 30 31 33 38 35 36 32 34 33 35 32 30 39 33 38 30 38 32 31 32 36 38 31 32 33 31 39 34 33 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 39 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"38344395601385624352093808212681231943","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":9,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49832	34.215.13.170	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:12 UTC	519	OUT	GET /id?d_visid_ver=5.0.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=C593280E560020957F000101%40AdobeOrg&d_nsid=0&ts=1713979870197 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=38351504769226682132089995704072130929
2024-04-24 17:31:12 UTC	712	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:12 GMT Content-Type: application/json;charset=utf-8 Content-Length: 363 Connection: close X-TID: iA4ftKobRzU= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-usw2-1-v056-0ec0b41f9.edge-usw2.demdex.com 2 ms set-cookie: demdex=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:12 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-24 17:31:12 UTC	363	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 33 38 33 34 34 33 39 35 36 30 31 33 38 35 36 32 34 33 35 32 30 39 33 38 30 38 32 31 32 36 38 31 32 33 31 39 34 33 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 39 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"38344395601385624352093808212681231943","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":9,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49834	63.140.36.145	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:12 UTC	735	OUT	GET /id?d_visid_ver=5.0.0&d_fieldgroup=A&mcorgid=C593280E560020957F000101%40AdobeOrg&mid=38344395601385624352093808212681231943&ts=1713979871203 HTTP/1.1 Host: xerolimited.sc.omtrdc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:12 UTC	437	IN	HTTP/1.1 200 OK access-control-allow-origin: https://www.xero.com access-control-allow-credentials: true date: Wed, 24 Apr 2024 17:31:12 GMT p3p: CP="This is not a P3P policy" server: jag vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 2 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-24 17:31:12 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49833	63.140.37.126	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:12 UTC	608	OUT	OPTIONS /rest/v1/delivery?client=xerolimited&version=2.3.1&sessionId=3f1be1d8-9f25-4368-bedc-dbf40f8c1e2a HTTP/1.1 Host: xerolimited.tt.omtrdc.net Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: cache-control,pragma Origin: https://www.xero.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:12 UTC	694	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 17:31:12 GMT content-length: 0 vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers access-control-allow-origin: https://www.xero.com access-control-allow-methods: POST access-control-allow-headers: cache-control, pragma access-control-allow-credentials: true access-control-max-age: 1800 allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49837	100.20.148.237	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:12 UTC	748	OUT	GET /dest5.html?d_nsid=0 HTTP/1.1 Host: xero.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=38351504769226682132089995704072130929
2024-04-24 17:31:12 UTC	606	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:12 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 6983 Connection: close X-TID: Fo6Ld/QkTuI= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Accept-Ranges: bytes last-modified: Tue, 9 Apr 2024 11:58:11 GMT DCS: dcs-prod-usw2-1-v056-0a702ffbc.edge-usw2.demdex.com 0 ms
2024-04-24 17:31:12 UTC	6983	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 41 64 6f 62 65 20 41 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49836	100.20.148.237	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:12 UTC	700	OUT	POST /event?d_dil_ver=9.4&_ts=1713979871216 HTTP/1.1 Host: xero.demdex.net Connection: keep-alive Content-Length: 725 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=38351504769226682132089995704072130929
2024-04-24 17:31:12 UTC	725	OUT	Data Raw: 64 5f 6d 69 64 3d 33 38 33 34 34 33 39 35 36 30 31 33 38 35 36 32 34 33 35 32 30 39 33 38 30 38 32 31 32 36 38 31 32 33 31 39 34 33 26 64 5f 6e 73 69 64 3d 30 26 64 5f 64 70 69 64 3d 31 33 38 38 39 39 26 64 5f 64 70 75 75 69 64 3d 32 33 34 33 66 61 65 31 2d 32 64 35 66 2d 34 64 31 31 2d 61 30 65 37 2d 35 62 38 31 39 62 34 64 36 35 39 32 26 64 5f 63 69 64 5f 69 63 3d 78 65 72 6f 5f 69 64 25 30 31 32 33 34 33 66 61 65 31 2d 32 64 35 66 2d 34 64 31 31 2d 61 30 65 37 2d 35 62 38 31 39 62 34 64 36 35 39 32 25 30 31 32 26 64 5f 6c 64 3d 5f 74 73 25 33 44 31 37 31 33 39 37 39 38 37 31 32 31 35 26 64 5f 72 74 62 64 3d 6a 73 6f 6e 26 64 5f 6a 73 6f 6e 76 3d 31 26 64 5f 64 73 74 3d 31 26 63 5f 75 74 6d 5f 73 6f 75 72 63 65 3d 78 65 72 6f 2d 69 6e 76 6f 69 63 65 26 Data Ascii: d_mid=38344395601385624352093808212681231943&d_nsid=0&d_dpid=138899&d_dpuuid=2343fae1-2d5f-4d11-a0e7-5b819b4d6592&d_cid_ic=xero_id%012343fae1-2d5f-4d11-a0e7-5b819b4d6592%012&d_ld=_ts%3D1713979871215&d_rtbd=json&d_jsonv=1&d_dst=1&c_utm_source=xero-invoice&
2024-04-24 17:31:12 UTC	819	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:12 GMT Content-Type: application/json;charset=utf-8 Content-Length: 231 Connection: close X-TID: O+oeciPHStE= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.xero.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-usw2-2-v056-0b658af59.edge-usw2.demdex.com 185 ms set-cookie: demdex=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:12 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-24 17:31:12 UTC	231	IN	Data Raw: 7b 22 73 74 75 66 66 22 3a 5b 7b 22 63 6e 22 3a 22 61 61 6d 5f 70 69 6c 6f 74 22 2c 22 63 76 22 3a 22 73 65 67 3d 32 31 35 33 33 32 30 35 2c 73 65 67 3d 32 31 35 33 33 32 33 31 2c 3d 32 34 37 36 37 33 32 39 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 22 7d 2c 7b 22 63 6e 22 3a 22 61 61 6d 5f 78 65 72 6f 22 2c 22 63 76 22 3a 22 73 65 67 3d 32 32 32 38 33 32 36 37 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 22 7d 5d 2c 22 75 75 69 64 22 3a 22 33 38 33 35 31 35 30 34 37 36 39 32 32 36 36 38 32 31 33 32 30 38 39 39 39 35 37 30 34 30 37 32 31 33 30 39 32 39 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 39 2c 22 74 69 64 22 3a 22 4f 2b 6f 65 63 69 50 48 53 74 45 3d 22 7d Data Ascii: {"stuff":[{"cn":"aam_pilot","cv":"seg=21533205,seg=21533231,=24767329","ttl":30,"dmn":""},{"cn":"aam_xero","cv":"seg=22283267","ttl":30,"dmn":""}],"uuid":"38351504769226682132089995704072130929","dcs_region":9,"tid":"O+oeciPHStE="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49839	18.154.132.87	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:12 UTC	802	OUT	GET /trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36&businessunitId=4becd84a00006400050b6782 HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:13 UTC	650	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 3267 Connection: close Date: Wed, 24 Apr 2024 17:31:14 GMT Last-Modified: Mon, 30 Oct 2023 13:11:24 GMT ETag: "2922a85ce6caf46f828c097bf7aa1036" x-amz-server-side-encryption: AES256 Cache-Control: max-age=86400 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 d5f067e387bd572daf470377271a020a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: vvjF0rcRHT17QJfs5movwad_9EZ7aY0owjV0uOIFiBoTJ_6gC1FHhw== X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-04-24 17:31:13 UTC	3267	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 c5 5b eb 8f db b8 11 ff 7e 7f 85 ce c1 01 d9 96 da d8 de b5 b3 91 37 41 db eb 15 57 20 68 0b dc 01 45 3f 2d 28 89 b2 79 2b 4b 8a 48 39 bb 31 fc bf 77 86 d4 83 92 28 f9 b1 7b 2d 9c 8d 25 3e 86 3f 0e 87 f3 22 7d ff fd 5f ff f9 e3 af ff f9 d7 4f ce 46 6e e3 4f df dd eb 2f c7 b9 df 30 1a e2 03 3c 6e 99 a4 4e b0 a1 b9 60 f2 e3 a4 90 91 7b 37 71 de 99 95 09 dd b2 8f 93 3c f5 53 29 26 4e 90 26 92 25 d0 34 49 79 12 b2 a7 a6 b1 e4 32 66 9f 7e cd 0b 21 33 1e a7 d2 f9 11 9e d2 ad f3 6f 1e ae 99 bc 7f a7 eb 75 5b 21 9f f1 19 01 11 3f 0d 9f 49 c8 77 44 64 34 21 34 cb 62 26 49 ea ff c6 02 49 78 94 c3 e8 64 33 23 9b 39 d9 dc 90 cd 2d d9 2c c8 66 49 32 e2 c7 69 f0 f8 a5 48 25 23 59 ce 08 25 d4 f7 73 42 83 3c 4d 9e b7 84 86 61 ce 84 20 3e 5f Data Ascii: [~7AW hE?-(y+KH91w({-%>?"}_OFnO/0<nN`{7q<S)&N&%4Iy2f~!3ou[!?IwDd4!4b&IIxd3#9-,fI2iH%#Y%sB<Ma >_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49841	63.140.37.126	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:13 UTC	734	OUT	POST /rest/v1/delivery?client=xerolimited&version=2.3.1&sessionId=3f1be1d8-9f25-4368-bedc-dbf40f8c1e2a HTTP/1.1 Host: xerolimited.tt.omtrdc.net Connection: keep-alive Content-Length: 472 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" pragma: no-cache sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain accept: / cache-control: no-cache sec-ch-ua-platform: "Windows" Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:13 UTC	472	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 68 61 6e 6e 65 6c 22 3a 22 77 65 62 22 2c 22 61 64 64 72 65 73 73 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 78 65 72 6f 2e 63 6f 6d 2f 75 73 2f 74 72 79 2d 6e 6f 77 2f 6d 61 6e 61 67 65 2d 69 6e 76 6f 69 63 65 73 2f 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 78 65 72 6f 2d 69 6e 76 6f 69 63 65 26 75 74 6d 5f 6d 65 64 69 75 6d 3d 72 65 66 65 72 72 61 6c 26 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 67 6c 6f 62 61 6c 2d 64 2d 6c 66 2d 78 65 72 6f 69 6e 76 6f 69 63 65 72 65 66 65 72 72 61 6c 73 22 2c 22 72 65 66 65 72 72 69 6e 67 55 72 6c 22 3a 22 22 7d 7d 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 32 33 34 33 66 61 65 31 2d 32 64 35 66 2d 34 64 31 31 2d 61 30 65 37 2d 35 62 38 31 39 62 34 64 36 35 Data Ascii: {"context":{"channel":"web","address":{"url":"https://www.xero.com/us/try-now/manage-invoices/?utm_source=xero-invoice&utm_medium=referral&utm_campaign=global-d-lf-xeroinvoicereferrals","referringUrl":""}},"id":{"tntId":"2343fae1-2d5f-4d11-a0e7-5b819b4d65
2024-04-24 17:31:13 UTC	838	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 17:31:13 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://www.xero.com access-control-allow-credentials: true x-request-id: d9d78c35-6d95-4803-9841-d5a1749e846c timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-04-24 17:31:13 UTC	355	IN	Data Raw: 31 35 63 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 33 30 37 65 30 35 37 32 2d 35 32 34 38 2d 34 38 35 63 2d 38 61 33 30 2d 32 65 39 37 66 34 65 62 36 61 63 39 22 2c 22 63 6c 69 65 6e 74 22 3a 22 78 65 72 6f 6c 69 6d 69 74 65 64 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 32 33 34 33 66 61 65 31 2d 32 64 35 66 2d 34 64 31 31 2d 61 30 65 37 2d 35 62 38 31 39 62 34 64 36 35 39 32 2e 33 35 5f 30 22 2c 22 6d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 64 22 3a 22 33 38 33 34 34 33 39 35 36 30 31 33 38 35 36 32 34 33 35 32 30 39 33 38 30 38 32 31 32 36 38 31 32 33 31 39 34 33 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 35 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 Data Ascii: 15c{"status":200,"requestId":"307e0572-5248-485c-8a30-2e97f4eb6ac9","client":"xerolimited","id":{"tntId":"2343fae1-2d5f-4d11-a0e7-5b819b4d6592.35_0","marketingCloudVisitorId":"38344395601385624352093808212681231943"},"edgeHost":"mboxedge35.tt.omtrdc.net
2024-04-24 17:31:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49842	100.20.148.237	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:13 UTC	700	OUT	POST /event?d_dil_ver=9.4&_ts=1713979872241 HTTP/1.1 Host: xero.demdex.net Connection: keep-alive Content-Length: 249 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=38351504769226682132089995704072130929
2024-04-24 17:31:13 UTC	249	OUT	Data Raw: 64 5f 6d 69 64 3d 33 38 33 34 34 33 39 35 36 30 31 33 38 35 36 32 34 33 35 32 30 39 33 38 30 38 32 31 32 36 38 31 32 33 31 39 34 33 26 64 5f 6e 73 69 64 3d 30 26 64 5f 64 70 69 64 3d 31 33 38 38 39 39 26 64 5f 64 70 75 75 69 64 3d 32 33 34 33 66 61 65 31 2d 32 64 35 66 2d 34 64 31 31 2d 61 30 65 37 2d 35 62 38 31 39 62 34 64 36 35 39 32 26 64 5f 63 69 64 5f 69 63 3d 78 65 72 6f 5f 69 64 25 30 31 32 33 34 33 66 61 65 31 2d 32 64 35 66 2d 34 64 31 31 2d 61 30 65 37 2d 35 62 38 31 39 62 34 64 36 35 39 32 25 30 31 32 26 64 5f 6c 64 3d 5f 74 73 25 33 44 31 37 31 33 39 37 39 38 37 32 32 34 31 26 64 5f 72 74 62 64 3d 6a 73 6f 6e 26 64 5f 6a 73 6f 6e 76 3d 31 26 64 5f 64 73 74 3d 31 26 63 5f 72 61 6e 64 6f 6d 5f 6e 75 6d 5f 74 65 73 74 3d 39 30 Data Ascii: d_mid=38344395601385624352093808212681231943&d_nsid=0&d_dpid=138899&d_dpuuid=2343fae1-2d5f-4d11-a0e7-5b819b4d6592&d_cid_ic=xero_id%012343fae1-2d5f-4d11-a0e7-5b819b4d6592%012&d_ld=_ts%3D1713979872241&d_rtbd=json&d_jsonv=1&d_dst=1&c_random_num_test=90
2024-04-24 17:31:13 UTC	817	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:13 GMT Content-Type: application/json;charset=utf-8 Content-Length: 231 Connection: close X-TID: cesHxxCOTLE= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.xero.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-usw2-2-v056-0284f4939.edge-usw2.demdex.com 6 ms set-cookie: demdex=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:13 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-24 17:31:13 UTC	231	IN	Data Raw: 7b 22 73 74 75 66 66 22 3a 5b 7b 22 63 6e 22 3a 22 61 61 6d 5f 70 69 6c 6f 74 22 2c 22 63 76 22 3a 22 73 65 67 3d 32 31 35 33 33 32 30 35 2c 73 65 67 3d 32 31 35 33 33 32 33 31 2c 3d 32 34 37 36 37 33 32 39 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 22 7d 2c 7b 22 63 6e 22 3a 22 61 61 6d 5f 78 65 72 6f 22 2c 22 63 76 22 3a 22 73 65 67 3d 32 32 32 38 33 32 36 37 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 22 7d 5d 2c 22 75 75 69 64 22 3a 22 33 38 33 35 31 35 30 34 37 36 39 32 32 36 36 38 32 31 33 32 30 38 39 39 39 35 37 30 34 30 37 32 31 33 30 39 32 39 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 39 2c 22 74 69 64 22 3a 22 63 65 73 48 78 78 43 4f 54 4c 45 3d 22 7d Data Ascii: {"stuff":[{"cn":"aam_pilot","cv":"seg=21533205,seg=21533231,=24767329","ttl":30,"dmn":""},{"cn":"aam_xero","cv":"seg=22283267","ttl":30,"dmn":""}],"uuid":"38351504769226682132089995704072130929","dcs_region":9,"tid":"cesHxxCOTLE="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49843	52.32.69.132	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:13 UTC	932	OUT	GET /id?d_visid_ver=5.0.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=C593280E560020957F000101%40AdobeOrg&d_nsid=0&d_mid=38344395601385624352093808212681231943&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=xero_id%012343fae1-2d5f-4d11-a0e7-5b819b4d6592%012&ts=1713979872286 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=38351504769226682132089995704072130929
2024-04-24 17:31:13 UTC	817	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:13 GMT Content-Type: application/json;charset=utf-8 Content-Length: 363 Connection: close X-TID: SpqPDMuuTws= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.xero.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-usw2-2-v056-069cd149a.edge-usw2.demdex.com 3 ms set-cookie: demdex=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:13 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-24 17:31:13 UTC	363	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 33 38 33 34 34 33 39 35 36 30 31 33 38 35 36 32 34 33 35 32 30 39 33 38 30 38 32 31 32 36 38 31 32 33 31 39 34 33 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 39 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"38344395601385624352093808212681231943","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":9,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49846	100.20.148.237	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:13 UTC	431	OUT	GET /event?d_dil_ver=9.4&_ts=1713979871216 HTTP/1.1 Host: xero.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=38351504769226682132089995704072130929
2024-04-24 17:31:13 UTC	893	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:13 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: ShTP79qqRko= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-usw2-1-v056-007c93e32.edge-usw2.demdex.com 7 ms set-cookie: demdex=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:13 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: xero=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:13 GMT; Path=/; Domain=.xero.demdex.net; Secure; SameSite=None
2024-04-24 17:31:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49847	63.140.36.145	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:13 UTC	488	OUT	GET /id?d_visid_ver=5.0.0&d_fieldgroup=A&mcorgid=C593280E560020957F000101%40AdobeOrg&mid=38344395601385624352093808212681231943&ts=1713979871203 HTTP/1.1 Host: xerolimited.sc.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:13 UTC	378	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Wed, 24 Apr 2024 17:31:13 GMT p3p: CP="This is not a P3P policy" server: jag vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 2 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-24 17:31:13 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49848	18.154.132.87	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:13 UTC	692	OUT	GET /trustboxes/53aa8912dec7e10d38f59f36/main.js HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36&businessunitId=4becd84a00006400050b6782 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:14 UTC	666	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 31409 Connection: close Date: Wed, 24 Apr 2024 17:31:15 GMT Last-Modified: Mon, 30 Oct 2023 13:11:26 GMT ETag: "60fe166092712d93cc87039640675ef6" x-amz-server-side-encryption: AES256 Cache-Control: max-age=86400 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 37d6a7866914f4479b2ebf8191aa9a4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: X6WH-7F5a9u9rLpgvHexvBaJGp7FKvRKHcFahsYz3IveOJl_iG7oPw== X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-04-24 17:31:14 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 7b 97 1b d7 75 27 fa 55 8a e5 19 12 70 17 40 14 de a8 26 d4 43 51 94 45 a7 49 6a 48 4a ce 75 bb c3 55 0d 9c 6e 14 bb 50 05 57 15 ba d9 dd c4 5a a2 14 cf 38 e3 64 bc 6e 5e 93 2c e7 71 9d c8 49 94 dc 49 9c c4 9e c8 72 e2 ac 35 1c ff 4f 7d 85 a1 2d 3b 7f dd af 70 7f fb 3c aa 4e 01 05 74 37 45 c9 c9 bd a2 ec 46 d5 79 ec b3 cf 3e fb 79 5e f5 ff fc f0 9f 2f ec 4e 83 41 e2 85 81 e1 95 02 cb b5 e2 f2 49 9a 12 96 12 8b 95 4f bc dd d2 05 77 2b d9 16 4f 01 7f 3a 70 23 23 ea 9b aa a8 d9 ef 27 47 13 16 ee 1a 11 fb ea d4 8b d8 c5 8b f2 61 9d ea d0 6b 39 62 c9 34 0a 8c 08 40 2f d4 ca 94 ee ab 34 5f a6 25 a3 28 3c 2c b1 7e c0 0e 8d eb 51 14 46 25 f3 9a 1b 04 61 62 ec 7a c1 d0 18 87 c3 a9 cf 8c 4b e6 5a b2 66 5e 32 cb e5 ea 20 1c b2 be Data Ascii: {u'Up@&CQEIjHJuUnPWZ8dn^,qIIr5O}-;p<Nt7EFy>y^/NAIOw+O:p##'Gak9b4@/4_%(<,~QF%abzKZf^2
2024-04-24 17:31:14 UTC	1042	IN	Data Raw: 79 32 16 38 40 53 10 bb ba c1 90 ce d8 f3 24 d3 0a 5c d8 a9 64 46 f1 61 8a d0 80 5a 0f 53 44 a1 ea e0 0d 0d 87 d7 0f 00 34 53 bd 82 60 56 06 6a ce 95 31 05 35 4c 38 0d 18 a3 70 57 4d 4f 48 f9 d5 42 92 a4 7f c2 a7 62 b4 29 27 59 76 26 63 89 94 40 33 0e 98 a8 6e 72 6f 84 4a 55 65 af f8 87 28 62 95 a8 46 67 dd 55 bc 55 f6 4b a0 7e 38 41 4c c3 a7 0b 8d f4 c3 15 fd da 7a 74 25 54 e5 22 f0 20 4d a9 12 d3 94 c8 48 cb 19 80 94 d7 07 d6 a2 34 2c 0e 9c c9 05 9a e3 c9 54 34 3e 27 54 7a a5 69 c9 04 6e d3 89 59 2e 99 28 66 0c f9 8d e3 8c eb 43 2e 96 5a 74 9d 72 c6 49 3a a0 54 c4 14 da 53 4a b3 ae 8b 07 39 95 8b 86 f8 b8 48 7b a9 e8 77 f1 22 45 91 6a 66 33 93 0e e8 20 d2 3b 2f 7a a6 5e ea 8a cf e2 df cf e2 df 02 1d 9d 29 5c 57 71 9b 9a 6d e6 f1 c0 12 bf 88 8a 4a 1e 8b Data Ascii: y28@S$\dFaZSD4S`Vj15L8pWMOHBb)'Yv&c@3nroJUe(bFgUUK~8ALzt%T" MH4,T4>'TzinY.(fC.ZtrI:TSJ9H{w"Ejf3 ;/z^)\WqmJ
2024-04-24 17:31:14 UTC	8949	IN	Data Raw: 7a 56 0e a6 d3 e0 5f 0e cc 43 71 1a bc 77 2f 5a 91 fc 1b 99 ac 0b fa 4b 1c 38 88 04 62 c3 0c 32 7c 10 2b e2 69 28 64 2d 84 90 59 77 44 5c 92 e8 f3 3d d2 25 a5 28 65 dd ab 66 81 63 5f 7f a1 80 00 46 57 0f 24 29 c0 37 39 49 4d ea 2d 9f 25 50 81 25 4d 06 58 cb c2 54 8f 7c 29 3e f7 2e f6 27 0a e5 2c 17 5f 53 65 2d 57 7f fd 6c be 92 b8 4e 71 9a d8 73 05 a0 b4 0b 24 8c f8 32 31 f8 8d 95 57 6d 4e e4 a3 3e e8 9b b7 c2 f4 e2 43 f7 c0 f5 7c c2 d8 a4 75 d1 a0 34 b4 b6 4e 80 9d 63 a2 a7 31 3a 7f 47 ed f1 14 bc 33 ef c9 43 6f 8f bc 78 21 9e 4b c7 29 92 33 f5 0a 4e 69 b9 cf 9e 88 b9 4e 98 a5 c8 9d 5c 8d f6 62 2b 5b 98 89 b4 95 28 b5 2c 34 bf 72 14 cd af 45 cd 2f 24 51 34 ab f7 a9 ba 83 d8 11 1e 2d 57 39 4b 96 64 a1 fa 07 e5 e7 43 70 6b 7b 1e 43 70 d0 39 70 5a 17 93 3e Data Ascii: zV_Cqw/ZK8b2\|+i(d-YwD\=%(efc_FW$)79IM-%P%MXT\|)>.',_Se-WlNqs$21WmN>C\|u4Nc1:G3Cox!K)3NiN\b+[(,4rE/$Q4-W9KdCpk{Cp9pZ>
2024-04-24 17:31:14 UTC	5034	IN	Data Raw: 77 3e 62 12 5d 2c 11 80 64 3e 99 00 3d 93 ea 27 ba 0f e7 d0 a8 25 72 3b 8b 49 82 a2 6f e9 7a 9e a4 4b 24 4c af 20 f8 9c 50 c7 d1 4b 51 2c bd d9 6d 2e e1 9b de da b2 a8 c1 28 f9 63 78 fd 93 d3 d4 e7 c0 94 f5 2a 94 5f 1a 9f 72 cf 5d 7a 85 a7 79 c2 e3 be c3 e3 66 11 85 3e 07 02 e8 a5 02 9e 14 9d 6b af e5 c0 1c a0 d3 53 02 55 71 74 e8 43 e7 57 41 32 7d 9b 02 18 04 06 19 5f a9 06 d2 4f c8 78 69 65 29 41 f0 74 43 49 81 8f 9d a3 8b c7 05 7d 25 dd d4 03 e0 f1 94 4a cf ce 32 7f 3e c0 19 f7 05 e1 ee 5d e8 81 61 30 77 19 cc d5 02 7a 2e 66 01 e8 bc 34 01 01 93 fd 7e 78 40 78 f0 01 74 a4 31 e6 5c 12 05 90 fc 6d 86 6b 2f 7d 8c 5d b8 8b 90 dc 7a 08 a6 c4 dc 05 e8 d4 53 41 3e e9 ee d1 d5 19 75 4f 1f c5 1e 9f bb a9 f2 6a b9 25 bf 52 5e 7c c1 7c 81 ba 25 4c 1b 5e 47 a2 c0 Data Ascii: w>b],d>='%r;IozK$L PKQ,m.(cx*_r]zyf>kSUqtCWA2}_Oxie)AtCI}%J2>]a0wz.f4~x@xt1\mk/}]zSA>uOj%R^\|\|%L^G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49853	100.20.148.237	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:14 UTC	431	OUT	GET /event?d_dil_ver=9.4&_ts=1713979872241 HTTP/1.1 Host: xero.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=38351504769226682132089995704072130929
2024-04-24 17:31:14 UTC	893	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:14 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: gXUMP2W2Tm4= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-usw2-2-v056-0bfe7c24c.edge-usw2.demdex.com 9 ms set-cookie: demdex=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:14 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: xero=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:14 GMT; Path=/; Domain=.xero.demdex.net; Secure; SameSite=None
2024-04-24 17:31:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49854	100.20.148.237	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:14 UTC	700	OUT	POST /event?d_dil_ver=9.4&_ts=1713979872243 HTTP/1.1 Host: xero.demdex.net Connection: keep-alive Content-Length: 246 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=38351504769226682132089995704072130929
2024-04-24 17:31:14 UTC	246	OUT	Data Raw: 64 5f 6d 69 64 3d 33 38 33 34 34 33 39 35 36 30 31 33 38 35 36 32 34 33 35 32 30 39 33 38 30 38 32 31 32 36 38 31 32 33 31 39 34 33 26 64 5f 6e 73 69 64 3d 30 26 64 5f 64 70 69 64 3d 31 33 38 38 39 39 26 64 5f 64 70 75 75 69 64 3d 32 33 34 33 66 61 65 31 2d 32 64 35 66 2d 34 64 31 31 2d 61 30 65 37 2d 35 62 38 31 39 62 34 64 36 35 39 32 26 64 5f 63 69 64 5f 69 63 3d 78 65 72 6f 5f 69 64 25 30 31 32 33 34 33 66 61 65 31 2d 32 64 35 66 2d 34 64 31 31 2d 61 30 65 37 2d 35 62 38 31 39 62 34 64 36 35 39 32 25 30 31 32 26 64 5f 6c 64 3d 5f 74 73 25 33 44 31 37 31 33 39 37 39 38 37 32 32 34 33 26 64 5f 72 74 62 64 3d 6a 73 6f 6e 26 64 5f 6a 73 6f 6e 76 3d 31 26 64 5f 64 73 74 3d 31 26 63 5f 72 61 6e 64 6f 6d 5f 6e 75 6d 62 65 72 3d 32 Data Ascii: d_mid=38344395601385624352093808212681231943&d_nsid=0&d_dpid=138899&d_dpuuid=2343fae1-2d5f-4d11-a0e7-5b819b4d6592&d_cid_ic=xero_id%012343fae1-2d5f-4d11-a0e7-5b819b4d6592%012&d_ld=_ts%3D1713979872243&d_rtbd=json&d_jsonv=1&d_dst=1&c_random_number=2
2024-04-24 17:31:14 UTC	817	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:14 GMT Content-Type: application/json;charset=utf-8 Content-Length: 231 Connection: close X-TID: FH7pmDtMR/U= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.xero.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-usw2-2-v056-0c8626bb6.edge-usw2.demdex.com 4 ms set-cookie: demdex=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:14 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-24 17:31:14 UTC	231	IN	Data Raw: 7b 22 73 74 75 66 66 22 3a 5b 7b 22 63 6e 22 3a 22 61 61 6d 5f 70 69 6c 6f 74 22 2c 22 63 76 22 3a 22 73 65 67 3d 32 31 35 33 33 32 30 35 2c 73 65 67 3d 32 31 35 33 33 32 33 31 2c 3d 32 34 37 36 37 33 32 39 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 22 7d 2c 7b 22 63 6e 22 3a 22 61 61 6d 5f 78 65 72 6f 22 2c 22 63 76 22 3a 22 73 65 67 3d 32 32 32 38 33 32 36 37 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 22 7d 5d 2c 22 75 75 69 64 22 3a 22 33 38 33 35 31 35 30 34 37 36 39 32 32 36 36 38 32 31 33 32 30 38 39 39 39 35 37 30 34 30 37 32 31 33 30 39 32 39 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 39 2c 22 74 69 64 22 3a 22 46 48 37 70 6d 44 74 4d 52 2f 55 3d 22 7d Data Ascii: {"stuff":[{"cn":"aam_pilot","cv":"seg=21533205,seg=21533231,=24767329","ttl":30,"dmn":""},{"cn":"aam_xero","cv":"seg=22283267","ttl":30,"dmn":""}],"uuid":"38351504769226682132089995704072130929","dcs_region":9,"tid":"FH7pmDtMR/U="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49855	34.215.13.170	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:14 UTC	685	OUT	GET /id?d_visid_ver=5.0.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=C593280E560020957F000101%40AdobeOrg&d_nsid=0&d_mid=38344395601385624352093808212681231943&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=xero_id%012343fae1-2d5f-4d11-a0e7-5b819b4d6592%012&ts=1713979872286 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=38351504769226682132089995704072130929
2024-04-24 17:31:14 UTC	712	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:14 GMT Content-Type: application/json;charset=utf-8 Content-Length: 363 Connection: close X-TID: UpgIRP+NSKI= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-usw2-1-v056-08e653e82.edge-usw2.demdex.com 2 ms set-cookie: demdex=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:14 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-24 17:31:14 UTC	363	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 33 38 33 34 34 33 39 35 36 30 31 33 38 35 36 32 34 33 35 32 30 39 33 38 30 38 32 31 32 36 38 31 32 33 31 39 34 33 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 39 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"38344395601385624352093808212681231943","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":9,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49857	63.140.37.206	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:14 UTC	445	OUT	GET /rest/v1/delivery?client=xerolimited&version=2.3.1&sessionId=3f1be1d8-9f25-4368-bedc-dbf40f8c1e2a HTTP/1.1 Host: xerolimited.tt.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:14 UTC	450	IN	HTTP/1.1 405 Method Not Allowed date: Wed, 24 Apr 2024 17:31:14 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-04-24 17:31:14 UTC	67	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}
2024-04-24 17:31:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49859	100.20.148.237	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:14 UTC	745	OUT	POST /event?d_dil_ver=9.4&_ts=1713979872248 HTTP/1.1 Host: xero.demdex.net Connection: keep-alive Content-Length: 248 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=38351504769226682132089995704072130929; xero=38351504769226682132089995704072130929
2024-04-24 17:31:14 UTC	248	OUT	Data Raw: 64 5f 6d 69 64 3d 33 38 33 34 34 33 39 35 36 30 31 33 38 35 36 32 34 33 35 32 30 39 33 38 30 38 32 31 32 36 38 31 32 33 31 39 34 33 26 64 5f 6e 73 69 64 3d 30 26 64 5f 64 70 69 64 3d 31 33 38 38 39 39 26 64 5f 64 70 75 75 69 64 3d 32 33 34 33 66 61 65 31 2d 32 64 35 66 2d 34 64 31 31 2d 61 30 65 37 2d 35 62 38 31 39 62 34 64 36 35 39 32 26 64 5f 63 69 64 5f 69 63 3d 78 65 72 6f 5f 69 64 25 30 31 32 33 34 33 66 61 65 31 2d 32 64 35 66 2d 34 64 31 31 2d 61 30 65 37 2d 35 62 38 31 39 62 34 64 36 35 39 32 25 30 31 32 26 64 5f 6c 64 3d 5f 74 73 25 33 44 31 37 31 33 39 37 39 38 37 32 32 34 38 26 64 5f 72 74 62 64 3d 6a 73 6f 6e 26 64 5f 6a 73 6f 6e 76 3d 31 26 64 5f 64 73 74 3d 31 26 63 5f 72 65 66 65 72 72 65 72 3d 6e 6f 74 2d 78 65 72 6f Data Ascii: d_mid=38344395601385624352093808212681231943&d_nsid=0&d_dpid=138899&d_dpuuid=2343fae1-2d5f-4d11-a0e7-5b819b4d6592&d_cid_ic=xero_id%012343fae1-2d5f-4d11-a0e7-5b819b4d6592%012&d_ld=_ts%3D1713979872248&d_rtbd=json&d_jsonv=1&d_dst=1&c_referrer=not-xero
2024-04-24 17:31:15 UTC	987	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:15 GMT Content-Type: application/json;charset=utf-8 Content-Length: 231 Connection: close X-TID: gRAig09MSGU= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.xero.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-usw2-2-v056-0fcfc99d7.edge-usw2.demdex.com 4 ms set-cookie: demdex=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:15 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: xero=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:15 GMT; Path=/; Domain=.xero.demdex.net; Secure; SameSite=None
2024-04-24 17:31:15 UTC	231	IN	Data Raw: 7b 22 73 74 75 66 66 22 3a 5b 7b 22 63 6e 22 3a 22 61 61 6d 5f 70 69 6c 6f 74 22 2c 22 63 76 22 3a 22 73 65 67 3d 32 31 35 33 33 32 30 35 2c 73 65 67 3d 32 31 35 33 33 32 33 31 2c 3d 32 34 37 36 37 33 32 39 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 22 7d 2c 7b 22 63 6e 22 3a 22 61 61 6d 5f 78 65 72 6f 22 2c 22 63 76 22 3a 22 73 65 67 3d 32 32 32 38 33 32 36 37 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 22 7d 5d 2c 22 75 75 69 64 22 3a 22 33 38 33 35 31 35 30 34 37 36 39 32 32 36 36 38 32 31 33 32 30 38 39 39 39 35 37 30 34 30 37 32 31 33 30 39 32 39 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 39 2c 22 74 69 64 22 3a 22 67 52 41 69 67 30 39 4d 53 47 55 3d 22 7d Data Ascii: {"stuff":[{"cn":"aam_pilot","cv":"seg=21533205,seg=21533231,=24767329","ttl":30,"dmn":""},{"cn":"aam_xero","cv":"seg=22283267","ttl":30,"dmn":""}],"uuid":"38351504769226682132089995704072130929","dcs_region":9,"tid":"gRAig09MSGU="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49861	52.32.69.132	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:14 UTC	661	OUT	GET /ibs:dpid=411&dpuuid=ZilB4gAAAKLUJQN2 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=38351504769226682132089995704072130929
2024-04-24 17:31:15 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:15 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: dL8vqLVRR7Y= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-usw2-2-v056-0627ae255.edge-usw2.demdex.com 2 ms set-cookie: dpm=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:15 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:15 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-24 17:31:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49868	13.226.210.108	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:14 UTC	517	OUT	GET /20923.js HTTP/1.1 Host: www.dwin1.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:15 UTC	741	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 47800 Connection: close Date: Wed, 24 Apr 2024 17:31:16 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD x-amz-replication-status: COMPLETED Last-Modified: Tue, 16 Apr 2024 08:52:50 GMT ETag: "e8fda4642d059d5ab863a2f161e4b14c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=600, s-maxage=600 x-amz-version-id: gdWF4z39mAkq912_PWSVDK4bEL42MEYJ Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 0931eacdfabebfd9816e3573b4bf15b4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C1 X-Amz-Cf-Id: oF044jGayGWgMemsYQ3sQGUEX2OGd0Cki-ZQ9Fs1B6-3zwbOfd1JEg==
2024-04-24 17:31:15 UTC	16384	IN	Data Raw: 76 61 72 20 41 57 49 4e 3d 41 57 49 4e 7c 7c 7b 7d 3b 41 57 49 4e 2e 54 72 61 63 6b 69 6e 67 3d 41 57 49 4e 2e 54 72 61 63 6b 69 6e 67 7c 7c 7b 7d 2c 41 57 49 4e 2e 73 50 72 6f 74 6f 63 6f 6c 3d 22 68 74 74 70 73 3a 22 3d 3d 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 3f 22 68 74 74 70 73 3a 2f 2f 22 3a 22 68 74 74 70 3a 2f 2f 22 2c 41 57 49 4e 2e 69 53 63 72 69 70 74 43 6f 75 6e 74 3d 30 2c 41 57 49 4e 2e 54 72 61 63 6b 69 6e 67 2e 64 65 76 69 63 65 39 55 72 6c 3d 22 68 74 74 70 73 3a 2f 2f 74 68 65 2e 73 63 69 65 6e 63 65 62 65 68 69 6e 64 65 63 6f 6d 6d 65 72 63 65 2e 63 6f 6d 2f 64 39 63 6f 72 65 22 2c 41 57 49 4e 2e 54 72 61 63 6b 69 6e 67 2e 66 6c 61 67 73 3d 7b 61 6c 6c 6f 77 4e 65 77 41 57 43 43 6f 6f 6b 69 65 3a 21 30 2c 61 6c 6c 6f 77 4e Data Ascii: var AWIN=AWIN\|\|{};AWIN.Tracking=AWIN.Tracking\|\|{},AWIN.sProtocol="https:"==location.protocol?"https://":"http://",AWIN.iScriptCount=0,AWIN.Tracking.device9Url="https://the.sciencebehindecommerce.com/d9core",AWIN.Tracking.flags={allowNewAWCCookie:!0,allowN
2024-04-24 17:31:15 UTC	319	IN	Data Raw: 6e 43 75 73 74 6f 6d 45 76 65 6e 74 3d 77 69 6e 64 6f 77 2e 43 75 73 74 6f 6d 45 76 65 6e 74 2c 41 57 49 4e 2e 54 72 61 63 6b 69 6e 67 2e 43 6f 6e 73 65 6e 74 3d 7b 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 74 3d 21 31 2c 72 3d 21 31 2c 61 3d 21 31 2c 69 3d 21 31 2c 63 3d 2f 5f 61 77 5f 73 6e 5f 5c 64 2b 2f 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 22 74 72 75 65 22 3d 3d 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7c 7c 22 66 61 6c 73 65 22 3d 3d 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7c 7c 22 31 22 3d 3d 3d 65 7c 7c 22 30 22 3d 3d 3d 65 3a 31 3d 3d 65 7c 7c 30 3d 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 22 73 74 72 69 6e 67 22 Data Ascii: nCustomEvent=window.CustomEvent,AWIN.Tracking.Consent={},function(e){var n,t=!1,r=!1,a=!1,i=!1,c=/_aw_sn_\d+/;function o(e){return"string"==typeof e?"true"===e.toLowerCase()\|\|"false"===e.toLowerCase()\|\|"1"===e\|\|"0"===e:1==e\|\|0==e}function s(e){if("string"
2024-04-24 17:31:15 UTC	12792	IN	Data Raw: 6c 73 65 22 3d 3d 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7c 7c 22 30 22 3d 3d 3d 65 29 72 65 74 75 72 6e 21 31 7d 65 6c 73 65 20 69 66 28 31 3d 3d 65 7c 7c 30 3d 3d 65 29 72 65 74 75 72 6e 20 31 3d 3d 65 3b 72 65 74 75 72 6e 21 30 7d 65 2e 63 68 65 63 6b 46 6f 72 53 6e 50 61 72 61 6d 65 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 41 57 49 4e 2e 54 72 61 63 6b 69 6e 67 2e 67 65 74 51 75 65 72 79 56 61 72 56 61 6c 75 65 28 22 73 6e 22 2c 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2e 73 75 62 73 74 72 69 6e 67 28 31 29 29 3b 6e 26 26 65 2e 73 65 74 53 6e 50 61 72 61 6d 65 74 65 72 28 70 61 72 73 65 49 6e 74 28 6e 29 29 7d 2c 65 2e 67 65 74 47 64 70 72 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: lse"===e.toLowerCase()\|\|"0"===e)return!1}else if(1==e\|\|0==e)return 1==e;return!0}e.checkForSnParameter=function(){var n=AWIN.Tracking.getQueryVarValue("sn",document.location.search.substring(1));n&&e.setSnParameter(parseInt(n))},e.getGdprQuery=function(){
2024-04-24 17:31:16 UTC	16384	IN	Data Raw: 44 61 74 61 25 32 43 25 32 30 73 75 63 63 65 73 73 25 32 39 25 32 30 25 37 42 25 30 41 25 30 39 25 30 39 25 30 39 25 30 39 25 30 39 25 30 39 25 30 39 25 30 39 76 61 72 25 32 30 61 70 70 65 6e 64 73 25 32 30 25 33 44 25 32 30 64 65 6c 69 6d 69 74 65 72 25 33 42 25 30 41 25 30 39 25 30 39 25 30 39 25 30 39 25 30 39 25 30 39 25 30 39 25 30 39 69 66 25 32 30 25 32 38 74 63 44 61 74 61 25 32 30 25 32 36 25 32 36 25 32 30 73 75 63 63 65 73 73 25 32 39 25 32 30 25 37 42 25 30 41 25 30 39 25 30 39 25 30 39 25 30 39 25 30 39 25 30 39 25 30 39 25 30 39 25 30 39 69 66 25 32 30 25 32 38 74 79 70 65 6f 66 25 32 30 74 63 44 61 74 61 2e 67 64 70 72 41 70 70 6c 69 65 73 25 32 30 25 32 31 25 33 44 25 33 44 25 32 30 25 32 37 75 6e 64 65 66 69 6e 65 64 25 32 37 25 32 39 25 Data Ascii: Data%2C%20success%29%20%7B%0A%09%09%09%09%09%09%09%09var%20appends%20%3D%20delimiter%3B%0A%09%09%09%09%09%09%09%09if%20%28tcData%20%26%26%20success%29%20%7B%0A%09%09%09%09%09%09%09%09%09if%20%28typeof%20tcData.gdprApplies%20%21%3D%3D%20%27undefined%27%29%
2024-04-24 17:31:16 UTC	1921	IN	Data Raw: 65 73 73 65 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 2e 70 72 6f 63 65 73 73 65 64 48 61 73 68 65 73 26 26 28 65 2e 70 72 6f 63 65 73 73 65 64 48 61 73 68 65 73 3d 5b 5d 29 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 65 2e 70 72 6f 63 65 73 73 65 64 48 61 73 68 65 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 69 66 28 65 2e 70 72 6f 63 65 73 73 65 64 48 61 73 68 65 73 5b 74 5d 3d 3d 3d 6e 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 65 2e 73 65 74 49 6e 70 75 74 57 61 73 50 72 6f 63 65 73 73 65 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 65 2e 70 72 6f 63 65 73 73 65 64 48 61 73 68 65 73 5b 65 2e 70 72 6f 63 65 73 73 65 64 48 61 73 68 65 73 2e 6c 65 6e 67 74 68 5d 3d 6e 7d 2c 65 2e 70 69 78 65 6c 43 61 6c 6c 3d 66 75 Data Ascii: essed=function(n){void 0===e.processedHashes&&(e.processedHashes=[]);for(var t=0;t<e.processedHashes.length;t++)if(e.processedHashes[t]===n)return!0;return!1},e.setInputWasProcessed=function(n){e.processedHashes[e.processedHashes.length]=n},e.pixelCall=fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49866	100.20.148.237	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:14 UTC	476	OUT	GET /event?d_dil_ver=9.4&_ts=1713979872243 HTTP/1.1 Host: xero.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=38351504769226682132089995704072130929; xero=38351504769226682132089995704072130929
2024-04-24 17:31:15 UTC	893	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:15 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: zweDc3R9RTQ= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-usw2-2-v056-069cd149a.edge-usw2.demdex.com 6 ms set-cookie: demdex=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:15 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: xero=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:15 GMT; Path=/; Domain=.xero.demdex.net; Secure; SameSite=None
2024-04-24 17:31:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49870	18.154.132.87	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:15 UTC	864	OUT	GET /trustbox-data/53aa8912dec7e10d38f59f36?businessUnitId=4becd84a00006400050b6782&locale=en-NZ&reviewStars=4%2C5&reviewTagValue=product&includeReviews=true&reviewsPerPage=15 HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36&businessunitId=4becd84a00006400050b6782 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:15 UTC	571	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 12125 Connection: close Cache-Control: public,max-age=1800 Date: Wed, 24 Apr 2024 17:31:15 GMT ETag: "0fbdb8218217c4d9ce3bc5a0939f850a" Server: Kestrel Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 73c3df19e5d007c253fa1378c993078e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: o072dH18zzMJXySBlXCSdltgt5YtfDx8KoRkZDgYTDfOBIkJtf1vDA==
2024-04-24 17:31:15 UTC	12125	IN	Data Raw: 7b 22 62 75 73 69 6e 65 73 73 55 6e 69 74 22 3a 7b 22 73 74 61 72 73 22 3a 34 2e 30 2c 22 74 72 75 73 74 53 63 6f 72 65 22 3a 34 2e 32 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 58 65 72 6f 22 2c 22 6e 75 6d 62 65 72 4f 66 52 65 76 69 65 77 73 22 3a 7b 22 74 6f 74 61 6c 22 3a 36 35 34 33 2c 22 6f 6e 65 53 74 61 72 22 3a 39 31 30 2c 22 74 77 6f 53 74 61 72 73 22 3a 32 37 37 2c 22 74 68 72 65 65 53 74 61 72 73 22 3a 33 39 35 2c 22 66 6f 75 72 53 74 61 72 73 22 3a 36 33 34 2c 22 66 69 76 65 53 74 61 72 73 22 3a 34 33 32 37 7d 2c 22 77 65 62 73 69 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 78 65 72 6f 2e 63 6f 6d 2f 22 7d 2c 22 62 75 73 69 6e 65 73 73 45 6e 74 69 74 79 22 3a 7b 22 73 74 61 72 73 22 3a 34 2e 30 2c 22 74 72 75 73 74 53 63 Data Ascii: {"businessUnit":{"stars":4.0,"trustScore":4.2,"displayName":"Xero","numberOfReviews":{"total":6543,"oneStar":910,"twoStars":277,"threeStars":395,"fourStars":634,"fiveStars":4327},"websiteUrl":"https://www.xero.com/"},"businessEntity":{"stars":4.0,"trustSc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49869	18.154.132.87	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:15 UTC	1302	OUT	GET /stats/TrustboxImpression?locale=en-NZ&styleHeight=100%25&styleWidth=100%25&theme=light&tags=product&stars=4%2C5&schemaType=Organization&sku=Xero&name=Xero&url=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=4becd84a00006400050b6782&widgetId=53aa8912dec7e10d38f59f36 HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36&businessunitId=4becd84a00006400050b6782 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:15 UTC	460	IN	HTTP/1.1 204 No Content Connection: close Cache-Control: no-store,no-cache Date: Wed, 24 Apr 2024 17:31:15 GMT Pragma: no-cache Server: Kestrel Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 881879d4c0c79b410b6d2fdc3ff2a8c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: gqwdTbZdSmeURM5FoiOuuIZWfUx3IljEqYoqJABzjAQh3AfFAVOO3Q==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49872	100.20.148.237	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:15 UTC	476	OUT	GET /event?d_dil_ver=9.4&_ts=1713979872248 HTTP/1.1 Host: xero.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=38351504769226682132089995704072130929; xero=38351504769226682132089995704072130929
2024-04-24 17:31:16 UTC	893	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:15 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 9JX9DwZ+RIQ= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-usw2-1-v056-0c2d396ee.edge-usw2.demdex.com 4 ms set-cookie: demdex=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:15 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: xero=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:15 GMT; Path=/; Domain=.xero.demdex.net; Secure; SameSite=None
2024-04-24 17:31:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49874	151.101.129.140	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:15 UTC	528	OUT	GET /ads/pixel.js HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:16 UTC	1015	IN	HTTP/1.1 200 OK Connection: close Content-Length: 11216 Last-Modified: Wed, 24 Apr 2024 17:02:08 GMT ETag: "e403530c0766f12c3512fc8bfd16778a" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=60 Content-Encoding: gzip Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:15 GMT Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-04-24 17:31:16 UTC	1378	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 3b 6b 73 da c8 b2 7f 05 ab 4e 38 92 19 cb 80 b1 93 08 6b 5d 04 e4 98 8d 0d be 3c 9c 6c b9 58 4a 96 06 50 02 12 2b 89 38 be c0 fd ed b7 e7 25 8d 04 b6 93 b3 77 3f dc 54 0a cd 74 f7 f4 f4 6b 7a 7a 46 f2 c1 64 e5 3b b1 17 f8 85 50 c5 c8 47 b1 b6 4e 20 81 ea a1 89 b6 f6 26 ea 81 7f ef 8d 58 0b d3 d6 77 3b 2c 38 a6 22 48 15 d3 8c 9f 96 38 98 14 42 fc d7 ca 0b 71 b1 c8 1b 75 32 66 52 2c 3a 5a 88 e3 55 e8 17 1c 60 7a 50 d6 08 7c 25 60 2b 0e 23 5c 6d d3 c7 8f 05 2b 0c 83 50 55 9a b6 ef 07 71 61 e2 f9 6e 61 11 b8 ab 39 2e fc 5b 29 79 25 e5 df 8a 56 8f 67 61 f0 58 b0 75 27 70 b1 a9 dc 74 5b c3 6b 6b dc e9 0e c6 97 dd 61 a7 a5 20 7b 4b f8 2d 4d 22 bb b9 c6 3f 96 41 18 47 c6 7a bb ad 13 1d ee cb 23 dd b1 e7 73 75 a9 73 14 12 da a8 a1 Data Ascii: ;ksN8k]<lXJP+8%w?TtkzzFd;PGN &Xw;,8"H8Bqu2fR,:ZU`zP\|%`+#\m+PUqana9.[)y%VgaXu'pt[kka {K-M"?AGz#sus
2024-04-24 17:31:16 UTC	1378	IN	Data Raw: 0d 3c 5f 55 48 15 b2 84 ae 14 0a 40 01 e3 52 e5 59 ff 9a 45 13 eb f0 d8 42 39 2f ca 94 c4 97 55 2d d5 ee 04 16 29 9d 88 78 90 73 81 cd 13 ec 0f 67 c1 aa 86 40 46 ba 76 bd 37 ef 0e 6b af fa 57 9e e9 b8 4a 72 fd 35 54 64 7e 85 bb 96 77 fe 31 ef ce 29 ff bf ef 60 89 0f 73 1e 73 98 3e 09 83 05 81 36 61 1b a0 6e 4f fd 27 0f 79 d6 85 8c 28 e3 c5 04 c4 1d 99 f4 9f f1 65 8e 9e 2a 25 ab b2 31 55 d0 a0 98 b2 71 b8 bc 8d 58 f5 34 e1 4b 50 f4 55 5f e6 66 22 ce 1c c6 93 77 dc 95 b4 f9 8a 23 a5 d2 de c5 64 eb 1c f6 da cd 60 b1 84 4c 04 c1 86 23 c7 5e 62 95 c5 84 b4 9b a6 0c b4 a4 dc 07 5e f9 52 ff c6 9e 83 0d 17 50 cd 0f 07 97 47 ef 0a ae 1d db 0a 11 32 67 f3 15 08 4a 2d ce 25 e1 f3 51 2a 75 e5 73 29 d8 d6 9e 91 4f 0c d4 08 d3 0f ab c9 04 87 d8 fd 30 0f 9c 6f 8d f9 34 Data Ascii: <_UH@RYEB9/U-)xsg@Fv7kWJr5Td~w1)`ss>6anO'y(e%1UqX4KPU_f"w#d`L#^b^RPG2gJ-%Qus)O0o4
2024-04-24 17:31:16 UTC	1378	IN	Data Raw: 40 7b d5 11 0d 88 92 43 7b 27 23 1a 17 25 97 f6 6a 23 1a 1e 25 4c 7b a7 23 1a 25 a5 09 ed 9d 8d 68 b0 94 a6 b4 f7 76 44 63 a6 34 db 94 69 b8 5e ee d4 43 2c db fd d4 a9 c6 27 4b 70 10 c4 f6 dc 7c 77 98 3f 56 31 ec 35 9e c4 80 cc 14 d8 a2 16 48 78 de 27 a4 60 d4 53 38 d9 57 aa ef e8 f9 3d 81 bf 39 a9 a6 22 dc 57 6a 25 35 41 95 ce 6a 30 ea fd f9 79 4d 1b b1 cc 38 99 07 b0 c8 52 e1 8e d3 e4 a5 c9 5c 4e 9f e3 92 0e cd 9e 0c cc da 61 7a 92 e0 b7 16 fb ca 4c b6 aa 5f 3c 04 f0 bc f3 ca 31 80 26 1d 29 4f 64 8f 01 50 65 35 73 79 2c 53 6a aa 0c 47 ca 32 52 0f ee a7 4c 0a 45 41 cd 0b 36 94 d4 09 0c fe ff b1 4c 38 fd 89 32 41 59 45 b8 40 2e 16 40 33 ba 57 78 2e 6a 76 3b fd 41 a3 33 e8 9b 19 d9 e9 4b b0 38 52 c8 85 27 b1 98 8c 65 10 40 91 37 c8 00 c6 51 4c 77 8b 2f 37 Data Ascii: @{C{'#%j#%L{#%hvDc4i^C,'Kp\|w?V15Hx'`S8W=9"Wj%5Aj0yM8R\NazL_<1&)OdPe5sy,SjG2RLEA6L82AYE@.@3Wx.jv;A3K8R'e@7QLw/7
2024-04-24 17:31:16 UTC	1378	IN	Data Raw: 8f f1 a0 3b 4e 21 2c c9 8f f7 67 f9 f1 4f a7 79 c2 74 5f a2 27 f0 bf 95 ea c7 2f e6 fa 41 af fd f1 a3 d5 e3 9a d0 ed 14 b0 e4 a1 20 6a 79 f8 01 b2 be 75 6d 35 07 dd 0c dd b8 d9 ef 73 5a d2 54 f8 66 3c b0 be 0c 04 98 b4 29 1f 6a 87 46 bb d3 a7 0c 93 1e c3 59 5f 20 5d 31 04 6d 2a 5b f2 8f 7e 11 fd f6 3f 39 7e bc 7a f6 80 b2 ee bf 56 38 7c 82 fc 0c 89 25 ce 1e 43 fe 22 18 f1 7d 9b be 43 8a 58 d1 1d c9 43 38 08 38 93 ca e1 7b 4d c6 d1 5a 42 43 36 38 ce 5b 40 a9 09 b5 10 78 97 ee 09 69 2d 4a 88 92 2f c7 c8 99 a7 45 5e 8b 90 c9 c9 20 55 2b 29 ba 52 22 44 db 3a 57 5b df cb 70 1f 50 18 8a 5c d0 91 8b bf 21 b0 b9 24 df 26 50 ec 5d 35 95 c2 61 10 92 1e f9 47 a0 cb b9 17 9b 12 98 be fb 83 ba 5c 57 92 63 36 85 f0 93 fc 79 f5 42 22 36 28 ea be 32 da 26 22 b0 f2 7e 77 Data Ascii: ;N!,gOyt_'/A jyum5sZTf<)jFY_ ]1m*[~?9~zV8\|%C"}CXC88{MZBC68[@xi-J/E^ U+)R"D:W[pP\!$&P]5aG\Wc6yB"6(2&"~w
2024-04-24 17:31:16 UTC	1378	IN	Data Raw: e1 19 18 56 c0 0a 23 af d1 b3 8b c1 38 65 f3 49 f6 27 73 ed d3 05 08 8e de 64 6e 83 4b 85 8e 96 65 b7 92 fb b8 2a 75 61 4e bf 45 af aa de ce 6e 46 ce 25 c1 35 27 8d 86 e3 4f 72 11 18 c0 fc 62 3a 38 0b 67 95 bf 0c e1 3e 81 77 52 6d 64 eb a4 63 3b cb a7 83 51 99 54 f8 7c 31 18 cc 12 56 85 21 87 c9 4c 5e bc 77 a0 15 c9 ae b2 16 07 73 bd d1 cb 80 a2 c5 eb 9e 64 7e 94 54 b6 c8 a3 63 38 be 6b 8f 16 f6 1e 5d 3a eb 08 fb b5 f2 ca c5 a0 db cf 95 cf a7 19 17 26 cf 7c 98 f4 6f 78 3d f6 2d 2c 19 72 29 b0 a5 58 1d c3 ae e9 ff 3a ec ee f7 ab 5f 8e 8c da 60 bb f9 34 7e 89 31 e2 90 32 1c 9c c2 b6 3b 05 c3 f2 6c 3a 97 82 d5 52 f3 40 1f 75 e9 17 98 fb 00 58 11 0e cc 2b eb 1d e3 5c bf 02 32 1b 8d 4d 67 db 4b 76 41 ef 0c 32 b4 33 16 6d 77 bb 15 14 8f 58 7a ad 4d 54 b9 8f f5 Data Ascii: V#8eI'sdnKe*uaNEnF%5'Orb:8g>wRmdc;QT\|1V!L^wsd~Tc8k]:&\|ox=-,r)X:_`4~12;l:R@uX+\2MgKvA23mwXzMT
2024-04-24 17:31:16 UTC	1378	IN	Data Raw: d3 d6 13 2a a1 13 2d 82 6a 2f 8d 1a 09 75 c9 74 e4 8a 02 65 af 56 f2 a9 6a 8f bf 1a 8d 20 f1 06 96 b7 f1 af bc 1a 5f 8d ba bd 41 ba 73 f2 fb ee f6 93 f7 79 67 e7 7c 28 92 24 2b b0 da 19 6b 8f 16 d3 cd b0 3a 1a cb fb 17 14 b5 07 a3 1c 1b a2 f1 1e de 4f 97 4e ae 00 4d 75 22 1f e9 c5 07 92 c7 f6 07 d7 72 d6 25 ba 42 16 c3 bf ca 4b 71 b1 48 12 ae 7b 35 f8 b5 81 fe e8 15 5c 1b c1 da 21 db 51 6c 04 87 b7 5d eb 06 34 7b 5e 0b 9f 31 fa dc 99 65 58 b3 fa 01 6d ab 97 22 85 5e 7c 65 64 7f b0 16 86 4b 8b c4 ba 5d cb ed 88 03 75 7f 1c e8 95 2d 9b 6b e7 e1 fb 63 d0 3e c5 c6 93 ee 96 9f 23 2c 2f 23 e4 87 e4 59 00 21 fb 1f 14 ca ff 63 f9 fe 32 ad 1e 96 c3 2c 41 30 ab 5f 07 62 c2 c0 d8 b8 61 4a 4c 2e c7 0f 1f 97 e9 ad 71 93 2e dc a5 1c 6c 6e 67 c8 33 35 7c eb 1a 39 63 9c Data Ascii: *-j/uteVj _Asyg\|($+k:ONMu"r%BKqH{5\!Ql]4{^1eXm"^\|edK]u-kc>#,/#Y!c2,A0_baJL.q.lng35\|9c
2024-04-24 17:31:16 UTC	1378	IN	Data Raw: e5 4a 58 0c 5d 11 09 fe 03 d0 d7 f2 bc 18 77 47 a7 6b ba d0 70 e0 ff 64 9f 81 77 f5 cf ba 2b 5b 02 80 48 e0 af cb e9 0a ce d2 60 d5 1f d9 df af a7 93 cf 92 75 4f 1d 3c b6 3a 13 93 ab d9 e9 44 5e c4 59 bd 2c 3a 9e cf da cd 62 57 54 17 85 1d cc bc ba 00 e7 6c 5e f0 45 7c a6 b4 22 3f ec 3d 7a f2 a8 ff a8 2b ef 82 9e 34 84 b6 0f 93 f5 4a 25 70 93 1c eb 98 34 8e 4a f1 30 9e 4c 2f 91 fb 3c 8f 01 71 ea fb 57 97 c2 f9 d9 eb b9 bf a7 3d 3e e9 00 5f 46 7b 46 4c 0e 60 af 57 0b 29 3b 71 40 a7 f5 a0 d3 de 92 bf 3a ed fe 4a a7 15 78 a6 f4 58 f4 09 9c 72 33 4d ea ea 92 e1 98 ed 07 c9 c0 36 37 d9 7b d6 b5 12 35 8c 20 ad 65 c5 c0 78 59 90 16 09 7b e1 d1 5b e3 de 2a 77 18 38 aa e3 e6 45 42 e0 8a 81 9e 45 f2 df 20 80 10 4c 4e 99 5c 55 f0 29 1d 38 0e cd f5 ca 34 55 ee b9 18 Data Ascii: JX]wGkpdw+[H`uO<:D^Y,:bWTl^E\|"?=z+4J%p4J0L/<qW=>_F{FL`W);q@:JxXr3M67{5 exY{[*w8EBE LN\U)84U
2024-04-24 17:31:16 UTC	1378	IN	Data Raw: ea d1 b1 1a 5f 87 bc f6 70 50 51 7b b3 4a 77 19 78 cd c5 77 62 b1 1a ac b5 aa 0b e3 9c 78 ff b7 e0 e0 ee 4b 75 4a 3b 3c cb 5a 4c 6e ae dc 70 a0 c3 a9 bf 23 aa 4e a8 fa f8 4a 44 41 12 f6 1a c0 2c ab 87 74 38 cb 37 bd a5 83 e9 1b 5e d2 c5 73 47 ca 95 c1 90 e5 05 3e f4 ce 95 75 0c bb e5 d1 e7 a3 ea 94 66 e3 3e 73 b3 0f fb 6f 16 b4 cc 54 98 10 65 28 5e 43 98 e6 c7 3e 3d 4e 73 46 cc 6b 55 ee 53 e1 c2 db 80 b0 41 dd 71 bd e6 72 17 3d ac e3 97 bb d6 80 b3 42 c3 6b 5d 02 db 51 06 59 48 c9 5d 1d bf 88 84 b1 4b fd a2 ec b6 aa 4a e8 82 62 7e 99 2b 0a 7c ab a7 52 c2 a6 a9 cd e0 5e a7 7f f1 70 78 03 61 6f 73 e6 32 31 ac d0 cf c2 c2 2c 16 e6 b9 34 43 cd 46 d9 50 dd 37 64 9b 60 46 0d 1e 8c ae aa 28 35 00 84 de 05 88 e4 d4 99 5e 4e cd d8 aa 26 39 ea 43 87 95 72 b7 b6 a5 Data Ascii: _pPQ{JwxwbxKuJ;<ZLnp#NJDA,t87^sG>uf>soTe(^C>=NsFkUSAqr=Bk]QYH]KJb~+\|R^pxaos21,4CFP7d`F(5^N&9Cr
2024-04-24 17:31:16 UTC	192	IN	Data Raw: c3 9f 8b 85 96 43 37 1d d1 76 b1 d8 74 5b 53 3b d7 a6 6f 17 b4 67 c0 37 15 a5 92 02 11 28 6e b1 67 e8 3d a5 8b d9 f8 5a 0c e7 19 0f bc c8 5a fc 82 f6 2e 9b 8f 13 83 b6 93 b9 ed d5 9e e3 a4 b5 bf 55 b6 da 4d 0a 75 28 da cb 39 69 ce 25 51 6c a3 46 a8 d2 c7 a4 df d0 59 cb b8 72 db 1e 48 21 05 45 a6 16 20 d1 32 f5 80 54 c2 d3 50 c2 2c 1e 8a 50 2e 2d c0 d7 66 ef ef 93 99 84 7f 7a 24 e2 5b ce f8 32 f3 2c bf 55 a1 00 4e 19 3a 8d 5a 3d 42 f4 93 7e 39 7c c1 4f 0d ed 1d 40 5b fd c1 59 77 3e 9a dd b5 09 7d 2f b0 26 fc 1a ac d1 e2 a4 f9 63 27 6b fd d3 ff 00 92 51 61 eb 4b 99 00 00 Data Ascii: C7vt[S;og7(ng=ZZ.UMu(9i%QlFYrH!E 2TP,P.-fz$[2,UN:Z=B~9\|O@[Yw>}/&c'kQaK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49873	34.215.13.170	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:15 UTC	473	OUT	GET /ibs:dpid=411&dpuuid=ZilB4gAAAKLUJQN2 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=38351504769226682132089995704072130929; dpm=38351504769226682132089995704072130929
2024-04-24 17:31:16 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:16 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: QCy+KUb/RS8= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-usw2-2-v056-09f83f36c.edge-usw2.demdex.com 1 ms set-cookie: dpm=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:16 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:16 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-24 17:31:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49875	31.13.70.7	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:15 UTC	533	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:16 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-24 17:31:16 UTC	1500	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-24 17:31:16 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-04-24 17:31:16 UTC	14842	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-04-24 17:31:16 UTC	16384	IN	Data Raw: 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 78 74 2c 63 3d 61 2e 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3b 61 3d 61 2e 76 61 6c 75 65 3b 62 3d 62 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 62 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 62 21 3d 3d 22 22 3f 62 3a 6e 75 6c 6c 3b 63 3d 64 28 63 29 3b 61 3d 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 61 21 3d 3d 22 22 3f 61 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d Data Ascii: ll;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;var b=a.context,c=a.parameter_type;a=a.value;b=b!=null&&typeof b==="string"&&b!==""?b:null;c=d(c);a=a!=null&&typeof a==="string"&&a!==""?a:null;return b!=
2024-04-24 17:31:16 UTC	16384	IN	Data Raw: 50 41 52 41 4d 45 54 45 52 2c 78 3d 73 2e 72 65 61 64 50 61 63 6b 65 64 43 6f 6f 6b 69 65 2c 79 3d 73 2e 43 4c 49 43 4b 54 48 52 4f 55 47 48 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 3b 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 73 22 29 3b 76 61 72 20 7a 3d 73 2e 55 53 45 5f 46 42 43 5f 41 53 5f 43 41 43 48 45 5f 4b 45 59 5f 45 58 50 45 52 49 4d 45 4e 54 2c 41 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 51 45 22 29 2c 42 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 Data Ascii: PARAMETER,x=s.readPackedCookie,y=s.CLICKTHROUGH_COOKIE_NAME;s=f.getFbeventsModules("SignalsFBEventsExperimentNames");var z=s.USE_FBC_AS_CACHE_KEY_EXPERIMENT,A=f.getFbeventsModules("SignalsFBEventsQE"),B=f.getFbeventsModules("SignalsFBEventsModuleEncodings
2024-04-24 17:31:16 UTC	16384	IN	Data Raw: 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 75 61 72 64 72 61 69 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 69 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 Data Ascii: Registered("SignalsFBEventsGuardrail",function(){return function(g,i,j,k){var l={exports:{}};l.exports;(function(){"use strict";var a=Object.assign\|\|function(a){for(var b=1;b<arguments.length;b++){var c=arguments[b];for(var d in c)Object.prototype.hasOwnP
2024-04-24 17:31:16 UTC	1541	IN	Data Raw: 73 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 61 72 72 61 79 4f 66 28 62 2e 73 74 72 69 6e 67 28 29 29 29 7d 29 29 2c 61 64 64 69 74 69 6f 6e 61 6c 55 73 65 72 44 61 74 61 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 73 65 6e 64 46 42 4c 6f 67 69 6e 49 44 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 7d 29 29 7d 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4f 70 74 49 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 Data Ascii: s:b.allowNull(b.arrayOf(b.string()))})),additionalUserData:b.allowNull(b.objectWithFields({sendFBLoginID:b.allowNull(b["boolean"]())}))});k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsOptIn",function(){return functi
2024-04-24 17:31:16 UTC	14843	IN	Data Raw: 6c 3f 63 28 64 28 62 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 5b 61 5d 3d 3d 3d 21 30 7d 29 3a 5b 5d 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 61 72 61 6c 6c 65 6c 46 69 72 65 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 Data Ascii: l?c(d(b),function(a){return b[a]===!0}):[]}}]);return a}();l.exports=a})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsParallelFireConfigTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use s
2024-04-24 17:31:16 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 72 65 74 75 72 6e 3b 66 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 22 63 75 73 74 6f 6d 44 61 74 61 22 29 26 26 74 79 70 65 6f 66 20 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 6e 75 6c 6c 3b 66 7c 7c 28 62 2e 63 75 73 74 6f 6d 44 61 74 61 3d 7b 7d 29 3b 71 28 62 29 7d 6b 2e 65 78 70 6f 72 74 73 3d 72 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 45 76 Data Ascii: tion(a){return a}))return;f=Object.prototype.hasOwnProperty.call(b,"customData")&&typeof b.customData!=="undefined"&&b.customData!==null;f\|\|(b.customData={});q(b)}k.exports=r})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsSendEv
2024-04-24 17:31:16 UTC	16384	IN	Data Raw: 26 62 2e 70 75 73 68 28 73 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 20 61 72 72 61 79 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 61 3d 4f 62 6a 65 63 74 28 61 29 3b 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 3e 3e 3e 30 3b 69 66 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 62 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 76 61 72 20 64 3d 6e 65 77 20 41 72 72 61 79 28 63 29 2c 65 3d 30 3b 77 68 69 6c 65 28 65 3c 63 29 7b 76 61 72 20 66 3b 65 20 69 6e 20 61 26 26 28 66 3d 61 Data Ascii: &b.push(s[c]);return b}function v(a,b){if(a==null)throw new TypeError(" array is null or not defined");a=Object(a);var c=a.length>>>0;if(typeof b!=="function")throw new TypeError(b+" is not a function");var d=new Array(c),e=0;while(e<c){var f;e in a&&(f=a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49878	151.101.129.140	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:16 UTC	602	OUT	GET /ads/conversions-config/v1/pixel/config/t2_ewwvmnuh_telemetry HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:16 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86 access-control-allow-origin: * cache-control: max-age=300 content-type: application/json Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:16 GMT Via: 1.1 varnish Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-04-24 17:31:16 UTC	86	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 5f 68 61 73 68 22 3a 22 35 38 31 64 33 35 39 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f 61 64 73 2f 35 38 31 64 33 35 39 64 2f 70 69 78 65 6c 2e 6a 73 22 7d Data Ascii: {"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49879	18.154.132.87	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:16 UTC	515	OUT	GET /trustbox-data/53aa8912dec7e10d38f59f36?businessUnitId=4becd84a00006400050b6782&locale=en-NZ&reviewStars=4%2C5&reviewTagValue=product&includeReviews=true&reviewsPerPage=15 HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:16 UTC	578	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 12125 Connection: close Cache-Control: public,max-age=1800 Date: Wed, 24 Apr 2024 17:31:15 GMT ETag: "0fbdb8218217c4d9ce3bc5a0939f850a" Server: Kestrel Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d196b3182ad74e7b80ce14b0ee8558c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: f49bmNwfWBUA4AUrIfjpsO3xB6PQebAiUwva2Eve36RGeqRWFUxdsg== Age: 1
2024-04-24 17:31:16 UTC	12125	IN	Data Raw: 7b 22 62 75 73 69 6e 65 73 73 55 6e 69 74 22 3a 7b 22 73 74 61 72 73 22 3a 34 2e 30 2c 22 74 72 75 73 74 53 63 6f 72 65 22 3a 34 2e 32 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 58 65 72 6f 22 2c 22 6e 75 6d 62 65 72 4f 66 52 65 76 69 65 77 73 22 3a 7b 22 74 6f 74 61 6c 22 3a 36 35 34 33 2c 22 6f 6e 65 53 74 61 72 22 3a 39 31 30 2c 22 74 77 6f 53 74 61 72 73 22 3a 32 37 37 2c 22 74 68 72 65 65 53 74 61 72 73 22 3a 33 39 35 2c 22 66 6f 75 72 53 74 61 72 73 22 3a 36 33 34 2c 22 66 69 76 65 53 74 61 72 73 22 3a 34 33 32 37 7d 2c 22 77 65 62 73 69 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 78 65 72 6f 2e 63 6f 6d 2f 22 7d 2c 22 62 75 73 69 6e 65 73 73 45 6e 74 69 74 79 22 3a 7b 22 73 74 61 72 73 22 3a 34 2e 30 2c 22 74 72 75 73 74 53 63 Data Ascii: {"businessUnit":{"stars":4.0,"trustScore":4.2,"displayName":"Xero","numberOfReviews":{"total":6543,"oneStar":910,"twoStars":277,"threeStars":395,"fourStars":634,"fiveStars":4327},"websiteUrl":"https://www.xero.com/"},"businessEntity":{"stars":4.0,"trustSc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49880	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:16 UTC	775	OUT	POST /ins/1/bd61b676be?a=1134228971&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=38398&ck=1&ref=https://in.xero.com/m/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 500 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://in.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://in.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:16 UTC	500	OUT	Data Raw: 7b 22 69 6e 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 39 37 39 38 35 31 36 33 38 2c 22 74 69 6d 65 53 69 6e 63 65 4c 6f 61 64 22 3a 31 34 2e 33 36 2c 22 62 72 6f 77 73 65 72 57 69 64 74 68 22 3a 31 32 36 33 2c 22 62 72 6f 77 73 65 72 48 65 69 67 68 74 22 3a 39 30 37 2c 22 63 75 72 72 65 6e 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 6e 2e 78 65 72 6f 2e 63 6f 6d 2f 6d 2f 56 6d 46 55 47 71 32 44 52 30 77 30 52 72 6f 69 79 76 57 41 57 58 77 30 38 33 6a 79 70 31 74 5a 79 49 33 57 4e 67 55 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 6e 2e 78 65 72 6f 2e 63 6f 6d 2f 6d 2f 56 6d 46 55 47 71 32 44 52 30 77 30 52 72 6f 69 79 76 57 41 57 58 77 30 38 33 6a 79 70 31 74 5a 79 49 33 57 4e 67 55 65 22 2c 22 65 76 65 6e Data Ascii: {"ins":[{"timestamp":1713979851638,"timeSinceLoad":14.36,"browserWidth":1263,"browserHeight":907,"currentUrl":"https://in.xero.com/m/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe","pageUrl":"https://in.xero.com/m/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe","even
2024-04-24 17:31:16 UTC	264	IN	HTTP/1.1 204 Connection: close date: Wed, 24 Apr 2024 17:31:16 GMT access-control-allow-origin: https://in.xero.com access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-lax-kwhp1940096-LAX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49884	172.64.144.225	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:16 UTC	709	OUT	GET /attribution_tracking/conversions/4647.js?p=https://www.xero.com/us/try-now/manage-invoices/?utm_source=xero-invoice&utm_medium=referral&utm_campaign=global-d-lf-xeroinvoicereferrals&e=undefined HTTP/1.1 Host: tracking.g2crowd.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:17 UTC	1261	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:17 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=600, public set-cookie: _session_id=c437bf136ef31853dd49dadbdd9dbdf5; path=/; expires=Wed, 08 May 2024 17:31:17 GMT; HttpOnly; secure; SameSite=None etag: W/"3dae93a05edd9dcfc1864b87178a31e0" x-request-id: 210eb952-632a-49e0-ae5f-345c1b279778 x-runtime: 0.003153 strict-transport-security: max-age=604800 x-frame-options: SAMEORIGIN x-content-type-options: nosniff x-xss-protection: 1; mode=block x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self' .g2crowd.com .g2.com; connect-src 'self' .g2crowd.com .g2.com; font-src 'self' .g2crowd.com .g2.com; form-action 'self' .g2crowd.com .g2.com; frame-src 'self' .g2crowd.com .g2.com; img-src 'self' .g2crowd.com .g2.com; manifest-src 'self' .g2crowd.com .g2.com; media-src 'self' .g2crowd.com .g2.com; object-src 'self' .g2crowd.com .g2.com; script-src 'self' .g2crowd.com .g2.com; style-src 'self' .g2crowd.com .g2.com; worker-src 'self' .g2crowd.com .g2.com vary: Origin CF-Cache-Status: DYNAMIC
2024-04-24 17:31:17 UTC	322	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 70 36 48 55 4a 39 67 67 7a 46 44 78 70 31 38 74 77 2e 57 70 76 71 56 54 4d 7a 57 67 71 64 4e 31 6a 5a 69 6d 76 5a 62 52 64 7a 55 2d 31 37 31 33 39 37 39 38 37 37 2d 31 2e 30 2e 31 2e 31 2d 53 5a 5f 63 7a 6d 4d 6c 5f 56 5f 4e 34 43 39 59 33 6d 54 50 6c 56 64 74 5f 72 31 33 54 66 6f 57 6a 6a 53 42 34 46 6c 47 6c 78 4b 48 64 77 36 6e 69 42 46 35 77 6e 42 68 4b 30 45 71 58 37 69 6b 58 6a 41 68 64 68 7a 53 34 4b 35 6a 64 49 56 52 47 68 30 49 61 77 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 34 2d 41 70 72 2d 32 34 20 31 38 3a 30 31 3a 31 37 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 67 32 63 72 6f 77 64 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 Data Ascii: Set-Cookie: __cf_bm=p6HUJ9ggzFDxp18tw.WpvqVTMzWgqdN1jZimvZbRdzU-1713979877-1.0.1.1-SZ_czmMl_V_N4C9Y3mTPlVdt_r13TfoWjjSB4FlGlxKHdw6niBF5wnBhK0EqX7ikXjAhdhzS4K5jdIVRGh0Iaw; path=/; expires=Wed, 24-Apr-24 18:01:17 GMT; domain=.g2crowd.com; HttpOnly; Secure;
2024-04-24 17:31:17 UTC	22	IN	Data Raw: 31 30 0d 0a 2f 2f 20 54 72 61 63 6b 69 6e 67 20 46 69 6c 65 0d 0a Data Ascii: 10// Tracking File
2024-04-24 17:31:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49883	142.250.141.157	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:16 UTC	861	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-3776042-30&cid=1808248659.1713979875&jid=746412766&gjid=1341737773&_gid=1006434851.1713979875&_u=YEBAAEAAAAAAACgEK~&z=1183424842 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.xero.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:17 UTC	590	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.xero.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Wed, 24 Apr 2024 17:31:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 17:31:17 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49885	3.225.21.46	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:17 UTC	528	OUT	GET /events.js HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:17 UTC	1700	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:17 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=5 Set-Cookie: sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRxGejE.xJq6ZPzdv4dYBUE4rEzPgHPheKxDQUFrqa0rnX%2BVgKQ; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRxGejE.xJq6ZPzdv4dYBUE4rEzPgHPheKxDQUFrqa0rnX%2BVgKQ; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
2024-04-24 17:31:17 UTC	14684	IN	Data Raw: 34 36 34 36 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 0a 20 20 2f 2f 20 42 65 67 69 6e 20 64 6f 63 0a 0a 20 20 76 61 72 20 69 73 5f 64 65 76 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 69 66 20 28 20 66 61 6c 73 65 20 29 20 7b 0a 20 20 20 20 69 73 5f 64 65 76 20 3d 20 74 72 75 65 3b 0a 20 20 7d 0a 0a 20 20 76 61 72 20 64 69 73 61 62 6c 65 5f 73 79 6e 63 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 69 66 20 28 20 74 72 75 65 20 29 20 7b 0a 20 20 20 20 64 69 73 61 62 6c 65 5f 73 79 6e 63 20 3d 20 74 72 75 65 0a 20 20 7d 0a 0a 20 20 76 61 72 20 74 69 70 20 3d 20 22 4b 33 2d 79 4f 36 32 7a 59 53 67 6b 6e 4a 4f 6a 79 51 4a 7a 30 46 68 70 76 51 39 6e 70 72 78 37 56 6e 71 48 56 5f 76 53 69 30 4d 22 0a 20 20 0a 20 20 76 61 72 20 75 73 65 72 49 64 43 6f 6f 6b 69 65 Data Ascii: 4646(function (w) { // Begin doc var is_dev = false; if ( false ) { is_dev = true; } var disable_sync = false; if ( true ) { disable_sync = true } var tip = "K3-yO62zYSgknJOjyQJz0FhpvQ9nprx7VnqHV_vSi0M" var userIdCookie
2024-04-24 17:31:17 UTC	3314	IN	Data Raw: 6b 69 65 73 2e 5f 67 65 74 43 6f 6f 6b 69 65 4f 62 6a 65 63 74 46 72 6f 6d 53 74 72 69 6e 67 28 43 6f 6f 6b 69 65 73 2e 5f 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 29 2c 43 6f 6f 6b 69 65 73 2e 5f 63 61 63 68 65 64 44 6f 63 75 6d 65 6e 74 43 6f 6f 6b 69 65 3d 43 6f 6f 6b 69 65 73 2e 5f 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 7d 3b 76 61 72 20 5f 74 68 69 73 3d 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 5f 73 6c 69 63 65 64 54 6f 41 72 72 61 79 28 65 2c 6f 29 7b 72 65 74 75 72 6e 20 5f 61 72 72 61 79 57 69 74 68 48 6f 6c 65 73 28 65 29 7c 7c 5f 69 74 65 72 61 62 6c 65 54 6f 41 72 72 61 79 4c 69 6d 69 74 28 65 2c 6f 29 7c 7c 5f 75 6e 73 75 70 70 6f 72 74 65 64 49 74 65 72 61 62 6c 65 54 6f 41 72 72 61 79 28 65 2c 6f 29 7c 7c 5f 6e 6f 6e 49 74 Data Ascii: kies._getCookieObjectFromString(Cookies._document.cookie),Cookies._cachedDocumentCookie=Cookies._document.cookie};var _this=void 0;function _slicedToArray(e,o){return _arrayWithHoles(e)\|\|_iterableToArrayLimit(e,o)\|\|_unsupportedIterableToArray(e,o)\|\|_nonIt
2024-04-24 17:31:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49887	209.73.190.12	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:17 UTC	515	OUT	GET /wi/ytc.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:17 UTC	897	IN	HTTP/1.1 200 OK x-amz-id-2: 7Z8Papim2l+WptfQeIP1SY/GbvVXzZBAym7+Fvkif50BG66cRVeBdEc9OfjKiAeCyeG/+4Qs++I= x-amz-request-id: BKT5DQME5M9244SP Date: Wed, 24 Apr 2024 17:31:18 GMT Last-Modified: Mon, 26 Jun 2023 09:26:35 GMT x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle" ETag: "5c6ed25dce803fd84288922b8928409e" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=3600 x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 18187 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-24 17:31:17 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2024-04-24 17:31:17 UTC	1300	IN	Data Raw: 41 74 28 61 29 29 3e 3d 35 36 33 32 30 26 26 6f 3c 3d 35 37 33 34 33 29 29 7b 72 5b 6e 2b 3d 31 5d 3d 32 33 39 2c 72 5b 6e 2b 3d 31 5d 3d 31 39 31 2c 72 5b 6e 2b 3d 31 5d 3d 31 38 39 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 61 2b 3d 31 2c 28 69 3d 31 30 32 34 2a 28 69 2d 35 35 32 39 36 29 2b 6f 2d 35 36 33 32 30 2b 36 35 35 33 36 29 3e 36 35 35 33 35 29 7b 72 5b 6e 2b 3d 31 5d 3d 32 34 30 7c 69 3e 3e 3e 31 38 2c 72 5b 6e 2b 3d 31 5d 3d 31 32 38 7c 69 3e 3e 3e 31 32 26 36 33 2c 72 5b 6e 2b 3d 31 5d 3d 31 32 38 7c 69 3e 3e 3e 36 26 36 33 2c 72 5b 6e 2b 3d 31 5d 3d 31 32 38 7c 36 33 26 69 3b 63 6f 6e 74 69 6e 75 65 7d 7d 69 3c 3d 31 32 37 3f 72 5b 6e 2b 3d 31 5d 3d 30 7c 69 3a 69 3c 3d 32 30 34 37 3f 28 72 5b 6e 2b 3d 31 5d 3d 31 39 32 7c 69 3e 3e 3e 36 2c 72 Data Ascii: At(a))>=56320&&o<=57343)){r[n+=1]=239,r[n+=1]=191,r[n+=1]=189;continue}if(a+=1,(i=1024*(i-55296)+o-56320+65536)>65535){r[n+=1]=240\|i>>>18,r[n+=1]=128\|i>>>12&63,r[n+=1]=128\|i>>>6&63,r[n+=1]=128\|63&i;continue}}i<=127?r[n+=1]=0\|i:i<=2047?(r[n+=1]=192\|i>>>6,r
2024-04-24 17:31:17 UTC	1300	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 29 7b 69 66 28 21 74 28 61 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 72 72 61 79 2e 66 72 6f 6d 3a 20 77 68 65 6e 20 70 72 6f 76 69 64 65 64 2c 20 74 68 65 20 73 65 63 6f 6e 64 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 28 6f 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 29 7d 66 6f 72 28 76 61 72 20 73 2c 75 3d 72 28 69 2e 6c 65 6e 67 74 68 29 2c 64 3d 74 28 6e 29 3f 4f 62 6a 65 63 74 28 6e 65 77 20 6e 28 75 29 29 3a 6e 65 77 20 41 72 72 61 79 28 75 29 2c 63 3d 30 3b 63 3c 75 3b 29 73 3d 69 5b 63 5d 2c 64 5b 63 5d 3d 61 3f 76 Data Ascii: arguments[1]:void 0;if(void 0!==a){if(!t(a))throw new TypeError("Array.from: when provided, the second argument must be a function");arguments.length>2&&(o=arguments[2])}for(var s,u=r(i.length),d=t(n)?Object(new n(u)):new Array(u),c=0;c<u;)s=i[c],d[c]=a?v
2024-04-24 17:31:17 UTC	1300	IN	Data Raw: 63 68 28 65 29 7b 7d 69 66 28 6e 3d 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 29 62 72 65 61 6b 3b 6e 3d 6e 2e 70 61 72 65 6e 74 7d 72 65 74 75 72 6e 20 74 7d 28 74 29 3b 69 66 28 21 69 29 72 65 74 75 72 6e 20 76 6f 69 64 20 76 28 65 29 3b 76 61 72 20 6f 3d 7b 7d 2c 61 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 22 22 3b 22 5f 5f 74 63 66 61 70 69 4c 6f 63 61 74 6f 72 22 3d 3d 3d 74 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 77 69 6e 64 6f 77 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 7b 5f 5f 74 63 66 61 70 69 43 61 6c 6c 3a 7b 63 6f 6d 6d 61 6e 64 3a 65 2c 70 61 72 61 6d 65 74 65 72 3a 61 2c 76 65 72 73 69 6f 6e 3a 69 2c 63 61 6c 6c 49 64 3a 72 7d 7d 3b 6e 5b 72 5d 3d 6f 2c 6c 28 74 2c 73 2c 22 2a 22 29 Data Ascii: ch(e){}if(n===window.top)break;n=n.parent}return t}(t);if(!i)return void v(e);var o={},a=Math.random()+"";"__tcfapiLocator"===t?function(e,t,n,r){window[e]=function(e,i,o,a){var s={__tcfapiCall:{command:e,parameter:a,version:i,callId:r}};n[r]=o,l(t,s,"*")
2024-04-24 17:31:17 UTC	118	IN	Data Raw: 6e 67 3a 6e 2e 75 73 70 53 74 72 69 6e 67 2c 69 73 4f 61 74 68 46 69 72 73 74 50 61 72 74 79 3a 6e 2e 69 73 4f 61 74 68 46 69 72 73 74 50 61 72 74 79 7d 2c 21 30 29 3a 65 28 76 6f 69 64 20 30 2c 21 31 29 7d 29 29 29 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3b 6d 28 22 5f 5f 74 63 66 61 70 69 22 2c 22 5f 5f 74 63 66 61 70 69 4c Data Ascii: ng:n.uspString,isOathFirstParty:n.isOathFirstParty},!0):e(void 0,!1)})))},y=function(){var e,t;m("__tcfapi","__tcfapiL
2024-04-24 17:31:17 UTC	1300	IN	Data Raw: 6f 63 61 74 6f 72 22 2c 22 5f 5f 74 63 66 61 70 69 43 61 6c 6c 22 2c 22 5f 5f 74 63 66 61 70 69 52 65 74 75 72 6e 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 74 63 66 61 70 69 3f 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3f 28 68 28 65 29 2c 76 28 22 5f 5f 74 63 66 61 70 69 22 29 29 3a 67 28 29 7d 2c 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 76 6f 69 64 20 30 2c 21 31 29 7d 29 2c 31 65 33 29 2c 66 28 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 32 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 29 2c 72 26 26 22 65 72 72 6f 72 22 21 3d 3d 6e 2e 63 6d 70 53 74 61 74 75 73 3f 22 74 63 6c 6f 61 64 65 64 22 21 3d 3d 6e 2e 65 76 65 6e 74 53 74 61 74 75 73 26 26 22 Data Ascii: ocator","__tcfapiCall","__tcfapiReturn"),window.__tcfapi?(e=function(e,t){t?(h(e),v("__tcfapi")):g()},t=setTimeout((function(){e(void 0,!1)}),1e3),f("addEventListener",2,(function(n,r){clearTimeout(t),r&&"error"!==n.cmpStatus?"tcloaded"!==n.eventStatus&&"
2024-04-24 17:31:17 UTC	1300	IN	Data Raw: 61 69 6e 3d 2e 22 2b 65 2e 64 6f 6d 61 69 6e 3a 22 22 29 2b 22 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 2c 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 6e 7d 28 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 74 2c 65 78 70 69 72 79 4f 66 66 73 65 74 3a 6e 2c 64 6f 6d 61 69 6e 3a 61 28 29 2c 70 61 74 68 3a 22 2f 22 7d 29 3b 76 61 72 20 72 3d 7b 69 64 3a 74 2c 74 69 6d 65 73 74 61 6d 70 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 3b 74 72 79 7b 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 65 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 72 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 3d 22 22 3b 66 6f 72 28 65 3d 30 3b 65 3c 33 32 3b 65 2b Data Ascii: ain=."+e.domain:"")+"; SameSite=Lax",document.cookie=n}({name:e,value:t,expiryOffset:n,domain:a(),path:"/"});var r={id:t,timestamp:(new Date).getTime()};try{localStorage.setItem(e,JSON.stringify(r))}catch(e){}}var b=function(){var e,t,n="";for(e=0;e<32;e+
2024-04-24 17:31:17 UTC	1300	IN	Data Raw: 6e 20 65 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 70 61 64 53 74 61 72 74 28 32 2c 22 30 22 29 7d 29 29 3b 67 65 2e 68 61 73 68 65 64 41 75 69 64 73 5b 6e 5d 3d 72 2e 6a 6f 69 6e 28 22 22 29 2c 74 2b 2b 7d 67 65 2e 61 75 69 64 73 41 72 65 48 61 73 68 65 64 3d 21 30 2c 79 65 28 29 7d 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 70 75 73 68 28 6e 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 29 2c 74 2e 6c 65 6e 67 74 68 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 48 28 74 29 7d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 65 5b 72 5d 2e 6f 6e 63 6f 6d 70 6c 65 74 65 3d 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 72 6f 70 65 72 74 69 65 73 3b 74 2e 70 69 78 65 6c Data Ascii: n e.toString(16).padStart(2,"0")}));ge.hashedAuids[n]=r.join(""),t++}ge.auidsAreHashed=!0,ye()},M=function(e,t){var n=function(n){t.push(n.target.result),t.length===e.length&&H(t)};for(var r in e)e[r].oncomplete=n};function k(e){var t=e.properties;t.pixel
2024-04-24 17:31:17 UTC	1300	IN	Data Raw: 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 6e 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 77 69 2f 63 6f 6e 66 69 67 2f 22 2b 65 2b 22 2e 6a 73 6f 6e 22 3b 74 2e 6f 70 65 6e 28 22 47 45 54 22 2c 6e 2c 21 30 29 2c 74 2e 74 69 6d 65 6f 75 74 3d 32 65 33 2c 74 2e 6f 6e 74 69 6d 65 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 71 2d 2d 2c 79 65 28 29 7d 2c 74 2e 73 65 6e 64 28 29 2c 74 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 47 7d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 69 66 28 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 3d 74 68 69 73 2e 44 4f 4e 45 29 7b 69 66 28 32 30 30 3d 3d 3d 74 68 69 73 2e 73 74 61 74 75 73 26 26 74 68 69 73 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 26 26 22 7b 7d 22 21 3d 3d 74 68 69 Data Ascii: XMLHttpRequest,n="https://s.yimg.com/wi/config/"+e+".json";t.open("GET",n,!0),t.timeout=2e3,t.ontimeout=function(e){q--,ye()},t.send(),t.onreadystatechange=G}}function G(){if(this.readyState===this.DONE){if(200===this.status&&this.responseText&&"{}"!==thi
2024-04-24 17:31:17 UTC	1300	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 70 75 73 68 28 6e 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 29 2c 74 2e 6c 65 6e 67 74 68 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 5a 28 74 29 7d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 65 5b 72 5d 2e 6f 6e 63 6f 6d 70 6c 65 74 65 3d 6e 7d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 30 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 67 65 2e 65 6d 61 69 6c 73 29 7b 76 61 72 20 72 3d 41 72 72 61 79 2e 66 72 6f 6d 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 65 5b 74 5d 29 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 70 61 64 53 74 61 72 74 28 32 2c 22 30 22 29 7d Data Ascii: nction(e,t){var n=function(n){t.push(n.target.result),t.length===e.length&&Z(t)};for(var r in e)e[r].oncomplete=n},Z=function(e){var t=0;for(var n in ge.emails){var r=Array.from(new Uint8Array(e[t])).map((function(e){return e.toString(16).padStart(2,"0")}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49889	151.101.129.140	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:17 UTC	404	OUT	GET /ads/conversions-config/v1/pixel/config/t2_ewwvmnuh_telemetry HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:17 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86 access-control-allow-origin: * cache-control: max-age=300 content-type: application/json Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:17 GMT Via: 1.1 varnish Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-04-24 17:31:17 UTC	86	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 5f 68 61 73 68 22 3a 22 35 38 31 64 33 35 39 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f 61 64 73 2f 35 38 31 64 33 35 39 64 2f 70 69 78 65 6c 2e 6a 73 22 7d Data Ascii: {"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49888	192.184.67.70	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:17 UTC	525	OUT	GET /quant.js HTTP/1.1 Host: secure.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:17 UTC	295	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:17 GMT Content-Type: application/javascript Content-Length: 23678 Connection: close Accept-Ranges: bytes Cache-Control: private, max-age=604800 Etag: "bvEECQq4Zy6gU9J/qv1O6Q==" Expires: Wed, 01 May 2024 17:31:17 GMT Vary: Accept-Encoding
2024-04-24 17:31:17 UTC	16089	IN	Data Raw: 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 38 2d 32 30 32 33 2c 20 51 75 61 6e 74 63 61 73 74 20 43 6f 72 70 2e 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 6e 74 63 61 73 74 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 22 71 63 53 65 73 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3d 72 28 29 3b 72 65 74 75 72 6e 22 78 78 78 78 78 78 78 78 2d 78 78 78 78 2d 34 78 78 78 2d 79 78 78 78 2d 78 78 78 78 78 78 78 78 78 78 78 78 22 2e 72 65 70 6c 61 63 65 28 2f 5b 78 79 5d 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 28 65 2b 31 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 25 31 36 7c 30 3b Data Ascii: /* Copyright (c) 2008-2023, Quantcast Corp. https://www.quantcast.com/legal/license /!function(){"use strict";var e="qcSes";function t(){var e=r();return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,(function(t){var n=(e+16Math.random())%16\|0;
2024-04-24 17:31:17 UTC	7589	IN	Data Raw: 5b 65 5d 26 26 28 74 3d 54 65 5b 65 5d 2c 6e 2e 70 75 73 68 28 74 29 2c 64 65 6c 65 74 65 20 54 65 5b 65 5d 29 3b 69 66 28 31 3d 3d 6e 2e 6c 65 6e 67 74 68 26 26 79 28 6e 5b 30 5d 29 2c 6e 2e 6c 65 6e 67 74 68 3e 31 29 66 6f 72 28 65 3d 30 3b 65 3c 6e 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 79 28 6e 5b 65 5d 29 7d 7d 2c 72 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 3d 5b 5d 3b 66 6f 72 28 6e 3d 6a 65 2e 73 6c 69 63 65 28 30 29 2c 65 3d 30 3b 65 3c 6e 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 3d 6e 5b 65 5d 2c 59 28 74 29 7c 7c 72 2e 70 75 73 68 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 6e 65 28 29 3b 65 6c 73 65 20 66 6f 72 28 65 3d 30 3b 65 3c 72 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 3d 72 5b 65 5d 2c 43 65 2e 70 Data Ascii: [e]&&(t=Te[e],n.push(t),delete Te[e]);if(1==n.length&&y(n[0]),n.length>1)for(e=0;e<n.length;e++)y(n[e])}},re=function(){var e,t,n,r=[];for(n=je.slice(0),e=0;e<n.length;e++)t=n[e],Y(t)\|\|r.push(t);if(0===r.length)ne();else for(e=0;e<r.length;e++)t=r[e],Ce.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49892	18.154.142.121	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:17 UTC	527	OUT	GET /up_loader.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:18 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 10104 Connection: close Date: Wed, 24 Apr 2024 09:04:27 GMT Last-Modified: Fri, 12 Apr 2024 16:30:50 GMT ETag: "cd056b72a31972be87dbbf0927dc2dfd" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 358c6b4652ba761f933c81ae3644fa6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: yElAZGPDAEsmzcBKYKiaqfvs9m8J3Ym7k0UtzMrU7kXGw4S54Z44cQ== Age: 30411
2024-04-24 17:31:18 UTC	10104	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 63 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 75 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 5d 3b 6c 65 74 20 61 3d 75 2e 72 65 64 75 63 65 28 28 65 2c 64 2c 61 29 3d 3e 28 65 5b 64 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 64 65 62 75 67 22 3d 3d 3d 64 3f 22 6c 6f 67 22 3a 64 3b 69 66 28 63 26 26 63 6f 6e 73 6f 6c 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 5b 65 5d 29 7b 76 61 72 20 74 3d 75 2e 69 6e 64 65 78 4f 66 28 63 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 69 66 28 21 30 3d 3d 3d 63 7c 7c 2d 31 3c 74 26 Data Ascii: !function(){"use strict";let c=null;const u=["debug","info","warn","error"];let a=u.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=u.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49893	108.139.10.76	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:17 UTC	537	OUT	GET /4cdf254ff02939a3.min.js HTTP/1.1 Host: tag.demandbase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:18 UTC	849	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 78687 Connection: close Date: Wed, 24 Apr 2024 17:31:19 GMT Last-Modified: Tue, 16 Apr 2024 11:25:11 GMT ETag: "9ba23104805b0ecdd9eca87fa3a3467a" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=3600 x-amz-version-id: Dfgdz9RHrD88uP3ZkWqD22YXdwL1Nc77 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 773ca14e6bd4bf9244988cb69fc9dca8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO5-P2 X-Amz-Cf-Id: JlpCOCgszZsGbtc6STOCevgVwlfUKcW2-NrTGR-OmNb4hraBYE_A_A== Strict-Transport-Security: max-age=63072000; includeSubDomains; preload permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()
2024-04-24 17:31:18 UTC	16384	IN	Data Raw: 76 61 72 20 44 65 6d 61 6e 64 62 61 73 65 3d 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 7c 7c 7b 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 4d 2c 78 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 69 66 28 69 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 2c 6f 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6f 3c 72 3b 6f 2b 2b 29 21 6e 26 26 6f 20 69 6e 20 65 7c 7c 28 28 6e 3d 6e 7c 7c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 65 2c 30 2c 6f 29 29 5b 6f 5d 3d 65 5b 6f 5d 29 3b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 28 6e 7c 7c Data Ascii: var Demandbase=window.Demandbase\|\|{};!function(g){"use strict";var M,x=this&&this.__spreadArray\|\|function(t,e,i){if(i\|\|2===arguments.length)for(var n,o=0,r=e.length;o<r;o++)!n&&o in e\|\|((n=n\|\|Array.prototype.slice.call(e,0,o))[o]=e[o]);return t.concat(n\|\|
2024-04-24 17:31:18 UTC	511	IN	Data Raw: 5b 22 6e 61 6d 65 22 2c 22 73 65 67 6d 65 6e 74 73 22 2c 22 70 61 67 65 73 22 2c 22 6d 6f 64 69 66 79 22 5d 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 2e 6d 6f 64 69 66 79 29 72 65 74 75 72 6e 20 50 2e 55 74 69 6c 69 74 69 65 73 2e 4c 6f 67 67 69 6e 67 2e 6c 6f 67 28 22 44 42 43 6f 6e 74 65 6e 74 42 75 69 6c 64 65 72 3a 20 69 6e 76 61 6c 69 64 20 74 79 70 65 20 69 6e 20 63 6f 6e 66 69 67 2e 22 29 2c 21 31 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 65 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 5b 65 5b 69 5d 5d 29 72 65 74 75 72 6e 20 50 2e 55 74 69 6c 69 74 69 65 73 2e 4c 6f 67 67 69 6e 67 2e 6c 6f 67 28 22 44 42 43 6f 6e 74 65 6e 74 42 75 69 6c 64 65 72 3a 20 69 6e 76 61 6c 69 64 20 63 6f 6e Data Ascii: ["name","segments","pages","modify"];if("function"!=typeof t.modify)return P.Utilities.Logging.log("DBContentBuilder: invalid type in config."),!1;for(var i=0;i<e.length;i++)if(void 0===t[e[i]])return P.Utilities.Logging.log("DBContentBuilder: invalid con
2024-04-24 17:31:18 UTC	16384	IN	Data Raw: 74 69 65 73 7c 7c 28 4c 2e 55 74 69 6c 69 74 69 65 73 3d 7b 7d 29 3b 28 45 3d 45 2e 45 76 65 6e 74 73 7c 7c 28 45 2e 45 76 65 6e 74 73 3d 7b 7d 29 29 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 21 30 3b 69 66 28 21 6e 74 28 74 29 29 72 65 74 75 72 6e 20 4c 2e 55 74 69 6c 69 74 69 65 73 2e 4c 6f 67 67 69 6e 67 2e 6c 6f 67 28 22 45 76 65 6e 74 20 6e 6f 74 20 61 64 64 65 64 2e 22 29 2c 21 31 3b 76 61 72 20 69 2c 6e 3d 74 2e 74 79 70 65 7c 7c 4c 2e 55 74 69 6c 69 74 69 65 73 2e 43 6f 6e 73 74 61 6e 74 73 2e 44 46 4c 54 5f 45 56 45 4e 54 5f 54 59 50 45 2c 6f 3d 74 2e 65 6c 65 6d 65 6e 74 73 2c 72 3d 6f 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 69 66 28 72 21 3d 3d 48 54 4d 4c 43 6f 6c 6c 65 63 74 69 6f 6e 26 26 72 21 3d 3d 4e 6f 64 65 4c Data Ascii: ties\|\|(L.Utilities={});(E=E.Events\|\|(E.Events={})).add=function(t){var e=!0;if(!nt(t))return L.Utilities.Logging.log("Event not added."),!1;var i,n=t.type\|\|L.Utilities.Constants.DFLT_EVENT_TYPE,o=t.elements,r=o.constructor;if(r!==HTMLCollection&&r!==NodeL
2024-04-24 17:31:18 UTC	16384	IN	Data Raw: 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 69 3d 6e 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 69 6e 70 75 74 53 65 61 72 63 68 54 65 72 6d 73 3b 72 65 74 75 72 6e 21 21 64 2e 55 74 69 6c 69 74 69 65 73 2e 69 6e 63 6c 75 64 65 73 41 6e 79 28 65 2c 69 29 7c 7c 21 21 64 2e 55 74 69 6c 69 74 69 65 73 2e 69 6e 63 6c 75 64 65 73 41 6e 79 28 74 2c 69 29 7d 29 7d 3b 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3f 65 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3a 77 69 6e 64 6f 77 2e 41 63 74 69 76 65 58 4f 62 6a 65 63 74 26 26 28 65 3d 6e 65 77 20 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 48 54 54 50 22 29 Data Ascii: oLowerCase(),i=n.configuration.inputSearchTerms;return!!d.Utilities.includesAny(e,i)\|\|!!d.Utilities.includesAny(t,i)})};t.prototype.send=function(t){window.XMLHttpRequest?e=new XMLHttpRequest:window.ActiveXObject&&(e=new ActiveXObject("Microsoft.XMLHTTP")
2024-04-24 17:31:18 UTC	2048	IN	Data Raw: 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 74 65 73 74 4d 6f 64 65 56 61 6c 75 65 3b 65 2e 6c 6f 61 64 3d 65 2e 67 65 74 3b 65 2e 5f 6c 6f 61 64 4f 6e 63 65 3d 65 2e 67 65 74 4f 6e 63 65 3b 65 2e 43 6f 6d 70 61 6e 79 50 72 6f 66 69 6c 65 3d 76 6f 69 64 20 30 3b 65 2e 69 73 43 61 6c 6c 65 64 3d 21 31 3b 65 2e 65 78 70 65 72 69 65 6e 63 65 73 3d 7b 7d 3b 74 72 79 7b 69 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 65 72 67 65 43 6f 6e 66 69 67 73 2e 63 61 6c 6c 28 65 2c 65 2e 44 45 46 41 55 4c 54 5f 43 4f 4e 46 49 47 55 52 41 54 49 4f 4e 2c 7b 61 70 69 4b 65 79 3a 79 2e 43 6f 6e 66 69 67 2e 6b 65 79 7c 7c 79 2e 55 74 69 6c 69 74 69 65 73 2e 64 69 67 28 79 2e 43 6f 6e 66 69 67 2c 22 61 6e 61 6c 79 74 69 63 73 22 2c 22 6b 65 79 22 29 7c 7c 79 2e 55 74 69 6c 69 74 69 65 Data Ascii: configuration.testModeValue;e.load=e.get;e._loadOnce=e.getOnce;e.CompanyProfile=void 0;e.isCalled=!1;e.experiences={};try{i.prototype.mergeConfigs.call(e,e.DEFAULT_CONFIGURATION,{apiKey:y.Config.key\|\|y.Utilities.dig(y.Config,"analytics","key")\|\|y.Utilitie
2024-04-24 17:31:18 UTC	16384	IN	Data Raw: 65 74 75 72 6e 5b 32 2c 79 2e 55 74 69 6c 69 74 69 65 73 2e 4c 6f 67 67 69 6e 67 2e 6c 6f 67 28 22 49 50 20 41 50 49 20 71 75 65 72 79 20 76 69 61 20 44 4f 4d 20 74 61 67 22 29 5d 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 5b 34 2c 74 68 69 73 2e 62 75 69 6c 64 49 50 41 50 49 50 61 72 61 6d 65 74 65 72 73 28 61 29 5d 3b 63 61 73 65 20 33 3a 69 3d 74 2e 73 65 6e 74 28 29 3b 28 6e 3d 79 2e 55 74 69 6c 69 74 69 65 73 2e 67 65 74 51 75 65 72 79 50 61 72 61 6d 28 79 2e 55 74 69 6c 69 74 69 65 73 2e 43 6f 6e 73 74 61 6e 74 73 2e 51 53 5f 50 52 45 56 49 45 57 5f 54 4f 4b 45 4e 29 29 26 26 28 69 2e 70 72 65 76 69 65 77 5f 74 6f 6b 65 6e 3d 6e 29 3b 69 66 28 21 69 2e 6b 65 79 26 26 21 69 2e 61 75 74 68 29 72 65 74 75 72 6e 5b 32 2c 79 2e 55 74 69 6c 69 74 69 65 73 Data Ascii: eturn[2,y.Utilities.Logging.log("IP API query via DOM tag")];case 2:return[4,this.buildIPAPIParameters(a)];case 3:i=t.sent();(n=y.Utilities.getQueryParam(y.Utilities.Constants.QS_PREVIEW_TOKEN))&&(i.preview_token=n);if(!i.key&&!i.auth)return[2,y.Utilities
2024-04-24 17:31:18 UTC	1024	IN	Data Raw: 5b 69 5d 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 68 65 63 6b 56 61 6c 75 65 28 74 68 69 73 2e 76 61 6c 75 65 29 3b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 74 68 69 73 2e 76 61 6c 75 65 29 69 66 28 21 30 3d 3d 3d 74 68 69 73 2e 5f 63 68 65 63 6b 56 61 6c 75 65 28 74 68 69 73 2e 76 61 6c 75 65 5b 74 5d 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 7d 3b 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 2e 44 42 43 6f 6e 64 69 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 3d 22 44 42 43 6f 6e 64 69 74 69 6f 6e 22 3b 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 2e 44 42 43 6f 6e 64 69 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 73 Data Ascii: [i];if("object"!=typeof this.value)return this._checkValue(this.value);for(var t in this.value)if(!0===this._checkValue(this.value[t]))return!0;return!1}};window.Demandbase.DBCondition.prototype.name="DBCondition";window.Demandbase.DBCondition.prototype.s
2024-04-24 17:31:18 UTC	9568	IN	Data Raw: 65 2c 69 2c 6e 2c 6f 2c 74 29 29 3a 6e 75 6c 6c 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 52 28 74 2c 65 29 7b 74 68 69 73 2e 6e 61 6d 65 3d 74 3b 74 68 69 73 2e 72 75 6c 65 73 3d 5b 5d 3b 74 68 69 73 2e 6f 70 65 72 61 74 6f 72 3d 22 22 3b 74 68 69 73 2e 61 64 64 43 6f 6e 64 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 28 74 26 26 74 2e 65 76 61 6c 75 61 74 65 7c 7c 76 6f 69 64 20 30 21 3d 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 26 26 22 44 42 43 6f 6e 64 69 74 69 6f 6e 22 3d 3d 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 29 29 7b 69 66 28 21 28 74 3d 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 2e 44 42 43 6f 6e 64 69 74 69 6f 6e 42 75 69 6c 64 Data Ascii: e,i,n,o,t)):null}};function R(t,e){this.name=t;this.rules=[];this.operator="";this.addCondition=function(t){if(!(t&&t.evaluate\|\|void 0!==t.constructor.prototype.name&&"DBCondition"===t.constructor.prototype.name)){if(!(t=window.Demandbase.DBConditionBuild

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49894	142.250.141.155	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:17 UTC	617	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-3776042-30&cid=1808248659.1713979875&jid=746412766&gjid=1341737773&_gid=1006434851.1713979875&_u=YEBAAEAAAAAAACgEK~&z=1183424842 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:18 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Wed, 24 Apr 2024 17:31:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 17:31:18 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49896	3.225.21.46	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:18 UTC	1231	OUT	GET /sa.css HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0
2024-04-24 17:31:18 UTC	222	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:18 GMT Content-Type: text/css Content-Length: 65 Connection: close Access-Control-Allow-Origin: * Cache-Control: only-if-cached, no-transform, private, max-age=7776000
2024-04-24 17:31:18 UTC	65	IN	Data Raw: 3a 72 6f 6f 74 20 7b 0a 20 20 20 20 2d 2d 73 61 2d 75 69 64 3a 20 27 30 2d 63 63 66 62 32 32 61 32 2d 39 61 39 63 2d 35 63 66 31 2d 35 62 64 30 2d 36 32 37 61 38 30 61 64 37 38 39 32 27 3b 0a 7d Data Ascii: :root { --sa-uid: '0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892';}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49897	3.225.21.46	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:18 UTC	552	OUT	GET /sa.jpeg HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:18 UTC	1300	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:18 GMT Content-Type: image/jpeg Content-Length: 651 Connection: close Access-Control-Allow-Origin: * Cache-Control: only-if-cached, no-transform, private, max-age=7776000 Set-Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDmg6WxBjABOgT87-jmQgTRFEZ4.avE71IQibfnR27MrjlLKm6xBBrDKYeNaE1V1bvzSbow; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDmg6WxBjABOgT87-jmQgTRFEZ4.avE71IQibfnR27MrjlLKm6xBBrDKYeNaE1V1bvzSbow; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
2024-04-24 17:31:18 UTC	651	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 01 00 01 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49898	209.73.190.12	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:18 UTC	555	OUT	GET /wi/config/10175613.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:18 UTC	744	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-amz-request-id: CHW6RFRV32CTMF7A x-amz-id-2: B1HllJPJwYrJyRuP/Rcllgl4zRE6cIpc/kkbDNTuqBGDudpny4f92vSc7g8h8mGEVwkUT79TyqA= Content-Type: application/json Date: Wed, 24 Apr 2024 17:28:28 GMT Server: ATS Referrer-Policy: no-referrer-when-downgrade Cache-Control: public,max-age=3600 Content-Length: 2 Age: 170 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-24 17:31:18 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49901	142.250.101.154	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:18 UTC	1430	OUT	GET /td/fls/rul/activityi;fledge=1;src=9401320;type=pagev0;cat=globa000;ord=1;num=9361925215703;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=975646958;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:18 UTC	795	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 24-Apr-2024 17:46:18 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 17:31:18 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-24 17:31:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49902	142.250.101.154	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:18 UTC	1518	OUT	GET /td/rul/1023673485?random=1713979877268&cv=11&fst=1713979877268&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44m0v883646161z8830923470za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&label=v0RbCOHw2eECEI2JkOgD&hn=www.googleadservices.com&frm=0&tiba=Manage%20Invoices%20with%20Xero%20Accounting%20Software%20%7C%20Xero%20US&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1776741404.1713979872&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:18 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 24-Apr-2024 17:46:18 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 17:31:18 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-24 17:31:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49900	142.250.101.154	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:18 UTC	1394	OUT	GET /td/fls/rul/activityi;fledge=1;src=9401320;type=pagev0;cat=globa002;ord=1;num=8823647633995;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;ps=1;pcor=872077554;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:18 UTC	795	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 24-Apr-2024 17:46:18 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 17:31:18 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-24 17:31:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49903	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:18 UTC	1419	OUT	GET /activityi;src=9401320;type=pagev0;cat=globa000;ord=1;num=9361925215703;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=975646958;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals? HTTP/1.1 Host: 9401320.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:18 UTC	1393	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://9401320.fls.doubleclick.net/activityi;dc_pre=CK3dyM6w24UDFaywOgUd4ZMBrw;src=9401320;type=pagev0;cat=globa000;ord=1;num=9361925215703;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=975646958;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49904	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:18 UTC	1383	OUT	GET /activityi;src=9401320;type=pagev0;cat=globa002;ord=1;num=8823647633995;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;ps=1;pcor=872077554;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals? HTTP/1.1 Host: 9401320.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:18 UTC	1357	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://9401320.fls.doubleclick.net/activityi;dc_pre=CNSLyc6w24UDFa6rOgUd8DEN-w;src=9401320;type=pagev0;cat=globa002;ord=1;num=8823647633995;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;ps=1;pcor=872077554;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49905	3.225.21.46	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:18 UTC	1968	OUT	GET /saq_pxl?uid=XVsUfradtXcBUl5XS45ldg&is_js=true&landing_url=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&t=Manage%20Invoices%20with%20Xero%20Accounting%20Software%20%7C%20Xero%20US&tip=K3-yO62zYSgknJOjyQJz0FhpvQ9nprx7VnqHV_vSi0M&host=https%3A%2F%2Fwww.xero.com&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%252Br0VCscx3wVXJe%252F3g0&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0
2024-04-24 17:31:19 UTC	296	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:18 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 116 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.xero.com
2024-04-24 17:31:19 UTC	116	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 5b 22 71 68 31 72 41 66 31 38 35 4e 58 69 75 59 68 53 43 4d 52 4f 45 4b 22 5d 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":null,"retargeting_tracker_uids":["qh1rAf185NXiuYhSCMROEK"],"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49906	3.225.21.46	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:18 UTC	1968	OUT	GET /saq_pxl?uid=IZi8ik6wpN0HnLyT9lcuoQ&is_js=true&landing_url=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&t=Manage%20Invoices%20with%20Xero%20Accounting%20Software%20%7C%20Xero%20US&tip=K3-yO62zYSgknJOjyQJz0FhpvQ9nprx7VnqHV_vSi0M&host=https%3A%2F%2Fwww.xero.com&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%252Br0VCscx3wVXJe%252F3g0&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0
2024-04-24 17:31:19 UTC	295	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:18 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 94 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.xero.com
2024-04-24 17:31:19 UTC	94	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49909	209.73.190.11	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:19 UTC	357	OUT	GET /wi/config/10175613.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:19 UTC	646	IN	HTTP/1.1 200 OK x-amz-request-id: P8QRKPAVD9C7ANAG x-amz-id-2: /VJo8GAHWBLW3zwRFO2uaSknNpP8WeRzO7ATqXDaxNaKkG1cwMONIOQ7Sa5VqmS7w2hzvKgwaE+9qOV7bRFQib9MPzb1PPp4KVbLg385O28= Content-Type: application/json Date: Wed, 24 Apr 2024 17:21:47 GMT Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Cache-Control: public,max-age=3600 Content-Length: 2 Age: 572 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-24 17:31:19 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49911	18.154.144.27	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:19 UTC	884	OUT	POST /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&page_title=Manage%20Invoices%20with%20Xero%20Accounting%20Software%20%7C%20Xero%20US HTTP/1.1 Host: api.company-target.com Connection: keep-alive Content-Length: 63 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:19 UTC	63	OUT	Data Raw: 7b 22 73 72 63 22 3a 22 74 61 67 22 2c 22 61 75 74 68 22 3a 22 42 47 43 53 44 6b 35 4c 45 48 4f 34 4d 50 56 70 67 44 52 4e 75 50 75 65 33 4d 4a 56 35 47 75 64 4d 31 70 30 45 49 42 6b 22 7d Data Ascii: {"src":"tag","auth":"BGCSDk5LEHO4MPVpgDRNuPue3MJV5GudM1p0EIBk"}
2024-04-24 17:31:19 UTC	953	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 457 Connection: close Date: Wed, 24 Apr 2024 17:31:19 GMT Server: nginx Access-Control-Allow-Origin: https://www.xero.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Expose-Headers: x-amz-cf-id Access-Control-Max-Age: 7200 Access-Control-Allow-Credentials: true Api-Version: v2 Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Identification-Source: CENTRAL Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Tue, 23 Apr 2024 17:31:19 GMT Vary: Accept-Encoding, Origin Request-ID: b2c02656-4f30-4bc5-9ac1-66faaeca4807 X-Cache: Miss from cloudfront Via: 1.1 da2461b9060bf6aac3082da0d5161794.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: OznblQ-PVIxSDjoWNTSYCMVsyByy0sqndINohh9m34eMdMFtacJBMQ==
2024-04-24 17:31:19 UTC	457	IN	Data Raw: 7b 22 72 65 67 69 73 74 72 79 5f 63 6f 6d 70 61 6e 79 5f 6e 61 6d 65 22 3a 22 43 4f 47 45 4e 54 2d 31 37 34 22 2c 22 72 65 67 69 73 74 72 79 5f 63 69 74 79 22 3a 22 4c 61 73 20 56 65 67 61 73 22 2c 22 72 65 67 69 73 74 72 79 5f 73 74 61 74 65 22 3a 22 4e 56 22 2c 22 72 65 67 69 6f 6e 5f 6e 61 6d 65 22 3a 22 4e 65 76 61 64 61 22 2c 22 72 65 67 69 73 74 72 79 5f 7a 69 70 5f 63 6f 64 65 22 3a 22 38 39 31 30 31 22 2c 22 72 65 67 69 73 74 72 79 5f 61 72 65 61 5f 63 6f 64 65 22 3a 6e 75 6c 6c 2c 22 72 65 67 69 73 74 72 79 5f 64 6d 61 5f 63 6f 64 65 22 3a 38 33 39 2c 22 72 65 67 69 73 74 72 79 5f 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 72 65 67 69 73 74 72 79 5f 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 55 53 22 2c 22 72 Data Ascii: {"registry_company_name":"COGENT-174","registry_city":"Las Vegas","registry_state":"NV","region_name":"Nevada","registry_zip_code":"89101","registry_area_code":null,"registry_dma_code":839,"registry_country":"United States","registry_country_code":"US","r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49910	34.96.71.22	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:19 UTC	692	OUT	GET /s/sync?exc=lr HTTP/1.1 Host: s.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:19 UTC	511	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET,OPTIONS Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=fe876021-fc99-4e31-8bfa-461e893fb9c2; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Set-Cookie: tuuid_lu=1713979879\|ix:0\|mctv:0\|rp:0; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Date: Wed, 24 Apr 2024 17:31:19 GMT Content-Length: 634 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 17:31:19 UTC	634	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 38 26 61 6d 70 3b 65 78 70 69 72 79 3d 31 37 32 39 37 39 31 30 37 39 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 66 65 38 37 36 30 32 31 2d 66 63 39 39 2d 34 65 33 31 2d 38 62 66 61 2d 34 36 31 65 38 39 33 66 62 39 63 32 22 20 61 6c 74 3d 22 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 20 61 72 69 61 2d 68 Data Ascii: <html><head><title>Pixels</title></head><body><img src="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=18&expiry=1729791079&external_user_id=fe876021-fc99-4e31-8bfa-461e893fb9c2" alt="" width="0" height="0" style="display:none", aria-h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49913	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:19 UTC	1457	OUT	GET /activityi;dc_pre=CNSLyc6w24UDFa6rOgUd8DEN-w;src=9401320;type=pagev0;cat=globa002;ord=1;num=8823647633995;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;ps=1;pcor=872077554;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals? HTTP/1.1 Host: 9401320.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-24 17:31:19 UTC	984	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:19 GMT Expires: Wed, 24 Apr 2024 17:31:19 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUnsQusTpRB7G08JSOo4iHgC9_kiW4dDaebo3VFpfWWkzz8baRfhCzh9Gap7iHc; expires=Fri, 24-Apr-2026 17:31:19 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 17:31:19 UTC	271	IN	Data Raw: 33 35 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4e 53 4c 79 63 36 77 32 34 55 44 46 61 Data Ascii: 351<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CNSLyc6w24UDFa
2024-04-24 17:31:19 UTC	585	IN	Data Raw: 3d 39 34 30 31 33 32 30 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 67 6c 6f 62 61 30 30 32 3b 6f 72 64 3d 31 3b 6e 75 6d 3d 38 38 32 33 36 34 37 36 33 33 39 39 35 3b 6e 70 61 3d 30 3b 61 75 69 64 64 63 3d 2a 3b 75 31 3d 25 32 46 75 73 25 32 46 74 72 79 2d 6e 6f 77 25 32 46 6d 61 6e 61 67 65 2d 69 6e 76 6f 69 63 65 73 25 32 46 3b 70 73 3d 31 3b 70 63 6f 72 3d 38 37 32 30 37 37 35 35 34 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 3b 75 61 6d 62 3d 30 Data Ascii: =9401320;type=pagev0;cat=globa002;ord=1;num=8823647633995;npa=0;auiddc=*;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;ps=1;pcor=872077554;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0
2024-04-24 17:31:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49914	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:19 UTC	1493	OUT	GET /activityi;dc_pre=CK3dyM6w24UDFaywOgUd4ZMBrw;src=9401320;type=pagev0;cat=globa000;ord=1;num=9361925215703;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=975646958;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals? HTTP/1.1 Host: 9401320.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-24 17:31:19 UTC	984	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:19 GMT Expires: Wed, 24 Apr 2024 17:31:19 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; expires=Fri, 24-Apr-2026 17:31:19 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 17:31:19 UTC	271	IN	Data Raw: 33 37 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4b 33 64 79 4d 36 77 32 34 55 44 46 61 Data Ascii: 375<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CK3dyM6w24UDFa
2024-04-24 17:31:19 UTC	621	IN	Data Raw: 3d 39 34 30 31 33 32 30 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 67 6c 6f 62 61 30 30 30 3b 6f 72 64 3d 31 3b 6e 75 6d 3d 39 33 36 31 39 32 35 32 31 35 37 30 33 3b 6e 70 61 3d 30 3b 61 75 69 64 64 63 3d 2a 3b 75 31 3d 25 32 46 75 73 25 32 46 74 72 79 2d 6e 6f 77 25 32 46 6d 61 6e 61 67 65 2d 69 6e 76 6f 69 63 65 73 25 32 46 3b 75 37 3d 66 75 6e 63 74 69 6f 6e 28 61 29 25 37 42 61 2e 73 65 74 28 25 32 32 64 69 6d 65 6e 73 69 6f 6e 25 32 32 25 32 42 62 25 32 43 61 2e 67 65 74 28 25 32 32 63 6c 69 65 6e 74 49 64 25 32 32 29 29 25 37 44 3b 70 73 3d 31 3b 70 63 6f 72 3d 39 37 35 36 34 36 39 35 38 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 Data Ascii: =9401320;type=pagev0;cat=globa000;ord=1;num=9361925215703;npa=0;auiddc=*;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=975646958;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938
2024-04-24 17:31:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49908	100.26.119.80	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:19 UTC	1046	OUT	GET /sa.jpeg HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0
2024-04-24 17:31:19 UTC	225	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:19 GMT Content-Type: image/jpeg Content-Length: 651 Connection: close Access-Control-Allow-Origin: * Cache-Control: only-if-cached, no-transform, private, max-age=7776000
2024-04-24 17:31:19 UTC	651	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 01 00 01 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49915	31.13.70.7	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:19 UTC	1303	OUT	GET /signals/config/303901320544451?v=2.9.154&r=stable&domain=www.xero.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:19 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-24 17:31:19 UTC	1528	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-24 17:31:19 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-04-24 17:31:19 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-04-24 17:31:19 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-04-24 17:31:19 UTC	1500	IN	Data Raw: 61 2e 70 69 78 65 6c 3b 61 3d 61 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a Data Ascii: a.pixel;a=a.shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:
2024-04-24 17:31:19 UTC	1500	IN	Data Raw: 61 28 29 2c 6b 3d 5b 5d 2c 6c 3d 7b 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 Data Ascii: a(),k=[],l={};if(h==null)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonEleme
2024-04-24 17:31:19 UTC	1500	IN	Data Raw: 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 65 61 63 68 2c 64 3d 2f 5b 5e 5c 73 5c 22 5d 2f 2c 65 3d 2f 5b 5e 5c 73 3a 2b 5c 22 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 63 2c 66 29 7b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 63 29 3f 63 3d 3d 3d 22 40 22 3f 6e 75 6c 6c 3a 7b 73 74 61 72 74 3a 62 2c 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 75 73 65 72 Data Ascii: nts[b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.each,d=/[^\s\"]/,e=/[^\s:+\"]/;function g(b,c,f){if(f==null)return d.test(c)?c==="@"?null:{start:b,userOrDomain:"user
2024-04-24 17:31:19 UTC	1500	IN	Data Raw: 2e 5f 72 61 74 65 4d 53 3d 63 7d 68 28 62 2c 5b 7b 6b 65 79 3a 22 5f 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 49 6d 70 6c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 6c 61 73 74 41 72 67 73 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 63 3d 62 2d 74 68 69 73 2e 5f 6c 61 73 74 54 69 6d 65 3b 69 66 28 63 3e 3d 74 68 69 73 2e 5f 72 61 74 65 4d 53 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 64 29 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 Data Ascii: ._rateMS=c}h(b,[{key:"_passesThrottleImpl",value:function(){var a=this._lastArgs;if(a==null)return!0;var b=Date.now(),c=b-this._lastTime;if(c>=this._rateMS)return!0;for(var d=arguments.length,e=Array(d),f=0;f<d;f++)e[f]=arguments[f];if(a.length!==e.length
2024-04-24 17:31:19 UTC	543	IN	Data Raw: 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 46 72 6f 6d 49 6e 70 75 74 73 22 29 2c 42 3d 6e 65 77 20 74 28 29 2c 43 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 44 6f 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 44 3d 31 30 30 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 62 2e 62 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 3d 3d 3d 22 65 78 74 65 6e 64 65 64 22 7d 66 75 6e 63 74 69 6f 6e 20 46 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 62 2e 64 69 73 61 62 6c 65 41 75 74 6f 43 6f 6e 66 69 67 29 72 65 74 75 Data Ascii: .getFbeventsModules("signalsFBEventsExtractFromInputs"),B=new t(),C=f.getFbeventsModules("signalsFBEventsDoAutomaticMatching"),D=100;function E(a,b){return b!=null&&b.buttonSelector==="extended"}function F(b){return function(c){if(b.disableAutoConfig)retu
2024-04-24 17:31:19 UTC	1500	IN	Data Raw: 65 2c 66 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 68 3d 62 2e 6f 70 74 49 6e 73 2e 69 73 4f 70 74 65 64 49 6e 28 63 2e 69 64 2c 22 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 6a 3d 6f 28 66 29 2c 6b 3d 71 28 66 2c 6a 29 2c 6c 3d 78 28 72 28 66 29 29 2e 73 61 66 65 3b 69 66 28 6c 21 3d 6e 75 6c 6c 26 26 6c 2e 6c 65 6e 67 74 68 3e 44 29 72 65 74 75 72 6e 3b 68 3d 68 3b 66 3d 76 28 7b 62 75 74 74 6f 6e 3a 66 2c 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 6b 2c 62 75 74 74 6f 6e 54 65 78 74 3a 6c 2c 66 6f 72 6d 3a 6a 2c 70 69 78 65 6c 3a 63 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 68 7d 29 3b 6b 3d 69 28 66 2c 32 29 3b 6c 3d 6b 5b 30 5d 3b 6a 3d 6b 5b 31 5d 3b 67 26 26 28 6c 3d 7b 7d Data Ascii: e,f);if(f==null)return;var h=b.optIns.isOptedIn(c.id,"AutomaticMatching"),j=o(f),k=q(f,j),l=x(r(f)).safe;if(l!=null&&l.length>D)return;h=h;f=v({button:f,buttonFeatures:k,buttonText:l,form:j,pixel:c,shouldExtractUserData:h});k=i(f,2);l=k[0];j=k[1];g&&(l={}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49919	151.101.193.140	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:19 UTC	910	OUT	GET /rp.gif?ts=1713979875477&id=t2_ewwvmnuh&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=cb2d649f-3168-41a8-8246-f3b3ccc5e846&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_72595d5a&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:19 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:19 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 17:31:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49918	151.101.193.140	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:19 UTC	910	OUT	GET /rp.gif?ts=1713979875480&id=t2_ewwvmnuh&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=cb2d649f-3168-41a8-8246-f3b3ccc5e846&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_72595d5a&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:19 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:19 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 17:31:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49916	100.26.119.80	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:19 UTC	1770	OUT	GET /saq_pxl?uid=XVsUfradtXcBUl5XS45ldg&is_js=true&landing_url=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&t=Manage%20Invoices%20with%20Xero%20Accounting%20Software%20%7C%20Xero%20US&tip=K3-yO62zYSgknJOjyQJz0FhpvQ9nprx7VnqHV_vSi0M&host=https%3A%2F%2Fwww.xero.com&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%252Br0VCscx3wVXJe%252F3g0&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0
2024-04-24 17:31:20 UTC	280	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:20 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 116 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: null
2024-04-24 17:31:20 UTC	116	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 5b 22 71 68 31 72 41 66 31 38 35 4e 58 69 75 59 68 53 43 4d 52 4f 45 4b 22 5d 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":null,"retargeting_tracker_uids":["qh1rAf185NXiuYhSCMROEK"],"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49917	100.26.119.80	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:19 UTC	1770	OUT	GET /saq_pxl?uid=IZi8ik6wpN0HnLyT9lcuoQ&is_js=true&landing_url=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&t=Manage%20Invoices%20with%20Xero%20Accounting%20Software%20%7C%20Xero%20US&tip=K3-yO62zYSgknJOjyQJz0FhpvQ9nprx7VnqHV_vSi0M&host=https%3A%2F%2Fwww.xero.com&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%252Br0VCscx3wVXJe%252F3g0&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0
2024-04-24 17:31:20 UTC	279	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:20 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 94 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: null
2024-04-24 17:31:20 UTC	94	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49921	142.250.141.105	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:20 UTC	812	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-3776042-30&cid=1808248659.1713979875&jid=746412766&_u=YEBAAEAAAAAAACgEK~&z=275738162 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:20 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 17:31:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49922	18.154.144.27	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:20 UTC	625	OUT	GET /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&page_title=Manage%20Invoices%20with%20Xero%20Accounting%20Software%20%7C%20Xero%20US HTTP/1.1 Host: api.company-target.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:20 UTC	492	IN	HTTP/1.1 401 Unauthorized Content-Type: text/plain;charset=utf-8 Content-Length: 12 Connection: close Date: Wed, 24 Apr 2024 17:31:20 GMT Server: nginx WWW-Authenticate: DemandBase API v2 X-Content-Type-Options: nosniff Request-ID: 550501b4-f11f-4d06-aa0f-ee8d1dde253d Vary: Origin X-Cache: Error from cloudfront Via: 1.1 76bb80483235d180da221d1877407702.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: gXqC8Uij_iQLSWSo8Cbi_uW79evDLHJ0d6GC6kR102znRCm6mnKAoQ==
2024-04-24 17:31:20 UTC	12	IN	Data Raw: 55 6e 61 75 74 68 6f 72 69 7a 65 64 Data Ascii: Unauthorized

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49924	52.85.204.136	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:20 UTC	528	OUT	GET /aat/amzn.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:20 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 13289 Connection: close Last-Modified: Mon, 15 Apr 2024 15:10:47 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: CqtBPlHFRJ4DVXdFOl0Nv05VUvH3bTHU Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 3e720c4eaac99cf5867e4a8a49dc59ca.cloudfront.net (CloudFront), 1.1 f877ee79a0f8fd4e0f5c08d722425c50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX3-C4 Date: Wed, 24 Apr 2024 17:31:20 GMT ETag: "3d13ef41aa477d7e1ec276886b9e0ec5" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: AaHm7f5HSpWmIarPjFTr_qmxHXEQlCg0A6nPxqJkU-oRlukhtyTsbg==
2024-04-24 17:31:20 UTC	13289	IN	Data Raw: 2f 2a 20 55 73 65 20 6f 66 20 74 68 69 73 20 70 69 78 65 6c 20 69 73 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 41 6d 61 7a 6f 6e 20 61 64 20 73 70 65 63 73 20 61 6e 64 20 70 6f 6c 69 63 69 65 73 20 61 74 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 62 2f 3f 26 6e 6f 64 65 3d 37 32 35 33 30 31 35 30 31 31 2e 20 56 65 72 73 69 6f 6e 20 6e 75 6d 62 65 72 3a 20 36 2c 20 43 68 61 6e 67 65 73 65 74 3a 20 41 64 64 69 6e 67 20 69 6e 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 73 75 70 70 6f 72 74 20 66 6f 72 20 73 65 74 55 73 65 72 44 61 74 61 20 2a 2f 0a 74 68 69 73 2e 61 6d 7a 6e 3d 74 68 69 73 2e 61 6d 7a 6e 7c 7c 7b 7d 2c 74 68 69 73 2e 61 6d 7a 6e 2e 6a 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b Data Ascii: /* Use of this pixel is subject to the Amazon ad specs and policies at http://www.amazon.com/b/?&node=7253015011. Version number: 6, Changeset: Adding in phone number support for setUserData */this.amzn=this.amzn\|\|{},this.amzn.js=function(){"use strict";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49923	18.239.199.34	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:20 UTC	635	OUT	GET /bg9s?x-amz-cf-id=OznblQ-PVIxSDjoWNTSYCMVsyByy0sqndINohh9m34eMdMFtacJBMQ==&api-version=v2 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:20 UTC	602	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 08:43:36 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 7213dea1fc38301ac719160ac4d5ab22.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P3 X-Amz-Cf-Id: mAWsyYs3NdZBMcXFKPecCg9GNyPYmFBzKmHixKAJHxpt5R1ieER1Rw== Age: 31665 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49929	172.64.151.101	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:20 UTC	636	OUT	GET /rum?cm_dsp_id=18&expiry=1729791079&external_user_id=fe876021-fc99-4e31-8bfa-461e893fb9c2 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:20 UTC	1204	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 17:31:20 GMT Content-Length: 0 Connection: close Location: /rum?cm_dsp_id=18&expiry=1729791079&external_user_id=fe876021-fc99-4e31-8bfa-461e893fb9c2&C=1 CF-Ray: 8797d38caae809f5-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZilB6NHM7SQAABTcAUcnXwAA; Path=/; Domain=casalemedia.com; Expires=Thu, 24 Apr 2025 17:31:20 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=004; Path=/; Domain=casalemedia.com; Expires=Tue, 23 Jul 2024 17:31:20 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=004; Path=/; Domain=casalemedia.com; Expires=Tue, 23 Jul 2024 17:31:20 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bWwxPvvPIGsd1OM4CmVqvH%2Bt0s7BdD4kNsBJkw4k5sm1A4Hj1SQFhaNcItp1awZ3%2FPYYiyl0jzFsNmraq06GfrG9hh%2BUOct9%2FMBoSjisE4OhMN2CLynQ0c0%2BRQjBK63cP4zBSRLca9M%2B3g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49926	146.75.92.157	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:20 UTC	524	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:20 UTC	543	IN	HTTP/1.1 200 OK Connection: close Content-Length: 57671 Last-Modified: Thu, 04 Apr 2024 00:26:35 GMT ETag: "bbbcf811d8437a575d796a4c1e5d4fad" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Content-Type: application/javascript; charset=utf-8 Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:20 GMT X-Served-By: cache-iad-kcgs7200164-IAD, cache-bur-kbur8200101-BUR X-Cache: HIT, HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT
2024-04-24 17:31:20 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 36 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 74 2e 65 78 70 6f 72 74 73 3d 28 72 3d 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 26 26 28 72 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 63 72 79 70 74 6f 26 26 28 72 3d 73 65 6c 66 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 26 26 28 72 3d Data Ascii: !function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=
2024-04-24 17:31:20 UTC	1379	IN	Data Raw: 68 69 73 2e 77 6f 72 64 73 3d 74 7c 7c 5b 5d 2c 74 68 69 73 2e 73 69 67 42 79 74 65 73 3d 6e 75 6c 6c 21 3d 65 3f 65 3a 34 2a 74 2e 6c 65 6e 67 74 68 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 66 29 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 29 7d 2c 63 6f 6e 63 61 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 77 6f 72 64 73 2c 6e 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 2c 69 3d 74 2e 73 69 67 42 79 74 65 73 3b 69 66 28 74 68 69 73 2e 63 6c 61 6d 70 28 29 2c 72 25 34 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 72 2b 6f 3e Data Ascii: his.words=t\|\|[],this.sigBytes=null!=e?e:4t.length},toString:function(t){return(t\|\|f).stringify(this)},concat:function(t){var e=this.words,n=t.words,r=this.sigBytes,i=t.sigBytes;if(this.clamp(),r%4)for(var o=0;o<i;o++){var a=n[o>>>2]>>>24-o%48&255;e[r+o>
2024-04-24 17:31:20 UTC	1379	IN	Data Raw: 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 2e 70 61 72 73 65 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 7d 2c 70 3d 63 2e 42 75 66 66 65 72 65 64 42 6c 6f 63 6b 41 6c 67 6f 72 69 74 68 6d 3d 75 2e 65 78 74 65 6e 64 28 7b 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 64 61 74 61 3d 6e 65 77 20 73 2e 69 6e 69 74 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 3d 30 7d 2c 5f 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 68 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 Data Ascii: n(t){return d.parse(unescape(encodeURIComponent(t)))}},p=c.BufferedBlockAlgorithm=u.extend({reset:function(){this._data=new s.init,this._nDataBytes=0},_append:function(t){"string"==typeof t&&(t=h.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes
2024-04-24 17:31:20 UTC	1379	IN	Data Raw: 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 65 28 72 29 26 26 28 69 3c 38 26 26 28 63 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 75 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 31 2f 33 29 29 2c 69 2b 2b 29 2c 72 2b 2b 7d 28 29 3b 76 61 72 20 73 3d 5b 5d 2c 6c 3d 61 2e 53 48 41 32 35 36 3d 6f 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 69 2e 69 6e 69 74 28 63 2e 73 6c 69 63 65 28 30 29 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 72 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 2c 6f 3d 6e 5b 32 5d 2c 61 3d 6e 5b 33 5d 2c 63 Data Ascii: ar r=2,i=0;i<64;)e(r)&&(i<8&&(c[i]=n(t.pow(r,.5))),u[i]=n(t.pow(r,1/3)),i++),r++}();var s=[],l=a.SHA256=o.extend({_doReset:function(){this._hash=new i.init(c.slice(0))},_doProcessBlock:function(t,e){for(var n=this._hash.words,r=n[0],i=n[1],o=n[2],a=n[3],c
2024-04-24 17:31:20 UTC	1379	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 69 3d 72 2e 6c 65 6e 67 74 68 3b 66 75 Data Ascii: function(t){return new this((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(t);if(0===r.length)return e([]);var i=r.length;fu
2024-04-24 17:31:20 UTC	1379	IN	Data Raw: 64 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 28 72 3d 6e 2c 69 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 63 61 74 63 68 28 65 29 7b 66 28 74 2c 65 29 7d 76 61 72 20 72 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 28 28 66 75 6e Data Ascii: d(t);if("function"==typeof n)return void p((r=n,i=e,function(){r.apply(i,arguments)}),t)}t._state=1,t._value=e,d(t)}catch(e){f(t,e)}var r,i}function f(t,e){t._state=2,t._value=e,d(t)}function d(t){2===t._state&&0===t._deferreds.length&&u._immediateFn((fun
2024-04-24 17:31:20 UTC	1379	IN	Data Raw: 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 75 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 61 28 74 29 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 75 2e 72 65 73 6f 6c 76 65 28 74 5b 72 5d 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 2c 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 26 26 66 75 6e 63 Data Ascii: ew u((function(e,n){n(t)}))},u.race=function(t){return new u((function(e,n){if(!a(t))return n(new TypeError("Promise.race accepts an array"));for(var r=0,i=t.length;r<i;r++)u.resolve(t[r]).then(e,n)}))},u._immediateFn="function"==typeof setImmediate&&func
2024-04-24 17:31:20 UTC	1379	IN	Data Raw: 3d 69 29 74 68 72 6f 77 20 6f 3b 72 65 74 75 72 6e 20 43 28 29 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 69 2c 6e 2e 61 72 67 3d 6f 3b 3b 29 7b 76 61 72 20 61 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 61 29 7b 76 61 72 20 63 3d 67 28 61 2c 6e 29 3b 69 66 28 63 29 7b 69 66 28 63 3d 3d 3d 6c 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 63 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d 6e 2e 5f 73 65 6e 74 3d 6e 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7b 69 66 28 22 73 75 73 70 65 6e 64 65 64 53 74 61 72 74 22 3d 3d 3d 72 29 74 68 72 6f 77 20 72 3d 22 63 6f 6d 70 6c 65 74 65 64 22 2c 6e 2e 61 72 67 3b 6e 2e 64 69 73 70 61 74 63 68 45 78 63 65 70 74 69 Data Ascii: =i)throw o;return C()}for(n.method=i,n.arg=o;;){var a=n.delegate;if(a){var c=g(a,n);if(c){if(c===l)continue;return c}}if("next"===n.method)n.sent=n._sent=n.arg;else if("throw"===n.method){if("suspendedStart"===r)throw r="completed",n.arg;n.dispatchExcepti
2024-04-24 17:31:20 UTC	1379	IN	Data Raw: 2c 61 29 7d 29 29 7d 72 65 74 75 72 6e 20 72 3d 72 3f 72 2e 74 68 65 6e 28 61 2c 61 29 3a 61 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 69 74 65 72 61 74 6f 72 5b 65 2e 6d 65 74 68 6f 64 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 69 66 28 65 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 7b 69 66 28 74 2e 69 74 65 72 61 74 6f 72 2e 72 65 74 75 72 6e 26 26 28 65 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 65 2e 61 72 67 3d 76 6f 69 64 20 30 2c 67 28 74 2c 65 29 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 29 72 65 74 75 72 6e 20 6c 3b 65 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 65 2e 61 72 67 3d 6e 65 77 20 54 79 70 65 45 72 Data Ascii: ,a)}))}return r=r?r.then(a,a):a()}}function g(t,e){var n=t.iterator[e.method];if(void 0===n){if(e.delegate=null,"throw"===e.method){if(t.iterator.return&&(e.method="return",e.arg=void 0,g(t,e),"throw"===e.method))return l;e.method="throw",e.arg=new TypeEr
2024-04-24 17:31:20 UTC	1379	IN	Data Raw: 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 21 21 65 26 26 28 65 3d 3d 3d 64 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 29 29 7d 2c 74 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 68 29 3a 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 68 2c 63 28 74 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 3d Data Ascii: ion=function(t){var e="function"==typeof t&&t.constructor;return!!e&&(e===d\|\|"GeneratorFunction"===(e.displayName\|\|e.name))},t.mark=function(t){return Object.setPrototypeOf?Object.setPrototypeOf(t,h):(t.__proto__=h,c(t,a,"GeneratorFunction")),t.prototype=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49934	151.101.129.140	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:20 UTC	678	OUT	GET /rp.gif?ts=1713979875480&id=t2_ewwvmnuh&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=cb2d649f-3168-41a8-8246-f3b3ccc5e846&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_72595d5a&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:20 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:20 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 17:31:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49933	151.101.129.140	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:20 UTC	678	OUT	GET /rp.gif?ts=1713979875477&id=t2_ewwvmnuh&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=cb2d649f-3168-41a8-8246-f3b3ccc5e846&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_72595d5a&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:20 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:20 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 17:31:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49932	34.239.87.50	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:20 UTC	592	OUT	GET /sync?UIDM=fe876021-fc99-4e31-8bfa-461e893fb9c2 HTTP/1.1 Host: partners.tremorhub.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:20 UTC	513	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 17:31:20 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' Set-Cookie: tvid=72224e42f10045a6ba0e51111b54ed0b; Domain=.tremorhub.com; Expires=Thu, 24-Apr-2025 23:19:40 GMT; Path=/; Secure; SameSite=None Set-Cookie: tv_UIDM=fe876021-fc99-4e31-8bfa-461e893fb9c2; Domain=.tremorhub.com; Expires=Sat, 25-Apr-2026 05:08:00 GMT; Path=/; Secure; SameSite=None
2024-04-24 17:31:20 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-24 17:31:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49936	172.64.151.101	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:20 UTC	700	OUT	GET /rum?cm_dsp_id=18&expiry=1729791079&external_user_id=fe876021-fc99-4e31-8bfa-461e893fb9c2&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZilB6NHM7SQAABTcAUcnXwAA; CMPS=004; CMPRO=004
2024-04-24 17:31:21 UTC	987	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:21 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8797d3911efb09fd-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZilB6NHM7SQAABTcAUcnXwAA; Path=/; Domain=casalemedia.com; Expires=Thu, 24 Apr 2025 17:31:21 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=004; Path=/; Domain=casalemedia.com; Expires=Tue, 23 Jul 2024 17:31:21 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SfsTGBVXtHYJ%2FzefBr399DXnMGDueM81i4mC6Fcqe9wV7E%2BdoEeC%2FDeBM7HRX5g1E5jf8kjiwWib4SHpM3NNX2HRGBTxFVuiPBY7Tm7TnraCw%2FWEzl6yO1qIQh%2FL5UsB6mChKF9047iL1A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-24 17:31:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49937	142.250.141.103	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:20 UTC	580	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-3776042-30&cid=1808248659.1713979875&jid=746412766&_u=YEBAAEAAAAAAACgEK~&z=275738162 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:21 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 17:31:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49942	74.125.137.157	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:21 UTC	1054	OUT	GET /ddm/fls/z/dc_pre=CNSLyc6w24UDFa6rOgUd8DEN-w;src=9401320;type=pagev0;cat=globa002;ord=1;num=8823647633995;npa=0;auiddc=;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;ps=1;pcor=872077554;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:21 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 17:31:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49943	74.125.137.157	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:21 UTC	1090	OUT	GET /ddm/fls/z/dc_pre=CK3dyM6w24UDFaywOgUd4ZMBrw;src=9401320;type=pagev0;cat=globa000;ord=1;num=9361925215703;npa=0;auiddc=;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=975646958;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:21 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 17:31:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49945	151.101.1.140	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:21 UTC	397	OUT	OPTIONS /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Origin: https://alb.reddit.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:21 UTC	644	IN	HTTP/1.1 204 No Content Connection: close Server: Varnish Retry-After: 0 Access-Control-Allow-Origin: https://alb.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:21 GMT Via: 1.1 varnish Vary: Origin Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49946	18.239.199.122	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:21 UTC	437	OUT	GET /bg9s?x-amz-cf-id=OznblQ-PVIxSDjoWNTSYCMVsyByy0sqndINohh9m34eMdMFtacJBMQ==&api-version=v2 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:21 UTC	584	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 08:43:36 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 e45fbcf5a3b995bcd8a0013f6fa17c0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P3 X-Amz-Cf-Id: gUnkVSya-zo-pGmvCkhnd4vcxY9crRajgwSjlEBEwumVGc1bnJ4veA== Age: 31666 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49947	34.239.87.50	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:21 UTC	485	OUT	GET /sync?UIDM=fe876021-fc99-4e31-8bfa-461e893fb9c2 HTTP/1.1 Host: partners.tremorhub.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tvid=72224e42f10045a6ba0e51111b54ed0b; tv_UIDM=fe876021-fc99-4e31-8bfa-461e893fb9c2
2024-04-24 17:31:21 UTC	369	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 17:31:21 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' Set-Cookie: tv_UIDM=fe876021-fc99-4e31-8bfa-461e893fb9c2; Domain=.tremorhub.com; Expires=Sat, 25-Apr-2026 05:08:01 GMT; Path=/; Secure; SameSite=None
2024-04-24 17:31:21 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-24 17:31:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49941	67.220.226.234	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:21 UTC	599	OUT	GET /s/iu3?pid=890f9a2a-f5c2-415f-82e9-09a1f0694ac9&event=PageView&ts=1713979879966 HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:21 UTC	782	IN	HTTP/1.1 302 Found Server: Server Date: Wed, 24 Apr 2024 17:31:21 GMT Content-Length: 0 Connection: close x-amz-rid: EHD2W1SYMZ86FJZ7X25H Set-Cookie: ad-id=Ay5qx_zsFkCLnhRKsF8cooY\|t; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 17:31:21 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://aax-eu.amazon-adsystem.com/s/iu3?pid=890f9a2a-f5c2-415f-82e9-09a1f0694ac9&event=PageView&ts=1713979879966&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49940	52.200.154.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:21 UTC	799	OUT	GET /_/ad/9cf7274f1587405384d41bb446f7e005/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:21 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 24 Apr 2024 17:31:21 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,0df1b08b0cb61f4344ac1cef828a7321,10.0.0.98,50196,154.16.105.36,,232060894979,1,1713979881.476,0.005,,.,0,0,0.004,0.008,-,0,0,203,218,109,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-24 17:31:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49948	172.64.151.101	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:21 UTC	500	OUT	GET /rum?cm_dsp_id=18&expiry=1729791079&external_user_id=fe876021-fc99-4e31-8bfa-461e893fb9c2&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZilB6NHM7SQAABTcAUcnXwAA; CMPS=004; CMPRO=004
2024-04-24 17:31:22 UTC	983	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:22 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8797d3968e3f0acf-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZilB6NHM7SQAABTcAUcnXwAA; Path=/; Domain=casalemedia.com; Expires=Thu, 24 Apr 2025 17:31:22 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=004; Path=/; Domain=casalemedia.com; Expires=Tue, 23 Jul 2024 17:31:22 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3QmUJWQHsbDT56SZBB2iAUyJFEsk1xO17jkSmhXxKixZmhTpzTHW2mI71kQy4OtSdmgGobdJH7gdXDUXSpOmm%2BFEp%2BaTWQw1pPX3V%2BSXchRVENBwlqhNs9fCznhqrsnB42kZ9s9wEtyRiw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-24 17:31:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49949	151.101.1.140	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:21 UTC	340	OUT	POST /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Content-Length: 718 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:21 UTC	718	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 30 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 33 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 35 31 2e 31 30 31 2e 31 32 39 2e 31 34 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 62 2e 72 65 64 64 69 74 2e 63 6f 6d 2f 72 70 2e 67 69 66 3f Data Ascii: [{"age":1,"body":{"elapsed_time":801,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":0.3,"server_ip":"151.101.129.140","status_code":200,"type":"ok"},"type":"network-error","url":"https://alb.reddit.com/rp.gif?
2024-04-24 17:31:22 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 content-type: text/plain; charset=utf-8 Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:22 GMT Via: 1.1 varnish Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block server: snooserv Access-Control-Allow-Origin: https://www.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49952	18.164.174.99	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:21 UTC	540	OUT	GET /rules-p-W92Yh-Yvb160e.js HTTP/1.1 Host: rules.quantcount.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:22 UTC	661	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3899 Connection: close Date: Wed, 24 Apr 2024 17:31:23 GMT Last-Modified: Thu, 13 Oct 2022 15:29:21 GMT ETag: "6eafacfe7d21f1b942a0d5e1d14679ac" x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Server: AmazonS3 Cross-Origin-Resource-Policy: cross-origin access-control-allow-origin: * access-control-allow-methods: GET Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 ccd9e90498220a3d4a57f6ca6c1664f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P4 X-Amz-Cf-Id: gycE5aj7KcYyOv0cbNmvgCEq0LxSBrvQIZzpg4PFo4Zsmojf9wYnzQ==
2024-04-24 17:31:22 UTC	3899	IN	Data Raw: 2f 2a 0a 20 51 75 61 6e 74 63 61 73 74 20 6d 65 61 73 75 72 65 6d 65 6e 74 20 74 61 67 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 38 2d 32 30 32 32 2c 20 51 75 61 6e 74 63 61 73 74 20 43 6f 72 70 2e 0a 2a 2f 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 28 66 75 6e 63 74 69 6f 6e 28 61 2c 6b 2c 68 29 7b 76 61 72 20 6c 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 65 3d 68 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 65 2e 68 72 65 66 3d 64 3b 72 65 74 75 72 6e 20 65 7d 2c 6d 3d 5b 2f 5e 68 74 74 70 5b 73 5d 3f 3a 5c 2f 5c 2f 28 28 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 2a 29 7c 28 5b 5e 5c 2f 5d 2a 66 6c 73 5c 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 5c 2e 6e 65 74 29 29 5c 2f 2e 2a 7e 6f 72 65 66 3d 28 3f 3c 75 72 6c Data Ascii: /* Quantcast measurement tag Copyright (c) 2008-2022, Quantcast Corp./'use strict';(function(a,k,h){var l=function(d){var e=h.createElement("a");e.href=d;return e},m=[/^http[s]?:\/\/((adservice.google.)\|([^\/]fls\.doubleclick\.net))\/.~oref=(?<url

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49950	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:21 UTC	1487	OUT	GET /activity;register_conversion=1;src=9401320;type=pagev0;cat=globa000;ord=1;num=9361925215703;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=975646958;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc
2024-04-24 17:31:22 UTC	2222	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"7606361524068387752"}],"aggregatable_trigger_data":[{"filters":[{"14":["9625591"]}],"key_piece":"0xb6889d81b637834c","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xc7f062f1da66ad3f","not_filters":{"14":["9625591"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["9625591"]}],"key_piece":"0xeecd4d7702d5cf56","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x329af3b40b7d0761","not_filters":{"14":["9625591"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"17396340308971625341","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"7606361524068387752","filters":[{"14":["9625591"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"7606361524068387752","filters":[{"14":["9625591"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"7606361524068387752","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"7606361524068387752","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["9401320"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 17:31:22 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49951	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:21 UTC	1446	OUT	GET /activity;register_conversion=1;src=9401320;type=pagev0;cat=globa002;ord=1;num=8823647633995;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;ps=1;pcor=872077554;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc
2024-04-24 17:31:22 UTC	2227	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"6888027977880552653"}],"aggregatable_trigger_data":[{"filters":[{"14":["11394278"]}],"key_piece":"0x12da3d5f1ce2811d","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x1501c99c6a0b32cf","not_filters":{"14":["11394278"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["11394278"]}],"key_piece":"0x5259a2b839f1de8c","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x9f04d31bac8cd323","not_filters":{"14":["11394278"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"5190770408441288536","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"6888027977880552653","filters":[{"14":["11394278"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"6888027977880552653","filters":[{"14":["11394278"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"6888027977880552653","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"6888027977880552653","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["9401320"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 17:31:22 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49953	104.254.150.241	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:22 UTC	859	OUT	GET /pixie?e=LandingPage&pi=a8c07fef-3f0b-43ec-b0fb-3e4bc99c03b5&it=1713979877474&v=0.0.24&u=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&st=1713979877474&et=1713979877474&if=0 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:22 UTC	300	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Wed, 24 Apr 2024 17:31:22 GMT Content-Type: image/gif Content-Length: 42 Connection: close Cache-Control: no-cache, no-store, must-revalidate X-Proxy-Origin: 154.16.105.36; 154.16.105.36; 906.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com
2024-04-24 17:31:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49954	35.155.89.175	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:22 UTC	932	OUT	GET /sp.pl?a=10000&d=Wed%2C%2024%20Apr%202024%2017%3A31%3A18%20GMT&n=-2d&b=Manage%20Invoices%20with%20Xero%20Accounting%20Software%20%7C%20Xero%20US&.yp=10175613&f=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&enc=UTF-8&yv=1.15.1&tagmgr=gtm HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:22 UTC	938	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:22 GMT Expires: Wed, 24 Apr 2024 17:31:22 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS/9.1.10.106 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.106) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBOpBKWYCEDUbr1k9Xo4DARqqvTIt6UwFEgEBAQGTKmYzZtws0iMA_eMAAA&S=AQAAAgn0wglSfOJqhUp_cYYRBZk; Expires=Thu, 24 Apr 2025 23:31:22 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-04-24 17:31:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49955	52.200.154.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:22 UTC	567	OUT	GET /_/ad/9cf7274f1587405384d41bb446f7e005/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:22 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 24 Apr 2024 17:31:22 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,5d705ce095b442543cd92ab42358b3df,10.0.0.98,21052,154.16.105.36,,232060902629,1,1713979882.538,0.002,,.,0,0,0.000,0.000,-,0,0,203,225,112,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-24 17:31:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49956	67.220.226.234	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:22 UTC	646	OUT	GET /s/iu3?pid=890f9a2a-f5c2-415f-82e9-09a1f0694ac9&event=PageView&ts=1713979879966&dcc=t HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=Ay5qx_zsFkCLnhRKsF8cooY\|t
2024-04-24 17:31:23 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 17:31:23 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: F1Z95699GQ9TPF0DFH4B Set-Cookie: ad-id=Ay5qx_zsFkCLnhRKsF8cooY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 17:31:23 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 17:31:23 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 17:31:23 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49961	31.13.70.36	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:22 UTC	983	OUT	GET /tr/?id=303901320544451&ev=PageView&dl=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&rl=&if=false&ts=1713979879607&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.1.1713979879599.1913881180&cs_est=true&ler=empty&cdl=API_unavailable&it=1713979876212&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:23 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 17:31:23 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49958	35.244.154.8	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:22 UTC	578	OUT	GET /464526.gif HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:23 UTC	664	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://id.rlcdn.com/1000.gif?memo=CI6tHBoNCOuDpbEGEgUI6AcQAEIASgA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=gKS3Wa4jxzEnx2UASb9lmwFx6wLYASAWx4oFCPLVVrA=; Path=/; Domain=rlcdn.com; Expires=Thu, 24 Apr 2025 17:31:23 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Sun, 23 Jun 2024 17:31:23 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Wed, 24 Apr 2024 17:31:23 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49960	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:22 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 135 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:22 UTC	135	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 78 65 72 6f 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 35 31 39 30 37 37 30 34 30 38 34 34 31 32 38 38 35 33 36 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://xero.com","trigger_debug_key":"5190770408441288536"},"type":"trigger-no-matching-source"}]
2024-04-24 17:31:23 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 17:31:23 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49962	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:22 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:22 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 78 65 72 6f 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 37 33 39 36 33 34 30 33 30 38 39 37 31 36 32 35 33 34 31 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://xero.com","trigger_debug_key":"17396340308971625341"},"type":"trigger-no-matching-source"}]
2024-04-24 17:31:23 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 17:31:23 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49964	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:22 UTC	1153	OUT	GET /activity;register_conversion=1;src=9401320;type=pagev0;cat=globa002;ord=1;num=8823647633995;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;ps=1;pcor=872077554;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:31:23 UTC	2227	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"6888027977880552653"}],"aggregatable_trigger_data":[{"filters":[{"14":["11394278"]}],"key_piece":"0x12da3d5f1ce2811d","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x1501c99c6a0b32cf","not_filters":{"14":["11394278"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["11394278"]}],"key_piece":"0x5259a2b839f1de8c","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x9f04d31bac8cd323","not_filters":{"14":["11394278"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"5190770408441288536","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"6888027977880552653","filters":[{"14":["11394278"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"6888027977880552653","filters":[{"14":["11394278"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"6888027977880552653","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"6888027977880552653","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["9401320"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 17:31:23 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49963	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:22 UTC	1189	OUT	GET /activity;register_conversion=1;src=9401320;type=pagev0;cat=globa000;ord=1;num=9361925215703;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=975646958;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:31:23 UTC	2222	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"7606361524068387752"}],"aggregatable_trigger_data":[{"filters":[{"14":["9625591"]}],"key_piece":"0xb6889d81b637834c","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xc7f062f1da66ad3f","not_filters":{"14":["9625591"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["9625591"]}],"key_piece":"0xeecd4d7702d5cf56","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x329af3b40b7d0761","not_filters":{"14":["9625591"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"17396340308971625341","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"7606361524068387752","filters":[{"14":["9625591"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"7606361524068387752","filters":[{"14":["9625591"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"7606361524068387752","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"7606361524068387752","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["9401320"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 17:31:23 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49965	31.13.70.36	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:22 UTC	1093	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=303901320544451&ev=PageView&dl=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&rl=&if=false&ts=1713979879607&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.1.1713979879599.1913881180&cs_est=true&ler=empty&cdl=API_unavailable&it=1713979876212&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source;navigation-source Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:23 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 17:31:23 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 17:31:23 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 17:31:23 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 17:31:23 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49959	104.254.151.68	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:22 UTC	627	OUT	GET /pixie?e=LandingPage&pi=a8c07fef-3f0b-43ec-b0fb-3e4bc99c03b5&it=1713979877474&v=0.0.24&u=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&st=1713979877474&et=1713979877474&if=0 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:23 UTC	300	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Wed, 24 Apr 2024 17:31:23 GMT Content-Type: image/gif Content-Length: 42 Connection: close Cache-Control: no-cache, no-store, must-revalidate X-Proxy-Origin: 154.16.105.36; 154.16.105.36; 904.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com
2024-04-24 17:31:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49966	31.13.70.36	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:22 UTC	1091	OUT	GET /tr/?id=303901320544451&ev=referrerSource&dl=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&rl=&if=false&ts=1713979879612&cd[utm_source]=xero-invoice&cd[utm_medium]=referral&cd[utm_campaign]=global-d-lf-xeroinvoicereferrals&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=1&o=4126&fbp=fb.1.1713979879599.1913881180&ler=empty&cdl=API_unavailable&it=1713979876212&coo=false&up=hostname&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:23 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 17:31:23 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49967	35.155.89.175	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:23 UTC	807	OUT	GET /sp.pl?a=10000&d=Wed%2C%2024%20Apr%202024%2017%3A31%3A18%20GMT&n=-2d&b=Manage%20Invoices%20with%20Xero%20Accounting%20Software%20%7C%20Xero%20US&.yp=10175613&f=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&enc=UTF-8&yv=1.15.1&tagmgr=gtm HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBOpBKWYCEDUbr1k9Xo4DARqqvTIt6UwFEgEBAQGTKmYzZtws0iMA_eMAAA&S=AQAAAgn0wglSfOJqhUp_cYYRBZk
2024-04-24 17:31:23 UTC	952	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:23 GMT Expires: Wed, 24 Apr 2024 17:31:23 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: application/x-javascript Accept-Ranges: bytes Content-Length: 0 Server: ATS/9.1.10.106 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.106) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBOpBKWYCEDUbr1k9Xo4DARqqvTIt6UwFEgEBAQGTKmYzZtws0iMA_eMAAA&S=AQAAAgn0wglSfOJqhUp_cYYRBZk; Expires=Thu, 24 Apr 2025 23:31:23 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49968	31.13.70.36	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:23 UTC	1206	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=303901320544451&ev=referrerSource&dl=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&rl=&if=false&ts=1713979879612&cd[utm_source]=xero-invoice&cd[utm_medium]=referral&cd[utm_campaign]=global-d-lf-xeroinvoicereferrals&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=1&o=4126&fbp=fb.1.1713979879599.1913881180&ler=empty&cdl=API_unavailable&it=1713979876212&coo=false&up=hostname&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:23 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 17:31:23 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 17:31:23 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 17:31:23 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 17:31:23 UTC	4	IN	Data Raw: 60 82 0d 0a Data Ascii: `
2024-04-24 17:31:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49970	35.244.154.8	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:23 UTC	684	OUT	GET /1000.gif?memo=CI6tHBoNCOuDpbEGEgUI6AcQAEIASgA HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=gKS3Wa4jxzEnx2UASb9lmwFx6wLYASAWx4oFCPLVVrA=; pxrc=CAA=
2024-04-24 17:31:23 UTC	735	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://segments.company-target.com/log?vendor=liveramp&user_id=Xc1297RCZqjCKaMYtrVX5b-1GinLGwoALW3nomJOZMM9LMhXY P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=gKS3Wa4jxzEnx2UASb9lmwFx6wLYASAWx4oFCPLVVrA=; Path=/; Domain=rlcdn.com; Expires=Thu, 24 Apr 2025 17:31:23 GMT; Secure; SameSite=None Set-Cookie: pxrc=COuDpbEGEgUI6AcQABIGCMrdKhAA; Path=/; Domain=rlcdn.com; Expires=Sun, 23 Jun 2024 17:31:23 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Wed, 24 Apr 2024 17:31:23 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49973	31.13.70.36	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:23 UTC	751	OUT	GET /tr/?id=303901320544451&ev=PageView&dl=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&rl=&if=false&ts=1713979879607&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.1.1713979879599.1913881180&cs_est=true&ler=empty&cdl=API_unavailable&it=1713979876212&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:23 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=160, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 17:31:23 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49972	31.13.70.36	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:23 UTC	788	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=303901320544451&ev=PageView&dl=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&rl=&if=false&ts=1713979879607&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.1.1713979879599.1913881180&cs_est=true&ler=empty&cdl=API_unavailable&it=1713979876212&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:23 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 17:31:23 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 17:31:23 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49974	31.13.70.36	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:23 UTC	859	OUT	GET /tr/?id=303901320544451&ev=referrerSource&dl=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&rl=&if=false&ts=1713979879612&cd[utm_source]=xero-invoice&cd[utm_medium]=referral&cd[utm_campaign]=global-d-lf-xeroinvoicereferrals&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=1&o=4126&fbp=fb.1.1713979879599.1913881180&ler=empty&cdl=API_unavailable&it=1713979876212&coo=false&up=hostname&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:23 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 17:31:23 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49971	104.244.42.197	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:23 UTC	1041	OUT	GET /i/adsct?bci=3&eci=2&event_id=051fde79-a6cb-4b0b-8627-02441e87e4e1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=db215465-1a74-4c4e-b811-94bd4dd8b457&tw_document_href=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nygt4&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:24 UTC	551	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 17:31:23 GMT perf: 7402827104 server: tsa_p set-cookie: muc_ads=8a6b78c7-1529-4396-840d-f87e70f062de; Max-Age=63072000; Expires=Fri, 24 Apr 2026 17:31:23 GMT; Path=/; Domain=t.co; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 95dc18a49035cd92 strict-transport-security: max-age=0 x-response-time: 6 x-connection-hash: 80a2cb1c025b9cc4272fde0cc720fb8c54b60655a21621598686d40ef3338897 connection: close
2024-04-24 17:31:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49976	104.244.42.3	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:23 UTC	1058	OUT	GET /i/adsct?bci=3&eci=2&event_id=051fde79-a6cb-4b0b-8627-02441e87e4e1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=db215465-1a74-4c4e-b811-94bd4dd8b457&tw_document_href=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nygt4&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:24 UTC	571	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 17:31:23 GMT perf: 7402827104 server: tsa_p set-cookie: personalization_id="v1_f58PXPQs7cnhT5q89JomeA=="; Max-Age=63072000; Expires=Fri, 24 Apr 2026 17:31:24 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: ea08e8286380462c strict-transport-security: max-age=631138519 x-response-time: 4 x-connection-hash: 74a29563d04451c5ab80db3dcd6093fd28e0172568b3c804ee80bbeb5141cd67 connection: close
2024-04-24 17:31:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49979	3.163.125.9	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:23 UTC	711	OUT	GET /aat?pid=890f9a2a-f5c2-415f-82e9-09a1f0694ac9&event=PageView&ts=1713979879966 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: not-navigation-source, trigger=event-source Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:24 UTC	575	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 17:31:24 GMT x-amzn-RequestId: 22621f3a-e243-4c65-9f56-caf80de6bc87 Access-Control-Allow-Origin: https://www.xero.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 39294592d7b8532e25ebe5b03dba0bf2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX54-P1 X-Amz-Cf-Id: dWJjancXI6S7pieMe5GCRvDYSUdpFvf3K0e4qiWFQ73D3ggvV7Ktlg==
2024-04-24 17:31:24 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49978	192.184.67.40	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:24 UTC	1491	OUT	GET /pixel;r=894404161;labels=_fp.event.Default;rf=0;a=p-W92Yh-Yvb160e;url=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals;uh=e51ed67dfb8d91dc24b15e2ace0c3bc33bc53c3e1dfb09200d6c2f8387d67ea6;uht=2;fpan=1;fpa=P0-258918544-1713979877376;pbc=;ns=0;ce=1;qjs=1;qv=b70d35e8-20231208114759;cm=;gdpr=0;ref=;d=xero.com;dst=1;et=1713979882040;tzo=-120;ogl=type.website%2Csite_name.Xero%2Ctitle.Manage%20Invoices%20with%20Xero%20Accounting%20Software%2Cdescription.Bookkeeping%20software%20that%20gets%20the%20job%20done%20online%252E%20Flexible%20features%20mean%20you%20c%2Curl.https%3A%2F%2Fwww%252Exero%252Ecom%2Fus%2Ftry-now%2Fmanage-invoices%2F%2Cimage.https%3A%2F%2Fwww%252Exero%252Ecom%2Fcontent%2Fdam%2Fxero%2Fpilot-images%2Fopengraph%2Fopengraph-xero%252Epng;ses=688cc578-a4f3-468e-93b3-c03a371ed92a;mdl= HTTP/1.1 Host: pixel.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:24 UTC	492	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:24 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: mc=662941ec-5186d-76493-25abf; expires=Sun, 25-May-2025 17:31:24 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400
2024-04-24 17:31:24 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 80 ff ff ff 00 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49981	31.13.70.36	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:24 UTC	896	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=303901320544451&ev=referrerSource&dl=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&rl=&if=false&ts=1713979879612&cd[utm_source]=xero-invoice&cd[utm_medium]=referral&cd[utm_campaign]=global-d-lf-xeroinvoicereferrals&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=1&o=4126&fbp=fb.1.1713979879599.1913881180&ler=empty&cdl=API_unavailable&it=1713979876212&coo=false&up=hostname&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:24 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 17:31:24 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 17:31:24 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49980	52.95.118.179	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:24 UTC	487	OUT	GET /s/iu3?pid=890f9a2a-f5c2-415f-82e9-09a1f0694ac9&event=PageView&ts=1713979879966&dcc=t HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=Ay5qx_zsFkCLnhRKsF8cooY; ad-privacy=0
2024-04-24 17:31:24 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 17:31:24 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: Q785X799YN4251K2HZJ7 Set-Cookie: ad-id=Ay5qx_zsFkCLnhRKsF8cooY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 17:31:24 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 17:31:24 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 17:31:24 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49982	216.137.39.63	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:24 UTC	750	OUT	GET /log?vendor=liveramp&user_id=Xc1297RCZqjCKaMYtrVX5b-1GinLGwoALW3nomJOZMM9LMhXY HTTP/1.1 Host: segments.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=fe876021-fc99-4e31-8bfa-461e893fb9c2; tuuid_lu=1713979879\|ix:0\|mctv:0\|rp:0
2024-04-24 17:31:24 UTC	317	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 26 Connection: close Date: Wed, 24 Apr 2024 17:31:24 GMT X-Cache: Miss from cloudfront Via: 1.1 3c0c0202765b2b7b973e2ad3371dd028.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P2 X-Amz-Cf-Id: 83VFZeJwx9C6__WT5PeQ_WURyksqOMZL3iPr1MipsHBHblvs8N23kg==
2024-04-24 17:31:24 UTC	26	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b Data Ascii: GIF89a,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49983	142.250.141.105	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:24 UTC	1818	OUT	GET /pagead/1p-conversion/1023673485/?random=1606056812&cv=11&fst=1713979877268&bg=ffffff&guid=ON&async=1&gtm=45be44m0v883646161z8830923470za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&label=v0RbCOHw2eECEI2JkOgD&hn=www.googleadservices.com&frm=0&tiba=Manage%20Invoices%20with%20Xero%20Accounting%20Software%20%7C%20Xero%20US&value=0&npa=0&pscdl=noapi&auid=1776741404.1713979872&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&sscte=1&crd=CNm5sQIIscGxAgiwwbECCLnBsQIImMGxAiIBATgBQAFKJ3RyaWdnZXI7bmF2aWdhdGlvbi1zb3VyY2UsIGV2ZW50LXNvdXJjZWIECgICAw&pscrd=CIOk5K6elJ7SRiITCO326M-w24UDFbFHCAQdeJYNQTICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhVodHRwczovL3d3dy54ZXJvLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtq26IbF5KH7DmfD2fsADC3oqWjH8GDMwtUJti4SGgNvyKKpViO&eitems=ChAI8NuisQYQpLKG6LHZ3MozEh0AIjyJprIUcoN557kAQiZIdFleeMuK_KZygEbuWw&random=1023827322 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:24 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 17:31:24 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49984	104.244.42.5	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:24 UTC	863	OUT	GET /i/adsct?bci=3&eci=2&event_id=051fde79-a6cb-4b0b-8627-02441e87e4e1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=db215465-1a74-4c4e-b811-94bd4dd8b457&tw_document_href=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nygt4&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=8a6b78c7-1529-4396-840d-f87e70f062de
2024-04-24 17:31:24 UTC	392	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 17:31:24 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: db0ccc71ea81f1ef strict-transport-security: max-age=0 x-response-time: 5 x-connection-hash: 200a51543e1651dac8bc22f465187371d09f1ad7f2985508eaf891fcae55d1f4 connection: close
2024-04-24 17:31:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49987	3.163.125.74	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:24 UTC	436	OUT	GET /aat?pid=890f9a2a-f5c2-415f-82e9-09a1f0694ac9&event=PageView&ts=1713979879966 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:25 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 17:31:24 GMT x-amzn-RequestId: 98e1d226-1ef7-4ee3-be15-f1ac43af0266 X-Cache: Miss from cloudfront Via: 1.1 1ed6fd954a8420b9530d4d0b1d46e66e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX54-P1 X-Amz-Cf-Id: Fbusf3exV5GMOgywllL9TI_kFxxLA-DgcURQLrILacRS9Rnexjlh5g==
2024-04-24 17:31:25 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49986	104.244.42.3	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:24 UTC	884	OUT	GET /i/adsct?bci=3&eci=2&event_id=051fde79-a6cb-4b0b-8627-02441e87e4e1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=db215465-1a74-4c4e-b811-94bd4dd8b457&tw_document_href=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nygt4&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_f58PXPQs7cnhT5q89JomeA=="
2024-04-24 17:31:25 UTC	400	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 17:31:24 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 819d66c3a6108b4f strict-transport-security: max-age=631138519 x-response-time: 5 x-connection-hash: c9c3dbe87233f716cef7549ae4fe23f72e976194de451660e271a55536a51264 connection: close
2024-04-24 17:31:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49985	54.162.198.104	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:24 UTC	601	OUT	POST /messenger/web/metrics HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive Content-Length: 1717 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://in.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:24 UTC	1717	OUT	Data Raw: 61 70 70 5f 69 64 3d 62 74 64 6e 36 36 76 34 26 76 3d 33 26 67 3d 65 61 39 33 63 32 34 37 38 37 39 36 61 30 66 35 33 63 32 35 65 39 39 31 30 66 63 33 35 33 38 35 61 39 63 39 64 65 64 65 26 73 3d 39 34 65 65 38 62 34 38 2d 66 32 30 32 2d 34 33 63 66 2d 62 33 63 37 2d 63 35 37 33 30 66 38 37 30 32 64 37 26 72 3d 26 70 6c 61 74 66 6f 72 6d 3d 77 65 62 26 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 5f 74 79 70 65 3d 6a 73 2d 73 6e 69 70 70 65 74 26 49 64 65 6d 70 6f 74 65 6e 63 79 2d 4b 65 79 3d 39 62 64 37 34 39 65 61 34 61 64 37 63 63 38 61 26 69 6e 74 65 72 6e 61 6c 3d 26 69 73 5f 69 6e 74 65 72 73 65 63 74 69 6f 6e 5f 62 6f 6f 74 65 64 3d 6e 75 6c 6c 26 70 61 67 65 5f 74 69 74 6c 65 3d 49 6e 76 6f 69 63 65 25 32 30 49 4e 56 2d 30 36 37 36 35 25 32 30 2d 25 32 30 Data Ascii: app_id=btdn66v4&v=3&g=ea93c2478796a0f53c25e9910fc35385a9c9dede&s=94ee8b48-f202-43cf-b3c7-c5730f8702d7&r=&platform=web&installation_type=js-snippet&Idempotency-Key=9bd749ea4ad7cc8a&internal=&is_intersection_booted=null&page_title=Invoice%20INV-06765%20-%20
2024-04-24 17:31:25 UTC	865	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:25 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Status: 200 OK Cache-Control: no-cache Access-Control-Allow-Origin: https://in.xero.com Vary: Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload Access-Control-Expose-Headers: x-request-id X-Intercom-Version: 1db554702d8d88016ebd5aee48225dc6c04dcb42 X-XSS-Protection: 1; mode=block X-Request-Queueing: 1000 X-Request-Id: 001l3uivo8lqks0736p0 Access-Control-Allow-Headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS X-Runtime: 0.031636 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Server: nginx x-ami-version: ami-07f0efd8322b9d369
2024-04-24 17:31:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49988	192.184.67.40	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:24 UTC	1298	OUT	GET /pixel;r=894404161;labels=_fp.event.Default;rf=0;a=p-W92Yh-Yvb160e;url=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals;uh=e51ed67dfb8d91dc24b15e2ace0c3bc33bc53c3e1dfb09200d6c2f8387d67ea6;uht=2;fpan=1;fpa=P0-258918544-1713979877376;pbc=;ns=0;ce=1;qjs=1;qv=b70d35e8-20231208114759;cm=;gdpr=0;ref=;d=xero.com;dst=1;et=1713979882040;tzo=-120;ogl=type.website%2Csite_name.Xero%2Ctitle.Manage%20Invoices%20with%20Xero%20Accounting%20Software%2Cdescription.Bookkeeping%20software%20that%20gets%20the%20job%20done%20online%252E%20Flexible%20features%20mean%20you%20c%2Curl.https%3A%2F%2Fwww%252Exero%252Ecom%2Fus%2Ftry-now%2Fmanage-invoices%2F%2Cimage.https%3A%2F%2Fwww%252Exero%252Ecom%2Fcontent%2Fdam%2Fxero%2Fpilot-images%2Fopengraph%2Fopengraph-xero%252Epng;ses=688cc578-a4f3-468e-93b3-c03a371ed92a;mdl= HTTP/1.1 Host: pixel.quantserve.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=662941ec-5186d-76493-25abf
2024-04-24 17:31:25 UTC	354	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:25 GMT Content-Type: image/gif Content-Length: 35 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Pragma: no-cache Strict-Transport-Security: max-age=86400
2024-04-24 17:31:25 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 80 ff ff ff 00 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49989	162.247.243.39	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:25 UTC	550	OUT	GET /async-api.30bd804e-1.236.0.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:25 UTC	800	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2851 x-amz-id-2: m809l13MWR3iCePHeB9pxPYY2dIbkY2aa7qmGDOEXJHLJwAuWG8puf19SEWmtpcIiCOXdabXb1Q= x-amz-request-id: VDDB3WZQTYJPGNZK Last-Modified: Wed, 18 Oct 2023 20:57:40 GMT ETag: "ce1527db8799a0ba1913b5c7b7f666aa" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 x-amz-version-id: ClpGWMCBcYCUYENJA79oj7cgVuH6OaBw Content-Type: application/javascript Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:25 GMT Via: 1.1 varnish X-Served-By: cache-bur-kbur8200058-BUR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-04-24 17:31:25 UTC	1378	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 73 79 6e 63 2d 61 70 69 2e 33 30 62 64 38 30 34 65 2d 31 2e 32 33 36 2e 30 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 33 39 5d 2c 7b 37 38 37 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 6c 65 74 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d Data Ascii: /! For license information please see async-api.30bd804e-1.236.0.min.js.LICENSE.txt /"use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[439],{7872:(e,t,n)=>{function i(e){var t=this;let n=arguments.length>1&&void 0!==arguments[1]
2024-04-24 17:31:25 UTC	1378	IN	Data Raw: 3a 72 2e 72 65 64 75 63 65 28 28 28 65 2c 74 29 3d 3e 28 65 2e 70 75 73 68 28 5b 74 2e 6b 65 79 2c 74 2e 76 61 6c 75 65 5d 29 2c 65 29 29 2c 5b 5d 29 2c 62 6f 64 79 3a 6e 2c 6b 65 65 70 61 6c 69 76 65 3a 21 30 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 6c 65 74 7b 75 72 6c 3a 74 2c 62 6f 64 79 3a 6e 7d 3d 65 3b 74 72 79 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 2e 62 69 6e 64 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 29 28 74 2c 6e 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 7d 2c 37 34 33 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 73 65 74 41 50 49 3a 28 29 3d 3e 66 7d 29 3b 76 61 72 20 69 3d 6e 28 33 33 32 35 29 2c 72 3d Data Ascii: :r.reduce(((e,t)=>(e.push([t.key,t.value]),e)),[]),body:n,keepalive:!0})}function s(e){let{url:t,body:n}=e;try{return window.navigator.sendBeacon.bind(window.navigator)(t,n)}catch(e){return!1}}},7438:(e,t,n)=>{n.r(t),n.d(t,{setAPI:()=>f});var i=n(3325),r=
2024-04-24 17:31:25 UTC	95	IN	Data Raw: 29 7d 7d 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 70 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 6c 65 74 5b 6e 2c 69 5d 3d 65 3b 72 65 74 75 72 6e 28 30 2c 73 2e 58 29 28 22 61 70 69 2d 22 2b 6e 2c 69 2c 22 61 70 69 22 2c 74 29 7d 29 29 3b 76 61 72 20 76 3d 30 7d 7d 7d 5d 29 3b Data Ascii: )}}Object.entries(p).forEach((e=>{let[n,i]=e;return(0,s.X)("api-"+n,i,"api",t)}));var v=0}}}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49990	162.247.243.39	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:25 UTC	544	OUT	GET /860.03a8b7a5-1.236.0.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:25 UTC	821	IN	HTTP/1.1 200 OK Connection: close Content-Length: 14276 x-amz-id-2: uVApbKCQ7gk/+u0v3fx2oIXsvRLLBtMjnPCNkg0agSxRMlDoMjIZiZbXY5+hT6JRL1CA/dD12O43VZW1Fe0+EXLeDqh15h25 x-amz-request-id: 15TMHREZR3YYRY75 Last-Modified: Wed, 18 Oct 2023 20:57:05 GMT ETag: "5c2d33afe15ef1ea0f7dfd3d77677165" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 x-amz-version-id: gB9EP.5ryWZIwH7RQhX4oA68gOyGXPRc Content-Type: application/javascript Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:25 GMT Via: 1.1 varnish X-Served-By: cache-lax-kwhp1940066-LAX X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-04-24 17:31:25 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 36 30 5d 2c 7b 33 38 36 30 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 6e 2e 64 28 65 2c 7b 49 4b 3a 28 29 3d 3e 67 2c 77 4f 3a 28 29 3d 3e 62 2c 24 73 3a 28 29 3d 3e 45 7d 29 3b 76 61 72 20 72 3d 6e 28 34 34 30 32 29 2c 69 3d 6e 28 35 30 29 2c 73 3d 6e 28 34 33 35 31 29 2c 6f 3d 6e 28 32 31 37 37 29 3b 63 6c 61 73 73 20 61 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 2c 65 29 7b 69 66 28 21 74 2e 6f 6e 45 6e 64 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6f 6e 45 6e 64 20 68 61 6e 64 6c 65 72 20 69 73 20 72 65 71 75 69 72 65 64 22 29 3b Data Ascii: "use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[860],{3860:(t,e,n)=>{n.d(e,{IK:()=>g,wO:()=>b,$s:()=>E});var r=n(4402),i=n(50),s=n(4351),o=n(2177);class a{constructor(t,e){if(!t.onEnd)throw new Error("onEnd handler is required");
2024-04-24 17:31:25 UTC	1378	IN	Data Raw: 2e 61 62 6f 72 74 28 29 7d 70 61 75 73 65 28 29 7b 74 68 69 73 2e 6f 6e 50 61 75 73 65 28 29 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 74 69 6d 65 72 29 2c 74 68 69 73 2e 72 65 6d 61 69 6e 69 6e 67 4d 73 3d 74 68 69 73 2e 69 6e 69 74 69 61 6c 4d 73 2d 28 44 61 74 65 2e 6e 6f 77 28 29 2d 74 68 69 73 2e 73 74 61 72 74 54 69 6d 65 73 74 61 6d 70 29 7d 72 65 66 72 65 73 68 28 74 2c 65 29 7b 74 68 69 73 2e 63 6c 65 61 72 28 29 2c 74 68 69 73 2e 74 69 6d 65 72 3d 74 68 69 73 2e 63 72 65 61 74 65 28 74 2c 65 29 2c 74 68 69 73 2e 73 74 61 72 74 54 69 6d 65 73 74 61 6d 70 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 74 68 69 73 2e 72 65 6d 61 69 6e 69 6e 67 4d 73 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 6f 6e 52 65 66 72 65 73 68 28 29 7d 7d 76 61 72 20 64 3d Data Ascii: .abort()}pause(){this.onPause(),clearTimeout(this.timer),this.remainingMs=this.initialMs-(Date.now()-this.startTimestamp)}refresh(t,e){this.clear(),this.timer=this.create(t,e),this.startTimestamp=Date.now(),this.remainingMs=void 0,this.onRefresh()}}var d=
2024-04-24 17:31:25 UTC	1378	IN	Data Raw: 68 69 73 29 2c 74 68 69 73 2e 72 65 73 65 74 28 29 7d 2c 6f 6e 52 65 66 72 65 73 68 3a 74 68 69 73 2e 72 65 66 72 65 73 68 2e 62 69 6e 64 28 74 68 69 73 29 2c 6f 6e 52 65 73 75 6d 65 3a 28 29 3d 3e 7b 74 68 69 73 2e 65 65 2e 65 6d 69 74 28 62 2e 52 45 53 55 4d 45 29 7d 2c 6f 6e 50 61 75 73 65 3a 28 29 3d 3e 7b 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a 65 64 26 26 74 68 69 73 2e 65 65 2e 65 6d 69 74 28 62 2e 50 41 55 53 45 29 2c 74 68 69 73 2e 77 72 69 74 65 28 28 30 2c 70 2e 44 29 28 74 68 69 73 2e 73 74 61 74 65 2c 77 29 29 7d 2c 65 65 3a 74 68 69 73 2e 65 65 2c 72 65 66 72 65 73 68 45 76 65 6e 74 73 3a 5b 22 63 6c 69 63 6b 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 73 63 72 6f 6c 6c 22 5d 7d 2c 74 68 69 73 2e 73 74 61 74 65 2e 69 6e 61 63 74 69 76 65 41 74 Data Ascii: his),this.reset()},onRefresh:this.refresh.bind(this),onResume:()=>{this.ee.emit(b.RESUME)},onPause:()=>{this.initialized&&this.ee.emit(b.PAUSE),this.write((0,p.D)(this.state,w))},ee:this.ee,refreshEvents:["click","keydown","scroll"]},this.state.inactiveAt
2024-04-24 17:31:25 UTC	1378	IN	Data Raw: 72 2c 6b 65 79 3a 74 68 69 73 2e 6b 65 79 2c 73 74 6f 72 61 67 65 3a 74 68 69 73 2e 73 74 6f 72 61 67 65 2c 65 78 70 69 72 65 73 4d 73 3a 74 68 69 73 2e 65 78 70 69 72 65 73 4d 73 2c 69 6e 61 63 74 69 76 65 4d 73 3a 74 68 69 73 2e 69 6e 61 63 74 69 76 65 4d 73 7d 29 2c 74 68 69 73 2e 72 65 61 64 28 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 7b 7d 7d 7d 72 65 66 72 65 73 68 28 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 72 65 61 64 28 29 3b 74 68 69 73 2e 77 72 69 74 65 28 7b 2e 2e 2e 74 2c 69 6e 61 63 74 69 76 65 41 74 3a 74 68 69 73 2e 67 65 74 46 75 74 75 72 65 54 69 6d 65 73 74 61 6d 70 28 74 68 69 73 2e 69 6e 61 63 74 69 76 65 4d 73 29 7d 29 7d 69 73 45 78 70 69 72 65 64 28 74 29 7b 72 65 74 75 72 6e 20 44 61 74 65 2e 6e 6f 77 28 29 3e 74 7d Data Ascii: r,key:this.key,storage:this.storage,expiresMs:this.expiresMs,inactiveMs:this.inactiveMs}),this.read()}catch(t){return{}}}refresh(){const t=this.read();this.write({...t,inactiveAt:this.getFutureTimestamp(this.inactiveMs)})}isExpired(t){return Date.now()>t}
2024-04-24 17:31:25 UTC	1378	IN	Data Raw: 3d 30 3b 73 3c 72 3b 73 2b 2b 29 69 5b 73 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 3b 74 2e 61 70 70 6c 79 28 65 2c 69 29 7d 7d 7d 6e 2e 64 28 65 2c 7b 44 3a 28 29 3d 3e 72 2c 5a 3a 28 29 3d 3e 69 7d 29 7d 2c 31 32 31 34 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 6e 2e 64 28 65 2c 7b 65 6d 3a 28 29 3d 3e 79 2c 75 35 3a 28 29 3d 3e 6a 2c 51 55 3a 28 29 3d 3e 4f 2c 5f 4c 3a 28 29 3d 3e 4c 2c 47 6d 3a 28 29 3d 3e 24 2c 4c 67 3a 28 29 3d 3e 5f 2c 67 79 3a 28 29 3d 3e 48 2c 42 56 3a 28 29 3d 3e 56 2c 4b 66 3a 28 29 3d 3e 74 74 7d 29 3b 76 61 72 20 72 3d 6e 28 32 31 37 37 29 3b 63 6f 6e 73 74 20 69 3d 22 6e 72 40 6f 72 69 67 69 6e 61 6c 22 3b 76 61 72 20 73 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6f 3d 21 31 3b Data Ascii: =0;s<r;s++)i[s]=arguments[s];t.apply(e,i)}}}n.d(e,{D:()=>r,Z:()=>i})},1214:(t,e,n)=>{n.d(e,{em:()=>y,u5:()=>j,QU:()=>O,_L:()=>L,Gm:()=>$,Lg:()=>_,gy:()=>H,BV:()=>V,Kf:()=>tt});var r=n(2177);const i="nr@original";var s=Object.prototype.hasOwnProperty,o=!1;
2024-04-24 17:31:25 UTC	1378	IN	Data Raw: 79 28 74 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 72 2e 65 65 29 2e 67 65 74 28 22 65 76 65 6e 74 73 22 29 7d 28 74 29 3b 69 66 28 64 5b 65 2e 64 65 62 75 67 49 64 5d 2b 2b 29 72 65 74 75 72 6e 20 65 3b 64 5b 65 2e 64 65 62 75 67 49 64 5d 3d 31 3b 76 61 72 20 6e 3d 61 28 65 2c 21 30 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 6e 2e 69 6e 50 6c 61 63 65 28 74 2c 5b 6d 2c 76 5d 2c 22 2d 22 2c 73 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 5b 31 5d 7d 72 65 74 75 72 6e 22 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 69 6e 20 4f 62 6a 65 63 74 26 26 28 66 2e 69 6c 26 26 67 28 64 6f 63 75 6d 65 6e 74 2c 69 29 2c 67 28 66 2e 5f 41 2c 69 29 2c 67 28 70 2e 70 72 6f 74 6f 74 79 Data Ascii: y(t){var e=function(t){return(t\|\|r.ee).get("events")}(t);if(d[e.debugId]++)return e;d[e.debugId]=1;var n=a(e,!0);function i(t){n.inPlace(t,[m,v],"-",s)}function s(t,e){return t[1]}return"getPrototypeOf"in Object&&(f.il&&g(document,i),g(f._A,i),g(p.prototy
2024-04-24 17:31:25 UTC	1378	IN	Data Raw: 74 22 2c 5b 6e 2c 74 5d 2c 6f 29 2c 6f 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 65 6d 69 74 28 72 2b 22 65 6e 64 22 2c 5b 6e 75 6c 6c 2c 74 5d 2c 6f 29 2c 74 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 72 6f 77 20 65 2e 65 6d 69 74 28 72 2b 22 65 6e 64 22 2c 5b 74 5d 2c 6f 29 2c 74 7d 29 29 7d 29 7d 72 65 74 75 72 6e 20 49 5b 65 2e 64 65 62 75 67 49 64 5d 3d 31 2c 45 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 6e 28 78 5b 4d 5d 2c 74 2c 62 29 2c 6e 28 41 5b 4d 5d 2c 74 2c 62 29 7d 29 29 2c 6e 28 66 2e 5f 41 2c 22 66 65 74 63 68 22 2c 77 29 2c 65 2e 6f 6e 28 77 2b 22 65 6e 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 74 68 69 73 3b 69 66 28 6e 29 7b 76 61 72 20 69 3d 6e 2e 68 65 Data Ascii: t",[n,t],o),o.then((function(t){return e.emit(r+"end",[null,t],o),t}),(function(t){throw e.emit(r+"end",[t],o),t}))})}return I[e.debugId]=1,E.forEach((t=>{n(x[M],t,b),n(A[M],t,b)})),n(f._A,"fetch",w),e.on(w+"end",(function(t,n){var r=this;if(n){var i=n.he
2024-04-24 17:31:25 UTC	1378	IN	Data Raw: 66 20 75 2e 70 61 72 65 6e 74 5b 75 2e 6b 65 79 5d 29 72 65 74 75 72 6e 3b 76 61 72 20 68 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 65 2e 65 6d 69 74 28 22 6a 73 6f 6e 70 2d 65 6e 64 22 2c 5b 5d 2c 68 29 2c 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 6c 2c 28 30 2c 53 2e 6d 24 29 28 21 31 29 29 2c 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 66 2c 28 30 2c 53 2e 6d 24 29 28 21 31 29 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 65 2e 65 6d 69 74 28 22 6a 73 6f 6e 70 2d 65 72 72 6f 72 22 2c 5b 5d 2c 68 29 2c 65 2e 65 6d 69 74 28 22 6a 73 6f 6e 70 2d 65 6e 64 22 2c 5b 5d 2c 68 29 2c 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 Data Ascii: f u.parent[u.key])return;var h={};function l(){e.emit("jsonp-end",[],h),t.removeEventListener("load",l,(0,S.m$)(!1)),t.removeEventListener("error",f,(0,S.m$)(!1))}function f(){e.emit("jsonp-error",[],h),e.emit("jsonp-end",[],h),t.removeEventListener("load
2024-04-24 17:31:25 UTC	1378	IN	Data Raw: 6c 22 3d 3d 3d 6e 29 2c 6f 28 21 31 29 29 7d 29 29 3b 63 6f 6e 73 74 20 73 3d 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 73 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 65 6d 69 74 28 22 70 72 6f 70 61 67 61 74 65 22 2c 5b 6e 75 6c 6c 2c 21 69 5d 2c 73 2c 21 31 2c 21 31 29 2c 69 3d 69 7c 7c 21 74 7d 7d 7d 7d 29 29 2c 5b 22 72 65 73 6f 6c 76 65 22 2c 22 72 65 6a 65 63 74 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 63 6f 6e 73 74 20 72 3d 6f 5b 6e 5d 3b 74 5b 6e 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 74 Data Ascii: l"===n),o(!1))}));const s=r.apply(this,arguments);return s;function o(t){return function(){e.emit("propagate",[null,!i],s,!1,!1),i=i\|\|!t}}}})),["resolve","reject"].forEach((function(n){const r=o[n];t[n]=function(t){const n=r.apply(this,arguments);return t
2024-04-24 17:31:25 UTC	1378	IN	Data Raw: 2d 22 2c 5a 3d 5b 55 2c 22 73 65 74 49 6d 6d 65 64 69 61 74 65 22 2c 58 2c 59 2c 22 63 6c 65 61 72 49 6d 6d 65 64 69 61 74 65 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 56 28 74 29 7b 63 6f 6e 73 74 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 72 2e 65 65 29 2e 67 65 74 28 22 74 69 6d 65 72 22 29 7d 28 74 29 3b 69 66 28 4b 5b 65 2e 64 65 62 75 67 49 64 5d 2b 2b 29 72 65 74 75 72 6e 20 65 3b 4b 5b 65 2e 64 65 62 75 67 49 64 5d 3d 31 3b 76 61 72 20 6e 3d 61 28 65 29 3b 72 65 74 75 72 6e 20 6e 2e 69 6e 50 6c 61 63 65 28 66 2e 5f 41 2c 5a 2e 73 6c 69 63 65 28 30 2c 32 29 2c 55 2b 57 29 2c 6e 2e 69 6e 50 6c 61 63 65 28 66 2e 5f 41 2c 5a 2e 73 6c 69 63 65 28 32 2c 33 29 2c 58 2b 57 29 2c 6e 2e 69 6e 50 6c 61 63 65 28 66 2e 5f 41 2c 5a 2e Data Ascii: -",Z=[U,"setImmediate",X,Y,"clearImmediate"];function V(t){const e=function(t){return(t\|\|r.ee).get("timer")}(t);if(K[e.debugId]++)return e;K[e.debugId]=1;var n=a(e);return n.inPlace(f._A,Z.slice(0,2),U+W),n.inPlace(f._A,Z.slice(2,3),X+W),n.inPlace(f._A,Z.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49991	162.247.243.39	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:25 UTC	556	OUT	GET /session-manager.2a64278a-1.236.0.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:25 UTC	800	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1387 x-amz-id-2: ZEbAPo0JDyaEW/Oed/Z+pDRypUdaW5bMiU0Uq3NmSh+gYHbhOX7ucjS7udjmam1axmkrNq4FVJ4= x-amz-request-id: N0C731ETN4AA167M Last-Modified: Wed, 18 Oct 2023 21:35:37 GMT ETag: "a097cb2068fb2d63e521cacf139c921d" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 x-amz-version-id: SsYbc40vF7coUg.zeTYgLM88CvSHP8Ac Content-Type: application/javascript Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:25 GMT Via: 1.1 varnish X-Served-By: cache-lax-kwhp1940101-LAX X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-04-24 17:31:25 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 34 32 5d 2c 7b 33 32 32 38 3a 28 74 2c 65 2c 73 29 3d 3e 7b 73 2e 64 28 65 2c 7b 73 65 74 75 70 41 67 65 6e 74 53 65 73 73 69 6f 6e 3a 28 29 3d 3e 68 7d 29 3b 76 61 72 20 6e 3d 73 28 35 37 36 33 29 2c 6f 3d 73 28 38 65 33 29 2c 72 3d 73 28 32 31 37 37 29 2c 63 3d 73 28 34 33 32 32 29 2c 69 3d 73 28 33 38 36 30 29 3b 63 6c 61 73 73 20 61 7b 67 65 74 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 74 29 7c 7c 76 6f 69 64 20 30 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 22 Data Ascii: "use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[242],{3228:(t,e,s)=>{s.d(e,{setupAgentSession:()=>h});var n=s(5763),o=s(8e3),r=s(2177),c=s(4322),i=s(3860);class a{get(t){try{return localStorage.getItem(t)\|\|void 0}catch(t){return"
2024-04-24 17:31:25 UTC	9	IN	Data Raw: 69 6f 6e 7d 7d 7d 5d 29 3b Data Ascii: ion}}}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49994	216.137.39.37	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:25 UTC	518	OUT	GET /log?vendor=liveramp&user_id=Xc1297RCZqjCKaMYtrVX5b-1GinLGwoALW3nomJOZMM9LMhXY HTTP/1.1 Host: segments.company-target.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=fe876021-fc99-4e31-8bfa-461e893fb9c2; tuuid_lu=1713979879\|ix:0\|mctv:0\|rp:0
2024-04-24 17:31:25 UTC	317	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 26 Connection: close Date: Wed, 24 Apr 2024 17:31:25 GMT X-Cache: Miss from cloudfront Via: 1.1 0924d60bb72665aca8b052e6ebd42272.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P2 X-Amz-Cf-Id: 6k09-V11sa9nfoFfFrzE_mUfLCvvjSuO1v-wD6kLhi2kduc7Go8_eA==
2024-04-24 17:31:25 UTC	26	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b Data Ascii: GIF89a,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49997	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:25 UTC	778	OUT	POST /events/1/bd61b676be?a=1134228971&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=47407&ck=1&ref=https://in.xero.com/m/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 348 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://in.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://in.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:25 UTC	348	OUT	Data Raw: 62 65 6c 2e 36 3b 65 2c 27 66 69 2c 67 78 31 2c 36 3b 35 2c 27 74 79 70 65 2c 27 70 6f 69 6e 74 65 72 64 6f 77 6e 3b 35 2c 27 6e 65 74 2d 65 74 79 70 65 2c 27 33 67 3b 36 2c 27 6e 65 74 2d 72 74 74 2c 34 35 30 2e 3b 36 2c 27 6e 65 74 2d 64 6c 69 6e 6b 2c 31 2e 31 35 3b 36 2c 27 66 69 64 2c 32 2e 3b 36 2c 27 63 6c 73 2c 30 2e 30 31 34 34 37 32 32 38 33 32 34 38 30 32 36 39 34 3b 65 2c 27 6c 63 70 2c 61 38 66 2c 38 3b 36 2c 27 73 69 7a 65 2c 34 32 38 30 30 2e 3b 35 2c 27 65 69 64 3b 35 2c 33 2c 34 3b 36 2c 35 2c 34 30 30 2e 3b 36 2c 36 2c 31 2e 35 35 3b 35 2c 27 65 6c 55 72 6c 2c 27 68 74 74 70 73 3a 2f 2f 69 6e 2e 78 65 72 6f 2e 63 6f 6d 2f 61 70 69 2f 56 6d 46 55 47 71 32 44 52 30 77 30 52 72 6f 69 79 76 57 41 57 58 77 30 38 33 6a 79 70 31 74 5a 79 49 33 Data Ascii: bel.6;e,'fi,gx1,6;5,'type,'pointerdown;5,'net-etype,'3g;6,'net-rtt,450.;6,'net-dlink,1.15;6,'fid,2.;6,'cls,0.01447228324802694;e,'lcp,a8f,8;6,'size,42800.;5,'eid;5,3,4;6,5,400.;6,6,1.55;5,'elUrl,'https://in.xero.com/api/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3
2024-04-24 17:31:25 UTC	309	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:31:25 GMT content-type: image/gif access-control-allow-origin: https://in.xero.com access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-lax-kwhp1940106-LAX
2024-04-24 17:31:25 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49996	34.196.171.164	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:25 UTC	364	OUT	GET /messenger/web/metrics HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:26 UTC	4209	IN	HTTP/1.1 406 Not Acceptable Date: Wed, 24 Apr 2024 17:31:25 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 144 Connection: close Status: 406 Not Acceptable Vary: Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-XSS-Protection: 1; mode=block X-Request-Id: 0004cc2ethpe2h4n2i3g X-Runtime: 0.014305 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; base-uri 'self'; child-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com .sharepoint.com; connect-src 'self' app.intercom.com api-iam.intercom.io api-ping.intercom.io api-visitor-analytics.intercom.com nexus-websocket-a.intercom.io via.intercom.io wss://nexus-websocket-a.intercom.io nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io uploads.intercomcdn.com uploads.intercomcdn.eu uploads.au.intercomcdn.com static.intercomassets.com app.getsentry.com sentry.io api.stripe.com meet.intercom.com meet.eu.intercom.com meet.au.intercom.com preview.intercom.com www.google-analytics.com stats.g.doubleclick.net www.facebook.com static.intercomassets.eu app.eu.intercom.com api-iam.eu.intercom.io static.au.intercomassets.com api-iam.au.intercom.io api.au.intercom.io .intercom-chat.com wss://.nexus.intercom-chat.com .messenger.intercom-chat.com graph.facebook.com .twilio.com wss://.twilio.com frontend-telemetry.intercom.io frontend-telemetry.eu.intercom.io frontend-telemetry.au.intercom.io user-presence.intercom.com; font-src data: https:; frame-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com *.sharepoint.com; img-src data: blob: https:; media-src data: blob: https:; object-src 'none'; script-src 'self' js.intercomcdn.com static.intercomassets.com store.intercomassets.com billing-admin.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com store.intercom.io widget.intercom.io api.tiles.mapbox.com connect.facebook.net js.stripe.com platform.twitter.com switchet.s3.amazonaws.com www.google-analytics.com munchkin.marketo.net app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com dp3rct5vic41c.cloudfront.net static.intercomassets.eu static.au.intercomassets.com static.zuora.com p.trellocdn.com www.recaptcha.net; style-src 'self' 'unsafe-inline' static.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com static.intercomcdn.com marketing.intercomassets.com api.tiles.mapbox.com fonts.googleapis.com maxcdn.bootstrapcdn.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com fonts.intercomcdn.com static.intercomassets.eu static.au.intercomassets.com; report-uri https://app.getsentry.com/api/66205/csp-report/?sentry_key=0d13edc0ffce4b02bd7bc48d0b497300 Server: nginx
2024-04-24 17:31:26 UTC	144	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 6d 65 64 69 61 5f 74 79 70 65 5f 6e 6f 74 5f 61 63 63 65 70 74 61 62 6c 65 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 54 68 65 20 41 63 63 65 70 74 20 68 65 61 64 65 72 20 73 68 6f 75 6c 64 20 73 65 6e 64 20 61 20 6d 65 64 69 61 20 74 79 70 65 20 6f 66 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 5d 2c 22 74 79 70 65 22 3a 22 65 72 72 6f 72 2e 6c 69 73 74 22 7d Data Ascii: {"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49995	15.197.193.217	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:25 UTC	1032	OUT	GET /track/up?adv=9nlrx8p&ref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&upid=e7m2c49&upv=1.1.0&td1=https://www.xero.com/us/try-now/manage-invoices/?utm_source=xero-invoice&utm_medium=referral&utm_campaign=global-d-lf-xeroinvoicereferrals HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:26 UTC	565	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 17:31:25 GMT Content-Length: 635 Connection: close server: Kestrel location: https://match.adsrvr.org/track/upb/?adv=9nlrx8p&ref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&upid=e7m2c49&upv=1.1.0&td1=https://www.xero.com/us/try-now/manage-invoices/ set-cookie: TDID=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9; expires=Thu, 24 Apr 2025 17:31:25 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 17:31:26 UTC	635	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 52 65 64 69 72 65 63 74 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 75 70 62 2f 3f 61 64 76 3d 39 6e 6c 72 78 38 70 26 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 78 65 72 6f 2e 63 6f 6d 25 32 46 75 73 25 32 46 74 72 79 2d 6e 6f 77 25 32 46 6d 61 6e 61 67 65 2d 69 6e 76 6f 69 63 65 73 25 32 46 25 33 46 75 74 6d 5f 73 6f 75 72 63 65 25 33 44 78 65 72 6f 2d 69 6e 76 6f 69 63 65 25 32 36 75 74 6d 5f 6d 65 64 69 75 6d 25 33 44 72 65 66 65 72 72 61 6c 25 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 33 44 67 6c 6f 62 61 6c 2d 64 2d 6c 66 2d 78 65 72 6f 69 6e 76 6f 69 63 65 72 65 66 65 72 72 61 6c 73 26 75 70 69 64 3d 65 37 Data Ascii: <html><body>Redirect: <a href="https://match.adsrvr.org/track/upb/?adv=9nlrx8p&ref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&upid=e7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49993	142.250.141.103	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:25 UTC	1586	OUT	GET /pagead/1p-conversion/1023673485/?random=1606056812&cv=11&fst=1713979877268&bg=ffffff&guid=ON&async=1&gtm=45be44m0v883646161z8830923470za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&label=v0RbCOHw2eECEI2JkOgD&hn=www.googleadservices.com&frm=0&tiba=Manage%20Invoices%20with%20Xero%20Accounting%20Software%20%7C%20Xero%20US&value=0&npa=0&pscdl=noapi&auid=1776741404.1713979872&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&sscte=1&crd=CNm5sQIIscGxAgiwwbECCLnBsQIImMGxAiIBATgBQAFKJ3RyaWdnZXI7bmF2aWdhdGlvbi1zb3VyY2UsIGV2ZW50LXNvdXJjZWIECgICAw&pscrd=CIOk5K6elJ7SRiITCO326M-w24UDFbFHCAQdeJYNQTICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhVodHRwczovL3d3dy54ZXJvLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtq26IbF5KH7DmfD2fsADC3oqWjH8GDMwtUJti4SGgNvyKKpViO&eitems=ChAI8NuisQYQpLKG6LHZ3MozEh0AIjyJprIUcoN557kAQiZIdFleeMuK_KZygEbuWw&random=1023827322 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:26 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 17:31:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49998	162.247.243.39	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:25 UTC	560	OUT	GET /lazy-feature-loader.2f55ce66-1.236.0.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:26 UTC	800	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1085 x-amz-id-2: c4bTOgf6Kw0L0gwsSZaQBJulMr4XEt8gnzDriRr0+6h/x9Vevel17ieN/kMOnJEDCQyLsiSmTPE= x-amz-request-id: RWN4Z78CSFGND9SS Last-Modified: Wed, 18 Oct 2023 20:58:23 GMT ETag: "e43b565f398109176254b8a9394de5ba" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 x-amz-version-id: AoWWu9_.PBU5bQyJIBgMcnXM0S2uYlqn Content-Type: application/javascript Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:26 GMT Via: 1.1 varnish X-Served-By: cache-bur-kbur8200053-BUR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-04-24 17:31:26 UTC	1085	IN	Data Raw: 3b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 31 32 5d 2c 7b 38 35 38 32 3a 28 65 2c 6e 2c 72 29 3d 3e 7b 72 2e 64 28 6e 2c 7b 6c 61 7a 79 46 65 61 74 75 72 65 4c 6f 61 64 65 72 3a 28 29 3d 3e 74 7d 29 3b 76 61 72 20 61 3d 72 28 33 33 32 35 29 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6e 29 7b 69 66 28 22 61 67 67 72 65 67 61 74 65 22 3d 3d 3d 6e 29 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 20 61 2e 44 2e 61 6a 61 78 3a 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 72 2e 65 28 38 36 30 29 2c 72 2e 65 28 31 34 38 29 2c 72 2e 65 28 38 39 38 29 5d 29 2e 74 68 65 6e Data Ascii: ;"use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[412],{8582:(e,n,r)=>{r.d(n,{lazyFeatureLoader:()=>t});var a=r(3325);function t(e,n){if("aggregate"===n)switch(e){case a.D.ajax:return Promise.all([r.e(860),r.e(148),r.e(898)]).then

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	50000	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:26 UTC	534	OUT	GET /events/1/bd61b676be?a=1134228971&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=47407&ck=1&ref=https://in.xero.com/m/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:26 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:31:26 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-lax-kwhp1940052-LAX
2024-04-24 17:31:26 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	50003	162.247.243.39	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:26 UTC	544	OUT	GET /148.1a20d5fe-1.236.0.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:27 UTC	800	IN	HTTP/1.1 200 OK Connection: close Content-Length: 7826 x-amz-id-2: 5shczUHfZUGoretrD5m94Bg/qxgejlQx7NbRnLC+s8cFhaIOODwYHEWisHDvUwIbxX3SSA1Y1OI= x-amz-request-id: ABDA37E7R87XX2J2 Last-Modified: Wed, 18 Oct 2023 20:56:04 GMT ETag: "bed1f74897d091a7dfc2b06e8a1e29a3" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 x-amz-version-id: 27hyUF2MmzVIZmpgRHUgD0gF9836bmSx Content-Type: application/javascript Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:27 GMT Via: 1.1 varnish X-Served-By: cache-bur-kbur8200058-BUR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 31 34 38 2e 31 61 32 30 64 35 66 65 2d 31 2e 32 33 36 2e 30 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 34 38 5d 2c 7b 38 36 37 33 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 6e 2e 64 28 65 2c 7b 4d 3a 28 29 3d 3e 43 7d 29 3b 76 61 72 20 73 3d 6e 28 31 32 38 34 29 2c 72 3d 6e 28 34 33 35 31 29 2c 61 3d 7b 22 25 32 43 22 3a 22 2c 22 2c 22 25 33 41 22 3a 22 3a 22 2c 22 25 32 46 22 3a 22 2f 22 2c 22 25 34 30 Data Ascii: /! For license information please see 148.1a20d5fe-1.236.0.min.js.LICENSE.txt /"use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[148],{8673:(t,e,n)=>{n.d(e,{M:()=>C});var s=n(1284),r=n(4351),a={"%2C":",","%3A":":","%2F":"/","%40
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 74 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 2c 22 68 61 72 76 65 73 74 2e 74 6f 6f 4d 61 6e 79 52 65 71 75 65 73 74 73 44 65 6c 61 79 22 29 7c 7c 36 30 2c 74 68 69 73 2e 6f 62 66 75 73 63 61 74 6f 72 3d 6e 65 77 20 76 2e 52 52 28 74 68 69 73 2e 73 68 61 72 65 64 43 6f 6e 74 65 78 74 29 2c 74 68 69 73 2e 67 65 74 53 63 68 65 6d 65 3d 28 29 3d 3e 21 31 3d 3d 3d 28 30 2c 79 2e 4d 74 29 28 74 68 69 73 2e 73 68 61 72 65 64 43 6f 6e 74 65 78 74 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 2c 22 73 73 6c 22 29 3f 22 68 74 74 70 22 3a 22 68 74 74 70 73 22 2c 74 68 69 73 2e 5f 65 76 65 6e 74 73 3d 7b 7d 7d 73 65 6e 64 58 28 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e Data Ascii: t.agentIdentifier,"harvest.tooManyRequestsDelay")\|\|60,this.obfuscator=new v.RR(this.sharedContext),this.getScheme=()=>!1===(0,y.Mt)(this.sharedContext.agentIdentifier,"ssl")?"http":"https",this._events={}}sendX(){let t=arguments.length>0&&void 0!==argumen
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 63 6f 6e 63 61 74 28 65 29 3a 22 22 2c 22 2f 31 2f 22 29 2e 63 6f 6e 63 61 74 28 64 2e 6c 69 63 65 6e 73 65 4b 65 79 29 3b 6f 26 26 28 76 3d 6f 29 2c 63 26 26 28 76 3d 22 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 67 65 74 53 63 68 65 6d 65 28 29 2c 22 3a 2f 2f 22 29 2e 63 6f 6e 63 61 74 28 64 2e 65 72 72 6f 72 42 65 61 63 6f 6e 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 29 29 3b 63 6f 6e 73 74 20 6d 3d 21 63 26 26 75 3f 74 68 69 73 2e 62 61 73 65 51 75 65 72 79 53 74 72 69 6e 67 28 29 3a 22 22 3b 6c 65 74 20 78 3d 6c 28 70 2c 66 2e 6d 61 78 42 79 74 65 73 29 3b 61 7c 7c 28 61 3d 68 2e 71 44 28 7b 69 73 46 69 6e 61 6c 48 61 72 76 65 73 74 3a 73 2e 75 6e 6c 6f 61 64 7d 29 29 2c 22 22 3d 3d 3d 6d 26 26 78 2e 73 74 61 72 74 73 57 69 74 68 28 22 26 22 29 26 26 Data Ascii: concat(e):"","/1/").concat(d.licenseKey);o&&(v=o),c&&(v="".concat(this.getScheme(),"://").concat(d.errorBeacon,"/").concat(e));const m=!c&&u?this.baseQueryString():"";let x=l(p,f.maxBytes);a\|\|(a=h.qD({isFinalHarvest:s.unload})),""===m&&x.startsWith("&")&&
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 61 63 74 69 6f 6e 29 2c 22 26 72 73 74 3d 22 2b 28 30 2c 70 2e 7a 29 28 29 2c 22 26 63 6b 3d 30 22 2c 22 26 73 3d 22 2b 28 74 2e 73 65 73 73 69 6f 6e 3f 2e 73 74 61 74 65 2e 76 61 6c 75 65 7c 7c 22 30 22 29 2c 64 28 22 72 65 66 22 2c 73 29 2c 64 28 22 70 74 69 64 22 2c 74 2e 70 74 69 64 3f 22 22 2b 74 2e 70 74 69 64 3a 22 22 29 5d 2e 6a 6f 69 6e 28 22 22 29 7d 63 72 65 61 74 65 50 61 79 6c 6f 61 64 28 74 2c 65 29 7b 63 6f 6e 73 74 20 6e 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 74 5d 2c 73 3d 7b 62 6f 64 79 3a 7b 7d 2c 71 73 3a 7b 7d 7d 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 29 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 6e 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 63 6f 6e 73 74 20 72 3d 6e 5b 74 5d 28 Data Ascii: action),"&rst="+(0,p.z)(),"&ck=0","&s="+(t.session?.state.value\|\|"0"),d("ref",s),d("ptid",t.ptid?""+t.ptid:"")].join("")}createPayload(t,e){const n=this._events[t],s={body:{},qs:{}};if(Array.isArray(n)&&n.length>0)for(let t=0;t<n.length;t++){const r=n[t](
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 6e 74 49 64 65 6e 74 69 66 69 65 72 29 2e 6c 65 6e 67 74 68 3e 30 7d 6f 62 66 75 73 63 61 74 65 53 74 72 69 6e 67 28 74 29 7b 69 66 28 21 74 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 74 3b 66 6f 72 28 76 61 72 20 65 3d 75 28 74 68 69 73 2e 73 68 61 72 65 64 43 6f 6e 74 65 78 74 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 29 2c 6e 3d 74 2c 73 3d 30 3b 73 3c 65 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 76 61 72 20 72 3d 65 5b 73 5d 2e 72 65 67 65 78 2c 61 3d 65 5b 73 5d 2e 72 65 70 6c 61 63 65 6d 65 6e 74 7c 7c 22 2a 22 3b 6e 3d 6e 2e 72 65 70 6c 61 63 65 28 72 2c 61 29 7d 72 65 74 75 72 6e 20 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 76 61 72 20 65 3d 5b 5d 2c 6e 3d 28 30 2c 73 2e 4d 74 29 28 74 2c 22 6f Data Ascii: ntIdentifier).length>0}obfuscateString(t){if(!t\|\|"string"!=typeof t)return t;for(var e=u(this.sharedContext.agentIdentifier),n=t,s=0;s<e.length;s++){var r=e[s].regex,a=e[s].replacement\|\|"*";n=n.replace(r,a)}return n}}function u(t){var e=[],n=(0,s.Mt)(t,"o
2024-04-24 17:31:27 UTC	936	IN	Data Raw: 5b 7b 6b 65 79 3a 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 2c 76 61 6c 75 65 3a 22 74 65 78 74 2f 70 6c 61 69 6e 22 7d 5d 7d 3d 74 3b 72 65 74 75 72 6e 20 66 65 74 63 68 28 65 2c 7b 6d 65 74 68 6f 64 3a 73 2c 68 65 61 64 65 72 73 3a 72 2e 72 65 64 75 63 65 28 28 28 74 2c 65 29 3d 3e 28 74 2e 70 75 73 68 28 5b 65 2e 6b 65 79 2c 65 2e 76 61 6c 75 65 5d 29 2c 74 29 29 2c 5b 5d 29 2c 62 6f 64 79 3a 6e 2c 6b 65 65 70 61 6c 69 76 65 3a 21 30 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 6c 65 74 7b 75 72 6c 3a 65 2c 62 6f 64 79 3a 6e 7d 3d 74 3b 74 72 79 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 2e 62 69 6e 64 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 29 28 65 2c 6e 29 7d 63 61 74 63 Data Ascii: [{key:"content-type",value:"text/plain"}]}=t;return fetch(e,{method:s,headers:r.reduce(((t,e)=>(t.push([e.key,e.value]),t)),[]),body:n,keepalive:!0})}function o(t){let{url:e,body:n}=t;try{return window.navigator.sendBeacon.bind(window.navigator)(e,n)}catc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	50002	162.247.243.39	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:26 UTC	566	OUT	GET /page_view_event-aggregate.06482edd-1.236.0.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:27 UTC	801	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10978 x-amz-id-2: EouEeb9xISfJuEngQg5DNTbQCsiyO25GrhkD9/SCGtcEycyPqxtDCYgoLV+UVLdGNgxqJ5X35O4= x-amz-request-id: 05XNS5A4MHJWKQ64 Last-Modified: Wed, 18 Oct 2023 21:34:30 GMT ETag: "553d27144d4f9fbe7e31b802107a2071" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 x-amz-version-id: hzDCTq4MMt37av6rZrMy6pZ_grMxVGC2 Content-Type: application/javascript Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:27 GMT Via: 1.1 varnish X-Served-By: cache-lax-kwhp1940064-LAX X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 38 36 5d 2c 7b 37 37 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 65 3a 28 29 3d 3e 72 7d 29 3b 63 6f 6e 73 74 20 72 3d 7b 7d 7d 2c 35 39 39 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 75 42 3a 28 29 3d 3e 68 2c 77 75 3a 28 29 3d 3e 6c 2c 7a 4a 3a 28 29 3d 3e 6d 7d 29 3b 76 61 72 20 72 3d 22 53 74 61 72 74 22 2c 69 3d 22 45 6e 64 22 2c 61 3d 22 75 6e 6c 6f 61 64 45 76 65 6e 74 22 2c 6f 3d 22 72 65 64 69 72 65 63 74 22 2c 73 3d 22 64 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 22 2c 75 3d 22 6f 6e 6e 65 63 74 22 2c 63 3d Data Ascii: "use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[786],{777:(e,t,n)=>{n.d(t,{e:()=>r});const r={}},5998:(e,t,n)=>{n.d(t,{uB:()=>h,wu:()=>l,zJ:()=>m});var r="Start",i="End",a="unloadEvent",o="redirect",s="domainLookup",u="onnect",c=
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 74 20 74 3d 5b 5d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 65 77 72 65 6c 69 63 2e 69 6e 69 74 69 61 6c 69 7a 65 64 41 67 65 6e 74 73 5b 65 5d 2e 66 65 61 74 75 72 65 73 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 20 69 2e 44 2e 61 6a 61 78 3a 74 2e 70 75 73 68 28 22 78 68 72 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 69 2e 44 2e 6a 73 65 72 72 6f 72 73 3a 74 2e 70 75 73 68 28 22 65 72 72 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 69 2e 44 2e 70 61 67 65 41 63 74 69 6f 6e 3a 74 2e 70 75 73 68 28 22 69 6e 73 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 69 2e 44 2e 73 65 73 73 69 6f 6e 54 72 61 63 65 3a 74 2e 70 75 73 68 28 22 73 74 6e 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 69 2e 44 2e 73 70 61 Data Ascii: t t=[];return Object.keys(newrelic.initializedAgents[e].features).forEach((e=>{switch(e){case i.D.ajax:t.push("xhr");break;case i.D.jserrors:t.push("err");break;case i.D.pageAction:t.push("ins");break;case i.D.sessionTrace:t.push("stn");break;case i.D.spa
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 67 72 65 67 61 74 6f 72 2e 73 74 6f 72 65 28 22 6d 65 61 73 75 72 65 73 22 2c 22 64 63 22 2c 7b 76 61 6c 75 65 3a 61 2e 69 6c 3f 74 5b 70 2e 71 77 5d 3a 30 7d 29 3b 63 6f 6e 73 74 20 72 3d 7b 74 74 3a 65 2e 74 74 47 75 69 64 2c 75 73 3a 65 2e 75 73 65 72 2c 61 63 3a 65 2e 61 63 63 6f 75 6e 74 2c 70 72 3a 65 2e 70 72 6f 64 75 63 74 2c 61 66 3a 6d 28 74 68 69 73 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 29 2e 6a 6f 69 6e 28 22 2c 22 29 2c 2e 2e 2e 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 74 68 69 73 2e 61 67 67 72 65 67 61 74 6f 72 2e 67 65 74 28 22 6d 65 61 73 75 72 65 73 22 29 7c 7c 7b 7d 29 2e 72 65 64 75 63 65 28 28 28 65 2c 74 29 3d 3e 7b 6c 65 74 5b 6e 2c 72 5d 3d 74 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 3d 72 2e 70 61 72 61 6d 73 3f 2e 76 61 Data Ascii: gregator.store("measures","dc",{value:a.il?t[p.qw]:0});const r={tt:e.ttGuid,us:e.user,ac:e.account,pr:e.product,af:m(this.agentIdentifier).join(","),...Object.entries(this.aggregator.get("measures")\|\|{}).reduce(((e,t)=>{let[n,r]=t;return e[n]=r.params?.va
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 5a 29 28 22 52 55 4d 20 63 61 6c 6c 20 66 61 69 6c 65 64 2e 20 41 67 65 6e 74 20 73 68 75 74 74 69 6e 67 20 64 6f 77 6e 2e 22 29 7d 7d 7d 29 7d 7d 7d 2c 38 30 38 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 46 75 3a 28 29 3d 3e 52 2c 4e 4f 3a 28 29 3d 3e 58 2c 59 6e 3a 28 29 3d 3e 4b 2c 61 34 3a 28 29 3d 3e 4c 2c 6d 72 3a 28 29 3d 3e 74 65 2c 6d 77 3a 28 29 3d 3e 6b 7d 29 3b 76 61 72 20 72 2c 69 2c 61 2c 6f 2c 73 2c 75 3d 2d 31 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 73 68 6f 77 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 70 65 72 73 69 73 74 65 64 26 26 28 75 3d 74 2e 74 69 6d 65 53 74 61 6d 70 2c 65 28 74 29 29 7d 29 2c 21 30 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e Data Ascii: Z)("RUM call failed. Agent shutting down.")}}})}}},8085:(e,t,n)=>{n.d(t,{Fu:()=>R,NO:()=>X,Yn:()=>K,a4:()=>L,mr:()=>te,mw:()=>k});var r,i,a,o,s,u=-1,c=function(e){addEventListener("pageshow",(function(t){t.persisted&&(u=t.timeStamp,e(t))}),!0)},f=function
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 70 61 67 65 68 69 64 65 22 21 3d 3d 74 2e 74 79 70 65 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 65 28 74 29 7d 3b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 74 2c 21 30 29 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 68 69 64 65 22 2c 74 2c 21 30 29 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 21 31 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 7c 7c 28 65 28 6e 29 2c 74 3d 21 30 29 7d 7d 2c 79 3d 2d 31 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 68 69 64 64 65 6e 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 Data Ascii: pagehide"!==t.type&&"hidden"!==document.visibilityState\|\|e(t)};addEventListener("visibilitychange",t,!0),addEventListener("pagehide",t,!0)},g=function(e){var t=!1;return function(n){t\|\|(e(n),t=!0)}},y=-1,T=function(){return"hidden"!==document.visibilitySt
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 68 61 64 52 65 63 65 6e 74 49 6e 70 75 74 29 7b 76 61 72 20 74 3d 61 5b 30 5d 2c 6e 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 26 26 65 2e 73 74 61 72 74 54 69 6d 65 2d 6e 2e 73 74 61 72 74 54 69 6d 65 3c 31 65 33 26 26 65 2e 73 74 61 72 74 54 69 6d 65 2d 74 2e 73 74 61 72 74 54 69 6d 65 3c 35 65 33 3f 28 69 2b 3d 65 2e 76 61 6c 75 65 2c 61 2e 70 75 73 68 28 65 29 29 3a 28 69 3d 65 2e 76 61 6c 75 65 2c 61 3d 5b 65 5d 29 7d 7d 29 29 2c 69 3e 72 2e 76 61 6c 75 65 26 26 28 72 2e 76 61 6c 75 65 3d 69 2c 72 2e 65 6e 74 72 69 65 73 3d 61 2c 6e 28 29 29 7d 2c 73 3d 6d 28 22 6c 61 79 6f 75 74 2d 73 68 69 66 74 22 2c 6f 29 3b 73 26 26 28 6e 3d 6c 28 65 2c 72 2c 4d 2c 74 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 Data Ascii: tion(e){if(!e.hadRecentInput){var t=a[0],n=a[a.length-1];i&&e.startTime-n.startTime<1e3&&e.startTime-t.startTime<5e3?(i+=e.value,a.push(e)):(i=e.value,a=[e])}})),i>r.value&&(r.value=i,r.entries=a,n())},s=m("layout-shift",o);s&&(n=l(e,r,M,t.reportAllChange
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 28 65 29 7b 65 2e 66 6f 72 45 61 63 68 28 75 29 7d 2c 64 3d 6d 28 22 66 69 72 73 74 2d 69 6e 70 75 74 22 2c 66 29 3b 6e 3d 6c 28 65 2c 73 2c 4f 2c 74 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 2c 64 26 26 76 28 67 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 28 64 2e 74 61 6b 65 52 65 63 6f 72 64 73 28 29 29 2c 64 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 7d 29 29 29 2c 64 26 26 63 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 73 3d 70 28 22 46 49 44 22 29 2c 6e 3d 6c 28 65 2c 73 2c 4f 2c 74 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 2c 6f 3d 5b 5d 2c 69 3d 2d 31 2c 72 3d 6e 75 6c 6c 2c 42 28 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 2c 61 3d 75 2c 6f 2e 70 75 73 68 28 61 29 2c 44 28 29 7d 29 29 7d 29 29 7d 2c 4e 3d 30 Data Ascii: (e){e.forEach(u)},d=m("first-input",f);n=l(e,s,O,t.reportAllChanges),d&&v(g((function(){f(d.takeRecords()),d.disconnect()}))),d&&c((function(){var a;s=p("FID"),n=l(e,s,O,t.reportAllChanges),o=[],i=-1,r=null,B(addEventListener),a=u,o.push(a),D()}))}))},N=0
2024-04-24 17:31:27 UTC	1332	IN	Data Raw: 61 3d 6d 28 22 65 76 65 6e 74 22 2c 69 2c 7b 64 75 72 61 74 69 6f 6e 54 68 72 65 73 68 6f 6c 64 3a 74 2e 64 75 72 61 74 69 6f 6e 54 68 72 65 73 68 6f 6c 64 7c 7c 34 30 7d 29 3b 6e 3d 6c 28 65 2c 72 2c 4a 2c 74 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 2c 61 26 26 28 61 2e 6f 62 73 65 72 76 65 28 7b 74 79 70 65 3a 22 66 69 72 73 74 2d 69 6e 70 75 74 22 2c 62 75 66 66 65 72 65 64 3a 21 30 7d 29 2c 76 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 28 61 2e 74 61 6b 65 52 65 63 6f 72 64 73 28 29 29 2c 72 2e 76 61 6c 75 65 3c 30 26 26 55 28 29 3e 30 26 26 28 72 2e 76 61 6c 75 65 3d 30 2c 72 2e 65 6e 74 72 69 65 73 3d 5b 5d 29 2c 6e 28 21 30 29 7d 29 29 2c 63 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 56 3d 5b 5d 2c 47 3d 7a 28 29 2c 72 3d 70 28 22 49 4e 50 Data Ascii: a=m("event",i,{durationThreshold:t.durationThreshold\|\|40});n=l(e,r,J,t.reportAllChanges),a&&(a.observe({type:"first-input",buffered:!0}),v((function(){i(a.takeRecords()),r.value<0&&U()>0&&(r.value=0,r.entries=[]),n(!0)})),c((function(){V=[],G=z(),r=p("INP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	50004	162.247.243.39	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:26 UTC	567	OUT	GET /page_view_timing-aggregate.bd6de33a-1.236.0.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:27 UTC	833	IN	HTTP/1.1 200 OK Connection: close Content-Length: 14879 x-amz-id-2: noNUHkOEHf8wHL+oDMkbOePT0Hcm5gPy+voGW+cbvWLbPWdLAFMzeBYBYs3zk7y0aRaMLXbUSXGQOCZVrshu62evJ6Uau+wGY08984Nv610= x-amz-request-id: WYR9BEDS0V1QR4SE Last-Modified: Wed, 18 Oct 2023 21:34:59 GMT ETag: "01e96e9ff5c360298d13581ad38e60a8" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 x-amz-version-id: 34JJvT_Hc26HhyXntOX8fvZ9mloIy.Ma Content-Type: application/javascript Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:27 GMT Via: 1.1 varnish X-Served-By: cache-bur-kbur8200045-BUR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 34 38 5d 2c 7b 32 35 37 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 6f 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 69 3d 6e 28 34 32 34 37 29 2c 72 3d 6e 28 31 31 31 37 29 2c 61 3d 6e 28 38 36 37 33 29 2c 73 3d 6e 28 38 33 31 30 29 2c 6f 3d 6e 28 35 37 36 33 29 2c 75 3d 6e 28 33 38 36 30 29 3b 63 6c 61 73 73 20 63 20 65 78 74 65 6e 64 73 20 72 2e 77 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 2c 6e 29 7b 73 75 70 65 72 28 6e 29 2c 74 68 69 73 2e 65 6e 64 70 6f 69 6e 74 3d 65 2c 74 68 69 73 2e 6f 70 74 73 3d 74 7c 7c 7b 7d Data Ascii: "use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[348],{2573:(e,t,n)=>{n.d(t,{o:()=>c});var i=n(4247),r=n(1117),a=n(8673),s=n(8310),o=n(5763),u=n(3860);class c extends r.w{constructor(e,t,n){super(n),this.endpoint=e,this.opts=t\|\|{}
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 72 29 3f 72 3a 5b 72 5d 2c 61 2e 70 75 73 68 28 2e 2e 2e 72 29 7d 6c 65 74 20 73 3d 65 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 73 65 6e 64 58 28 65 29 3b 61 2e 6c 65 6e 67 74 68 3f 73 3d 74 68 69 73 2e 6f 70 74 73 2e 72 61 77 3f 65 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 5f 73 65 6e 64 28 65 29 3a 65 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 73 65 6e 64 28 65 29 3a 61 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 61 2e 66 6f 72 45 61 63 68 28 28 69 3d 3e 7b 73 28 7b 65 6e 64 70 6f 69 6e 74 3a 74 68 69 73 2e 65 6e 64 70 6f 69 6e 74 2c 70 61 79 6c 6f 61 64 3a 69 2c 6f 70 74 73 3a 65 2c 73 75 62 6d 69 74 4d 65 74 68 6f 64 3a 6e 2c 63 62 46 69 6e 69 73 68 65 64 3a 74 2c 63 75 73 74 6f 6d 55 72 Data Ascii: type.toString.call(r)?r:[r],a.push(...r)}let s=e=>this.harvest.sendX(e);a.length?s=this.opts.raw?e=>this.harvest._send(e):e=>this.harvest.send(e):a.push(void 0),a.forEach((i=>{s({endpoint:this.endpoint,payload:i,opts:e,submitMethod:n,cbFinished:t,customUr
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 72 22 3a 73 3d 36 2c 61 3d 69 25 31 3f 69 3a 69 2b 22 2e 22 3b 62 72 65 61 6b 3b 63 61 73 65 22 62 6f 6f 6c 65 61 6e 22 3a 73 3d 69 3f 37 3a 38 3b 62 72 65 61 6b 3b 63 61 73 65 22 75 6e 64 65 66 69 6e 65 64 22 3a 73 3d 39 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 61 3d 74 28 69 29 7d 6e 2e 70 75 73 68 28 5b 73 2c 65 2b 28 61 3f 22 2c 22 2b 61 3a 22 22 29 5d 29 7d 7d 29 29 2c 6e 7d 76 61 72 20 68 3d 2f 28 5b 2c 5c 5c 3b 5d 29 2f 67 7d 2c 38 33 31 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 6f 7d 29 3b 76 61 72 20 69 3d 6e 28 33 32 33 39 29 2c 72 3d 6e 28 37 38 37 32 29 2c 61 3d 6e 28 33 38 35 29 2c 73 3d 6e 28 37 39 35 36 29 3b 69 66 28 61 2e 76 36 29 7b 61 2e 5f 41 2e 63 6c 65 61 6e 75 70 54 61 73 6b 73 3d 5b 5d 3b 63 6f Data Ascii: r":s=6,a=i%1?i:i+".";break;case"boolean":s=i?7:8;break;case"undefined":s=9;break;default:a=t(i)}n.push([s,e+(a?","+a:"")])}})),n}var h=/([,\\;])/g},8310:(e,t,n)=>{n.d(t,{L:()=>o});var i=n(3239),r=n(7872),a=n(385),s=n(7956);if(a.v6){a._A.cleanupTasks=[];co
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 79 7b 69 66 28 21 6f 29 7b 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 70 61 69 6e 74 22 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 2e 6e 61 6d 65 26 26 74 68 69 73 2e 61 64 64 54 69 6d 69 6e 67 28 22 66 63 70 22 2c 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 2e 73 74 61 72 74 54 69 6d 65 29 29 7d 29 29 7d 7d 63 61 74 63 68 28 65 29 7b 7d 65 6c 73 65 28 30 2c 69 2e 61 34 29 28 28 65 3d 3e 7b 6c 65 74 7b 6e 61 6d 65 3a 74 2c 76 61 6c 75 65 3a 6e 7d 3d 65 3b 6f 7c 7c 74 68 69 73 2e 61 6c 72 65 61 64 79 53 65 6e 74 2e 68 61 73 28 74 29 7c 7c 28 74 68 69 73 2e 61 6c 72 65 61 64 79 53 65 6e 74 2e 61 64 64 28 74 29 2c 74 68 69 73 2e 61 64 Data Ascii: y{if(!o){performance.getEntriesByType("paint").forEach((e=>{"first-contentful-paint"===e.name&&this.addTiming("fcp",Math.floor(e.startTime))}))}}catch(e){}else(0,i.a4)((e=>{let{name:t,value:n}=e;o\|\|this.alreadySent.has(t)\|\|(this.alreadySent.add(t),this.ad
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 72 4e 61 6d 65 3a 74 2e 61 74 74 72 69 62 75 74 69 6f 6e 5b 30 5d 2e 63 6f 6e 74 61 69 6e 65 72 4e 61 6d 65 7d 29 2c 65 28 6e 29 7d 29 29 7d 3b 6c 65 74 20 6e 3b 74 72 79 7b 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 2e 73 75 70 70 6f 72 74 65 64 45 6e 74 72 79 54 79 70 65 73 2e 69 6e 63 6c 75 64 65 73 28 22 6c 6f 6e 67 74 61 73 6b 22 29 26 26 28 6e 3d 6e 65 77 20 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 28 28 65 3d 3e 7b 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 28 28 29 3d 3e 7b 74 28 65 2e 67 65 74 45 6e 74 72 69 65 73 28 29 29 7d 29 29 7d 29 29 2c 6e 2e 6f 62 73 65 72 76 65 28 7b 74 79 70 65 3a 22 6c 6f 6e 67 74 61 73 6b 22 2c 62 75 66 66 65 72 65 64 3a 21 30 7d 29 29 7d 63 61 74 63 68 28 65 29 Data Ascii: rName:t.attribution[0].containerName}),e(n)}))};let n;try{PerformanceObserver.supportedEntryTypes.includes("longtask")&&(n=new PerformanceObserver((e=>{Promise.resolve().then((()=>{t(e.getEntries())}))})),n.observe({type:"longtask",buffered:!0}))}catch(e)
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 72 64 65 64 7c 7c 28 74 68 69 73 2e 61 64 64 54 69 6d 69 6e 67 28 22 70 61 67 65 48 69 64 65 22 2c 65 2c 6e 75 6c 6c 29 2c 74 68 69 73 2e 63 75 72 53 65 73 73 45 6e 64 52 65 63 6f 72 64 65 64 3d 21 30 29 7d 72 65 63 6f 72 64 50 61 67 65 55 6e 6c 6f 61 64 28 65 29 7b 74 68 69 73 2e 61 64 64 54 69 6d 69 6e 67 28 22 75 6e 6c 6f 61 64 22 2c 65 2c 6e 75 6c 6c 29 2c 74 68 69 73 2e 65 6e 64 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 28 65 29 7d 61 64 64 54 69 6d 69 6e 67 28 65 2c 74 2c 6e 29 7b 6e 3d 6e 7c 7c 7b 7d 2c 6e 75 6c 6c 21 3d 3d 74 68 69 73 2e 63 6c 73 26 26 28 6e 2e 63 6c 73 3d 74 68 69 73 2e 63 6c 73 29 2c 74 68 69 73 2e 74 69 6d 69 6e 67 73 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 74 2c 61 74 74 72 73 3a 6e 7d 29 2c 28 30 2c 68 2e Data Ascii: rded\|\|(this.addTiming("pageHide",e,null),this.curSessEndRecorded=!0)}recordPageUnload(e){this.addTiming("unload",e,null),this.endCurrentSession(e)}addTiming(e,t,n){n=n\|\|{},null!==this.cls&&(n.cls=this.cls),this.timings.push({name:e,value:t,attrs:n}),(0,h.
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 28 74 29 29 7d 29 2c 21 30 29 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 5b 30 5d 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 28 29 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 61 63 74 69 76 61 74 69 6f 6e 53 74 61 72 74 7c 7c 30 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 64 28 29 2c 69 3d 22 6e 61 76 69 67 61 74 65 22 3b 72 65 74 75 72 6e 20 75 3e 3d 30 3f 69 3d 22 62 61 63 6b 2d 66 6f 72 77 61 72 64 2d 63 61 63 68 Data Ascii: (t))}),!0)},d=function(){return window.performance&&performance.getEntriesByType&&performance.getEntriesByType("navigation")[0]},l=function(){var e=d();return e&&e.activationStart\|\|0},h=function(e,t){var n=d(),i="navigate";return u>=0?i="back-forward-cach
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 6f 63 75 6d 65 6e 74 2e 70 72 65 72 65 6e 64 65 72 69 6e 67 3f 31 2f 30 3a 30 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 68 69 64 64 65 6e 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 79 3e 2d 31 26 26 28 79 3d 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3d 3d 3d 65 2e 74 79 70 65 3f 65 2e 74 69 6d 65 53 74 61 6d 70 3a 30 2c 53 28 29 29 7d 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 54 2c 21 30 29 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 Data Ascii: =document.visibilityState\|\|document.prerendering?1/0:0},T=function(e){"hidden"===document.visibilityState&&y>-1&&(y="visibilitychange"===e.type?e.timeStamp:0,S())},w=function(){addEventListener("visibilitychange",T,!0),addEventListener("prerenderingchange
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 2c 69 2c 50 2c 74 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 2c 76 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 6f 2e 74 61 6b 65 52 65 63 6f 72 64 73 28 29 29 2c 6e 28 21 30 29 7d 29 29 2c 63 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 3d 30 2c 69 3d 68 28 22 43 4c 53 22 2c 30 29 2c 6e 3d 6d 28 65 2c 69 2c 50 2c 74 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 2c 70 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 28 29 7d 29 29 7d 29 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 30 29 29 7d 29 29 29 7d 2c 6b 3d 7b 70 61 73 73 69 76 65 3a 21 30 2c 63 61 70 74 75 72 65 3a 21 30 7d 2c 46 3d 6e 65 77 20 44 61 74 65 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 7c 7c 28 69 3d 74 2c 72 3d 65 2c 61 3d 6e 65 77 20 44 61 74 Data Ascii: ,i,P,t.reportAllChanges),v((function(){s(o.takeRecords()),n(!0)})),c((function(){r=0,i=h("CLS",0),n=m(e,i,P,t.reportAllChanges),p((function(){return n()}))})),setTimeout(n,0))})))},k={passive:!0,capture:!0},F=new Date,I=function(e,t){i\|\|(i=t,r=e,a=new Dat
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 70 75 73 68 28 61 29 2c 4d 28 29 7d 29 29 7d 29 29 7d 2c 44 3d 30 2c 78 3d 31 2f 30 2c 6a 3d 30 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 26 26 28 78 3d 4d 61 74 68 2e 6d 69 6e 28 78 2c 65 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 29 2c 6a 3d 4d 61 74 68 2e 6d 61 78 28 6a 2c 65 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 29 2c 44 3d 6a 3f 28 6a 2d 78 29 2f 37 2b 31 3a 30 29 7d 29 29 7d 2c 55 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 3f 44 3a 70 65 72 66 6f 72 6d 61 6e 63 65 2e 69 6e 74 65 72 61 63 74 69 6f 6e 43 6f 75 6e 74 7c 7c 30 7d 2c 58 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 69 6e 74 65 72 61 63 74 69 6f 6e 43 6f 75 6e Data Ascii: push(a),M()}))}))},D=0,x=1/0,j=0,B=function(e){e.forEach((function(e){e.interactionId&&(x=Math.min(x,e.interactionId),j=Math.max(j,e.interactionId),D=j?(j-x)/7+1:0)}))},U=function(){return o?D:performance.interactionCount\|\|0},X=function(){"interactionCoun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	50006	162.247.243.39	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:26 UTC	558	OUT	GET /metrics-aggregate.3dc53903-1.236.0.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:27 UTC	800	IN	HTTP/1.1 200 OK Connection: close Content-Length: 8471 x-amz-id-2: jmGi1FkPorhS7a43oah6xhuslSkIxNjZ37pn5BIH2VbdM+yxdvoWrfdQyMnUGpI8SCvmnmNoDss= x-amz-request-id: WYR8QJETN8EN4D16 Last-Modified: Wed, 18 Oct 2023 20:58:39 GMT ETag: "a912f1cb80b2d3cf15f10d9d022b6188" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 x-amz-version-id: Zd7iRh_nyGT5Jl7yYIBZG_dRIUpKHO9i Content-Type: application/javascript Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:27 GMT Via: 1.1 varnish X-Served-By: cache-bur-kbur8200111-BUR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 34 37 5d 2c 7b 32 35 37 33 3a 28 74 2c 65 2c 73 29 3d 3e 7b 73 2e 64 28 65 2c 7b 6f 3a 28 29 3d 3e 68 7d 29 3b 76 61 72 20 72 3d 73 28 34 32 34 37 29 2c 6f 3d 73 28 31 31 31 37 29 2c 69 3d 73 28 38 36 37 33 29 2c 6e 3d 73 28 38 33 31 30 29 2c 61 3d 73 28 35 37 36 33 29 2c 63 3d 73 28 33 38 36 30 29 3b 63 6c 61 73 73 20 68 20 65 78 74 65 6e 64 73 20 6f 2e 77 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 2c 65 2c 73 29 7b 73 75 70 65 72 28 73 29 2c 74 68 69 73 2e 65 6e 64 70 6f 69 6e 74 3d 74 2c 74 68 69 73 2e 6f 70 74 73 3d 65 7c 7c 7b 7d Data Ascii: "use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[147],{2573:(t,e,s)=>{s.d(e,{o:()=>h});var r=s(4247),o=s(1117),i=s(8673),n=s(8310),a=s(5763),c=s(3860);class h extends o.w{constructor(t,e,s){super(s),this.endpoint=t,this.opts=e\|\|{}
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 6f 29 3f 6f 3a 5b 6f 5d 2c 69 2e 70 75 73 68 28 2e 2e 2e 6f 29 7d 6c 65 74 20 6e 3d 74 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 73 65 6e 64 58 28 74 29 3b 69 2e 6c 65 6e 67 74 68 3f 6e 3d 74 68 69 73 2e 6f 70 74 73 2e 72 61 77 3f 74 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 5f 73 65 6e 64 28 74 29 3a 74 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 73 65 6e 64 28 74 29 3a 69 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 69 2e 66 6f 72 45 61 63 68 28 28 72 3d 3e 7b 6e 28 7b 65 6e 64 70 6f 69 6e 74 3a 74 68 69 73 2e 65 6e 64 70 6f 69 6e 74 2c 70 61 79 6c 6f 61 64 3a 72 2c 6f 70 74 73 3a 74 2c 73 75 62 6d 69 74 4d 65 74 68 6f 64 3a 73 2c 63 62 46 69 6e 69 73 68 65 64 3a 65 2c 63 75 73 74 6f 6d 55 72 Data Ascii: type.toString.call(o)?o:[o],i.push(...o)}let n=t=>this.harvest.sendX(t);i.length?n=this.opts.raw?t=>this.harvest._send(t):t=>this.harvest.send(t):i.push(void 0),i.forEach((r=>{n({endpoint:this.endpoint,payload:r,opts:t,submitMethod:s,cbFinished:e,customUr
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 77 69 6e 64 6f 77 2c 22 52 65 61 63 74 44 4f 4d 22 29 7c 7c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 77 69 6e 64 6f 77 2c 22 52 65 61 63 74 52 65 64 75 78 22 29 7c 7c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 64 61 74 61 2d 72 65 61 63 74 72 6f 6f 74 5d 2c 20 5b 64 61 74 61 2d 72 65 61 63 74 69 64 5d 22 29 7c 7c 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 62 6f 64 79 20 3e 20 64 69 76 22 29 3b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 4f 62 6a 65 Data Ascii: ototype.hasOwnProperty.call(window,"ReactDOM")\|\|Object.prototype.hasOwnProperty.call(window,"ReactRedux")\|\|document.querySelector("[data-reactroot], [data-reactid]")\|\|(()=>{const t=document.querySelectorAll("body > div");for(let e=0;e<t.length;e++)if(Obje
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 4d 3d 22 46 75 6e 63 74 69 6f 6e 2e 63 61 6c 6c 22 2c 6a 3d 22 41 72 72 61 79 2e 69 6e 63 6c 75 64 65 73 22 2c 50 3d 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 6b 3d 22 41 72 72 61 79 2e 66 69 6e 64 22 2c 41 3d 22 41 72 72 61 79 2e 66 6c 61 74 22 2c 48 3d 22 41 72 72 61 79 2e 66 6c 61 74 4d 61 70 22 2c 45 3d 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 52 3d 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 46 3d 22 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 22 2c 54 3d 22 4d 61 70 22 2c 78 3d 22 53 65 74 22 2c 43 3d 22 57 65 61 6b 4d 61 70 22 2c 44 3d 22 57 65 61 6b 53 65 74 22 3b 76 61 72 20 4e 3d 73 28 32 32 37 31 29 2c 42 3d 73 28 36 31 34 31 29 2c 47 3d 73 28 36 38 31 38 29 2c 49 3d 73 28 33 39 36 30 29 2c 71 3d 73 28 33 32 33 39 29 2c 5f 3d 73 28 32 32 Data Ascii: M="Function.call",j="Array.includes",P="Array.from",k="Array.find",A="Array.flat",H="Array.flatMap",E="Object.assign",R="Object.entries",F="Object.values",T="Map",x="Set",C="WeakMap",D="WeakSet";var N=s(2271),B=s(6141),G=s(6818),I=s(3960),q=s(3239),_=s(22
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 69 6c 69 74 79 4d 65 74 72 69 63 73 28 22 47 65 6e 65 72 69 63 2f 44 69 73 74 4d 65 74 68 6f 64 2f 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2f 44 65 74 65 63 74 65 64 22 29 29 2c 63 2e 69 6c 26 26 28 30 2c 49 2e 4b 29 28 28 28 29 3d 3e 7b 77 28 29 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 74 68 69 73 2e 73 74 6f 72 65 53 75 70 70 6f 72 74 61 62 69 6c 69 74 79 4d 65 74 72 69 63 73 28 22 46 72 61 6d 65 77 6f 72 6b 2f 22 2b 74 2b 22 2f 44 65 74 65 63 74 65 64 22 29 7d 29 29 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 74 3d 5b 5d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 74 72 79 7b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 2e 62 69 6e 64 7c 7c 6d 2e 74 65 73 74 28 65 2e 62 69 6e 64 2e 74 6f 53 74 72 69 6e 67 28 29 29 7c Data Ascii: ilityMetrics("Generic/DistMethod/".concat(t,"/Detected")),c.il&&(0,I.K)((()=>{w().forEach((t=>{this.storeSupportabilityMetrics("Framework/"+t+"/Detected")}))})),function(){const t=[],e=function(){};try{"function"!=typeof e.bind\|\|m.test(e.bind.toString())\|
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 65 50 72 6f 74 6f 63 6f 6c 2f 44 65 74 65 63 74 65 64 22 29 3b 63 6f 6e 73 74 20 73 3d 28 30 2c 42 2e 24 63 29 28 74 68 69 73 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 29 3b 73 2e 6c 65 6e 67 74 68 3e 30 26 26 74 68 69 73 2e 73 74 6f 72 65 53 75 70 70 6f 72 74 61 62 69 6c 69 74 79 4d 65 74 72 69 63 73 28 22 47 65 6e 65 72 69 63 2f 4f 62 66 75 73 63 61 74 65 2f 44 65 74 65 63 74 65 64 22 29 2c 73 2e 6c 65 6e 67 74 68 3e 30 26 26 21 28 30 2c 42 2e 4e 67 29 28 73 29 26 26 74 68 69 73 2e 73 74 6f 72 65 53 75 70 70 6f 72 74 61 62 69 6c 69 74 79 4d 65 74 72 69 63 73 28 22 47 65 6e 65 72 69 63 2f 4f 62 66 75 73 63 61 74 65 2f 49 6e 76 61 6c 69 64 22 29 7d 65 61 63 68 53 65 73 73 69 6f 6e 43 68 65 63 6b 73 28 29 7b 63 2e 69 6c 26 26 28 30 2c 71 2e 62 50 29 Data Ascii: eProtocol/Detected");const s=(0,B.$c)(this.agentIdentifier);s.length>0&&this.storeSupportabilityMetrics("Generic/Obfuscate/Detected"),s.length>0&&!(0,B.Ng)(s)&&this.storeSupportabilityMetrics("Generic/Obfuscate/Invalid")}eachSessionChecks(){c.il&&(0,q.bP)
2024-04-24 17:31:27 UTC	203	IN	Data Raw: 61 74 75 72 65 2f 53 65 73 73 69 6f 6e 54 72 61 63 65 2f 44 75 72 61 74 69 6f 6e 4d 73 22 2c 4d 61 74 68 2e 72 6f 75 6e 64 28 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 57 2e 50 29 28 65 2e 6a 73 41 74 74 72 69 62 75 74 65 73 29 3b 74 68 69 73 2e 73 74 6f 72 65 53 75 70 70 6f 72 74 61 62 69 6c 69 74 79 4d 65 74 72 69 63 73 28 22 50 61 67 65 53 65 73 73 69 6f 6e 2f 46 65 61 74 75 72 65 2f 43 75 73 74 6f 6d 44 61 74 61 2f 42 79 74 65 73 22 2c 22 7b 7d 22 3d 3d 3d 6e 3f 30 3a 6e 2e 6c 65 6e 67 74 68 29 7d 63 61 74 63 68 28 61 29 7b 7d 7d 7d 7d 7d 5d 29 3b Data Ascii: ature/SessionTrace/DurationMs",Math.round(performance.now()));const n=(0,W.P)(e.jsAttributes);this.storeSupportabilityMetrics("PageSession/Feature/CustomData/Bytes","{}"===n?0:n.length)}catch(a){}}}}}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	50005	162.247.243.39	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:26 UTC	559	OUT	GET /jserrors-aggregate.49e41428-1.236.0.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:27 UTC	832	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9489 x-amz-id-2: foH4Sn3G1eyB578R+B53h/KaHzJCPExLWIZL/+7DaM7Lhi8X9f83kpX3fWLMh9WFxMlvdWNAVPwuKdcet4CkqtNh7ApwWR5HlvDD5FBPwyM= x-amz-request-id: WYR12EWJH6VD79GM Last-Modified: Wed, 18 Oct 2023 20:58:09 GMT ETag: "ea0f213ac446fa34c085f244b9573b9d" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 x-amz-version-id: gtBM4GKuMukahVd9NQUYfXgsxiTAdQL3 Content-Type: application/javascript Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:27 GMT Via: 1.1 varnish X-Served-By: cache-bur-kbur8200069-BUR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 31 37 5d 2c 7b 32 35 37 33 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 6f 3a 28 29 3d 3e 68 7d 29 3b 76 61 72 20 73 3d 72 28 34 32 34 37 29 2c 6e 3d 72 28 31 31 31 37 29 2c 69 3d 72 28 38 36 37 33 29 2c 61 3d 72 28 38 33 31 30 29 2c 6f 3d 72 28 35 37 36 33 29 2c 63 3d 72 28 33 38 36 30 29 3b 63 6c 61 73 73 20 68 20 65 78 74 65 6e 64 73 20 6e 2e 77 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 2c 72 29 7b 73 75 70 65 72 28 72 29 2c 74 68 69 73 2e 65 6e 64 70 6f 69 6e 74 3d 65 2c 74 68 69 73 2e 6f 70 74 73 3d 74 7c 7c 7b 7d Data Ascii: "use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[317],{2573:(e,t,r)=>{r.d(t,{o:()=>h});var s=r(4247),n=r(1117),i=r(8673),a=r(8310),o=r(5763),c=r(3860);class h extends n.w{constructor(e,t,r){super(r),this.endpoint=e,this.opts=t\|\|{}
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 6e 29 3f 6e 3a 5b 6e 5d 2c 69 2e 70 75 73 68 28 2e 2e 2e 6e 29 7d 6c 65 74 20 61 3d 65 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 73 65 6e 64 58 28 65 29 3b 69 2e 6c 65 6e 67 74 68 3f 61 3d 74 68 69 73 2e 6f 70 74 73 2e 72 61 77 3f 65 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 5f 73 65 6e 64 28 65 29 3a 65 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 73 65 6e 64 28 65 29 3a 69 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 69 2e 66 6f 72 45 61 63 68 28 28 73 3d 3e 7b 61 28 7b 65 6e 64 70 6f 69 6e 74 3a 74 68 69 73 2e 65 6e 64 70 6f 69 6e 74 2c 70 61 79 6c 6f 61 64 3a 73 2c 6f 70 74 73 3a 65 2c 73 75 62 6d 69 74 4d 65 74 68 6f 64 3a 72 2c 63 62 46 69 6e 69 73 68 65 64 3a 74 2c 63 75 73 74 6f 6d 55 72 Data Ascii: type.toString.call(n)?n:[n],i.push(...n)}let a=e=>this.harvest.sendX(e);i.length?a=this.opts.raw?e=>this.harvest._send(e):e=>this.harvest.send(e):i.push(void 0),i.forEach((s=>{a({endpoint:this.endpoint,payload:s,opts:e,submitMethod:r,cbFinished:t,customUr
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 2e 72 65 70 6c 61 63 65 28 69 2c 22 22 29 7d 76 61 72 20 6f 3d 72 28 33 38 35 29 2c 63 3d 72 28 34 32 32 32 29 3b 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 22 22 3b 63 6f 6e 73 74 20 74 3d 28 30 2c 63 2e 66 29 28 65 29 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 28 30 2c 63 2e 66 29 28 6f 2e 46 4e 29 3f 22 3c 69 6e 6c 69 6e 65 3e 22 3a 74 7d 76 61 72 20 75 3d 21 31 2c 64 3d 2f 66 75 6e 63 74 69 6f 6e 20 28 2e 2b 3f 29 5c 73 2a 5c 28 2f 2c 6c 3d 2f 5e 5c 73 2a 61 74 20 28 3f 3a 28 28 3f 3a 5c 5b 6f 62 6a 65 63 74 20 6f 62 6a 65 63 74 5c 5d 29 3f 28 3f 3a 5b 5e 28 5d 2a 5c 28 5b 5e 29 5d 2a 5c 29 29 2a 5b 5e 28 29 5d 2a 28 3f 3a 20 5c 5b 61 73 20 5c 53 2b 5c 5d 29 3f 29 20 29 3f 5c Data Ascii: .replace(i,"")}var o=r(385),c=r(4222);function h(e){if("string"!=typeof e)return"";const t=(0,c.f)(e);return t===(0,c.f)(o.FN)?"<inline>":t}var u=!1,d=/function (.+?)\s$/,l=/^\sat (?:((?:\[object object\])?(?:[^(]\([^)]$)[^()](?: \[as \S+\])?) )?\
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 61 6d 65 7c 7c 6b 28 65 29 3b 72 65 74 75 72 6e 20 74 3f 7b 6d 6f 64 65 3a 22 6e 61 6d 65 6f 6e 6c 79 22 2c 6e 61 6d 65 3a 74 2c 6d 65 73 73 61 67 65 3a 65 2e 6d 65 73 73 61 67 65 2c 73 74 61 63 6b 53 74 72 69 6e 67 3a 74 2b 22 3a 20 22 2b 65 2e 6d 65 73 73 61 67 65 2c 66 72 61 6d 65 73 3a 5b 5d 7d 3a 6e 75 6c 6c 7d 28 65 29 2c 74 29 72 65 74 75 72 6e 20 74 7d 63 61 74 63 68 28 65 29 7b 75 7d 72 65 74 75 72 6e 7b 6d 6f 64 65 3a 22 66 61 69 6c 65 64 22 2c 73 74 61 63 6b 53 74 72 69 6e 67 3a 22 22 2c 66 72 61 6d 65 73 3a 5b 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 6c 65 74 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6d 61 74 63 68 28 66 29 3b 74 7c 7c 28 74 3d 65 2e 6d 61 74 63 68 28 6c 29 29 3b 69 66 28 74 29 72 65 Data Ascii: ame\|\|k(e);return t?{mode:"nameonly",name:t,message:e.message,stackString:t+": "+e.message,frames:[]}:null}(e),t)return t}catch(e){u}return{mode:"failed",stackString:"",frames:[]}}function v(e,t){let r=function(e){var t=e.match(f);t\|\|(t=e.match(l));if(t)re
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 2e 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 68 69 73 2e 66 65 61 74 75 72 65 4e 61 6d 65 2c 74 68 69 73 2e 65 65 29 2c 28 30 2c 79 2e 58 29 28 22 69 65 72 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 73 74 6f 72 65 45 72 72 6f 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 68 69 73 2e 66 65 61 74 75 72 65 4e 61 6d 65 2c 74 68 69 73 2e 65 65 29 3b 63 6f 6e 73 74 20 73 3d 28 30 2c 77 2e 4d 74 29 28 74 68 69 73 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 2c 22 6a 73 65 72 72 6f 72 73 2e 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 22 29 7c 7c 31 30 2c 6e 3d 6e 65 77 20 5f 2e 6f 28 22 6a 73 65 72 72 6f 72 73 22 2c 7b 6f 6e 46 69 6e 69 73 68 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e Data Ascii: .arguments)}),this.featureName,this.ee),(0,y.X)("ierr",(function(){return r.storeError(...arguments)}),this.featureName,this.ee);const s=(0,w.Mt)(this.agentIdentifier,"jserrors.harvestTimeSeconds")\|\|10,n=new _.o("jserrors",{onFinished:function(){return r.
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 20 74 3d 22 22 2c 72 3d 30 3b 72 3c 65 2e 66 72 61 6d 65 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 73 3d 65 2e 66 72 61 6d 65 73 5b 72 5d 2c 69 3d 6e 28 73 2e 66 75 6e 63 29 3b 74 26 26 28 74 2b 3d 22 5c 6e 22 29 2c 69 26 26 28 74 2b 3d 69 2b 22 40 22 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 73 2e 75 72 6c 26 26 28 74 2b 3d 73 2e 75 72 6c 29 2c 73 2e 6c 69 6e 65 26 26 28 74 2b 3d 22 3a 22 2b 73 2e 6c 69 6e 65 29 7d 72 65 74 75 72 6e 20 74 7d 73 74 6f 72 65 45 72 72 6f 72 28 65 2c 74 2c 72 2c 73 29 7b 74 3d 74 7c 7c 28 30 2c 43 2e 7a 29 28 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 77 2e 4f 50 29 28 74 68 69 73 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 29 3b 6c 65 74 20 69 3b 69 66 28 21 72 26 26 6e 2e 6f 6e 65 72 72 6f 72 26 Data Ascii: t="",r=0;r<e.frames.length;r++){var s=e.frames[r],i=n(s.func);t&&(t+="\n"),i&&(t+=i+"@"),"string"==typeof s.url&&(t+=s.url),s.line&&(t+=":"+s.line)}return t}storeError(e,t,r,s){t=t\|\|(0,C.z)();const n=(0,w.OP)(this.agentIdentifier);let i;if(!r&&n.onerror&
2024-04-24 17:31:27 UTC	1221	IN	Data Raw: 74 69 6f 6e 49 64 5d 2e 70 75 73 68 28 5b 64 2c 75 2c 63 2c 6c 2c 6d 2c 73 5d 29 3b 65 6c 73 65 7b 76 61 72 20 67 3d 7b 7d 3b 28 30 2c 49 2e 44 29 28 6d 2c 6b 29 2c 73 26 26 28 30 2c 49 2e 44 29 28 73 2c 6b 29 3b 76 61 72 20 76 3d 75 2b 22 3a 22 2b 62 28 28 30 2c 48 2e 50 29 28 67 29 29 3b 74 68 69 73 2e 61 67 67 72 65 67 61 74 6f 72 2e 73 74 6f 72 65 28 64 2c 76 2c 63 2c 6c 2c 67 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 2c 74 29 7b 67 5b 65 5d 3d 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 3f 28 30 2c 48 2e 50 29 28 74 29 3a 74 7d 7d 6f 6e 49 6e 74 65 72 61 63 74 69 6f 6e 53 61 76 65 64 28 65 29 7b 74 68 69 73 2e 65 72 72 6f 72 43 61 63 68 65 5b 65 2e 69 64 5d 26 26 21 74 68 69 73 2e 62 6c 6f 63 6b 65 64 26 26 28 74 68 69 73 2e 65 Data Ascii: tionId].push([d,u,c,l,m,s]);else{var g={};(0,I.D)(m,k),s&&(0,I.D)(s,k);var v=u+":"+b((0,H.P)(g));this.aggregator.store(d,v,c,l,g)}}function k(e,t){g[e]=t&&"object"==typeof t?(0,H.P)(t):t}}onInteractionSaved(e){this.errorCache[e.id]&&!this.blocked&&(this.e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	50007	162.247.243.39	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:26 UTC	555	OUT	GET /ajax-aggregate.998ef92b-1.236.0.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:27 UTC	800	IN	HTTP/1.1 200 OK Connection: close Content-Length: 7044 x-amz-id-2: kpSJ07VAyxgYE4YDb1BcltDzfjN29NAx1RHeoc5fjN1vzjM9PxLMuaY/jOAqphoZQSjzduc+ADg= x-amz-request-id: KTGE29V0SAHKQXNQ Last-Modified: Wed, 18 Oct 2023 20:57:29 GMT ETag: "07e3c83179c7da2e2f464a72b084aacf" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 x-amz-version-id: 4RFYRqAfNJzZv3o_5YXaoBJ6WgEOM5as Content-Type: application/javascript Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:27 GMT Via: 1.1 varnish X-Served-By: cache-lax-kwhp1940077-LAX X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 39 38 5d 2c 7b 31 31 39 39 3a 28 74 2c 65 2c 73 29 3d 3e 7b 73 2e 64 28 65 2c 7b 52 3a 28 29 3d 3e 61 2c 7a 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 6e 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 69 66 28 30 3d 3d 3d 6e 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 30 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 2e 68 6f 73 74 6e 61 6d 65 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 6e 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 73 3d 6e 5b 65 5d 3b 69 66 28 22 2a 22 3d 3d 3d 73 2e 68 6f 73 74 6e Data Ascii: "use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[898],{1199:(t,e,s)=>{s.d(e,{R:()=>a,z:()=>i});var n=[];function i(t){if(0===n.length)return!0;if(void 0===t.hostname)return!1;for(var e=0;e<n.length;e++){var s=n[e];if("*"===s.hostn
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 65 72 76 61 6c 3d 74 2c 74 68 69 73 2e 73 74 61 72 74 65 64 3d 21 30 2c 74 68 69 73 2e 73 63 68 65 64 75 6c 65 48 61 72 76 65 73 74 28 6e 75 6c 6c 21 3d 65 3f 65 3a 74 68 69 73 2e 69 6e 74 65 72 76 61 6c 29 7d 73 74 6f 70 54 69 6d 65 72 28 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3b 74 68 69 73 2e 61 62 6f 72 74 65 64 3d 74 2c 74 68 69 73 2e 73 74 61 72 74 65 64 3d 21 31 2c 74 68 69 73 2e 74 69 6d 65 6f 75 74 48 61 6e 64 6c 65 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 74 69 6d 65 6f 75 74 48 61 6e 64 6c 65 29 7d 73 63 68 65 64 75 6c 65 48 61 72 76 65 73 74 28 74 2c 65 29 7b 74 68 69 73 2e 74 Data Ascii: erval=t,this.started=!0,this.scheduleHarvest(null!=e?e:this.interval)}stopTimer(){let t=arguments.length>0&&void 0!==arguments[0]&&arguments[0];this.aborted=t,this.started=!1,this.timeoutHandle&&clearTimeout(this.timeoutHandle)}scheduleHarvest(t,e){this.t
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 58 3a 28 29 3d 3e 75 2c 6e 31 3a 28 29 3d 3e 6c 2c 75 52 3a 28 29 3d 3e 64 7d 29 3b 76 61 72 20 6e 3d 73 28 31 32 38 34 29 2c 69 3d 73 28 34 33 35 31 29 2c 61 3d 73 28 36 31 34 31 29 2c 72 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6f 3d 36 34 3b 66 75 6e 63 74 69 6f 6e 20 68 28 74 2c 65 2c 73 29 7b 72 65 74 75 72 6e 20 74 7c 7c 30 3d 3d 3d 74 7c 7c 22 22 3d 3d 3d 74 3f 65 28 74 29 2b 28 73 3f 22 2c 22 3a 22 22 29 3a 22 21 22 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 3f 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 3a 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 30 3d 3d 3d 74 3f 22 22 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 29 2e 74 6f 53 74 72 Data Ascii: X:()=>u,n1:()=>l,uR:()=>d});var n=s(1284),i=s(4351),a=s(6141),r=Object.prototype.hasOwnProperty,o=64;function h(t,e,s){return t\|\|0===t\|\|""===t?e(t)+(s?",":""):"!"}function d(t,e){return e?Math.floor(t).toString(36):void 0===t\|\|0===t?"":Math.floor(t).toStr
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 6f 3d 73 28 35 37 36 33 29 2c 68 3d 73 28 32 35 37 33 29 2c 64 3d 73 28 31 31 39 39 29 2c 75 3d 73 28 37 38 32 35 29 2c 6c 3d 73 28 38 65 33 29 2c 63 3d 73 28 33 33 32 35 29 2c 70 3d 73 28 33 30 38 31 29 2c 66 3d 73 28 32 32 32 32 29 3b 63 6c 61 73 73 20 76 20 65 78 74 65 6e 64 73 20 66 2e 6d 7b 73 74 61 74 69 63 20 66 65 61 74 75 72 65 4e 61 6d 65 3d 75 2e 74 3b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 2c 65 29 7b 73 75 70 65 72 28 74 2c 65 2c 75 2e 74 29 3b 6c 65 74 20 73 2c 66 3d 5b 5d 2c 76 3d 7b 7d 2c 67 3d 5b 5d 3b 63 6f 6e 73 74 20 6d 3d 74 68 69 73 2e 65 65 2c 62 3d 28 30 2c 6f 2e 4d 74 29 28 74 2c 22 61 6a 61 78 2e 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 22 29 7c 7c 31 30 2c 78 3d 28 30 2c 6f 2e 4d 74 29 28 74 2c 22 61 6a 61 78 2e 6d Data Ascii: o=s(5763),h=s(2573),d=s(1199),u=s(7825),l=s(8e3),c=s(3325),p=s(3081),f=s(2222);class v extends f.m{static featureName=u.t;constructor(t,e){super(t,e,u.t);let s,f=[],v={},g=[];const m=this.ee,b=(0,o.Mt)(t,"ajax.harvestTimeSeconds")\|\|10,x=(0,o.Mt)(t,"ajax.m
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 66 28 6f 2e 74 6f 6f 42 69 67 28 65 29 29 7b 69 66 28 31 21 3d 3d 6f 2e 65 76 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 61 3d 21 30 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 6e 2e 70 75 73 68 28 6f 2e 70 61 79 6c 6f 61 64 29 7d 72 65 74 75 72 6e 20 61 3f 48 28 74 2c 65 2c 2b 2b 73 29 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 29 7b 74 68 69 73 2e 61 64 64 53 74 72 69 6e 67 3d 28 30 2c 61 2e 46 58 29 28 74 29 2c 74 68 69 73 2e 65 76 65 6e 74 73 3d 65 2c 74 68 69 73 2e 70 61 79 6c 6f 61 64 3d 22 62 65 6c 2e 37 3b 22 3b 66 6f 72 28 76 61 72 20 73 3d 30 3b 73 3c 65 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 76 61 72 20 6e 3d 65 5b 73 5d 2c 69 3d 5b 28 30 2c 61 2e 75 52 29 28 6e 2e 73 74 61 72 74 54 69 6d 65 29 2c 28 30 2c 61 2e 75 52 29 28 6e 2e 65 6e 64 54 69 6d 65 Data Ascii: f(o.tooBig(e)){if(1!==o.events.length){a=!0;break}}else n.push(o.payload)}return a?H(t,e,++s):n}function A(e){this.addString=(0,a.FX)(t),this.events=e,this.payload="bel.7;";for(var s=0;s<e.length;s++){var n=e[s],i=[(0,a.uR)(n.startTime),(0,a.uR)(n.endTime
2024-04-24 17:31:27 UTC	154	IN	Data Raw: 28 74 68 69 73 2e 66 65 61 74 75 72 65 4e 61 6d 65 29 2c 28 28 29 3d 3e 7b 73 2e 73 74 61 72 74 54 69 6d 65 72 28 62 29 7d 29 29 29 2c 28 30 2c 6c 2e 4c 29 28 74 68 69 73 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 2c 74 68 69 73 2e 66 65 61 74 75 72 65 4e 61 6d 65 29 7d 7d 7d 2c 37 38 32 35 3a 28 74 2c 65 2c 73 29 3d 3e 7b 73 2e 64 28 65 2c 7b 74 3a 28 29 3d 3e 6e 7d 29 3b 63 6f 6e 73 74 20 6e 3d 73 28 33 33 32 35 29 2e 44 2e 61 6a 61 78 7d 7d 5d 29 3b Data Ascii: (this.featureName),(()=>{s.startTimer(b)}))),(0,l.L)(this.agentIdentifier,this.featureName)}}},7825:(t,e,s)=>{s.d(e,{t:()=>n});const n=s(3325).D.ajax}}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	50001	35.71.131.137	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:27 UTC	993	OUT	GET /track/upb/?adv=9nlrx8p&ref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&upid=e7m2c49&upv=1.1.0&td1=https://www.xero.com/us/try-now/manage-invoices/ HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9
2024-04-24 17:31:27 UTC	537	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:27 GMT Content-Type: text/html Content-Length: 911 Connection: close server: Kestrel set-cookie: TDID=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9; expires=Thu, 24 Apr 2025 17:31:27 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsI0pKn98yj8jwQBRIXCghhcHBuZXh1cxILCIKzp_fMo_I8EAUSFgoHcnViaWNvbhILCODTp_fMo_I8EAUYBSgDMgsIsO-ppOOj8jwQBTgBQgQiAggBWgc5bmxyeDhwYAE.; expires=Thu, 24 Apr 2025 17:31:27 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 17:31:27 UTC	911	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	50008	162.247.243.39	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:27 UTC	564	OUT	GET /session_trace-aggregate.83105561-1.236.0.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:27 UTC	801	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12146 x-amz-id-2: k6MZJahZTw3NzMkWDni3nILOVTxFsJgS+X3ZvRLDW7+HvZZ4TrK3qpQmBFEsXWUsiHT4cnNyrsw= x-amz-request-id: WYR50JEGPC7KW3N9 Last-Modified: Wed, 18 Oct 2023 21:36:06 GMT ETag: "4ef8d054860549421e884b3d2d74b83e" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 x-amz-version-id: i7FiQ4ZQq6WkusXBROeoFJl9n3Tv0mKC Content-Type: application/javascript Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:27 GMT Via: 1.1 varnish X-Served-By: cache-bur-kbur8200163-BUR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 33 33 5d 2c 7b 39 31 33 39 3a 28 65 2c 74 2c 73 29 3d 3e 7b 6c 65 74 20 72 3b 73 2e 64 28 74 2c 7b 6d 3a 28 29 3d 3e 6e 7d 29 3b 63 6f 6e 73 74 20 69 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 65 3d 3e 72 3d 65 29 29 2c 6e 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 6f 6e 52 65 70 6c 61 79 52 65 61 64 79 3a 72 2c 73 65 73 73 69 6f 6e 52 65 70 6c 61 79 49 6e 69 74 69 61 6c 69 7a 65 64 3a 69 7d 29 7d 2c 32 35 37 33 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 6f 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 73 28 34 32 34 37 Data Ascii: "use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[733],{9139:(e,t,s)=>{let r;s.d(t,{m:()=>n});const i=new Promise((e=>r=e)),n=Object.freeze({onReplayReady:r,sessionReplayInitialized:i})},2573:(e,t,s)=>{s.d(t,{o:()=>c});var r=s(4247
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 3d 3d 3d 72 2e 42 65 3b 69 66 28 69 3d 74 68 69 73 2e 6f 70 74 73 2e 67 65 74 50 61 79 6c 6f 61 64 28 7b 72 65 74 72 79 3a 74 7d 29 2c 21 69 29 72 65 74 75 72 6e 20 76 6f 69 64 28 74 68 69 73 2e 73 74 61 72 74 65 64 26 26 74 68 69 73 2e 73 63 68 65 64 75 6c 65 48 61 72 76 65 73 74 28 29 29 3b 69 3d 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 69 29 3f 69 3a 5b 69 5d 2c 6e 2e 70 75 73 68 28 2e 2e 2e 69 29 7d 6c 65 74 20 6f 3d 65 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 73 65 6e 64 58 28 65 29 3b 6e 2e 6c 65 6e 67 74 68 3f 6f 3d 74 68 69 73 2e 6f 70 74 73 2e 72 61 77 3f 65 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 5f 73 65 6e 64 28 65 29 3a 65 3d Data Ascii: ===r.Be;if(i=this.opts.getPayload({retry:t}),!i)return void(this.started&&this.scheduleHarvest());i="[object Array]"===Object.prototype.toString.call(i)?i:[i],n.push(...i)}let o=e=>this.harvest.sendX(e);n.length?o=this.opts.raw?e=>this.harvest._send(e):e=
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 79 7b 74 3d 6e 65 77 20 55 52 4c 28 65 2c 73 2e 68 72 65 66 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 6e 7d 6e 2e 70 6f 72 74 3d 74 2e 70 6f 72 74 3b 76 61 72 20 6f 3d 74 2e 68 72 65 66 2e 73 70 6c 69 74 28 22 3a 2f 2f 22 29 3b 21 6e 2e 70 6f 72 74 26 26 6f 5b 31 5d 26 26 28 6e 2e 70 6f 72 74 3d 6f 5b 31 5d 2e 73 70 6c 69 74 28 22 2f 22 29 5b 30 5d 2e 73 70 6c 69 74 28 22 40 22 29 2e 70 6f 70 28 29 2e 73 70 6c 69 74 28 22 3a 22 29 5b 31 5d 29 2c 6e 2e 70 6f 72 74 26 26 22 30 22 21 3d 3d 6e 2e 70 6f 72 74 7c 7c 28 6e 2e 70 6f 72 74 3d 22 68 74 74 70 73 22 3d 3d 3d 6f 5b 30 5d 3f 22 34 34 33 22 3a 22 38 30 22 29 2c 6e 2e 68 6f 73 74 6e 61 6d 65 3d 74 2e 68 6f 73 74 6e 61 6d 65 7c 7c 73 2e 68 6f 73 74 6e 61 6d 65 2c 6e 2e 70 61 74 68 6e 61 6d 65 Data Ascii: y{t=new URL(e,s.href)}catch(e){return n}n.port=t.port;var o=t.href.split("://");!n.port&&o[1]&&(n.port=o[1].split("/")[0].split("@").pop().split(":")[1]),n.port&&"0"!==n.port\|\|(n.port="https"===o[0]?"443":"80"),n.hostname=t.hostname\|\|s.hostname,n.pathname
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 65 74 75 72 6e 3b 74 68 69 73 2e 72 65 73 6f 75 72 63 65 4f 62 73 65 72 76 65 72 3d 73 3f 2e 72 65 73 6f 75 72 63 65 4f 62 73 65 72 76 65 72 2c 74 68 69 73 2e 70 74 69 64 3d 22 22 2c 74 68 69 73 2e 74 72 61 63 65 3d 7b 7d 2c 74 68 69 73 2e 6e 6f 64 65 43 6f 75 6e 74 3d 30 2c 74 68 69 73 2e 73 65 6e 74 54 72 61 63 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3d 28 30 2c 6f 2e 4d 74 29 28 65 2c 22 73 65 73 73 69 6f 6e 5f 74 72 61 63 65 2e 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 22 29 7c 7c 31 30 2c 74 68 69 73 2e 6d 61 78 4e 6f 64 65 73 50 65 72 48 61 72 76 65 73 74 3d 28 30 2c 6f 2e 4d 74 29 28 65 2c 22 73 65 73 73 69 6f 6e 5f 74 72 61 63 65 2e 6d 61 78 4e 6f 64 65 73 50 65 72 48 61 72 76 65 73 74 Data Ascii: eturn;this.resourceObserver=s?.resourceObserver,this.ptid="",this.trace={},this.nodeCount=0,this.sentTrace=null,this.harvestTimeSeconds=(0,o.Mt)(e,"session_trace.harvestTimeSeconds")\|\|10,this.maxNodesPerHarvest=(0,o.Mt)(e,"session_trace.maxNodesPerHarvest
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 70 6c 61 79 26 26 61 77 61 69 74 20 74 2e 69 6e 69 74 69 61 6c 69 7a 65 64 41 67 65 6e 74 73 5b 65 5d 2e 66 65 61 74 75 72 65 73 2e 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 2e 6f 6e 41 67 67 72 65 67 61 74 65 49 6d 70 6f 72 74 65 64 29 72 65 74 75 72 6e 20 61 77 61 69 74 20 70 2e 6d 2e 73 65 73 73 69 6f 6e 52 65 70 6c 61 79 49 6e 69 74 69 61 6c 69 7a 65 64 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6c 2e 49 4b 2e 4f 46 46 7d 28 65 29 3b 6c 65 74 20 69 3b 72 3d 3d 3d 6c 2e 49 4b 2e 4f 46 46 26 26 28 74 68 69 73 2e 69 73 53 74 61 6e 64 61 6c 6f 6e 65 3d 21 30 29 2c 69 3d 21 30 3d 3d 3d 6e 7c 7c 72 3d 3d 3d 6c 2e 49 4b 2e 45 52 52 4f 52 26 26 73 3f 6c 2e 49 4b 2e 46 55 4c 4c 3a 72 2c 61 2e 77 72 69 74 65 28 7b 73 65 73 73 69 6f 6e 54 72 61 63 65 Data Ascii: play&&await t.initializedAgents[e].features.session_replay.onAggregateImported)return await p.m.sessionReplayInitialized}catch(e){}return l.IK.OFF}(e);let i;r===l.IK.OFF&&(this.isStandalone=!0),i=!0===n\|\|r===l.IK.ERROR&&s?l.IK.FULL:r,a.write({sessionTrace
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 74 3d 6e 65 77 20 41 72 72 61 79 28 65 29 2c 73 3d 30 3b 73 3c 65 3b 73 2b 2b 29 74 5b 73 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 3b 72 65 74 75 72 6e 20 6e 2e 73 65 74 74 6c 65 28 28 28 29 3d 3e 69 2e 73 74 6f 72 65 45 72 72 6f 72 41 67 67 28 2e 2e 2e 74 29 29 29 7d 29 2c 74 68 69 73 2e 66 65 61 74 75 72 65 4e 61 6d 65 2c 74 68 69 73 2e 65 65 29 2c 28 30 2c 72 2e 58 29 28 22 70 76 74 41 64 64 65 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 74 3d 6e 65 77 20 41 72 72 61 79 28 65 29 2c 73 3d 30 3b 73 3c 65 3b 73 2b 2b 29 74 5b 73 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 3b 72 65 74 75 72 6e 20 6e 2e 73 65 74 74 6c 65 28 28 28 29 3d Data Ascii: uments.length,t=new Array(e),s=0;s<e;s++)t[s]=arguments[s];return n.settle((()=>i.storeErrorAgg(...t)))}),this.featureName,this.ee),(0,r.X)("pvtAdded",(function(){for(var e=arguments.length,t=new Array(e),s=0;s<e;s++)t[s]=arguments[s];return n.settle((()=
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 49 4b 2e 4f 46 46 26 26 30 3d 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 74 72 61 63 65 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 3b 69 66 28 65 3d 3d 3d 6c 2e 49 4b 2e 45 52 52 4f 52 29 72 65 74 75 72 6e 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 74 61 6b 65 53 54 4e 73 28 65 2e 72 65 74 72 79 29 7d 70 72 6f 63 65 73 73 50 56 54 28 65 2c 74 2c 73 29 7b 74 68 69 73 2e 73 74 6f 72 65 54 69 6d 69 6e 67 28 7b 5b 65 5d 3a 74 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 66 69 22 3d 3d 3d 65 26 26 21 21 74 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 2e 66 69 64 7d 28 65 2c 73 29 26 26 74 68 69 73 2e 73 74 6f 72 65 45 76 65 6e 74 28 7b 74 79 70 65 3a 22 66 69 64 22 2c 74 61 72 67 65 74 3a 22 64 6f 63 75 6d Data Ascii: IK.OFF&&0===Object.keys(this.trace).length)return;if(e===l.IK.ERROR)return}return this.takeSTNs(e.retry)}processPVT(e,t,s){this.storeTiming({[e]:t}),function(e,t){return"fi"===e&&!!t&&"number"==typeof t.fid}(e,s)&&this.storeEvent({type:"fid",target:"docum
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 6f 73 74 2b 74 2e 70 61 74 68 6e 61 6d 65 7d 65 6c 73 65 20 69 66 28 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 74 61 67 4e 61 6d 65 26 26 28 73 3d 65 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 65 2e 69 64 26 26 28 73 2b 3d 22 23 22 2b 65 2e 69 64 29 2c 65 2e 63 6c 61 73 73 4e 61 6d 65 29 29 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 65 2e 63 6c 61 73 73 4c 69 73 74 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 73 2b 3d 22 2e 22 2b 65 2e 63 6c 61 73 73 4c 69 73 74 5b 74 5d 3b 72 65 74 75 72 6e 22 75 6e 6b 6e 6f 77 6e 22 3d 3d 3d 73 26 26 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 73 3d 74 3a 74 3d 3d 3d 64 6f 63 75 6d 65 6e 74 3f 73 3d 22 64 6f 63 75 6d 65 6e 74 22 3a 74 3d 3d 3d 77 69 6e 64 6f 77 3f Data Ascii: ost+t.pathname}else if(e&&"string"==typeof e.tagName&&(s=e.tagName.toLowerCase(),e.id&&(s+="#"+e.id),e.className))for(let t=0;t<e.classList.length;t++)s+="."+e.classList[t];return"unknown"===s&&("string"==typeof t?s=t:t===document?s="document":t===window?
2024-04-24 17:31:27 UTC	1122	IN	Data Raw: 69 26 26 28 69 3c 30 3f 28 69 3d 72 2e 6c 65 6e 67 74 68 2c 64 65 6c 65 74 65 20 74 68 69 73 2e 74 72 61 63 65 5b 65 5d 29 3a 72 2e 73 70 6c 69 63 65 28 30 2c 69 29 2c 74 68 69 73 2e 6e 6f 64 65 43 6f 75 6e 74 2d 3d 69 2c 74 2b 3d 69 29 7d 29 29 2c 74 7d 74 61 6b 65 53 54 4e 73 28 65 29 7b 74 68 69 73 2e 72 65 73 6f 75 72 63 65 4f 62 73 65 72 76 65 72 7c 7c 74 68 69 73 2e 73 74 6f 72 65 52 65 73 6f 75 72 63 65 73 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 72 65 73 6f 75 72 63 65 22 29 29 3b 63 6f 6e 73 74 20 74 3d 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 74 68 69 73 2e 74 72 61 63 65 29 2e 66 6c 61 74 4d 61 70 28 28 65 3d 3e 7b 6c 65 74 5b 74 2c 73 5d 3d 65 3b 69 66 28 21 28 74 20 Data Ascii: i&&(i<0?(i=r.length,delete this.trace[e]):r.splice(0,i),this.nodeCount-=i,t+=i)})),t}takeSTNs(e){this.resourceObserver\|\|this.storeResources(window.performance.getEntriesByType("resource"));const t=Object.entries(this.trace).flatMap((e=>{let[t,s]=e;if(!(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	50009	162.247.243.39	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:27 UTC	554	OUT	GET /spa-aggregate.e6b09d52-1.236.0.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:27 UTC	813	IN	HTTP/1.1 200 OK Connection: close Content-Length: 20843 x-amz-id-2: sXoEMiHHPoSpS8i/kbv5S1xlupbcsqPoOFkHJdrXqNAtur1NFsscX6dhS7qfoEuRjB+rvfigMCShM2Fq8u+WZg== x-amz-request-id: YRNFV883YV9QSD9W Last-Modified: Wed, 18 Oct 2023 21:36:35 GMT ETag: "27ef55ddf9eded9cf24ce8747e8bbe04" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 x-amz-version-id: drxqY6SpM4cwKd1P3dYcbVYIBU2GvQuP Content-Type: application/javascript Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:27 GMT Via: 1.1 varnish X-Served-By: cache-lax-kwhp1940088-LAX X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 37 33 5d 2c 7b 31 31 39 39 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 28 65 2c 7b 52 3a 28 29 3d 3e 73 2c 7a 3a 28 29 3d 3e 72 7d 29 3b 76 61 72 20 6e 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 69 66 28 30 3d 3d 3d 6e 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 30 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 2e 68 6f 73 74 6e 61 6d 65 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 6e 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 69 3d 6e 5b 65 5d 3b 69 66 28 22 2a 22 3d 3d 3d 69 2e 68 6f 73 74 6e Data Ascii: "use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[873],{1199:(t,e,i)=>{i.d(e,{R:()=>s,z:()=>r});var n=[];function r(t){if(0===n.length)return!0;if(void 0===t.hostname)return!1;for(var e=0;e<n.length;e++){var i=n[e];if("*"===i.hostn
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 65 72 76 61 6c 3d 74 2c 74 68 69 73 2e 73 74 61 72 74 65 64 3d 21 30 2c 74 68 69 73 2e 73 63 68 65 64 75 6c 65 48 61 72 76 65 73 74 28 6e 75 6c 6c 21 3d 65 3f 65 3a 74 68 69 73 2e 69 6e 74 65 72 76 61 6c 29 7d 73 74 6f 70 54 69 6d 65 72 28 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3b 74 68 69 73 2e 61 62 6f 72 74 65 64 3d 74 2c 74 68 69 73 2e 73 74 61 72 74 65 64 3d 21 31 2c 74 68 69 73 2e 74 69 6d 65 6f 75 74 48 61 6e 64 6c 65 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 74 69 6d 65 6f 75 74 48 61 6e 64 6c 65 29 7d 73 63 68 65 64 75 6c 65 48 61 72 76 65 73 74 28 74 2c 65 29 7b 74 68 69 73 2e 74 Data Ascii: erval=t,this.started=!0,this.scheduleHarvest(null!=e?e:this.interval)}stopTimer(){let t=arguments.length>0&&void 0!==arguments[0]&&arguments[0];this.aborted=t,this.started=!1,this.timeoutHandle&&clearTimeout(this.timeoutHandle)}scheduleHarvest(t,e){this.t
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 63 6f 6e 73 74 20 6e 3d 7b 7d 7d 2c 32 31 34 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 28 65 2c 7b 41 47 3a 28 29 3d 3e 68 2c 46 58 3a 28 29 3d 3e 63 2c 6e 31 3a 28 29 3d 3e 64 2c 75 52 3a 28 29 3d 3e 75 7d 29 3b 76 61 72 20 6e 3d 69 28 31 32 38 34 29 2c 72 3d 69 28 34 33 35 31 29 2c 73 3d 69 28 36 31 34 31 29 2c 61 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6f 3d 36 34 3b 66 75 6e 63 74 69 6f 6e 20 68 28 74 2c 65 2c 69 29 7b 72 65 74 75 72 6e 20 74 7c 7c 30 3d 3d 3d 74 7c 7c 22 22 3d 3d 3d 74 3f 65 28 74 29 2b 28 69 3f 22 2c 22 3a 22 22 29 3a 22 21 22 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 3f 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 29 2e 74 6f 53 74 72 69 6e 67 28 33 Data Ascii: const n={}},214:(t,e,i)=>{i.d(e,{AG:()=>h,FX:()=>c,n1:()=>d,uR:()=>u});var n=i(1284),r=i(4351),s=i(6141),a=Object.prototype.hasOwnProperty,o=64;function h(t,e,i){return t\|\|0===t\|\|""===t?e(t)+(i?",":""):"!"}function u(t,e){return e?Math.floor(t).toString(3
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 66 65 74 63 68 22 2b 6e 5d 2c 69 2c 22 66 22 2c 66 29 2c 4e 28 65 5b 6f 2b 6e 5d 2c 69 2c 22 64 6e 22 2c 66 29 2c 4e 28 65 5b 6f 2b 72 5d 2c 69 2c 22 64 6e 65 22 2c 66 29 2c 4e 28 65 5b 22 63 22 2b 68 2b 6e 5d 2c 69 2c 22 63 22 2c 66 29 2c 4e 28 65 5b 22 73 65 63 75 72 65 43 22 2b 68 2b 22 69 6f 6e 22 2b 6e 5d 2c 69 2c 22 73 22 2c 66 29 2c 4e 28 65 5b 22 63 22 2b 68 2b 72 5d 2c 69 2c 22 63 65 22 2c 66 29 2c 4e 28 65 5b 75 2b 6e 5d 2c 69 2c 22 72 71 22 2c 66 29 2c 4e 28 65 5b 63 2b 6e 5d 2c 69 2c 22 72 70 22 2c 66 29 2c 4e 28 65 5b 63 2b 72 5d 2c 69 2c 22 72 70 65 22 2c 66 29 2c 4e 28 65 2e 64 6f 6d 4c 6f 61 64 69 6e 67 2c 69 2c 22 64 6c 22 2c 66 29 2c 4e 28 65 2e 64 6f 6d 49 6e 74 65 72 61 63 74 69 76 65 2c 69 2c 22 64 69 22 2c 66 29 2c 4e 28 65 5b 6c 2b Data Ascii: fetch"+n],i,"f",f),N(e[o+n],i,"dn",f),N(e[o+r],i,"dne",f),N(e["c"+h+n],i,"c",f),N(e["secureC"+h+"ion"+n],i,"s",f),N(e["c"+h+r],i,"ce",f),N(e[u+n],i,"rq",f),N(e[c+n],i,"rp",f),N(e[c+r],i,"rpe",f),N(e.domLoading,i,"dl",f),N(e.domInteractive,i,"di",f),N(e[l+
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 70 6c 69 74 28 22 2f 22 29 5b 30 5d 2e 73 70 6c 69 74 28 22 40 22 29 2e 70 6f 70 28 29 2e 73 70 6c 69 74 28 22 3a 22 29 5b 31 5d 29 2c 73 2e 70 6f 72 74 26 26 22 30 22 21 3d 3d 73 2e 70 6f 72 74 7c 7c 28 73 2e 70 6f 72 74 3d 22 68 74 74 70 73 22 3d 3d 3d 61 5b 30 5d 3f 22 34 34 33 22 3a 22 38 30 22 29 2c 73 2e 68 6f 73 74 6e 61 6d 65 3d 65 2e 68 6f 73 74 6e 61 6d 65 7c 7c 69 2e 68 6f 73 74 6e 61 6d 65 2c 73 2e 70 61 74 68 6e 61 6d 65 3d 65 2e 70 61 74 68 6e 61 6d 65 2c 73 2e 70 72 6f 74 6f 63 6f 6c 3d 61 5b 30 5d 2c 22 2f 22 21 3d 3d 73 2e 70 61 74 68 6e 61 6d 65 2e 63 68 61 72 41 74 28 30 29 26 26 28 73 2e 70 61 74 68 6e 61 6d 65 3d 22 2f 22 2b 73 2e 70 61 74 68 6e 61 6d 65 29 3b 76 61 72 20 6f 3d 21 65 2e 70 72 6f 74 6f 63 6f 6c 7c 7c 22 3a 22 3d 3d 3d Data Ascii: plit("/")[0].split("@").pop().split(":")[1]),s.port&&"0"!==s.port\|\|(s.port="https"===a[0]?"443":"80"),s.hostname=e.hostname\|\|i.hostname,s.pathname=e.pathname,s.protocol=a[0],"/"!==s.pathname.charAt(0)&&(s.pathname="/"+s.pathname);var o=!e.protocol\|\|":"===
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 54 28 74 2c 65 2c 69 2c 6e 2c 72 2c 73 29 7b 74 68 69 73 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 3d 73 2c 74 68 69 73 2e 65 65 3d 64 2e 65 65 2e 67 65 74 28 73 29 2c 67 5b 73 5d 3d 30 2c 74 68 69 73 2e 69 64 3d 2b 2b 67 5b 73 5d 2c 74 68 69 73 2e 65 76 65 6e 74 4e 61 6d 65 3d 74 2c 74 68 69 73 2e 6e 6f 64 65 73 3d 30 2c 74 68 69 73 2e 72 65 6d 61 69 6e 69 6e 67 3d 30 2c 74 68 69 73 2e 66 69 6e 69 73 68 54 69 6d 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 68 65 63 6b 69 6e 67 46 69 6e 69 73 68 3d 21 31 2c 74 68 69 73 2e 6c 61 73 74 43 62 3d 74 68 69 73 2e 6c 61 73 74 46 69 6e 69 73 68 3d 65 2c 74 68 69 73 2e 68 61 6e 64 6c 65 72 73 3d 5b 5d 2c 74 68 69 73 2e 6f 6e 46 69 6e 69 73 68 65 64 3d 72 2c 74 68 69 73 2e 64 6f 6e 65 Data Ascii: function T(t,e,i,n,r,s){this.agentIdentifier=s,this.ee=d.ee.get(s),g[s]=0,this.id=++g[s],this.eventName=t,this.nodes=0,this.remaining=0,this.finishTimer=null,this.checkingFinish=!1,this.lastCb=this.lastFinish=e,this.handlers=[],this.onFinished=r,this.done
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 73 74 54 69 6d 65 73 74 61 6d 70 3d 76 6f 69 64 20 30 7d 73 65 72 69 61 6c 69 7a 65 4d 75 6c 74 69 70 6c 65 28 74 2c 65 2c 69 29 7b 63 6f 6e 73 74 20 6e 3d 28 30 2c 63 2e 43 35 29 28 74 68 69 73 2e 73 68 61 72 65 64 43 6f 6e 74 65 78 74 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 29 3b 76 61 72 20 72 3d 28 30 2c 78 2e 46 58 29 28 74 68 69 73 2e 73 68 61 72 65 64 43 6f 6e 74 65 78 74 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 29 2c 73 3d 22 62 65 6c 2e 37 22 3b 72 65 74 75 72 6e 20 74 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 73 2b 3d 22 3b 22 2b 74 68 69 73 2e 73 65 72 69 61 6c 69 7a 65 49 6e 74 65 72 61 63 74 69 6f 6e 28 74 2e 72 6f 6f 74 2c 65 2c 69 2c 74 2e 72 6f 75 74 65 43 68 61 6e 67 65 2c 72 2c 6e 29 7d 29 29 2c 74 68 69 73 2e 66 69 72 73 Data Ascii: stTimestamp=void 0}serializeMultiple(t,e,i){const n=(0,c.C5)(this.sharedContext.agentIdentifier);var r=(0,x.FX)(this.sharedContext.agentIdentifier),s="bel.7";return t.forEach((t=>{s+=";"+this.serializeInteraction(t.root,e,i,t.routeChange,r,n)})),this.firs
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 2c 78 2e 75 52 2c 21 31 29 29 3b 76 61 72 20 46 3d 28 30 2c 78 2e 6e 31 29 28 52 2e 63 75 73 74 6f 6d 2c 72 29 3b 54 3d 54 2e 63 6f 6e 63 61 74 28 46 29 2c 4e 3d 46 2e 6c 65 6e 67 74 68 2c 76 26 26 28 70 2b 2b 2c 54 2e 70 75 73 68 28 22 61 2c 22 2b 72 28 76 29 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 43 2e 70 75 73 68 28 72 28 62 2e 6d 65 74 68 6f 64 29 2c 28 30 2c 78 2e 75 52 29 28 62 2e 73 74 61 74 75 73 29 2c 72 28 62 2e 68 6f 73 74 29 2c 72 28 62 2e 70 61 74 68 6e 61 6d 65 29 2c 28 30 2c 78 2e 75 52 29 28 45 2e 74 78 53 69 7a 65 29 2c 28 30 2c 78 2e 75 52 29 28 45 2e 72 78 53 69 7a 65 29 2c 52 2e 69 73 46 65 74 63 68 3f 31 3a 52 2e 69 73 4a 53 4f 4e 50 3f 32 3a 22 22 2c 72 28 74 2e 69 64 Data Ascii: irstContentfulPaint,x.uR,!1));var F=(0,x.n1)(R.custom,r);T=T.concat(F),N=F.length,v&&(p++,T.push("a,"+r(v)));break;case 2:C.push(r(b.method),(0,x.uR)(b.status),r(b.host),r(b.pathname),(0,x.uR)(E.txSize),(0,x.uR)(E.rxSize),R.isFetch?1:R.isJSONP?2:"",r(t.id
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 2c 22 73 70 61 2e 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 22 29 7c 7c 31 30 2c 69 6e 74 65 72 61 63 74 69 6f 6e 73 54 6f 48 61 72 76 65 73 74 3a 5b 5d 2c 69 6e 74 65 72 61 63 74 69 6f 6e 73 53 65 6e 74 3a 5b 5d 7d 2c 74 68 69 73 2e 73 65 72 69 61 6c 69 7a 65 72 3d 6e 65 77 20 41 28 74 68 69 73 29 3b 63 6f 6e 73 74 7b 73 74 61 74 65 3a 69 2c 73 65 72 69 61 6c 69 7a 65 72 3a 6c 7d 3d 74 68 69 73 3b 6c 65 74 7b 62 6c 6f 63 6b 65 64 3a 66 7d 3d 74 68 69 73 3b 63 6f 6e 73 74 20 6d 3d 64 2e 65 65 2e 67 65 74 28 74 29 2c 70 3d 6d 2e 67 65 74 28 22 6d 75 74 61 74 69 6f 6e 22 29 2c 4e 3d 6d 2e 67 65 74 28 22 70 72 6f 6d 69 73 65 22 29 2c 76 3d 6d 2e 67 65 74 28 22 68 69 73 74 6f 72 79 22 29 2c 67 3d 6d 2e 67 65 74 28 22 65 76 65 6e 74 73 22 29 2c 52 Data Ascii: ,"spa.harvestTimeSeconds")\|\|10,interactionsToHarvest:[],interactionsSent:[]},this.serializer=new A(this);const{state:i,serializer:l}=this;let{blocked:f}=this;const m=d.ee.get(t),p=m.get("mutation"),N=m.get("promise"),v=m.get("history"),g=m.get("events"),R
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 28 74 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 28 71 29 7d 29 2c 5f 2e 44 2e 73 70 61 2c 6d 29 2c 28 30 2c 6e 2e 58 29 28 79 2c 56 2c 74 68 69 73 2e 66 65 61 74 75 72 65 4e 61 6d 65 2c 6d 29 2c 28 30 2c 6e 2e 58 29 28 22 63 62 2d 65 6e 64 22 2c 56 2c 74 68 69 73 2e 66 65 61 74 75 72 65 4e 61 6d 65 2c 4e 29 2c 28 30 2c 6e 2e 58 29 28 4f 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 65 5b 30 5d 2c 73 3d 72 2e 74 79 70 65 2c 61 3d 72 2e 5f 5f 6e 72 4e 6f 64 65 3b 69 66 28 69 2e 70 61 67 65 4c 6f 61 64 65 64 7c 7c 22 6c 6f 61 64 22 21 3d 3d 73 7c 7c 6e 21 3d 3d 77 69 6e 64 6f 77 7c 7c 28 69 2e 70 61 67 65 4c 6f 61 64 65 64 3d 21 30 2c 74 68 69 73 2e 70 72 65 76 4e 6f 64 65 3d 69 2e 63 75 72 72 65 6e 74 4e Data Ascii: (t){"function"==typeof t&&t(q)}),_.D.spa,m),(0,n.X)(y,V,this.featureName,m),(0,n.X)("cb-end",V,this.featureName,N),(0,n.X)(O,(function(e,n){var r=e[0],s=r.type,a=r.__nrNode;if(i.pageLoaded\|\|"load"!==s\|\|n!==window\|\|(i.pageLoaded=!0,this.prevNode=i.currentN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	50010	162.247.243.39	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:27 UTC	562	OUT	GET /page_action-aggregate.ac76d497-1.236.0.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:27 UTC	832	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4643 x-amz-id-2: FNHrTzccyR3048i4hpN28fMI5wYM1NnAn5kCFrC83SiEt2TMQIGoQtAn9OWLADHlZoFUw6gcA6ms5AaK61Kx4ld/QPTijMUPIB8667A+Lro= x-amz-request-id: CB6MCYFZ7BH4PW4V Last-Modified: Wed, 18 Oct 2023 21:34:23 GMT ETag: "8862791debd0b259297a0ccf618932eb" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 x-amz-version-id: dq9G4xn01_QwtwzwaNCz9IM9g3AQWz7v Content-Type: application/javascript Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:27 GMT Via: 1.1 varnish X-Served-By: cache-lax-kwhp1940143-LAX X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4e 52 42 41 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 38 5d 2c 7b 32 35 37 33 3a 28 74 2c 65 2c 73 29 3d 3e 7b 73 2e 64 28 65 2c 7b 6f 3a 28 29 3d 3e 64 7d 29 3b 76 61 72 20 69 3d 73 28 34 32 34 37 29 2c 6e 3d 73 28 31 31 31 37 29 2c 72 3d 73 28 38 36 37 33 29 2c 61 3d 73 28 38 33 31 30 29 2c 6f 3d 73 28 35 37 36 33 29 2c 68 3d 73 28 33 38 36 30 29 3b 63 6c 61 73 73 20 64 20 65 78 74 65 6e 64 73 20 6e 2e 77 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 2c 65 2c 73 29 7b 73 75 70 65 72 28 73 29 2c 74 68 69 73 2e 65 6e 64 70 6f 69 6e 74 3d 74 2c 74 68 69 73 2e 6f 70 74 73 3d 65 7c 7c 7b 7d 2c Data Ascii: "use strict";(window.webpackChunkNRBA=window.webpackChunkNRBA\|\|[]).push([[78],{2573:(t,e,s)=>{s.d(e,{o:()=>d});var i=s(4247),n=s(1117),r=s(8673),a=s(8310),o=s(5763),h=s(3860);class d extends n.w{constructor(t,e,s){super(s),this.endpoint=t,this.opts=e\|\|{},
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 6e 29 3f 6e 3a 5b 6e 5d 2c 72 2e 70 75 73 68 28 2e 2e 2e 6e 29 7d 6c 65 74 20 61 3d 74 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 73 65 6e 64 58 28 74 29 3b 72 2e 6c 65 6e 67 74 68 3f 61 3d 74 68 69 73 2e 6f 70 74 73 2e 72 61 77 3f 74 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 5f 73 65 6e 64 28 74 29 3a 74 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 73 65 6e 64 28 74 29 3a 72 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 72 2e 66 6f 72 45 61 63 68 28 28 69 3d 3e 7b 61 28 7b 65 6e 64 70 6f 69 6e 74 3a 74 68 69 73 2e 65 6e 64 70 6f 69 6e 74 2c 70 61 79 6c 6f 61 64 3a 69 2c 6f 70 74 73 3a 74 2c 73 75 62 6d 69 74 4d 65 74 68 6f 64 3a 73 2c 63 62 46 69 6e 69 73 68 65 64 3a 65 2c 63 75 73 74 6f 6d 55 72 6c Data Ascii: ype.toString.call(n)?n:[n],r.push(...n)}let a=t=>this.harvest.sendX(t);r.length?a=this.opts.raw?t=>this.harvest._send(t):t=>this.harvest.send(t):r.push(void 0),r.forEach((i=>{a({endpoint:this.endpoint,payload:i,opts:t,submitMethod:s,cbFinished:e,customUrl
2024-04-24 17:31:27 UTC	1378	IN	Data Raw: 74 68 69 73 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 2c 22 69 6e 73 2e 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 22 29 7c 7c 33 30 2c 74 68 69 73 2e 65 76 65 6e 74 73 50 65 72 48 61 72 76 65 73 74 3d 74 68 69 73 2e 65 76 65 6e 74 73 50 65 72 4d 69 6e 75 74 65 2a 74 68 69 73 2e 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 2f 36 30 2c 74 68 69 73 2e 72 65 66 65 72 72 65 72 55 72 6c 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 45 76 65 6e 74 73 2c 74 68 69 73 2e 65 76 65 6e 74 73 3d 5b 5d 2c 74 68 69 73 2e 61 74 74 3d 28 30 2c 68 2e 43 35 29 28 74 68 69 73 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 29 2e 6a 73 41 74 74 72 69 62 75 74 65 73 2c 6c 2e 69 6c 26 26 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 26 26 28 74 68 69 73 Data Ascii: this.agentIdentifier,"ins.harvestTimeSeconds")\|\|30,this.eventsPerHarvest=this.eventsPerMinute*this.harvestTimeSeconds/60,this.referrerUrl,this.currentEvents,this.events=[],this.att=(0,h.C5)(this.agentIdentifier).jsAttributes,l.il&&document.referrer&&(this
2024-04-24 17:31:27 UTC	509	IN	Data Raw: 74 69 6d 65 73 74 61 6d 70 3a 74 2b 28 30 2c 68 2e 4f 50 29 28 74 68 69 73 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 29 2e 6f 66 66 73 65 74 2c 74 69 6d 65 53 69 6e 63 65 4c 6f 61 64 3a 74 2f 31 65 33 2c 62 72 6f 77 73 65 72 57 69 64 74 68 3a 72 2c 62 72 6f 77 73 65 72 48 65 69 67 68 74 3a 61 2c 72 65 66 65 72 72 65 72 55 72 6c 3a 74 68 69 73 2e 72 65 66 65 72 72 65 72 55 72 6c 2c 63 75 72 72 65 6e 74 55 72 6c 3a 28 30 2c 6f 2e 66 29 28 22 22 2b 6c 6f 63 61 74 69 6f 6e 29 2c 70 61 67 65 55 72 6c 3a 28 30 2c 6f 2e 66 29 28 28 30 2c 68 2e 4f 50 29 28 74 68 69 73 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 29 2e 6f 72 69 67 69 6e 29 2c 65 76 65 6e 74 54 79 70 65 3a 22 50 61 67 65 41 63 74 69 6f 6e 22 7d 3b 28 30 2c 69 2e 44 29 28 75 2c 63 29 2c 28 Data Ascii: timestamp:t+(0,h.OP)(this.agentIdentifier).offset,timeSinceLoad:t/1e3,browserWidth:r,browserHeight:a,referrerUrl:this.referrerUrl,currentUrl:(0,o.f)(""+location),pageUrl:(0,o.f)((0,h.OP)(this.agentIdentifier).origin),eventType:"PageAction"};(0,i.D)(u,c),(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	50011	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:27 UTC	1169	OUT	POST /1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=22718&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/try-now/manage-invoices/&af=err,xhr,stn,ins,spa&be=1442&fe=18983&dc=4564&perf=%7B%22timing%22:%7B%22of%22:1713979863910,%22n%22:0,%22r%22:3,%22re%22:1019,%22f%22:1019,%22dn%22:1019,%22dne%22:1019,%22c%22:1019,%22s%22:1019,%22ce%22:1019,%22rq%22:1023,%22rp%22:1442,%22rpe%22:2062,%22di%22:4482,%22ds%22:6005,%22de%22:6005,%22dc%22:20417,%22l%22:20418,%22le%22:20425%7D,%22navigation%22:%7B%22rc%22:1%7D%7D&fp=2010&fcp=2010 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 28 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:27 UTC	28	OUT	Data Raw: 7b 22 6a 61 22 3a 7b 22 73 69 74 65 56 65 72 73 69 6f 6e 22 3a 22 6e 65 77 22 7d 7d Data Ascii: {"ja":{"siteVersion":"new"}}
2024-04-24 17:31:28 UTC	436	IN	HTTP/1.1 200 Connection: close Content-Length: 151 date: Wed, 24 Apr 2024 17:31:28 GMT content-type: text/plain cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.xero.com access-control-expose-headers: Date timing-allow-origin: https://www.xero.com x-served-by: cache-bur-kbur8200165-BUR
2024-04-24 17:31:28 UTC	151	IN	Data Raw: 7b 22 73 74 6e 22 3a 30 2c 22 65 72 72 22 3a 31 2c 22 69 6e 73 22 3a 31 2c 22 73 70 61 22 3a 31 2c 22 73 72 22 3a 30 2c 22 73 72 73 22 3a 30 2c 22 73 74 22 3a 30 2c 22 73 74 73 22 3a 30 2c 22 61 70 70 22 3a 7b 22 61 67 65 6e 74 73 22 3a 5b 7b 22 65 6e 74 69 74 79 47 75 69 64 22 3a 22 4d 54 6b 32 4d 6a 41 78 4e 33 78 43 55 6b 39 58 55 30 56 53 66 45 46 51 55 45 78 4a 51 30 46 55 53 55 39 4f 66 44 45 77 4d 6a 4d 7a 4f 44 55 78 4e 6a 41 22 7d 5d 7d 7d Data Ascii: {"stn":0,"err":1,"ins":1,"spa":1,"sr":0,"srs":0,"st":0,"sts":0,"app":{"agents":[{"entityGuid":"MTk2MjAxN3xCUk9XU0VSfEFQUExJQ0FUSU9OfDEwMjMzODUxNjA"}]}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	50012	18.154.142.121	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:28 UTC	739	OUT	GET /universal_pixel.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9; TDCPM=CAESEgoDYWFtEgsI0pKn98yj8jwQBRIXCghhcHBuZXh1cxILCIKzp_fMo_I8EAUSFgoHcnViaWNvbhILCODTp_fMo_I8EAUYBSgDMgsIsO-ppOOj8jwQBTgBQgQiAggBWgc5bmxyeDhwYAE.
2024-04-24 17:31:28 UTC	533	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 488 Connection: close Last-Modified: Fri, 12 Apr 2024 16:30:41 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 09:46:01 GMT ETag: "2775054c068b37509e0798448f7fd32c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 2692406fe16e2e962bcfe72de6950e96.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: bQVelOJqdDV3vf6OHDgoJ6Iqt-mfMye2GIH0fQWJ9SkzBko5_w7iBQ== Age: 27928
2024-04-24 17:31:28 UTC	488	IN	Data Raw: 76 61 72 20 54 54 44 43 4d 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 20 7b 20 76 61 72 20 65 20 3d 20 22 69 66 72 61 6d 65 5f 22 20 2b 20 74 68 69 73 2e 6d 61 70 49 6e 64 65 78 2b 2b 2c 20 69 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 20 65 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 6c 6f 77 54 72 61 6e 73 70 61 72 65 6e 63 79 22 2c 20 21 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 65 69 67 68 74 22 2c 20 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 77 69 64 74 68 22 2c 20 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 Data Ascii: var TTDCM = function () { function n(t) { var e = "iframe_" + this.mapIndex++, i = document.createElement("iframe"); i.setAttribute("id", e), i.setAttribute("allowTransparency", !0), i.setAttribute("height", 0), i.setAttribute("width", 0), i.setAttribute(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	50013	3.225.21.46	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:28 UTC	1378	OUT	GET /js_tracking?url=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F&uid=XVsUfradtXcBUl5XS45ldg&v=1&host=https%3A%2F%2Fwww.xero.com HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0
2024-04-24 17:31:29 UTC	242	IN	HTTP/1.1 204 No Content Date: Wed, 24 Apr 2024 17:31:28 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.xero.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	50014	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:28 UTC	781	OUT	POST /events/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=24111&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/try-now/manage-invoices/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 2131 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:28 UTC	2131	OUT	Data Raw: 62 65 6c 2e 37 3b 31 2c 70 2c 2c 69 6c 6f 2c 69 61 38 2c 6d 35 2c 27 69 6e 69 74 69 61 6c 50 61 67 65 4c 6f 61 64 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 78 65 72 6f 2e 63 6f 6d 2f 75 73 2f 74 72 79 2d 6e 6f 77 2f 6d 61 6e 61 67 65 2d 69 6e 76 6f 69 63 65 73 2f 2c 31 2c 31 2c 2c 2c 21 21 21 21 27 62 35 31 61 66 30 34 64 2d 63 36 37 34 2d 34 34 34 30 2d 38 34 34 63 2d 35 61 39 35 32 35 31 31 61 62 34 36 2c 27 31 2c 31 6a 75 2c 31 6a 75 3b 35 2c 27 73 69 74 65 56 65 72 73 69 6f 6e 2c 27 6e 65 77 3b 32 2c 2c 32 6e 6e 2c 71 70 2c 35 2c 35 2c 27 47 45 54 2c 35 6b 2c 27 63 2e 67 6f 2d 6d 70 75 6c 73 65 2e 6e 65 74 3a 34 34 33 2c 27 2f 61 70 69 2f 63 6f 6e 66 69 67 2e 6a 73 6f 6e 2c 2c 31 66 2c 2c 27 33 2c 21 21 21 3b 32 2c 2c 33 65 36 2c 31 38 71 2c 2c 2c 27 Data Ascii: bel.7;1,p,,ilo,ia8,m5,'initialPageLoad,'https://www.xero.com/us/try-now/manage-invoices/,1,1,,,!!!!'b51af04d-c674-4440-844c-5a952511ab46,'1,1ju,1ju;5,'siteVersion,'new;2,,2nn,qp,5,5,'GET,5k,'c.go-mpulse.net:443,'/api/config.json,,1f,,'3,!!!;2,,3e6,18q,,,'
2024-04-24 17:31:29 UTC	310	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:31:29 GMT content-type: image/gif access-control-allow-origin: https://www.xero.com access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-bur-kbur8200031-BUR
2024-04-24 17:31:29 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	50016	104.254.150.241	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:29 UTC	809	OUT	GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:29 UTC	1566	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Wed, 24 Apr 2024 17:31:29 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3Dd6d00503-92d1-41f5-9caa-ddfeeb15d4e9 AN-X-Request-Uuid: b0d19430-7130-46da-8aee-dae43e1061e0 Set-Cookie: XANDR_PANID=m_8-Y6AASp1p5OpNZ9bzhkhrTChq8unsMFTzGMgaVyms94eMsiauccuAru_RhVqFmMnFrJswxdSg8F9VP4Q1Z4nV1riYE9ziuTPc1J2pzTg.; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 23-Jul-2024 17:31:29 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Wed, 12-Apr-2034 17:31:29 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=1843681124601207595; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 23-Jul-2024 17:31:29 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.36; 154.16.105.36; 906.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	50018	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:29 UTC	924	OUT	GET /1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=22718&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/try-now/manage-invoices/&af=err,xhr,stn,ins,spa&be=1442&fe=18983&dc=4564&perf=%7B%22timing%22:%7B%22of%22:1713979863910,%22n%22:0,%22r%22:3,%22re%22:1019,%22f%22:1019,%22dn%22:1019,%22dne%22:1019,%22c%22:1019,%22s%22:1019,%22ce%22:1019,%22rq%22:1023,%22rp%22:1442,%22rpe%22:2062,%22di%22:4482,%22ds%22:6005,%22de%22:6005,%22dc%22:20417,%22l%22:20418,%22le%22:20425%7D,%22navigation%22:%7B%22rc%22:1%7D%7D&fp=2010&fcp=2010 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:29 UTC	396	IN	HTTP/1.1 200 Connection: close Content-Length: 79 date: Wed, 24 Apr 2024 17:31:29 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: Date timing-allow-origin: * x-served-by: cache-bur-kbur8200176-BUR
2024-04-24 17:31:29 UTC	79	IN	Data Raw: 5b 37 31 2c 20 37 33 2c 20 37 30 2c 20 35 36 2c 20 35 37 2c 20 39 37 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 34 34 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 32 5d Data Ascii: [71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	50015	52.32.69.132	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:29 UTC	930	OUT	GET /ibs:dpid=903&dpuuid=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Daam HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=38351504769226682132089995704072130929; dpm=38351504769226682132089995704072130929
2024-04-24 17:31:29 UTC	901	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 17:31:29 GMT Content-Length: 0 Connection: close X-TID: FpDGLPUgSfU= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=aam DCS: dcs-prod-usw2-1-v056-04e951b02.edge-usw2.demdex.com 2 ms set-cookie: dpm=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:29 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:29 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	50017	35.71.131.137	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:29 UTC	906	OUT	GET /track/cmf/rubicon?gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9; TDCPM=CAESEgoDYWFtEgsI0pKn98yj8jwQBRIXCghhcHBuZXh1cxILCIKzp_fMo_I8EAUSFgoHcnViaWNvbhILCODTp_fMo_I8EAUYBSgDMgsIsO-ppOOj8jwQBTgBQgQiAggBWgc5bmxyeDhwYAE.
2024-04-24 17:31:29 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:29 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9; expires=Thu, 24 Apr 2025 17:31:29 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsI0pKn98yj8jwQBRIXCghhcHBuZXh1cxILCIKzp_fMo_I8EAUSFgoHcnViaWNvbhILCODTp_fMo_I8EAUYBSABKAMyCwiw76mk46PyPBAFOAFCBCICCAFaBzlubHJ4OHBgAQ..; expires=Thu, 24 Apr 2025 17:31:29 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 17:31:29 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	50019	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:29 UTC	534	OUT	GET /events/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=24111&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/try-now/manage-invoices/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:30 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:31:29 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-bur-kbur8200050-BUR
2024-04-24 17:31:30 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	50020	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:30 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=XtBEluHe7SK2Ob8&MD=krzE3T9Y HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-24 17:31:30 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 110c7a29-91da-40e5-970d-da171b8050d7 MS-RequestId: 82f647d2-9461-4a88-843b-15b3852734a7 MS-CV: Ofdmn1XQ/0Odfm3t.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 17:31:29 GMT Connection: close Content-Length: 25457
2024-04-24 17:31:30 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-24 17:31:30 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	50021	104.254.150.241	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:30 UTC	1034	OUT	GET /bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3Dd6d00503-92d1-41f5-9caa-ddfeeb15d4e9 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=m_8-Y6AASp1p5OpNZ9bzhkhrTChq8unsMFTzGMgaVyms94eMsiauccuAru_RhVqFmMnFrJswxdSg8F9VP4Q1Z4nV1riYE9ziuTPc1J2pzTg.; receive-cookie-deprecation=1; uuid2=1843681124601207595
2024-04-24 17:31:30 UTC	1487	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Wed, 24 Apr 2024 17:31:30 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=1843681124601207595&ttd_tdid=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9 AN-X-Request-Uuid: ad305ae7-f3d5-4786-b8bc-7f099d4f5308 Set-Cookie: XANDR_PANID=m_8-Y6AASp1p5OpNZ9bzhkhrTChq8unsMFTzGMgaVyms94eMsiauccuAru_RhVqFmMnFrJswxdSg8F9VP4Q1Z4nV1riYE9ziuTPc1J2pzTg.; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 23-Jul-2024 17:31:30 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Wed, 12-Apr-2034 17:31:30 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=1843681124601207595; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 23-Jul-2024 17:31:30 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.36; 154.16.105.36; 906.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	50022	35.71.131.137	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:30 UTC	915	OUT	GET /track/cmf/generic?ttd_pid=aam HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9; TDCPM=CAESEgoDYWFtEgsI0pKn98yj8jwQBRIXCghhcHBuZXh1cxILCIKzp_fMo_I8EAUSFgoHcnViaWNvbhILCODTp_fMo_I8EAUYBSABKAMyCwiw76mk46PyPBAFOAFCBCICCAFaBzlubHJ4OHBgAQ..
2024-04-24 17:31:30 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:30 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9; expires=Thu, 24 Apr 2025 17:31:30 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsI0pKn98yj8jwQBRIXCghhcHBuZXh1cxILCIKzp_fMo_I8EAUSFgoHcnViaWNvbhILCODTp_fMo_I8EAUYBSACKAMyCwiw76mk46PyPBAFOAFCBCICCAFaBzlubHJ4OHBgAQ..; expires=Thu, 24 Apr 2025 17:31:30 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 17:31:30 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	50023	35.71.131.137	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:31 UTC	981	OUT	GET /track/cmf/appnexus?ttd=1&anid=1843681124601207595&ttd_tdid=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9; TDCPM=CAESEgoDYWFtEgsI0pKn98yj8jwQBRIXCghhcHBuZXh1cxILCIKzp_fMo_I8EAUSFgoHcnViaWNvbhILCODTp_fMo_I8EAUYBSABKAMyCwiw76mk46PyPBAFOAFCBCICCAFaBzlubHJ4OHBgAQ..
2024-04-24 17:31:31 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:31 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9; expires=Thu, 24 Apr 2025 17:31:31 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsI0pKn98yj8jwQBRIXCghhcHBuZXh1cxILCNTgq57No_I8EAUSFgoHcnViaWNvbhILCODTp_fMo_I8EAUYBSACKAMyCwiw76mk46PyPBAFOAFCBCICCAFaBzlubHJ4OHBgAQ..; expires=Thu, 24 Apr 2025 17:31:31 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 17:31:31 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	50032	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:34 UTC	797	OUT	POST /events/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=29954&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/try-now/manage-invoices/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 405 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:34 UTC	405	OUT	Data Raw: 62 65 6c 2e 36 3b 65 2c 27 66 70 2c 31 6a 75 2c 31 3b 35 2c 27 73 69 74 65 56 65 72 73 69 6f 6e 2c 27 6e 65 77 3b 65 2c 27 66 63 70 2c 31 6a 75 2c 31 3b 35 2c 31 2c 32 3b 65 2c 27 70 61 67 65 48 69 64 65 2c 36 73 70 2c 32 3b 36 2c 27 63 6c 73 2c 30 2e 31 30 30 37 30 32 36 39 32 30 30 33 31 36 37 30 36 3b 35 2c 31 2c 32 3b 65 2c 27 6c 6f 61 64 2c 66 72 64 2c 32 3b 36 2c 35 2c 30 2e 31 30 30 37 30 32 36 39 32 30 30 33 31 36 37 30 36 3b 35 2c 31 2c 32 3b 65 2c 27 6c 63 70 2c 33 36 72 2c 39 3b 36 2c 27 73 69 7a 65 2c 32 33 36 31 39 36 2e 3b 35 2c 27 65 69 64 3b 35 2c 27 65 6c 55 72 6c 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 78 65 72 6f 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 64 61 6d 2f 78 65 72 6f 2f 70 69 6c 6f 74 2d 69 6d 61 67 65 73 2f 66 65 61 74 75 72 Data Ascii: bel.6;e,'fp,1ju,1;5,'siteVersion,'new;e,'fcp,1ju,1;5,1,2;e,'pageHide,6sp,2;6,'cls,0.10070269200316706;5,1,2;e,'load,frd,2;6,5,0.10070269200316706;5,1,2;e,'lcp,36r,9;6,'size,236196.;5,'eid;5,'elUrl,'https://www.xero.com/content/dam/xero/pilot-images/featur
2024-04-24 17:31:35 UTC	354	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:31:35 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.xero.com x-served-by: cache-bur-kbur8200057-BUR
2024-04-24 17:31:35 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	50028	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:34 UTC	798	OUT	POST /events/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=29958&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/try-now/manage-invoices/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 2054 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:34 UTC	2054	OUT	Data Raw: 62 65 6c 2e 37 3b 32 2c 31 2c 32 6e 6e 2c 71 70 2c 2c 2c 27 47 45 54 2c 35 6b 2c 27 63 2e 67 6f 2d 6d 70 75 6c 73 65 2e 6e 65 74 3a 34 34 33 2c 27 2f 61 70 69 2f 63 6f 6e 66 69 67 2e 6a 73 6f 6e 2c 2c 31 66 2c 2c 27 30 2c 21 21 21 3b 35 2c 27 73 69 74 65 56 65 72 73 69 6f 6e 2c 27 6e 65 77 3b 32 2c 31 2c 33 65 36 2c 31 38 71 2c 2c 2c 27 50 4f 53 54 2c 35 6c 2c 27 77 77 77 2e 78 65 72 6f 2e 63 6f 6d 3a 34 34 33 2c 27 2f 65 31 61 36 62 71 6c 31 6f 4d 70 57 2f 6a 4c 2f 33 7a 76 54 6a 4e 45 4d 54 55 2f 33 62 4f 75 77 63 72 37 33 59 44 59 37 68 2f 46 45 46 32 41 51 2f 62 69 45 31 53 41 73 51 2f 65 67 63 42 2c 31 71 71 2c 69 2c 2c 33 2c 21 21 21 3b 35 2c 34 2c 35 3b 32 2c 31 2c 34 32 68 2c 72 68 2c 2c 2c 36 2c 35 6c 2c 37 2c 38 2c 32 62 63 2c 69 2c 2c 33 2c 21 Data Ascii: bel.7;2,1,2nn,qp,,,'GET,5k,'c.go-mpulse.net:443,'/api/config.json,,1f,,'0,!!!;5,'siteVersion,'new;2,1,3e6,18q,,,'POST,5l,'www.xero.com:443,'/e1a6bql1oMpW/jL/3zvTjNEMTU/3bOuwcr73YDY7h/FEF2AQ/biE1SAsQ/egcB,1qq,i,,3,!!!;5,4,5;2,1,42h,rh,,,6,5l,7,8,2bc,i,,3,!
2024-04-24 17:31:35 UTC	354	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:31:35 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.xero.com x-served-by: cache-bur-kbur8200164-BUR
2024-04-24 17:31:35 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	50031	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:34 UTC	800	OUT	POST /jserrors/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=29959&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/try-now/manage-invoices/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 7525 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:34 UTC	7525	OUT	Data Raw: 7b 22 78 68 72 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 68 6f 73 74 6e 61 6d 65 22 3a 22 63 2e 67 6f 2d 6d 70 75 6c 73 65 2e 6e 65 74 22 2c 22 70 6f 72 74 22 3a 22 34 34 33 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 73 22 2c 22 68 6f 73 74 22 3a 22 63 2e 67 6f 2d 6d 70 75 6c 73 65 2e 6e 65 74 3a 34 34 33 22 2c 22 70 61 74 68 6e 61 6d 65 22 3a 22 2f 61 70 69 2f 63 6f 6e 66 69 67 2e 6a 73 6f 6e 22 2c 22 73 74 61 74 75 73 22 3a 32 30 30 7d 2c 22 6d 65 74 72 69 63 73 22 3a 7b 22 63 6f 75 6e 74 22 3a 31 2c 22 72 78 53 69 7a 65 22 3a 7b 22 74 22 3a 35 31 7d 2c 22 64 75 72 61 74 69 6f 6e 22 3a 7b 22 74 22 3a 39 36 36 7d 2c 22 63 62 54 69 6d 65 22 3a 7b 22 74 22 3a 30 7d 2c 22 74 69 6d 65 22 3a 7b 22 74 Data Ascii: {"xhr":[{"params":{"method":"GET","hostname":"c.go-mpulse.net","port":"443","protocol":"https","host":"c.go-mpulse.net:443","pathname":"/api/config.json","status":200},"metrics":{"count":1,"rxSize":{"t":51},"duration":{"t":966},"cbTime":{"t":0},"time":{"t
2024-04-24 17:31:35 UTC	354	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:31:35 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.xero.com x-served-by: cache-bur-kbur8200159-BUR
2024-04-24 17:31:35 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	50024	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:34 UTC	800	OUT	POST /jserrors/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=29963&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/try-now/manage-invoices/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 1197 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:34 UTC	1197	OUT	Data Raw: 7b 22 73 6d 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 56 65 72 73 69 6f 6e 2f 31 2e 32 33 36 2e 30 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 4c 6f 61 64 65 72 54 79 70 65 2f 73 70 61 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 44 69 73 74 4d 65 74 68 6f 64 2f 43 44 4e 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 41 50 49 2f 73 65 74 43 75 73 74 6f 6d 41 74 74 72 69 Data Ascii: {"sm":[{"params":{"name":"Generic/Version/1.236.0/Detected"},"stats":{"c":1}},{"params":{"name":"Generic/LoaderType/spa/Detected"},"stats":{"c":1}},{"params":{"name":"Generic/DistMethod/CDN/Detected"},"stats":{"c":1}},{"params":{"name":"API/setCustomAttri
2024-04-24 17:31:35 UTC	354	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:31:35 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.xero.com x-served-by: cache-bur-kbur8200077-BUR
2024-04-24 17:31:35 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	50033	52.200.154.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:34 UTC	836	OUT	GET /_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&tag=DwellTime&ts=1713979893852&i=gtm&dwt=9510&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:35 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 24 Apr 2024 17:31:35 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,27e67e15ed2a695cfdf274e2cc641e11,10.0.0.98,63064,154.16.105.36,,232060995143,1,1713979895.275,0.003,,.,0,0,0.000,0.000,-,0,0,203,268,134,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-24 17:31:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	50035	52.200.154.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:35 UTC	604	OUT	GET /_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&tag=DwellTime&ts=1713979893852&i=gtm&dwt=9510&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:36 UTC	371	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 24 Apr 2024 17:31:36 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,5304c6190b77f235ce43829e8822f05c,10.0.0.98,8856,154.16.105.36,,8114287150,1,1713979896.185,0.001,,.,0,0,0.004,0.004,-,0,0,203,220,110,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-24 17:31:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	50034	34.237.73.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:36 UTC	679	OUT	GET /pubsub/5-lh65TJofQp7BNkWK5t3KldUyUlgWm6VAsA7hWfFPvy4y0IupYoArUojr4QOga3TXnkzBBgl4sI1qJlBmnYo_9g-JpEdXUjEXhiE6?X-Nexus-New-Client=true&X-Nexus-Version=0.12.12&user_role=visitor HTTP/1.1 Host: nexus-websocket-a.intercom.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://in.xero.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: QIul5f6oKugwbF4InuaQmQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	50041	63.140.37.126	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:38 UTC	734	OUT	POST /rest/v1/delivery?client=xerolimited&version=2.3.1&sessionId=3f1be1d8-9f25-4368-bedc-dbf40f8c1e2a HTTP/1.1 Host: xerolimited.tt.omtrdc.net Connection: keep-alive Content-Length: 374 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" pragma: no-cache sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain accept: / cache-control: no-cache sec-ch-ua-platform: "Windows" Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:38 UTC	374	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 68 61 6e 6e 65 6c 22 3a 22 77 65 62 22 2c 22 61 64 64 72 65 73 73 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 78 65 72 6f 2e 63 6f 6d 2f 75 73 2f 70 72 69 63 69 6e 67 2d 70 6c 61 6e 73 2f 22 2c 22 72 65 66 65 72 72 69 6e 67 55 72 6c 22 3a 22 22 7d 7d 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 32 33 34 33 66 61 65 31 2d 32 64 35 66 2d 34 64 31 31 2d 61 30 65 37 2d 35 62 38 31 39 62 34 64 36 35 39 32 22 2c 22 6d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 64 22 3a 22 33 38 33 34 34 33 39 35 36 30 31 33 38 35 36 32 34 33 35 32 30 39 33 38 30 38 32 31 32 36 38 31 32 33 31 39 34 33 22 7d 2c 22 65 78 70 65 72 69 65 6e 63 65 43 6c 6f 75 64 22 3a 7b 22 61 75 64 69 65 6e 63 65 Data Ascii: {"context":{"channel":"web","address":{"url":"https://www.xero.com/us/pricing-plans/","referringUrl":""}},"id":{"tntId":"2343fae1-2d5f-4d11-a0e7-5b819b4d6592","marketingCloudVisitorId":"38344395601385624352093808212681231943"},"experienceCloud":{"audience
2024-04-24 17:31:39 UTC	838	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 17:31:39 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://www.xero.com access-control-allow-credentials: true x-request-id: 4239c5ad-2e57-4786-9be2-6a675774c363 timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-04-24 17:31:39 UTC	355	IN	Data Raw: 31 35 63 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 62 35 36 35 61 63 38 63 2d 61 39 62 34 2d 34 34 35 35 2d 62 36 65 38 2d 33 36 32 36 38 39 63 62 37 35 62 32 22 2c 22 63 6c 69 65 6e 74 22 3a 22 78 65 72 6f 6c 69 6d 69 74 65 64 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 32 33 34 33 66 61 65 31 2d 32 64 35 66 2d 34 64 31 31 2d 61 30 65 37 2d 35 62 38 31 39 62 34 64 36 35 39 32 2e 33 35 5f 30 22 2c 22 6d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 64 22 3a 22 33 38 33 34 34 33 39 35 36 30 31 33 38 35 36 32 34 33 35 32 30 39 33 38 30 38 32 31 32 36 38 31 32 33 31 39 34 33 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 35 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 Data Ascii: 15c{"status":200,"requestId":"b565ac8c-a9b4-4455-b6e8-362689cb75b2","client":"xerolimited","id":{"tntId":"2343fae1-2d5f-4d11-a0e7-5b819b4d6592.35_0","marketingCloudVisitorId":"38344395601385624352093808212681231943"},"edgeHost":"mboxedge35.tt.omtrdc.net
2024-04-24 17:31:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	50042	100.20.148.237	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:38 UTC	745	OUT	POST /event?d_dil_ver=9.4&_ts=1713979897996 HTTP/1.1 Host: xero.demdex.net Connection: keep-alive Content-Length: 401 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=38351504769226682132089995704072130929; xero=38351504769226682132089995704072130929
2024-04-24 17:31:38 UTC	401	OUT	Data Raw: 64 5f 6d 69 64 3d 33 38 33 34 34 33 39 35 36 30 31 33 38 35 36 32 34 33 35 32 30 39 33 38 30 38 32 31 32 36 38 31 32 33 31 39 34 33 26 64 5f 6e 73 69 64 3d 30 26 64 5f 64 70 69 64 3d 31 33 38 38 39 39 26 64 5f 64 70 75 75 69 64 3d 32 33 34 33 66 61 65 31 2d 32 64 35 66 2d 34 64 31 31 2d 61 30 65 37 2d 35 62 38 31 39 62 34 64 36 35 39 32 26 64 5f 63 69 64 5f 69 63 3d 78 65 72 6f 5f 69 64 25 30 31 32 33 34 33 66 61 65 31 2d 32 64 35 66 2d 34 64 31 31 2d 61 30 65 37 2d 35 62 38 31 39 62 34 64 36 35 39 32 25 30 31 32 26 64 5f 6c 64 3d 5f 74 73 25 33 44 31 37 31 33 39 37 39 38 39 37 39 39 35 26 64 5f 72 74 62 64 3d 6a 73 6f 6e 26 64 5f 6a 73 6f 6e 76 3d 31 26 64 5f 64 73 74 3d 31 26 63 5f 68 61 73 68 3d 26 63 5f 68 6f 73 74 3d 77 77 77 2e 78 65 72 6f 2e 63 6f Data Ascii: d_mid=38344395601385624352093808212681231943&d_nsid=0&d_dpid=138899&d_dpuuid=2343fae1-2d5f-4d11-a0e7-5b819b4d6592&d_cid_ic=xero_id%012343fae1-2d5f-4d11-a0e7-5b819b4d6592%012&d_ld=_ts%3D1713979897995&d_rtbd=json&d_jsonv=1&d_dst=1&c_hash=&c_host=www.xero.co
2024-04-24 17:31:39 UTC	987	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:39 GMT Content-Type: application/json;charset=utf-8 Content-Length: 231 Connection: close X-TID: 8Zv9lsXpQgo= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.xero.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-usw2-2-v056-07cc33dc4.edge-usw2.demdex.com 5 ms set-cookie: demdex=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:39 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: xero=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:39 GMT; Path=/; Domain=.xero.demdex.net; Secure; SameSite=None
2024-04-24 17:31:39 UTC	231	IN	Data Raw: 7b 22 73 74 75 66 66 22 3a 5b 7b 22 63 6e 22 3a 22 61 61 6d 5f 70 69 6c 6f 74 22 2c 22 63 76 22 3a 22 73 65 67 3d 32 31 35 33 33 32 30 35 2c 73 65 67 3d 32 31 35 33 33 32 33 31 2c 3d 32 34 37 36 37 33 32 39 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 22 7d 2c 7b 22 63 6e 22 3a 22 61 61 6d 5f 78 65 72 6f 22 2c 22 63 76 22 3a 22 73 65 67 3d 32 32 32 38 33 32 36 37 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 22 7d 5d 2c 22 75 75 69 64 22 3a 22 33 38 33 35 31 35 30 34 37 36 39 32 32 36 36 38 32 31 33 32 30 38 39 39 39 35 37 30 34 30 37 32 31 33 30 39 32 39 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 39 2c 22 74 69 64 22 3a 22 38 5a 76 39 6c 73 58 70 51 67 6f 3d 22 7d Data Ascii: {"stuff":[{"cn":"aam_pilot","cv":"seg=21533205,seg=21533231,=24767329","ttl":30,"dmn":""},{"cn":"aam_xero","cv":"seg=22283267","ttl":30,"dmn":""}],"uuid":"38351504769226682132089995704072130929","dcs_region":9,"tid":"8Zv9lsXpQgo="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	50048	18.154.132.87	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:39 UTC	1188	OUT	GET /stats/TrustboxImpression?locale=en-NZ&styleHeight=100%25&styleWidth=100%25&theme=light&tags=product&stars=4%2C5&schemaType=Organization&sku=Xero&name=Xero&url=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=4becd84a00006400050b6782&widgetId=53aa8912dec7e10d38f59f36 HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36&businessunitId=4becd84a00006400050b6782 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:39 UTC	460	IN	HTTP/1.1 204 No Content Connection: close Cache-Control: no-store,no-cache Date: Wed, 24 Apr 2024 17:31:39 GMT Pragma: no-cache Server: Kestrel Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 8eba96584a898f8a357fb6316ffd8f16.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: fhYgCrbUaTxg4WGi7UH9-9PYUOIZwYAArE83dyaEWpYGt-Ahs0r7Jg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	50051	100.20.148.237	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:39 UTC	476	OUT	GET /event?d_dil_ver=9.4&_ts=1713979897996 HTTP/1.1 Host: xero.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=38351504769226682132089995704072130929; xero=38351504769226682132089995704072130929
2024-04-24 17:31:40 UTC	893	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:40 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: sBmUHUxhRuI= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-usw2-1-v056-007c93e32.edge-usw2.demdex.com 6 ms set-cookie: demdex=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:40 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: xero=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:40 GMT; Path=/; Domain=.xero.demdex.net; Secure; SameSite=None
2024-04-24 17:31:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	50050	100.20.148.237	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:39 UTC	745	OUT	POST /event?d_dil_ver=9.4&_ts=1713979898216 HTTP/1.1 Host: xero.demdex.net Connection: keep-alive Content-Length: 248 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=38351504769226682132089995704072130929; xero=38351504769226682132089995704072130929
2024-04-24 17:31:39 UTC	248	OUT	Data Raw: 64 5f 6d 69 64 3d 33 38 33 34 34 33 39 35 36 30 31 33 38 35 36 32 34 33 35 32 30 39 33 38 30 38 32 31 32 36 38 31 32 33 31 39 34 33 26 64 5f 6e 73 69 64 3d 30 26 64 5f 64 70 69 64 3d 31 33 38 38 39 39 26 64 5f 64 70 75 75 69 64 3d 32 33 34 33 66 61 65 31 2d 32 64 35 66 2d 34 64 31 31 2d 61 30 65 37 2d 35 62 38 31 39 62 34 64 36 35 39 32 26 64 5f 63 69 64 5f 69 63 3d 78 65 72 6f 5f 69 64 25 30 31 32 33 34 33 66 61 65 31 2d 32 64 35 66 2d 34 64 31 31 2d 61 30 65 37 2d 35 62 38 31 39 62 34 64 36 35 39 32 25 30 31 32 26 64 5f 6c 64 3d 5f 74 73 25 33 44 31 37 31 33 39 37 39 38 39 38 32 31 36 26 64 5f 72 74 62 64 3d 6a 73 6f 6e 26 64 5f 6a 73 6f 6e 76 3d 31 26 64 5f 64 73 74 3d 31 26 63 5f 72 65 66 65 72 72 65 72 3d 6e 6f 74 2d 78 65 72 6f Data Ascii: d_mid=38344395601385624352093808212681231943&d_nsid=0&d_dpid=138899&d_dpuuid=2343fae1-2d5f-4d11-a0e7-5b819b4d6592&d_cid_ic=xero_id%012343fae1-2d5f-4d11-a0e7-5b819b4d6592%012&d_ld=_ts%3D1713979898216&d_rtbd=json&d_jsonv=1&d_dst=1&c_referrer=not-xero
2024-04-24 17:31:40 UTC	988	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:40 GMT Content-Type: application/json;charset=utf-8 Content-Length: 231 Connection: close X-TID: gmmYfYpLSVs= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.xero.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-usw2-2-v056-0aa3323fb.edge-usw2.demdex.com 12 ms set-cookie: demdex=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:40 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: xero=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:40 GMT; Path=/; Domain=.xero.demdex.net; Secure; SameSite=None
2024-04-24 17:31:40 UTC	231	IN	Data Raw: 7b 22 73 74 75 66 66 22 3a 5b 7b 22 63 6e 22 3a 22 61 61 6d 5f 70 69 6c 6f 74 22 2c 22 63 76 22 3a 22 73 65 67 3d 32 31 35 33 33 32 30 35 2c 73 65 67 3d 32 31 35 33 33 32 33 31 2c 3d 32 34 37 36 37 33 32 39 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 22 7d 2c 7b 22 63 6e 22 3a 22 61 61 6d 5f 78 65 72 6f 22 2c 22 63 76 22 3a 22 73 65 67 3d 32 32 32 38 33 32 36 37 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 22 7d 5d 2c 22 75 75 69 64 22 3a 22 33 38 33 35 31 35 30 34 37 36 39 32 32 36 36 38 32 31 33 32 30 38 39 39 39 35 37 30 34 30 37 32 31 33 30 39 32 39 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 39 2c 22 74 69 64 22 3a 22 67 6d 6d 59 66 59 70 4c 53 56 73 3d 22 7d Data Ascii: {"stuff":[{"cn":"aam_pilot","cv":"seg=21533205,seg=21533231,=24767329","ttl":30,"dmn":""},{"cn":"aam_xero","cv":"seg=22283267","ttl":30,"dmn":""}],"uuid":"38351504769226682132089995704072130929","dcs_region":9,"tid":"gmmYfYpLSVs="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	50052	63.140.37.206	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:39 UTC	445	OUT	GET /rest/v1/delivery?client=xerolimited&version=2.3.1&sessionId=3f1be1d8-9f25-4368-bedc-dbf40f8c1e2a HTTP/1.1 Host: xerolimited.tt.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:40 UTC	450	IN	HTTP/1.1 405 Method Not Allowed date: Wed, 24 Apr 2024 17:31:40 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-04-24 17:31:40 UTC	72	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	50060	100.20.148.237	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:40 UTC	476	OUT	GET /event?d_dil_ver=9.4&_ts=1713979898216 HTTP/1.1 Host: xero.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=38351504769226682132089995704072130929; xero=38351504769226682132089995704072130929
2024-04-24 17:31:40 UTC	893	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:40 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: HNU+ItV1RJ4= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-usw2-2-v056-05200c082.edge-usw2.demdex.com 6 ms set-cookie: demdex=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:40 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: xero=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:40 GMT; Path=/; Domain=.xero.demdex.net; Secure; SameSite=None
2024-04-24 17:31:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	50030	3.225.21.46	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:41 UTC	1220	OUT	GET /events.js HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0
2024-04-24 17:31:41 UTC	192	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:41 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=5
2024-04-24 17:31:41 UTC	3918	IN	Data Raw: 66 34 37 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 0a 20 20 2f 2f 20 42 65 67 69 6e 20 64 6f 63 0a 0a 20 20 76 61 72 20 69 73 5f 64 65 76 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 69 66 20 28 20 66 61 6c 73 65 20 29 20 7b 0a 20 20 20 20 69 73 5f 64 65 76 20 3d 20 74 72 75 65 3b 0a 20 20 7d 0a 0a 20 20 76 61 72 20 64 69 73 61 62 6c 65 5f 73 79 6e 63 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 69 66 20 28 20 74 72 75 65 20 29 20 7b 0a 20 20 20 20 64 69 73 61 62 6c 65 5f 73 79 6e 63 20 3d 20 74 72 75 65 0a 20 20 7d 0a 0a 20 20 76 61 72 20 74 69 70 20 3d 20 22 62 37 33 49 57 45 65 36 66 57 57 36 44 4f 49 5a 36 6c 5a 56 43 59 35 74 67 4a 47 4f 57 43 72 61 6c 55 78 75 61 61 66 58 4f 6c 6f 22 0a 20 20 0a 20 20 76 61 72 20 75 73 65 72 49 64 43 6f 6f 6b 69 65 56 Data Ascii: f47(function (w) { // Begin doc var is_dev = false; if ( false ) { is_dev = true; } var disable_sync = false; if ( true ) { disable_sync = true } var tip = "b73IWEe6fWW6DOIZ6lZVCY5tgJGOWCralUxuaafXOlo" var userIdCookieV
2024-04-24 17:31:41 UTC	14087	IN	Data Raw: 33 36 66 66 0d 0a 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2c 63 75 72 72 65 6e 74 5f 77 69 6e 64 6f 77 5f 75 72 6c 5f 70 61 72 61 6d 26 26 63 75 72 72 65 6e 74 5f 77 69 6e 64 6f 77 5f 75 72 6c 5f 70 61 72 61 6d 2e 69 6e 64 65 78 4f 66 28 67 6c 6f 62 61 6c 73 2e 73 61 5f 64 65 62 75 67 5f 6b 65 79 29 3e 2d 31 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 53 41 2f 52 54 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 4c 61 6c 28 65 29 7b 72 65 74 75 72 6e 20 6c 6f 61 64 4c 61 6c 48 65 6c 70 65 72 28 73 61 5f 75 72 6c 2c 65 29 2c 21 30 7d 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 4c 61 6c 48 65 6c 70 65 72 28 65 2c 6f 29 7b 76 61 72 20 74 3d 6e 65 77 20 49 6d 61 67 65 3b 72 65 73 3d 63 75 72 72 65 6e 74 4c 61 6e 64 69 6e 67 55 52 4c 28 29 3b 76 61 Data Ascii: 36ffdy.appendChild(t),current_window_url_param&&current_window_url_param.indexOf(globals.sa_debug_key)>-1&&console.log("SA/RT"))}function loadLal(e){return loadLalHelper(sa_url,e),!0}function loadLalHelper(e,o){var t=new Image;res=currentLandingURL();va
2024-04-24 17:31:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	50072	172.64.144.225	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:41 UTC	822	OUT	GET /attribution_tracking/conversions/4647.js?p=https://www.xero.com/us/pricing-plans/&e=undefined HTTP/1.1 Host: tracking.g2crowd.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _session_id=c437bf136ef31853dd49dadbdd9dbdf5; __cf_bm=p6HUJ9ggzFDxp18tw.WpvqVTMzWgqdN1jZimvZbRdzU-1713979877-1.0.1.1-SZ_czmMl_V_N4C9Y3mTPlVdt_r13TfoWjjSB4FlGlxKHdw6niBF5wnBhK0EqX7ikXjAhdhzS4K5jdIVRGh0Iaw
2024-04-24 17:31:42 UTC	1313	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:42 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=600, public set-cookie: _session_id=c437bf136ef31853dd49dadbdd9dbdf5; path=/; expires=Wed, 08 May 2024 17:31:42 GMT; HttpOnly; secure; SameSite=None etag: W/"3dae93a05edd9dcfc1864b87178a31e0" x-request-id: d1482852-6cd1-470f-b313-346b15ba0a45 x-runtime: 0.007797 strict-transport-security: max-age=604800 x-frame-options: SAMEORIGIN x-content-type-options: nosniff x-xss-protection: 1; mode=block x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self' .g2crowd.com .g2.com; connect-src 'self' .g2crowd.com .g2.com; font-src 'self' .g2crowd.com .g2.com; form-action 'self' .g2crowd.com .g2.com; frame-src 'self' .g2crowd.com .g2.com; img-src 'self' .g2crowd.com .g2.com; manifest-src 'self' .g2crowd.com .g2.com; media-src 'self' .g2crowd.com .g2.com; object-src 'self' .g2crowd.com .g2.com; script-src 'self' .g2crowd.com .g2.com; style-src 'self' .g2crowd.com .g2.com; worker-src 'self' .g2crowd.com .g2.com vary: Origin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8797d4134ca809ed-LAS
2024-04-24 17:31:42 UTC	22	IN	Data Raw: 31 30 0d 0a 2f 2f 20 54 72 61 63 6b 69 6e 67 20 46 69 6c 65 0d 0a Data Ascii: 10// Tracking File
2024-04-24 17:31:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	50074	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:42 UTC	1406	OUT	GET /activityi;src=9401320;type=pagev0;cat=globa000;ord=1;num=265233616833;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Fpricing-plans%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=1662344157;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F? HTTP/1.1 Host: 9401320.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:31:42 UTC	1267	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://9401320.fls.doubleclick.net/activityi;dc_pre=CJaV6tmw24UDFfZZCAQdl_MDNA;src=9401320;type=pagev0;cat=globa000;ord=1;num=265233616833;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Fpricing-plans%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=1662344157;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	50075	142.250.101.154	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:42 UTC	1417	OUT	GET /td/fls/rul/activityi;fledge=1;src=9401320;type=pagev0;cat=globa000;ord=1;num=265233616833;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Fpricing-plans%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=1662344157;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:31:42 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 17:31:42 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-24 17:31:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	50076	142.250.101.154	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:42 UTC	1477	OUT	GET /td/rul/1023673485?random=1713979901079&cv=11&fst=1713979901079&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44m0v883646161z8830923470za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&label=v0RbCOHw2eECEI2JkOgD&hn=www.googleadservices.com&frm=0&tiba=Pricing%20Plans%20%7C%20Xero%20US&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1776741404.1713979872&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:31:42 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 17:31:42 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-24 17:31:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	50077	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:42 UTC	1371	OUT	GET /activityi;src=9401320;type=pagev0;cat=globa002;ord=1;num=9700359326618;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Fpricing-plans%2F;ps=1;pcor=1358158751;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F? HTTP/1.1 Host: 9401320.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:31:42 UTC	1232	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://9401320.fls.doubleclick.net/activityi;dc_pre=CL3E7tmw24UDFaSxOgUddFkLKw;src=9401320;type=pagev0;cat=globa002;ord=1;num=9700359326618;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Fpricing-plans%2F;ps=1;pcor=1358158751;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	50078	142.250.101.154	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:42 UTC	1382	OUT	GET /td/fls/rul/activityi;fledge=1;src=9401320;type=pagev0;cat=globa002;ord=1;num=9700359326618;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Fpricing-plans%2F;ps=1;pcor=1358158751;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:31:42 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 17:31:42 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-24 17:31:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	50084	151.101.193.140	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:42 UTC	910	OUT	GET /rp.gif?ts=1713979900861&id=t2_ewwvmnuh&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=cb2d649f-3168-41a8-8246-f3b3ccc5e846&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_72595d5a&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:42 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:42 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 17:31:42 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	50086	18.154.144.27	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:42 UTC	820	OUT	POST /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&page_title=Pricing%20Plans%20%7C%20Xero%20US HTTP/1.1 Host: api.company-target.com Connection: keep-alive Content-Length: 63 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=fe876021-fc99-4e31-8bfa-461e893fb9c2; tuuid_lu=1713979879\|ix:0\|mctv:0\|rp:0
2024-04-24 17:31:42 UTC	63	OUT	Data Raw: 7b 22 73 72 63 22 3a 22 74 61 67 22 2c 22 61 75 74 68 22 3a 22 42 47 43 53 44 6b 35 4c 45 48 4f 34 4d 50 56 70 67 44 52 4e 75 50 75 65 33 4d 4a 56 35 47 75 64 4d 31 70 30 45 49 42 6b 22 7d Data Ascii: {"src":"tag","auth":"BGCSDk5LEHO4MPVpgDRNuPue3MJV5GudM1p0EIBk"}
2024-04-24 17:31:42 UTC	953	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 457 Connection: close Date: Wed, 24 Apr 2024 17:31:42 GMT Server: nginx Access-Control-Allow-Origin: https://www.xero.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Expose-Headers: x-amz-cf-id Access-Control-Max-Age: 7200 Access-Control-Allow-Credentials: true Api-Version: v2 Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Identification-Source: CENTRAL Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Tue, 23 Apr 2024 17:31:42 GMT Vary: Accept-Encoding, Origin Request-ID: 2a54d01e-ccb3-4ee7-a5f1-101d43fdb7aa X-Cache: Miss from cloudfront Via: 1.1 2ec67fd94557d4806c5b473c972cb654.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: 7g7RqGZi5EyNlOSMjUTIGj23SQ40K-r2ULgVRE-t01WFr5mRzIBESA==
2024-04-24 17:31:42 UTC	457	IN	Data Raw: 7b 22 72 65 67 69 73 74 72 79 5f 63 6f 6d 70 61 6e 79 5f 6e 61 6d 65 22 3a 22 43 4f 47 45 4e 54 2d 31 37 34 22 2c 22 72 65 67 69 73 74 72 79 5f 63 69 74 79 22 3a 22 4c 61 73 20 56 65 67 61 73 22 2c 22 72 65 67 69 73 74 72 79 5f 73 74 61 74 65 22 3a 22 4e 56 22 2c 22 72 65 67 69 6f 6e 5f 6e 61 6d 65 22 3a 22 4e 65 76 61 64 61 22 2c 22 72 65 67 69 73 74 72 79 5f 7a 69 70 5f 63 6f 64 65 22 3a 22 38 39 31 30 31 22 2c 22 72 65 67 69 73 74 72 79 5f 61 72 65 61 5f 63 6f 64 65 22 3a 6e 75 6c 6c 2c 22 72 65 67 69 73 74 72 79 5f 64 6d 61 5f 63 6f 64 65 22 3a 38 33 39 2c 22 72 65 67 69 73 74 72 79 5f 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 72 65 67 69 73 74 72 79 5f 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 55 53 22 2c 22 72 Data Ascii: {"registry_company_name":"COGENT-174","registry_city":"Las Vegas","registry_state":"NV","region_name":"Nevada","registry_zip_code":"89101","registry_area_code":null,"registry_dma_code":839,"registry_country":"United States","registry_country_code":"US","r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	50085	34.96.71.22	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:42 UTC	802	OUT	GET /s/sync?exc=lr HTTP/1.1 Host: s.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=fe876021-fc99-4e31-8bfa-461e893fb9c2; tuuid_lu=1713979879\|ix:0\|mctv:0\|rp:0
2024-04-24 17:31:42 UTC	510	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET,OPTIONS Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=fe876021-fc99-4e31-8bfa-461e893fb9c2; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Set-Cookie: tuuid_lu=1713979902\|ix:0\|mctv:0\|rp:0; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Date: Wed, 24 Apr 2024 17:31:42 GMT Content-Length: 74 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 17:31:42 UTC	74	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 0a 09 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Pixels</title></head><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	50087	3.225.21.46	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:42 UTC	3210	OUT	GET /saq_pxl?uid=XVsUfradtXcBUl5XS45ldg&is_js=true&landing_url=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&t=Pricing%20Plans%20%7C%20Xero%20US&tip=b73IWEe6fWW6DOIZ6lZVCY5tgJGOWCralUxuaafXOlo&host=https%3A%2F%2Fwww.xero.com&sa_conv_data_css_value=%270-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892%27&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%252Br0VCscx3wVXJe%252F3g0&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0
2024-04-24 17:31:42 UTC	296	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:42 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 138 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.xero.com
2024-04-24 17:31:42 UTC	138	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 5b 22 67 6f 50 6a 70 4c 67 58 79 39 52 42 39 72 59 6b 78 44 41 44 30 4f 22 5d 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 5b 22 71 68 31 72 41 66 31 38 35 4e 58 69 75 59 68 53 43 4d 52 4f 45 4b 22 5d 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":["goPjpLgXy9RB9rYkxDAD0O"],"retargeting_tracker_uids":["qh1rAf185NXiuYhSCMROEK"],"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	50088	3.225.21.46	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:42 UTC	3166	OUT	GET /saq_pxl?uid=IZi8ik6wpN0HnLyT9lcuoQ&is_js=true&landing_url=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&t=Pricing%20Plans%20%7C%20Xero%20US&tip=b73IWEe6fWW6DOIZ6lZVCY5tgJGOWCralUxuaafXOlo&host=https%3A%2F%2Fwww.xero.com&sa_conv_data_css_value=&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%252Br0VCscx3wVXJe%252F3g0&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0
2024-04-24 17:31:42 UTC	295	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:42 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 94 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.xero.com
2024-04-24 17:31:42 UTC	94	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	50089	18.173.121.47	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:42 UTC	537	OUT	GET /c/hotjar-3197823.js?sv=6 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:42 UTC	639	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 17:31:42 GMT Cache-Control: max-age=60 ETag: W/3bedb9c2dd6cb7b28cf8509276db49f3 Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 2484d95e1962e4fa6652ac5bdc660206.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P6 X-Amz-Cf-Id: vDzsR7HXbyKRFgtH4J7ID-n1f9CZ9Ec9pNItRNiChumEdMmMnMSQCA==
2024-04-24 17:31:42 UTC	8922	IN	Data Raw: 32 32 64 32 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 33 31 39 37 38 32 33 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 31 2e 30 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 74 72 75 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 6f 6e 73 6f 6c 65 5f 63 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 61 Data Ascii: 22d2window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":3197823,"rec_value":1.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":false,"a
2024-04-24 17:31:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	50091	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:42 UTC	1440	OUT	GET /activityi;dc_pre=CJaV6tmw24UDFfZZCAQdl_MDNA;src=9401320;type=pagev0;cat=globa000;ord=1;num=265233616833;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Fpricing-plans%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=1662344157;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F? HTTP/1.1 Host: 9401320.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:31:43 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:43 GMT Expires: Wed, 24 Apr 2024 17:31:43 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 17:31:43 UTC	592	IN	Data Raw: 32 66 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4a 61 56 36 74 6d 77 32 34 55 44 46 66 Data Ascii: 2f7<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CJaV6tmw24UDFf
2024-04-24 17:31:43 UTC	174	IN	Data Raw: 61 70 3d 57 69 6e 64 6f 77 73 3b 75 61 70 76 3d 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 70 73 63 64 6c 3d 6e 6f 61 70 69 3b 67 74 6d 3d 34 35 66 65 34 34 6d 30 7a 38 38 33 30 39 32 33 34 37 30 7a 61 32 30 31 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 3b 64 6d 61 3d 30 3b 65 70 76 65 72 3d 32 3b 7e 6f 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 78 65 72 6f 2e 63 6f 6d 25 32 46 75 73 25 32 46 70 72 69 63 69 6e 67 2d 70 6c 61 6e 73 25 32 46 22 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: ap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F"/></body></html>
2024-04-24 17:31:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	50092	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:42 UTC	1405	OUT	GET /activityi;dc_pre=CL3E7tmw24UDFaSxOgUddFkLKw;src=9401320;type=pagev0;cat=globa002;ord=1;num=9700359326618;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Fpricing-plans%2F;ps=1;pcor=1358158751;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F? HTTP/1.1 Host: 9401320.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:31:43 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:43 GMT Expires: Wed, 24 Apr 2024 17:31:43 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 17:31:43 UTC	592	IN	Data Raw: 32 64 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4c 33 45 37 74 6d 77 32 34 55 44 46 61 Data Ascii: 2d4<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CL3E7tmw24UDFa
2024-04-24 17:31:43 UTC	139	IN	Data Raw: 33 6c 31 3b 64 6d 61 3d 30 3b 65 70 76 65 72 3d 32 3b 6d 61 74 63 68 5f 69 64 3d 32 33 34 33 66 61 65 31 2d 32 64 35 66 2d 34 64 31 31 2d 61 30 65 37 2d 35 62 38 31 39 62 34 64 36 35 39 32 3b 7e 6f 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 78 65 72 6f 2e 63 6f 6d 25 32 46 75 73 25 32 46 70 72 69 63 69 6e 67 2d 70 6c 61 6e 73 25 32 46 22 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F"/></body></html>
2024-04-24 17:31:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	50093	151.101.129.140	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:42 UTC	678	OUT	GET /rp.gif?ts=1713979900861&id=t2_ewwvmnuh&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=cb2d649f-3168-41a8-8246-f3b3ccc5e846&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_72595d5a&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:43 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:43 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 17:31:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	50096	18.154.144.27	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:43 UTC	561	OUT	GET /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&page_title=Pricing%20Plans%20%7C%20Xero%20US HTTP/1.1 Host: api.company-target.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=fe876021-fc99-4e31-8bfa-461e893fb9c2; tuuid_lu=1713979879\|ix:0\|mctv:0\|rp:0
2024-04-24 17:31:43 UTC	492	IN	HTTP/1.1 401 Unauthorized Content-Type: text/plain;charset=utf-8 Content-Length: 12 Connection: close Date: Wed, 24 Apr 2024 17:31:43 GMT Server: nginx WWW-Authenticate: DemandBase API v2 X-Content-Type-Options: nosniff Request-ID: 193f19f7-40fd-4430-9bef-285970781b08 Vary: Origin X-Cache: Error from cloudfront Via: 1.1 7aaaa329e879e6fe2630b818d5c38786.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: Q8HcFz62TFBZ9hPFz9C9-OJQHGrd4BBKQl4WNQ0RtaROVTnzSew_bw==
2024-04-24 17:31:43 UTC	12	IN	Data Raw: 55 6e 61 75 74 68 6f 72 69 7a 65 64 Data Ascii: Unauthorized

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	50098	18.239.199.34	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:43 UTC	635	OUT	GET /bg9s?x-amz-cf-id=7g7RqGZi5EyNlOSMjUTIGj23SQ40K-r2ULgVRE-t01WFr5mRzIBESA==&api-version=v2 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:43 UTC	602	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 08:43:36 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 55e9464473b96a5fed56600591202122.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P3 X-Amz-Cf-Id: YQ2vkp80KyIk8oxJIutvKtFeVpW1TH3qI8edqtM-cSI58WMmrOWPOQ== Age: 31688 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	50100	100.26.119.80	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:43 UTC	3012	OUT	GET /saq_pxl?uid=XVsUfradtXcBUl5XS45ldg&is_js=true&landing_url=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&t=Pricing%20Plans%20%7C%20Xero%20US&tip=b73IWEe6fWW6DOIZ6lZVCY5tgJGOWCralUxuaafXOlo&host=https%3A%2F%2Fwww.xero.com&sa_conv_data_css_value=%270-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892%27&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%252Br0VCscx3wVXJe%252F3g0&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0
2024-04-24 17:31:43 UTC	280	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:43 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 138 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: null
2024-04-24 17:31:43 UTC	138	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 5b 22 67 6f 50 6a 70 4c 67 58 79 39 52 42 39 72 59 6b 78 44 41 44 30 4f 22 5d 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 5b 22 71 68 31 72 41 66 31 38 35 4e 58 69 75 59 68 53 43 4d 52 4f 45 4b 22 5d 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":["goPjpLgXy9RB9rYkxDAD0O"],"retargeting_tracker_uids":["qh1rAf185NXiuYhSCMROEK"],"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	50099	100.26.119.80	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:43 UTC	2968	OUT	GET /saq_pxl?uid=IZi8ik6wpN0HnLyT9lcuoQ&is_js=true&landing_url=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&t=Pricing%20Plans%20%7C%20Xero%20US&tip=b73IWEe6fWW6DOIZ6lZVCY5tgJGOWCralUxuaafXOlo&host=https%3A%2F%2Fwww.xero.com&sa_conv_data_css_value=&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%252Br0VCscx3wVXJe%252F3g0&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0
2024-04-24 17:31:43 UTC	279	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:43 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 94 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: null
2024-04-24 17:31:43 UTC	94	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	50103	151.101.193.140	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:43 UTC	910	OUT	GET /rp.gif?ts=1713979900863&id=t2_ewwvmnuh&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=cb2d649f-3168-41a8-8246-f3b3ccc5e846&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_72595d5a&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:44 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:44 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 17:31:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	50104	146.75.92.157	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:43 UTC	625	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad" If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
2024-04-24 17:31:44 UTC	339	IN	HTTP/1.1 304 Not Modified Connection: close Date: Wed, 24 Apr 2024 17:31:44 GMT Cache-Control: no-cache ETag: "bbbcf811d8437a575d796a4c1e5d4fad" X-Served-By: cache-bur-kbur8200047-BUR X-Cache: HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	50107	52.200.154.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:44 UTC	685	OUT	GET /_/ad/9cf7274f1587405384d41bb446f7e005/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:44 UTC	373	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 24 Apr 2024 17:31:44 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,f4ba553793c375813ca32b35d9770978,10.0.0.98,57860,154.16.105.36,,231810603383,1,1713979904.417,0.001,,.,0,0,0.000,0.000,-,0,0,203,180,90,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-24 17:31:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	50109	18.239.199.122	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:44 UTC	437	OUT	GET /bg9s?x-amz-cf-id=7g7RqGZi5EyNlOSMjUTIGj23SQ40K-r2ULgVRE-t01WFr5mRzIBESA==&api-version=v2 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:44 UTC	584	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 08:43:36 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 56ae3d1e6ac6bd80745400fd9e0e0bbe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P3 X-Amz-Cf-Id: czMUgDCj9GGPjMJvas9CexosYp-GyrDvKYOdUfgiByHgb-hJO6LqJA== Age: 31689 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	50108	67.220.226.234	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:44 UTC	652	OUT	GET /s/iu3?pid=890f9a2a-f5c2-415f-82e9-09a1f0694ac9&event=PageView&ts=1713979903026 HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=Ay5qx_zsFkCLnhRKsF8cooY; ad-privacy=0
2024-04-24 17:31:44 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 17:31:44 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: PJM80E1HAX7C6EZHMPHB Set-Cookie: ad-id=Ay5qx_zsFkCLnhRKsF8cooY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 17:31:44 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 17:31:44 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 17:31:44 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	50111	74.125.137.157	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:44 UTC	964	OUT	GET /ddm/fls/z/dc_pre=CJaV6tmw24UDFfZZCAQdl_MDNA;src=9401320;type=pagev0;cat=globa000;ord=1;num=265233616833;npa=0;auiddc=;u1=%2Fus%2Fpricing-plans%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=1662344157;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:44 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 17:31:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	50110	74.125.137.157	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:44 UTC	929	OUT	GET /ddm/fls/z/dc_pre=CL3E7tmw24UDFaSxOgUddFkLKw;src=9401320;type=pagev0;cat=globa002;ord=1;num=9700359326618;npa=0;auiddc=;u1=%2Fus%2Fpricing-plans%2F;ps=1;pcor=1358158751;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:44 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 17:31:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	50114	151.101.129.140	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:44 UTC	678	OUT	GET /rp.gif?ts=1713979900863&id=t2_ewwvmnuh&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=cb2d649f-3168-41a8-8246-f3b3ccc5e846&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_72595d5a&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:44 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:44 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 17:31:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	50112	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:44 UTC	1368	OUT	GET /activity;register_conversion=1;src=9401320;type=pagev0;cat=globa000;ord=1;num=265233616833;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Fpricing-plans%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=1662344157;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source=navigation-source, trigger Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:31:44 UTC	2221	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"7606361524068387752"}],"aggregatable_trigger_data":[{"filters":[{"14":["9625591"]}],"key_piece":"0xb6889d81b637834c","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xc7f062f1da66ad3f","not_filters":{"14":["9625591"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["9625591"]}],"key_piece":"0xeecd4d7702d5cf56","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x329af3b40b7d0761","not_filters":{"14":["9625591"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"1199146387367406679","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"7606361524068387752","filters":[{"14":["9625591"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"7606361524068387752","filters":[{"14":["9625591"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"7606361524068387752","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"7606361524068387752","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["9401320"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 17:31:44 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	50113	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:44 UTC	1333	OUT	GET /activity;register_conversion=1;src=9401320;type=pagev0;cat=globa002;ord=1;num=9700359326618;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Fpricing-plans%2F;ps=1;pcor=1358158751;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source;navigation-source Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:31:44 UTC	2227	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"6888027977880552653"}],"aggregatable_trigger_data":[{"filters":[{"14":["11394278"]}],"key_piece":"0x12da3d5f1ce2811d","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x1501c99c6a0b32cf","not_filters":{"14":["11394278"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["11394278"]}],"key_piece":"0x5259a2b839f1de8c","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x9f04d31bac8cd323","not_filters":{"14":["11394278"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"5285910415965542603","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"6888027977880552653","filters":[{"14":["11394278"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"6888027977880552653","filters":[{"14":["11394278"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"6888027977880552653","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"6888027977880552653","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["9401320"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 17:31:44 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	50115	104.254.150.241	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:44 UTC	932	OUT	GET /pixie?e=LandingPage&pi=a8c07fef-3f0b-43ec-b0fb-3e4bc99c03b5&it=1713979901347&v=0.0.24&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&st=1713979901347&et=1713979901347&if=0 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=m_8-Y6AASp1p5OpNZ9bzhkhrTChq8unsMFTzGMgaVyms94eMsiauccuAru_RhVqFmMnFrJswxdSg8F9VP4Q1Z4nV1riYE9ziuTPc1J2pzTg.; receive-cookie-deprecation=1; uuid2=1843681124601207595
2024-04-24 17:31:45 UTC	300	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Wed, 24 Apr 2024 17:31:44 GMT Content-Type: image/gif Content-Length: 42 Connection: close Cache-Control: no-cache, no-store, must-revalidate X-Proxy-Origin: 154.16.105.36; 154.16.105.36; 906.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com
2024-04-24 17:31:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	50116	35.155.89.175	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:44 UTC	885	OUT	GET /sp.pl?a=10000&d=Wed%2C%2024%20Apr%202024%2017%3A31%3A41%20GMT&n=-2d&b=Pricing%20Plans%20%7C%20Xero%20US&.yp=10175613&f=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&enc=UTF-8&yv=1.15.1&tagmgr=gtm HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBOpBKWYCEDUbr1k9Xo4DARqqvTIt6UwFEgEBAQGTKmYzZtws0iMA_eMAAA&S=AQAAAgn0wglSfOJqhUp_cYYRBZk
2024-04-24 17:31:45 UTC	938	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:45 GMT Expires: Wed, 24 Apr 2024 17:31:45 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS/9.1.10.106 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.106) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBOpBKWYCEDUbr1k9Xo4DARqqvTIt6UwFEgEBAQGTKmYzZtws0iMA_eMAAA&S=AQAAAgn0wglSfOJqhUp_cYYRBZk; Expires=Thu, 24 Apr 2025 23:31:45 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-04-24 17:31:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	50117	35.244.154.8	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:44 UTC	673	OUT	GET /464526.gif HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=gKS3Wa4jxzEnx2UASb9lmwFx6wLYASAWx4oFCPLVVrA=; pxrc=COuDpbEGEgUI6AcQABIGCMrdKhAA
2024-04-24 17:31:45 UTC	620	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=XsFGteKDodoPZs3V0OJEawFx6wLYASAWx4oFCPLVVrA=; Path=/; Domain=rlcdn.com; Expires=Thu, 24 Apr 2025 17:31:45 GMT; Secure; SameSite=None Set-Cookie: pxrc=COuDpbEGEgUI6AcQABIGCMrdKhAA; Path=/; Domain=rlcdn.com; Expires=Sun, 23 Jun 2024 17:31:45 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Wed, 24 Apr 2024 17:31:45 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 17:31:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	50118	52.200.154.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:45 UTC	453	OUT	GET /_/ad/9cf7274f1587405384d41bb446f7e005/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:45 UTC	373	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 24 Apr 2024 17:31:45 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,3d4c952e7263ad8699d4a2549a773ff1,10.0.0.98,8246,154.16.105.36,,232061061310,1,1713979905.434,0.003,,.,0,0,0.000,0.000,-,0,0,203,244,122,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-24 17:31:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	50119	3.163.125.9	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:45 UTC	706	OUT	GET /aat?pid=890f9a2a-f5c2-415f-82e9-09a1f0694ac9&event=PageView&ts=1713979903026 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=navigation-source;event-source Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:45 UTC	575	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 17:31:45 GMT x-amzn-RequestId: d77946fb-a284-4d5c-8e15-5dd4bbc10805 Access-Control-Allow-Origin: https://www.xero.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 a2f664c528716326394de7180861917a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX54-P1 X-Amz-Cf-Id: X-KeeCqhKuW7V-sjUVxds3vfHx948dAy1GoUxkAH5gWeWzCfPpzv6Q==
2024-04-24 17:31:45 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	50121	31.13.70.36	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:45 UTC	869	OUT	GET /tr/?id=303901320544451&ev=PageView&dl=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&rl=&if=false&ts=1713979902969&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.1.1713979879599.1913881180&cs_est=true&ler=empty&cdl=API_unavailable&it=1713979900948&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:45 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 17:31:45 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	50122	18.155.202.90	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:45 UTC	544	OUT	GET /modules.588629dd3c10b20ab52d.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:45 UTC	718	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 225718 Connection: close Date: Tue, 23 Apr 2024 14:47:12 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "d78f803b3665558f63f048e3a8740d4b" Last-Modified: Tue, 23 Apr 2024 14:46:56 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 bfad77da64cd65a36fcbbe44acb655e8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P2 X-Amz-Cf-Id: ir7bIcKGB5vvJuTNWWpqpcCC8nbKgpuaDel5N3G0KOepR6eLJCHzKw== Age: 96273
2024-04-24 17:31:45 UTC	15666	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 35 38 38 36 32 39 64 64 33 63 31 30 62 32 30 61 62 35 32 64 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.588629dd3c10b20ab52d.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2024-04-24 17:31:45 UTC	16384	IN	Data Raw: 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 72 75 6e 43 61 6c 6c 62 61 63 6b 28 29 2c 74 2e 61 63 74 69 76 65 57 69 64 67 65 74 3d 65 7d 29 29 7d 2c 74 2e 73 65 74 4c 61 6e 67 75 61 67 65 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 75 2e 69 6e 63 6c 75 64 65 73 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 49 6e 76 61 6c 69 64 20 6c 61 6e 67 75 61 67 65 20 22 27 2b 74 2b 27 22 27 29 3b 65 3d 74 2c 68 6a 2e 77 69 64 67 65 74 2e 61 63 74 69 76 65 4c 61 6e 67 75 61 67 65 44 69 72 65 63 74 69 6f 6e 3d 6e 2e 69 6e 64 65 78 4f 66 28 74 29 3e 2d 31 3f 22 72 74 6c 22 3a 22 6c 74 72 22 2c 68 6a 2e 77 69 64 67 65 74 2e 69 73 41 63 74 69 76 65 4c 61 6e 67 75 61 67 65 44 69 72 65 63 74 69 6f 6e 52 74 6c Data Ascii: ((function(){e.runCallback(),t.activeWidget=e}))},t.setLanguage=hj.tryCatch((function(t){if(!u.includes(t))throw new Error('Invalid language "'+t+'"');e=t,hj.widget.activeLanguageDirection=n.indexOf(t)>-1?"rtl":"ltr",hj.widget.isActiveLanguageDirectionRtl
2024-04-24 17:31:46 UTC	16384	IN	Data Raw: 28 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2f 5e 28 28 5b 5e 3c 3e 28 29 5b 5c 5d 5c 5c 2e 2c 3b 3a 5c 73 40 22 5d 2b 28 5c 2e 5b 5e 3c 3e 28 29 5b 5c 5d 5c 5c 2e 2c 3b 3a 5c 73 40 22 5d 2b 29 2a 29 7c 28 22 2e 2b 22 29 29 40 28 28 5c 5b 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 2e 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 2e 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 2e 5b 30 2d 39 5d 7b 31 2c 33 7d 5d 29 7c 28 28 5b 61 2d 7a 41 2d 5a 5c 2d 30 2d 39 5d 2b 5c 2e 29 2b 5b 61 2d 7a 41 2d 5a 5d 7b 32 2c 7d 29 29 24 2f 2e 74 65 73 74 28 65 29 7d 29 2c 22 75 74 69 6c 73 2e 76 61 6c 69 64 61 74 65 45 6d 61 69 6c 22 29 2c 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 6a 2e 75 73 65 72 44 Data Ascii: (hj.tryCatch((function(e){return/^(([^<>()[\]\\.,;:\s@"]+(\.[^<>()[\]\\.,;:\s@"]+)*)\|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}])\|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/.test(e)}),"utils.validateEmail"),hj.tryCatch((function(){return hj.userD
2024-04-24 17:31:46 UTC	16384	IN	Data Raw: 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 3d 31 29 74 68 69 73 5b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 72 65 74 75 72 6e 20 63 28 29 2c 74 68 69 73 2e 6c 65 6e 67 74 68 7d 7d 29 2c 6e 2e 6c 65 6e 67 74 68 3e 30 26 26 63 28 29 29 7d 2c 68 6a 2e 69 6e 69 74 69 61 6c 56 69 73 69 74 44 61 74 61 53 65 6e 74 26 26 65 2e 61 63 74 69 76 61 74 65 28 29 2c 65 7d 28 29 2c 21 30 29 7d 29 2c 22 63 6f 6d 6d 61 6e 64 22 29 28 29 7d 2c 31 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 72 3d 6e 28 34 37 38 38 29 2c 6f 3d 6e 28 36 39 33 39 29 2c 69 3d 6e 28 35 36 35 38 29 2c 61 3d 6e 28 36 38 34 39 29 2c 73 3d 6e 28 36 37 Data Ascii: 0;e<arguments.length;e+=1)this[this.length]=arguments[e];return c(),this.length}}),n.length>0&&c())},hj.initialVisitDataSent&&e.activate(),e}(),!0)}),"command")()},1229:function(e,t,n){"use strict";n.r(t);var r=n(4788),o=n(6939),i=n(5658),a=n(6849),s=n(67
2024-04-24 17:31:46 UTC	16384	IN	Data Raw: 65 62 75 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 74 72 61 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6c 6f 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 61 72 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 29 7d 2c 64 65 62 75 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 26 26 75 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 22 23 32 61 39 64 38 66 22 3b 63 21 3d 65 26 26 73 26 26 28 63 6f 6e 73 6f 6c 65 2e 67 72 6f 75 70 45 6e 64 28 29 2c 73 3d 21 31 29 2c 63 3d 65 2c 76 6f 69 64 20 30 21 3d 3d 68 6a 2e 64 65 62 75 67 26 26 68 6a 2e 64 65 62 75 67 2e 69 73 4f 6e 28 29 26 26 28 22 6f 62 6a 65 63 Data Ascii: ebug:function(){},trace:function(){},log:function(){},info:function(){},warn:function(){},error:function(){}})},debug:function(e,t,n){var r=t&&u[t.toLowerCase()]\|\|"#2a9d8f";c!=e&&s&&(console.groupEnd(),s=!1),c=e,void 0!==hj.debug&&hj.debug.isOn()&&("objec
2024-04-24 17:31:46 UTC	16384	IN	Data Raw: 6e 5b 74 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 21 72 2e 6c 65 6e 67 74 68 29 7d 29 29 29 29 29 29 29 29 7d 29 2c 22 4d 75 74 61 74 69 6f 6e 53 75 6d 6d 61 72 79 2e 63 68 61 6e 67 65 73 54 6f 52 65 70 6f 72 74 22 29 2c 74 68 69 73 2e 6f 62 73 65 72 76 65 72 43 61 6c 6c 62 61 63 6b 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 26 26 65 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 74 3d 6e 65 77 20 56 28 6e 2e 72 6f 6f 74 2c 65 2c 6e 2e 6f 70 74 69 6f 6e 73 2e 6f 6c 64 50 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 29 2c 72 3d 6e 65 77 20 71 28 74 29 3b 6e 2e 63 68 61 6e 67 65 73 54 6f 52 65 70 6f 72 74 28 72 29 26 26 6e 2e 63 61 6c 6c 62 61 63 6b 28 72 29 7d 7d 29 2c 22 4d 75 74 61 74 69 6f 6e 53 75 6d 6d 61 72 Data Ascii: n[t])\|\|void 0===r\|\|!r.length)}))))))))}),"MutationSummary.changesToReport"),this.observerCallback=hj.tryCatch((function(e){if(e&&e.length){var t=new V(n.root,e,n.options.oldPreviousSibling),r=new q(t);n.changesToReport(r)&&n.callback(r)}}),"MutationSummar
2024-04-24 17:31:46 UTC	16384	IN	Data Raw: 72 5d 2b 22 2f 2a 20 4f 72 69 67 69 6e 61 6c 6c 79 3a 20 3c 6c 69 6e 6b 20 22 3b 66 6f 72 28 76 61 72 20 75 3d 30 2c 6c 3d 61 2e 6c 65 6e 67 74 68 3b 75 3c 6c 3b 75 2b 2b 29 22 69 64 22 21 3d 3d 61 5b 75 5d 2e 6e 61 6d 65 26 26 22 63 6c 61 73 73 22 21 3d 3d 61 5b 75 5d 2e 6e 61 6d 65 7c 7c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 61 5b 75 5d 2e 6e 61 6d 65 2c 61 5b 75 5d 2e 76 61 6c 75 65 29 2c 69 5b 65 2e 70 61 72 65 6e 74 53 65 6c 65 63 74 6f 72 5d 2b 3d 61 5b 75 5d 2e 6e 61 6d 65 2b 27 3d 22 27 2b 61 5b 75 5d 2e 76 61 6c 75 65 2b 27 22 20 27 3b 69 5b 65 2e 70 61 72 65 6e 74 53 65 6c 65 63 74 6f 72 5d 2b 3d 22 3e 20 2a 2f 22 2c 63 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 62 6c 6f 62 2d 68 61 73 68 2d 22 2b 73 29 2c 6f 2e 70 61 72 65 6e 74 4e Data Ascii: r]+"/* Originally: <link ";for(var u=0,l=a.length;u<l;u++)"id"!==a[u].name&&"class"!==a[u].name\|\|c.setAttribute(a[u].name,a[u].value),i[e.parentSelector]+=a[u].name+'="'+a[u].value+'" ';i[e.parentSelector]+="> */",c.classList.add("blob-hash-"+s),o.parentN
2024-04-24 17:31:46 UTC	16384	IN	Data Raw: 68 2c 64 2c 66 2c 67 3d 7b 7d 2c 70 3d 22 22 2c 76 3d 76 6f 69 64 20 30 2c 6d 3d 6e 75 6c 6c 2c 79 3d 21 31 2c 6a 3d 69 2e 66 5f 2e 6e 6f 77 28 29 2c 62 3d 21 31 3b 67 2e 65 76 65 6e 74 73 3d 5b 5d 2c 67 2e 73 74 6f 72 65 50 61 67 65 43 6f 6e 74 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 68 6a 2e 6c 6f 67 2e 77 61 72 6e 49 66 45 6d 70 74 79 28 74 2c 22 74 72 79 53 74 6f 72 65 50 61 67 65 43 6f 6e 74 65 6e 74 3a 20 63 6f 6e 74 65 6e 74 22 29 2c 68 6a 2e 6c 6f 67 2e 77 61 72 6e 49 66 45 6d 70 74 79 28 6e 2c 22 74 72 79 53 74 6f 72 65 50 61 67 65 43 6f 6e 74 65 6e 74 3a 20 75 72 6c 4d 44 35 22 29 2c 65 2e 73 74 6f 72 65 50 61 67 65 43 6f 6e 74 65 6e 74 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 6f 6e 74 65 6e 74 5f Data Ascii: h,d,f,g={},p="",v=void 0,m=null,y=!1,j=i.f_.now(),b=!1;g.events=[],g.storePageContent=function(t,n){hj.log.warnIfEmpty(t,"tryStorePageContent: content"),hj.log.warnIfEmpty(n,"tryStorePageContent: urlMD5"),e.storePageContent(t,(function(e){var t=e.content_
2024-04-24 17:31:46 UTC	16384	IN	Data Raw: 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 5f 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d Data Ascii: &"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},_(e)}function C(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enum
2024-04-24 17:31:46 UTC	16384	IN	Data Raw: 26 76 6f 69 64 20 30 21 3d 3d 68 3f 68 3a 61 2e 66 5f 2e 6e 6f 77 28 29 2c 5f 3d 6e 75 6c 6c 21 3d 3d 28 64 3d 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 53 61 6d 70 6c 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 64 26 26 64 2c 43 3d 6e 75 6c 6c 21 3d 3d 28 70 3d 28 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 72 65 63 6f 72 64 69 6e 67 45 6e 61 62 6c 65 64 29 26 26 5f 29 26 26 76 6f 69 64 20 30 21 3d 3d 70 26 26 70 2c 7b 69 64 3a 77 2c 63 72 65 61 74 65 64 3a 53 2c 69 6e 53 61 6d 70 6c 65 3a 5f 2c 73 65 73 73 69 6f 6e 69 7a 65 72 42 65 74 61 45 6e 61 62 6c 65 64 3a 6e 75 6c 6c 21 3d 3d 28 76 3d 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 73 65 73 73 69 6f 6e 69 7a 65 72 42 65 74 61 45 6e 61 62 6c 65 64 29 26 26 76 6f 69 64 20 30 21 Data Ascii: &void 0!==h?h:a.f_.now(),_=null!==(d=null==i?void 0:i.inSample)&&void 0!==d&&d,C=null!==(p=(null==i?void 0:i.recordingEnabled)&&_)&&void 0!==p&&p,{id:w,created:S,inSample:_,sessionizerBetaEnabled:null!==(v=null==i?void 0:i.sessionizerBetaEnabled)&&void 0!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	50125	31.13.70.36	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:45 UTC	961	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=303901320544451&ev=PageView&dl=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&rl=&if=false&ts=1713979902969&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.1.1713979879599.1913881180&cs_est=true&ler=empty&cdl=API_unavailable&it=1713979900948&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:45 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 17:31:45 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 17:31:45 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 17:31:45 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 17:31:45 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	50123	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:45 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 135 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:45 UTC	135	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 78 65 72 6f 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 31 39 39 31 34 36 33 38 37 33 36 37 34 30 36 36 37 39 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://xero.com","trigger_debug_key":"1199146387367406679"},"type":"trigger-no-matching-source"}]
2024-04-24 17:31:45 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 17:31:45 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	50124	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:45 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 135 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:45 UTC	135	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 78 65 72 6f 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 35 32 38 35 39 31 30 34 31 35 39 36 35 35 34 32 36 30 33 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://xero.com","trigger_debug_key":"5285910415965542603"},"type":"trigger-no-matching-source"}]
2024-04-24 17:31:45 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 17:31:45 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	50126	31.13.70.36	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:45 UTC	898	OUT	GET /tr/?id=303901320544451&ev=referrerSource&dl=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&rl=&if=false&ts=1713979902971&cd[utm_source]=organic&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=1&o=4126&fbp=fb.1.1713979879599.1913881180&ler=empty&cdl=API_unavailable&it=1713979900948&coo=false&up=hostname&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:46 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 17:31:45 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	50128	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:46 UTC	1063	OUT	GET /activity;register_conversion=1;src=9401320;type=pagev0;cat=globa000;ord=1;num=265233616833;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Fpricing-plans%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=1662344157;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:31:46 UTC	2221	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"7606361524068387752"}],"aggregatable_trigger_data":[{"filters":[{"14":["9625591"]}],"key_piece":"0xb6889d81b637834c","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xc7f062f1da66ad3f","not_filters":{"14":["9625591"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["9625591"]}],"key_piece":"0xeecd4d7702d5cf56","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x329af3b40b7d0761","not_filters":{"14":["9625591"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"1199146387367406679","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"7606361524068387752","filters":[{"14":["9625591"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"7606361524068387752","filters":[{"14":["9625591"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"7606361524068387752","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"7606361524068387752","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["9401320"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 17:31:46 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	50129	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:46 UTC	1028	OUT	GET /activity;register_conversion=1;src=9401320;type=pagev0;cat=globa002;ord=1;num=9700359326618;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Fpricing-plans%2F;ps=1;pcor=1358158751;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:31:46 UTC	2227	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"6888027977880552653"}],"aggregatable_trigger_data":[{"filters":[{"14":["11394278"]}],"key_piece":"0x12da3d5f1ce2811d","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x1501c99c6a0b32cf","not_filters":{"14":["11394278"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["11394278"]}],"key_piece":"0x5259a2b839f1de8c","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x9f04d31bac8cd323","not_filters":{"14":["11394278"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"5285910415965542603","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"6888027977880552653","filters":[{"14":["11394278"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"6888027977880552653","filters":[{"14":["11394278"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"6888027977880552653","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"6888027977880552653","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["9401320"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 17:31:46 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50130	31.13.70.36	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:46 UTC	1008	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=303901320544451&ev=referrerSource&dl=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&rl=&if=false&ts=1713979902971&cd[utm_source]=organic&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=1&o=4126&fbp=fb.1.1713979879599.1913881180&ler=empty&cdl=API_unavailable&it=1713979900948&coo=false&up=hostname&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source;navigation-source Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:46 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 17:31:46 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 17:31:46 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 17:31:46 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 17:31:46 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50131	104.244.42.197	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:46 UTC	981	OUT	GET /i/adsct?bci=3&eci=2&event_id=9771886d-050a-471a-bb88-618673ca7258&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f204cef4-02e0-4c83-8c94-00f5744fe9a4&tw_document_href=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nygt4&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=8a6b78c7-1529-4396-840d-f87e70f062de
2024-04-24 17:31:46 UTC	392	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 17:31:45 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 3a37751b7e7a6f13 strict-transport-security: max-age=0 x-response-time: 6 x-connection-hash: b6cc3ab77fc0f3d201681236051b8750613663137187bc658c5896d38afb9eeb connection: close
2024-04-24 17:31:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50132	104.244.42.3	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:46 UTC	1002	OUT	GET /i/adsct?bci=3&eci=2&event_id=9771886d-050a-471a-bb88-618673ca7258&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f204cef4-02e0-4c83-8c94-00f5744fe9a4&tw_document_href=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nygt4&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_f58PXPQs7cnhT5q89JomeA=="
2024-04-24 17:31:46 UTC	400	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 17:31:45 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 2138c53b7b1e4036 strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: a6e30f05e8fc12c361c638c90031de03a09c30e637668191945e8da90a848d3a connection: close
2024-04-24 17:31:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50135	104.254.151.68	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:46 UTC	548	OUT	GET /pixie?e=LandingPage&pi=a8c07fef-3f0b-43ec-b0fb-3e4bc99c03b5&it=1713979901347&v=0.0.24&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&st=1713979901347&et=1713979901347&if=0 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=1843681124601207595
2024-04-24 17:31:46 UTC	300	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Wed, 24 Apr 2024 17:31:46 GMT Content-Type: image/gif Content-Length: 42 Connection: close Cache-Control: no-cache, no-store, must-revalidate X-Proxy-Origin: 154.16.105.36; 154.16.105.36; 904.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com
2024-04-24 17:31:46 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50133	192.184.67.40	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:46 UTC	1366	OUT	GET /pixel;r=411801281;labels=_fp.event.Plans;rf=0;a=p-W92Yh-Yvb160e;url=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F;uh=e51ed67dfb8d91dc24b15e2ace0c3bc33bc53c3e1dfb09200d6c2f8387d67ea6;uht=2;fpan=0;fpa=P0-258918544-1713979877376;pbc=;ns=0;ce=1;qjs=1;qv=b70d35e8-20231208114759;cm=;gdpr=0;ref=;d=xero.com;dst=1;et=1713979903801;tzo=-120;ogl=type.website%2Csite_name.Xero%2Ctitle.Pricing%20Plans%2Cdescription.Find%20a%20Xero%20pricing%20plan%20to%20suit%20your%20business%252E%20All%20plans%20cover%20the%20accounting%20e%2Curl.https%3A%2F%2Fwww%252Exero%252Ecom%2Fus%2Fpricing-plans%2F%2Cimage.https%3A%2F%2Fwww%252Exero%252Ecom%2Fcontent%2Fdam%2Fxero%2Fpilot-images%2Fopengraph%2Fopengraph-xero%252Epng;ses=127c7ec4-5752-4de7-9928-48f46f028124;mdl= HTTP/1.1 Host: pixel.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=662941ec-5186d-76493-25abf
2024-04-24 17:31:46 UTC	282	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:46 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Pragma: no-cache Strict-Transport-Security: max-age=86400
2024-04-24 17:31:46 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 80 ff ff ff 00 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50137	3.163.125.74	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:46 UTC	436	OUT	GET /aat?pid=890f9a2a-f5c2-415f-82e9-09a1f0694ac9&event=PageView&ts=1713979903026 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:46 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 17:31:46 GMT x-amzn-RequestId: c6b8f792-be09-4898-a3cf-1e6bda4b5e15 X-Cache: Miss from cloudfront Via: 1.1 df8f783be0da9ba9d2af424b4b6561e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX54-P1 X-Amz-Cf-Id: lNC6HEevQkYWcrv9AwE5Z3j695Lb8jnZYDwvxKgoDcbKldV5EZtHoA==
2024-04-24 17:31:46 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50139	31.13.70.36	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:46 UTC	637	OUT	GET /tr/?id=303901320544451&ev=PageView&dl=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&rl=&if=false&ts=1713979902969&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.1.1713979879599.1913881180&cs_est=true&ler=empty&cdl=API_unavailable&it=1713979900948&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:46 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 17:31:46 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50136	35.155.89.175	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:46 UTC	653	OUT	GET /sp.pl?a=10000&d=Wed%2C%2024%20Apr%202024%2017%3A31%3A41%20GMT&n=-2d&b=Pricing%20Plans%20%7C%20Xero%20US&.yp=10175613&f=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&enc=UTF-8&yv=1.15.1&tagmgr=gtm HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBOpBKWYCEDUbr1k9Xo4DARqqvTIt6UwFEgEBAQGTKmYzZtws0iMA_eMAAA&S=AQAAAgn0wglSfOJqhUp_cYYRBZk
2024-04-24 17:31:46 UTC	952	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:46 GMT Expires: Wed, 24 Apr 2024 17:31:46 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: application/x-javascript Accept-Ranges: bytes Content-Length: 0 Server: ATS/9.1.10.106 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.106) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBOpBKWYCEDUbr1k9Xo4DARqqvTIt6UwFEgEBAQGTKmYzZtws0iMA_eMAAA&S=AQAAAgn0wglSfOJqhUp_cYYRBZk; Expires=Thu, 24 Apr 2025 23:31:46 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50140	31.13.70.36	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:46 UTC	674	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=303901320544451&ev=PageView&dl=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&rl=&if=false&ts=1713979902969&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.1.1713979879599.1913881180&cs_est=true&ler=empty&cdl=API_unavailable&it=1713979900948&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:46 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 17:31:46 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 17:31:46 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50127	52.95.118.179	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:46 UTC	481	OUT	GET /s/iu3?pid=890f9a2a-f5c2-415f-82e9-09a1f0694ac9&event=PageView&ts=1713979903026 HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=Ay5qx_zsFkCLnhRKsF8cooY; ad-privacy=0
2024-04-24 17:31:46 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 17:31:46 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: YAQ1NEMTN1TAH8SDB298 Set-Cookie: ad-id=Ay5qx_zsFkCLnhRKsF8cooY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 17:31:46 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 17:31:46 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 17:31:46 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50141	35.244.154.8	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:46 UTC	441	OUT	GET /464526.gif HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pxrc=COuDpbEGEgUI6AcQABIGCMrdKhAA; rlas3=XsFGteKDodoPZs3V0OJEawFx6wLYASAWx4oFCPLVVrA=
2024-04-24 17:31:46 UTC	620	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=ASrhmHE4+ogPZs3V0OJEawFx6wLYASAWx4oFCPLVVrA=; Path=/; Domain=rlcdn.com; Expires=Thu, 24 Apr 2025 17:31:46 GMT; Secure; SameSite=None Set-Cookie: pxrc=COuDpbEGEgUI6AcQABIGCMrdKhAA; Path=/; Domain=rlcdn.com; Expires=Sun, 23 Jun 2024 17:31:46 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Wed, 24 Apr 2024 17:31:46 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 17:31:46 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50143	142.250.141.105	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:47 UTC	1657	OUT	GET /pagead/1p-conversion/1023673485/?random=1633179437&cv=11&fst=1713979901079&bg=ffffff&guid=ON&async=1&gtm=45be44m0v883646161z8830923470za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&label=v0RbCOHw2eECEI2JkOgD&hn=www.googleadservices.com&frm=0&tiba=Pricing%20Plans%20%7C%20Xero%20US&value=0&npa=0&pscdl=noapi&auid=1776741404.1713979872&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQE4AUABSid0cmlnZ2VyLCBldmVudC1zb3VyY2U7bmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CNOymNKu-7DYIiITCKjj39qw24UDFdKrOgUdHP4HQjICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhVodHRwczovL3d3dy54ZXJvLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqrKXqBelBOnwfViNJlOaFZoaYhUJ7f_Q9bAJ-87gcE7qJ78PW&eitems=ChAI8NuisQYQpLKG6LHZ3MozEh0AIjyJpgIvZkbKtK3q5csLuaPyLUU9n340gpsScQ&random=2520443789 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:47 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 17:31:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50145	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:47 UTC	781	OUT	POST /jserrors/1/bd61b676be?a=1134228971&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=68886&ck=1&ref=https://in.xero.com/m/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 1234 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://in.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://in.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:47 UTC	1234	OUT	Data Raw: 7b 22 73 6d 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 46 72 61 6d 65 77 6f 72 6b 2f 52 65 61 63 74 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 41 6a 61 78 2f 45 76 65 6e 74 73 2f 45 78 63 6c 75 64 65 64 2f 41 67 65 6e 74 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 34 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 41 50 49 2f 61 64 64 50 61 67 65 41 63 74 69 6f 6e 2f 63 61 6c 6c 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 5d 2c 22 78 68 72 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6d 65 74 68 6f 64 22 3a 22 50 4f 53 54 22 2c 22 68 6f 73 74 6e 61 6d 65 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 Data Ascii: {"sm":[{"params":{"name":"Framework/React/Detected"},"stats":{"c":1}},{"params":{"name":"Ajax/Events/Excluded/Agent"},"stats":{"c":4}},{"params":{"name":"API/addPageAction/called"},"stats":{"c":1}}],"xhr":[{"params":{"method":"POST","hostname":"bam.nr-dat
2024-04-24 17:31:47 UTC	309	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:31:47 GMT content-type: image/gif access-control-allow-origin: https://in.xero.com access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-lax-kwhp1940026-LAX
2024-04-24 17:31:47 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50147	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:47 UTC	778	OUT	POST /events/1/bd61b676be?a=1134228971&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=68938&ck=1&ref=https://in.xero.com/m/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 173 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://in.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://in.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:47 UTC	173	OUT	Data Raw: 62 65 6c 2e 37 3b 32 2c 2c 36 35 64 2c 31 74 6d 2c 2c 2c 27 47 45 54 2c 35 6b 2c 27 69 6e 2e 78 65 72 6f 2e 63 6f 6d 3a 34 34 33 2c 27 2f 61 70 69 2f 56 6d 46 55 47 71 32 44 52 30 77 30 52 72 6f 69 79 76 57 41 57 58 77 30 38 33 6a 79 70 31 74 5a 79 49 33 57 4e 67 55 65 2f 67 65 74 44 6f 63 75 6d 65 6e 74 2c 2c 31 71 61 2c 31 2c 27 30 2c 27 35 38 31 37 31 35 33 39 65 65 36 65 37 65 63 63 2c 27 37 65 66 39 30 62 34 31 39 61 66 61 30 37 39 62 66 64 63 34 31 31 32 32 34 37 36 32 61 62 30 32 2c 6c 76 65 33 63 67 6f 75 Data Ascii: bel.7;2,,65d,1tm,,,'GET,5k,'in.xero.com:443,'/api/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe/getDocument,,1qa,1,'0,'58171539ee6e7ecc,'7ef90b419afa079bfdc411224762ab02,lve3cgou
2024-04-24 17:31:47 UTC	309	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:31:47 GMT content-type: image/gif access-control-allow-origin: https://in.xero.com access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-lax-kwhp1940083-LAX
2024-04-24 17:31:47 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50148	31.13.70.36	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:47 UTC	666	OUT	GET /tr/?id=303901320544451&ev=referrerSource&dl=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&rl=&if=false&ts=1713979902971&cd[utm_source]=organic&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=1&o=4126&fbp=fb.1.1713979879599.1913881180&ler=empty&cdl=API_unavailable&it=1713979900948&coo=false&up=hostname&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:47 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 17:31:47 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50149	31.13.70.36	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:47 UTC	703	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=303901320544451&ev=referrerSource&dl=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&rl=&if=false&ts=1713979902971&cd[utm_source]=organic&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=1&o=4126&fbp=fb.1.1713979879599.1913881180&ler=empty&cdl=API_unavailable&it=1713979900948&coo=false&up=hostname&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:47 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 17:31:47 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 17:31:47 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50150	192.184.67.40	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:47 UTC	1134	OUT	GET /pixel;r=411801281;labels=_fp.event.Plans;rf=0;a=p-W92Yh-Yvb160e;url=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F;uh=e51ed67dfb8d91dc24b15e2ace0c3bc33bc53c3e1dfb09200d6c2f8387d67ea6;uht=2;fpan=0;fpa=P0-258918544-1713979877376;pbc=;ns=0;ce=1;qjs=1;qv=b70d35e8-20231208114759;cm=;gdpr=0;ref=;d=xero.com;dst=1;et=1713979903801;tzo=-120;ogl=type.website%2Csite_name.Xero%2Ctitle.Pricing%20Plans%2Cdescription.Find%20a%20Xero%20pricing%20plan%20to%20suit%20your%20business%252E%20All%20plans%20cover%20the%20accounting%20e%2Curl.https%3A%2F%2Fwww%252Exero%252Ecom%2Fus%2Fpricing-plans%2F%2Cimage.https%3A%2F%2Fwww%252Exero%252Ecom%2Fcontent%2Fdam%2Fxero%2Fpilot-images%2Fopengraph%2Fopengraph-xero%252Epng;ses=127c7ec4-5752-4de7-9928-48f46f028124;mdl= HTTP/1.1 Host: pixel.quantserve.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=662941ec-5186d-76493-25abf
2024-04-24 17:31:47 UTC	354	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:47 GMT Content-Type: image/gif Content-Length: 35 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Pragma: no-cache Strict-Transport-Security: max-age=86400
2024-04-24 17:31:47 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 80 ff ff ff 00 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50151	104.244.42.5	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:47 UTC	749	OUT	GET /i/adsct?bci=3&eci=2&event_id=9771886d-050a-471a-bb88-618673ca7258&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f204cef4-02e0-4c83-8c94-00f5744fe9a4&tw_document_href=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nygt4&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=8a6b78c7-1529-4396-840d-f87e70f062de
2024-04-24 17:31:47 UTC	392	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 17:31:47 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: b058eeccb93a8750 strict-transport-security: max-age=0 x-response-time: 5 x-connection-hash: d108e48a4013510bc1ac14b76967b427b45c8248ec1ffaadeabe548e65a43fd3 connection: close
2024-04-24 17:31:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50152	104.244.42.3	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:47 UTC	770	OUT	GET /i/adsct?bci=3&eci=2&event_id=9771886d-050a-471a-bb88-618673ca7258&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f204cef4-02e0-4c83-8c94-00f5744fe9a4&tw_document_href=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nygt4&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_f58PXPQs7cnhT5q89JomeA=="
2024-04-24 17:31:47 UTC	400	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 17:31:46 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 3f7f9125574df689 strict-transport-security: max-age=631138519 x-response-time: 5 x-connection-hash: 6b964f43397727bc367c40efc0694ec8b92808509841ddf8484c497e3600c51c connection: close
2024-04-24 17:31:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50144	52.50.39.109	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:47 UTC	525	OUT	GET /api/v2/client/ws?v=7&site_id=3197823 HTTP/1.1 Host: ws.hotjar.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.xero.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: t8pSX6l20dRxNUyaMRoJuA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 17:31:47 UTC	145	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 17:31:47 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 16 Connection: close
2024-04-24 17:31:47 UTC	16	IN	Data Raw: 34 30 30 3a 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400: Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50146	99.80.149.126	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:47 UTC	627	OUT	POST /?site_id=3197823&gzip=1 HTTP/1.1 Host: content.hotjar.io Connection: keep-alive Content-Length: 32598 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:47 UTC	16384	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ec bd eb 76 db 48 96 2e f8 2a 18 cf 29 57 b7 c7 a4 10 77 44 f6 78 6a 6c fa a6 4c df d2 92 33 d3 9e 3a cb 0b 24 41 09 16 49 d0 00 a8 8b 7b 7a ad 7e 87 f9 75 fe 9d bf f3 1a f3 28 fd 24 b3 77 80 a4 08 81 14 03 12 00 ca 36 5d 59 14 83 08 44 ec b8 ec 4b ec d8 f1 c5 bf df eb 47 bd c3 8b 49 70 ef 97 7b ff fb ff f2 f4 6d e7 f0 e3 bb 67 ce 71 3a 1a fe 1f ff 1c df 7b 78 2f 8e a2 74 bf 7f ef 17 f2 f0 5e ef 38 1c f6 e3 60 7c ef 97 ff eb df ef 8d a3 7e 90 bd 46 dc 87 f7 42 c8 41 1f de 1b fb 23 2c 07 df 86 57 27 d3 ee 30 ec e1 cb f7 20 95 5c 24 69 30 ca 52 ff f1 30 57 40 f6 3e 7b 78 2f f5 8f de 64 45 bc 3c 7c fd 0a 5e f2 d3 34 0e bb d3 34 48 ee fd f2 ef f7 86 fe f8 08 9e 01 05 ff 31 a3 e6 0d 14 92 5c a5 27 2b 8e e7 8a 7b f6 f8 e9 d5 e2 2c Data Ascii: vH.*)WwDxjlL3:$AI{z~u($w6]YDKGIp{mgq:{x/t^8`\|~FBA#,W'0 \$i0R0W@>{x/dE<\|^44H1\'+{,
2024-04-24 17:31:47 UTC	16214	OUT	Data Raw: ce cd 5a a5 5a 79 ef a6 57 83 77 b3 08 73 b2 51 aa 31 4b ef e6 0f 2a d5 98 e5 d9 f6 1f 5c aa b1 26 4f a4 2b b6 ad 13 e9 8a 7d 37 27 d2 bd ed bb 64 59 f9 13 e9 5e 0d 2e 59 56 fa 44 ba 62 bb 13 e9 b5 b8 64 59 b3 27 d2 15 df de 89 74 c5 b7 72 22 5d f1 ed 9e 48 57 7c 6b 27 d2 15 df 9d 48 5f 74 c5 ee 44 fa 4f e4 92 e5 bb 13 e9 ab 7a 65 ab 27 d2 15 bf 2b 27 d2 15 2f 9c 48 3f 8c fd de 89 33 89 a3 2f 41 2f dd ec 89 15 b7 3f 96 5e c2 67 91 87 72 69 d2 ba 17 15 1f 4b af cf 67 a1 ef 80 27 56 94 3f 97 ae 6b f0 c4 8a c2 b9 f4 8d 3e 8b 12 78 2d 3f a2 cf c2 1a c0 e4 c7 f6 59 88 db a3 6c 96 91 6a db 42 d9 54 a2 62 94 cd 3a a5 da f6 3d b1 b2 3c cc a6 ae c1 13 2b 0b 30 9b 1b a5 9a b4 75 45 fe 98 52 2d 0f 93 f2 d3 4a 35 d9 e4 35 42 4a 6e eb 1a 21 25 bf 9b 6b 84 f4 f6 3d b1 Data Ascii: ZZyWwsQ1K*\&O+}7'dY^.YVDbdY'tr"]HW\|k'H_tDOze'+'/H?3/A/?^griKg'V?k>x-?YljBTb:=<+0uER-J55BJn!%k=
2024-04-24 17:31:48 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:47 GMT Content-Type: application/json Content-Length: 56 Connection: close Vary: Origin Access-Control-Allow-Origin: *
2024-04-24 17:31:48 UTC	56	IN	Data Raw: 7b 22 63 6f 6e 74 65 6e 74 5f 75 75 69 64 22 3a 22 31 68 39 37 6d 77 31 2d 53 4d 47 66 72 78 7a 36 5a 78 4e 78 59 51 22 2c 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d Data Ascii: {"content_uuid":"1h97mw1-SMGfrxz6ZxNxYQ","success":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50154	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:48 UTC	1110	OUT	POST /1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=13349&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/pricing-plans/&af=err,xhr,stn,ins,spa&be=827&fe=12237&dc=3108&perf=%7B%22timing%22:%7B%22of%22:1713979893836,%22n%22:0,%22f%22:4,%22dn%22:31,%22dne%22:31,%22c%22:31,%22s%22:43,%22ce%22:388,%22rq%22:390,%22rp%22:827,%22rpe%22:2107,%22di%22:3843,%22ds%22:3935,%22de%22:3935,%22dc%22:13039,%22l%22:13051,%22le%22:13064%7D,%22navigation%22:%7B%7D%7D&fp=1467&fcp=1467 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 28 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:48 UTC	28	OUT	Data Raw: 7b 22 6a 61 22 3a 7b 22 73 69 74 65 56 65 72 73 69 6f 6e 22 3a 22 6e 65 77 22 7d 7d Data Ascii: {"ja":{"siteVersion":"new"}}
2024-04-24 17:31:48 UTC	436	IN	HTTP/1.1 200 Connection: close Content-Length: 151 date: Wed, 24 Apr 2024 17:31:48 GMT content-type: text/plain cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.xero.com access-control-expose-headers: Date timing-allow-origin: https://www.xero.com x-served-by: cache-lax-kwhp1940145-LAX
2024-04-24 17:31:48 UTC	151	IN	Data Raw: 7b 22 73 74 6e 22 3a 30 2c 22 65 72 72 22 3a 31 2c 22 69 6e 73 22 3a 31 2c 22 73 70 61 22 3a 31 2c 22 73 72 22 3a 30 2c 22 73 72 73 22 3a 30 2c 22 73 74 22 3a 30 2c 22 73 74 73 22 3a 30 2c 22 61 70 70 22 3a 7b 22 61 67 65 6e 74 73 22 3a 5b 7b 22 65 6e 74 69 74 79 47 75 69 64 22 3a 22 4d 54 6b 32 4d 6a 41 78 4e 33 78 43 55 6b 39 58 55 30 56 53 66 45 46 51 55 45 78 4a 51 30 46 55 53 55 39 4f 66 44 45 77 4d 6a 4d 7a 4f 44 55 78 4e 6a 41 22 7d 5d 7d 7d Data Ascii: {"stn":0,"err":1,"ins":1,"spa":1,"sr":0,"srs":0,"st":0,"sts":0,"app":{"agents":[{"entityGuid":"MTk2MjAxN3xCUk9XU0VSfEFQUExJQ0FUSU9OfDEwMjMzODUxNjA"}]}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50153	15.197.193.217	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:48 UTC	1025	OUT	GET /track/up?adv=9nlrx8p&ref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&upid=e7m2c49&upv=1.1.0&td1=https://www.xero.com/us/pricing-plans/ HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9; TDCPM=CAESEgoDYWFtEgsI0pKn98yj8jwQBRIXCghhcHBuZXh1cxILCNTgq57No_I8EAUSFgoHcnViaWNvbhILCODTp_fMo_I8EAUYBSACKAMyCwiw76mk46PyPBAFOAFCBCICCAFaBzlubHJ4OHBgAQ..
2024-04-24 17:31:48 UTC	629	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:48 GMT Content-Type: text/html Content-Length: 967 Connection: close server: Kestrel set-cookie: TDID=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9; expires=Thu, 24 Apr 2025 17:31:48 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsI0pKn98yj8jwQBRIXCghhcHBuZXh1cxILCNTgq57No_I8EAUSFgoHcnViaWNvbhILCODTp_fMo_I8EAUSFQoGZ29vZ2xlEgsImvyuvc6j8jwQBRIWCgdibHVla2FpEgsI5KGvvc6j8jwQBRIUCgV0YXBhZBILCMLKr73Oo_I8EAUYBSgDMgsIyr6x6uSj8jwQBTgBQgQiAggBWgc5bmxyeDhwYAE.; expires=Thu, 24 Apr 2025 17:31:48 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 17:31:48 UTC	967	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50156	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:48 UTC	536	OUT	GET /jserrors/1/bd61b676be?a=1134228971&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=68886&ck=1&ref=https://in.xero.com/m/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:48 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:31:48 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-bur-kbur8200153-BUR
2024-04-24 17:31:48 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50157	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:48 UTC	534	OUT	GET /events/1/bd61b676be?a=1134228971&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=68938&ck=1&ref=https://in.xero.com/m/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:48 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:31:48 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-bur-kbur8200120-BUR
2024-04-24 17:31:48 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50155	142.250.141.103	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:48 UTC	1425	OUT	GET /pagead/1p-conversion/1023673485/?random=1633179437&cv=11&fst=1713979901079&bg=ffffff&guid=ON&async=1&gtm=45be44m0v883646161z8830923470za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&label=v0RbCOHw2eECEI2JkOgD&hn=www.googleadservices.com&frm=0&tiba=Pricing%20Plans%20%7C%20Xero%20US&value=0&npa=0&pscdl=noapi&auid=1776741404.1713979872&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQE4AUABSid0cmlnZ2VyLCBldmVudC1zb3VyY2U7bmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CNOymNKu-7DYIiITCKjj39qw24UDFdKrOgUdHP4HQjICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhVodHRwczovL3d3dy54ZXJvLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqrKXqBelBOnwfViNJlOaFZoaYhUJ7f_Q9bAJ-87gcE7qJ78PW&eitems=ChAI8NuisQYQpLKG6LHZ3MozEh0AIjyJpgIvZkbKtK3q5csLuaPyLUU9n340gpsScQ&random=2520443789 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:48 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 17:31:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50158	52.209.193.176	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:48 UTC	364	OUT	GET /?site_id=3197823&gzip=1 HTTP/1.1 Host: content.hotjar.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:49 UTC	145	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 17:31:49 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 11 Connection: close
2024-04-24 17:31:49 UTC	11	IN	Data Raw: 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50159	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:48 UTC	771	OUT	POST /events/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=14201&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/pricing-plans/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 2334 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:48 UTC	2334	OUT	Data Raw: 62 65 6c 2e 37 3b 31 2c 74 2c 2c 61 79 65 2c 61 6e 6a 2c 68 73 2c 27 69 6e 69 74 69 61 6c 50 61 67 65 4c 6f 61 64 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 78 65 72 6f 2e 63 6f 6d 2f 75 73 2f 70 72 69 63 69 6e 67 2d 70 6c 61 6e 73 2f 2c 31 2c 31 2c 2c 2c 21 21 21 21 27 32 36 31 38 66 32 31 32 2d 62 34 33 33 2d 34 34 32 66 2d 61 35 61 36 2d 35 38 31 37 36 66 64 63 33 35 38 39 2c 27 31 2c 31 34 72 2c 31 34 72 3b 35 2c 27 73 69 74 65 56 65 72 73 69 6f 6e 2c 27 6e 65 77 3b 32 2c 2c 33 61 67 2c 38 34 2c 67 2c 31 2c 27 47 45 54 2c 35 6b 2c 27 77 77 77 2e 78 65 72 6f 2e 63 6f 6d 3a 34 34 33 2c 27 2f 5f 6e 65 78 74 2f 64 61 74 61 2f 31 37 31 32 37 32 35 33 39 39 2f 75 73 2e 6a 73 6f 6e 2c 2c 6e 77 78 2c 31 2c 27 31 31 2c 21 21 21 3b 32 2c 2c 33 61 6a 2c 38 68 2c Data Ascii: bel.7;1,t,,aye,anj,hs,'initialPageLoad,'https://www.xero.com/us/pricing-plans/,1,1,,,!!!!'2618f212-b433-442f-a5a6-58176fdc3589,'1,14r,14r;5,'siteVersion,'new;2,,3ag,84,g,1,'GET,5k,'www.xero.com:443,'/_next/data/1712725399/us.json,,nwx,1,'11,!!!;2,,3aj,8h,
2024-04-24 17:31:49 UTC	310	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:31:49 GMT content-type: image/gif access-control-allow-origin: https://www.xero.com access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-lax-kwhp1940078-LAX
2024-04-24 17:31:49 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50160	142.250.101.157	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:49 UTC	1050	OUT	GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=ZDZkMDA1MDMtOTJkMS00MWY1LTljYWEtZGRmZWViMTVkNGU5&gdpr=0&gdpr_consent=&ttd_tdid=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:31:49 UTC	739	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&google_gid=CAESEFTbqARl2HhE5xojEfAWySU&google_cver=1 Date: Wed, 24 Apr 2024 17:31:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 386 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 17:31:49 UTC	386	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 6f 6f 67 6c 65 3f 67 5f 75 75 69 64 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 74 74 64 5f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50162	34.111.113.62	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:49 UTC	853	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&partner_url=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dtapad HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:49 UTC	1172	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 17:31:49 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1713979909402;Expires=Sun, 23 Jun 2024 17:31:49 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=a834124b-33a6-4cda-a6e5-5c2f73486437;Expires=Sun, 23 Jun 2024 17:31:49 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://pixel.tapad.com/idsync/ex/receive/check?partner_id=1830&partner_device_id=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&partner_url=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dtapad Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50163	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:49 UTC	865	OUT	GET /1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=13349&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/pricing-plans/&af=err,xhr,stn,ins,spa&be=827&fe=12237&dc=3108&perf=%7B%22timing%22:%7B%22of%22:1713979893836,%22n%22:0,%22f%22:4,%22dn%22:31,%22dne%22:31,%22c%22:31,%22s%22:43,%22ce%22:388,%22rq%22:390,%22rp%22:827,%22rpe%22:2107,%22di%22:3843,%22ds%22:3935,%22de%22:3935,%22dc%22:13039,%22l%22:13051,%22le%22:13064%7D,%22navigation%22:%7B%7D%7D&fp=1467&fcp=1467 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:50 UTC	396	IN	HTTP/1.1 200 Connection: close Content-Length: 79 date: Wed, 24 Apr 2024 17:31:49 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: Date timing-allow-origin: * x-served-by: cache-bur-kbur8200145-BUR
2024-04-24 17:31:50 UTC	79	IN	Data Raw: 5b 37 31 2c 20 37 33 2c 20 37 30 2c 20 35 36 2c 20 35 37 2c 20 39 37 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 34 34 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 32 5d Data Ascii: [71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50164	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:49 UTC	524	OUT	GET /events/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=14201&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/pricing-plans/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:50 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:31:49 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-bur-kbur8200143-BUR
2024-04-24 17:31:50 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50165	35.71.131.137	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:49 UTC	1009	OUT	GET /track/cmf/generic?ttd_pid=bluekai HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9; TDCPM=CAESEgoDYWFtEgsI0pKn98yj8jwQBRIXCghhcHBuZXh1cxILCNTgq57No_I8EAUSFgoHcnViaWNvbhILCODTp_fMo_I8EAUSFQoGZ29vZ2xlEgsImvyuvc6j8jwQBRIWCgdibHVla2FpEgsI5KGvvc6j8jwQBRIUCgV0YXBhZBILCMLKr73Oo_I8EAUYBSgDMgsIyr6x6uSj8jwQBTgBQgQiAggBWgc5bmxyeDhwYAE.
2024-04-24 17:31:50 UTC	632	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:49 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9; expires=Thu, 24 Apr 2025 17:31:49 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsI0pKn98yj8jwQBRIXCghhcHBuZXh1cxILCNTgq57No_I8EAUSFgoHcnViaWNvbhILCODTp_fMo_I8EAUSFQoGZ29vZ2xlEgsImvyuvc6j8jwQBRIWCgdibHVla2FpEgsI5KGvvc6j8jwQBRIUCgV0YXBhZBILCMLKr73Oo_I8EAUYBSABKAMyCwjKvrHq5KPyPBAFOAFCBCICCAFaBzlubHJ4OHBgAQ..; expires=Thu, 24 Apr 2025 17:31:49 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 17:31:50 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50166	35.71.131.137	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:49 UTC	1120	OUT	GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&google_gid=CAESEFTbqARl2HhE5xojEfAWySU&google_cver=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9; TDCPM=CAESEgoDYWFtEgsI0pKn98yj8jwQBRIXCghhcHBuZXh1cxILCNTgq57No_I8EAUSFgoHcnViaWNvbhILCODTp_fMo_I8EAUSFQoGZ29vZ2xlEgsImvyuvc6j8jwQBRIWCgdibHVla2FpEgsI5KGvvc6j8jwQBRIUCgV0YXBhZBILCMLKr73Oo_I8EAUYBSgDMgsIyr6x6uSj8jwQBTgBQgQiAggBWgc5bmxyeDhwYAE.
2024-04-24 17:31:50 UTC	632	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:50 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9; expires=Thu, 24 Apr 2025 17:31:50 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsI0pKn98yj8jwQBRIXCghhcHBuZXh1cxILCNTgq57No_I8EAUSFgoHcnViaWNvbhILCODTp_fMo_I8EAUSFQoGZ29vZ2xlEgsI0rDUzs6j8jwQBRIWCgdibHVla2FpEgsI5KGvvc6j8jwQBRIUCgV0YXBhZBILCMLKr73Oo_I8EAUYBSABKAMyCwjKvrHq5KPyPBAFOAFCBCICCAFaBzlubHJ4OHBgAQ..; expires=Thu, 24 Apr 2025 17:31:50 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 17:31:50 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50167	34.111.113.62	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:49 UTC	939	OUT	GET /idsync/ex/receive/check?partner_id=1830&partner_device_id=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&partner_url=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dtapad HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1713979909402; TapAd_DID=a834124b-33a6-4cda-a6e5-5c2f73486437
2024-04-24 17:31:50 UTC	1380	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 17:31:50 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1713979909402;Expires=Sun, 23 Jun 2024 17:31:50 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=a834124b-33a6-4cda-a6e5-5c2f73486437;Expires=Sun, 23 Jun 2024 17:31:50 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Sun, 23 Jun 2024 17:31:50 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://secure.adnxs.com/getuid?https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Freceive%3Fpartner_id%3DAPPNEXUS%26partner_device_id%3D%24UID%26pt%3Da834124b-33a6-4cda-a6e5-5c2f73486437%252Chttps%25253A%25252F%25252Fmatch.adsrvr.org%25252Ftrack%25252Fcmf%25252Fgeneric%25253Fttd_pid%25253Dtapad%252C Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50173	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:50 UTC	787	OUT	POST /events/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=16072&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/pricing-plans/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 448 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:50 UTC	448	OUT	Data Raw: 62 65 6c 2e 36 3b 65 2c 27 66 70 2c 31 34 72 2c 31 3b 35 2c 27 73 69 74 65 56 65 72 73 69 6f 6e 2c 27 6e 65 77 3b 65 2c 27 66 63 70 2c 31 34 72 2c 31 3b 35 2c 31 2c 32 3b 65 2c 27 66 69 2c 33 35 33 2c 36 3b 35 2c 27 74 79 70 65 2c 27 70 6f 69 6e 74 65 72 64 6f 77 6e 3b 36 2c 27 66 69 64 2c 32 32 2e 3b 35 2c 27 6e 65 74 2d 65 74 79 70 65 2c 27 33 67 3b 36 2c 27 6e 65 74 2d 72 74 74 2c 34 30 30 2e 3b 36 2c 27 6e 65 74 2d 64 6c 69 6e 6b 2c 31 2e 34 35 3b 35 2c 31 2c 32 3b 65 2c 27 6c 6f 61 64 2c 61 32 77 2c 32 3b 36 2c 27 63 6c 73 2c 30 2e 30 30 31 35 36 34 32 31 31 32 33 30 31 34 36 35 38 35 32 3b 35 2c 31 2c 32 3b 65 2c 27 6c 63 70 2c 31 34 72 2c 38 3b 36 2c 27 73 69 7a 65 2c 34 38 34 38 30 2e 3b 35 2c 27 65 69 64 3b 35 2c 27 65 6c 54 61 67 2c 27 48 31 3b Data Ascii: bel.6;e,'fp,14r,1;5,'siteVersion,'new;e,'fcp,14r,1;5,1,2;e,'fi,353,6;5,'type,'pointerdown;6,'fid,22.;5,'net-etype,'3g;6,'net-rtt,400.;6,'net-dlink,1.45;5,1,2;e,'load,a2w,2;6,'cls,0.0015642112301465852;5,1,2;e,'lcp,14r,8;6,'size,48480.;5,'eid;5,'elTag,'H1;
2024-04-24 17:31:51 UTC	354	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:31:51 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.xero.com x-served-by: cache-bur-kbur8200109-BUR
2024-04-24 17:31:51 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50172	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:50 UTC	790	OUT	POST /jserrors/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=16075&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/pricing-plans/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 1031 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:50 UTC	1031	OUT	Data Raw: 7b 22 73 6d 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 56 65 72 73 69 6f 6e 2f 31 2e 32 33 36 2e 30 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 4c 6f 61 64 65 72 54 79 70 65 2f 73 70 61 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 44 69 73 74 4d 65 74 68 6f 64 2f 43 44 4e 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 41 50 49 2f 73 65 74 43 75 73 74 6f 6d 41 74 74 72 69 Data Ascii: {"sm":[{"params":{"name":"Generic/Version/1.236.0/Detected"},"stats":{"c":1}},{"params":{"name":"Generic/LoaderType/spa/Detected"},"stats":{"c":1}},{"params":{"name":"Generic/DistMethod/CDN/Detected"},"stats":{"c":1}},{"params":{"name":"API/setCustomAttri
2024-04-24 17:31:51 UTC	354	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:31:51 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.xero.com x-served-by: cache-bur-kbur8200026-BUR
2024-04-24 17:31:51 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50174	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:50 UTC	790	OUT	POST /jserrors/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=16077&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/pricing-plans/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 8139 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:50 UTC	8139	OUT	Data Raw: 7b 22 78 68 72 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 68 6f 73 74 6e 61 6d 65 22 3a 22 77 77 77 2e 78 65 72 6f 2e 63 6f 6d 22 2c 22 70 6f 72 74 22 3a 22 34 34 33 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 73 22 2c 22 68 6f 73 74 22 3a 22 77 77 77 2e 78 65 72 6f 2e 63 6f 6d 3a 34 34 33 22 2c 22 70 61 74 68 6e 61 6d 65 22 3a 22 2f 5f 6e 65 78 74 2f 64 61 74 61 2f 31 37 31 32 37 32 35 33 39 39 2f 75 73 2e 6a 73 6f 6e 22 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 73 74 61 74 75 73 22 3a 32 30 30 7d 2c 22 6d 65 74 72 69 63 73 22 3a 7b 22 63 6f 75 6e 74 22 3a 31 2c 22 74 78 53 69 7a 65 22 3a 7b 22 74 22 3a 30 7d 2c 22 72 78 53 69 7a 65 22 3a 7b 22 74 22 3a 33 30 39 39 33 7d 2c 22 64 75 72 61 74 69 6f 6e 22 3a 7b 22 74 22 3a 32 39 31 7d Data Ascii: {"xhr":[{"params":{"hostname":"www.xero.com","port":"443","protocol":"https","host":"www.xero.com:443","pathname":"/_next/data/1712725399/us.json","method":"GET","status":200},"metrics":{"count":1,"txSize":{"t":0},"rxSize":{"t":30993},"duration":{"t":291}
2024-04-24 17:31:51 UTC	354	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:31:51 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.xero.com x-served-by: cache-bur-kbur8200074-BUR
2024-04-24 17:31:51 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50175	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:50 UTC	788	OUT	POST /events/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=16080&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/pricing-plans/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 2267 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:50 UTC	2267	OUT	Data Raw: 62 65 6c 2e 37 3b 32 2c 31 2c 33 61 67 2c 38 33 2c 2c 2c 27 47 45 54 2c 35 6b 2c 27 77 77 77 2e 78 65 72 6f 2e 63 6f 6d 3a 34 34 33 2c 27 2f 5f 6e 65 78 74 2f 64 61 74 61 2f 31 37 31 32 37 32 35 33 39 39 2f 75 73 2e 6a 73 6f 6e 2c 2c 6e 77 78 2c 31 2c 27 30 2c 21 21 21 3b 35 2c 27 73 69 74 65 56 65 72 73 69 6f 6e 2c 27 6e 65 77 3b 32 2c 31 2c 33 61 6a 2c 38 68 2c 2c 2c 30 2c 35 6b 2c 31 2c 27 2f 5f 6e 65 78 74 2f 64 61 74 61 2f 31 37 31 32 37 32 35 33 39 39 2f 75 73 2f 73 69 67 6e 75 70 2e 6a 73 6f 6e 2c 2c 62 37 64 2c 31 2c 33 2c 21 21 21 3b 35 2c 34 2c 35 3b 32 2c 31 2c 33 37 6c 2c 6c 6e 2c 2c 2c 27 70 6f 73 74 2c 35 6b 2c 27 78 65 72 6f 2e 64 65 6d 64 65 78 2e 6e 65 74 3a 34 34 33 2c 27 2f 65 76 65 6e 74 2c 62 35 2c 36 66 2c 2c 33 2c 21 21 21 3b 35 2c Data Ascii: bel.7;2,1,3ag,83,,,'GET,5k,'www.xero.com:443,'/_next/data/1712725399/us.json,,nwx,1,'0,!!!;5,'siteVersion,'new;2,1,3aj,8h,,,0,5k,1,'/_next/data/1712725399/us/signup.json,,b7d,1,3,!!!;5,4,5;2,1,37l,ln,,,'post,5k,'xero.demdex.net:443,'/event,b5,6f,,3,!!!;5,
2024-04-24 17:31:51 UTC	354	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:31:51 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.xero.com x-served-by: cache-lax-kwhp1940092-LAX
2024-04-24 17:31:51 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50171	52.200.154.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:50 UTC	722	OUT	GET /_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979909897&i=gtm&dwt=2995&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:51 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 24 Apr 2024 17:31:51 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,c7b34c7842d522aada62865d6dc8101a,10.0.0.98,41910,154.16.105.36,,232061097582,1,1713979911.278,0.003,,.,0,0,0.000,0.000,-,0,0,203,266,133,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-24 17:31:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50176	104.254.148.252	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:51 UTC	1139	OUT	GET /getuid?https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Freceive%3Fpartner_id%3DAPPNEXUS%26partner_device_id%3D%24UID%26pt%3Da834124b-33a6-4cda-a6e5-5c2f73486437%252Chttps%25253A%25252F%25252Fmatch.adsrvr.org%25252Ftrack%25252Fcmf%25252Fgeneric%25253Fttd_pid%25253Dtapad%252C HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=m_8-Y6AASp1p5OpNZ9bzhkhrTChq8unsMFTzGMgaVyms94eMsiauccuAru_RhVqFmMnFrJswxdSg8F9VP4Q1Z4nV1riYE9ziuTPc1J2pzTg.; receive-cookie-deprecation=1; uuid2=1843681124601207595
2024-04-24 17:31:51 UTC	1600	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Wed, 24 Apr 2024 17:31:51 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://pixel.tapad.com/idsync/ex/receive?partner_id=APPNEXUS&partner_device_id=1843681124601207595&pt=a834124b-33a6-4cda-a6e5-5c2f73486437%2Chttps%253A%252F%252Fmatch.adsrvr.org%252Ftrack%252Fcmf%252Fgeneric%253Fttd_pid%253Dtapad%2C AN-X-Request-Uuid: 72eddbdd-3c7a-4705-9033-8e48282224f8 Set-Cookie: XANDR_PANID=m_8-Y6AASp1p5OpNZ9bzhkhrTChq8unsMFTzGMgaVyms94eMsiauccuAru_RhVqFmMnFrJswxdSg8F9VP4Q1Z4nV1riYE9ziuTPc1J2pzTg.; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 23-Jul-2024 17:31:51 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Wed, 12-Apr-2034 17:31:51 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=1843681124601207595; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 23-Jul-2024 17:31:51 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.36; 154.16.105.36; 894.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50178	34.111.113.62	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:51 UTC	988	OUT	GET /idsync/ex/receive?partner_id=APPNEXUS&partner_device_id=1843681124601207595&pt=a834124b-33a6-4cda-a6e5-5c2f73486437%2Chttps%253A%252F%252Fmatch.adsrvr.org%252Ftrack%252Fcmf%252Fgeneric%253Fttd_pid%253Dtapad%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1713979909402; TapAd_DID=a834124b-33a6-4cda-a6e5-5c2f73486437; TapAd_3WAY_SYNCS=
2024-04-24 17:31:56 UTC	1146	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 17:31:56 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1713979909402;Expires=Sun, 23 Jun 2024 17:31:56 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=a834124b-33a6-4cda-a6e5-5c2f73486437;Expires=Sun, 23 Jun 2024 17:31:56 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=2!2777;Expires=Sun, 23 Jun 2024 17:31:56 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50177	52.50.39.109	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:51 UTC	525	OUT	GET /api/v2/client/ws?v=7&site_id=3197823 HTTP/1.1 Host: ws.hotjar.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.xero.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: DQapNjBu3bwgaBR6ZIcbIQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 17:31:52 UTC	145	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 17:31:52 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 16 Connection: close
2024-04-24 17:31:52 UTC	16	IN	Data Raw: 34 30 30 3a 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400: Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50179	52.200.154.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:51 UTC	719	OUT	GET /_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979910825&i=gtm&dwt=1&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:52 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 24 Apr 2024 17:31:52 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,beecc6c197232b9cbde856c896a5d9a6,10.0.0.98,12470,154.16.105.36,,231810651979,1,1713979912.265,0.003,,.,0,0,0.000,0.004,-,0,0,203,211,105,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-24 17:31:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50180	52.200.154.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:51 UTC	719	OUT	GET /_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979910827&i=gtm&dwt=1&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:52 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 24 Apr 2024 17:31:52 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,c6c1c3dccaa7086efb51cc0ddde8aa42,10.0.0.98,12500,154.16.105.36,,231810651985,1,1713979912.265,0.004,,.,0,0,0.000,0.004,-,0,0,203,221,110,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-24 17:31:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50181	52.200.154.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:51 UTC	719	OUT	GET /_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979910828&i=gtm&dwt=1&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:52 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 24 Apr 2024 17:31:52 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,7fffe33084bb9b25be5d620da7ba9b52,10.0.0.98,55174,154.16.105.36,,360725203692,1,1713979912.264,0.003,,.,0,0,0.000,0.004,-,0,0,203,268,134,10,26847,,,,,,-, Content-Length: 43 Connection: Close
2024-04-24 17:31:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50183	52.200.154.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:51 UTC	727	OUT	GET /_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979910835&i=gtm&dwt=6&ive=webkitHidden HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:52 UTC	372	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 24 Apr 2024 17:31:52 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,069dab87ab03badaf09e43704dc27873,10.0.0.98,14150,154.16.105.36,,8114334090,1,1713979912.264,0.002,,.,0,0,0.000,0.004,-,0,0,203,224,112,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-24 17:31:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50182	52.200.154.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:51 UTC	728	OUT	GET /_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979910868&i=gtm&dwt=32&ive=webkitHidden HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:52 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 24 Apr 2024 17:31:52 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,b7f6b6c8cc03644cb36dd2f0bf3908c4,10.0.0.98,11926,154.16.105.36,,232061103034,1,1713979912.264,0.002,,.,0,0,0.000,0.004,-,0,0,203,260,130,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-24 17:31:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50184	52.200.154.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:51 UTC	727	OUT	GET /_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979910872&i=gtm&dwt=1&ive=webkitHidden HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:52 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 24 Apr 2024 17:31:52 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,ed00fe53baef09275c288e9928f495d9,10.0.0.98,55084,154.16.105.36,,360725203685,1,1713979912.265,0.002,,.,0,0,0.000,0.000,-,0,0,203,288,144,10,26847,,,,,,-, Content-Length: 43 Connection: Close
2024-04-24 17:31:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50185	52.200.154.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:51 UTC	490	OUT	GET /_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979909897&i=gtm&dwt=2995&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:52 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 24 Apr 2024 17:31:52 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,89f79f8b037c5e66cf42c5c0af356456,10.0.0.98,11930,154.16.105.36,,232061103042,1,1713979912.267,0.003,,.,0,0,0.000,0.000,-,0,0,203,243,121,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-24 17:31:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50170	3.225.21.46	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:52 UTC	1366	OUT	GET /js_tracking?url=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&uid=XVsUfradtXcBUl5XS45ldg&v=1&host=https%3A%2F%2Fwww.xero.com HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0
2024-04-24 17:31:52 UTC	242	IN	HTTP/1.1 204 No Content Date: Wed, 24 Apr 2024 17:31:52 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.xero.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50186	52.200.154.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:53 UTC	487	OUT	GET /_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979910825&i=gtm&dwt=1&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:53 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 24 Apr 2024 17:31:53 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,60631062f1b813bf92b6dc104511cdcf,10.0.0.98,18232,154.16.105.36,,232061109419,1,1713979913.398,0.002,,.,0,0,0.000,0.000,-,0,0,203,226,113,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-24 17:31:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50188	52.200.154.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:53 UTC	495	OUT	GET /_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979910872&i=gtm&dwt=1&ive=webkitHidden HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:53 UTC	372	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 24 Apr 2024 17:31:53 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,7cb2cc735eec73dd2d45a97ba0690ed9,10.0.0.98,19912,154.16.105.36,,8114340603,1,1713979913.398,0.002,,.,0,0,0.004,0.004,-,0,0,203,253,126,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-24 17:31:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50187	52.200.154.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:53 UTC	487	OUT	GET /_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979910827&i=gtm&dwt=1&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:53 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 24 Apr 2024 17:31:53 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,aabdd73cd5192671e39c2d7e8f359ae7,10.0.0.98,18212,154.16.105.36,,232061109404,1,1713979913.398,0.002,,.,0,0,0.000,0.000,-,0,0,203,210,105,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-24 17:31:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50191	52.200.154.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:53 UTC	496	OUT	GET /_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979910868&i=gtm&dwt=32&ive=webkitHidden HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:53 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 24 Apr 2024 17:31:53 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,669d952d1b65c8f5b61672c5a9ca8f83,10.0.0.98,18614,154.16.105.36,,231810658283,1,1713979913.406,0.002,,.,0,0,0.000,0.000,-,0,0,203,209,104,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-24 17:31:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50190	52.200.154.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:53 UTC	487	OUT	GET /_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979910828&i=gtm&dwt=1&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:53 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 24 Apr 2024 17:31:53 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,5b3739cf8ff0edefafe74eeda9e78fc2,10.0.0.98,61530,154.16.105.36,,360725209811,1,1713979913.408,0.004,,.,0,0,0.000,0.004,-,0,0,203,269,134,10,26847,,,,,,-, Content-Length: 43 Connection: Close
2024-04-24 17:31:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50189	52.200.154.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:53 UTC	495	OUT	GET /_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979910835&i=gtm&dwt=6&ive=webkitHidden HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:53 UTC	372	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 24 Apr 2024 17:31:53 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,b49ce4655f341f9b9457dd11756179f8,10.0.0.98,19966,154.16.105.36,,8114340656,1,1713979913.402,0.002,,.,0,0,0.000,0.000,-,0,0,203,216,108,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-24 17:31:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50200	100.20.148.237	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:54 UTC	745	OUT	POST /event?d_dil_ver=9.4&_ts=1713979913601 HTTP/1.1 Host: xero.demdex.net Connection: keep-alive Content-Length: 369 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=38351504769226682132089995704072130929; xero=38351504769226682132089995704072130929
2024-04-24 17:31:54 UTC	369	OUT	Data Raw: 64 5f 6d 69 64 3d 33 38 33 34 34 33 39 35 36 30 31 33 38 35 36 32 34 33 35 32 30 39 33 38 30 38 32 31 32 36 38 31 32 33 31 39 34 33 26 64 5f 6e 73 69 64 3d 30 26 64 5f 64 70 69 64 3d 31 33 38 38 39 39 26 64 5f 64 70 75 75 69 64 3d 32 33 34 33 66 61 65 31 2d 32 64 35 66 2d 34 64 31 31 2d 61 30 65 37 2d 35 62 38 31 39 62 34 64 36 35 39 32 26 64 5f 63 69 64 5f 69 63 3d 78 65 72 6f 5f 69 64 25 30 31 32 33 34 33 66 61 65 31 2d 32 64 35 66 2d 34 64 31 31 2d 61 30 65 37 2d 35 62 38 31 39 62 34 64 36 35 39 32 25 30 31 32 26 64 5f 6c 64 3d 5f 74 73 25 33 44 31 37 31 33 39 37 39 39 31 33 36 30 31 26 64 5f 72 74 62 64 3d 6a 73 6f 6e 26 64 5f 6a 73 6f 6e 76 3d 31 26 64 5f 64 73 74 3d 31 26 63 5f 68 61 73 68 3d 26 63 5f 68 6f 73 74 3d 77 77 77 2e 78 65 72 6f 2e 63 6f Data Ascii: d_mid=38344395601385624352093808212681231943&d_nsid=0&d_dpid=138899&d_dpuuid=2343fae1-2d5f-4d11-a0e7-5b819b4d6592&d_cid_ic=xero_id%012343fae1-2d5f-4d11-a0e7-5b819b4d6592%012&d_ld=_ts%3D1713979913601&d_rtbd=json&d_jsonv=1&d_dst=1&c_hash=&c_host=www.xero.co
2024-04-24 17:31:54 UTC	987	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:54 GMT Content-Type: application/json;charset=utf-8 Content-Length: 241 Connection: close X-TID: eV+UBaTYT6M= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.xero.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-usw2-2-v056-022d7c2e8.edge-usw2.demdex.com 4 ms set-cookie: demdex=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:54 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: xero=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:54 GMT; Path=/; Domain=.xero.demdex.net; Secure; SameSite=None
2024-04-24 17:31:54 UTC	241	IN	Data Raw: 7b 22 73 74 75 66 66 22 3a 5b 7b 22 63 6e 22 3a 22 61 61 6d 5f 70 69 6c 6f 74 22 2c 22 63 76 22 3a 22 73 65 67 3d 32 31 35 33 33 32 30 35 2c 73 65 67 3d 32 31 35 33 33 32 33 31 2c 3d 32 31 36 38 39 31 38 38 2c 3d 32 34 37 36 37 33 32 39 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 22 7d 2c 7b 22 63 6e 22 3a 22 61 61 6d 5f 78 65 72 6f 22 2c 22 63 76 22 3a 22 73 65 67 3d 32 32 32 38 33 32 36 37 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 22 7d 5d 2c 22 75 75 69 64 22 3a 22 33 38 33 35 31 35 30 34 37 36 39 32 32 36 36 38 32 31 33 32 30 38 39 39 39 35 37 30 34 30 37 32 31 33 30 39 32 39 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 39 2c 22 74 69 64 22 3a 22 65 56 2b 55 42 61 54 59 54 36 4d 3d 22 7d Data Ascii: {"stuff":[{"cn":"aam_pilot","cv":"seg=21533205,seg=21533231,=21689188,=24767329","ttl":30,"dmn":""},{"cn":"aam_xero","cv":"seg=22283267","ttl":30,"dmn":""}],"uuid":"38351504769226682132089995704072130929","dcs_region":9,"tid":"eV+UBaTYT6M="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50199	63.140.37.126	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:54 UTC	734	OUT	POST /rest/v1/delivery?client=xerolimited&version=2.3.1&sessionId=3f1be1d8-9f25-4368-bedc-dbf40f8c1e2a HTTP/1.1 Host: xerolimited.tt.omtrdc.net Connection: keep-alive Content-Length: 360 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" pragma: no-cache sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain accept: / cache-control: no-cache sec-ch-ua-platform: "Windows" Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:54 UTC	360	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 68 61 6e 6e 65 6c 22 3a 22 77 65 62 22 2c 22 61 64 64 72 65 73 73 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 78 65 72 6f 2e 63 6f 6d 2f 75 73 2f 22 2c 22 72 65 66 65 72 72 69 6e 67 55 72 6c 22 3a 22 22 7d 7d 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 32 33 34 33 66 61 65 31 2d 32 64 35 66 2d 34 64 31 31 2d 61 30 65 37 2d 35 62 38 31 39 62 34 64 36 35 39 32 22 2c 22 6d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 64 22 3a 22 33 38 33 34 34 33 39 35 36 30 31 33 38 35 36 32 34 33 35 32 30 39 33 38 30 38 32 31 32 36 38 31 32 33 31 39 34 33 22 7d 2c 22 65 78 70 65 72 69 65 6e 63 65 43 6c 6f 75 64 22 3a 7b 22 61 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 22 3a 7b 22 6c 6f 63 Data Ascii: {"context":{"channel":"web","address":{"url":"https://www.xero.com/us/","referringUrl":""}},"id":{"tntId":"2343fae1-2d5f-4d11-a0e7-5b819b4d6592","marketingCloudVisitorId":"38344395601385624352093808212681231943"},"experienceCloud":{"audienceManager":{"loc
2024-04-24 17:31:54 UTC	838	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 17:31:54 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://www.xero.com access-control-allow-credentials: true x-request-id: 2b356372-5af6-4361-8b4a-1f2bf1345be2 timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-04-24 17:31:54 UTC	355	IN	Data Raw: 31 35 63 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 65 66 34 62 30 36 62 61 2d 63 31 36 32 2d 34 34 32 39 2d 62 61 65 63 2d 62 37 34 34 32 31 37 33 61 31 39 62 22 2c 22 63 6c 69 65 6e 74 22 3a 22 78 65 72 6f 6c 69 6d 69 74 65 64 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 32 33 34 33 66 61 65 31 2d 32 64 35 66 2d 34 64 31 31 2d 61 30 65 37 2d 35 62 38 31 39 62 34 64 36 35 39 32 2e 33 35 5f 30 22 2c 22 6d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 64 22 3a 22 33 38 33 34 34 33 39 35 36 30 31 33 38 35 36 32 34 33 35 32 30 39 33 38 30 38 32 31 32 36 38 31 32 33 31 39 34 33 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 35 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 Data Ascii: 15c{"status":200,"requestId":"ef4b06ba-c162-4429-baec-b7442173a19b","client":"xerolimited","id":{"tntId":"2343fae1-2d5f-4d11-a0e7-5b819b4d6592.35_0","marketingCloudVisitorId":"38344395601385624352093808212681231943"},"edgeHost":"mboxedge35.tt.omtrdc.net
2024-04-24 17:31:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50206	100.20.148.237	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:55 UTC	476	OUT	GET /event?d_dil_ver=9.4&_ts=1713979913601 HTTP/1.1 Host: xero.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=38351504769226682132089995704072130929; xero=38351504769226682132089995704072130929
2024-04-24 17:31:55 UTC	893	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:55 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: reBreoVESd4= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-usw2-1-v056-0685f2a1f.edge-usw2.demdex.com 4 ms set-cookie: demdex=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:55 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: xero=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:55 GMT; Path=/; Domain=.xero.demdex.net; Secure; SameSite=None
2024-04-24 17:31:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50208	100.20.148.237	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:55 UTC	745	OUT	POST /event?d_dil_ver=9.4&_ts=1713979913811 HTTP/1.1 Host: xero.demdex.net Connection: keep-alive Content-Length: 248 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=38351504769226682132089995704072130929; xero=38351504769226682132089995704072130929
2024-04-24 17:31:55 UTC	248	OUT	Data Raw: 64 5f 6d 69 64 3d 33 38 33 34 34 33 39 35 36 30 31 33 38 35 36 32 34 33 35 32 30 39 33 38 30 38 32 31 32 36 38 31 32 33 31 39 34 33 26 64 5f 6e 73 69 64 3d 30 26 64 5f 64 70 69 64 3d 31 33 38 38 39 39 26 64 5f 64 70 75 75 69 64 3d 32 33 34 33 66 61 65 31 2d 32 64 35 66 2d 34 64 31 31 2d 61 30 65 37 2d 35 62 38 31 39 62 34 64 36 35 39 32 26 64 5f 63 69 64 5f 69 63 3d 78 65 72 6f 5f 69 64 25 30 31 32 33 34 33 66 61 65 31 2d 32 64 35 66 2d 34 64 31 31 2d 61 30 65 37 2d 35 62 38 31 39 62 34 64 36 35 39 32 25 30 31 32 26 64 5f 6c 64 3d 5f 74 73 25 33 44 31 37 31 33 39 37 39 39 31 33 38 31 31 26 64 5f 72 74 62 64 3d 6a 73 6f 6e 26 64 5f 6a 73 6f 6e 76 3d 31 26 64 5f 64 73 74 3d 31 26 63 5f 72 65 66 65 72 72 65 72 3d 6e 6f 74 2d 78 65 72 6f Data Ascii: d_mid=38344395601385624352093808212681231943&d_nsid=0&d_dpid=138899&d_dpuuid=2343fae1-2d5f-4d11-a0e7-5b819b4d6592&d_cid_ic=xero_id%012343fae1-2d5f-4d11-a0e7-5b819b4d6592%012&d_ld=_ts%3D1713979913811&d_rtbd=json&d_jsonv=1&d_dst=1&c_referrer=not-xero
2024-04-24 17:31:55 UTC	987	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:55 GMT Content-Type: application/json;charset=utf-8 Content-Length: 241 Connection: close X-TID: OegynaJKS1s= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.xero.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-usw2-2-v056-0c3abf401.edge-usw2.demdex.com 4 ms set-cookie: demdex=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:55 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: xero=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:55 GMT; Path=/; Domain=.xero.demdex.net; Secure; SameSite=None
2024-04-24 17:31:55 UTC	241	IN	Data Raw: 7b 22 73 74 75 66 66 22 3a 5b 7b 22 63 6e 22 3a 22 61 61 6d 5f 70 69 6c 6f 74 22 2c 22 63 76 22 3a 22 73 65 67 3d 32 31 35 33 33 32 30 35 2c 73 65 67 3d 32 31 35 33 33 32 33 31 2c 3d 32 31 36 38 39 31 38 38 2c 3d 32 34 37 36 37 33 32 39 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 22 7d 2c 7b 22 63 6e 22 3a 22 61 61 6d 5f 78 65 72 6f 22 2c 22 63 76 22 3a 22 73 65 67 3d 32 32 32 38 33 32 36 37 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 22 7d 5d 2c 22 75 75 69 64 22 3a 22 33 38 33 35 31 35 30 34 37 36 39 32 32 36 36 38 32 31 33 32 30 38 39 39 39 35 37 30 34 30 37 32 31 33 30 39 32 39 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 39 2c 22 74 69 64 22 3a 22 4f 65 67 79 6e 61 4a 4b 53 31 73 3d 22 7d Data Ascii: {"stuff":[{"cn":"aam_pilot","cv":"seg=21533205,seg=21533231,=21689188,=24767329","ttl":30,"dmn":""},{"cn":"aam_xero","cv":"seg=22283267","ttl":30,"dmn":""}],"uuid":"38351504769226682132089995704072130929","dcs_region":9,"tid":"OegynaJKS1s="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50207	63.140.37.206	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:55 UTC	445	OUT	GET /rest/v1/delivery?client=xerolimited&version=2.3.1&sessionId=3f1be1d8-9f25-4368-bedc-dbf40f8c1e2a HTTP/1.1 Host: xerolimited.tt.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:55 UTC	450	IN	HTTP/1.1 405 Method Not Allowed date: Wed, 24 Apr 2024 17:31:55 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-04-24 17:31:55 UTC	67	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}
2024-04-24 17:31:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50213	100.20.148.237	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:56 UTC	476	OUT	GET /event?d_dil_ver=9.4&_ts=1713979913811 HTTP/1.1 Host: xero.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=38351504769226682132089995704072130929; xero=38351504769226682132089995704072130929
2024-04-24 17:31:56 UTC	893	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:56 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: ajZAbvp3Qmk= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-usw2-1-v056-0685f2a1f.edge-usw2.demdex.com 6 ms set-cookie: demdex=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:56 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: xero=38351504769226682132089995704072130929; Max-Age=15552000; Expires=Mon, 21 Oct 2024 17:31:56 GMT; Path=/; Domain=.xero.demdex.net; Secure; SameSite=None
2024-04-24 17:31:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50220	172.64.144.225	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:56 UTC	808	OUT	GET /attribution_tracking/conversions/4647.js?p=https://www.xero.com/us/&e=undefined HTTP/1.1 Host: tracking.g2crowd.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _session_id=c437bf136ef31853dd49dadbdd9dbdf5; __cf_bm=p6HUJ9ggzFDxp18tw.WpvqVTMzWgqdN1jZimvZbRdzU-1713979877-1.0.1.1-SZ_czmMl_V_N4C9Y3mTPlVdt_r13TfoWjjSB4FlGlxKHdw6niBF5wnBhK0EqX7ikXjAhdhzS4K5jdIVRGh0Iaw
2024-04-24 17:31:56 UTC	1313	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:56 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=600, public set-cookie: _session_id=c437bf136ef31853dd49dadbdd9dbdf5; path=/; expires=Wed, 08 May 2024 17:31:56 GMT; HttpOnly; secure; SameSite=None etag: W/"3dae93a05edd9dcfc1864b87178a31e0" x-request-id: 771daf3f-70a2-49c1-8257-a3250e6cc9eb x-runtime: 0.004566 strict-transport-security: max-age=604800 x-frame-options: SAMEORIGIN x-content-type-options: nosniff x-xss-protection: 1; mode=block x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self' .g2crowd.com .g2.com; connect-src 'self' .g2crowd.com .g2.com; font-src 'self' .g2crowd.com .g2.com; form-action 'self' .g2crowd.com .g2.com; frame-src 'self' .g2crowd.com .g2.com; img-src 'self' .g2crowd.com .g2.com; manifest-src 'self' .g2crowd.com .g2.com; media-src 'self' .g2crowd.com .g2.com; object-src 'self' .g2crowd.com .g2.com; script-src 'self' .g2crowd.com .g2.com; style-src 'self' .g2crowd.com .g2.com; worker-src 'self' .g2crowd.com .g2.com vary: Origin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8797d46f283409ff-LAS
2024-04-24 17:31:56 UTC	22	IN	Data Raw: 31 30 0d 0a 2f 2f 20 54 72 61 63 6b 69 6e 67 20 46 69 6c 65 0d 0a Data Ascii: 10// Tracking File
2024-04-24 17:31:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50226	151.101.193.140	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:57 UTC	910	OUT	GET /rp.gif?ts=1713979915558&id=t2_ewwvmnuh&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=cb2d649f-3168-41a8-8246-f3b3ccc5e846&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_72595d5a&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:57 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:57 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 17:31:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50229	146.75.92.157	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:57 UTC	625	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad" If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
2024-04-24 17:31:57 UTC	339	IN	HTTP/1.1 304 Not Modified Connection: close Date: Wed, 24 Apr 2024 17:31:57 GMT Cache-Control: no-cache ETag: "bbbcf811d8437a575d796a4c1e5d4fad" X-Served-By: cache-bur-kbur8200150-BUR X-Cache: HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50227	151.101.193.140	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:57 UTC	910	OUT	GET /rp.gif?ts=1713979915560&id=t2_ewwvmnuh&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=cb2d649f-3168-41a8-8246-f3b3ccc5e846&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_72595d5a&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:57 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:57 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 17:31:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50223	35.71.131.137	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:57 UTC	1011	OUT	GET /track/cmf/generic?ttd_pid=tapad HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9; TDCPM=CAESEgoDYWFtEgsI0pKn98yj8jwQBRIXCghhcHBuZXh1cxILCNTgq57No_I8EAUSFgoHcnViaWNvbhILCODTp_fMo_I8EAUSFQoGZ29vZ2xlEgsI0rDUzs6j8jwQBRIWCgdibHVla2FpEgsI5KGvvc6j8jwQBRIUCgV0YXBhZBILCMLKr73Oo_I8EAUYBSABKAMyCwjKvrHq5KPyPBAFOAFCBCICCAFaBzlubHJ4OHBgAQ..
2024-04-24 17:31:57 UTC	632	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:57 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9; expires=Thu, 24 Apr 2025 17:31:57 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsI0pKn98yj8jwQBRIXCghhcHBuZXh1cxILCNTgq57No_I8EAUSFgoHcnViaWNvbhILCODTp_fMo_I8EAUSFQoGZ29vZ2xlEgsI0rDUzs6j8jwQBRIWCgdibHVla2FpEgsI5KGvvc6j8jwQBRIUCgV0YXBhZBILCMLKr73Oo_I8EAUYBSACKAMyCwjKvrHq5KPyPBAFOAFCBCICCAFaBzlubHJ4OHBgAQ..; expires=Thu, 24 Apr 2025 17:31:57 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 17:31:57 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50224	3.225.21.46	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:57 UTC	1220	OUT	GET /events.js HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0
2024-04-24 17:31:57 UTC	192	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:57 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=5
2024-04-24 17:31:57 UTC	16192	IN	Data Raw: 34 36 34 36 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 0a 20 20 2f 2f 20 42 65 67 69 6e 20 64 6f 63 0a 0a 20 20 76 61 72 20 69 73 5f 64 65 76 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 69 66 20 28 20 66 61 6c 73 65 20 29 20 7b 0a 20 20 20 20 69 73 5f 64 65 76 20 3d 20 74 72 75 65 3b 0a 20 20 7d 0a 0a 20 20 76 61 72 20 64 69 73 61 62 6c 65 5f 73 79 6e 63 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 69 66 20 28 20 74 72 75 65 20 29 20 7b 0a 20 20 20 20 64 69 73 61 62 6c 65 5f 73 79 6e 63 20 3d 20 74 72 75 65 0a 20 20 7d 0a 0a 20 20 76 61 72 20 74 69 70 20 3d 20 22 70 5f 72 58 78 51 31 64 50 6a 7a 6c 4f 58 59 33 77 33 53 51 62 61 66 65 31 44 6a 73 38 56 65 37 74 46 50 4b 76 35 76 4c 78 4a 55 22 0a 20 20 0a 20 20 76 61 72 20 75 73 65 72 49 64 43 6f 6f 6b 69 65 Data Ascii: 4646(function (w) { // Begin doc var is_dev = false; if ( false ) { is_dev = true; } var disable_sync = false; if ( true ) { disable_sync = true } var tip = "p_rXxQ1dPjzlOXY3w3SQbafe1Djs8Ve7tFPKv5vLxJU" var userIdCookie
2024-04-24 17:31:57 UTC	1806	IN	Data Raw: 69 66 28 22 22 21 3d 63 61 6d 70 43 6f 6f 6b 69 65 4e 61 6d 65 29 74 72 79 7b 43 6f 6f 6b 69 65 73 2e 65 78 70 69 72 65 43 61 6d 70 61 69 67 6e 43 6f 6f 6b 69 65 73 28 34 29 2c 73 65 74 43 61 6d 70 61 69 67 6e 43 6f 6f 6b 69 65 28 29 2c 65 78 70 69 72 65 43 61 6d 70 61 69 67 6e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 28 29 2c 73 65 74 43 61 6d 70 61 69 67 6e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 22 22 21 3d 75 73 65 72 49 64 43 6f 6f 6b 69 65 56 61 6c 75 65 26 26 43 6f 6f 6b 69 65 73 2e 67 65 74 28 22 73 61 2d 75 73 65 72 2d 69 64 22 29 21 3d 75 73 65 72 49 64 43 6f 6f 6b 69 65 56 61 6c 75 65 29 74 72 79 7b 73 65 74 55 73 65 72 49 64 43 6f 6f 6b 69 65 28 29 2c 73 65 74 55 73 65 72 49 64 43 6f 6f 6b 69 65 56 32 28 Data Ascii: if(""!=campCookieName)try{Cookies.expireCampaignCookies(4),setCampaignCookie(),expireCampaignLocalStorage(),setCampaignLocalStorage()}catch(e){}if(""!=userIdCookieValue&&Cookies.get("sa-user-id")!=userIdCookieValue)try{setUserIdCookie(),setUserIdCookieV2(
2024-04-24 17:31:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50230	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:57 UTC	1374	OUT	GET /activityi;src=9401320;type=pagev0;cat=globa000;ord=1;num=8983422946655;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=671166263;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F? HTTP/1.1 Host: 9401320.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:31:57 UTC	1235	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://9401320.fls.doubleclick.net/activityi;dc_pre=CIb5jOGw24UDFd1YCAQdJkEMrg;src=9401320;type=pagev0;cat=globa000;ord=1;num=8983422946655;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=671166263;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50231	142.250.101.154	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:57 UTC	1385	OUT	GET /td/fls/rul/activityi;fledge=1;src=9401320;type=pagev0;cat=globa000;ord=1;num=8983422946655;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=671166263;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:31:57 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 17:31:57 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-24 17:31:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50232	142.250.101.154	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:57 UTC	1507	OUT	GET /td/rul/1023673485?random=1713979916325&cv=11&fst=1713979916325&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44m0v883646161z8830923470za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.xero.com%2Fus%2F&label=v0RbCOHw2eECEI2JkOgD&hn=www.googleadservices.com&frm=0&tiba=Accounting%20Software%20%E2%80%93%20Do%20Beautiful%20Business%20%7C%20Xero%20US&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1776741404.1713979872&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:31:57 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 17:31:57 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-24 17:31:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50233	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:57 UTC	1338	OUT	GET /activityi;src=9401320;type=pagev0;cat=globa002;ord=1;num=2659309086237;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2F;ps=1;pcor=225406472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F? HTTP/1.1 Host: 9401320.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:31:57 UTC	1199	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://9401320.fls.doubleclick.net/activityi;dc_pre=CLGHkOGw24UDFS9TCAQdudkNXw;src=9401320;type=pagev0;cat=globa002;ord=1;num=2659309086237;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2F;ps=1;pcor=225406472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50234	142.250.101.154	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:57 UTC	1349	OUT	GET /td/fls/rul/activityi;fledge=1;src=9401320;type=pagev0;cat=globa002;ord=1;num=2659309086237;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2F;ps=1;pcor=225406472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:31:57 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 17:31:57 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-24 17:31:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50236	18.154.144.27	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:57 UTC	850	OUT	POST /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.xero.com%2Fus%2F&page_title=Accounting%20Software%20%E2%80%93%20Do%20Beautiful%20Business%20%7C%20Xero%20US HTTP/1.1 Host: api.company-target.com Connection: keep-alive Content-Length: 63 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=fe876021-fc99-4e31-8bfa-461e893fb9c2; tuuid_lu=1713979902\|ix:0\|mctv:0\|rp:0
2024-04-24 17:31:57 UTC	63	OUT	Data Raw: 7b 22 73 72 63 22 3a 22 74 61 67 22 2c 22 61 75 74 68 22 3a 22 42 47 43 53 44 6b 35 4c 45 48 4f 34 4d 50 56 70 67 44 52 4e 75 50 75 65 33 4d 4a 56 35 47 75 64 4d 31 70 30 45 49 42 6b 22 7d Data Ascii: {"src":"tag","auth":"BGCSDk5LEHO4MPVpgDRNuPue3MJV5GudM1p0EIBk"}
2024-04-24 17:31:57 UTC	953	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 457 Connection: close Date: Wed, 24 Apr 2024 17:31:57 GMT Server: nginx Access-Control-Allow-Origin: https://www.xero.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Expose-Headers: x-amz-cf-id Access-Control-Max-Age: 7200 Access-Control-Allow-Credentials: true Api-Version: v2 Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Identification-Source: CENTRAL Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Tue, 23 Apr 2024 17:31:57 GMT Vary: Accept-Encoding, Origin Request-ID: 0377dca6-0d22-478a-8962-cce9dea86e33 X-Cache: Miss from cloudfront Via: 1.1 0675e3b1cc5e0c60957195491f316b72.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: yuy3bcsRlRIQnbPpEFtYeMITPxCJ_1c34nmscPjdR4VwgKLfOgZFew==
2024-04-24 17:31:57 UTC	457	IN	Data Raw: 7b 22 72 65 67 69 73 74 72 79 5f 63 6f 6d 70 61 6e 79 5f 6e 61 6d 65 22 3a 22 43 4f 47 45 4e 54 2d 31 37 34 22 2c 22 72 65 67 69 73 74 72 79 5f 63 69 74 79 22 3a 22 4c 61 73 20 56 65 67 61 73 22 2c 22 72 65 67 69 73 74 72 79 5f 73 74 61 74 65 22 3a 22 4e 56 22 2c 22 72 65 67 69 6f 6e 5f 6e 61 6d 65 22 3a 22 4e 65 76 61 64 61 22 2c 22 72 65 67 69 73 74 72 79 5f 7a 69 70 5f 63 6f 64 65 22 3a 22 38 39 31 30 31 22 2c 22 72 65 67 69 73 74 72 79 5f 61 72 65 61 5f 63 6f 64 65 22 3a 6e 75 6c 6c 2c 22 72 65 67 69 73 74 72 79 5f 64 6d 61 5f 63 6f 64 65 22 3a 38 33 39 2c 22 72 65 67 69 73 74 72 79 5f 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 72 65 67 69 73 74 72 79 5f 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 55 53 22 2c 22 72 Data Ascii: {"registry_company_name":"COGENT-174","registry_city":"Las Vegas","registry_state":"NV","region_name":"Nevada","registry_zip_code":"89101","registry_area_code":null,"registry_dma_code":839,"registry_country":"United States","registry_country_code":"US","r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50235	34.96.71.22	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:57 UTC	802	OUT	GET /s/sync?exc=lr HTTP/1.1 Host: s.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=fe876021-fc99-4e31-8bfa-461e893fb9c2; tuuid_lu=1713979902\|ix:0\|mctv:0\|rp:0
2024-04-24 17:31:57 UTC	510	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET,OPTIONS Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=fe876021-fc99-4e31-8bfa-461e893fb9c2; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Set-Cookie: tuuid_lu=1713979917\|ix:0\|mctv:0\|rp:0; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Date: Wed, 24 Apr 2024 17:31:57 GMT Content-Length: 74 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 17:31:57 UTC	74	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 0a 09 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Pixels</title></head><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50243	151.101.129.140	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:57 UTC	678	OUT	GET /rp.gif?ts=1713979915558&id=t2_ewwvmnuh&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=cb2d649f-3168-41a8-8246-f3b3ccc5e846&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_72595d5a&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:58 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:58 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 17:31:58 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50246	151.101.129.140	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:57 UTC	678	OUT	GET /rp.gif?ts=1713979915560&id=t2_ewwvmnuh&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=cb2d649f-3168-41a8-8246-f3b3ccc5e846&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_72595d5a&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:58 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:31:58 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 17:31:58 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50250	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:58 UTC	1408	OUT	GET /activityi;dc_pre=CIb5jOGw24UDFd1YCAQdJkEMrg;src=9401320;type=pagev0;cat=globa000;ord=1;num=8983422946655;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=671166263;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F? HTTP/1.1 Host: 9401320.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:31:58 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:58 GMT Expires: Wed, 24 Apr 2024 17:31:58 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 17:31:58 UTC	592	IN	Data Raw: 32 64 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 49 62 35 6a 4f 47 77 32 34 55 44 46 64 Data Ascii: 2d7<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CIb5jOGw24UDFd
2024-04-24 17:31:58 UTC	142	IN	Data Raw: 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 70 73 63 64 6c 3d 6e 6f 61 70 69 3b 67 74 6d 3d 34 35 66 65 34 34 6d 30 7a 38 38 33 30 39 32 33 34 37 30 7a 61 32 30 31 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 3b 64 6d 61 3d 30 3b 65 70 76 65 72 3d 32 3b 7e 6f 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 78 65 72 6f 2e 63 6f 6d 25 32 46 75 73 25 32 46 22 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F"/></body></html>
2024-04-24 17:31:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50251	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:58 UTC	1372	OUT	GET /activityi;dc_pre=CLGHkOGw24UDFS9TCAQdudkNXw;src=9401320;type=pagev0;cat=globa002;ord=1;num=2659309086237;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2F;ps=1;pcor=225406472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F? HTTP/1.1 Host: 9401320.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:31:58 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:58 GMT Expires: Wed, 24 Apr 2024 17:31:58 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 17:31:58 UTC	592	IN	Data Raw: 32 62 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4c 47 48 6b 4f 47 77 32 34 55 44 46 53 Data Ascii: 2b3<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CLGHkOGw24UDFS
2024-04-24 17:31:58 UTC	106	IN	Data Raw: 3b 6d 61 74 63 68 5f 69 64 3d 32 33 34 33 66 61 65 31 2d 32 64 35 66 2d 34 64 31 31 2d 61 30 65 37 2d 35 62 38 31 39 62 34 64 36 35 39 32 3b 7e 6f 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 78 65 72 6f 2e 63 6f 6d 25 32 46 75 73 25 32 46 22 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: ;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F"/></body></html>
2024-04-24 17:31:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50253	18.154.144.27	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:58 UTC	591	OUT	GET /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.xero.com%2Fus%2F&page_title=Accounting%20Software%20%E2%80%93%20Do%20Beautiful%20Business%20%7C%20Xero%20US HTTP/1.1 Host: api.company-target.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=fe876021-fc99-4e31-8bfa-461e893fb9c2; tuuid_lu=1713979902\|ix:0\|mctv:0\|rp:0
2024-04-24 17:31:58 UTC	492	IN	HTTP/1.1 401 Unauthorized Content-Type: text/plain;charset=utf-8 Content-Length: 12 Connection: close Date: Wed, 24 Apr 2024 17:31:58 GMT Server: nginx WWW-Authenticate: DemandBase API v2 X-Content-Type-Options: nosniff Request-ID: 61d879eb-d6fc-4402-84f0-cfd55afd4fc6 Vary: Origin X-Cache: Error from cloudfront Via: 1.1 8173637b037f7a210c661cd1e5dc76e2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: XFRWfjM5DpnvxOCqtPQEwlRV5V0ngDLAQ3XKixAHGhJ_XGSeK0BKWg==
2024-04-24 17:31:58 UTC	12	IN	Data Raw: 55 6e 61 75 74 68 6f 72 69 7a 65 64 Data Ascii: Unauthorized

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50254	18.239.199.34	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:58 UTC	635	OUT	GET /bg9s?x-amz-cf-id=yuy3bcsRlRIQnbPpEFtYeMITPxCJ_1c34nmscPjdR4VwgKLfOgZFew==&api-version=v2 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:58 UTC	602	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 08:43:36 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 943eef8bcb9ae2cbd9546c9e3bf846e2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P3 X-Amz-Cf-Id: ioYzZvPVAZYznW5dlCqHK4cwUlXJE8A_rOnwHyRqLH6OmbCCr05h4A== Age: 31703 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50247	67.220.226.234	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:58 UTC	652	OUT	GET /s/iu3?pid=890f9a2a-f5c2-415f-82e9-09a1f0694ac9&event=PageView&ts=1713979916959 HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=Ay5qx_zsFkCLnhRKsF8cooY; ad-privacy=0
2024-04-24 17:31:58 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 17:31:58 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: DJBFA4JMNATBAMHBPE9R Set-Cookie: ad-id=Ay5qx_zsFkCLnhRKsF8cooY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 17:31:58 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 17:31:58 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 17:31:58 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50256	3.225.21.46	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:58 UTC	3196	OUT	GET /saq_pxl?uid=IZi8ik6wpN0HnLyT9lcuoQ&is_js=true&landing_url=https%3A%2F%2Fwww.xero.com%2Fus%2F&t=Accounting%20Software%20%E2%80%93%20Do%20Beautiful%20Business%20%7C%20Xero%20US&tip=p_rXxQ1dPjzlOXY3w3SQbafe1Djs8Ve7tFPKv5vLxJU&host=https%3A%2F%2Fwww.xero.com&sa_conv_data_css_value=&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%252Br0VCscx3wVXJe%252F3g0&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0
2024-04-24 17:31:58 UTC	295	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:58 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 94 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.xero.com
2024-04-24 17:31:58 UTC	94	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50255	3.225.21.46	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:58 UTC	3240	OUT	GET /saq_pxl?uid=XVsUfradtXcBUl5XS45ldg&is_js=true&landing_url=https%3A%2F%2Fwww.xero.com%2Fus%2F&t=Accounting%20Software%20%E2%80%93%20Do%20Beautiful%20Business%20%7C%20Xero%20US&tip=p_rXxQ1dPjzlOXY3w3SQbafe1Djs8Ve7tFPKv5vLxJU&host=https%3A%2F%2Fwww.xero.com&sa_conv_data_css_value=%270-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892%27&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%252Br0VCscx3wVXJe%252F3g0&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0
2024-04-24 17:31:58 UTC	296	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:58 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 116 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.xero.com
2024-04-24 17:31:58 UTC	116	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 5b 22 71 68 31 72 41 66 31 38 35 4e 58 69 75 59 68 53 43 4d 52 4f 45 4b 22 5d 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":null,"retargeting_tracker_uids":["qh1rAf185NXiuYhSCMROEK"],"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50261	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:58 UTC	789	OUT	POST /jserrors/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=24051&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/pricing-plans/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 261 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:58 UTC	261	OUT	Data Raw: 7b 22 78 68 72 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 68 6f 73 74 6e 61 6d 65 22 3a 22 74 61 67 73 2e 73 72 76 2e 73 74 61 63 6b 61 64 61 70 74 2e 63 6f 6d 22 2c 22 70 6f 72 74 22 3a 22 34 34 33 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 73 22 2c 22 68 6f 73 74 22 3a 22 74 61 67 73 2e 73 72 76 2e 73 74 61 63 6b 61 64 61 70 74 2e 63 6f 6d 3a 34 34 33 22 2c 22 70 61 74 68 6e 61 6d 65 22 3a 22 2f 6a 73 5f 74 72 61 63 6b 69 6e 67 22 2c 22 73 74 61 74 75 73 22 3a 32 30 34 7d 2c 22 6d 65 74 72 69 63 73 22 3a 7b 22 63 6f 75 6e 74 22 3a 31 2c 22 64 75 72 61 74 69 6f 6e 22 3a 7b 22 74 22 3a 33 38 31 7d 2c 22 63 62 54 69 6d 65 22 3a 7b 22 74 22 3a 30 7d 2c 22 74 69 6d 65 22 3a 7b 22 74 22 3a 31 38 31 31 Data Ascii: {"xhr":[{"params":{"method":"GET","hostname":"tags.srv.stackadapt.com","port":"443","protocol":"https","host":"tags.srv.stackadapt.com:443","pathname":"/js_tracking","status":204},"metrics":{"count":1,"duration":{"t":381},"cbTime":{"t":0},"time":{"t":1811
2024-04-24 17:31:59 UTC	354	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:31:59 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.xero.com x-served-by: cache-lax-kwhp1940070-LAX
2024-04-24 17:31:59 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50262	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:58 UTC	786	OUT	POST /events/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=24052&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/pricing-plans/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 99 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:31:58 UTC	99	OUT	Data Raw: 62 65 6c 2e 37 3b 32 2c 31 2c 64 7a 36 2c 61 6b 2c 2c 2c 27 47 45 54 2c 35 6f 2c 27 74 61 67 73 2e 73 72 76 2e 73 74 61 63 6b 61 64 61 70 74 2e 63 6f 6d 3a 34 34 33 2c 27 2f 6a 73 5f 74 72 61 63 6b 69 6e 67 2c 2c 2c 2c 27 30 2c 21 21 21 3b 35 2c 27 73 69 74 65 56 65 72 73 69 6f 6e 2c 27 6e 65 77 Data Ascii: bel.7;2,1,dz6,ak,,,'GET,5o,'tags.srv.stackadapt.com:443,'/js_tracking,,,,'0,!!!;5,'siteVersion,'new
2024-04-24 17:31:59 UTC	354	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:31:59 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.xero.com x-served-by: cache-bur-kbur8200078-BUR
2024-04-24 17:31:59 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50257	52.50.39.109	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:58 UTC	525	OUT	GET /api/v2/client/ws?v=7&site_id=3197823 HTTP/1.1 Host: ws.hotjar.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.xero.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: Qlme48rPYcVz6Jm3AvAUlg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 17:31:59 UTC	145	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 17:31:59 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 16 Connection: close
2024-04-24 17:31:59 UTC	16	IN	Data Raw: 34 30 30 3a 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400: Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50260	52.200.154.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:58 UTC	721	OUT	GET /_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979917882&i=gtm&dwt=160&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:59 UTC	372	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 24 Apr 2024 17:31:59 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,81fcbd7037714851c025e2124e4e9786,10.0.0.98,50504,154.16.105.36,,8114373817,1,1713979919.265,0.002,,.,0,0,0.000,0.004,-,0,0,203,224,112,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-24 17:31:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50263	18.239.199.122	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	437	OUT	GET /bg9s?x-amz-cf-id=yuy3bcsRlRIQnbPpEFtYeMITPxCJ_1c34nmscPjdR4VwgKLfOgZFew==&api-version=v2 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:59 UTC	584	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 08:43:36 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 5a49f9a7c8daffa15b73109404f7c9f8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P3 X-Amz-Cf-Id: yaxQN21S14jxxItOgIupmAhV1n7uLNHQpNv9qVB1C1Rs5BNm1r7uzQ== Age: 31704 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50266	3.163.125.9	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	706	OUT	GET /aat?pid=890f9a2a-f5c2-415f-82e9-09a1f0694ac9&event=PageView&ts=1713979916959 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=event-source;navigation-source Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:59 UTC	575	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 17:31:59 GMT x-amzn-RequestId: 68ac9298-927a-4b5b-981e-1345b48c319b Access-Control-Allow-Origin: https://www.xero.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 0bb718701d18fa15e55d41332dc987fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX54-P1 X-Amz-Cf-Id: XN9qS2ey6KzGWUj0dhZbZtSmM1r2HNv6whxW-CKtK1Pnx1AfvWF-5Q==
2024-04-24 17:31:59 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50265	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	1336	OUT	GET /activity;register_conversion=1;src=9401320;type=pagev0;cat=globa000;ord=1;num=8983422946655;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=671166263;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger=navigation-source, event-source Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:31:59 UTC	2222	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"7606361524068387752"}],"aggregatable_trigger_data":[{"filters":[{"14":["9625591"]}],"key_piece":"0xb6889d81b637834c","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xc7f062f1da66ad3f","not_filters":{"14":["9625591"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["9625591"]}],"key_piece":"0xeecd4d7702d5cf56","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x329af3b40b7d0761","not_filters":{"14":["9625591"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"13253382889727491271","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"7606361524068387752","filters":[{"14":["9625591"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"7606361524068387752","filters":[{"14":["9625591"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"7606361524068387752","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"7606361524068387752","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["9401320"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 17:31:59 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50269	104.254.150.241	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	916	OUT	GET /pixie?e=LandingPage&pi=a8c07fef-3f0b-43ec-b0fb-3e4bc99c03b5&it=1713979916403&v=0.0.24&u=https%3A%2F%2Fwww.xero.com%2Fus%2F&st=1713979916403&et=1713979916403&if=0 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=m_8-Y6AASp1p5OpNZ9bzhkhrTChq8unsMFTzGMgaVyms94eMsiauccuAru_RhVqFmMnFrJswxdSg8F9VP4Q1Z4nV1riYE9ziuTPc1J2pzTg.; receive-cookie-deprecation=1; uuid2=1843681124601207595
2024-04-24 17:31:59 UTC	300	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Wed, 24 Apr 2024 17:31:59 GMT Content-Type: image/gif Content-Length: 42 Connection: close Cache-Control: no-cache, no-store, must-revalidate X-Proxy-Origin: 154.16.105.36; 154.16.105.36; 906.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com
2024-04-24 17:31:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50271	35.244.154.8	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	673	OUT	GET /464526.gif HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pxrc=COuDpbEGEgUI6AcQABIGCMrdKhAA; rlas3=ASrhmHE4+ogPZs3V0OJEawFx6wLYASAWx4oFCPLVVrA=
2024-04-24 17:31:59 UTC	620	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=x7jx8H6dpxkPZs3V0OJEawFx6wLYASAWx4oFCPLVVrA=; Path=/; Domain=rlcdn.com; Expires=Thu, 24 Apr 2025 17:31:59 GMT; Secure; SameSite=None Set-Cookie: pxrc=COuDpbEGEgUI6AcQABIGCMrdKhAA; Path=/; Domain=rlcdn.com; Expires=Sun, 23 Jun 2024 17:31:59 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Wed, 24 Apr 2024 17:31:59 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 17:31:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50268	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	1282	OUT	GET /activity;register_conversion=1;src=9401320;type=pagev0;cat=globa002;ord=1;num=2659309086237;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2F;ps=1;pcor=225406472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:31:59 UTC	2228	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"6888027977880552653"}],"aggregatable_trigger_data":[{"filters":[{"14":["11394278"]}],"key_piece":"0x12da3d5f1ce2811d","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x1501c99c6a0b32cf","not_filters":{"14":["11394278"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["11394278"]}],"key_piece":"0x5259a2b839f1de8c","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x9f04d31bac8cd323","not_filters":{"14":["11394278"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"16331319371489455135","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"6888027977880552653","filters":[{"14":["11394278"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"6888027977880552653","filters":[{"14":["11394278"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"6888027977880552653","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"6888027977880552653","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["9401320"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 17:31:59 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50264	52.200.154.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	669	OUT	GET /_/ad/9cf7274f1587405384d41bb446f7e005/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.xero.com%2Fus%2F HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:59 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 24 Apr 2024 17:31:59 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,3a9806df8dfd0fa85c1ed20fbdf0f76e,10.0.0.98,49854,154.16.105.36,,232061143290,1,1713979919.593,0.001,,.,0,0,0.000,0.000,-,0,0,203,249,124,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-24 17:31:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50270	100.26.119.80	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	3042	OUT	GET /saq_pxl?uid=XVsUfradtXcBUl5XS45ldg&is_js=true&landing_url=https%3A%2F%2Fwww.xero.com%2Fus%2F&t=Accounting%20Software%20%E2%80%93%20Do%20Beautiful%20Business%20%7C%20Xero%20US&tip=p_rXxQ1dPjzlOXY3w3SQbafe1Djs8Ve7tFPKv5vLxJU&host=https%3A%2F%2Fwww.xero.com&sa_conv_data_css_value=%270-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892%27&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%252Br0VCscx3wVXJe%252F3g0&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0
2024-04-24 17:31:59 UTC	280	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:59 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 116 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: null
2024-04-24 17:31:59 UTC	116	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 5b 22 71 68 31 72 41 66 31 38 35 4e 58 69 75 59 68 53 43 4d 52 4f 45 4b 22 5d 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":null,"retargeting_tracker_uids":["qh1rAf185NXiuYhSCMROEK"],"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50272	100.26.119.80	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	2998	OUT	GET /saq_pxl?uid=IZi8ik6wpN0HnLyT9lcuoQ&is_js=true&landing_url=https%3A%2F%2Fwww.xero.com%2Fus%2F&t=Accounting%20Software%20%E2%80%93%20Do%20Beautiful%20Business%20%7C%20Xero%20US&tip=p_rXxQ1dPjzlOXY3w3SQbafe1Djs8Ve7tFPKv5vLxJU&host=https%3A%2F%2Fwww.xero.com&sa_conv_data_css_value=&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%252Br0VCscx3wVXJe%252F3g0&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0
2024-04-24 17:31:59 UTC	279	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:31:59 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 94 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: null
2024-04-24 17:31:59 UTC	94	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50267	52.95.118.179	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	481	OUT	GET /s/iu3?pid=890f9a2a-f5c2-415f-82e9-09a1f0694ac9&event=PageView&ts=1713979916959 HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=Ay5qx_zsFkCLnhRKsF8cooY; ad-privacy=0
2024-04-24 17:32:00 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 17:31:59 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: AM8ZP849B2DSNAP6R1QZ Set-Cookie: ad-id=Ay5qx_zsFkCLnhRKsF8cooY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 17:31:59 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 17:31:59 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 17:32:00 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50273	74.125.137.157	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	896	OUT	GET /ddm/fls/z/dc_pre=CLGHkOGw24UDFS9TCAQdudkNXw;src=9401320;type=pagev0;cat=globa002;ord=1;num=2659309086237;npa=0;auiddc=;u1=%2Fus%2F;ps=1;pcor=225406472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:59 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 17:31:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50274	74.125.137.157	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	932	OUT	GET /ddm/fls/z/dc_pre=CIb5jOGw24UDFd1YCAQdJkEMrg;src=9401320;type=pagev0;cat=globa000;ord=1;num=8983422946655;npa=0;auiddc=;u1=%2Fus%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=671166263;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:31:59 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:31:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 17:31:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50275	31.13.70.36	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	853	OUT	GET /tr/?id=303901320544451&ev=PageView&dl=https%3A%2F%2Fwww.xero.com%2Fus%2F&rl=&if=false&ts=1713979916420&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.1.1713979879599.1913881180&cs_est=true&ler=empty&cdl=API_unavailable&it=1713979915566&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:32:00 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 17:32:00 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50276	31.13.70.36	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	963	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=303901320544451&ev=PageView&dl=https%3A%2F%2Fwww.xero.com%2Fus%2F&rl=&if=false&ts=1713979916420&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.1.1713979879599.1913881180&cs_est=true&ler=empty&cdl=API_unavailable&it=1713979915566&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:32:00 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 17:32:00 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 17:32:00 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 17:32:00 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 17:32:00 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50277	31.13.70.36	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	882	OUT	GET /tr/?id=303901320544451&ev=referrerSource&dl=https%3A%2F%2Fwww.xero.com%2Fus%2F&rl=&if=false&ts=1713979916424&cd[utm_source]=organic&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=1&o=4126&fbp=fb.1.1713979879599.1913881180&ler=empty&cdl=API_unavailable&it=1713979915566&coo=false&up=hostname&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:32:00 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 17:32:00 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50279	3.163.125.74	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	436	OUT	GET /aat?pid=890f9a2a-f5c2-415f-82e9-09a1f0694ac9&event=PageView&ts=1713979916959 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:32:00 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 17:32:00 GMT x-amzn-RequestId: 3be1ee19-1d3e-448e-9b23-df79d45915d8 X-Cache: Miss from cloudfront Via: 1.1 02f87203fbdc440a98621bf48faa1110.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX54-P1 X-Amz-Cf-Id: 82i_tS-81W9REXmHIVN3xZu7EHUPzCUVnAz_BXIfhfYclXXr06VnWg==
2024-04-24 17:32:00 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50280	31.13.70.36	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	974	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=303901320544451&ev=referrerSource&dl=https%3A%2F%2Fwww.xero.com%2Fus%2F&rl=&if=false&ts=1713979916424&cd[utm_source]=organic&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=1&o=4126&fbp=fb.1.1713979879599.1913881180&ler=empty&cdl=API_unavailable&it=1713979915566&coo=false&up=hostname&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:32:00 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 17:32:00 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 17:32:00 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 17:32:00 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 17:32:00 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50283	104.254.151.68	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	532	OUT	GET /pixie?e=LandingPage&pi=a8c07fef-3f0b-43ec-b0fb-3e4bc99c03b5&it=1713979916403&v=0.0.24&u=https%3A%2F%2Fwww.xero.com%2Fus%2F&st=1713979916403&et=1713979916403&if=0 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=1843681124601207595
2024-04-24 17:32:00 UTC	300	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Wed, 24 Apr 2024 17:32:00 GMT Content-Type: image/gif Content-Length: 42 Connection: close Cache-Control: no-cache, no-store, must-revalidate X-Proxy-Origin: 154.16.105.36; 154.16.105.36; 904.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com
2024-04-24 17:32:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50282	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	1031	OUT	GET /activity;register_conversion=1;src=9401320;type=pagev0;cat=globa000;ord=1;num=8983422946655;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=671166263;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:32:00 UTC	2222	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:32:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"7606361524068387752"}],"aggregatable_trigger_data":[{"filters":[{"14":["9625591"]}],"key_piece":"0xb6889d81b637834c","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xc7f062f1da66ad3f","not_filters":{"14":["9625591"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["9625591"]}],"key_piece":"0xeecd4d7702d5cf56","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x329af3b40b7d0761","not_filters":{"14":["9625591"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"13253382889727491271","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"7606361524068387752","filters":[{"14":["9625591"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"7606361524068387752","filters":[{"14":["9625591"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"7606361524068387752","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"7606361524068387752","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["9401320"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 17:32:00 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50281	35.155.89.175	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	915	OUT	GET /sp.pl?a=10000&d=Wed%2C%2024%20Apr%202024%2017%3A31%3A56%20GMT&n=-2d&b=Accounting%20Software%20%E2%80%93%20Do%20Beautiful%20Business%20%7C%20Xero%20US&.yp=10175613&f=https%3A%2F%2Fwww.xero.com%2Fus%2F&enc=UTF-8&yv=1.15.1&tagmgr=gtm HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBOpBKWYCEDUbr1k9Xo4DARqqvTIt6UwFEgEBAQGTKmYzZtws0iMA_eMAAA&S=AQAAAgn0wglSfOJqhUp_cYYRBZk
2024-04-24 17:32:00 UTC	938	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:32:00 GMT Expires: Wed, 24 Apr 2024 17:32:00 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS/9.1.10.106 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.106) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBOpBKWYCEDUbr1k9Xo4DARqqvTIt6UwFEgEBAQGTKmYzZtws0iMA_eMAAA&S=AQAAAgn0wglSfOJqhUp_cYYRBZk; Expires=Thu, 24 Apr 2025 23:32:00 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-04-24 17:32:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50278	52.200.154.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	489	OUT	GET /_/ad/9cf7274f1587405384d41bb446f7e005/pixel?j=1&u=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&tag=DwellTime&ts=1713979917882&i=gtm&dwt=160&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:32:00 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 24 Apr 2024 17:32:00 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,a0fb4b0db5d8ad8cad0b9af58f05c465,10.0.0.98,34576,154.16.105.36,,360725246829,1,1713979920.293,0.001,,.,0,0,0.000,0.000,-,0,0,203,248,124,10,26847,,,,,,-, Content-Length: 43 Connection: Close
2024-04-24 17:32:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50285	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	995	OUT	GET /activity;register_conversion=1;src=9401320;type=pagev0;cat=globa002;ord=1;num=2659309086237;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2F;ps=1;pcor=225406472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnncL-fCQQdgXlJvpVYLkskysg8UiQUPgLod0Wed9LPqsJusYasdD_M87ZlMxc; ar_debug=1
2024-04-24 17:32:00 UTC	2228	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:32:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"6888027977880552653"}],"aggregatable_trigger_data":[{"filters":[{"14":["11394278"]}],"key_piece":"0x12da3d5f1ce2811d","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x1501c99c6a0b32cf","not_filters":{"14":["11394278"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["11394278"]}],"key_piece":"0x5259a2b839f1de8c","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x9f04d31bac8cd323","not_filters":{"14":["11394278"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"16331319371489455135","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"6888027977880552653","filters":[{"14":["11394278"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"6888027977880552653","filters":[{"14":["11394278"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"6888027977880552653","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"6888027977880552653","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["9401320"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 17:32:00 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50284	104.244.42.197	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	965	OUT	GET /i/adsct?bci=3&eci=2&event_id=3b8bebe6-5a97-4e44-9c2c-aecf158b9cc9&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=c58f7f8d-5a94-495f-8327-3042b09976d7&tw_document_href=https%3A%2F%2Fwww.xero.com%2Fus%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nygt4&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=8a6b78c7-1529-4396-840d-f87e70f062de
2024-04-24 17:32:00 UTC	392	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 17:31:59 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: bab9e7729749fcf7 strict-transport-security: max-age=0 x-response-time: 5 x-connection-hash: f908919d39381c21cd0f499fe02b464a2aeee953d2811c8b730747b26e39ff32 connection: close
2024-04-24 17:32:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50287	35.244.154.8	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	441	OUT	GET /464526.gif HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pxrc=COuDpbEGEgUI6AcQABIGCMrdKhAA; rlas3=x7jx8H6dpxkPZs3V0OJEawFx6wLYASAWx4oFCPLVVrA=
2024-04-24 17:32:00 UTC	620	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=75tlCBtaxO4PZs3V0OJEawFx6wLYASAWx4oFCPLVVrA=; Path=/; Domain=rlcdn.com; Expires=Thu, 24 Apr 2025 17:32:00 GMT; Secure; SameSite=None Set-Cookie: pxrc=COuDpbEGEgUI6AcQABIGCMrdKhAA; Path=/; Domain=rlcdn.com; Expires=Sun, 23 Jun 2024 17:32:00 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Wed, 24 Apr 2024 17:32:00 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 17:32:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50286	104.244.42.3	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:31:59 UTC	986	OUT	GET /i/adsct?bci=3&eci=2&event_id=3b8bebe6-5a97-4e44-9c2c-aecf158b9cc9&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=c58f7f8d-5a94-495f-8327-3042b09976d7&tw_document_href=https%3A%2F%2Fwww.xero.com%2Fus%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nygt4&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_f58PXPQs7cnhT5q89JomeA=="
2024-04-24 17:32:00 UTC	400	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 17:31:59 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 0ece6f9d6a1eb4ce strict-transport-security: max-age=631138519 x-response-time: 5 x-connection-hash: eb63b88c73972dd91edda0715f0e3d7286473cfb247658a6859eeb302cd53573 connection: close
2024-04-24 17:32:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	50288	142.251.2.148	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:00 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:32:00 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 78 65 72 6f 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 33 32 35 33 33 38 32 38 38 39 37 32 37 34 39 31 32 37 31 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://xero.com","trigger_debug_key":"13253382889727491271"},"type":"trigger-no-matching-source"}]
2024-04-24 17:32:00 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 17:32:00 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50291	142.251.2.149	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:00 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:32:00 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 78 65 72 6f 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 36 33 33 31 33 31 39 33 37 31 34 38 39 34 35 35 31 33 35 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://xero.com","trigger_debug_key":"16331319371489455135"},"type":"trigger-no-matching-source"}]
2024-04-24 17:32:00 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 17:32:00 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	50290	52.200.154.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:00 UTC	437	OUT	GET /_/ad/9cf7274f1587405384d41bb446f7e005/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.xero.com%2Fus%2F HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:32:00 UTC	372	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 24 Apr 2024 17:32:00 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,0363affed299aa50f5da756e351e7d47,10.0.0.98,57234,154.16.105.36,,8114380805,1,1713979920.506,0.002,,.,0,0,0.004,0.004,-,0,0,203,221,110,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-24 17:32:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	50294	31.13.70.36	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:00 UTC	621	OUT	GET /tr/?id=303901320544451&ev=PageView&dl=https%3A%2F%2Fwww.xero.com%2Fus%2F&rl=&if=false&ts=1713979916420&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.1.1713979879599.1913881180&cs_est=true&ler=empty&cdl=API_unavailable&it=1713979915566&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:32:00 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 17:32:00 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	50295	31.13.70.36	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:00 UTC	650	OUT	GET /tr/?id=303901320544451&ev=referrerSource&dl=https%3A%2F%2Fwww.xero.com%2Fus%2F&rl=&if=false&ts=1713979916424&cd[utm_source]=organic&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=1&o=4126&fbp=fb.1.1713979879599.1913881180&ler=empty&cdl=API_unavailable&it=1713979915566&coo=false&up=hostname&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:32:00 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 17:32:00 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	50293	192.184.67.40	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:00 UTC	1367	OUT	GET /pixel;r=320322595;labels=_fp.event.Default;rf=0;a=p-W92Yh-Yvb160e;url=https%3A%2F%2Fwww.xero.com%2Fus%2F;uh=e51ed67dfb8d91dc24b15e2ace0c3bc33bc53c3e1dfb09200d6c2f8387d67ea6;uht=2;fpan=0;fpa=P0-258918544-1713979877376;pbc=;ns=0;ce=1;qjs=1;qv=b70d35e8-20231208114759;cm=;gdpr=0;ref=;d=xero.com;dst=1;et=1713979918250;tzo=-120;ogl=type.website%2Csite_name.Xero%2Ctitle.Beautiful%20Business%20%26%20Accounting%20Software%2Cdescription.Xero%20online%20accounting%20software%20for%20your%20business%20connects%20you%20to%20your%20bank%252C%20acc%2Curl.https%3A%2F%2Fwww%252Exero%252Ecom%2Fus%2F%2Cimage.https%3A%2F%2Fwww%252Exero%252Ecom%2Fcontent%2Fdam%2Fxero%2Fpilot-images%2Fopengraph%2Fopengraph-xero%252Epng;ses=1377532b-1228-4809-933b-0eeeeb876c56;mdl= HTTP/1.1 Host: pixel.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=662941ec-5186d-76493-25abf
2024-04-24 17:32:00 UTC	475	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:32:00 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EOUBBgHYKw; expires=Tue, 23-Jul-2024 17:32:00 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400
2024-04-24 17:32:00 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 80 ff ff ff 00 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	50296	31.13.70.36	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:00 UTC	658	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=303901320544451&ev=PageView&dl=https%3A%2F%2Fwww.xero.com%2Fus%2F&rl=&if=false&ts=1713979916420&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.1.1713979879599.1913881180&cs_est=true&ler=empty&cdl=API_unavailable&it=1713979915566&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:32:00 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 17:32:00 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 17:32:00 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	50297	31.13.70.36	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:00 UTC	687	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=303901320544451&ev=referrerSource&dl=https%3A%2F%2Fwww.xero.com%2Fus%2F&rl=&if=false&ts=1713979916424&cd[utm_source]=organic&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmgoogletagmanager&ec=1&o=4126&fbp=fb.1.1713979879599.1913881180&ler=empty&cdl=API_unavailable&it=1713979915566&coo=false&up=hostname&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:32:00 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 17:32:00 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 17:32:00 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.4	50298	35.155.89.175	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:00 UTC	683	OUT	GET /sp.pl?a=10000&d=Wed%2C%2024%20Apr%202024%2017%3A31%3A56%20GMT&n=-2d&b=Accounting%20Software%20%E2%80%93%20Do%20Beautiful%20Business%20%7C%20Xero%20US&.yp=10175613&f=https%3A%2F%2Fwww.xero.com%2Fus%2F&enc=UTF-8&yv=1.15.1&tagmgr=gtm HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBOpBKWYCEDUbr1k9Xo4DARqqvTIt6UwFEgEBAQGTKmYzZtws0iMA_eMAAA&S=AQAAAgn0wglSfOJqhUp_cYYRBZk
2024-04-24 17:32:01 UTC	952	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:32:00 GMT Expires: Wed, 24 Apr 2024 17:32:00 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: application/x-javascript Accept-Ranges: bytes Content-Length: 0 Server: ATS/9.1.10.106 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.106) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBOpBKWYCEDUbr1k9Xo4DARqqvTIt6UwFEgEBAQGTKmYzZtws0iMA_eMAAA&S=AQAAAgn0wglSfOJqhUp_cYYRBZk; Expires=Thu, 24 Apr 2025 23:32:00 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.4	50299	104.244.42.5	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:00 UTC	733	OUT	GET /i/adsct?bci=3&eci=2&event_id=3b8bebe6-5a97-4e44-9c2c-aecf158b9cc9&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=c58f7f8d-5a94-495f-8327-3042b09976d7&tw_document_href=https%3A%2F%2Fwww.xero.com%2Fus%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nygt4&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=8a6b78c7-1529-4396-840d-f87e70f062de
2024-04-24 17:32:01 UTC	392	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 17:32:00 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: b67d9cb3f8802216 strict-transport-security: max-age=0 x-response-time: 6 x-connection-hash: c583d09c4e1365d7c50118eeb3cece409812f5192d310230e7a44ee18117d395 connection: close
2024-04-24 17:32:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.4	50300	104.244.42.3	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:00 UTC	754	OUT	GET /i/adsct?bci=3&eci=2&event_id=3b8bebe6-5a97-4e44-9c2c-aecf158b9cc9&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=c58f7f8d-5a94-495f-8327-3042b09976d7&tw_document_href=https%3A%2F%2Fwww.xero.com%2Fus%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nygt4&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_f58PXPQs7cnhT5q89JomeA=="
2024-04-24 17:32:01 UTC	400	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 17:32:00 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: b1d724daa8dbc413 strict-transport-security: max-age=631138519 x-response-time: 5 x-connection-hash: 023bbfa20630c9421029ec45c95fe5660cc0f10e5e37ca1a26593ceab5792c92 connection: close
2024-04-24 17:32:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.4	50302	192.184.67.40	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:01 UTC	1149	OUT	GET /pixel;r=320322595;labels=_fp.event.Default;rf=0;a=p-W92Yh-Yvb160e;url=https%3A%2F%2Fwww.xero.com%2Fus%2F;uh=e51ed67dfb8d91dc24b15e2ace0c3bc33bc53c3e1dfb09200d6c2f8387d67ea6;uht=2;fpan=0;fpa=P0-258918544-1713979877376;pbc=;ns=0;ce=1;qjs=1;qv=b70d35e8-20231208114759;cm=;gdpr=0;ref=;d=xero.com;dst=1;et=1713979918250;tzo=-120;ogl=type.website%2Csite_name.Xero%2Ctitle.Beautiful%20Business%20%26%20Accounting%20Software%2Cdescription.Xero%20online%20accounting%20software%20for%20your%20business%20connects%20you%20to%20your%20bank%252C%20acc%2Curl.https%3A%2F%2Fwww%252Exero%252Ecom%2Fus%2F%2Cimage.https%3A%2F%2Fwww%252Exero%252Ecom%2Fcontent%2Fdam%2Fxero%2Fpilot-images%2Fopengraph%2Fopengraph-xero%252Epng;ses=1377532b-1228-4809-933b-0eeeeb876c56;mdl= HTTP/1.1 Host: pixel.quantserve.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=662941ec-5186d-76493-25abf; d=EOUBBgHYKw
2024-04-24 17:32:01 UTC	354	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:32:01 GMT Content-Type: image/gif Content-Length: 35 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Pragma: no-cache Strict-Transport-Security: max-age=86400
2024-04-24 17:32:01 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 80 ff ff ff 00 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.4	50303	142.250.141.105	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:01 UTC	1694	OUT	GET /pagead/1p-conversion/1023673485/?random=2071566266&cv=11&fst=1713979916325&bg=ffffff&guid=ON&async=1&gtm=45be44m0v883646161z8830923470za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.xero.com%2Fus%2F&label=v0RbCOHw2eECEI2JkOgD&hn=www.googleadservices.com&frm=0&tiba=Accounting%20Software%20%E2%80%93%20Do%20Beautiful%20Business%20%7C%20Xero%20US&value=0&npa=0&pscdl=noapi&auid=1776741404.1713979872&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIImMGxAiIBATgBQAFKJ3RyaWdnZXI7bmF2aWdhdGlvbi1zb3VyY2UsIGV2ZW50LXNvdXJjZWIECgICAw&pscrd=CM7s4Na80Py5dCITCLL_suGw24UDFSOvOgUdM38GezICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhVodHRwczovL3d3dy54ZXJvLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqveJFb4hydOCmR6j9UrjCw3clR6o_gCPVGQkHp48W_6r-qvpu&eitems=ChAI8NuisQYQpLKG6LHZ3MozEh0AIjyJplhFifrpH8eK5tFkcKyDJjjQHPt75dpSQA&random=1688470319 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:32:01 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:32:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 17:32:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.4	50306	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:02 UTC	1096	OUT	POST /1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=11282&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/&af=err,xhr,stn,ins,spa&be=753&fe=10454&dc=2829&perf=%7B%22timing%22:%7B%22of%22:1713979909837,%22n%22:0,%22f%22:3,%22dn%22:35,%22dne%22:35,%22c%22:35,%22s%22:36,%22ce%22:362,%22rq%22:362,%22rp%22:753,%22rpe%22:3350,%22di%22:3530,%22ds%22:3581,%22de%22:3582,%22dc%22:11185,%22l%22:11186,%22le%22:11207%7D,%22navigation%22:%7B%7D%7D&fp=2758&fcp=2758 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 28 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:32:02 UTC	28	OUT	Data Raw: 7b 22 6a 61 22 3a 7b 22 73 69 74 65 56 65 72 73 69 6f 6e 22 3a 22 6e 65 77 22 7d 7d Data Ascii: {"ja":{"siteVersion":"new"}}
2024-04-24 17:32:02 UTC	436	IN	HTTP/1.1 200 Connection: close Content-Length: 151 date: Wed, 24 Apr 2024 17:32:02 GMT content-type: text/plain cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.xero.com access-control-expose-headers: Date timing-allow-origin: https://www.xero.com x-served-by: cache-bur-kbur8200120-BUR
2024-04-24 17:32:02 UTC	151	IN	Data Raw: 7b 22 73 74 6e 22 3a 30 2c 22 65 72 72 22 3a 31 2c 22 69 6e 73 22 3a 31 2c 22 73 70 61 22 3a 31 2c 22 73 72 22 3a 30 2c 22 73 72 73 22 3a 30 2c 22 73 74 22 3a 30 2c 22 73 74 73 22 3a 30 2c 22 61 70 70 22 3a 7b 22 61 67 65 6e 74 73 22 3a 5b 7b 22 65 6e 74 69 74 79 47 75 69 64 22 3a 22 4d 54 6b 32 4d 6a 41 78 4e 33 78 43 55 6b 39 58 55 30 56 53 66 45 46 51 55 45 78 4a 51 30 46 55 53 55 39 4f 66 44 45 77 4d 6a 4d 7a 4f 44 55 78 4e 6a 41 22 7d 5d 7d 7d Data Ascii: {"stn":0,"err":1,"ins":1,"spa":1,"sr":0,"srs":0,"st":0,"sts":0,"app":{"agents":[{"entityGuid":"MTk2MjAxN3xCUk9XU0VSfEFQUExJQ0FUSU9OfDEwMjMzODUxNjA"}]}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.4	50305	142.250.141.103	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:02 UTC	1462	OUT	GET /pagead/1p-conversion/1023673485/?random=2071566266&cv=11&fst=1713979916325&bg=ffffff&guid=ON&async=1&gtm=45be44m0v883646161z8830923470za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.xero.com%2Fus%2F&label=v0RbCOHw2eECEI2JkOgD&hn=www.googleadservices.com&frm=0&tiba=Accounting%20Software%20%E2%80%93%20Do%20Beautiful%20Business%20%7C%20Xero%20US&value=0&npa=0&pscdl=noapi&auid=1776741404.1713979872&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIImMGxAiIBATgBQAFKJ3RyaWdnZXI7bmF2aWdhdGlvbi1zb3VyY2UsIGV2ZW50LXNvdXJjZWIECgICAw&pscrd=CM7s4Na80Py5dCITCLL_suGw24UDFSOvOgUdM38GezICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhVodHRwczovL3d3dy54ZXJvLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqveJFb4hydOCmR6j9UrjCw3clR6o_gCPVGQkHp48W_6r-qvpu&eitems=ChAI8NuisQYQpLKG6LHZ3MozEh0AIjyJplhFifrpH8eK5tFkcKyDJjjQHPt75dpSQA&random=1688470319 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:32:02 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 17:32:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 17:32:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.4	50304	15.197.193.217	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:02 UTC	1107	OUT	GET /track/up?adv=9nlrx8p&ref=https%3A%2F%2Fwww.xero.com%2Fus%2F&upid=e7m2c49&upv=1.1.0&td1=https://www.xero.com/us/ HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9; TDCPM=CAESEgoDYWFtEgsI0pKn98yj8jwQBRIXCghhcHBuZXh1cxILCNTgq57No_I8EAUSFgoHcnViaWNvbhILCODTp_fMo_I8EAUSFQoGZ29vZ2xlEgsI0rDUzs6j8jwQBRIWCgdibHVla2FpEgsI5KGvvc6j8jwQBRIUCgV0YXBhZBILCMLKr73Oo_I8EAUYBSACKAMyCwjKvrHq5KPyPBAFOAFCBCICCAFaBzlubHJ4OHBgAQ..
2024-04-24 17:32:02 UTC	725	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:32:02 GMT Content-Type: text/html Content-Length: 958 Connection: close server: Kestrel set-cookie: TDID=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9; expires=Thu, 24 Apr 2025 17:32:02 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsI0pKn98yj8jwQBRIXCghhcHBuZXh1cxILCNTgq57No_I8EAUSFgoHcnViaWNvbhILCODTp_fMo_I8EAUSFQoGZ29vZ2xlEgsI0rDUzs6j8jwQBRIWCgdibHVla2FpEgsI5KGvvc6j8jwQBRIUCgV0YXBhZBILCMLKr73Oo_I8EAUSFgoHeWpuMGd1cBILCP6AzsPPo_I8EAUSGAoJYWRhZHZpc29yEgsI2KnOw8-j8jwQBRIVCgZjYXNhbGUSCwiUzc7Dz6PyPBAFGAUoAzILCMLU0PDlo_I8EAU4AUIEIgIIAVoHOW5scng4cGAB; expires=Thu, 24 Apr 2025 17:32:02 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 17:32:02 UTC	958	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.4	50308	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:02 UTC	757	OUT	POST /events/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=12037&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 1922 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:32:02 UTC	1922	OUT	Data Raw: 62 65 6c 2e 37 3b 31 2c 6f 2c 2c 39 61 39 2c 39 31 6a 2c 6c 6d 2c 27 69 6e 69 74 69 61 6c 50 61 67 65 4c 6f 61 64 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 78 65 72 6f 2e 63 6f 6d 2f 75 73 2f 2c 31 2c 31 2c 2c 2c 21 21 21 21 27 39 39 36 66 37 63 31 65 2d 37 37 63 38 2d 34 34 65 34 2d 62 32 39 36 2d 63 39 33 63 33 63 32 64 36 33 64 61 2c 27 31 2c 32 34 6d 2c 32 34 6d 3b 35 2c 27 73 69 74 65 56 65 72 73 69 6f 6e 2c 27 6e 65 77 3b 32 2c 2c 32 7a 6b 2c 33 72 2c 37 2c 32 2c 27 47 45 54 2c 35 6b 2c 27 77 77 77 2e 78 65 72 6f 2e 63 6f 6d 3a 34 34 33 2c 27 2f 5f 6e 65 78 74 2f 64 61 74 61 2f 31 37 31 32 37 32 35 33 39 39 2f 75 73 2e 6a 73 6f 6e 2c 2c 6e 77 78 2c 31 2c 27 31 31 2c 21 21 21 3b 32 2c 2c 32 7a 6c 2c 33 77 2c 32 2c 31 2c 36 2c 35 6b 2c 37 2c 27 2f 5f Data Ascii: bel.7;1,o,,9a9,91j,lm,'initialPageLoad,'https://www.xero.com/us/,1,1,,,!!!!'996f7c1e-77c8-44e4-b296-c93c3c2d63da,'1,24m,24m;5,'siteVersion,'new;2,,2zk,3r,7,2,'GET,5k,'www.xero.com:443,'/_next/data/1712725399/us.json,,nwx,1,'11,!!!;2,,2zl,3w,2,1,6,5k,7,'/_
2024-04-24 17:32:03 UTC	310	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:32:03 GMT content-type: image/gif access-control-allow-origin: https://www.xero.com access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-bur-kbur8200043-BUR
2024-04-24 17:32:03 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.4	50309	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:02 UTC	851	OUT	GET /1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=11282&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/&af=err,xhr,stn,ins,spa&be=753&fe=10454&dc=2829&perf=%7B%22timing%22:%7B%22of%22:1713979909837,%22n%22:0,%22f%22:3,%22dn%22:35,%22dne%22:35,%22c%22:35,%22s%22:36,%22ce%22:362,%22rq%22:362,%22rp%22:753,%22rpe%22:3350,%22di%22:3530,%22ds%22:3581,%22de%22:3582,%22dc%22:11185,%22l%22:11186,%22le%22:11207%7D,%22navigation%22:%7B%7D%7D&fp=2758&fcp=2758 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:32:03 UTC	396	IN	HTTP/1.1 200 Connection: close Content-Length: 79 date: Wed, 24 Apr 2024 17:32:03 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: Date timing-allow-origin: * x-served-by: cache-bur-kbur8200143-BUR
2024-04-24 17:32:03 UTC	79	IN	Data Raw: 5b 37 31 2c 20 37 33 2c 20 37 30 2c 20 35 36 2c 20 35 37 2c 20 39 37 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 34 34 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 32 5d Data Ascii: [71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.4	50310	172.64.151.101	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:02 UTC	862	OUT	GET /rum?cm_dsp_id=39&external_user_id=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&expiration=1716571922&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZilB6NHM7SQAABTcAUcnXwAA; CMPS=004; CMPRO=004
2024-04-24 17:32:03 UTC	979	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:32:03 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8797d4976e420acd-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZilB6NHM7SQAABTcAUcnXwAA; Path=/; Domain=casalemedia.com; Expires=Thu, 24 Apr 2025 17:32:03 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=004; Path=/; Domain=casalemedia.com; Expires=Tue, 23 Jul 2024 17:32:03 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y0rc3euo28sBQzRIHtpVPFO8eRVkQ6TbD6UVC0gG4tMuJUgGiYUQDaflGrl4dDdJdmDtTt2BIQKNgSJU%2F3MKDjqGQubmphwf1sxCdwOzDyYc9aX0ZeGThN0Gv3cKONMVJ7SJgSJ34eYi0g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-24 17:32:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.4	50312	18.65.25.70	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:02 UTC	876	OUT	GET /adscores/g.pixel?sid=9211946648&tdid=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&_redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dadadvisor%26ttd_tpi%3D1%26gdpr%3D1%26gdpr_consent%3D HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:32:03 UTC	898	IN	HTTP/1.1 302 Found Transfer-Encoding: chunked Connection: close Date: Wed, 24 Apr 2024 17:32:03 GMT Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3ALfXyVukbTIqS0M0B2cFRK76Ycw0EMO1p; Path=/; Domain=.agkn.com; Expires=Thu, 24-Apr-2025 17:32:03 GMT; Max-Age=31536000; Secure; SameSite=None Location: https://d.agkn.com/pixel/10751/?che=1713979923234&ip=154.16.105.36 X-Cache: Miss from cloudfront Via: 1.1 9077d521265906f5bce86659dc65d41e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: J4Mt-kndokDTLaP1GbMYtDjk6z3tE_LERjIT9PiRGKWMhgydpv2KAg==
2024-04-24 17:32:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.4	50313	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:03 UTC	510	OUT	GET /events/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=12037&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:32:03 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:32:03 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-bur-kbur8200037-BUR
2024-04-24 17:32:03 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.4	50314	99.84.203.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:03 UTC	774	OUT	GET /pixel/10751/?che=1713979923234&ip=154.16.105.36 HTTP/1.1 Host: d.agkn.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3ALfXyVukbTIqS0M0B2cFRK76Ycw0EMO1p
2024-04-24 17:32:04 UTC	702	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, must-revalidate Date: Wed, 24 Apr 2024 17:32:03 GMT Expires: Sat, 01 Jan 2000 00:00:00 GMT P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Pragma: no-cache Set-Cookie: ab=0001%3ALfXyVukbTIqS0M0B2cFRK76Ycw0EMO1p;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure Set-Cookie: u=C\|0AAAAAAAALbv-lAAAAAAA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure X-Cache: Miss from cloudfront Via: 1.1 223bb03b0201eb5deca629ddb1057fb6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX3-C3 X-Amz-Cf-Id: 8pyJC9K6I0GdyYIXqMSW-iXXFKqZOob8ddXJoEPuOmv0Potv35yUuw==
2024-04-24 17:32:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.4	50315	35.71.131.137	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:04 UTC	1105	OUT	GET /track/cmf/generic?ttd_pid=yjn0gup HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9; TDCPM=CAESEgoDYWFtEgsI0pKn98yj8jwQBRIXCghhcHBuZXh1cxILCNTgq57No_I8EAUSFgoHcnViaWNvbhILCODTp_fMo_I8EAUSFQoGZ29vZ2xlEgsI0rDUzs6j8jwQBRIWCgdibHVla2FpEgsI5KGvvc6j8jwQBRIUCgV0YXBhZBILCMLKr73Oo_I8EAUSFgoHeWpuMGd1cBILCP6AzsPPo_I8EAUSGAoJYWRhZHZpc29yEgsI2KnOw8-j8jwQBRIVCgZjYXNhbGUSCwiUzc7Dz6PyPBAFGAUoAzILCMLU0PDlo_I8EAU4AUIEIgIIAVoHOW5scng4cGAB
2024-04-24 17:32:04 UTC	728	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 17:32:04 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9; expires=Thu, 24 Apr 2025 17:32:04 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsI0pKn98yj8jwQBRIXCghhcHBuZXh1cxILCNTgq57No_I8EAUSFgoHcnViaWNvbhILCODTp_fMo_I8EAUSFQoGZ29vZ2xlEgsI0rDUzs6j8jwQBRIWCgdibHVla2FpEgsI5KGvvc6j8jwQBRIUCgV0YXBhZBILCMLKr73Oo_I8EAUSFgoHeWpuMGd1cBILCP6AzsPPo_I8EAUSGAoJYWRhZHZpc29yEgsI2KnOw8-j8jwQBRIVCgZjYXNhbGUSCwiUzc7Dz6PyPBAFGAUgASgDMgsIwtTQ8OWj8jwQBTgBQgQiAggBWgc5bmxyeDhwYAE.; expires=Thu, 24 Apr 2025 17:32:04 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 17:32:04 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.4	50317	3.225.21.46	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:08 UTC	1350	OUT	GET /js_tracking?url=https%3A%2F%2Fwww.xero.com%2Fus%2F&uid=XVsUfradtXcBUl5XS45ldg&v=1&host=https%3A%2F%2Fwww.xero.com HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCDlg6WxBjABOgT87-jmQgRRcPZ4.fdPohRkmhaQC6ZZfCadAAZBYr%2Br0VCscx3wVXJe%2F3g0
2024-04-24 17:32:08 UTC	242	IN	HTTP/1.1 204 No Content Date: Wed, 24 Apr 2024 17:32:08 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.xero.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.4	50318	52.50.39.109	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:11 UTC	525	OUT	GET /api/v2/client/ws?v=7&site_id=3197823 HTTP/1.1 Host: ws.hotjar.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.xero.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: yGXD2FRUpekkw7r0YeXKog== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 17:32:12 UTC	145	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 17:32:12 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 16 Connection: close
2024-04-24 17:32:12 UTC	16	IN	Data Raw: 34 30 30 3a 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400: Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.4	50319	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:12 UTC	756	OUT	POST /events/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=22016&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 252 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:32:12 UTC	252	OUT	Data Raw: 62 65 6c 2e 36 3b 65 2c 27 66 70 2c 32 34 6d 2c 31 3b 35 2c 27 73 69 74 65 56 65 72 73 69 6f 6e 2c 27 6e 65 77 3b 65 2c 27 66 63 70 2c 32 34 6d 2c 31 3b 35 2c 31 2c 32 3b 65 2c 27 66 69 2c 31 6a 31 2c 36 3b 35 2c 27 74 79 70 65 2c 27 70 6f 69 6e 74 65 72 64 6f 77 6e 3b 36 2c 27 66 69 64 2c 31 35 2e 3b 35 2c 27 6e 65 74 2d 65 74 79 70 65 2c 27 33 67 3b 36 2c 27 6e 65 74 2d 72 74 74 2c 34 30 30 2e 3b 36 2c 27 6e 65 74 2d 64 6c 69 6e 6b 2c 31 2e 34 35 3b 35 2c 31 2c 32 3b 65 2c 27 70 61 67 65 48 69 64 65 2c 36 34 73 2c 32 3b 36 2c 27 63 6c 73 2c 30 2e 31 30 31 34 31 34 32 38 34 37 31 36 33 32 36 34 35 3b 35 2c 31 2c 32 3b 65 2c 27 6c 6f 61 64 2c 38 6e 62 2c 32 3b 36 2c 64 2c 30 2e 31 30 31 34 31 34 32 38 34 37 31 36 33 32 36 34 35 3b 35 2c 31 2c 32 Data Ascii: bel.6;e,'fp,24m,1;5,'siteVersion,'new;e,'fcp,24m,1;5,1,2;e,'fi,1j1,6;5,'type,'pointerdown;6,'fid,15.;5,'net-etype,'3g;6,'net-rtt,400.;6,'net-dlink,1.45;5,1,2;e,'pageHide,64s,2;6,'cls,0.10141428471632645;5,1,2;e,'load,8nb,2;6,d,0.10141428471632645;5,1,2
2024-04-24 17:32:13 UTC	310	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:32:13 GMT content-type: image/gif access-control-allow-origin: https://www.xero.com access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-bur-kbur8200148-BUR
2024-04-24 17:32:13 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.4	50320	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:12 UTC	759	OUT	POST /jserrors/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=22020&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 6975 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:32:12 UTC	6975	OUT	Data Raw: 7b 22 78 68 72 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 68 6f 73 74 6e 61 6d 65 22 3a 22 77 77 77 2e 78 65 72 6f 2e 63 6f 6d 22 2c 22 70 6f 72 74 22 3a 22 34 34 33 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 73 22 2c 22 68 6f 73 74 22 3a 22 77 77 77 2e 78 65 72 6f 2e 63 6f 6d 3a 34 34 33 22 2c 22 70 61 74 68 6e 61 6d 65 22 3a 22 2f 5f 6e 65 78 74 2f 64 61 74 61 2f 31 37 31 32 37 32 35 33 39 39 2f 75 73 2e 6a 73 6f 6e 22 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 73 74 61 74 75 73 22 3a 32 30 30 7d 2c 22 6d 65 74 72 69 63 73 22 3a 7b 22 63 6f 75 6e 74 22 3a 31 2c 22 74 78 53 69 7a 65 22 3a 7b 22 74 22 3a 30 7d 2c 22 72 78 53 69 7a 65 22 3a 7b 22 74 22 3a 33 30 39 39 33 7d 2c 22 64 75 72 61 74 69 6f 6e 22 3a 7b 22 74 22 3a 31 33 35 7d Data Ascii: {"xhr":[{"params":{"hostname":"www.xero.com","port":"443","protocol":"https","host":"www.xero.com:443","pathname":"/_next/data/1712725399/us.json","method":"GET","status":200},"metrics":{"count":1,"txSize":{"t":0},"rxSize":{"t":30993},"duration":{"t":135}
2024-04-24 17:32:13 UTC	310	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:32:13 GMT content-type: image/gif access-control-allow-origin: https://www.xero.com access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-bur-kbur8200044-BUR
2024-04-24 17:32:13 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.4	50321	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:12 UTC	757	OUT	POST /events/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=22024&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 1896 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:32:12 UTC	1896	OUT	Data Raw: 62 65 6c 2e 37 3b 32 2c 31 2c 32 7a 6b 2c 33 72 2c 2c 2c 27 47 45 54 2c 35 6b 2c 27 77 77 77 2e 78 65 72 6f 2e 63 6f 6d 3a 34 34 33 2c 27 2f 5f 6e 65 78 74 2f 64 61 74 61 2f 31 37 31 32 37 32 35 33 39 39 2f 75 73 2e 6a 73 6f 6e 2c 2c 6e 77 78 2c 31 2c 27 30 2c 21 21 21 3b 35 2c 27 73 69 74 65 56 65 72 73 69 6f 6e 2c 27 6e 65 77 3b 32 2c 31 2c 32 7a 6c 2c 33 77 2c 2c 2c 30 2c 35 6b 2c 31 2c 27 2f 5f 6e 65 78 74 2f 64 61 74 61 2f 31 37 31 32 37 32 35 33 39 39 2f 75 73 2f 70 72 69 63 69 6e 67 2d 70 6c 61 6e 73 2e 6a 73 6f 6e 2c 2c 76 71 61 2c 31 2c 33 2c 21 21 21 3b 35 2c 34 2c 35 3b 32 2c 31 2c 32 7a 72 2c 33 71 2c 2c 2c 30 2c 35 6b 2c 31 2c 27 2f 5f 6e 65 78 74 2f 64 61 74 61 2f 31 37 31 32 37 32 35 33 39 39 2f 75 73 2f 73 69 67 6e 75 70 2e 6a 73 6f 6e 2c Data Ascii: bel.7;2,1,2zk,3r,,,'GET,5k,'www.xero.com:443,'/_next/data/1712725399/us.json,,nwx,1,'0,!!!;5,'siteVersion,'new;2,1,2zl,3w,,,0,5k,1,'/_next/data/1712725399/us/pricing-plans.json,,vqa,1,3,!!!;5,4,5;2,1,2zr,3q,,,0,5k,1,'/_next/data/1712725399/us/signup.json,
2024-04-24 17:32:13 UTC	310	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:32:13 GMT content-type: image/gif access-control-allow-origin: https://www.xero.com access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-bur-kbur8200177-BUR
2024-04-24 17:32:13 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.4	50323	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:13 UTC	510	OUT	GET /events/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=22016&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:32:14 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:32:13 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-bur-kbur8200137-BUR
2024-04-24 17:32:14 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.4	50324	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:13 UTC	512	OUT	GET /jserrors/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=22020&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:32:14 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:32:13 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-lax-kwhp1940048-LAX
2024-04-24 17:32:14 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.4	50322	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:13 UTC	510	OUT	GET /events/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=22024&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:32:14 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:32:13 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-bur-kbur8200046-BUR
2024-04-24 17:32:14 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.4	50325	151.101.1.140	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:20 UTC	397	OUT	OPTIONS /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Origin: https://alb.reddit.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:32:21 UTC	644	IN	HTTP/1.1 204 No Content Connection: close Server: Varnish Retry-After: 0 Access-Control-Allow-Origin: https://alb.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:32:21 GMT Via: 1.1 varnish Vary: Origin Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.4	50326	151.101.129.140	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:21 UTC	397	OUT	OPTIONS /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Origin: https://alb.reddit.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:32:21 UTC	644	IN	HTTP/1.1 204 No Content Connection: close Server: Varnish Retry-After: 0 Access-Control-Allow-Origin: https://alb.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:32:21 GMT Via: 1.1 varnish Vary: Origin Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.4	50327	151.101.129.140	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:21 UTC	340	OUT	POST /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Content-Length: 722 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:32:21 UTC	722	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 33 37 34 30 34 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 34 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 33 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 35 31 2e 31 30 31 2e 31 32 39 2e 31 34 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 62 2e 72 65 64 64 69 74 2e 63 6f 6d 2f 72 70 2e Data Ascii: [{"age":37404,"body":{"elapsed_time":647,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":0.3,"server_ip":"151.101.129.140","status_code":200,"type":"ok"},"type":"network-error","url":"https://alb.reddit.com/rp.
2024-04-24 17:32:22 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 content-type: text/plain; charset=utf-8 Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:32:22 GMT Via: 1.1 varnish Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block server: snooserv Access-Control-Allow-Origin: https://www.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.4	50328	151.101.129.140	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:21 UTC	341	OUT	POST /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Content-Length: 2227 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 17:32:21 UTC	2227	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 32 33 31 32 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 34 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 78 65 72 6f 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 33 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 35 31 2e 31 30 31 2e 31 39 33 2e 31 34 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 Data Ascii: [{"age":23120,"body":{"elapsed_time":647,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://www.xero.com/","sampling_fraction":0.3,"server_ip":"151.101.193.140","status_code":200,"type":"ok"},"type":"network-error","url":"https
2024-04-24 17:32:22 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 content-type: text/plain; charset=utf-8 Accept-Ranges: bytes Date: Wed, 24 Apr 2024 17:32:22 GMT Via: 1.1 varnish Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block server: snooserv Access-Control-Allow-Origin: https://www.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.4	50329	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:22 UTC	758	OUT	POST /jserrors/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=32043&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 770 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:32:22 UTC	770	OUT	Data Raw: 7b 22 78 68 72 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6d 65 74 68 6f 64 22 3a 22 50 4f 53 54 22 2c 22 68 6f 73 74 6e 61 6d 65 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 2c 22 70 6f 72 74 22 3a 22 34 34 33 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 73 22 2c 22 68 6f 73 74 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 3a 34 34 33 22 2c 22 70 61 74 68 6e 61 6d 65 22 3a 22 2f 65 76 65 6e 74 73 2f 31 2f 65 31 36 38 61 66 63 37 62 31 22 2c 22 73 74 61 74 75 73 22 3a 32 30 30 7d 2c 22 6d 65 74 72 69 63 73 22 3a 7b 22 63 6f 75 6e 74 22 3a 32 2c 22 74 78 53 69 7a 65 22 3a 7b 22 74 22 3a 32 31 34 38 2c 22 6d 69 6e 22 3a 32 35 32 2c 22 6d 61 78 22 3a 31 38 39 36 2c 22 73 6f 73 22 3a 33 36 35 38 33 32 30 2c 22 63 22 3a 32 7d 2c Data Ascii: {"xhr":[{"params":{"method":"POST","hostname":"bam.nr-data.net","port":"443","protocol":"https","host":"bam.nr-data.net:443","pathname":"/events/1/e168afc7b1","status":200},"metrics":{"count":2,"txSize":{"t":2148,"min":252,"max":1896,"sos":3658320,"c":2},
2024-04-24 17:32:23 UTC	310	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:32:23 GMT content-type: image/gif access-control-allow-origin: https://www.xero.com access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-lax-kwhp1940027-LAX
2024-04-24 17:32:23 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.4	50330	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:23 UTC	512	OUT	GET /jserrors/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=32043&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:32:23 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:32:23 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-lax-kwhp1940053-LAX
2024-04-24 17:32:23 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.4	50331	34.237.73.95	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:28 UTC	679	OUT	GET /pubsub/5-lh65TJofQp7BNkWK5t3KldUyUlgWm6VAsA7hWfFPvy4y0IupYoArUojr4QOga3TXnkzBBgl4sI1qJlBmnYo_9g-JpEdXUjEXhiE6?X-Nexus-New-Client=true&X-Nexus-Version=0.12.12&user_role=visitor HTTP/1.1 Host: nexus-websocket-a.intercom.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://in.xero.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: JlwipaNr3W3a6/47hO2oNg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.4	50332	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:32 UTC	758	OUT	POST /jserrors/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=42064&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 293 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.xero.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xero.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:32:32 UTC	293	OUT	Data Raw: 7b 22 78 68 72 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6d 65 74 68 6f 64 22 3a 22 50 4f 53 54 22 2c 22 68 6f 73 74 6e 61 6d 65 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 2c 22 70 6f 72 74 22 3a 22 34 34 33 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 73 22 2c 22 68 6f 73 74 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 3a 34 34 33 22 2c 22 70 61 74 68 6e 61 6d 65 22 3a 22 2f 6a 73 65 72 72 6f 72 73 2f 31 2f 65 31 36 38 61 66 63 37 62 31 22 2c 22 73 74 61 74 75 73 22 3a 32 30 30 7d 2c 22 6d 65 74 72 69 63 73 22 3a 7b 22 63 6f 75 6e 74 22 3a 31 2c 22 74 78 53 69 7a 65 22 3a 7b 22 74 22 3a 37 37 30 7d 2c 22 72 78 53 69 7a 65 22 3a 7b 22 74 22 3a 32 34 7d 2c 22 64 75 72 61 74 69 6f 6e 22 3a 7b 22 74 22 3a 37 36 32 7d 2c 22 Data Ascii: {"xhr":[{"params":{"method":"POST","hostname":"bam.nr-data.net","port":"443","protocol":"https","host":"bam.nr-data.net:443","pathname":"/jserrors/1/e168afc7b1","status":200},"metrics":{"count":1,"txSize":{"t":770},"rxSize":{"t":24},"duration":{"t":762},"
2024-04-24 17:32:33 UTC	310	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:32:33 GMT content-type: image/gif access-control-allow-origin: https://www.xero.com access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-bur-kbur8200121-BUR
2024-04-24 17:32:33 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.4	50333	162.247.243.29	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:33 UTC	512	OUT	GET /jserrors/1/e168afc7b1?a=1023385160&sa=1&v=1.236.0&t=Unnamed%20Transaction&rst=42064&ck=0&s=2a9a0576cbb32a8d&ref=https://www.xero.com/us/ HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=2ff4698120548831
2024-04-24 17:32:33 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 24 Apr 2024 17:32:33 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-bur-kbur8200059-BUR
2024-04-24 17:32:33 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.4	50334	52.50.39.109	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 17:32:36 UTC	525	OUT	GET /api/v2/client/ws?v=7&site_id=3197823 HTTP/1.1 Host: ws.hotjar.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.xero.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: GT5qpktU2TMqyPj1Xvswug== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 17:32:37 UTC	145	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 17:32:37 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 16 Connection: close
2024-04-24 17:32:37 UTC	16	IN	Data Raw: 34 30 30 3a 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400: Bad Request

Target ID:	0
Start time:	19:30:31
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	19:30:33
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2180,i,5531215888177487074,17761865753618945802,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	19:30:37
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://in.xero.com/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe?utm_source=invoiceEmailViewInvoiceButtonSecondary&utm_campaign=invoicesEmailStandardV2"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://xero.com	Matcher: Template: hsbc matched with high similarity
Source: https://www.xero.com/us/try-now/manage-invoices/?utm_source=xero-invoice&utm_medium=referral&utm_campaign=global-d-lf-xeroinvoicereferrals	Matcher: Template: hsbc matched with high similarity
Source: https://www.xero.com/us/pricing-plans/	Matcher: Template: hsbc matched with high similarity
Source: https://www.xero.com/us/	Matcher: Template: hsbc matched with high similarity

Source: https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36&businessunitId=4becd84a00006400050b6782#locale=en-NZ&styleHeight=100%25&styleWidth=100%25&theme=light&tags=product&stars=4%2C5&schemaType=Organization&sku=Xero&name=Xero	HTTP Parser: No favicon
Source: https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36&businessunitId=4becd84a00006400050b6782#locale=en-NZ&styleHeight=100%25&styleWidth=100%25&theme=light&tags=product&stars=4%2C5&schemaType=Organization&sku=Xero&name=Xero	HTTP Parser: No favicon
Source: https://9401320.fls.doubleclick.net/activityi;dc_pre=CNSLyc6w24UDFa6rOgUd8DEN-w;src=9401320;type=pagev0;cat=globa002;ord=1;num=8823647633995;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;ps=1;pcor=872077554;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals?	HTTP Parser: No favicon
Source: https://9401320.fls.doubleclick.net/activityi;dc_pre=CK3dyM6w24UDFaywOgUd4ZMBrw;src=9401320;type=pagev0;cat=globa000;ord=1;num=9361925215703;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Ftry-now%2Fmanage-invoices%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=975646958;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals?	HTTP Parser: No favicon
Source: https://s.company-target.com/s/sync?exc=lr	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/rubicon?gdpr=0	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/upb/?adv=9nlrx8p&ref=https%3A%2F%2Fwww.xero.com%2Fus%2Ftry-now%2Fmanage-invoices%2F%3Futm_source%3Dxero-invoice%26utm_medium%3Dreferral%26utm_campaign%3Dglobal-d-lf-xeroinvoicereferrals&upid=e7m2c49&upv=1.1.0&td1=https://www.xero.com/us/try-now/manage-invoices/	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/generic?ttd_pid=aam	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=1843681124601207595&ttd_tdid=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9	HTTP Parser: No favicon
Source: https://9401320.fls.doubleclick.net/activityi;dc_pre=CJaV6tmw24UDFfZZCAQdl_MDNA;src=9401320;type=pagev0;cat=globa000;ord=1;num=265233616833;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Fpricing-plans%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=1662344157;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F?	HTTP Parser: No favicon
Source: https://9401320.fls.doubleclick.net/activityi;dc_pre=CL3E7tmw24UDFaSxOgUddFkLKw;src=9401320;type=pagev0;cat=globa002;ord=1;num=9700359326618;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2Fpricing-plans%2F;ps=1;pcor=1358158751;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F?	HTTP Parser: No favicon
Source: https://insight.adsrvr.org/track/up?adv=9nlrx8p&ref=https%3A%2F%2Fwww.xero.com%2Fus%2Fpricing-plans%2F&upid=e7m2c49&upv=1.1.0&td1=https://www.xero.com/us/pricing-plans/	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/generic?ttd_pid=bluekai	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&google_gid=CAESEFTbqARl2HhE5xojEfAWySU&google_cver=1	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad	HTTP Parser: No favicon
Source: https://9401320.fls.doubleclick.net/activityi;dc_pre=CLGHkOGw24UDFS9TCAQdudkNXw;src=9401320;type=pagev0;cat=globa002;ord=1;num=2659309086237;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2F;ps=1;pcor=225406472;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0za200;gcd=13l3l3l3l1;dma=0;epver=2;match_id=2343fae1-2d5f-4d11-a0e7-5b819b4d6592;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F?	HTTP Parser: No favicon
Source: https://9401320.fls.doubleclick.net/activityi;dc_pre=CIb5jOGw24UDFd1YCAQdJkEMrg;src=9401320;type=pagev0;cat=globa000;ord=1;num=8983422946655;npa=0;auiddc=1776741404.1713979872;u1=%2Fus%2F;u7=function(a)%7Ba.set(%22dimension%22%2Bb%2Ca.get(%22clientId%22))%7D;ps=1;pcor=671166263;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44m0z8830923470za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.xero.com%2Fus%2F?	HTTP Parser: No favicon
Source: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=d6d00503-92d1-41f5-9caa-ddfeeb15d4e9&expiration=1716571922&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://d.agkn.com/pixel/10751/?che=1713979923234&ip=154.16.105.36	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/generic?ttd_pid=yjn0gup	HTTP Parser: No favicon
Source: https://insight.adsrvr.org/track/up?adv=9nlrx8p&ref=https%3A%2F%2Fwww.xero.com%2Fus%2F&upid=e7m2c49&upv=1.1.0&td1=https://www.xero.com/us/	HTTP Parser: No favicon

Source: chromecache_489.2.dr	String found in binary or memory: 2024 Xero Limited. All rights reserved. \"Xero\" and \"Beautiful business\" are trademarks of Xero Limited.","linkGroups":[{"heading":"Accounting software","links":[{"current":false,"text":"See all Xero features","href":"/us/accounting-software/all-features/","leadingText":null},{"current":false,"text":"Plans","href":"/us/pricing-plans/","leadingText":null}]},{"heading":"Xero for","links":[{"current":false,"text":"Small business","href":"/us/accounting-software/","leadingText":null},{"current":false,"text":"Accountants \u0026 bookkeepers","href":"/us/accountants-bookkeepers/","leadingText":null}]},{"heading":"Support","links":[{"current":false,"text":"Get support","href":"https://central.xero.com/s/","leadingText":null},{"current":false,"text":"Take a course","href":"https://central.xero.com/s/learning","leadingText":null}]},{"heading":"Company","links":[{"current":false,"text":"About Xero","href":"/us/about/","leadingText":null},{"current":false,"text":"Contact us","href":"/us/about/contact/","leadingText":null}]}],"regionSwitcher":{"buttonText":"United States (USD)","activeRegionCode":"us","popoverDescription":"You're on our United States website. Change your region to see information and pricing for another location.","label":"Region","regions":[{"name":"Global","code":"zz","href":"/try-now/manage-invoices/"},{"name":"Hong Kong","code":"hk","href":"/hk/try-now/manage-invoices/"},{"name":"South Africa","code":"za","href":"/za/try-now/manage-invoices/"},{"name":"Malaysia","code":"my","href":"/my/try-now/manage-invoices/"},{"name":"New Zealand","code":"nz","href":"/nz/try-now/manage-invoices/"},{"name":"Australia","code":"au","href":"/au/try-now/manage-invoices/"},{"name":"Singapore","code":"sg","href":"/sg/try-now/manage-invoices/"},{"name":"Philippines","code":"ph","href":"/ph/try-now/manage-invoices/"},{"name":"United Kingdom","code":"uk","href":"/uk/try-now/manage-invoices/"},{"name":"Indonesia","code":"id","href":"/id/try-now/manage-invoices/"},{"name":"Ireland","code":"ie","href":"/ie/try-now/manage-invoices/"},{"name":"Canada","code":"ca","href":"/ca/try-now/manage-invoices/"},{"name":"United States","code":"us","href":"/us/try-now/manage-invoices/"}],"popoverHeading":"Change region"},"social":[{"id":"footer-Twitter","href":"https://twitter.com/xero/","title":"Twitter","src":"/content/dam/xero/pilot-images/admin/icons/social-media/x-twitter-icon.svg#ico"},{"id":"footer-Facebook","href":"https://www.facebook.com/xero","title":"Facebook","src":"/content/dam/xero/pilot-images/admin/icons/social-media/facebook-icon.svg#ico"},{"id":"footer-Youtube","href":"https://www.youtube.com/user/XeroOnlineAccounting","title":"Youtube","src":"/content/dam/xero/pilot-images/admin/icons/social-media/youtube-icon.svg#ico"},{"id":"footer-Linkedin","href":"https://www.linkedin.com/company/xero","title":"Linkedin","src":"/content/dam/xero/pilot-images/admin/icons/social-media/linkedin-icon.svg#ico"},{"id":"footer-Instagram","href":"https://www.instagram.com/xer
Source: chromecache_489.2.dr	String found in binary or memory: 2024 Xero Limited. All rights reserved. \"Xero\" and \"Beautiful business\" are trademarks of Xero Limited.","linkGroups":[{"heading":"Accounting software","links":[{"current":false,"text":"See all Xero features","href":"/us/accounting-software/all-features/","leadingText":null},{"current":false,"text":"Plans","href":"/us/pricing-plans/","leadingText":null}]},{"heading":"Xero for","links":[{"current":false,"text":"Small business","href":"/us/accounting-software/","leadingText":null},{"current":false,"text":"Accountants \u0026 bookkeepers","href":"/us/accountants-bookkeepers/","leadingText":null}]},{"heading":"Support","links":[{"current":false,"text":"Get support","href":"https://central.xero.com/s/","leadingText":null},{"current":false,"text":"Take a course","href":"https://central.xero.com/s/learning","leadingText":null}]},{"heading":"Company","links":[{"current":false,"text":"About Xero","href":"/us/about/","leadingText":null},{"current":false,"text":"Contact us","href":"/us/about/contact/","leadingText":null}]}],"regionSwitcher":{"buttonText":"United States (USD)","activeRegionCode":"us","popoverDescription":"You're on our United States website. Change your region to see information and pricing for another location.","label":"Region","regions":[{"name":"Global","code":"zz","href":"/try-now/manage-invoices/"},{"name":"Hong Kong","code":"hk","href":"/hk/try-now/manage-invoices/"},{"name":"South Africa","code":"za","href":"/za/try-now/manage-invoices/"},{"name":"Malaysia","code":"my","href":"/my/try-now/manage-invoices/"},{"name":"New Zealand","code":"nz","href":"/nz/try-now/manage-invoices/"},{"name":"Australia","code":"au","href":"/au/try-now/manage-invoices/"},{"name":"Singapore","code":"sg","href":"/sg/try-now/manage-invoices/"},{"name":"Philippines","code":"ph","href":"/ph/try-now/manage-invoices/"},{"name":"United Kingdom","code":"uk","href":"/uk/try-now/manage-invoices/"},{"name":"Indonesia","code":"id","href":"/id/try-now/manage-invoices/"},{"name":"Ireland","code":"ie","href":"/ie/try-now/manage-invoices/"},{"name":"Canada","code":"ca","href":"/ca/try-now/manage-invoices/"},{"name":"United States","code":"us","href":"/us/try-now/manage-invoices/"}],"popoverHeading":"Change region"},"social":[{"id":"footer-Twitter","href":"https://twitter.com/xero/","title":"Twitter","src":"/content/dam/xero/pilot-images/admin/icons/social-media/x-twitter-icon.svg#ico"},{"id":"footer-Facebook","href":"https://www.facebook.com/xero","title":"Facebook","src":"/content/dam/xero/pilot-images/admin/icons/social-media/facebook-icon.svg#ico"},{"id":"footer-Youtube","href":"https://www.youtube.com/user/XeroOnlineAccounting","title":"Youtube","src":"/content/dam/xero/pilot-images/admin/icons/social-media/youtube-icon.svg#ico"},{"id":"footer-Linkedin","href":"https://www.linkedin.com/company/xero","title":"Linkedin","src":"/content/dam/xero/pilot-images/admin/icons/social-media/linkedin-icon.svg#ico"},{"id":"footer-Instagram","href":"https://www.instagram.com/xer
Source: chromecache_489.2.dr	String found in binary or memory: 2024 Xero Limited. All rights reserved. \"Xero\" and \"Beautiful business\" are trademarks of Xero Limited.","linkGroups":[{"heading":"Accounting software","links":[{"current":false,"text":"See all Xero features","href":"/us/accounting-software/all-features/","leadingText":null},{"current":false,"text":"Plans","href":"/us/pricing-plans/","leadingText":null}]},{"heading":"Xero for","links":[{"current":false,"text":"Small business","href":"/us/accounting-software/","leadingText":null},{"current":false,"text":"Accountants \u0026 bookkeepers","href":"/us/accountants-bookkeepers/","leadingText":null}]},{"heading":"Support","links":[{"current":false,"text":"Get support","href":"https://central.xero.com/s/","leadingText":null},{"current":false,"text":"Take a course","href":"https://central.xero.com/s/learning","leadingText":null}]},{"heading":"Company","links":[{"current":false,"text":"About Xero","href":"/us/about/","leadingText":null},{"current":false,"text":"Contact us","href":"/us/about/contact/","leadingText":null}]}],"regionSwitcher":{"buttonText":"United States (USD)","activeRegionCode":"us","popoverDescription":"You're on our United States website. Change your region to see information and pricing for another location.","label":"Region","regions":[{"name":"Global","code":"zz","href":"/try-now/manage-invoices/"},{"name":"Hong Kong","code":"hk","href":"/hk/try-now/manage-invoices/"},{"name":"South Africa","code":"za","href":"/za/try-now/manage-invoices/"},{"name":"Malaysia","code":"my","href":"/my/try-now/manage-invoices/"},{"name":"New Zealand","code":"nz","href":"/nz/try-now/manage-invoices/"},{"name":"Australia","code":"au","href":"/au/try-now/manage-invoices/"},{"name":"Singapore","code":"sg","href":"/sg/try-now/manage-invoices/"},{"name":"Philippines","code":"ph","href":"/ph/try-now/manage-invoices/"},{"name":"United Kingdom","code":"uk","href":"/uk/try-now/manage-invoices/"},{"name":"Indonesia","code":"id","href":"/id/try-now/manage-invoices/"},{"name":"Ireland","code":"ie","href":"/ie/try-now/manage-invoices/"},{"name":"Canada","code":"ca","href":"/ca/try-now/manage-invoices/"},{"name":"United States","code":"us","href":"/us/try-now/manage-invoices/"}],"popoverHeading":"Change region"},"social":[{"id":"footer-Twitter","href":"https://twitter.com/xero/","title":"Twitter","src":"/content/dam/xero/pilot-images/admin/icons/social-media/x-twitter-icon.svg#ico"},{"id":"footer-Facebook","href":"https://www.facebook.com/xero","title":"Facebook","src":"/content/dam/xero/pilot-images/admin/icons/social-media/facebook-icon.svg#ico"},{"id":"footer-Youtube","href":"https://www.youtube.com/user/XeroOnlineAccounting","title":"Youtube","src":"/content/dam/xero/pilot-images/admin/icons/social-media/youtube-icon.svg#ico"},{"id":"footer-Linkedin","href":"https://www.linkedin.com/company/xero","title":"Linkedin","src":"/content/dam/xero/pilot-images/admin/icons/social-media/linkedin-icon.svg#ico"},{"id":"footer-Instagram","href":"https://www.instagram.com/xer
Source: chromecache_489.2.dr	String found in binary or memory: 2024 Xero Limited. All rights reserved. \"Xero\" and \"Beautiful business\" are trademarks of Xero Limited.","linkGroups":[{"heading":"Accounting software","links":[{"current":false,"text":"See all Xero features","href":"/us/accounting-software/all-features/","leadingText":null},{"current":false,"text":"Plans","href":"/us/pricing-plans/","leadingText":null}]},{"heading":"Xero for","links":[{"current":false,"text":"Small business","href":"/us/accounting-software/","leadingText":null},{"current":false,"text":"Accountants \u0026 bookkeepers","href":"/us/accountants-bookkeepers/","leadingText":null}]},{"heading":"Support","links":[{"current":false,"text":"Get support","href":"https://central.xero.com/s/","leadingText":null},{"current":false,"text":"Take a course","href":"https://central.xero.com/s/learning","leadingText":null}]},{"heading":"Company","links":[{"current":false,"text":"About Xero","href":"/us/about/","leadingText":null},{"current":false,"text":"Contact us","href":"/us/about/contact/","leadingText":null}]}],"regionSwitcher":{"buttonText":"United States (USD)","activeRegionCode":"us","popoverDescription":"You're on our United States website. Change your region to see information and pricing for another location.","label":"Region","regions":[{"name":"Global","code":"zz","href":"/try-now/manage-invoices/"},{"name":"Hong Kong","code":"hk","href":"/hk/try-now/manage-invoices/"},{"name":"South Africa","code":"za","href":"/za/try-now/manage-invoices/"},{"name":"Malaysia","code":"my","href":"/my/try-now/manage-invoices/"},{"name":"New Zealand","code":"nz","href":"/nz/try-now/manage-invoices/"},{"name":"Australia","code":"au","href":"/au/try-now/manage-invoices/"},{"name":"Singapore","code":"sg","href":"/sg/try-now/manage-invoices/"},{"name":"Philippines","code":"ph","href":"/ph/try-now/manage-invoices/"},{"name":"United Kingdom","code":"uk","href":"/uk/try-now/manage-invoices/"},{"name":"Indonesia","code":"id","href":"/id/try-now/manage-invoices/"},{"name":"Ireland","code":"ie","href":"/ie/try-now/manage-invoices/"},{"name":"Canada","code":"ca","href":"/ca/try-now/manage-invoices/"},{"name":"United States","code":"us","href":"/us/try-now/manage-invoices/"}],"popoverHeading":"Change region"},"social":[{"id":"footer-Twitter","href":"https://twitter.com/xero/","title":"Twitter","src":"/content/dam/xero/pilot-images/admin/icons/social-media/x-twitter-icon.svg#ico"},{"id":"footer-Facebook","href":"https://www.facebook.com/xero","title":"Facebook","src":"/content/dam/xero/pilot-images/admin/icons/social-media/facebook-icon.svg#ico"},{"id":"footer-Youtube","href":"https://www.youtube.com/user/XeroOnlineAccounting","title":"Youtube","src":"/content/dam/xero/pilot-images/admin/icons/social-media/youtube-icon.svg#ico"},{"id":"footer-Linkedin","href":"https://www.linkedin.com/company/xero","title":"Linkedin","src":"/content/dam/xero/pilot-images/admin/icons/social-media/linkedin-icon.svg#ico"},{"id":"footer-Instagram","href":"https://www.instagram.com/xer
Source: chromecache_448.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_465.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Pj:function(){e=zb()},sd:function(){d()}}};var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: chromecache_454.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var h=iA(a,c,e);M(121);if("https://www.facebook.com/tr/"===h["gtm.elementUrl"])return M(122),!0;if(d&&f){for(var m=Jb(b,g.length),n=0;n<g.length;++n)g[n](h,m);return m.done}for(var p=0;p<g.length;++p)g[p](h,function(){});return!0},lA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_465.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Yg:d,Wg:e,Xg:f,Ih:g,Jh:h,ye:m,Ab:b},p=D.YT,q=function(){IC(n)};if(p)return p.ready&&p.ready(q),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(LC(w,"iframe_api")\|\|LC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!CC&&JC(x[B],n.ye))return Ic("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_422.2.dr, chromecache_361.2.dr, chromecache_454.2.dr, chromecache_455.2.dr	String found in binary or memory: return b}yC.J="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: chromecache_454.2.dr	String found in binary or memory: var NB=function(a,b,c,d,e){var f=Jz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Jz("fsl","nv.ids",[]):Jz("fsl","ids",[]);if(!g.length)return!0;var h=Fz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);M(121);if("https://www.facebook.com/tr/"===m)return M(122),!0;h["gtm.elementUrl"]=m;h["gtm.formCanceled"]=c;null!=a.getAttribute("name")&&(h["gtm.interactedFormName"]=a.getAttribute("name"));e&&(h["gtm.formSubmitElement"]=e,h["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!uy(h,vy(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: in.xero.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: edge.xero.com
Source: global traffic	DNS traffic detected: DNS query: js-agent.newrelic.com
Source: global traffic	DNS traffic detected: DNS query: bam.nr-data.net
Source: global traffic	DNS traffic detected: DNS query: product-analytics-bff.xero.com
Source: global traffic	DNS traffic detected: DNS query: widget.intercom.io
Source: global traffic	DNS traffic detected: DNS query: js.intercomcdn.com
Source: global traffic	DNS traffic detected: DNS query: api-iam.intercom.io
Source: global traffic	DNS traffic detected: DNS query: nexus-websocket-a.intercom.io
Source: global traffic	DNS traffic detected: DNS query: www.xero.com
Source: global traffic	DNS traffic detected: DNS query: s.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: c.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: widget.trustpilot.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: xerolimited.tt.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: xero.demdex.net
Source: global traffic	DNS traffic detected: DNS query: xerolimited.sc.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: www.dwin1.com
Source: global traffic	DNS traffic detected: DNS query: www.redditstatic.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: tracking.g2crowd.com
Source: global traffic	DNS traffic detected: DNS query: tags.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: s.yimg.com
Source: global traffic	DNS traffic detected: DNS query: secure.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: acdn.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: js.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: tag.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: 9401320.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: api.company-target.com
Source: global traffic	DNS traffic detected: DNS query: s.company-target.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: alb.reddit.com
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: a.quora.com
Source: global traffic	DNS traffic detected: DNS query: c.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: tag-logger.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: q.quora.com
Source: global traffic	DNS traffic detected: DNS query: aax-eu.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: w3-reporting-nel.reddit.com
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: rules.quantcount.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: sp.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: id.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: pixel.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: ara.paa-reporting-advertising.amazon
Source: global traffic	DNS traffic detected: DNS query: segments.company-target.com
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: user-tracking-api.dgt-digital-marketing.xero.com
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: ws.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: content.hotjar.io
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: tags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: pixel.tapad.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: idpix.media6degrees.com
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: d.agkn.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://in.xero.com/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe?utm_source=invoiceEmailViewInvoiceButtonSecondary&utm_campaign=invoicesEmailStandardV2

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Windows Analysis Report
https://in.xero.com/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe?utm_source=invoiceEmailViewInvoiceButtonSecondary&utm_campaign=invoicesEmailStandardV2