Edit tour

Windows Analysis Report
Invoice INV-0003.pdf

Overview

General Information

Sample name:	Invoice INV-0003.pdf
Analysis ID:	1432212
MD5:	bb2c9ef5ae7baab6b4b2149e0b079506
SHA1:	8b8a386f503169e5cf84e68e30f7c94d64c8be21
SHA256:	ed8acf198b741d8f45bb39f078000262a73267414251948cb5b12da679ee3357
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

Acrobat.exe (PID: 6892 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Invoice INV-0003.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 7112 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 6192 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2268 --field-trial-handle=1568,i,12462945902927182256,8710539947262449294,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 8032 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6492 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1924,i,1629623515606547392,5655261091976178097,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /recaptcha/api2/reload?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 7790sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-protobufferAccept: */*Origin: https://www.google.comX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g

Source: chromecache_246.16.dr	String found in binary or memory: http://schema.org/SearchResultsPage
Source: Invoice INV-0003.pdf	String found in binary or memory: http://www.aiim.org/pdfa/ns/extension/
Source: Invoice INV-0003.pdf	String found in binary or memory: http://www.aiim.org/pdfa/ns/id/
Source: Invoice INV-0003.pdf	String found in binary or memory: http://www.aiim.org/pdfa/ns/schema#
Source: chromecache_285.16.dr	String found in binary or memory: http://www.broofa.com
Source: 57976eb8-e795-42a2-ae2a-36f82186c22f.tmp.3.dr, e1a9dfbb-a1c2-45d1-94ed-f4999b77d8cf.tmp.3.dr	String found in binary or memory: https://chrome.cloudflare-dns.com
Source: chromecache_242.16.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_242.16.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_248.16.dr	String found in binary or memory: https://content-push.googleapis.com/upload/
Source: chromecache_242.16.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_242.16.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_242.16.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_248.16.dr	String found in binary or memory: https://embeddedassistant-webchannel.googleapis.com/google.assistant.embedded.v1.EmbeddedAssistant/A
Source: chromecache_285.16.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_285.16.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_285.16.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_285.16.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_274.16.dr	String found in binary or memory: https://lens.google.com
Source: chromecache_248.16.dr	String found in binary or memory: https://lens.google.com/gen204
Source: chromecache_242.16.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_248.16.dr	String found in binary or memory: https://push.clients6.google.com/upload/
Source: chromecache_242.16.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_248.16.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_242.16.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_242.16.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_242.16.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_242.16.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_274.16.dr	String found in binary or memory: https://support.google.com/websearch/answer/106230
Source: chromecache_274.16.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_242.16.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_265.16.dr	String found in binary or memory: https://www.google.
Source: chromecache_285.16.dr	String found in binary or memory: https://www.google.com
Source: chromecache_274.16.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_265.16.dr	String found in binary or memory: https://www.google.com/logos/fnbx/zrp/full_yeti.json
Source: chromecache_265.16.dr	String found in binary or memory: https://www.google.com/logos/fnbx/zrp/full_yeti_dm.json
Source: chromecache_264.16.dr, chromecache_242.16.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_248.16.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_248.16.dr	String found in binary or memory: https://www.googleapis.com/language/translate/v2
Source: chromecache_242.16.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.
Source: chromecache_265.16.dr	String found in binary or memory: https://www.gstatic.com/external_hosted/lottie/lottie_light.js
Source: chromecache_285.16.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_285.16.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_285.16.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_264.16.dr, chromecache_244.16.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Source: chromecache_248.16.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.16:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.16:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49706 version: TLS 1.2

Source: classification engine

Classification label: clean1.winPDF@47/160@4/6

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-04-26 17-30-52-579.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Invoice INV-0003.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2268 --field-trial-handle=1568,i,12462945902927182256,8710539947262449294,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1924,i,1629623515606547392,5655261091976178097,262144 /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2268 --field-trial-handle=1568,i,12462945902927182256,8710539947262449294,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1924,i,1629623515606547392,5655261091976178097,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.15.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.15.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.15.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.15.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.15.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.15.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: _.Vdb=_.C("EEDORb",[_.Gdb,_.Mdb,_.Pdb]); source: chromecache_265.16.dr
Source:	Binary string: _.ku=function(a,b,c,d){var e=void 0===d?{}:d;d=void 0===e.Es?!0:e.Es;e=void 0===e.preventScroll?!1:e.preventScroll;_.PDb(a,b,{Es:d,preventScroll:e});c?_.QDb(a,b,c,{Es:d,preventScroll:e}):b.el().contains(_.Ol(a.oa.Ih()))\|\|RDb(a,b,{Es:d,preventScroll:e})}; source: chromecache_248.16.dr
Source:	Binary string: a.service.yj;this.PDb=a.Kd.PDb};_.G(Wtk,_.F);Wtk.Ga=function(){return{service:{j4b:_.Rtk,yj:_.KE},Kd:{PDb:"Fd92vb"}}}; source: chromecache_256.16.dr
Source:	Binary string: _.Qdb=function(a){_.xn.call(this,a.Ka)};_.G(_.Qdb,_.xn);_.Qdb.nb=_.xn.nb;_.Qdb.Ga=function(){return{}};_.Qdb.prototype.oa=function(a){return _.Xbb(a)};_.zn(_.Pdb,_.Qdb); source: chromecache_265.16.dr
Source:	Binary string: _.PDb=function(a,b,c){c=void 0===c?{}:c;var d=void 0===c.Es?!0:c.Es,e=void 0===c.preventScroll?!1:c.preventScroll;c=SDb(a);var f=SDb(a);_.oe(c.el(),"focus",function(){this.gzb(b,{Es:d,preventScroll:e})},a);_.oe(f.el(),"focus",function(){_.TDb(this,b,{Es:d,preventScroll:e})},a);b.children().first().before(c);b.append(f)}; source: chromecache_248.16.dr
Source:	Binary string: Wtk.prototype.wa=function(){var a=this;this.ka\|\|(this.ka=!0,this.j4b.ABa().then(function(){a.ka=!1;a.yj.reload()},function(){Xtk(a)}))};Wtk.prototype.oa=function(){var a=this;this.ka\|\|(this.ka=!0,Vtk(this.j4b).then(function(){a.ka=!1;a.yj.reload()},function(){Xtk(a)}))};var Xtk=function(a){a.PDb&&(a.PDb.setTimeout(3E4),a.PDb.show());a.ka=!1};_.J(Wtk.prototype,"XZ94se",function(){return this.oa});_.J(Wtk.prototype,"xoizsc",function(){return this.wa});_.J(Wtk.prototype,"i3viod",function(){return this.Aa}); source: chromecache_256.16.dr
Source:	Binary string: _.Pdb=_.C("aurFic"); source: chromecache_265.16.dr
Source:	Binary string: _.fcf=function(a){_.iu.call(this,a.Ka);this.ka=!1;this.container=new _.Vf([]);this.Ba=!1;this.Aa=[];this.wa=[];this.Ha=new _.ODb(null)};_.G(_.fcf,_.iu);_.fcf.nb=_.iu.nb;_.fcf.Ga=_.iu.Ga;_.fcf.prototype.isOpen=function(){return this.ka};_.fcf.prototype.open=function(a,b,c){c=void 0===c?!1:c;this.ka\|\|(this.Ha=new _.ODb(document.activeElement),this.Ja=_.oe(a.el(),_.QCb,this.Qa,this),this.container=a,gcf(this,a),c?_.PDb(this,a):_.ku(this,a,b),this.ka=this.Ba=!0)}; source: chromecache_248.16.dr

Source: Invoice INV-0003.pdf	Initial sample: PDF keyword /JS count = 0
Source: Invoice INV-0003.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: Invoice INV-0003.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Process information queried: ProcessInformation

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	1 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
http://www.broofa.com	0%	URL Reputation	safe
http://www.broofa.com	0%	URL Reputation	safe
https://www.google.	0%	URL Reputation	safe
https://chrome.cloudflare-dns.com	0%	URL Reputation	safe
https://recaptcha.net	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.	0%	Avira URL Cloud	safe
https://104.94.109.142:443/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
id.google.com	142.250.66.195	true	false		high
www.google.com	142.251.35.228	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/images/branding/googlelogo/2x/googlelogo_color_92x30dp.png	false		high
https://www.google.com/gen_204?atyp=csi&ei=C8krZr7QHOyTwbkPuNyGwAw&s=jsa&jsi=s,st.9536,tni.0,atni.243,et.click,n.vZr2rb,cn.4,ie.0,vi.1&zx=1714145552365&opi=89978449	false		high
https://www.google.com/gen_204?atyp=csi&ei=FMkrZpvZMreZwt0PnberCA&s=async&astyp=asyncContextualTask&ima=0&imn=0&mem=ujhs.17,tjhs.21,jhsl.2173,dm.8&nv=ne.2,feid.6b7c86dd-5656-4e17-b8e8-3066ab3bf4fd&hp=&rt=ttfb.1870,st.1870,bs.0,aaft.1870,acrt.1871,art.1871&zx=1714145555853&opi=89978449	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.&oit=4&cp=11&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/gen_204?atyp=i&ei=C8krZr7QHOyTwbkPuNyGwAw&ved=0ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ39UDCAw&bl=jahV&s=web&zx=1714145550199&opi=89978449	false		high
https://www.google.com/recaptcha/api2/userverify?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false		high
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA4usRjYkJfr9srSp2HD4-ZZAVZywMgBTv-cvcNDNMdzhtedLDEkllNnkQiQBbtl3h4As3V2Iew446Zxj5dcFMe0MMOrTyv4ts3-hjod8380h_vsvEgOVv7dHXvzSlPNaf0Z9uZQr8h58zsC5_C-Yi198SrWQsa7MZ5u3dpR8HcvIT4q5vas_t9yZ6LuKTyDOaezHVWLaYozqtkSHXw9w1wzsX9jSQ&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false		high
https://www.google.com/search?q=104.94.109.142443&oq=104.94.109.142443&gs_lcrp=EgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA&sourceid=chrome&ie=UTF-8	false		high
https://www.google.com/async/bgasy?ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449&yv=3&cs=0&async=_fmt:jspb	false		high
https://www.google.com/xjs/_/ss/k=xjs.s.GGin1mxRzvU.L.W.O/am=gB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKACAmXAAAsCGAADgg0MAAIAAAAACAACAwgEAABAgIABgAAAgAAAAAAAAHAABAAAgBAACBECAAJIQkIEAAEQwwQCkAgDDjwAAIIAEAAAAoEAAAAEDESA8hAABgACQQAQCIIIAACAHCAEAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAAAAAAQ/d=1/ed=1/br=1/rs=ACT90oGSC2kJ5MOZFnDJZQWz14iwbMFYQQ/m=attn,cdos,gwc,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl	false		high
https://id.google.com/verify/AAtmn1bTSyw2hAKlZ3LnbiQ1Wqu5634m12FM1sn670oINgsM5w6AM4xkxQt_rNluBR52tCI5NrrO_xyQcOfIPkLWLk9JFqI6z1l0UNJetPNOAxmS	false		high
https://www.google.com/async/asyncContextualTask?vet=12ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ4dMLegQIBhAA..i&ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449&yv=3&cid=4586455008918215834&cs=0&async=_k:xjs.s.en_US.DNHITQOYOgk.O,_am:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.s.GGin1mxRzvU.L.W.O%2Fam%3DgB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKACAmXAAAsCGAADgg0MAAIAAAAACAACAwgEAABAgIABgAAAgAAAAAAAAHAABAAAgBAACBECAAJIQkIEAAEQwwQCkAgDDjwAAIIAEAAAAoEAAAAEDESA8hAABgACQQAQCIIIAACAHCAEAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAAAAAAQ%2Fbr%3D1%2Frs%3DACT90oGSC2kJ5MOZFnDJZQWz14iwbMFYQQ,_fmt:prog,_id:rNi7Zc	false		high
https://www.google.com/gen_204?atyp=i&ei=C8krZr7QHOyTwbkPuNyGwAw&vet=12ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ4dMLegQICBAA.FMkrZviwC9-LwbkP7beSmAM.s&bl=jahV&s=web&zx=1714145555788&opi=89978449	false		high
https://www.google.com/gen_204?atyp=i&ct=rcm&cad=&ei=C8krZr7QHOyTwbkPuNyGwAw&ved=0ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ39UDCAw&jsname=gLFyf&zx=1714145552380&opi=89978449	false		high
https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0	false		high
https://www.google.com/gen_204?oq=*****************&gs_lp=Egxnd3Mtd2l6LXNlcnAiESoqKioqKioqKioqKioqKioqSLxxUABYAHAFeACQAQCYAeIIoAHiCKoBAzctMbgBFsgBAJgCAKACAJgDAIgGAZIHAKAHRQ&sclient=gws-wiz-serp&ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449	false		high
https://www.google.com/async/asyncContextualTask?vet=12ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ4dMLegQIBRAA..i&ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449&yv=3&cid=10943804590251964565&cs=0&async=_k:xjs.s.en_US.DNHITQOYOgk.O,_am:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.s.GGin1mxRzvU.L.W.O%2Fam%3DgB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKACAmXAAAsCGAADgg0MAAIAAAAACAACAwgEAABAgIABgAAAgAAAAAAAAHAABAAAgBAACBECAAJIQkIEAAEQwwQCkAgDDjwAAIIAEAAAAoEAAAAEDESA8hAABgACQQAQCIIIAACAHCAEAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAAAAAAQ%2Fbr%3D1%2Frs%3DACT90oGSC2kJ5MOZFnDJZQWz14iwbMFYQQ,_fmt:prog,_id:rNi7Zc	false		high
https://www.google.com/gen_204?atyp=i&ei=C8krZr7QHOyTwbkPuNyGwAw&ved=0ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ39UDCAw&bl=jahV&s=web&zx=1714145552381&opi=89978449	false		high
https://104.94.109.142:443/	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=csi&ei=C8krZr7QHOyTwbkPuNyGwAw&s=jsa&jsi=s,st.7364,t.249,at.249,et.click,n.vZr2rb,cn.1,ie.0,vi.1&zx=1714145550198&opi=89978449	false		high
https://www.google.com/gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=C8krZr7QHOyTwbkPuNyGwAw&zx=1714145560773&opi=89978449	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=10&oit=4&cp=2&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/complete/search?q=104.94.109.142443&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=3&hl=en&authuser=0&pq=104.94.109.142443&psi=C8krZr7QHOyTwbkPuNyGwAw.1714145550203&dpr=1&ofp=EAE	false		high
https://www.google.com/gen_204?atyp=i&ei=C8krZr7QHOyTwbkPuNyGwAw&ct=slh&v=t1&im=M&pv=0.14650127985811778&me=55:1714145554525,V,0,0,0,0:6249,V,0,0,1034,870:4089,e,B&zx=1714145564863&opi=89978449	false		high
https://www.google.com/gen_204?s=web&t=cap&atyp=csi&ei=C8krZr7QHOyTwbkPuNyGwAw&rt=wsrt.3948,cbt.197,hst.197&opi=89978449	false		high
https://www.google.com/xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=syfc,syfd,aLUfP?xjs=s3	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.142&oit=3&cp=14&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=kMFpHd,sy8s,bm51tf?xjs=s3	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109&oit=4&cp=10&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/favicon.ico	false		high
https://www.google.com/sorry/index	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.142443&oit=4&cp=17&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/async/asyncContextualTask?vet=12ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ4dMLegQICBAA..i&ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449&yv=3&cid=10194214981100978668&cs=0&async=_k:xjs.s.en_US.DNHITQOYOgk.O,_am:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.s.GGin1mxRzvU.L.W.O%2Fam%3DgB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKACAmXAAAsCGAADgg0MAAIAAAAACAACAwgEAABAgIABgAAAgAAAAAAAAHAABAAAgBAACBECAAJIQkIEAAEQwwQCkAgDDjwAAIIAEAAAAoEAAAAEDESA8hAABgACQQAQCIIIAACAHCAEAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAAAAAAQ%2Fbr%3D1%2Frs%3DACT90oGSC2kJ5MOZFnDJZQWz14iwbMFYQQ,_fmt:prog,_id:rNi7Zc	false		high
https://www.google.com/gen_204?atyp=i&ei=C8krZr7QHOyTwbkPuNyGwAw&dt19=2&zx=1714145555816&opi=89978449	false		high
https://www.google.com/images/searchbox/desktop_searchbox_sprites318_hr.webp	false		high
https://www.google.com/gen_204?atyp=csi&ei=C8krZr7QHOyTwbkPuNyGwAw&s=jsa&jsi=s,st.9793,tni.0,atni.2,et.click,n.vZr2rb,cn.5,ie.0,vi.1&zx=1714145552381&opi=89978449	false		high
https://www.google.com/gen_204?atyp=i&ei=C8krZr7QHOyTwbkPuNyGwAw&ved=0ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ39UDCAw&bl=jahV&s=web&zx=1714145552366&opi=89978449	false		high
https://www.google.com/gen_204?atyp=csi&ei=FMkrZviwC9-LwbkP7beSmAM&s=async&astyp=asyncContextualTask&ima=0&imn=0&mem=ujhs.17,tjhs.21,jhsl.2173,dm.8&nv=ne.2,feid.6b7c86dd-5656-4e17-b8e8-3066ab3bf4fd&hp=&rt=ttfb.1802,st.1803,bs.0,aaft.1803,acrt.1806,art.1806&zx=1714145555787&opi=89978449	false		high
https://www.google.com/gen_204?atyp=i&ct=rcm&cad=&ei=C8krZr7QHOyTwbkPuNyGwAw&ved=0ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ39UDCAw&jsname=gLFyf&zx=1714145552364&opi=89978449	false		high
https://www.google.com/gen_204?atyp=i&ei=C8krZr7QHOyTwbkPuNyGwAw&vet=12ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ4dMLegQIBhAA.FMkrZpvZMreZwt0PnberCA.s&bl=jahV&s=web&zx=1714145555853&opi=89978449	false		high
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA6u0-JMSOaecoCXHzdsX-xxrcVrgCsTYc59nt6KMq8BRd5Ex-67_RPGwRPMTEZi8lNpFhlcgy5Y7-wQWe2KnHVK5ZfToZL-Vmn0Gttkh5Yl8o5rao17hCvwzK1zjndSb_zIf76VRoc2NtYot5-zOEOdfcEXA6g2mN7FHkMnr0u6AnUZuYajaPHwihB0Zx4V6YIUYxUYXrwQdWApHkKoki170EAOfQ&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=ced8fd5d7352b74	false		high
https://www.google.com/xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=sb_wiz,aa,abd,sy1ee,sy1ek,sy1el,sy1ej,sy1em,sy1yg,async,bgd,sy3z4,sy3z5,foot,sy2jo,sy6iz,kyn,sy1k9,lli,sf,sy1e8,sy1e9,sy3fx,sonic,TxCJfd,sy6y9,sy6ya,qzxzOb,IsdWVc,sy15m,sy170,sy173,sy316,sy6y8,syeq,sy155,sy6yc,spch,tl,MpJwZc,UUJqVe,sy7m,sOXFj,sy7l,s39S4,NTMZac,nAFL3,oGtAuc,sy8f,sy8g,q0xTif,y05UD,sy12g,sy13c,sy13a,sy13b,sy13e,sy13g,sy13h,sy13d,sy13i,sy1k1,sy1k2,sy1ph,sy1pi,sy1qf,sy1qj,sy1p9,sy1qn,sy1pr,sy1pf,sy1po,sy1pp,sy1qq,sy1qr,sy2ge,sy2gf,sy2fh,sy2lf,sy13j,sy13k,sy1pb,sy1pc,sy1pd,sy13x,sy1pg,sy175,sy1pj,syf2,sy142,sy1pk,sy1pl,sy1pm,sy1qy,sy1r0,sy16x,sy3hx,sy3hy,sy6z8,epYOx,synw,synv,rtH1bd,syo2,syxb,syxr,syo0,sy1ef,sy1eg,sy1eh,sy2ot,sy2ou,sy2ov,EkevXb,syzp,syzq,syzr,syzo,syzs,syzn,sy1cd,SMquOb,syzy,sy1ce,sy1cf,sy1cg,sy1ch,sy1ci,d5EhJe,sy1cj,sy1ck,sy1cl,syzt,syzu,sy1au,sy1cn,sy1co,zx30Y,syyf,sy1d9,sy1da,sy1db,sy1dc,sy1dd,sy1df,sy1de,T1HOxc,sy1dh,sy1di,DQfvme,syzl,sy1dj,Wo3n8,synz,L1AAkb,sy1f2,SZXsif,sy1zj,fiAufb,syn5,syos,syor,sy2xd,sy3yf,sy40p,sy40q,sy40o,sy4e7,sYEX8b,sy4u7,GU4Gab,sy3a5,T5VV,sy1zu,aDVF7,sy4u9,rhYw1b,E9M6Uc,Zilivc,syzw,sy11c,sy1cp,sy10i,sy10j,sy10e,sy10f,sy10g,sy10h,sy10d,sy10l,sy10m,sy10k,sy10n,sy10o,sy113,sy114,sy10u,sy10y,sy10z,sy110,sy111,sy10v,sy115,sy112,sy10s,sy10t,sy10r,sy10q,sy12p,sy1ii,sy1ik,sy1ij,sy1im,sy1il,sy1ip,sy1io,sy2mu,sy2mx,sy2n5,sy2n2,sy2n6,sy116,sy118,sy119,sy2mv,sy2n7,sy2n9,Hlw0zd,M6QgBb,sy2ni,sy2nj,EO13pd,RagDlc?xjs=s3	false		high
https://www.google.com/recaptcha/api2/reload?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.&oit=4&cp=7&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/client_204?atyp=i&biw=1034&bih=870&ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449	false		high
https://www.google.com/gen_204?atyp=i&ei=C8krZr7QHOyTwbkPuNyGwAw&ct=slh&v=t1&m=HV&pv=0.14650127985811778&me=1:1714145547008,V,0,0,1034,870:0,B,1812:0,N,1,C8krZr7QHOyTwbkPuNyGwAw:0,R,1,9,24,36,92,34:0,R,1,CA0QAA,28,88,1065,57:0,R,1,CA0QAQ,28,88,670,45:0,R,1,CBIQAA,28,88,36,45:0,R,1,CBIQAQ,28,102,36,31:0,R,1,CBEQAA,66,90,66,42:0,R,1,CBEQAQ,66,90,66,42:0,R,1,CA8QAA,133,90,79,42:0,R,1,CA8QAQ,133,90,79,42:0,R,1,CBAQAA,215,90,54,42:0,R,1,CBAQAQ,215,90,54,42:0,R,1,CA4QAA,271,90,63,42:0,R,1,CA4QAQ,271,90,63,42:0,R,1,CAEQAA,28,202,652,1496:0,R,1,CAoQAQ,28,348,652,1350:3217,x:14,T:0,R,1,9,24,36,92,34:0,R,1,CA0QAA,28,88,951,57:0,R,1,CA0QAQ,28,88,670,45:0,R,1,CBIQAA,28,88,36,45:0,R,1,CBIQAQ,28,102,36,31:0,R,1,CBEQAA,66,90,66,42:0,R,1,CBEQAQ,66,90,66,42:0,R,1,CA8QAA,133,90,79,42:0,R,1,CA8QAQ,133,90,79,42:0,R,1,CBAQAA,215,90,54,42:0,R,1,CBAQAQ,215,90,54,42:0,R,1,CA4QAA,271,90,63,42:0,R,1,CA4QAQ,271,90,63,42:0,R,1,CAEQAA,28,202,652,1496:0,R,1,CAoQAQ,28,348,652,1350:7,T:0,R,1,9,24,36,92,34:0,R,1,CA0QAA,28,88,951,57:0,R,1,CA0QAQ,28,88,670,45:0,R,1,CBIQAA,28,88,36,45:0,R,1,CBIQAQ,28,102,36,31:0,R,1,CBEQAA,66,90,66,42:0,R,1,CBEQAQ,66,90,66,42:0,R,1,CA8QAA,133,90,79,42:0,R,1,CA8QAQ,133,90,79,42:0,R,1,CBAQAA,215,90,54,42:0,R,1,CBAQAQ,215,90,54,42:0,R,1,CA4QAA,271,90,63,42:0,R,1,CA4QAQ,271,90,63,42:0,R,1,CAEQAA,28,202,652,1496:0,R,1,CAoQAQ,28,348,652,1350:1258,V,0,0,0,0:3019,V,0,0,1034,870:1,e,B&zx=1714145554524&opi=89978449	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=1&oit=4&cp=1&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgRmgZjcGOWRr7EGIjAHwueNDSQI-WXeAdig1ilxcW5kJRzd2zjnuDDx24OkMugOmCswnljnlrWZEzXJrwEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	false		high
https://www.google.com/xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=uKlGbf,syyj,sy3ze,DpX64d,sy3zf,EufiNb,sy1fp,P10Owf,syy4,syzv,gSZvdb,sy5ul,vTw9Fc,sym1,syoh,syoi,syoj,syok,syol,DPreE,sy2tx,qcH9Lc,sy3l6,ROaKxe,sy3l8,sy3l9,pj8IAe,sy15a,sy37l,sy3lf,sy3zm,YFicMc?xjs=s3	false		high
https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRmgZjcGPORr7EGIjAjT-is8k6Uwm1EagwkXv7b_3Y6lH1AXZSE6X-OCgzMA9YBQPBGvSt1H2oAX7BK9VoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	false		high
https://www.google.com/gen_204?atyp=i&ei=C8krZr7QHOyTwbkPuNyGwAw&ved=0ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ39UDCAw&bl=jahV&s=web&zx=1714145552180&opi=89978449	false		high
https://www.google.com/compressiontest/gzip.html	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.142%3A&oit=3&cp=15&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=sy3zk,sy4e6,w4UyN,sywu,sywv,EbPKJf,sy4tu,sy72c,J9Q59e,sy4tv,a6Sgfb,Tia57b,KpRAue,sy1kd,NyeqM,sy2t9,sy2ta,O9SqHb?xjs=s3	false		high
https://www.google.com/recaptcha/api.js	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94&oit=4&cp=6&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgRmgZjcGOWRr7EGIjBl3Z8mdV7iuQlXx3vrRkL4AVRIBUGOwGPzUYmxiw-erxFt5zhM4ErcjFfPkRW3OPQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104&oit=4&cp=3&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.142443&oit=4&cp=15&url=https%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&pgcl=9&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/complete/search?q=104.94.109.142443&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=undefined&hl=en&authuser=0&pq=104.94.109.142443&psi=C8krZr7QHOyTwbkPuNyGwAw.1714145550203&dpr=1&ofp=EAE	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.1&oit=4&cp=8&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m	false		high
https://www.google.com/gen_204?atyp=csi&ei=C8krZr7QHOyTwbkPuNyGwAw&s=web&t=all&imn=8&ima=2&imad=1&imac=0&wh=870&aft=1&aftp=870&adh=tv.-188&cls=0.0010946031434360575&ime=0&imex=0&imeh=0&imeha=0&imehb=0&imea=0&imeb=0&imel=0&imed=0&scp=0&mem=ujhs.17,tjhs.21,jhsl.2173,dm.8&nv=ne.2,feid.6b7c86dd-5656-4e17-b8e8-3066ab3bf4fd&net=dl.1300,ect.3g,rtt.350&hp=&sys=hc.4&p=bs.false&rt=hst.197,cbt.197,sct.429,prt.558,xjspls.1199,xjsls.1199,afti.1311,afts.474,aft.1311,aftqf.1313,dcl.2394,xjses.3600,xjsee.3640,xjs.3640,lcp.566,fcp.364,wsrt.3948,cst.331,dnst.0,rdxt.3197,rqst.1107,rspt.695,sslt.331,rqstt.3536,unt.3203,cstt.3205,dit.6342&zx=1714145550215&opi=89978449	false		high
https://www.google.com/gen_204?atyp=i&ei=C8krZr7QHOyTwbkPuNyGwAw&ved=0ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ39UDCAw&bl=jahV&s=web&zx=1714145552501&opi=89978449	false		high
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA4qo7BvEsw6c5x7L0zWkwDxk41s4QXBFq-UTbLoYi4mYg5pWAHsT9vh8DMhbPPHIyjECIZ4cYU41ywyA8hdRigYZQJnKI4_I3uv32GImq_xmDdqm2nF9i9bAfGu7AlTCwBDt7YWEwIJ3RtEJzTJZfrDDqE8Eyg8H6v_CVaI8sLZw3REAQxg9HgOdQ_aRKGSEE8JfJrWqTp2iL71Gqv5cBxUH_2LMA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=abd561db531187e4	false		high
https://www.google.com/gen_204?atyp=i&ct=rcm&cad=&ei=C8krZr7QHOyTwbkPuNyGwAw&ved=0ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ39UDCAw&jsname=gLFyf&zx=1714145552500&opi=89978449	false		high
https://www.google.com/logos/fnbx/zrp/full_yeti.json	false		high
https://www.google.com/async/newtab_promos	false		high
https://www.google.com/gen_204?atyp=csi&ei=E8krZtq0O5DvkvQPhcq9oAE&s=async&astyp=asyncContextualTask&ima=0&imn=0&mem=ujhs.17,tjhs.21,jhsl.2173,dm.8&nv=ne.2,feid.6b7c86dd-5656-4e17-b8e8-3066ab3bf4fd&hp=&rt=ttfb.1013,st.1014,bs.0,aaft.1014,acrt.1015,art.1015&zx=1714145554994&opi=89978449	false		high
https://www.google.com/client_204?cs=1&opi=89978449	false		high
https://www.google.com/gen_204?atyp=csi&ei=C8krZr7QHOyTwbkPuNyGwAw&s=jsa&jsi=s,st.8916,tni.0,atni.2,et.click,n.vZr2rb,cn.2,ie.0,vi.1&zx=1714145551503&opi=89978449	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.broofa.com	chromecache_285.16.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_242.16.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_242.16.dr	false		high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_242.16.dr	false		high
https://www.google.com	chromecache_285.16.dr	false		high
https://www.google.	chromecache_265.16.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_242.16.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.	chromecache_242.16.dr	false	Avira URL Cloud: safe	low
https://support.google.com/recaptcha	chromecache_242.16.dr	false		high
https://www.google.com/tools/feedback	chromecache_248.16.dr	false		high
https://www.apache.org/licenses/	chromecache_242.16.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_242.16.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_242.16.dr	false		high
https://www.google.com/logos/fnbx/zrp/full_yeti_dm.json	chromecache_265.16.dr	false		high
http://www.aiim.org/pdfa/ns/schema#	Invoice INV-0003.pdf	false		high
https://www.google.com/log?format=json&hasfast=true	chromecache_274.16.dr	false		high
https://lens.google.com	chromecache_274.16.dr	false		high
https://cloud.google.com/contact	chromecache_242.16.dr	false		high
https://lens.google.com/gen204	chromecache_248.16.dr	false		high
https://support.google.com/	chromecache_248.16.dr	false		high
http://www.aiim.org/pdfa/ns/extension/	Invoice INV-0003.pdf	false		high
https://www.google.com/recaptcha/api2/	chromecache_264.16.dr, chromecache_242.16.dr	false		high
https://chrome.cloudflare-dns.com	57976eb8-e795-42a2-ae2a-36f82186c22f.tmp.3.dr, e1a9dfbb-a1c2-45d1-94ed-f4999b77d8cf.tmp.3.dr	false	URL Reputation: safe	unknown
https://support.google.com/websearch/answer/106230	chromecache_274.16.dr	false		high
http://www.aiim.org/pdfa/ns/id/	Invoice INV-0003.pdf	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_242.16.dr	false		high
https://recaptcha.net	chromecache_242.16.dr	false	URL Reputation: safe	unknown
http://schema.org/SearchResultsPage	chromecache_246.16.dr	false		high
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_274.16.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.94.108.142	unknown	United States	16625	AKAMAI-ASUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.251.35.228	www.google.com	United States	15169	GOOGLEUS	false
142.250.66.195	id.google.com	United States	15169	GOOGLEUS	false
104.94.109.142	unknown	United States	16625	AKAMAI-ASUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1432212
Start date and time:	2024-04-26 17:30:22 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Invoice INV-0003.pdf
Detection:	CLEAN
Classification:	clean1.winPDF@47/160@4/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .pdf

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.204.76.141, 23.22.254.206, 54.227.187.23, 52.202.204.11, 52.5.13.197, 162.159.61.3, 172.64.41.3, 199.232.214.172, 23.221.212.219, 23.221.212.204, 172.217.2.195, 172.217.3.78, 172.253.123.84, 34.104.35.123, 142.250.64.142, 192.178.50.74, 192.178.50.42, 172.217.165.202, 142.250.189.138, 142.250.217.202, 142.250.217.170, 142.250.64.138, 142.250.217.234, 172.217.2.202, 142.250.64.234, 142.251.35.234, 142.250.64.227, 142.250.64.202, 172.217.3.74, 172.217.15.202, 142.250.64.170, 142.250.217.195
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, acroipm2.adobe.com.edgesuite.net, encrypted-tbn0.gstatic.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, p13n.adobe.io, acroipm2.adobe.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, update.googleapis.com, clients.l.google.com, www.gstatic.com, geo2.adobe.com, optimizationguide-pa.googleapis.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
239.255.255.250	file.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, SectopRAT, Stealc, Vidar, zgRAT	Browse
	https://downloads.locklizard.com/SafeguardPDFViewer_v3.exe	Get hash	malicious	Unknown	Browse
	https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0ZW5hbnRfaWQiOiJhMzYwL3Byb2QvNTBhMGYyODg2ZTg4NDA3Y2I1ODUwYmRjOWQwZGIxZTUiLCJjcmVhdGlvbl90aW1lIjoxNzE0MTM3MzAwLCJtZXNzYWdlX2lkIjoiMGd5MGJnNjBqOTJwcmNuZjhhNHNxYWpwIzZjY2RmYjMyLWJiNzgtNGQwNC1hYWYwLTg3MjdkMTg4MjZlMyIsImNoYW5uZWxfdHlwZSI6ImVtYWlsIiwiZXhwIjoxNzQ1NjczMzAwLCJyZWRpcmVjdF91cmwiOiJodHRwczovL3ZtbWVzc2FuZ2VyLnJkb2NtZ2xvYmFsLmNvbS9kb2NzL2luZGV4LnBocD9tYWlsPSUyMGhiYXJ0aGxvd0BzZWN1cnVzdGVjaG5vbG9naWVzLmNvbSZwYXRocz1hYm92ZSZsaW5rPUZheF9PdXRsb29rIiwiaW5kaXZpZHVhbF9pZCI6IjQ0NDY4NzI5YzA1N2Q5ZDJjYzNiYjZlOTc3NDg3MzUyIn0.AryFGbNWOut6hGg1x_WBQ4QL5QU_wggDk6q2PUj7rNI	Get hash	malicious	Captcha Phish	Browse
	https://srmcorp.tecuidoc.com/?PSZlk=ViP	Get hash	malicious	HTMLPhisher	Browse
	gq83mrprwy.exe	Get hash	malicious	Xmrig	Browse
	http://url9212.charteredarena.org/ls/click?upn=u001.kjyKVeM-2Fb1rGOGHOnr1jOBOY3L3JqbNTsl6-2FG2Q28FBbMvScULOdn5hj4fYmOT1gSvNV_eFFQU5nW4TX33oYM-2FvMZ4H4nrQnEbWOt7nYb46lhhradIe8kQ30nH41Yux5-2ByqjXVzNOeRGeH70TSwGBG-2FsCyfS-2BqFuy7r7yA-2BMVhshonhVyPepAGojJAWOStPfHQEXVhS9QapMz6-2FLiLkIDitr77rwl6cV3-2BOVbi0qMHcpubANPDna-2BAJRWKHhsn2J-2BHsm2h-2B1n0PvhIvECyeSGKW-2FdmoYnwMnfXv-2F0VHDQdAF4JyTklFAWOdWvqmq9QaL29M0Lqvm9PdkAaDucmiv1yWhzGJ-2FSlIlic4yMaUzKSM2tXbVKRT-2BcTJHrLGjV82z-2BxMi-2FPWDvS9vQSeDz0xjN0gvzYnMQqfZiJ7fdvgXYvIvcGvziknMmHkQ7sUHmtLIGr6gsv-2FI2qInnZxnaJ1Ow7w3sMmgc-2FLcAEaJe5QnWJ5qez1H3mc7J1f4VLI4PyjCxv7syUPC13rDkwMklRiABfKztYQ3n9LW3FeH4hgMGYJgJovBs-2FKlVUipIzO24iLrfZpg-2FS6-2Fvp-2BRnBXh4Gim5LY7NxdelnIZomgKJ8r1gxfM163jd5ekCcUFZcZJn8BUr-2FrBOq6vvyf5Ut44ln9oAHSsmy2ecvwUHxQ-2Bo0mJA2r9a8FeSV3APNVBZowUa1ZGpOSvbZRLc6uZxrFl3fSWY774fhm-2Fl3qG7s-2BRWj2lGIHB3NEqH1X520Diu5Le7soeKgWoeaLCSrT5v7lt-2B7XayjukGYP4Yz5jSqZD2gXDxl443sgS6brqBQ3LKHfRN7s2NZ-2F6nWblHw6-2BLG-2FTduGCq0lMfhnVz7mFWLyKhJHvoE3C2dN6qv1-2FpHnRcIGopoYVEdZ-2F182c7Ll7OsxlzgTKemGKriHFjxwOhwkIoHVdgcJWnLS8-3D	Get hash	malicious	Unknown	Browse
	https://runrun.it/share/form/0GZMCgHSxRh4PBOM	Get hash	malicious	HTMLPhisher	Browse
	Dragons Dogma 2 v1.0 Plus 36 Trainer.exe	Get hash	malicious	Unknown	Browse
	http://421225.tctm.xyz	Get hash	malicious	Unknown	Browse
	InmateExport.exe	Get hash	malicious	Unknown	Browse
104.94.108.142	RFd2zutX8H.exe	Get hash	malicious	Unknown	Browse
	Benefits Open Enrollment 2024 #U007e Closes on Friday For Carboline	Get hash	malicious	HTMLPhisher	Browse
	Invoices.xls	Get hash	malicious	Unknown	Browse
	Orden_T7405.xla.xlsx	Get hash	malicious	Unknown	Browse
	IF-07b_SIGS-EN-ICS-IC-002_SMC-SCU ICD_v31_19-03-2014.pdf.exe	Get hash	malicious	Unknown	Browse
	btui2YGkc5.exe	Get hash	malicious	NetSupport RAT	Browse
	btui2YGkc5.exe	Get hash	malicious	NetSupport RAT	Browse
	swift_copy.xls	Get hash	malicious	Unknown	Browse
	kSWf9QrxMR.exe	Get hash	malicious	ScreenConnect Tool	Browse
	Iu4a4i5N15.exe	Get hash	malicious	Unknown	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AKAMAI-ASUS	file.exe	Get hash	malicious	Unknown	Browse	23.50.112.29
	file.exe	Get hash	malicious	Unknown	Browse	23.50.112.28
	factura - ztcpyqiqtfiewxjhesna.msi	Get hash	malicious	Unknown	Browse	23.44.94.139
	file.exe	Get hash	malicious	Vidar	Browse	23.194.234.100
	RemotePCHost.exe	Get hash	malicious	Unknown	Browse	184.31.62.93
	https://autode.sk/4bb5BeV	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	23.214.187.157
	aios3.exe	Get hash	malicious	Unknown	Browse	184.31.60.185
	http://email.wantyourfeedback.com/ls/click?upn=u001.PD4nPnyJUo8oiEzSkSGLgaBNAMtLp9U5nstWElDmnpXtySPOXSs4GxXhEZNYegDWlOpy_1gt1aDjd5mPVItYgazWgABkVm-2FZUH6kt1lIvkdtkRWsfoyQV18ixDvOX-2B0tU4ZH6SMN7PC0YJjM3gcvFPvh6CbZuFXlOBXf3FWLiJkpKJ7Hjba3S4-2FzhpmkR8VdprfK8GO3qSu-2BzqpIaLLC-2Bva9kOn7HY5B7OIgz5EOl88o1lnRSRpayTzqRzTSFhtg2Bi-2BI4dAZ7qHRbJ3vb9lcrxBKqAk13I-2BCAvndhSK1Vi4ubCjlp2xQlrXIHfzqmLiSPjl7tEmTsLYr99h3esBOPv8ASLIpf873P512I7xYEOjogT1gQCerfZNqh6K2IdWU6lDJ2r3wpU6ug02vU9Zslw4DYpuNNZQNVtap5mqv9Xf8D1PYQxYI5BK4owXOV2wEXeRIjST24XAw6EO9D1tdiGoHDRaxW2QofayefCuiW9Z191aML90svJWojHiQp1Fq-2BXFLiyEx8V1eLa7dixfJ23RRWtHvg1jOrHp7lqvXRA7dobs-3D	Get hash	malicious	HTMLPhisher	Browse	23.59.235.214
	dwn1cGHIbV.elf	Get hash	malicious	Mirai	Browse	104.73.199.214
	https://bushelman-my.sharepoint.com/:b:/p/lance/ESXtc6Laa05KpaC4W3rpMEMBfLSUU1GZhgfhBL8opRqFHg?e=Wrw3le	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	23.223.31.42
AKAMAI-ASUS	file.exe	Get hash	malicious	Unknown	Browse	23.50.112.29
	file.exe	Get hash	malicious	Unknown	Browse	23.50.112.28
	factura - ztcpyqiqtfiewxjhesna.msi	Get hash	malicious	Unknown	Browse	23.44.94.139
	file.exe	Get hash	malicious	Vidar	Browse	23.194.234.100
	RemotePCHost.exe	Get hash	malicious	Unknown	Browse	184.31.62.93
	https://autode.sk/4bb5BeV	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	23.214.187.157
	aios3.exe	Get hash	malicious	Unknown	Browse	184.31.60.185
	http://email.wantyourfeedback.com/ls/click?upn=u001.PD4nPnyJUo8oiEzSkSGLgaBNAMtLp9U5nstWElDmnpXtySPOXSs4GxXhEZNYegDWlOpy_1gt1aDjd5mPVItYgazWgABkVm-2FZUH6kt1lIvkdtkRWsfoyQV18ixDvOX-2B0tU4ZH6SMN7PC0YJjM3gcvFPvh6CbZuFXlOBXf3FWLiJkpKJ7Hjba3S4-2FzhpmkR8VdprfK8GO3qSu-2BzqpIaLLC-2Bva9kOn7HY5B7OIgz5EOl88o1lnRSRpayTzqRzTSFhtg2Bi-2BI4dAZ7qHRbJ3vb9lcrxBKqAk13I-2BCAvndhSK1Vi4ubCjlp2xQlrXIHfzqmLiSPjl7tEmTsLYr99h3esBOPv8ASLIpf873P512I7xYEOjogT1gQCerfZNqh6K2IdWU6lDJ2r3wpU6ug02vU9Zslw4DYpuNNZQNVtap5mqv9Xf8D1PYQxYI5BK4owXOV2wEXeRIjST24XAw6EO9D1tdiGoHDRaxW2QofayefCuiW9Z191aML90svJWojHiQp1Fq-2BXFLiyEx8V1eLa7dixfJ23RRWtHvg1jOrHp7lqvXRA7dobs-3D	Get hash	malicious	HTMLPhisher	Browse	23.59.235.214
	dwn1cGHIbV.elf	Get hash	malicious	Mirai	Browse	104.73.199.214
	https://bushelman-my.sharepoint.com/:b:/p/lance/ESXtc6Laa05KpaC4W3rpMEMBfLSUU1GZhgfhBL8opRqFHg?e=Wrw3le	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	23.223.31.42

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	file.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, SectopRAT, Stealc, Vidar, zgRAT	Browse	23.204.76.112 20.12.23.50
	https://downloads.locklizard.com/SafeguardPDFViewer_v3.exe	Get hash	malicious	Unknown	Browse	23.204.76.112 20.12.23.50
	https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.AryFGbNWOut6hGg1x_WBQ4QL5QU_wggDk6q2PUj7rNI	Get hash	malicious	Captcha Phish	Browse	23.204.76.112 20.12.23.50
	https://srmcorp.tecuidoc.com/?PSZlk=ViP	Get hash	malicious	HTMLPhisher	Browse	23.204.76.112 20.12.23.50
	gq83mrprwy.exe	Get hash	malicious	Xmrig	Browse	23.204.76.112 20.12.23.50
	https://runrun.it/share/form/0GZMCgHSxRh4PBOM	Get hash	malicious	HTMLPhisher	Browse	23.204.76.112 20.12.23.50
	Dragons Dogma 2 v1.0 Plus 36 Trainer.exe	Get hash	malicious	Unknown	Browse	23.204.76.112 20.12.23.50
	http://421225.tctm.xyz	Get hash	malicious	Unknown	Browse	23.204.76.112 20.12.23.50
	InmateExport.exe	Get hash	malicious	Unknown	Browse	23.204.76.112 20.12.23.50
	http://www.technology-trend.com	Get hash	malicious	Unknown	Browse	23.204.76.112 20.12.23.50

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	290
Entropy (8bit):	5.222474308616796
Encrypted:	false
SSDEEP:	6:tqnN+q2PRN2nKuAl9OmbnIFUt8I3XZmw+I33VkwORN2nKuAl9OmbjLJ:tsIvaHAahFUt8IH/+IV5JHAaSJ
MD5:	49D5B680BBA8CD5C3273D844C4D4FD29
SHA1:	2F6B8CA44B2F3426CF4B9722C49C243EB692884C
SHA-256:	3836E6B1CAF5FBE6F45A8DE376E7F9A9432CC4EFFE1D15485474E7B279302F6C
SHA-512:	839FAFB8DC934258E123E447B350EB9F779AED5DC290E0E96DC8C8CDB9BF256BA3594031DDBFBB20703C60809BA478C4183D7BB64F3328432D2CB3E055DD7DBE
Malicious:	false
Reputation:	low
Preview:	2024/04/26-17:30:51.751 1108 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/04/26-17:30:51.754 1108 Recovering log #3.2024/04/26-17:30:51.754 1108 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	290
Entropy (8bit):	5.222474308616796
Encrypted:	false
SSDEEP:	6:tqnN+q2PRN2nKuAl9OmbnIFUt8I3XZmw+I33VkwORN2nKuAl9OmbjLJ:tsIvaHAahFUt8IH/+IV5JHAaSJ
MD5:	49D5B680BBA8CD5C3273D844C4D4FD29
SHA1:	2F6B8CA44B2F3426CF4B9722C49C243EB692884C
SHA-256:	3836E6B1CAF5FBE6F45A8DE376E7F9A9432CC4EFFE1D15485474E7B279302F6C
SHA-512:	839FAFB8DC934258E123E447B350EB9F779AED5DC290E0E96DC8C8CDB9BF256BA3594031DDBFBB20703C60809BA478C4183D7BB64F3328432D2CB3E055DD7DBE
Malicious:	false
Reputation:	low
Preview:	2024/04/26-17:30:51.751 1108 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/04/26-17:30:51.754 1108 Recovering log #3.2024/04/26-17:30:51.754 1108 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	334
Entropy (8bit):	5.215430371800102
Encrypted:	false
SSDEEP:	6:tWE6+q2PRN2nKuAl9Ombzo2jMGIFUt8I8h5Zmw+I8htVkwORN2nKuAl9Ombzo2jz:tVvaHAa8uFUt8IG/+I65JHAa8RJ
MD5:	C211F8BEF795A6BB354643F27C4D353F
SHA1:	BF4612CA8806996A76CF78B0C8D111C860353ED5
SHA-256:	C34D18BD49906765B4656DC48114D47BCEE5F14B4C6E144C2AC2E372AEA53DC3
SHA-512:	2CA0B62BC1707998B0208C35B0CEA06169B053C7B5A54DDC3C9771EACFFC4E35413B8C2B46CF5369262F8A381CF2125772A06ED155B6F1BD8FA96D736E36F64D
Malicious:	false
Reputation:	low
Preview:	2024/04/26-17:30:51.517 1878 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/04/26-17:30:51.520 1878 Recovering log #3.2024/04/26-17:30:51.520 1878 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	334
Entropy (8bit):	5.215430371800102
Encrypted:	false
SSDEEP:	6:tWE6+q2PRN2nKuAl9Ombzo2jMGIFUt8I8h5Zmw+I8htVkwORN2nKuAl9Ombzo2jz:tVvaHAa8uFUt8IG/+I65JHAa8RJ
MD5:	C211F8BEF795A6BB354643F27C4D353F
SHA1:	BF4612CA8806996A76CF78B0C8D111C860353ED5
SHA-256:	C34D18BD49906765B4656DC48114D47BCEE5F14B4C6E144C2AC2E372AEA53DC3
SHA-512:	2CA0B62BC1707998B0208C35B0CEA06169B053C7B5A54DDC3C9771EACFFC4E35413B8C2B46CF5369262F8A381CF2125772A06ED155B6F1BD8FA96D736E36F64D
Malicious:	false
Reputation:	low
Preview:	2024/04/26-17:30:51.517 1878 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/04/26-17:30:51.520 1878 Recovering log #3.2024/04/26-17:30:51.520 1878 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\57976eb8-e795-42a2-ae2a-36f82186c22f.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	403
Entropy (8bit):	4.953858338552356
Encrypted:	false
SSDEEP:	12:YHO8sq/WLksBdOg2H9caq3QYiubrP7E4T3y:YXsRJdMHM3QYhbz7nby
MD5:	4C313FE514B5F4E7E89329630909F8DC
SHA1:	916EED77EC8C9DC90C64FF1E5CC9D04D4674EE56
SHA-256:	1EE7C151EF264F91FCDCCB6644F62DC33E27A4E829DAAB748DA1DE4426400873
SHA-512:	1726CAFCBA0121691DFA87A7298E6610BC4C7FD900867FD1B1710811E764918585E56788E08B7CA2CEE001F5DFD110E1BE6F6BBD7C2A7B7E2FC87D3DED210205
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13341145152835463","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":144284},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.16","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	403
Entropy (8bit):	4.953858338552356
Encrypted:	false
SSDEEP:	12:YHO8sq/WLksBdOg2H9caq3QYiubrP7E4T3y:YXsRJdMHM3QYhbz7nby
MD5:	4C313FE514B5F4E7E89329630909F8DC
SHA1:	916EED77EC8C9DC90C64FF1E5CC9D04D4674EE56
SHA-256:	1EE7C151EF264F91FCDCCB6644F62DC33E27A4E829DAAB748DA1DE4426400873
SHA-512:	1726CAFCBA0121691DFA87A7298E6610BC4C7FD900867FD1B1710811E764918585E56788E08B7CA2CEE001F5DFD110E1BE6F6BBD7C2A7B7E2FC87D3DED210205
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13341145152835463","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":144284},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.16","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF5d434e.TMP (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	403
Entropy (8bit):	4.953858338552356
Encrypted:	false
SSDEEP:	12:YHO8sq/WLksBdOg2H9caq3QYiubrP7E4T3y:YXsRJdMHM3QYhbz7nby
MD5:	4C313FE514B5F4E7E89329630909F8DC
SHA1:	916EED77EC8C9DC90C64FF1E5CC9D04D4674EE56
SHA-256:	1EE7C151EF264F91FCDCCB6644F62DC33E27A4E829DAAB748DA1DE4426400873
SHA-512:	1726CAFCBA0121691DFA87A7298E6610BC4C7FD900867FD1B1710811E764918585E56788E08B7CA2CEE001F5DFD110E1BE6F6BBD7C2A7B7E2FC87D3DED210205
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13341145152835463","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":144284},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.16","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\e1a9dfbb-a1c2-45d1-94ed-f4999b77d8cf.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	403
Entropy (8bit):	4.989975352353705
Encrypted:	false
SSDEEP:	12:YHO8sqZQ/EsBdOg2HCcaq3QYiubrP7E4T3y:YXsrxdMHN3QYhbz7nby
MD5:	92476288EED9B016E076AA201F8FF1A1
SHA1:	12C87EB06CC2D70F38A500B46312C943F9E1C923
SHA-256:	C56636D6AC981EA596D5CE86ED8319694B86980FBEA8853E92EBD03631842858
SHA-512:	E86D54DCE988FE4793D45BBD282672DF3ED0B95771F0329E8D9D72A533FBD05409380EA28AC12D62A1541EB773E823044431C2EF0DB836886B9B857B2FC32D1F
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13358705462351682","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":127639},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.16","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4099
Entropy (8bit):	5.231602928267624
Encrypted:	false
SSDEEP:	96:OLSw0bSwIAnrRqLX2rSq1OUxu/0OZ0xRBTxekN8xeK6V49o6H:OLT0bTIeYa51Ogu/0OZARBT8kN88K59l
MD5:	B6EA77E93B0FE91F9E82E4C30247592C
SHA1:	2A63F64917802D72A45BC5E91FB503B77A9A16EA
SHA-256:	BC9F2245B9D4116BEAD7E19BC3A41E606459101F1E9AE21B6830234A2E1C201B
SHA-512:	937E45ED6621FB5CA96B7EB3D3E53B2A5DE05A1F218CF94EBC742F4B1196F79E28745D016AD21921836443D73AF31B9AABFD2C9EDD372DAF2B2556316A854B75
Malicious:	false
Preview:	*...#................version.1..namespace-e...o................next-map-id.1.Pnamespace-1d95df23_a38f_44a8_b732_4e62dd896a16-https://rna-resource.acrobat.com/.0y.S_r................next-map-id.2.Snamespace-2a884c18_b39c_4e3d_942f_252e530ca4bd-https://rna-v2-resource.acrobat.com/.16.X:r................next-map-id.3.Snamespace-2e78bfda_7188_4688_a4aa_1ff81b6e5eaa-https://rna-v2-resource.acrobat.com/.2.P.@o................next-map-id.4.Pnamespace-09c119c2_97bc_4467_8f67_f92472c9e5dc-https://rna-resource.acrobat.com/.346.+^...............Pnamespace-1d95df23_a38f_44a8_b732_4e62dd896a16-https://rna-resource.acrobat.com/....^...............Pnamespace-09c119c2_97bc_4467_8f67_f92472c9e5dc-https://rna-resource.acrobat.com/..?&a...............Snamespace-2a884c18_b39c_4e3d_942f_252e530ca4bd-https://rna-v2-resource.acrobat.com/_...a...............Snamespace-2e78bfda_7188_4688_a4aa_1ff81b6e5eaa-https://rna-v2-resource.acrobat.com/...o................next-map-id.5.Pnamespace-07af9ee9_2076_4f12_94b5_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	322
Entropy (8bit):	5.248618293979407
Encrypted:	false
SSDEEP:	6:tO+q2PRN2nKuAl9OmbzNMxIFUt8IEZmw+INVkwORN2nKuAl9OmbzNMFLJ:t/vaHAa8jFUt8IE/+Iz5JHAa84J
MD5:	B60A7EAC633E546CE0CCD81E06E71178
SHA1:	D1C48895FF229B49D327645758FCD6B31C5EC9A5
SHA-256:	CED1746EC25BD55C27001FD93A390A023CDF3ECA9F41273D67D14795E39E32D3
SHA-512:	3F685C59F1648E9CBB10ECD8D57C2D8D61FA7339CFD426B2A2632170E208231676E91AFE100EF84986523C8951C310F225DDF93F1EDDC3E2DDC12B8BFD0D2802
Malicious:	false
Preview:	2024/04/26-17:30:51.906 1878 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/04/26-17:30:51.908 1878 Recovering log #3.2024/04/26-17:30:51.910 1878 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	322
Entropy (8bit):	5.248618293979407
Encrypted:	false
SSDEEP:	6:tO+q2PRN2nKuAl9OmbzNMxIFUt8IEZmw+INVkwORN2nKuAl9OmbzNMFLJ:t/vaHAa8jFUt8IE/+Iz5JHAa84J
MD5:	B60A7EAC633E546CE0CCD81E06E71178
SHA1:	D1C48895FF229B49D327645758FCD6B31C5EC9A5
SHA-256:	CED1746EC25BD55C27001FD93A390A023CDF3ECA9F41273D67D14795E39E32D3
SHA-512:	3F685C59F1648E9CBB10ECD8D57C2D8D61FA7339CFD426B2A2632170E208231676E91AFE100EF84986523C8951C310F225DDF93F1EDDC3E2DDC12B8BFD0D2802
Malicious:	false
Preview:	2024/04/26-17:30:51.906 1878 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/04/26-17:30:51.908 1878 Recovering log #3.2024/04/26-17:30:51.910 1878 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240426153055Z-179.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 117 x -152 x 32, cbSize 71190, bits offset 54
Category:	dropped
Size (bytes):	71190
Entropy (8bit):	0.733319731594261
Encrypted:	false
SSDEEP:	96:z9L8yRwMn8RslGh4aGI7Sb+cQfG/GvrvQLjfjD8F5yPSrW7/bQC8St4:zBXn8SU77Sbwvrv6jLeMPZ7/bQxSy
MD5:	7EEC63D80382686E8698B6E513B9D565
SHA1:	F6B7C0239D3859210E86F79C6323D4ADABF49E07
SHA-256:	C16B5A23013B21FD4C019337CC5BB3DF467615F2A5751AD8353833ED85143487
SHA-512:	AB4BBEE5F307E5B4B6941085B251C253C7A283230165C8E3E47EA4988594C49909A8CF4964BA0016CD8304B2E0B712838EF43898A09C6DDDF79BB8A5FF87700E
Malicious:	false
Preview:	BM........6...(...u...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 2, database pages 14, cookie 0x5, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	57344
Entropy (8bit):	3.291927920232006
Encrypted:	false
SSDEEP:	192:vedRBvVui5V4R4dcQ5V4R4RtYWtEV2UUTTchqGp8F/7/z+FP:veBci5H5FY+EUUUTTcHqFzqFP
MD5:	A4D5FECEFE05F21D6F81ACF4D9A788CF
SHA1:	1A9AC236C80F2A2809F7DE374072E2FCCA5A775C
SHA-256:	83BE4623D80FFB402FBDEC4125671DF532845A3828A1B378D99BD243A4FD8FF2
SHA-512:	FF106C6B9E1EA4B1F3E3AB01FAEA21BA24A885E63DDF0C36EB0A8C3C89A9430FE676039C076C50D7C46DC4E809F6A7E35A4BFED64D9033FEBD6121AC547AA5E9
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	16928
Entropy (8bit):	1.21382154617899
Encrypted:	false
SSDEEP:	24:7+tFyqLi+zkrFsgIFsxX3pALXmnHpkDGjmcxBSkomXk+2m9RFTsyg+wmf9Mzm+Zl:7MEqLmFTIF3XmHjBoGGR+jMz+Lhw
MD5:	4EAE1F64BCE86D1869B60440149B1D61
SHA1:	61FCB7BB5C050FE70E77E9F1C36D416ECB4FF8E8
SHA-256:	0EBCC8A7A67CC4B70AA8A11728EF8997AD57BD31FF4FC809E44BC512A5A28A94
SHA-512:	9B60AA6CADE046BE67194A299BF7C74DAE6F7C5D806AEC3DE4452A6093CC3A54ED16D4F331039621A92C7302BE096F562C15CAB955184FD02BE46846AE52250B
Malicious:	false
Preview:	.... .c......i..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.37950545281667
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPt3/uq3VQ5IRR4UhUR0YoBchoAvJM3g98kUwPeUkwRe9:YvXKXPt3/uqFQWRuUhUcBceGMbLUkee9
MD5:	1AF73C46D83C2CAC37F9C2F591E21FB2
SHA1:	134B4A8B1D028E3BEB800B7EADDFF5B22B5F3E4D
SHA-256:	56F0F38215AD40337A4C3BD2AE1AC5813DCE3DA06C055DCEE6CFC58D994516C4
SHA-512:	AB5FF269E9996BD574A480A1EA8BC5457A96D68D46220A3A756226523A805A674C42377C5B3D60D1DF9659CECCEE91FAAFE6CE8979890B17A8259EA8430BE649
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"577b54d6-a272-484f-94ed-07b6c61daa1f","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1714320896797,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.328459071978537
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPt3/uq3VQ5IRR4UhUR0YoBchoAvJfBoTfXpnrPeUkwRe9:YvXKXPt3/uqFQWRuUhUcBceGWTfXcUk3
MD5:	BBE5C9182919ADE311253734A4E597FD
SHA1:	90B26CF698BD241099F4DB1390B8B4BCBABB056A
SHA-256:	6F84B25060BC13C53C675B7C9A1E4775660230BEC9307DB99854F8F56B266976
SHA-512:	499613192E514DA59B59E44EB03A4E01B61ACEB14F35016C16C95591A036B8ED8050CE46ECC083A9E97E39F328674F92971BE4BBCE18AA351EE9473AEE6556F5
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"577b54d6-a272-484f-94ed-07b6c61daa1f","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1714320896797,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.307165286205416
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPt3/uq3VQ5IRR4UhUR0YoBchoAvJfBD2G6UpnrPeUkwRe9:YvXKXPt3/uqFQWRuUhUcBceGR22cUke6
MD5:	07BD490AD7332059C0A1C7C8BBB81414
SHA1:	80D99A597EB35E6BCC17946EDA88E35690498E44
SHA-256:	F9A1B5F97CCC869DEA497BD9D79E3543C327C4825FF8BDC6A2BB91E53A9D4542
SHA-512:	200861E199EE5BE41529EE8EA59D376D04C3DC0D8B3C7262A32F810630B7BC02B21947C82EE465924568DC8581FE8C97F871FAF57AA834DA35EEA3D6A7E9D4B7
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"577b54d6-a272-484f-94ed-07b6c61daa1f","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1714320896797,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.368452029855892
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPt3/uq3VQ5IRR4UhUR0YoBchoAvJfPmwrPeUkwRe9:YvXKXPt3/uqFQWRuUhUcBceGH56Ukee9
MD5:	0E8A1A100403557771A9B751EE7997D0
SHA1:	42ACA80200A9A5947EA6BB723CC90C66C7B51487
SHA-256:	CFAAB1BE743371903AB5BCC707C5D063023C4E83434400E81A37A1810911138E
SHA-512:	277D20A4FB706E558F2FF8D3CCCAE6B7304568BD1DC90C66A3CF2479BA67BB607F7225AB416B8652AF8C78E5997FC34936C3FEF025843E05713E13632F4BB309
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"577b54d6-a272-484f-94ed-07b6c61daa1f","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1714320896797,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.3278238388122965
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPt3/uq3VQ5IRR4UhUR0YoBchoAvJfJWCtMdPeUkwRe9:YvXKXPt3/uqFQWRuUhUcBceGBS8Ukee9
MD5:	0E0D6E11106FCD096204A57A9E97731E
SHA1:	8C7D10000540353CB94B1393EF57BE026DFD1EEB
SHA-256:	0357C7663E807401006A87E366FBEEC2F89EEB1452A38BAC8793B746BE4E753A
SHA-512:	0D8D9AFB59771B99C6DBC50A051D0FAFE718956C95AAD3B8EDA105E429BF6ACF982761C032BCE13E84961E8CE9A23E102E53FE037BA98F41512F0897588C6311
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"577b54d6-a272-484f-94ed-07b6c61daa1f","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1714320896797,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.31510150536582
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPt3/uq3VQ5IRR4UhUR0YoBchoAvJf8dPeUkwRe9:YvXKXPt3/uqFQWRuUhUcBceGU8Ukee9
MD5:	75BE660E6B5B792DA5BB08A8C7C1CC28
SHA1:	6D20888F4A57F5356B83FE3F3502F88911BD0D3D
SHA-256:	B38CDD71C7F2157BC07282BD443163FB5DEF5D6511B1F4EEBCDC4BE4BE3F7257
SHA-512:	53AE7DC84523531BFC0695F8644ACF6BFE6F33F595CA28B067A28BFD20D25295A923BA1EE585025D89DD330F9CF7885C37CF8998144D3CDD9D475CA51481080C
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"577b54d6-a272-484f-94ed-07b6c61daa1f","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1714320896797,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.318180203847012
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPt3/uq3VQ5IRR4UhUR0YoBchoAvJfQ1rPeUkwRe9:YvXKXPt3/uqFQWRuUhUcBceGY16Ukee9
MD5:	01A96126964256D95D9B8FDCA0EC35BE
SHA1:	36187EB98390BD27DB1DC2A69C8E5B71CAE3ABE0
SHA-256:	1AD45AFF57B78379551625F4041C743B42AD6A972DE55138BB00B3A4A6BE52E1
SHA-512:	9205DB43D4564E41EDE9517389FF1A1B045503B157107239A1C5165AB3301AFDB24BFC6A87174689C8F2A51F8A5BBBB44E7142B05B277E45F68C31DF486B1451
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"577b54d6-a272-484f-94ed-07b6c61daa1f","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1714320896797,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.323068652259113
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPt3/uq3VQ5IRR4UhUR0YoBchoAvJfFldPeUkwRe9:YvXKXPt3/uqFQWRuUhUcBceGz8Ukee9
MD5:	D91EFCB86CAB7072AE3712A20E9E2C7D
SHA1:	724020B4B7DC7CF7696733C80B87E17E2412F395
SHA-256:	DA8B3163886EBB8AB80D0A70E17432052D2EFF242ECC2C280249211CF5F26F31
SHA-512:	03863D92DE221E2CA337761D25BA8E7AA27919F8703C5BF7767AC4F227A9569C76E3EA4583EA2DF58FD4A144043B4F8A21A41E5012D926A5B92CC674304E422C
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"577b54d6-a272-484f-94ed-07b6c61daa1f","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1714320896797,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1372
Entropy (8bit):	5.7407677097710845
Encrypted:	false
SSDEEP:	24:Yv6X1PrRUcqaKLgENRcbrZbq00iCCBrwJo++ns8ct4mFJNt1Y:YvSPFU0EgigrNt0wSJn+ns8cvFJy
MD5:	444256ABFB5AEE022FD6183E5069E613
SHA1:	27C2931C852448C3C244D27300A3D7A243AB8C00
SHA-256:	EA0D46CE3AE605E94DDC0322270921E128DD86533BC37C1044CF60922A899CB8
SHA-512:	EFABFD70E65E911AD968600FDC41C3C5F9317BF63BABB0F0D23D9DF8D92F0BEC0D3183256268503DEC1A97D3C2921CD5701D6ABDF0990CD86C16BD61447613F1
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"577b54d6-a272-484f-94ed-07b6c61daa1f","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1714320896797,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Home_LHP_Trial_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"79887_247329ActionBlock_0","campaignId":79887,"containerId":"1","controlGroupId":"","treatmentId":"acc56846-d570-4500-a26e-7f8cf2b4acad","variationId":"247329"},"containerId":1,"containerLabel":"JSON for DC_Reader_Home_LHP_Trial_Banner","content":{"data":"eyJjdGEiOnsidHlwZSI6ImJ1dHRvbiIsInRleHQiOiJUcnkgQWNyb2JhdCBQcm8ifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNSIsImZvbnRfc3R5bGUiOiIwIn0sImRlc2NyaXB0aW9uX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTMiLCJmb250X3N0eWxlIjoiLTEifSwidGl0bGUiOiJGcmVlIDctZGF5IHRyaWFsIiwiZGVzY3JpcHRpb24iOiJHZXQgdW5saW1pdGVkIGFjY2VzcyB0byBwcmVtaXVtIFBERiBhbmQgZS1zaWduaW5nIHRvb2xzLiIsImJ

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.3211859665276
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPt3/uq3VQ5IRR4UhUR0YoBchoAvJfYdPeUkwRe9:YvXKXPt3/uqFQWRuUhUcBceGg8Ukee9
MD5:	B88703FFF71286814870B802606F1130
SHA1:	C2FAB5B3E1A4003CF5739895BD6457BCA55FFCDD
SHA-256:	637517985AB827966A63852C4C4666E89F6C5AF52CE0CD6200901E07A1CDF320
SHA-512:	F178F5AC4F9ED9EBE050AA5C39C033E9FFBD1AF366CF165F5C6355FCBB5478C7B615E24276368A40FB40DC93716E1F1BD557FB053095EDA662E0EEC468949A80
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"577b54d6-a272-484f-94ed-07b6c61daa1f","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1714320896797,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1395
Entropy (8bit):	5.778307782529577
Encrypted:	false
SSDEEP:	24:Yv6X1PrRUcqJrLgEGOc93W2JeFmaR7CQzttgBcu141CjrWpHfRzVCV9FJN11Y:YvSPFUbHgDv3W2aYQfgB5OUupHrQ9FJe
MD5:	73C26D50650F1F81BABBBAD9A0EE80FA
SHA1:	1D0DB7233CB0E04E6EF48F519A4C5C8ABA41E46D
SHA-256:	B639786906081A7A7C98D6DF09DA1453E705688121F989C41B1168240FE615B2
SHA-512:	AD12BD799B4700F89E5A9CB6D694DD081522E445A6013B2217F9EE1151CDD11BDB330548BD0D461EB2D1EBA657EEFE4D07BE8D6A3518BC8C082C5532B7297B98
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"577b54d6-a272-484f-94ed-07b6c61daa1f","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1714320896797,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_RHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"57802_176003ActionBlock_0","campaignId":57802,"containerId":"1","controlGroupId":"","treatmentId":"d0374f2d-08b2-49b9-9500-3392758c9e2e","variationId":"176003"},"containerId":1,"containerLabel":"JSON for Reader DC RHP Banner","content":{"data":"eyJjdGEiOnsidHlwZSI6ImJ1dHRvbiIsInRleHQiOiJGcmVlIDctRGF5IFRyaWFsIiwiZ29fdXJsIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmNvbS9wcm94eS9wcmljaW5nL3VzL2VuL3NpZ24tZnJlZS10cmlhbC5odG1sP3RyYWNraW5naWQ9UEMxUFFMUVQmbXY9aW4tcHJvZHVjdCZtdjI9cmVhZGVyIn0sInVpIjp7InRpdGxlX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTQiLCJmb250X3N0eWxlIjoiMyJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEyIiwiZm9udF9zdHlsZSI6IjMifSwidGl0

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.304587456184092
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPt3/uq3VQ5IRR4UhUR0YoBchoAvJfbPtdPeUkwRe9:YvXKXPt3/uqFQWRuUhUcBceGDV8Ukee9
MD5:	723D5F7A3AEE7412AF8DF4F973C6C7FC
SHA1:	BBDD0232E5F4323FD3B16E876CE6CA2389121882
SHA-256:	6C77B69CA2821A2C7BF8290D33D6CDDA52158AD72F6DA8F5B8010A5D30A59826
SHA-512:	2453289100B319960F860009BEFCC93B604BD558007E283E62C57A55F525E8DCD81577CC078834625F4D025CF61DE249F2198033DFF98AF050B25A8FE9B0AA5D
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"577b54d6-a272-484f-94ed-07b6c61daa1f","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1714320896797,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.308557887499378
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPt3/uq3VQ5IRR4UhUR0YoBchoAvJf21rPeUkwRe9:YvXKXPt3/uqFQWRuUhUcBceG+16Ukee9
MD5:	5DD9DB1762288A1401A6FF87B2652E1F
SHA1:	BD9EA83C150E95F8CBCCF547F4FEE3DD230029AC
SHA-256:	C0135265679EAF164ABDFAEA4442A113481A5C68577D9866C79BD430B00C637E
SHA-512:	FFD9EA8360F50027BD726D2C258D31F50869D2C4CAFC339FD5300530A987299B595A644323796534D2AB57318EC5251F5FA260EC73A8A6706B7075606C91C2F9
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"577b54d6-a272-484f-94ed-07b6c61daa1f","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1714320896797,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.327727277211526
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPt3/uq3VQ5IRR4UhUR0YoBchoAvJfbpatdPeUkwRe9:YvXKXPt3/uqFQWRuUhUcBceGVat8Uke6
MD5:	4405C632D543424271D56785D9CD3A14
SHA1:	67148C7EAEB00E9D29BCBA7ADC2818C2E7A0A488
SHA-256:	B005934E555C384958C7E5250810821BD3A1F372A22E4BADA60527717DEDC162
SHA-512:	10C1AC47A9CD025C168D2C330431267DB1AEE2AD55D9750F53768763DD4D36E077497AE755AA30B6C4A085B2E4CF9E2E4D6BF3C2B4F68CF8FADE47A96223F9A8
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"577b54d6-a272-484f-94ed-07b6c61daa1f","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1714320896797,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.282831952256488
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPt3/uq3VQ5IRR4UhUR0YoBchoAvJfshHHrPeUkwRe9:YvXKXPt3/uqFQWRuUhUcBceGUUUkee9
MD5:	53B07BC2B38FAA3CD9659CD58F9A00A6
SHA1:	6AE721D41E75AAD3E55DDE0532161C0F3DCF4F01
SHA-256:	9CC1D1753EB41D539DA4C14D25604905380B45F4A3813E8E2B4D3F9F627A7C90
SHA-512:	71C750CCD59DE05AA3E6E9A2A75818F99783A3F25AE053A6995C9EE141F44ACCB45654016176FBC71FD7D59315A7646334CA32F95A035201E6751B27C5A52A39
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"577b54d6-a272-484f-94ed-07b6c61daa1f","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1714320896797,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	782
Entropy (8bit):	5.373005517340049
Encrypted:	false
SSDEEP:	12:YvXKXPt3/uqFQWRuUhUcBceGTq16Ukee1+3CEJ1KXd15kcyKMQo7P70c0WM6ZB/c:Yv6X1PrRUcqo168CgEXX5kcIfANhS1Y
MD5:	923C6022835949BD9C41650B7D673BF9
SHA1:	56328A0952DAAA26DA894EDCE9D2A40CFBBD4645
SHA-256:	ECE86631E764D50B5B20F639DE935FFE12DDC338BF25F285E53B28C2373F44BE
SHA-512:	86C5B2D41ABAD42162B779EE9277D9018FD6E8CF12470F1C1E1AB7B35EB4BC424AD5CBB3F6D971DBB57AAAD9700D0ADC4DE36E2A8E292A44DE17FDEE4A75F1C8
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"577b54d6-a272-484f-94ed-07b6c61daa1f","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1714320896797,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"Edit_InApp_Aug2020"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"20360_57769ActionBlock_0","campaignId":20360,"containerId":"1","controlGroupId":"","treatmentId":"3c07988a-9c54-409d-9d06-53885c9f21ec","variationId":"57769"},"containerId":1,"containerLabel":"JSON for switching in-app test","content":{"data":"eyJ1cHNlbGxleHBlcmltZW50Ijp7InRlc3RpZCI6IjEiLCJjb2hvcnQiOiJicm93c2VyIn19","dataType":"application\/json","encodingScheme":true},"endDTS":1735804679000,"startDTS":1714145456829}}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2814
Entropy (8bit):	5.134506362749483
Encrypted:	false
SSDEEP:	48:Y01Jhi+XVObPiKhF+tNnAjvQb4kgvx9yHO:Be+FO+KhF+tNnAUUXHJ
MD5:	E91C65130F58F20AC2083DFA0FC4B34F
SHA1:	7AB8F8196C3CC8126F3DCA16E2CCE7C40A5B8000
SHA-256:	294FAA6D01702AE6A817C966DFF31FFCD408713BF9238628F20B09C5D0054C35
SHA-512:	7D616C3972B72CDA71229EE3AF361E4AD9791517FD5D216744626A853B856732EE28E54232511D8B222CCE8C8DA73FB72DB1D55581DBCC7627E272011FDEFCE0
Malicious:	false
Preview:	{"all":[{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"e1fc47510197e8833447df76211b1795","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":289,"ts":1714145455000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"42f7833fe92e94c2bebbeebb1d17b7c6","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":1372,"ts":1714145455000},{"id":"Edit_InApp_Aug2020","info":{"dg":"e87dc75ba498626f967679ea2c109b21","sid":"Edit_InApp_Aug2020"},"mimeType":"file","size":782,"ts":1714145455000},{"id":"DC_Reader_RHP_Banner","info":{"dg":"401970aabd228021c74c0ee01f784bed","sid":"DC_Reader_RHP_Banner"},"mimeType":"file","size":1395,"ts":1714145455000},{"id":"DC_Reader_Disc_LHP_Retention","info":{"dg":"fb913cb3a794bb682220f343cd913de0","sid":"DC_Reader_Disc_LHP_Retention"},"mimeType":"file","size":292,"ts":1714145455000},{"id":"DC_Reader_More_LHP_Banner","info":{"dg":"32239d63cb821e5a986d40639256fc3f","sid":"DC_Reader_More_LHP_Banner"},"mimeType":"file","size":289,"ts":1714145455000},

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 19, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 19
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	0.9888029681321054
Encrypted:	false
SSDEEP:	24:TLHRx/XYKQvGJF7urs67Y9QmQ6QeE/x0IcLESiAie8/x0F:TVl2GL7ms67YXtrEtcI8Qu
MD5:	064F04489A61C6C35740C30656E41B8A
SHA1:	018C673642F4ECB6D824E69EA162FFD2EE30B454
SHA-256:	1CCAC2F2325F8839CA2789212BD3EE24F5BE0B6488A2F58BC734E3EBC2236C47
SHA-512:	64A0C5C254C7E1F2B83DB1CD00EBCB32D715A88A3EE685EDC1487ED846652F46D55CFD1AF9063B9A939D6484417D2D24FD9082305659E83C57411490F39C749B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.345011586442358
Encrypted:	false
SSDEEP:	24:7+tWASY9QmQ6QeE/x07cLESiAi0mY9QzqLBx/XYKQvGJF7urst:7MWlYXtrEicI8KYqqll2GL7mst
MD5:	5EFC50683AA3B03005761A08403D427B
SHA1:	98B353625967D023ABF9629E4C1E09A811626DFC
SHA-256:	1350777960A6B10DA56A5E6AC0FAE16CE02E7DAFD83D94AA1E5583809060E566
SHA-512:	4DBD2CDA0E62425DEEEED94553FF79B672490590076B47AA8A50D5CBDB7421FCD9BB2A5AFA0690CD34AF7AF6186CCE98246BBB6A423D3D02629B32DC8F83ADF3
Malicious:	false
Preview:	.... .c......\|........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................j...#..#.#.#.#.#.#.#.#.7.7........................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSIc3633.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.5441332632710916
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K8mdWaLXw:Qw946cPbiOxDlbYnuRKvFw
MD5:	285ED59044CDDEF37FCB1BA9B5A501A6
SHA1:	785456C87668A6B781AE6037F36357DC3782DEC4
SHA-256:	A5EEA742D0F441B2812C647A5F4E791146CAE9996AA7267D08D0645A15E54CA0
SHA-512:	C8D1F149E471C7452C8F682FB7EEE1D7A46B7DC9C641E9156720F6F42F5FDBB48AB23D23B265E21F3A78C5F6E9A5551F4BD59944D2E915F13CB25B60F4FB3B79
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .2.6./.0.4./.2.0.2.4. . .1.7.:.3.0.:.5.8. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-04-26 17-30-52-579.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.353642815103214
Encrypted:	false
SSDEEP:	384:tbxtsuP+XEWJJQbnR8L31M7HeltV+KYm3wsa2KjF4ODkr/O8r2IUHUHMWwEyZRN2:aPL
MD5:	91F06491552FC977E9E8AF47786EE7C1
SHA1:	8FEB27904897FFCC2BE1A985D479D7F75F11CEFC
SHA-256:	06582F9F48220653B0CB355A53A9B145DA049C536D00095C57FCB3E941BA90BB
SHA-512:	A63E6E0D25B88EBB6602885AB8E91167D37267B24516A11F7492F48876D3DDCAE44FFC386E146F3CF6EB4FA6AF251602143F254687B17FCFE6F00783095C5082
Malicious:	false
Preview:	SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:072+0200 ThreadID=6404 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:072+0200 ThreadID=6404 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:072+0200 ThreadID=6404 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:073+0200 ThreadID=6404 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:073+0200 ThreadID=6404 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15114
Entropy (8bit):	5.370307903899716
Encrypted:	false
SSDEEP:	384:/B3E0eVmNk6loqQuff5gWdkQKwnVHvWZiMoS6XBY8H0K/X4gyf+cbcJ0n64ne+WP:7h
MD5:	0DAB6BBACB4A5E853973A061077625F5
SHA1:	C10A9A7D3A80AB52587FB961167CA75FA00F7694
SHA-256:	09B83DB41436F938BE89D716D2419C4101422B98CEEB23C0E6BA4A3DB0FCDC52
SHA-512:	36D432133FAF35143FA6FF52C3590AFE41D67394EB816270D21DA3DF9E608C241E2AF68568C577FCF3D2FAAB7C0DF91442228C3005EB12E2347137D1176CAD99
Malicious:	false
Preview:	SessionID=6fd52d04-cbd6-4528-98c5-ff3505a0d118.1714145452600 Timestamp=2024-04-26T17:30:52:600+0200 ThreadID=5692 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=6fd52d04-cbd6-4528-98c5-ff3505a0d118.1714145452600 Timestamp=2024-04-26T17:30:52:603+0200 ThreadID=5692 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=6fd52d04-cbd6-4528-98c5-ff3505a0d118.1714145452600 Timestamp=2024-04-26T17:30:52:603+0200 ThreadID=5692 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=6fd52d04-cbd6-4528-98c5-ff3505a0d118.1714145452600 Timestamp=2024-04-26T17:30:52:603+0200 ThreadID=5692 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=6fd52d04-cbd6-4528-98c5-ff3505a0d118.1714145452600 Timestamp=2024-04-26T17:30:52:604+0200 ThreadID=5692 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.419496031182847
Encrypted:	false
SSDEEP:	192:0cbgIhPcbocbAIlncb2cbwI/RcbNcbQIVvcbCcbYIzdcbx:fhWlA/TVwzi
MD5:	47EC367B6164886513AF94C2923C1CA4
SHA1:	42B596229C920AB8B5B605157E3C9B45E0EAA844
SHA-256:	320261B62881F29CA722F3E1969FF5908AEF7E6DCB5782A3B18E079F0ADDC3DA
SHA-512:	13E79D1CF18493E312ED4A11799D84CADD317450357B58A91611006DF164A54E6E579C6BBD6AC535C97ECFAC144E4CDCFFABC36D283C33CD9195C67FFE3C758B
Malicious:	false
Preview:	06-10-2023 10:08:42:.---2---..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : *************************************..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : ***********************************..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : Starting NGL..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..06-10-2023 10:08:42:.Closing File..06-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\1871b987-57d4-4bb9-b03c-a07335940192.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\2d4956ea-4709-4813-85ab-3176370fa2d3.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/xA7ouWLgGZtwYIGNPJodpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:JVuWLgGZtwZGk3mlind9i4ufFXpAXkru
MD5:	A8E5C37206C98D1B655FF994A420FFB6
SHA1:	827237782AB5971EC205C3BCECCC7950BE9F84C3
SHA-256:	F1F755059AF7C2CBC36920337941AEFB18FBDB3CD14D3239CBBBCF0CB8F208EA
SHA-512:	12DE33EB7624458AEC44D83D4E2C09E626F8E54E177FC0C26EEBA232935F34FAAAEB71FBB025EB7C53BEA9933C46ADCE759C32516D1B80C03B6734C61D61CEB2
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\6fbd3c1e-fd65-43d4-a738-af3488a6fefb.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/xA7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R077WLaGZ7wYIGNPJe:JVB3mlind9i4ufFXpAXkrfUs03WLaGZw
MD5:	8B9FA2EC5118087D19CFDB20DA7C4C26
SHA1:	E32D6A1829B18717EF1455B73E88D36E0410EF93
SHA-256:	4782624EA3A4B3C6EB782689208148B636365AA8E5DAF00814FA9AB722259CBD
SHA-512:	662F8664CC3F4E8356D5F5794074642DB65565D40AC9FEA323E16E84EBD4F961701460A1310CC863D1AB38849E84E2142382F5DB88A0E53F97FF66248230F7B9
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\736ae9d9-57ba-403d-8589-2dd5deebf712.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:rBgI81ReWQ53+sQ3POSTJJJJEQ6T9UkRm1XX/FLYVbxrr/IxktOQZ1mau4yBwsOo:r+Tegs6lTJJJJv+9UZd1ybxrr/IxkB1m
MD5:	774036904FF86EB19FCE18B796528E1E
SHA1:	2BA0EBF3FC7BEF9EF5BFAD32070BD3C785904E16
SHA-256:	D2FC8EA3DDD3F095F7A469927179B408102471627C91275EDB4D7356F8E453AD
SHA-512:	9E9662EA15AE3345166C1E51235CDCE3123B27848E4A4651CC4D2173BDD973E4AD2F8994EFF34A221A9F07AA676F52BEB6D90FF374F6CCB0D06FA39C3EFE6B31
Malicious:	false
Preview:	...........[l\[.......p.a$..$.K...&%J.J...Wuo..dI.vk4.E..P.u..(.....1.I....A...............0.....$ctg.H.'....@.Zk...~.s.A]M.A..:g?.^{...cjL...X..#.Q{......z...m...K.U]-..^V.........@..P...U.R..z.......?......]nG..O{..n........y...v7...~C#..O.z...:...H&..6M;........c..#.y4u.~6.?...V?.%?SW.....K...[..`N.i.1..:..@?i.Q..O...`.....m.!y.{...?=.. .....Zk......%.6......o<.....yA}......no......u,.....U...a.......[S.n..`.....:...1......X..u.u...`..B=.&M.y..s.....}.i..l.'u]. ...6.s`....zdN.F.>;.d%D..}3..b..~..k.......,hl.j..._...F..p.z..o...C..,.Ss.u.Xd..a.Y.{.p...?.k..t,&..'...........^.f.hg....y..Y...i..m....<..^......yK.......;.5...E...K..Q.;k..\|;..B.{m..eS..>b..>...6...wmC.i.....wv..k..{..X...RB.P..?w......1l.H..{{.`g.P.8.Z..v_.G.....f.%+z.....p.P..u}.T.....~r]..W7..._..c.k.....@....y.K...uOSj........^....B..]..~{..;...c....r.J.m.S.}.....k....u*^...5./...{......3.I.p.t...V..........W-..\|.K.N.....n.........Bl...#)..;..4.x.....'....A....x..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 14:31:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.992673876614814
Encrypted:	false
SSDEEP:	48:8HUQdyTeS2HUidAKZdA1FehwiZUklqeh+y+3:8Hq3Zhy
MD5:	DEDBA2B348FBEFF4613368A6FC698415
SHA1:	1F49254394BAE9565C7E73B8D07AFA13B0B67940
SHA-256:	4989BC3FBA7D91258DD160CFEE2AFF22AE819BC0CA84A1E8B78CD95171A31F48
SHA-512:	0E45AA59BD0BB4B277F566FFE7EAB63F983210BB332C35669EE4E73A34FC1C62CFF292E546C0B6D1500915E2B4DC621C52E23440122918D5EB4E673BF94564F8
Malicious:	false
Preview:	L..................F.@.. ...$+.,....S&.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.{....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.{....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.{....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.{..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 14:31:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.013330357506143
Encrypted:	false
SSDEEP:	48:8sQdyTeS2HUidAKZdA1seh/iZUkAQkqehRy+2:8S3v9Qoy
MD5:	4529F54165A4812318565A0D99FE90D2
SHA1:	96E35F96364915D217A0326CFFEB8C858D1CAEF8
SHA-256:	3AC34A4E2D0476597CBEAC9C89E3AD3E7B4F6F5D97DCFACC8A21ED28CD64EB1C
SHA-512:	5C9E9EB60475240DC8FFFFD6BDA684CDF46350139200787280DAD3A0C1DD4F46C629255A607BC769911A3B21278682DF6E4A1E834C090D534CB4F57C674C0974
Malicious:	false
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.{....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.{....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.{....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.{..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.015589113686424
Encrypted:	false
SSDEEP:	48:8pQdyTeSAHUidAKZdA14meh7sFiZUkmgqeh7sby+BX:8r3tnly
MD5:	E19A7D9A79C4ED09056E3A49472F90CC
SHA1:	51D060CD200D79D5911218E8908C897250F39FA9
SHA-256:	B7E3EDBBFEFB65EA607819A0F4B975AF7A3923164D6FEBDDD6C74484240BF9B9
SHA-512:	70FFE369EAD309DFBD8C43BD201495B03B33F0E3ED5DBAC04F5777F755B576781F1CA199399C90C7EC76CD986B63CEC622682362F7C232741AA9A2F6F0516C71
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.{....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.{....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.{....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.{..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 14:31:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.009347057704354
Encrypted:	false
SSDEEP:	48:8MQdyTeS2HUidAKZdA1TehDiZUkwqehNy+R:8y3cDy
MD5:	B5E533C500517272F97F4E483D913395
SHA1:	069F4A8B85F7DEDD9A988A079E8992EAFFD1A53C
SHA-256:	1EAA915FE1BF257A958772CC347FC5461ADE7E70845CFEFD9DA3373BF4FE7129
SHA-512:	BBD9474479E4EF7D061F12DBFB10AB006A059EB8F251C0C13FFDE09D8C72465D0BDD8826CC0A5D6705FE315607C807B1C782D5DCF032B7ADE359405AAB8E6406
Malicious:	false
Preview:	L..................F.@.. ...$+.,...._......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.{....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.{....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.{....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.{..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 14:31:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9983629207520934
Encrypted:	false
SSDEEP:	48:8+QdyTeS2HUidAKZdA1dehBiZUk1W1qeh/y+C:8I3M9fy
MD5:	FA56B23882F664897B2F9AADE86CA94D
SHA1:	F2FDD27BD9021FB80F5137FF1C22F29975F6A712
SHA-256:	0044D0A639DE1F4C9FC60794A425F4B7CCA2F5AA302673BC6F5BF306090BF7E2
SHA-512:	E26EA5A7A77EFF45B151DA8BDF8B04265BF3482AE97A6C815054D814D158BCC4ECE00CB6EE702CA7CF37891AD21AC1D7E66D6755B34D4F319E80EEBBD8FE7B92
Malicious:	false
Preview:	L..................F.@.. ...$+.,....!......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.{....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.{....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.{....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.{..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 14:31:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.007523405492075
Encrypted:	false
SSDEEP:	48:8ALQdyTeS2HUidAKZdA1duTeehOuTbbiZUk5OjqehOuTbly+yT+:8A53+TfTbxWOvTbly7T
MD5:	608DAA99AC47A3C4167837659DFF5A97
SHA1:	3C1D281B97B0F4DC91C09F8FA60C60E78B19D155
SHA-256:	DC740164EEE82B7D295DA883C7FD8DA0F8CCDF92D302593369D82E3FE77D045C
SHA-512:	3F22FF519450A99FF6DA3E20E3D660DE93E57724F0FE594D0F12D715E106C27A64E4D19B5CFDA1AE8AD347AD9E899F7E98FF0815D3A14A8D9890DC711AA715EF
Malicious:	false
Preview:	L..................F.@.. ...$+.,..........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.{....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.{....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.{....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.{..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
Category:	downloaded
Size (bytes):	5680
Entropy (8bit):	7.924324524856849
Encrypted:	false
SSDEEP:	96:yE05iGfe0GO+OsQzSzEph6NPcFNvRVrZB7Prdm9Y6A8fWQEeXksdb:yV5iFM36Eph6NUFN7PrhkmeXpb
MD5:	007417D537E245BBD3EFA172BCF15B85
SHA1:	03CB8F1851D6B7F8B85329D3E5852151DBB1DFE9
SHA-256:	DDCED704D187FB6B1BE89025C66AA2DD4918541F0CEF661E3E4BC2BC24CF49BC
SHA-512:	793334858548DD53ED7F1C50287BB75E67E0ACDEF5CD4EB92CD5ACB735D29292DB56AF9CC2D3FBB697ADCDDB858FAFAE3E3E7852D2026F0F62485E52E85BFBDC
Malicious:	false
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA5n2WF8wv-ME7L61a1BMVDol7SKjmXRzD04LO-5qnc5Yo-7Uv3YESGK03INgkSkcBpqFw2IVRslTj_HEYCSE0bVNqb0YyT3pUC2Pe29yUaioY0zttD_Tipl2_G5Tpu8XD-YvFrTqIJ61dTX4sv2npmlKj-lwoCG7y0yslq1m5awBb8XY2F4ks8gOphnefktV5tmjcSue1lYveyn69HCB7uZNEAi1g&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=1868db878e889a63
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................d.d.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..z8..PP\|.......V.{..E..5.\O T.z..9.S......F1.w.......K-]&.}R).0.<.y..FA.A.<...qX...6...s.\|.....z.{o....d..V...n....x.`0.]OlV...5k.o....... .0.$......RK...2.^.."..2[.....,r......wP9..H<...u...(5=:......d.FgY..s.. ....:q.........n...>....am=...gg.#H..&.I'.;tS.[..Z....x.A...R<w0..U.P[.b..w`....^...{...!.....7.xD....\8...Yv......z...Df.........N.....x.%I.

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	517649
Entropy (8bit):	5.713376874006511
Encrypted:	false
SSDEEP:	6144:m1K1Z7NMxjW6eJoWvAlUjWwuMSYCVvLk8DSWd1Ps8Jz38iZc:m6eWTAujfuPY0JGgkt
MD5:	E2E79D6B927169D9E0E57E3BAECC0993
SHA1:	1299473950B2999BA0B7F39BD5E4A60EAFD1819D
SHA-256:	231336ED913A5EBD4445B85486E053CAF2B81CAB91318241375F3F7A245B6C6B
SHA-512:	D6A2ED7B19E54D1447EE9BBC684AF7101B48086945A938A5F9B6AE74ACE30B9A98CA83D3183814DD3CC40F251AB6433DC7F8B425F313EA9557B83E1C2E035DFF
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, truncated
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	4.199873730859799
Encrypted:	false
SSDEEP:	3:FttVQfPltSj:XtqPU
MD5:	D317C25EBCF619DCAD17963A91904BC1
SHA1:	749A0A568BEF62730A278854033B5D83AC81519C
SHA-256:	F5AF56B41CA2466246D1648A3BE8FE236C4F123E3FA8589C10A72F1C68ABBE8F
SHA-512:	4055D9D3917796222A49B8BFB48D60E9A804D4CEBFE9958EAEEE9E7BABE153FEEB6C7C11577F1494E37BB91F89F5FAB6BC204B1A7AF11F32A6043D57B5A4A237
Malicious:	false
URL:	https://www.google.com/compressiontest/gzip.html
Preview:	...........QL.O..,HU.(....H.....

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.8013557344442175
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKVnIwN4wECWaee:PLKdXNQKVnDoCL
MD5:	284B36421A1CF446F32CB8F7987B1091
SHA1:	EB14D6298C9DA3FB26D75B54C087EA2DF9F3F05F
SHA-256:	94AB2BE973685680D0BE9C08D4E1A7465F3C09053CF631126BD33F49CC2F939B
SHA-512:	093F3F5624DE2E43E43EB06036107FF3260237F9E47E1F86FDFBA7C7036522187A9B47B291F5443C566658A8EF555E5033C7F2AC0C9F4FA8EB69EB8E2540B372
Malicious:	false
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js');

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
Category:	downloaded
Size (bytes):	2660
Entropy (8bit):	7.817706746978723
Encrypted:	false
SSDEEP:	48:IvmuERANvIaHhuor/VYP/kVZcVMpCXIKLNyPzo+GPWGGH2VMCYQ4daDR:yEQv1Bp5bc3IKMPz7ZGi2rYQlDR
MD5:	1A0E7F8A939A4DDF321C1B1089CC2F5F
SHA1:	01AB7452DBF941F9B0683F6D3142CACB3C97230A
SHA-256:	3C7F9C57B75BB5C19D3AC057E40967DD5161BFA7509E46F086EA5F8293E1A434
SHA-512:	D7241D9ACF330093FA8D7C2403FE2B38F9714411828CDEE7B7BD0E6CEE44359689DE5F7720657D30238BB3889A0CC783E41E03F3D25E9068400809588F7E0D3F
Malicious:	false
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA4qo7BvEsw6c5x7L0zWkwDxk41s4QXBFq-UTbLoYi4mYg5pWAHsT9vh8DMhbPPHIyjECIZ4cYU41ywyA8hdRigYZQJnKI4_I3uv32GImq_xmDdqm2nF9i9bAfGu7AlTCwBDt7YWEwIJ3RtEJzTJZfrDDqE8Eyg8H6v_CVaI8sLZw3REAQxg9HgOdQ_aRKGSEE8JfJrWqTp2iL71Gqv5cBxUH_2LMA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=abd561db531187e4
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................d.d.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..3I.z2.rs..\.R....RW....2;T7.....S...55P9......O....9.SFi..3G8r...Z2)....q.O.51r.f..%...jUbz.U....9...EG;~..\.._i..i.U..RX.Y.D..J....@#......)..........3...m...T..q.j...U."......h..b.Uu...K/..)M..A...``c....d..P.~.^...HFz.K.8.G..bG.g...F=Z.^k.M........;..X:..t+"B.na.?.?.Z.d:inu;E.~..2...{9+....R".V..+..Y.N...h...RG......G".z}..S..........J[mZK.\|..[.X......Ej..=..

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (42314)
Category:	downloaded
Size (bytes):	275363
Entropy (8bit):	6.004923208868115
Encrypted:	false
SSDEEP:	3072:WT3g08DI6e/JTLCa8V4TTQEI4LdII1x5ut0Kp/jWY/b:8g0yI687TsEI4pII1SH
MD5:	1D7A139401417D3FFE8657CFD14E862F
SHA1:	88DB666FE16197DCBE21CF63C1223DAD87739E84
SHA-256:	BF3A3B2844F9498430087BA1C309A8FCDCA7495DE589B6D8971D0089F032ED8A
SHA-512:	EEF76C2B41DEC6C1E92A59C7A1B4158CCE67A2A9F9A90A0111CC52E5D07E09EAC0FA907425D12EDD9F4E2994AA3C8514406E5DEDE78EB5F782AFEFFC819994E5
Malicious:	false
URL:	https://www.google.com/search?q=104.94.109.142443&oq=104.94.109.142443&gs_lcrp=EgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA&sourceid=chrome&ie=UTF-8
Preview:	<!doctype html><html itemscope="" itemtype="http://schema.org/SearchResultsPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>104.94.109.142443 - Google Search</title><script nonce="1l5MlyUOBV_7zvmSppURKw">(function(){var b=window.addEventListener;window.addEventListener=function(a,c,d){"unload"!==a&&b(a,c,d)};}).call(this);(function(){var _g={kEI:'C8krZr7QHOyTwbkPuNyGwAw',kEXPI:'31',kBL:'jahV',kOPI:89978449};(function(){var a;(null==(a=window.google)?0:a.stvsc)?google.kEI=_g.kEI:window.google=_g;}).call(this);})();(function(){google.sn='web';google.kHL='en';})();(function(){.var h=this\|\|self;function l(){return void 0!==window.google&&void 0!==window.google.kOPI&&0!==window.google.kOPI?window.google.kOPI:null};var m,n=[];function p(a){for(var b;a&&(!a.getAttribute\|\|!(b=a.getAttribute("eid")));)a=a.parentNode;return b\|\|m}function q(a){for(var b=null;a&&(!

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64698)
Category:	downloaded
Size (bytes):	146532
Entropy (8bit):	5.273634762055897
Encrypted:	false
SSDEEP:	1536:kvSxr+NgOqngKq8f1HDxERsarqhZUsOLFkj75kb8DcEDAjMknjPu+lHlG+9YwTyV:eHEesOLFkj75kb93ZxyM2zZMO
MD5:	4014D049851B4B6EC0BA7EED8872732D
SHA1:	96F2BA0212CCE0FD0A9ED9465B7BE7414FBC17A1
SHA-256:	F885AA9C8EF261689AF96CB5F0896DB880EDB2F6657C390ADCBCFF2F4056BDB1
SHA-512:	C9FFAA9547108EDDD74C785E40CDED6716DE2E557F5AA770E5E919AFD09CDF47A2547CA4561AB2316D3F3806F7C43FE932501A4254B290EF2EC01CB3BAA96B55
Malicious:	false
URL:	https://www.gstatic.com/external_hosted/lottie/lottie_light.js
Preview:	/*. @license. * Copyright 2015 Bodymovin. * SPDX-License-Identifier: MIT. /../. @license. * Copyright 2014-2015, Epistemex by Ken Fyrstenberg and contributions by leeoniya. * SPDX-License-Identifier: MIT. /../. @license. * Copyright 2014 David Bau. * SPDX-License-Identifier: MIT. /../. @license. * Copyright 2014 - 2015, BezierEasing by Ga.tan Renaudeau. * SPDX-License-Identifier: MIT. /..(typeof navigator !== "undefined") && (function(root, factory) {. if (typeof define === "function" && define.amd) {. define(function() {. return factory(root);. });. } else if (typeof module === "object" && module.exports) {. module.exports = factory(root);. } else {. root.lottie = factory(root);. root.bodymovin = root.lottie;. }.}((window \|\| {}), function(window) {.."use strict";var h,e="http://www.w3.org/2000/svg",A="",s=-999999,i=!0,n=/^((?!chrome\|android).)safari/i.test(navigator.userAgent),_=Math.pow,k=Math.sqrt,f=Math.

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1268)
Category:	downloaded
Size (bytes):	276060
Entropy (8bit):	5.610132815791693
Encrypted:	false
SSDEEP:	3072:RYROUw0WppBChfqAvuyGpdX0ztrI76J3R5wx848:mOD0WUhfhuNKztrI76pR1
MD5:	633F27908E5F3E8F98C2E752356EA004
SHA1:	22231B22D3A91A24E110527FCDAD820BCCC15583
SHA-256:	BD1820203A45DC50C22447AE9BEFCE1CB0D5EA76DE9C648827950E538F1CB17D
SHA-512:	7BFA7658E4215940D57DAEC311D61D1B30CCB2EC3EA9970B0894B157B5E90EE22C0C94252145ECC21A1DCB5603D242057F31988A0021212A0662886408F9CAFE
Malicious:	false
URL:	"https://www.google.com/xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=sb_wiz,aa,abd,sy1ee,sy1ek,sy1el,sy1ej,sy1em,sy1yg,async,bgd,sy3z4,sy3z5,foot,sy2jo,sy6iz,kyn,sy1k9,lli,sf,sy1e8,sy1e9,sy3fx,sonic,TxCJfd,sy6y9,sy6ya,qzxzOb,IsdWVc,sy15m,sy170,sy173,sy316,sy6y8,syeq,sy155,sy6yc,spch,tl,MpJwZc,UUJqVe,sy7m,sOXFj,sy7l,s39S4,NTMZac,nAFL3,oGtAuc,sy8f,sy8g,q0xTif,y05UD,sy12g,sy13c,sy13a,sy13b,sy13e,sy13g,sy13h,sy13d,sy13i,sy1k1,sy1k2,sy1ph,sy1pi,sy1qf,sy1qj,sy1p9,sy1qn,sy1pr,sy1pf,sy1po,sy1pp,sy1qq,sy1qr,sy2ge,sy2gf,sy2fh,sy2lf,sy13j,sy13k,sy1pb,sy1pc,sy1pd,sy13x,sy1pg,sy175,sy1pj,syf2,sy142,sy1pk,sy1pl,sy1pm,sy1qy,sy1r0,sy16x,sy3hx,sy3hy,sy6z8,epYOx,synw,synv,rtH1bd,syo2,syxb,syxr,syo0,sy1ef,sy1eg,sy1eh,sy2ot,sy2ou,sy2ov,EkevXb,syzp,syzq,syzr,syzo,syzs,syzn,sy1cd,SMquOb,syzy,sy1ce,sy1cf,sy1cg,sy1ch,sy1ci,d5EhJe,sy1cj,sy1ck,sy1cl,syzt,syzu,sy1au,sy1cn,sy1co,zx30Y,syyf,sy1d9,sy1da,sy1db,sy1dc,sy1dd,sy1df,sy1de,T1HOxc,sy1dh,sy1di,DQfvme,syzl,sy1dj,Wo3n8,synz,L1AAkb,sy1f2,SZXsif,sy1zj,fiAufb,syn5,syos,syor,sy2xd,sy3yf,sy40p,sy40q,sy40o,sy4e7,sYEX8b,sy4u7,GU4Gab,sy3a5,T5VV,sy1zu,aDVF7,sy4u9,rhYw1b,E9M6Uc,Zilivc,syzw,sy11c,sy1cp,sy10i,sy10j,sy10e,sy10f,sy10g,sy10h,sy10d,sy10l,sy10m,sy10k,sy10n,sy10o,sy113,sy114,sy10u,sy10y,sy10z,sy110,sy111,sy10v,sy115,sy112,sy10s,sy10t,sy10r,sy10q,sy12p,sy1ii,sy1ik,sy1ij,sy1im,sy1il,sy1ip,sy1io,sy2mu,sy2mx,sy2n5,sy2n2,sy2n6,sy116,sy118,sy119,sy2mv,sy2n7,sy2n9,Hlw0zd,M6QgBb,sy2ni,sy2nj,EO13pd,RagDlc?xjs=s3"
Preview:	this._s=this._s\|\|{};(function(_){var window=this;.try{._.z("sb_wiz");.._.A();.}catch(e){_._DumpException(e)}.try{._.z("aa");.._.A();.}catch(e){_._DumpException(e)}.try{._.z("abd");.var zjm=function(a){for(var b="",c=21,d=0;d<a.length;d++)3!=d%4&&(b+=String.fromCharCode(a[d]^c),c++);return b},Ajm=function(a){var b=0,c;for(c in a)if(a[c].e)if(a[c].b)b++;else return!1;return 0<b},Fjm=function(a){a=void 0===a?{}:a;var b={};b[Bjm]={e:!!a[Bjm],b:!_.Lqk(Cjm)};b[Djm]={e:!!a[Djm],b:!_.Lqk(Ejm)};return b},Gjm=function(a){var b=[],c;for(c in a)a[c].e&&b.push(c+":"+(a[c].b?"1":"0"));return b.join(",")},Ijm=function(a,b){a=String(a);b&&(a+=","+b);google.log(Hjm,a)},Jjm=function(a,b,c){c=.void 0===c?2:c;if(1>c)Ijm(7,b);else{var d=new Image;d.onerror=function(){Jjm(a,b,c-1)};d.src=a}},Cjm=zjm([97,119,115,111,107]),Ejm=zjm([97,119,115,111,107,123]),Kjm=zjm([118,115,121,107,108,124,104,119,68,127,114,105,114]),Hjm=zjm([101,126,118,102,118,125,118,109,126]),Ljm=zjm([116,116,115,108]),Bjm=zjm([113,115,99

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (763)
Category:	downloaded
Size (bytes):	768
Entropy (8bit):	5.140367877699155
Encrypted:	false
SSDEEP:	12:ukiDJ5mV7vxju0DCIvLKBHslriFTAYsSw7sZAnIIIIIII5wuCPXIwuGHHHHHHHYU:2F5mV7nuImBHslgT9lCuABuoB7HHHHHJ
MD5:	F91B33E16C4EB7BE9C28FD2F1340E925
SHA1:	D1BC28420BC0322EA1E3BA6C1C01FF5B8B48E896
SHA-256:	6A7AA5F8617432435C2E44DC246E8DC4A008E1284CE0063C9D01B380F87A8D16
SHA-512:	17F27FBF988DC260F526ABF1C7719E9233FA0AD01CC42B3A7215C52586B1C2A167B1F9AAEB7181AB256E024EE6D185264A12CE33347CB6A3E573A305F3BB1DB9
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["slipknot drummer","terrion arnold nfl draft","express stores closing list","apple iphone 16 pro max","nasa mars spiders","them the scare prime video","frank csorba death","new smyrna beach florida explosion"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"]}]

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
Category:	downloaded
Size (bytes):	4122
Entropy (8bit):	7.893245509813025
Encrypted:	false
SSDEEP:	96:yEK5wPmkE7xImLKftX/+ZIYCgpOGSQQFDieLFZvHBLOZ:yNKmN+m0RxCaBR1LOZ
MD5:	669B11F9DC009E344E8E4D6D3BC714F9
SHA1:	A57964136906A9C748FDF4BD706CC3A7F5CCAD45
SHA-256:	DE0CF598146857C1A326CD5653765DE8CD6D41B1B795F091A935766DA5B5DF74
SHA-512:	3131AB6F41E329D50EAC3EB6C7E9E9680C75C388D8328C3BEF2BBC94FBAEBCE125807715C8A61A5EB51E0F86D1241BBC3C398D995924500870A171BB0345C817
Malicious:	false
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA6u0-JMSOaecoCXHzdsX-xxrcVrgCsTYc59nt6KMq8BRd5Ex-67_RPGwRPMTEZi8lNpFhlcgy5Y7-wQWe2KnHVK5ZfToZL-Vmn0Gttkh5Yl8o5rao17hCvwzK1zjndSb_zIf76VRoc2NtYot5-zOEOdfcEXA6g2mN7FHkMnr0u6AnUZuYajaPHwihB0Zx4V6YIUYxUYXrwQdWApHkKoki170EAOfQ&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=ced8fd5d7352b74
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................d.d.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..<:...7.o..^./m%...\...m. .n...Z...9...tk...Y.?.$DtRp@\|...W..~0.to.]2]"..?0F.N"...1.a...Q..S.8.A.....D$..G..C..=.....W..T..N.I.....kJ...N..R...M....f..9f....ak.^01.f8....P......m...b.#_.6.T...@.H..?C.......+m>}.;o.nF@.....w..../.c.....a<j.."..:....?J.qY6=..:yK..~.m....g....g..V.....H..6H........$...8...w-......nZ..0.9;...q.,8..^>..\|)ps.xGQ.;B.opH..1....N..~".?

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7999)
Category:	downloaded
Size (bytes):	8004
Entropy (8bit):	6.012495340318704
Encrypted:	false
SSDEEP:	192:PDcqOkCsohVWlMmJTD1eSLR1qgIp8c2O8uYcQ:Pw83amtUgym9eYcQ
MD5:	FA425C977E4205305851E8BC65D91E03
SHA1:	729668A64A81E425A1EA937188191248D13F13E0
SHA-256:	80ADF121BDF3BAC174125C3C6A5E2607177354FBEE2B87D7E6EDA5F137E3DD5D
SHA-512:	044D73A89BD2ED2EEC41CD7F5F6A58F88F0A45C9B0BC40BDA868791A71B66925B70B9EDA090D1C77AEA6D77C98D421841DE5E42A30C01DAE8F96446337B483D6
Malicious:	false
URL:	https://www.google.com/async/bgasy?ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449&yv=3&cs=0&async=_fmt:jspb
Preview:	)]}'.{"bgasy":["https://www.google.com/js/bg/mRGGmFyfkxraBSijWmRbMvJbf0lxQqxKNQRVrY6UR5U.js","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

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	137
Entropy (8bit):	4.845357175491189
Encrypted:	false
SSDEEP:	3:VwZdLUxRyzwwBHsLpHbGWjLwWkzXFETH1u4:Vw0Cz5BHsLRGAwWeXFEL13
MD5:	624F7A7BF63374D3802A6B182EC81EC7
SHA1:	92FD83406DE87B97AE9013065A9B7A490C15CE5F
SHA-256:	9D66F8927881004041A4465D24E96FFF33030C8ACD5B5BC663AF46BB656957C9
SHA-512:	B4B8731C0AA66E629CFCEB7BD36FFE718C80232B14A4AC294F91126D6217E7BA6DBB1F7050D44D94CF9A8B926680FABDDB11FF1ACC6EED888BD67A50F0491B72
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.142443&oit=4&cp=17&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["104.94.109.142443",[],[],[],{"google:clientdata":{"bpc":false,"tlw":true},"google:suggesttype":[],"google:verbatimrelevance":851}]

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7287)
Category:	downloaded
Size (bytes):	7292
Entropy (8bit):	6.10309462236588
Encrypted:	false
SSDEEP:	96:gM8vwFUVyz6xsaXiZUquGP21G7NXxeIKKWsYfUCNtm+KbEhpOx2ge/juj0zF2kW1:gtvwF3OiROoqNKWsWxmdELOx/izFjW1
MD5:	D7851547DA896316F246BCD98A09C4F0
SHA1:	1AA4A25E1FE15D4C20BF9EE0DB5E11C12511C253
SHA-256:	B396675FA1606E1A74CFD6F1FDC05FE57BA49759059DC4572AC4041E4A9F3015
SHA-512:	DCE2DA467B530427DA2E6A8F4988B672D63F35CF7482F35B549CA8F3CD4764A76A9197B402900C19F46E21D70BA9B227747A77E89ACA63E88DB94CCA298730C3
Malicious:	false
URL:	https://www.google.com/complete/search?q&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=2&hl=en&authuser=0&pq=104.94.109.142443&psi=C8krZr7QHOyTwbkPuNyGwAw.1714145550203&dpr=1&nolsbt=1
Preview:	)]}'.[[["philly pretzel factory free pretzel day",0,[3,308,357,362,396,143],{"zf":33,"zl":90000,"zp":{"gs_ss":"1"}}],["baltimore ravens nfl draft picks",0,[3,308,357,362,396,143],{"zf":33,"zl":90000,"zp":{"gs_ss":"1"}}],["household cavalry horses london",0,[3,308,357,362,396,143],{"zf":33,"zl":90000,"zp":{"gs_ss":"1"}}],["myrtle beach classic youtube qualifier",0,[3,308,357,362,396,143],{"zf":33,"zl":90000,"zp":{"gs_ss":"1"}}],["cicadas south carolina",0,[3,308,357,362,396,143],{"zf":33,"zl":90000,"zp":{"gs_ss":"1"}}],["korey cunningham football",0,[3,308,357,362,396,143],{"zf":33,"zl":90000,"zp":{"gs_ss":"1"}}],["minnesota state senator nicole mitchell",46,[3,308,357,362,396,143],{"lm":[],"zf":33,"zh":"Nicole Mitchell","zi":"Member of the Minnesota State Senate","zl":90000,"zp":{"gs_ssp":"eJzj4tLP1TdISiqqNMkyYPRSz83My0stzi9JVCguSSxJVShOzUssyS9SyMtMzs9JVcjNLEnOSM3JAQDuvhM2"},"zs":"data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAkGBwgHBgkIBwgKCgkLDRYPDQwMDRsUFRAWIB0iIiAdHx8kKDQ

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.702456654541049
Encrypted:	false
SSDEEP:	3:VG4jJBocKkGR6heP:VpRKkGQO
MD5:	9D0FBF8388771A418264293BB9977075
SHA1:	96E3E6E3DCCCD46AC4079E93D93C5DADC047DA13
SHA-256:	15BEAEE5DBF1612EE813F20881AB315C78EA21F5A775472672EDAA308B3D93A1
SHA-512:	EB7C1DC13CD6DD451121F54AACA3C7B4022948F2E18D1C58B65D30CE2CDEC20EC57CEBD6104BA80EA78D05B9CFFA7B4C9FBACB2B5609282E61AD0A9DAF25870E
Malicious:	false
URL:	"https://www.google.com/async/asyncContextualTask?vet=12ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ4dMLegQIBRAA..i&ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449&yv=3&cid=10943804590251964565&cs=0&async=_k:xjs.s.en_US.DNHITQOYOgk.O,_am:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.s.GGin1mxRzvU.L.W.O%2Fam%3DgB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKACAmXAAAsCGAADgg0MAAIAAAAACAACAwgEAABAgIABgAAAgAAAAAAAAHAABAAAgBAACBECAAJIQkIEAAEQwwQCkAgDDjwAAIIAEAAAAoEAAAAEDESA8hAABgACQQAQCIIIAACAHCAEAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAAAAAAQ%2Fbr%3D1%2Frs%3DACT90oGSC2kJ5MOZFnDJZQWz14iwbMFYQQ,_fmt:prog,_id:rNi7Zc"
Preview:	)]}'.22;["E8krZtq0O5DvkvQPhcq9oAE","1995"]3;[2]0;3;[9]0;

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (994)
Category:	downloaded
Size (bytes):	17723
Entropy (8bit):	5.426777993064659
Encrypted:	false
SSDEEP:	384:a55NiEI7TimCdc0gC312BdLSqn/fD7X/AIAfLn8KtgumR91mHWWq6l8Q5SpWeHhp:a55NiEIl0z31EdLSqn/fD7X/AIADbWWw
MD5:	BA9DE1EAB3676D6E2A87D518BB88BE28
SHA1:	C0CBD925610612D23EC644D8BEDAD34B8F8D2207
SHA-256:	14E63910EBE6ACE22E91F345F24B81FFC39C05BF397C9C5C268CCCDEA0806DC2
SHA-512:	371ED2992F6D1BFA178899FC69DEB601BE0C228DFDCF37C15EA6AFC32E3015452A259A7F3E24292F0A76332D6BB19D5FB8ABE89322F33AB34DB9BC60713D4015
Malicious:	false
URL:	"https://www.google.com/xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=uKlGbf,syyj,sy3ze,DpX64d,sy3zf,EufiNb,sy1fp,P10Owf,syy4,syzv,gSZvdb,sy5ul,vTw9Fc,sym1,syoh,syoi,syoj,syok,syol,DPreE,sy2tx,qcH9Lc,sy3l6,ROaKxe,sy3l8,sy3l9,pj8IAe,sy15a,sy37l,sy3lf,sy3zm,YFicMc?xjs=s3"
Preview:	this._s=this._s\|\|{};(function(_){var window=this;.try{._.z("uKlGbf");._.KE=function(a){_.xn.call(this,a.Ka);this.window=a.service.window};_.G(_.KE,_.xn);_.KE.nb=_.xn.nb;_.KE.Ga=function(){return{service:{window:_.yn}}};_.KE.prototype.reload=function(){this.window.get().location.reload()};_.zn(_.Qp,_.KE);._.A();.}catch(e){_._DumpException(e)}.try{._.A7b=function(a,b){return _.Oi(a,1,_.Ktb,b)};_.kw=function(a){this.ka=void 0===a?null:a};_.B7b=function(a,b){return a.ka.Cc(_.jvb.getInstance(b)).then(function(c){if(1!==_.$h(c,1))throw Error("Vf`"+_.$h(c,1));return c})};_.lw=function(a,b,c,d,e){var f=new _.Vs,g=new _.Ts,h=new _.Rs;_.evb(_.Ss(h,b),null==e?void 0:e.Czh);h.setValue(c);_.Us(g,h).Xp(d);_.gvb(f,g);void 0!==(null==e?void 0:e.xoc)&&_.hvb(f,null==e?void 0:e.xoc);return _.B7b(a,f)};._.C7b=function(a,b,c){var d=new _.Vs,e=new _.Ts,f=new _.Rs;_.evb(_.Ss(f,b));_.Cb(_.Us(e,f).Xp(c),_.cvb,4,void 0);_.gvb(d,e);return _.B7b(a,d)};.}catch(e){_._DumpException(e)}.try{._.Qtk=_.C("DpX64d",[_.ao]

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	69
Entropy (8bit):	5.055927493255114
Encrypted:	false
SSDEEP:	3:V2JRUtOdLUxRyYMvHBwdHV:V2JR2RCYuBWHV
MD5:	9BD9843151E1E273B322C761C25D69F6
SHA1:	DE2B57A02C6C300111809BB7C0162F3FA1A1D6BD
SHA-256:	8B7DED946011737A6AFD0EEFA83032C08B3F90B39DD702D1CED75764383CCC06
SHA-512:	DD6F05DEAD0DCDD7B8F7280508A1D2940D7B5D1ABB484E57D28DE1E508640A2A8A39C2CEA61860F4EB3B58DDA3678CD87C8237170A84B49BBB77388639F4B024
Malicious:	false
URL:	https://www.google.com/complete/search?q=104.94.109.142443&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=undefined&hl=en&authuser=0&pq=104.94.109.142443&psi=C8krZr7QHOyTwbkPuNyGwAw.1714145550203&dpr=1&ofp=EAE
Preview:	)]}'.[[],{"i":"104.94.109.142443","q":"dEOUFTwK-EXBmCnbd7CLItzkyT0"}]

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 184 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3831
Entropy (8bit):	7.925889412012612
Encrypted:	false
SSDEEP:	96:OMa+Lx3VhZ25tO+44s8NUH0Rdv4RzObT1koUpwGx+F:O5+1lP+44s814RidrrGx+F
MD5:	0877987D1BE23418318D595A3A297CE9
SHA1:	F69E2644E31165BD95311C2EF6D563CFEB1BCC13
SHA-256:	FD4D9D732E7A4AF52746EBABE6BB16941EE71AE3E919131AF700CF4E1228A16A
SHA-512:	780B8DB5E9FB5F27AE8E8AFF5FE710F2BDAB37692E8AF19E1F76CA169EDE7D988DB49CEDEC92C0FFF83A89B1539A2A7C2F6922A7E15979BDFB035F9F1F910641
Malicious:	false
URL:	https://www.google.com/images/branding/googlelogo/2x/googlelogo_color_92x30dp.png
Preview:	.PNG........IHDR.......<.......p.....IDATx..]..\E.n...n.P.D.`.r.7.cp.Mb.X..C.3"w.....kgf.phE.!.....D.9...P...X$$ ..E.......^.;...f7............5........~..D..Xc.VO..3.....:..gc..@.].SF.......Z:..}.A..'+..CLBb.BO."....=...";m.}./.?.IH...)./......<..5L...~tnq...u...i. d -e..wG.....$x...Oc)3."..L..x.y..........u...+q3c..L&!.....L$...]R.R.N..+..B..e.y..X8E..S.....bi.u."v.k.1.I...]...'l.!.../.7m..-_>i~........6.o.....IH....w..6c\|..L..t....3.....6.....D..,7...#....0..[..... .$.$x.R`..P9nb....G`. ..3...$$...HK..r..}....D.C....\.`.%$.. .$>....I..a...Hpd....3.$$........&!Q..G...7...o..b...D.l\.$../...+.......#....BOs....Kv.LX...j...Z........o=-....e...\|..2.`{.V..Or...1.;mAn.r...(..M.^VW.k.....$..S4/.v..i......ShM.....+5\....#..4HE;.=..I.\|....7XhgK..2..4".......].b.5..?JA.^..].....q.g.3..M..P..7..Q.+..............Q. f..3r5.=1...D6.L.....7-...5a...R5....u.&...V.....8=.4.-..wb.&k.1'.....^L.=;..U4.y.........,x.\.%x:.NEYm.. ...vM..78..y?-.7...(.

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15436, version 1.0
Category:	downloaded
Size (bytes):	15436
Entropy (8bit):	7.986311903040136
Encrypted:	false
SSDEEP:	384:uJ/qNyGt74AcZEG+69hFFHDJ1CggakKt0y:+q/kAc+ohFx9YgB2y
MD5:	037D830416495DEF72B7881024C14B7B
SHA1:	619389190B3CAFAFB5DB94113990350ACC8A0278
SHA-256:	1D5B7C64458F4AF91DCFEE0354BE47ADDE1F739B5ADED03A7AB6068A1BB6CA97
SHA-512:	C8D2808945A9BF2E6AD36C7749313467FF390F195448C326C4D4D7A4A635A11E2DDF4D0779BE2DB274F1D1D9D022B1F837294F1E12C9F87E3EAC8A95CFD8872F
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......<L.......\|..;..........................d..z..J.`..L.H..<........e..^...x.6.$..6. ..~. ..).7{...K.. .k~....".v(...[...RE.$..K..C,.'..{BK.C&.....'L!...DZ........+6.r...K..._...<..0..].V..........e.r(RN.43k;g`...?<?.......b..c.`.. .6..p...5.$zd.R%.........h....";.^WU.....H........S.j..M:..=K..\B.6"f......z.........$...%w.?$-....9.:u....u.I..Tt..s........lY...J.6oN..y...1,I.Yx..lu..}.e...Og..d...Xv.. ...iF.]..x.N..#%,y.&..,$.^.n...\.K.P.J.x...H$..-.....p.....t.v...gD^....?..6o......e....,f.)..h...P...<.:.E...X..p....U.?.[m....l.Y.S..p..%..K.,U..3U.qFZo....U...3..3.]\.C.#..9T.8P`8......P...R;..r..J.*...u.j..^vnf.v.... .pw...Z.(.6%$U.[.\|....!mU\}./..i,..7D........:t'.a;.W(.."G....q.-.Z......;J..0.&/.5. .T......w..;...t...H.t.<y ..@xx .JA.U.t..;g....@..... .t......<.5(^.\|s..Ko.O.x.....!...........lHF............So{.%..V...7..aA$....C;,"(.J..EE..@.....vOB.,V..../....B#.r+./-t.(.N.S...R.Z$4...4i.c.}t...#3`.......s..;.O,.\|..W.A.f.w.

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/api2/info_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12727), with no line terminators
Category:	downloaded
Size (bytes):	12727
Entropy (8bit):	5.271915741381962
Encrypted:	false
SSDEEP:	384:ig3ggZ3Z9M3M8V3VZ3b9F9bkw5ckX57yShEv:OPJhEv
MD5:	65656D15E9F9AB0E9A0F9D8F4C004235
SHA1:	54E6C4AF5ADBAA2BF19F77102D31C924E2DFD354
SHA-256:	D5351DFB35DB1DC99FC1109D536EEFA95478D5B48BE55B90A2CD6526397954B8
SHA-512:	A652802DECC5C57253D5C6EFE92E4D249E3F8A5DDEC008BB525B380A0EEB27F2571DF991F6F19DEA533E3C49A87413B3CD0A7CCE5CEB8FD8823D24780345D1AB
Malicious:	false
URL:	"https://www.google.com/xjs/_/ss/k=xjs.s.GGin1mxRzvU.L.W.O/am=gB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKACAmXAAAsCGAADgg0MAAIAAAAACAACAwgEAABAgIABgAAAgAAAAAAAAHAABAAAgBAACBECAAJIQkIEAAEQwwQCkAgDDjwAAIIAEAAAAoEAAAAEDESA8hAABgACQQAQCIIIAACAHCAEAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAAAAAAQ/d=0/br=1/rs=ACT90oGSC2kJ5MOZFnDJZQWz14iwbMFYQQ/m=y05UD,sy13c,sy1k1,sy1qj,sy1pf,sy1qq,sy2fh,sy13j,sy1pb,sy1pc,sy1pd,sy1qy,sy16x,sy3hx,sy6z8,epYOx,L1AAkb?xjs=s3"
Preview:	.jbBItf{display:block;position:relative}.DU0NJ{bottom:0;left:0;position:absolute;right:0;top:0}.lP3Jof{display:inline-block;position:relative}.nNMuOd{-webkit-animation:qli-container-rotate 1568.2352941176ms linear infinite;animation:qli-container-rotate 1568.2352941176ms linear infinite}@-webkit-keyframes qli-container-rotate{from{-webkit-transform:rotate(0);transform:rotate(0)}to{-webkit-transform:rotate(1turn);transform:rotate(1turn)}}@keyframes qli-container-rotate{from{-webkit-transform:rotate(0);transform:rotate(0)}to{-webkit-transform:rotate(1turn);transform:rotate(1turn)}}.RoKmhb{height:100%;opacity:0;position:absolute;width:100%}.nNMuOd .VQdeab{-webkit-animation:qli-fill-unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,qli-blue-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both;animation:qli-fill-unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,qli-blue-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both}.nNMuOd .IEqiAf{-webkit-animation:q

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1063)
Category:	downloaded
Size (bytes):	61299
Entropy (8bit):	5.509339399096467
Encrypted:	false
SSDEEP:	768:pVVjrSFpSczwLmFM3F/rkiemIoMdWd0r1L+SKEh1YsDv52mEKnC66xCx77pixafT:xwdZiQSKnCBK7cxe098CcEVgJW6T
MD5:	860F7F5856575849B0E45BFFF091427E
SHA1:	6715A240F38E0005692CB73B849F7D77875EDD52
SHA-256:	7175D22CA6DCBBE3706D8E3C1BCA70D48F83ADA8C4DD53294991C37E15C7A079
SHA-512:	F09EF59EEDCC7B0C74327EB61F7D65205E6D7876596293875E215CE6736B4EA8EAF2AC691A2670B559D14A9A7A0C6D36590ADCA35A64E3D43C85072FEB34C444
Malicious:	false
URL:	"https://www.google.com/xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=sywy,syx0,syx1,WlNQGd,sy2mm,sy2mn,nabPbb,syww,sywx,sywz,CnSW2d,sy1f9,sy1fa,sy1fb,sy1fc,sy1fd,sy1fe,sy4dj,sy6y6,VD4Qme,syf9,BYwJlf,syns,syo1,syo6,VEbNoe,symg,sy2ob,sy2oc,sy5a0,ND0kmf,pjDTFb,sy1wv,sy2t7,sy2tg,sy2th,KgxeNb,sy2tc,khkNpe?xjs=s3"
Preview:	this._s=this._s\|\|{};(function(_){var window=this;.try{._.j1b=function(a){var b=a.event.detail;return b&&b.type?"menu_item_selected"===b.type:String(a.type)===String(_.i1b)};_.i1b=_.On("mMf61e");_.k1b=_.On("LyWNEf");_.l1b=_.On("OVY1kd");_.m1b=_.On("nunXZ");.}catch(e){_._DumpException(e)}.try{._.n1b=_.C("WlNQGd",[]);.}catch(e){_._DumpException(e)}.try{._.z("WlNQGd");.var o1b=function(a,b,c){this.trigger=a;this.wVa=b;this.fF=c},Lv=function(a){_.F.call(this,a.Ka);this.Ba=null;this.Aa=[];this.oa=null;this.prefix="";this.Qia=[].concat(_.ad(a.controllers.Qia),_.ad(a.controllers.blg),_.ad(a.controllers.e8e));this.menu=this.getRoot().el();this.Ja="listbox"===_.ACa(this.menu);this.Qa=new _.mq(this.kce,1E3,this);this.Rd(this.Qa);p1b(this)};_.G(Lv,_.F);Lv.Ga=function(){return{controllers:{Qia:"NNJLud",blg:"hgDUwe",e8e:"tqp7ud"}}};_.k=Lv.prototype;_.k.fof=function(){return this.oa};._.k.Vac=function(a){var b=void 0===b?!1:b;(a=this.K9().find(a))&&this.wa(a,b)};_.k.K9=function(){var a=this,b=[].conc

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	31421
Entropy (8bit):	7.967691728877791
Encrypted:	false
SSDEEP:	768:aCFbMu9PvdU6ngnMkRZ6xJywpbgNagqUhOsKbc:asvmBj6njpcYgrOc
MD5:	9EB5BD79275E4EB831E83342215085D0
SHA1:	26FD6925A2114A3BF5F4E92326AE151CEDDFB502
SHA-256:	08E6B96F7F9B4C230A2F28376F6C0C28BFDA971BE639D99C045DA273BC7682D1
SHA-512:	03EE8A064182C61494C5D3DE9B8DE04FCE77E739EDCCD53CF1A27303F94062EC75CD6E9A77C61542D911E482F91C0484E2163547BAB03CC5F8D25C9E1ADDB604
Malicious:	false
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA4usRjYkJfr9srSp2HD4-ZZAVZywMgBTv-cvcNDNMdzhtedLDEkllNnkQiQBbtl3h4As3V2Iew446Zxj5dcFMe0MMOrTyv4ts3-hjod8380h_vsvEgOVv7dHXvzSlPNaf0Z9uZQr8h58zsC5_C-Yi198SrWQsa7MZ5u3dpR8HcvIT4q5vas_t9yZ6LuKTyDOaezHVWLaYozqtkSHXw9w1wzsX9jSQ&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................,.,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....d].l..+..z`....{t....4..#%..POP9..~.^.YWNi$.....%N1....-`.7.-.....\......3....\:...t..xH..,..o(d..l...E.k...#v.w.......Bz..i..~.q=..n.).d..`..=..=..U%....FH....G=.......V........M.\.%..d .i2z..o .9.v.^....W\|g...8.;.s]..zt2..#.......d}{.T..[D..N.HVd ..$.^..\|S..q..K4k8.......o....A....]...9...Y.lx,.,..zs..[.:].zl..hD{...x`.q....s...z{.u.j.C.m.B.\|.T...

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222), with no line terminators
Category:	downloaded
Size (bytes):	1222
Entropy (8bit):	5.818804287152988
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCLTLv138EgFB5vtTGJTlWtRcw1MuhtsLqo40RWUnYN:VKEctKonR3evtTA87b1Muh6LrwUnG
MD5:	463D838587C8B5873CB6E4E942B770C9
SHA1:	E69DCF383A6F3F51F123CA2D86F19FC4BE09E612
SHA-256:	1448EC1B3F30A554233BD280AA99A7EAF690D1098647E7DDDEA286C757884F9C
SHA-512:	F02DE64A37B90492D714CC7D132C49BF29CB5117CA945258BAF5B36D087A3A2AED165C6FF37D2ED4E4F10D7199AFB9C2B5E2555BA1BECA1A8D3AE133F4DF4B23
Malicious:	false
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-0lJkOVHDy3ItYlCbUoEzThjP3hLhLYfEFPAkVOCx

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2069)
Category:	downloaded
Size (bytes):	616721
Entropy (8bit):	5.687539923786907
Encrypted:	false
SSDEEP:	6144:bn9vPZpwyKfrb5Hcimaaz2uFV/TT+eveeThKDRlwDnCYLvZ7J7:bn9vPZSyKfBHpHaCUV/+QwcF7F
MD5:	489BD806D144C421D8EA3D543327BCBD
SHA1:	F8CFF22B43B1814207F409FCC9C8CD598FC7B396
SHA-256:	705935B885591D8CDE854221E0E8FDE9EF1B58CF24CE659E20F544AE27AA80F1
SHA-512:	1E74B37590CB88EE40DDAE9EDF6134734FE748166400E5E7E2DAD00246ADE3F0F192D0BC287F12F8813D4F19E99802DDEDDB80000FE6580A9AD4DDD1AD5141EA
Malicious:	false
URL:	"https://www.google.com/xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/ck=xjs.s.GGin1mxRzvU.L.W.O/am=gB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKYGgmXAACsCGIADgg0MAAMAQAABCAAjA5oEKARQhIABgAIAggZ__BAAAHACBAQAgZAICBEC4AJIQkIMAAEQwwQCkAgDDjwAAIIAEAAAcoMB-AAEDESA8hAABgACYYPwDoIIAICQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=1/exm=SNUn3,attn,cEt90b,cdos,csi,d,dtl0hd,eHDfl,gwc,hsm,jsa,mb4ZUb,qddgKe,sTsDMc/excm=ABxRVc,AD6AIb,AOTkuc,CVVp5c,FmnE6b,KYXthe,KiXlnd,NsEUGe,Ok4XMd,Ollhtb,PlCTlc,RP6nyf,SpjoE,Ut0TMc,VL58m,WFRJOb,WuIPnb,ZGLUZ,ZrXR8b,bXyZdf,fNMhz,gKO30e,hU1IHe,hWJjIf,rL2AR,xB2dQd,y25qZb,yChgtb/ed=1/dg=0/br=1/ujg=1/rs=ACT90oFHhWzRDSD7HZXJ5E0CbPv4n89phQ/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KeeMUb:HiPxjc;KpRAue:Tia57b;LBgRLc:XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;PqHfGe:im2cZe;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VsAqSb:PGf2Re;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YV5bee:IvPZ6d;YkQtAf:rx8ur;ZMvdv:PHFPjb;ZWEUA:afR4Cf;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bDXwRe:UsyOtc;bFZ6gf:gU6kfd;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:VruDBd;eHDfl:ofjVkb;eO3lse:nFClrf;fWLTFc:TVBJbf;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;hsLsYc:Vl118;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;io8t5d:sgY6Zb;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;lkq0A:JyBE3e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;p2tIDb:tp1Cx;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qGV2uc:HHi04c;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;uknmt:GkPrzb;uuQkY:u2V3ud;vGrMZ:lPJJ0c;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;xbe2wc:uRMPBc;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=Eox39d,GElbSc,HYSCof,KHourd,ajbYod,pHXghd,tIj4fb,vrkJ0e,xdV1C?xjs=s1"
Preview:	_F_installCss(".vSyRff.fC2KG{background-color:var(--xhUGwc);box-shadow:0 2px 2px 2px rgba(0,0,0,0.1),0 2px 6px 6px rgba(0,0,0,0.06)}@media (min-width:320px){.vSyRff.fC2KG{bottom:0;left:0;right:0}}@media (min-width:480px){.vSyRff.fC2KG{display:inline-block;bottom:20px}}.vSyRff.Y5Ip8c{background-color:var(--xhUGwc);border-radius:20px;bottom:40px;right:40px;box-shadow:0 4px 8px rgba(0,0,0,0.1),0 1px 3px rgba(0,0,0,0.06)}.jnyxRd.Y5Ip8c{border-radius:20px}.lgo9kc.vKW4md{opacity:.2;visibility:inherit}.vSyRff.vKW4md{-webkit-transform:translateY(0);transform:translateY(0);opacity:1;visibility:inherit}.lgo9kc{background-color:#000;-webkit-transition:opacity .25s;transition:opacity .25s;bottom:0;left:0;opacity:0;position:fixed;right:0;top:0;visibility:hidden;z-index:1000}.lgo9kc.GJyMZe{z-index:9998}.lgo9kc.SNco2{z-index:979}.vSyRff{-webkit-transform:translateY(100%);transform:translateY(100%);-webkit-transition:opacity .3s 0s ease-in-out,visibility .3s 0s ease-in-out,-webkit-transform .3s 0s eas

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (578)
Category:	downloaded
Size (bytes):	583
Entropy (8bit):	4.7653800587657
Encrypted:	false
SSDEEP:	12:u30WnrRhT0xt2BHslriFuJ2uukwuSmmmmmmmmGMkw4/ffffffff0wzC3:3Wn1hT+t2BHslguNuF5mmmmmmmmNmffg
MD5:	52D84C13CEC0D379677CB96C66F9E3F5
SHA1:	EC8492DC201F68236A2CF09F3F0227F8312F5AA0
SHA-256:	55E53CC330472E6142B1D0BDAD5356F2DCD8B2C932E28501AB2688C834811958
SHA-512:	F4D50A5976CB62FBFE32EEF682B0B52130CB222ACCE3B0C57B5DE7C0F6CE9109CDD7D793300BA2C1972B5D3D288B96021F2FF9EFE800390C3EF5B5CCF11C98E0
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.&oit=4&cp=4&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["104.",["104.3","104.3 the fan","104.1","104.5","104.7","104.5 the zone","104.1 krbe","104.9","104.3 my fm","104.1 radio"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[1251,1250,950,850,651,650,602,601,600,550],"google:suggestsubtypes":[[512,433,131],[512,433,131],[512,433,131],[512,433,131],[512,433,131],[512,433,131],[512,433,131],[512,433,131],[512,433,131],[512,433,131]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"],"google:verbatimrelevance":851}]

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	291714
Entropy (8bit):	5.199442518733921
Encrypted:	false
SSDEEP:	6144:7o75Ivj/5hVXmQ1hHp6YmZaPx6w0f6V/j:7sEj/5PXmQ1hHQYmZaPdS6h
MD5:	80FF50A38BC500802B1ABB2FFF818B8A
SHA1:	32DF2387EF3BA4C63FFCE7AD913591DC8D5688FC
SHA-256:	E3ADF4598D23486CA8181C950C4141648ECE4C14B42DF32C009200051528A371
SHA-512:	3D5D93A1C26100A4563C2F3A4514CEFEF1E4704342D05DA0F2E40CF734913AF8E99BD2A8B190E110513730D451B3474998778D36D4AFE2CFD28D8688FCE2640D
Malicious:	false
URL:	https://www.google.com/xjs/_/js/md=3/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA
Preview:	{"chunkTypes":"1000011111111001111000100001011010000001111111111111111111111111111111111111111011110111111111110101111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111101110111111111131011011111111111101111111111111110111111111111111111000110101111111111111111111111111111111111111111111111111111010100111121212121212121222222222212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121222121212121212121212212212121222121212221221212121212121212121212121212121212121212121212121212121212122121222221212221222222222221212111111111011011111111111111111111111111111111111111111111111111111111111101110101122311110101111110111131111111111111111111111111110111111111111111111111111111111

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 24652, version 1.0
Category:	downloaded
Size (bytes):	24652
Entropy (8bit):	7.991535968589447
Encrypted:	true
SSDEEP:	384:tWRPGBQntHHPd6PE5E6YmHdflgl0Eo1prsMV+5rKxOmtGPGCtZD7v6:x4BEPElVHEl0f1prs1wGOE6
MD5:	87C2B09A983584B04A63F3FF44064D64
SHA1:	8796D5EF1AD1196309EF582CECEF3AB95DB27043
SHA-256:	D4A4A801C412A8324A19F21511A7880815B373628E66016BC1785A5A85E0AFB0
SHA-512:	DF1F0D6F5F53306887B0B16364651BDA9CDC28B8EA74B2D46B2530C6772A724422B33BBDCD7C33D724D2FD4A973E1E9DBC4B654C9C53981386C341620C337067
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesans/v29/4UaRrENHsxJlGDuGo1OIlJfC6mGS6vhAK1YobMu2vgCI.woff2
Preview:	wOF2......`L.........._...............................b...?HVAR.X.`?STAT~'..../<.....D..i..$.0..".6.$..@. ..T. ........v .u'.(.n[...68...^...VQZQ...OHPc..m...jM....5.FZ1.e..H.D.....~.* ...>].N....6..4.....rG...$Sw....u........yD5LY;E...w5...[....1...i.$.<.E.\\|.~....G....[.G..gZ...i_\.\......O.#..1...t.....%.rI.t1..!.t..J(-.j..B+........t,....A;..kG..p?.....I#6......#m.;.S..^u.4.Q....mI<....}........F&.p.r.H2...Y........o.xc.......>...!...T...e.7..\|Z.i.R[Y.zC.Al..wb.?..9.. =..P(..v....9`.pxI..O9.}2.,..H...........^.q..c.....f..tVU.$.x....s....%hy.......fAKj..C....WP.....o...!.:).r......Al...>..G....G.....W...a.i}...0O..v...=^.D.x...\ST..U.4...#Pvv...GJ...0.W9.n.J..=.v......5A8&}.......y\-.t.......K?...)]........`&@.7.O3g_.4z.9H...C.&...24K......}.Z....h(T.._...&}.l.'....!.B<.?...D...e. i7 R......D:....@Jer"5Q.D{..Mv...&&.)sC..l........5}.."...S..v.A1.....$..9.....e\|z.....\..J....%#O...-......m.P2R2T...T.#.....0.y.,9...M1..!..N..g.>...SW.....1"b

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.787365359936825
Encrypted:	false
SSDEEP:	3:VG4UyAVcWSHEhsS6heP:VpfbWSH6AO
MD5:	E286A9C382E0F41312B7868547C392CA
SHA1:	0A4E3F7229AF129ED63F473C0CA9569452B9269C
SHA-256:	BC74D26A0E1FAAC7C6468B23F370CCEA26993D6BCAE113C665886725E4ADFCC0
SHA-512:	B74C1ED3EDBB86ECACA9A6D6AEBADA83694FD6AE1C4D9550CA0623FA64EA7D4255AE976AC60199708A59DBE30623B597B3FDAF0BD8010DBF43CCCBE7CB25D4EC
Malicious:	false
URL:	"https://www.google.com/async/asyncContextualTask?vet=12ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ4dMLegQICBAA..i&ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449&yv=3&cid=10194214981100978668&cs=0&async=_k:xjs.s.en_US.DNHITQOYOgk.O,_am:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.s.GGin1mxRzvU.L.W.O%2Fam%3DgB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKACAmXAAAsCGAADgg0MAAIAAAAACAACAwgEAABAgIABgAAAgAAAAAAAAHAABAAAgBAACBECAAJIQkIEAAEQwwQCkAgDDjwAAIIAEAAAAoEAAAAEDESA8hAABgACQQAQCIIIAACAHCAEAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAAAAAAQ%2Fbr%3D1%2Frs%3DACT90oGSC2kJ5MOZFnDJZQWz14iwbMFYQQ,_fmt:prog,_id:rNi7Zc"
Preview:	)]}'.22;["FMkrZviwC9-LwbkP7beSmAM","1995"]3;[2]0;3;[9]0;

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3409), with no line terminators
Category:	downloaded
Size (bytes):	3409
Entropy (8bit):	5.3825340256189715
Encrypted:	false
SSDEEP:	48:pTJR9OTOafN8fNDzt/lejdg5UIu9ThEuvAo7:N1od4tzajm5U9xh5L
MD5:	379E3CF909A1554EF7E25B25FEDCD916
SHA1:	50B9E7133DA16011DD0D43AB708DB2B59AAEA63E
SHA-256:	417F46B72DF2C7385E433551DF535B9AA81A5DF0A146F06E5D18F37E349E7364
SHA-512:	A92DEFCDE37C6D63FCE3AC26F1113F27D51E1E331B868C1882CD847E619C9FE7792F0037DA3BD60DA64A0ED7C8C4C43F050B04E8C88A7EDF882F7889A931B238
Malicious:	false
URL:	"https://www.google.com/xjs/_/ss/k=xjs.s.GGin1mxRzvU.L.W.O/am=gB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKACAmXAAAsCGAADgg0MAAIAAAAACAACAwgEAABAgIABgAAAgAAAAAAAAHAABAAAgBAACBECAAJIQkIEAAEQwwQCkAgDDjwAAIIAEAAAAoEAAAAEDESA8hAABgACQQAQCIIIAACAHCAEAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAAAAAAQ/d=1/ed=1/br=1/rs=ACT90oGSC2kJ5MOZFnDJZQWz14iwbMFYQQ/m=attn,cdos,gwc,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl"
Preview:	:root{--gS5jXb:#dadce0;--Aqn7xd:#d2d2d2;--EpFNW:#fff;--IXoxUe:#5e5e5e;--bbQxAb:#474747;--YLNNHc:#1f1f1f;--COEmY:#1f1f1f;--TMYS9:#0b57d0;--amnPwe:#5e5e5e;--JKqx2:#1a0dab;--rrJJUc:#0b57d0;--mXZkqc:#d2d2d2;--Nsm0ce:#0b57d0;--XKMDxc:#f7f8f9;--aYn2S:#ecedee;--Lm570b:#ecedee;--xhUGwc:#fff}.zJUuqf{margin-bottom:4px}.AB4Wff{margin-left:16px}.v0rrvd{padding-bottom:16px}@-webkit-keyframes g-snackbar-show{from{pointer-events:none;-webkit-transform:translateY(0);transform:translateY(0)}to{-webkit-transform:translateY(-100%);transform:translateY(-100%)}}@keyframes g-snackbar-show{from{pointer-events:none;-webkit-transform:translateY(0);transform:translateY(0)}to{-webkit-transform:translateY(-100%);transform:translateY(-100%)}}@-webkit-keyframes g-snackbar-hide{from{-webkit-transform:translateY(-100%);transform:translateY(-100%)}to{-webkit-transform:translateY(0);transform:translateY(0)}}@keyframes g-snackbar-hide{from{-webkit-transform:translateY(-100%);transform:translateY(-100%)}to{-webkit-transf

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	138
Entropy (8bit):	4.838860486166698
Encrypted:	false
SSDEEP:	3:VwZdLUxRyzwwBHsLpYJWriFGWjLwWkzXFETH1u4:Vw0Cz5BHsL2YriFGAwWeXFEL13
MD5:	CE55855A2F26FB487396CE846D795121
SHA1:	066AFDF4055274E1CDA76BF6653483D4BFBE9AB8
SHA-256:	D9A8EDD82E4F69227DE94A14583CB5CD20B0EBE18F7B31B9531E2A803F01DC49
SHA-512:	E34F7DC32A206C705BE168688511B52DA00BBCDF20EE00D18B50E0B0BE864B987EFA45DA190F749531EF49523B4D3EB38620CA0C2037ADC7E3CE4F18BE2A3222
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.142443&oit=4&cp=15&url=https%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&pgcl=9&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["104.94.109.142443",[],[],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggesttype":[],"google:verbatimrelevance":851}]

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (595)
Category:	downloaded
Size (bytes):	1671
Entropy (8bit):	5.3467612933899
Encrypted:	false
SSDEEP:	48:BkhIpel8e+mZ70TABZ7YGbQt/2Gbfstfz5ZhGt:BkhCmvZ8xCVO
MD5:	77532C616FDAC7BA9FB5D11FD4CF3FE4
SHA1:	CD9BE618CD7BFADB73E49E75B8FCDCF6F48E2A2B
SHA-256:	52854BF21A3D86120D39D3BFC1BCAB92F82D22A1679698CB2C0BE8A3A44579B6
SHA-512:	096172F108CA43EACF2505F21D258E022519D073443435406ED76D6C2A19FC5E27E50BA98FF98EF5FA0078A4DBDF4B1E8D7448D78FFBF536AC1D9E412BF041FE
Malicious:	false
URL:	"https://www.google.com/xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=kMFpHd,sy8s,bm51tf?xjs=s3"
Preview:	this._s=this._s\|\|{};(function(_){var window=this;.try{._.z("kMFpHd");._.scb=new _.ud(_.TLa);._.A();.}catch(e){_._DumpException(e)}.try{.var Bcb;_.Ccb=function(a,b,c,d,e){this.ulb=a;this.jQf=b;this.qpc=c;this.SYf=d;this.Uhg=e;this.mac=0;this.ppc=Bcb(this)};Bcb=function(a){return Math.random()Math.min(a.jQfMath.pow(a.qpc,a.mac),a.SYf)};_.Ccb.prototype.Pxd=function(){return this.mac};_.Ccb.prototype.vSa=function(a){return this.mac>=this.ulb?!1:null!=a?!!this.Uhg[a]:!0};_.Dcb=function(a){if(!a.vSa())throw Error("he`"+a.ulb);++a.mac;a.ppc=Bcb(a)};.}catch(e){_._DumpException(e)}.try{._.z("bm51tf");.var Ecb=function(a){var b={};_.La(a.vBc(),function(e){b[e]=!0});var c=a.Hzc(),d=a.nAc();return new _.Ccb(a.mAc(),1E3c.ka(),a.klc(),1E3d.ka(),b)},Fcb=!!(_.Eg[24]&2048);var Gcb=function(a){_.xn.call(this,a.Ka);this.Kj=null;this.wa=a.service.ARc;this.Aa=a.service.metadata;a=a.service.Kzf;this.ka=a.fetch.bind(a)};_.G(Gcb,_.xn);Gcb.nb=_.xn.nb;Gcb.Ga=function(){return{service:{ARc:_.wcb,metadata:_.s

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (547)
Category:	downloaded
Size (bytes):	1025634
Entropy (8bit):	5.611908488268644
Encrypted:	false
SSDEEP:	12288:yFUDERK3w/nkZdwvyLFlBWm8f0pLuBRPHSjNGSscKEii0ed:/DSKOAKvy7BWm8f0pLuBRqjNGSscFp
MD5:	171D89CCAC17BCE135E75387FBBB8149
SHA1:	B3A45FD978CBD6CF4C6F2AD862A907155D665247
SHA-256:	664882A000AD5312D15A5EFCA09DADB42E745D81EBEC908CE7639673D796E12A
SHA-512:	D13F4D7139BF375764641372A7D963D0BA8E35340F3EEEC910787F6ED431CEB06AFF2305BE71857964D9E6B4797943335C1730017E49961AF2DF015FB248C353
Malicious:	false
URL:	"https://www.google.com/xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=1/ed=1/dg=2/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf,FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KeeMUb:HiPxjc;KpRAue:Tia57b;LBgRLc:XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe,KG2eXe;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;PqHfGe:im2cZe;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO,fTfGO;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VsAqSb:PGf2Re;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YV5bee:IvPZ6d;YkQtAf:rx8ur;ZMvdv:PHFPjb;ZWEUA:afR4Cf;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bDXwRe:UsyOtc;bFZ6gf:gU6kfd;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:VruDBd;eHDfl:ofjVkb;eO3lse:nFClrf;fWLTFc:TVBJbf;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;hsLsYc:Vl118;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;io8t5d:sgY6Zb;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;lkq0A:JyBE3e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO,fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;p2tIDb:tp1Cx;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qGV2uc:HHi04c;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;uknmt:GkPrzb;uuQkY:u2V3ud;vGrMZ:lPJJ0c;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;xbe2wc:uRMPBc;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=attn,cdos,gwc,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl"
Preview:	this._s=this._s\|\|{};(function(_){var window=this;.try{./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var eaa,faa,oaa,qaa,raa,saa,taa,uaa,vaa,waa,xaa,yaa,Caa,Aaa,zaa,Daa,Baa,Eaa,Gaa,Faa,Haa,Iaa,Jaa,Laa,Maa,Saa,fba,lba,uba,wba,Aba,Bba,Gba,Hba,Kba,Oba,Pba,Rba,Uba,Tba,Wba,Lba,Ya,Xba,$a,bca,cca,ica,mca,pca,qca,db,tca,vca,xca,Aca,Cca,Dca,Fca,Lca,Nca,Wca,Xca,Yca,Uca,Zca,Tca,$ca,Sca,ada,bda,cda,ida,kda,lda,sda,tda,uda,xda,yda,zda,Ada,Bda,Eda,Fda,Ida,Gda,Nda,Oda,Uda,Vda,Xda,Wda,Zda,aea,$da,cea,bea,fea,eea,hea,jea,lea,mea,qea,sea,tea,vea,xea,Fea,Gea,Hea,rea,uea,Jea,Kea,Oea,Tea,Uea,cfa,Zea,efa,ffa,Wea,ifa,.jfa,gfa,ofa,pfa,qfa,tfa,ufa,Xea,sfa,wfa,yfa,Cfa,Dfa,Ffa,Kfa,Ofa,Qfa,bga,dga,fga,gga,tga,vga,yga,Aga,Cga,Ega,Gga,Iga,Jga,Lga,

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	2408507
Entropy (8bit):	4.730146914440242
Encrypted:	false
SSDEEP:	12288:PaXL+PjOqzxwKIVmRWP1qMfralJAKLekEitBki5u3bmicrAwDFWvXUesv/lgdiQk:n
MD5:	780172CB0BB1C779E30A978430FDA0D5
SHA1:	02059B9F5C19A0E5565E72E5FE1AB6089FBB8FA7
SHA-256:	6E363BA646E3AEA5D8F3F2FE469A4FA15A85C71A7320DBA71B5E738718CB01DA
SHA-512:	EDBFE599AB84F404C0051C4EB15AC276BDD338AA0086888BDC25A422A35F7A7F9EFFF60D09BB0A56C2A369A4CB3DE924F59A3903925DD3D7D111C47E87BBE3F3
Malicious:	false
URL:	https://www.google.com/logos/fnbx/zrp/full_yeti.json
Preview:	{"v":"5.5.10","fr":24,"ip":0,"op":1165,"w":411,"h":250,"nm":"EXPORT","ddd":0,"assets":[{"id":"comp_0","layers":[{"ddd":0,"ind":1,"ty":0,"nm":"ripple_anm","refId":"comp_1","sr":1,"ks":{"o":{"a":1,"k":[{"i":{"x":[0.833],"y":[0.833]},"o":{"x":[0.167],"y":[0.167]},"t":962,"s":[50]},{"i":{"x":[0.833],"y":[0.833]},"o":{"x":[0.167],"y":[0.167]},"t":971,"s":[100]},{"i":{"x":[0.833],"y":[0.833]},"o":{"x":[0.167],"y":[0.167]},"t":1191,"s":[100]},{"t":1197,"s":[0]}],"ix":11},"r":{"a":0,"k":-0.745,"ix":10},"p":{"a":1,"k":[{"i":{"x":0.52,"y":0.955},"o":{"x":0.48,"y":0.045},"t":962,"s":[700,456,0],"to":[-0.667,0,0],"ti":[-0.083,0,0]},{"i":{"x":0.52,"y":0.96},"o":{"x":0.48,"y":0.04},"t":976,"s":[696,456,0],"to":[0.083,0,0],"ti":[0,0,0]},{"i":{"x":0.52,"y":0.96},"o":{"x":0.48,"y":0.04},"t":990,"s":[700.5,456,0],"to":[0,0,0],"ti":[0.25,0,0]},{"i":{"x":0.52,"y":0.941},"o":{"x":0.48,"y":0.059},"t":1004,"s":[696,456,0],"to":[-0.25,0,0],"ti":[0,0,0]},{"i":{"x":0.52,"y":0.94},"o":{"x":0.48,"y":0.06},"t":101

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	742
Entropy (8bit):	4.715663467051154
Encrypted:	false
SSDEEP:	12:t4noU/vmRsSL10UclAEBTFMYNIE5Au/JXl+51tntkB3xYhyUQk2LrtmSEebfuFd3:t4oU/vyB0U4AORNZHt851VtkRUQhrlBU
MD5:	EDD0E34F60D7CA4A2F4ECE79CFF21AE3
SHA1:	2CC789A02534557380D92124E2F8B9483D198FB3
SHA-256:	ED9087D76CDC6D1C53698F6068F79872E77E87C8D012C0CFDAD13B05B6CCB37C
SHA-512:	CE9D50913CAD41D11C7B3963C90788301B63EE1FFFFF73108E9F8709CA0A9FCC6170853A65A820FBF020628B403813C9E3CD262389FEB7D17A6C73C2F724394F
Malicious:	false
URL:	https://fonts.gstatic.com/s/i/productlogos/googleg/v6/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92c-.26 1.37-1.04 2.53-2.21 3.31v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.09z" fill="#4285F4"/><path d="M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z" fill="#34A853"/><path d="M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.07H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.93l2.85-2.22.81-.62z" fill="#FBBC05"/><path d="M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.07l3.66 2.84c.87-2.6 3.3-4.53 6.16-4.53z" fill="#EA4335"/><path d="M1 1h22v22H1z" fill="none"/></svg>

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/api2/refresh_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56412), with no line terminators
Category:	downloaded
Size (bytes):	56412
Entropy (8bit):	5.907540404138125
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBblxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0BbchXwW49z2
MD5:	2C00B9F417B688224937053CD0C284A5
SHA1:	17B4C18EBC129055DD25F214C3F11E03E9DF2D82
SHA-256:	1E754B107428162C65A26D399B66DB3DAAEA09616BF8620D9DE4BC689CE48EED
SHA-512:	8DC644D4C8E6DA600C751975AC4A9E620E26179167A4021DDB1DA81B452ECF420E459DD1C23D1F2E177685B4E1006DBC5C8736024C447D0FF65F75838A785F57
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	69
Entropy (8bit):	5.055927493255114
Encrypted:	false
SSDEEP:	3:V2JRUtOdLUxRyYMvHBwdHV:V2JR2RCYuBWHV
MD5:	9BD9843151E1E273B322C761C25D69F6
SHA1:	DE2B57A02C6C300111809BB7C0162F3FA1A1D6BD
SHA-256:	8B7DED946011737A6AFD0EEFA83032C08B3F90B39DD702D1CED75764383CCC06
SHA-512:	DD6F05DEAD0DCDD7B8F7280508A1D2940D7B5D1ABB484E57D28DE1E508640A2A8A39C2CEA61860F4EB3B58DDA3678CD87C8237170A84B49BBB77388639F4B024
Malicious:	false
URL:	https://www.google.com/complete/search?q=104.94.109.142443&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=3&hl=en&authuser=0&pq=104.94.109.142443&psi=C8krZr7QHOyTwbkPuNyGwAw.1714145550203&dpr=1&ofp=EAE
Preview:	)]}'.[[],{"i":"104.94.109.142443","q":"dEOUFTwK-EXBmCnbd7CLItzkyT0"}]

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	660
Entropy (8bit):	7.7436458678149815
Encrypted:	false
SSDEEP:	12:CPgCZ+X6xCDzNAs1dVc1rhVbo50xCmGjkm9vgZAO2YCGoOg/t+YcJNw:KZ+iC134tFoOxC3/vO2YCpR8YcJNw
MD5:	C3DFF0D9F30EC0BCF4DEC9524505916B
SHA1:	4B378403ACBEBC3747E08C69B5FD7770A850C9EB
SHA-256:	73D788F86BE22112BB53762545989C0F1BBDB7343161130952C9BA3834FF81E3
SHA-512:	677EA304D00D176ACF61FF68BF23BD5F77AD2928D7DE9F4B842292BC9D3FB7029FE9F578B62F142DCE689230F392E828098EED3484FE2DBEE6E1A7AA5378E2C6
Malicious:	false
URL:	https://www.google.com/images/searchbox/desktop_searchbox_sprites318_hr.webp
Preview:	RIFF....WEBPVP8L..../'....Hv.=n.......Q...a..(Rv.o..U.....l..m........0l.6l..f.......A?B.C.A...2h..Ag0....G8.n#)R.j.x..P.F..I;.Ox......7-...bX./..]...3..T....5...x...G.C....%.u.....u/._.=....<!q.\...9.....\....p:..P.4.aS.N).>.>.."..9..Vh ....no....l.1..#6p\c..2..>..=8...........FP.^....+/.~......hs..D.Jm..9...r....t*.H..~T^\|.....l..l......he..}f....d.."....K...&1..................pl.Pf.%6...2X..I...eXQ(.K..1%c..w.s._..._K`K.1}..D.E=...<..ytM..>.q'.e.L.~$...b..;k.M.....t\O..m.I._..F....'........z.]..u?~..P.zJM.. k...p~9..D....".Zl$?f..+...\.Pg..%...;.[R>N.#.W.e..@q...(....]&......K.......?.\|.z..(...:&m.V.C.'...D^.R....

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17673)
Category:	downloaded
Size (bytes):	18268
Entropy (8bit):	5.619856960314813
Encrypted:	false
SSDEEP:	384:Va/VuX6x1E4rZ5gIcAGn5o86/TZeIeaedo/939zg:Ukqxe4rZ5gIcAGnQ/tEaeE9C
MD5:	9FBB8606566EBF96C502666BFFFD254A
SHA1:	FEB80CB296B30432EC659D7EEDFE3C6022A450E2
SHA-256:	9644D7AB8F581B9FDE8F5C3B9B84FD370FF52F1D4E71DD60B5E590A6C7D5FD39
SHA-512:	7C9C38D0710B52EE4761EEAC4E50BB8F5E319C5AFA49253888D0F45B42DB03DE244181AF62A0BC0431D0AB963AB04A5FD2263907CE0B1188BCB1F6954622204C
Malicious:	false
URL:	https://www.google.com/js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var f=function(R,N){if(!(N=(R=e.trustedTypes,null),R)\|\|!R.createPolicy)return N;try{N=R.createPolicy("bg",{createHTML:p,createScript:p,createScriptURL:p})}catch(P){e.console&&e.console.error(P.message)}return N},p=function(R){return R},e=this\|\|self;(0,eval)(function(R,N){return(N=f())&&1===R.eval(N.createScript("1"))?function(P){return N.createScript(P)}:function(P){return""+P}}(e)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var Re=function(R,N){return R[N]<<24\|R[(N\|0)+1]<<16\|R[(N\|0)+2]<<8\|R[(N\|0)+3]},d=function(R,N,p){if(438==R\|\|331==R)N.X[R]?N.X[R].concat(p):N.X[R]=N_(p,N);else{if(N.ri&&247!=R)return;466==R\|\|163==R\|\|161==R\|\|301==R\|\|172==R\|\|120==R\|\|59==R\|\|298==R\|\|344==R?N.X[R]\|\|(N.X[R]=PR(N,p,R,142)):N.X[R]=PR(N,p,R,49)}247==R&&(N.h=q(false,32,N),N.R=void 0)},eZ=function(R,N,p,e){W((e=V((p=V(R),R)),e),R,z(N,Z(p,R)))},sH=

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
Category:	downloaded
Size (bytes):	3816
Entropy (8bit):	7.886647837865654
Encrypted:	false
SSDEEP:	96:yEGmVJfh8jNgi/ND9SVHcySGdGmjEoBT67Uqr:yPmz5Cz/NDeyGEoM7dr
MD5:	12F5E274D0B544AEC9DEAA1FA14EFB37
SHA1:	ABACB1DB9A1DD43F2C03C3CF1DFA7D5ED34E7C9C
SHA-256:	C4CBF0B78211FE7634404C08DB2E02EDFAC99DE9F3AF65F590620DFE5B142555
SHA-512:	51C8E3366909B2A4B4932D2D8D4E4CD4223CA8C20A2F5F3B4411B924C59FF3F210114BA78E8A95E043F0C2F02522F7200F6E2AFB0A299C648C2D3402278CC014
Malicious:	false
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA4qo7BvEsw6c5x7L0zWkwDxk41s4QXBFq-UTbLoYi4mYg5pWAHsT9vh8DMhbPPHIyjECIZ4cYU41ywyA8hdRigYZQJnKI4_I3uv32GImq_xmDdqm2nF9i9bAfGu7AlTCwBDt7YWEwIJ3RtEJzTJZfrDDqE8Eyg8H6v_CVaI8sLZw3REAQxg9HgOdQ_aRKGSEE8JfJrWqTp2iL71Gqv5cBxUH_2LMA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=d14cdf2cf524340b
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................d.d.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....E.f.O.G...f..B...z.8\.`t.P<[ .9f..Ol.#...{sX."Y<..$\|.......!.O.j..m.F.......z..G.6.'..O..X......rz...5 .....N..g.RZ...v.#..q.z...dF.@.....A.2JY..W..ZU..../.x..G.. 7.....1I.-..... ..CE.>T..e,@..=..G-.C..Kd........R...T.-.y\dl......u....6h......1.jW...b....cxR...X.s..*F.\:..3.}...,.<~T.. ......FQ\.T..=rj. ..`.$Tn.I.. y..T..z.E...o.........S..83".9.u.

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (648)
Category:	downloaded
Size (bytes):	653
Entropy (8bit):	4.942122925787019
Encrypted:	false
SSDEEP:	12:uIBXEmww/HCi/BHslriFuZs0F7kwuZw4/ffffffff0wzC3:7B+wPP/BHslguZs0F7FTmffffffffV+
MD5:	D84312C9C30A6D819F2223401CD34BF4
SHA1:	4DE7FB24F375E03B07A2BD7E755F82E49A98942A
SHA-256:	FC161F4113435219FCF5CD20D6D8872AA9C39C42EA0D13E8FDEF8EA7EE263AB2
SHA-512:	39EA9ACEBACF277C3AFEB0D9BEFF595F4DDEAABB6B5689762535B40BCE9242D2DA7B9CFA01CF008F5CC4CDD388798A673B41600651E950BBFCC726871570448F
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.&oit=4&cp=7&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["104.94.",["104.94 us to canadian dollars","104.94 in pounds","104.94 dollars in pounds","104.94 to dollars","104.94 pound sterling to us","104.94 kg to pounds","104.94 in us dollars","104.94 pounds in us dollars","104.94 x 20 percent","104.94 pound sterling"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[601,600,557,556,555,554,553,552,551,550],"google:suggestsubtypes":[[30,15],[30],[30,15],[30],[30,15],[30,15],[30,15],[30,15],[30,15],[30,15]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"],"google:verbatimrelevance":851}]

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15340, version 1.0
Category:	downloaded
Size (bytes):	15340
Entropy (8bit):	7.983406336508752
Encrypted:	false
SSDEEP:	384:F2gPJde0V2iGrQyD8b3k/tigCdeNqOUd47SH0tsGm:4gPVV2NQE8b3ldeNWH0Wb
MD5:	19B7A0ADFDD4F808B53AF7E2CE2AD4E5
SHA1:	81D5D4C7B5035AD10CCE63CF7100295E0C51FDDA
SHA-256:	C912A9CE0C3122D4B2B29AD26BFE06B0390D1A5BDAA5D6128692C0BEFD1DFBBD
SHA-512:	49DA16000687AC81FC4CA9E9112BDCA850BB9F32E0AF2FE751ABC57A8E9C3382451B50998CEB9DE56FC4196F1DC7EF46BBA47933FC47EB4538124870B7630036
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
Preview:	wOF2......;........d..;..........................d..z..J.`..L.Z..<.....\..`..^...x.6.$..6. ..\|. ..8..z%......Q.{..q...FF.kd .8.(..d..).!C...Y.JA...r. ..GH8F......nW...".2&....2<..+C...p...b..SC.......J......z.-..Q..#6&1zUe../\...l.....<.....9s...E~.]B-..B.wY..o......Q..A.F..1j.......-.`P% .. ,..@1.0..~.....WWW.d.u<c{..^.R.+..w....&.........A......+C....(.N.....0.~..0.J.;.Nu..7....]..m.H.....[h.GL3....?)....c.H...2.3.}y........SXI\|..iVN'%E.D.W....r..<`....i....6;E$.....U.$j.@...._.......R2....WS...k.vz.R.'a9!^...N....h.._.....c.%."..S.2.16B...o.2}.pmU[.\|.LI....2.....OWQLO1-....s..8.(...".\|6...6R.. ..M-.zO.}w)..v..mXxX...c..3#.+.v....F`.Z;.zQ.......r,....Yo.....g.h....+.....O.3Y..)Y.8.!....elX......._.3.}k~u.{ C..H.z..FP........@...d..)T.R...L.H.J.j.@..............$...E......y...3.b...I.h u.+%.HA.\..9..8..X.!....gx...].:..V..C...._..X..!....6..)...GM:E.....O.Z.}k.;.T.k..D.k.O..D5.r..."......?..T.Q.A...CF...3g.5.Dn<.QPy..G..1.9..Q..0..

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3358)
Category:	downloaded
Size (bytes):	196039
Entropy (8bit):	5.512503961685282
Encrypted:	false
SSDEEP:	3072:T6BIHOnrcst5vSvfXpegfQdG7l+Qu3dXshJBLPKL8trnX/9cnNtJxYGraIWiKeD2:T6BIHOrpSvfXffQd+l+Qu3dXshJBLPKe
MD5:	878A30ED051ECFF9E54FA507C857AFF3
SHA1:	48B15B7D623B4B1C533F2C07042CA0FB954C0B22
SHA-256:	FCBA42D51AB544FF9EA5F0B41EFE9B7A7F8B3C15168A0617E98E93FF4A614DA0
SHA-512:	9B82575BA7E464DB744F5C5C220D99B31C43DB8E41542297D46394C54F4F6B6F300D52E11F4DA7966224A02BBC22F04CAAE7EF900914F6BC88962D79F4C5C3CC
Malicious:	false
URL:	"https://www.gstatic.com/og/_/js/k=og.asy.en_US.kBLMVDKX4fE.2019.O/rt=j/m=_ac,_awd,ada,lldp/exm=/d=1/ed=1/rs=AA2YrTva3rN3u6PWebBoOFggZ2s8VJZvhA"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);.var aa,ba,ca,da;aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};ca=ba(this);.da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}};da("globalThis",function(a){return a\|\|ca});da("Promise.prototype.finally",function(a){return a?a:function(b){return this.then(functio

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/api2/audio_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (567)
Category:	downloaded
Size (bytes):	572
Entropy (8bit):	4.825588930295442
Encrypted:	false
SSDEEP:	12:utkd5lnpBizrv8WBHslriFuk8PF7kwuuELw4/ffffffff0wzyV:FRnkUWBHslguk8PF7FdE8mffffffffVo
MD5:	41E0A4E454A4C03BA8AA97F79719F356
SHA1:	61D31E5012198A8CEFF476258F7A040E8DD31C90
SHA-256:	9C3245767580983E6414B0E75BB6DD72FBCB397EBE6A251E18DDDF9D57718F44
SHA-512:	C483B4CF58503E26681AEDE85985C5CA3B07877D5BE5B6F8F3A9A90F30AB7DEC342025E07FDD271FA8F0C5520ED3008C3009ADA8AAB1A4712942C6E99F1BC2D1
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104&oit=4&cp=3&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["104",["1040","1040 tax form","1040 instructions","104.3 the fan","1040 instructions 2023","1042-s","1040 form 2023","104.3","1040 schedule 1","1040x"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[1100,700,601,600,555,554,553,552,551,550],"google:suggestsubtypes":[[512,433],[512,433],[512,433],[512,433,131],[512,433],[512],[512,433],[512,433,131],[512],[512,433]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"],"google:verbatimrelevance":1300}]

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (880)
Category:	downloaded
Size (bytes):	8305
Entropy (8bit):	5.432688968202098
Encrypted:	false
SSDEEP:	192:wx+dVkcbAVrz8TJhaNG9KnDupcmVu4phGElcMTKCbnaUYvxOD4q:wx+/kcbAVrz8TJhaNG9CMcmV/phPTWpg
MD5:	2A2643C7961450362B92BCAA8550558A
SHA1:	43BC5FFA20585AAED903B96D6555B0B8C665A4C9
SHA-256:	4A0FFC41E07AA652945C148D1FB565452F820E81EE2FF7CDE199E48EC591FD49
SHA-512:	254292F761558BBC125BBC7C4717B6F64E0D1443391D0EB09FC18A014E7C1A7A8EEB5DEC330EBECE2C4B14A590A2F1C24822DD9D2C964001E2A90D5871BF838E
Malicious:	false
URL:	"https://www.google.com/xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=sy3zk,sy4e6,w4UyN,sywu,sywv,EbPKJf,sy4tu,sy72c,J9Q59e,sy4tv,a6Sgfb,Tia57b,KpRAue,sy1kd,NyeqM,sy2t9,sy2ta,O9SqHb?xjs=s3"
Preview:	this._s=this._s\|\|{};(function(_){var window=this;.try{._.euk=_.On("Lhx8ef");.}catch(e){_._DumpException(e)}.try{._.BWk=_.C("w4UyN",[]);.}catch(e){_._DumpException(e)}.try{._.z("w4UyN");.var Mcv=function(a){_.F.call(this,a.Ka);this.ka=!1;this.oa=_.dd("elPddd");this.rootElement=this.getRoot().el()};_.G(Mcv,_.F);Mcv.Ga=_.F.Ga;Mcv.prototype.wa=function(){if(""===_.y.getStyle(this.oa,"transform")){if(_.rt(this.rootElement),_.cf(document,_.euk),!this.ka){var a=_.Iu(new _.Gu,_.Hu(134634));_.cf(document,_.Ju,{Is:a});this.ka=!0}}else _.y.setStyle(this.oa,"transform","");this.yb("suEOdc").setStyle("visibility","hidden")};.Mcv.prototype.showTooltip=function(){this.yb("suEOdc").setStyle("visibility","inherit")};Mcv.prototype.qn=function(){this.yb("suEOdc").setStyle("visibility","hidden")};_.J(Mcv.prototype,"LfDNce",function(){return this.qn});_.J(Mcv.prototype,"eGiyHb",function(){return this.showTooltip});_.J(Mcv.prototype,"HfCvm",function(){return this.wa});_.Pq(_.BWk,Mcv);._.A();.}catch(e){_._Du

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (537)
Category:	downloaded
Size (bytes):	1637
Entropy (8bit):	5.053689630638126
Encrypted:	false
SSDEEP:	24:BOcFQhjb/kNYwQmMdfVaH4hIZ/rUr0wgLWl0Zj8OAlSnv1Rrde641yO1wOXyPX48:Boj9V7dNa4heAgwgIcHheu0wBPI6h
MD5:	4C21B4FC61FE49F8D896745F3F47C0D9
SHA1:	A0B65812ED9F594784C55F4295462CAE9AD9C10C
SHA-256:	5A2790ED6130F5FC1A4DD1FDA856894F60825F4AE1F50B3A4C28ADF55056E1A8
SHA-512:	A25287EC9DF2ED99FAAA38E12AF12242F04C13DEBEC93B936D515BF232905416FADBFB16139E240615674053BFAB2E959C8DB6DD30CEA810DC4B3042419DD503
Malicious:	false
URL:	"https://www.google.com/xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=syfc,syfd,aLUfP?xjs=s3"
Preview:	this._s=this._s\|\|{};(function(_){var window=this;.try{._.btb=function(a){this.Om=a};.}catch(e){_._DumpException(e)}.try{.var ctb=function(a){_.xn.call(this,a.Ka);var b=this;this.window=a.service.window.get();this.wa=this.Om();this.oa=window.orientation;this.ka=function(){var c=b.Om(),d=b.eNb()&&90===Math.abs(window.orientation)&&b.oa===-1window.orientation;b.oa=window.orientation;if(c!==b.wa\|\|d){b.wa=c;d=_.n(b.Ge);for(var e=d.next();!e.done;e=d.next()){e=e.value;var f=new _.btb(c);try{e(f)}catch(g){_.ca(g)}}}};this.Ge=new Set;this.window.addEventListener("resize",this.ka);this.eNb()&&this.window.addEventListener("orientationchange",.this.ka)};_.G(ctb,_.xn);ctb.nb=_.xn.nb;ctb.Ga=function(){return{service:{window:_.yn}}};ctb.prototype.addListener=function(a){this.Ge.add(a)};ctb.prototype.removeListener=function(a){this.Ge.delete(a)};.ctb.prototype.Om=function(){if(dtb()){var a=_.pl(this.window);a=new _.Yk(a.width,Math.round(a.widththis.window.innerHeight/this.window.innerWidth))}else a

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1149)
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	5.681158649220812
Encrypted:	false
SSDEEP:	24:j2AH3BHslgTGjZHsfVk32kXJx1UvOLN2ls88uZs0F7FK2qmq9qmQfffff0uV:HH3KlgTSZHs9kmkXKOh2lszuZsEFyqmU
MD5:	0EE55DC039286D3584FEC35812FD5857
SHA1:	D2354A12AFD87C225279CC144BA68ED30D5E7782
SHA-256:	EEF07892FFE8E291AE16F8B2BBEB304CA202D763C0777D867BB7C96434B94D04
SHA-512:	82AEC344356C27DBC64E4A463DD24F9B9322DA4CFF7ABCF2D8396375816FF068A94714ED13AD17DC61E17B32357D45C287927E5E96E8845C92BFC240257781E6
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=10&oit=4&cp=2&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["10",["10 minute timer","10 minute timer","1099","10 year treasury","1040","1099 form","10 year treasury yield","1040 tax form","1001 games","1099-k"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{},{"google:entityinfo":"Cg0vZy8xMXZ5YzRxbTdqEhRTb25nIGJ5IE9ubGluZSBUaW1lcjoPMTAgTWludXRlIFRpbWVyUj9nc19zc3A9ZUp6ajR0VlAxemMwTEt0TU5pbk1OYzh5WVBUaU56UlF5TTNNS3kxSlZTakp6RTB0QWdDZHJ3b2lwAg\u003d\u003d"},{},{},{},{},{},{},{"google:entityinfo":"Cg0vZy8xMXRtc3JmODk2EgtBcmNhZGUgZ2FtZTJkaHR0cHM6Ly9lbmNyeXB0ZWQtdGJuMC5nc3RhdGljLmNvbS9pbWFnZXM/cT10Ym46QU5kOUdjUkZheWR5RWpjV1lEa0lKMXl5M0wtTUMtTDgySkNRdU10dXdMN1o0SzAmcz0xMDoKMTAwMSBHYW1lc0oHI2EzMDcxN1I5Z3Nfc3NwPWVKemo0dFZQMXpjMExNa3RMa3F6c0RRellQVGlNalF3TUZSSVQ4eE5MUVlBYVhRSGhncAQ\u003d"},{}],"google:suggestrelevance":[601,600,557,556,555,554,553,552,551,550],"google:suggestsubtypes":[[512,433,131,355],[512,433,131],[512,433],[512,433,131],[512,433],[512,433],[512,433,131],[512,433],[512,

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAk8dqZYMe7mkRIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3
Category:	downloaded
Size (bytes):	3591
Entropy (8bit):	7.834515724253598
Encrypted:	false
SSDEEP:	96:pv1vKO1C/2fRq1wP4U9xBTt2yNl8O6ajN5h:pvZW2fRqyP4U9N2mlDh3
MD5:	0D4BC88A69EB1A40B15490C97C9F375F
SHA1:	8179AE37EB83A3530C23FCA24D3D8B53ACA7FA5C
SHA-256:	9CE7960CD9065761E9529861AA8E334D50F69A694FA9D57EF16390E9DB5869C5
SHA-512:	B55B232C6D6AA77D316FDA947A1FC1FE93000117071AE0F9E82F5AA381FC02CAB446E3C91FEFC506F01BF759325B3869880F319879B458FA8E488F7684FE4D9A
Malicious:	false
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcRFaydyEjcWYDkIJ1yy3L-MC-L82JCQuMtuwL7Z4K0&s=10
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......@.@..........................................4..........................!1.A"Qaq..2..#B..b...r.................................7........................!1..AQaq"......#2B.....3Rr...............?.k?g...d..F....$....I'^..\.\......P.s"..R..%.T.s.#.v5+f\..p.$;,DS.Kr$)vC...........X..S{F.xK.e).N...s...z.Oi..o[....-zM.[JA;'.].\|f...q.K. (.$......... T..f..]y..,.p9.X;.I....`....7.'.\|c.z.E.h.\|C......T....u.o.......q.o"....i8.Cc..N..1T... Nfk.`.m...Y....;.pN.ALR.C.m.0D..Q.Fg....zJt8..2.H.Q.iN...B.J@.5P.T.T..{\|..h.>..ZL..y.Y..i. .@.7.].jl.h...L.%%X.....I.2.ef.P1).\i.N:.....U..\X..\|g....Y../l.m..(c....../.Vg..Y..3......$7.>..O..E...\|.(-....\|.tX2.p]p$..3..P..dTf+......Im...r./..1_n..%S.H.G........ X.+.!-.<S._=).\....w3%>Lv...%~4$.@./..rN..7...9.A.y...'c..7B....]g.S..P..QH..FB...-.h@U..q....b....Ig.Am......

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8478), with no line terminators
Category:	downloaded
Size (bytes):	8478
Entropy (8bit):	5.162670033776272
Encrypted:	false
SSDEEP:	192:wKLBtB3BDlHGOoZC02pl/TU+4RHrECktfqqMghR:wKKZCi+N
MD5:	2B6E494F00DE071FFA385E06CB6B171C
SHA1:	0E98C9D3A6B23673E867140D690A54CBD2CB134F
SHA-256:	67E576D9CE560B0FFBECDEA9C99161A00D593ECDDB6A959CB77A2E8A9A038C29
SHA-512:	02CFEFBE0A23D6CE88768037CE1B8C2B1AEE9D30E4C6F369CE4A103DE7459D8CF42858F1E5BAFC13B49725289B88F71459596FFCCC44E15EEC2E243B4BB9CF12
Malicious:	false
URL:	"https://www.gstatic.com/og/_/ss/k=og.asy.bIA1CpwlB5E.L.W.O/m=ll_tdm,adc,ll_fw/excm=/d=1/ed=1/ct=zgms/rs=AA2YrTvRnupN-0aaYyofXIRtLK72TOHuJQ"
Preview:	.gb_3e{background:rgba(60,64,67,.9);-webkit-border-radius:4px;border-radius:4px;color:#fff;font:500 12px "Roboto",arial,sans-serif;letter-spacing:.8px;line-height:16px;margin-top:4px;min-height:14px;padding:4px 8px;position:absolute;z-index:1000;-webkit-font-smoothing:antialiased}.gb_Hc{text-align:left}.gb_Hc>*{color:#bdc1c6;line-height:16px}.gb_Hc div:first-child{color:white}.gb_d:after{content:"";position:absolute;inset:-4px}.gb_d{-webkit-border-radius:50%;border-radius:50%}.gb_d:hover{background-color:rgba(60,64,67,.08)}.gb_d:focus,.gb_B[aria-expanded=true]{background-color:rgba(60,64,67,.1)}.gb_d:active{background-color:rgba(60,64,67,.12)}.gb_d:focus-visible{outline:1px solid #202124}.gb_i .gb_d:hover{background-color:rgba(232,234,237,.08)}.gb_i .gb_d:focus,.gb_i .gb_B[aria-expanded=true]{background-color:rgba(232,234,237,.1)}.gb_i .gb_d:active{background-color:rgba(232,234,237,.12)}.gb_i .gb_d:focus-visible{outline-color:#f1f3f4}.gb_c:hover{background:#1b66c9;-webkit-box-shadow:0

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	55
Entropy (8bit):	4.665285568338219
Encrypted:	false
SSDEEP:	3:Vmoyc12mKcS6heP:VmoyZmKQO
MD5:	42278BB63E6BDB4846017CA670364A07
SHA1:	20F7FB92CD2CA4E9C8DAB98BFE01CF2CE0ABC0B7
SHA-256:	1B67091C31EE65E2B82CA0C6787715B30E5422EB720C2E29F11F8A483E88AE85
SHA-512:	90FAE5866A1B858D1B054EB2D58D241C31AF324627EC1DE94AE93BB96AC7DF1372D197FD7408E127F3242E122D3AA923113BD7FC587AE6A53EDD4DE38E64908D
Malicious:	false
URL:	"https://www.google.com/async/asyncContextualTask?vet=12ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ4dMLegQIBhAA..i&ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449&yv=3&cid=4586455008918215834&cs=0&async=_k:xjs.s.en_US.DNHITQOYOgk.O,_am:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.s.GGin1mxRzvU.L.W.O%2Fam%3DgB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKACAmXAAAsCGAADgg0MAAIAAAAACAACAwgEAABAgIABgAAAgAAAAAAAAHAABAAAgBAACBECAAJIQkIEAAEQwwQCkAgDDjwAAIIAEAAAAoEAAAAEDESA8hAABgACQQAQCIIIAACAHCAEAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAAAAAAQ%2Fbr%3D1%2Frs%3DACT90oGSC2kJ5MOZFnDJZQWz14iwbMFYQQ,_fmt:prog,_id:rNi7Zc"
Preview:	)]}'.21;["FMkrZpvZMreZwt0PnberCA","1995"]3;[2]0;3;[9]0;

Static File Info

General

File type:	PDF document, version 1.7, 0 pages (zip deflate encoded)
Entropy (8bit):	7.121610291739483
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	Invoice INV-0003.pdf
File size:	41'427 bytes
MD5:	bb2c9ef5ae7baab6b4b2149e0b079506
SHA1:	8b8a386f503169e5cf84e68e30f7c94d64c8be21
SHA256:	ed8acf198b741d8f45bb39f078000262a73267414251948cb5b12da679ee3357
SHA512:	c805a795f054477b61c2d6399e2cf2eb7fc136e731ba88b8387ba36163dfce76bd8f3c37087d455d1177b82814d20d379cb43f341f6e4776d25777c029f0475a
SSDEEP:	768:zCpdCLaqIX0VfDk5LK4gMfnRCIYnnP0yB7jYkZZ/zk4Yjp7IwxCDdoK6rF80lUgf:7dWG4gMzOP0CRrk4Yu5JhkFregf
TLSH:	5F139EC8E165EE5CDC21EEB870563A1991FDF0C28BCA46B775C94E8A40C0A7CBDD05E6
File Content Preview:	%PDF-1.7.%........1 0 obj.<</Version/1.7/Names 8 0 R/Outlines 2 0 R/Pages 3 0 R/Type/Catalog/Metadata 23 0 R>>.endobj.2 0 obj.<</Type/Outlines/Count 0>>.endobj.3 0 obj.<</Type/Pages/Count 1/Kids[9 0 R]>>.endobj.4 0 obj.<</ModDate(D:20240426151425+00'00)/A

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.7
Total Entropy:	7.121610
Total Bytes:	41427
Stream Entropy:	7.083651
Stream Bytes:	37715
Entropy outside Streams:	5.254488
Bytes outside Streams:	3712
Number of EOF found:	2
Bytes after EOF:

Keywords Statistics

Name	Count
obj	25
endobj	25
stream	10
endstream	10
xref	2
trailer	2
startxref	2
/Page	1
/Encrypt	0
/ObjStm	0
/URI	0
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5	Preview
20	0000000000000000	9999f3db39aa2e904fb3a4478b9c842b
21	4040003101004000	ebe4230aabaf5d3752909388b4790d24

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 17:30:57.636529922 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 26, 2024 17:30:57.939495087 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 26, 2024 17:30:58.543068886 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 26, 2024 17:30:59.705534935 CEST	49688	443	192.168.2.16	23.50.112.54
Apr 26, 2024 17:30:59.756061077 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 26, 2024 17:31:02.162136078 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 26, 2024 17:31:03.441004992 CEST	49702	443	192.168.2.16	104.94.108.142
Apr 26, 2024 17:31:03.441041946 CEST	443	49702	104.94.108.142	192.168.2.16
Apr 26, 2024 17:31:03.441123009 CEST	49702	443	192.168.2.16	104.94.108.142
Apr 26, 2024 17:31:03.441373110 CEST	49702	443	192.168.2.16	104.94.108.142
Apr 26, 2024 17:31:03.441386938 CEST	443	49702	104.94.108.142	192.168.2.16
Apr 26, 2024 17:31:03.820802927 CEST	443	49702	104.94.108.142	192.168.2.16
Apr 26, 2024 17:31:03.821119070 CEST	49702	443	192.168.2.16	104.94.108.142
Apr 26, 2024 17:31:03.821135044 CEST	443	49702	104.94.108.142	192.168.2.16
Apr 26, 2024 17:31:03.822227001 CEST	443	49702	104.94.108.142	192.168.2.16
Apr 26, 2024 17:31:03.822308064 CEST	49702	443	192.168.2.16	104.94.108.142
Apr 26, 2024 17:31:03.841993093 CEST	49702	443	192.168.2.16	104.94.108.142
Apr 26, 2024 17:31:03.842071056 CEST	443	49702	104.94.108.142	192.168.2.16
Apr 26, 2024 17:31:03.842165947 CEST	49702	443	192.168.2.16	104.94.108.142
Apr 26, 2024 17:31:03.842179060 CEST	443	49702	104.94.108.142	192.168.2.16
Apr 26, 2024 17:31:03.888084888 CEST	49702	443	192.168.2.16	104.94.108.142
Apr 26, 2024 17:31:03.968482018 CEST	443	49702	104.94.108.142	192.168.2.16
Apr 26, 2024 17:31:03.968642950 CEST	443	49702	104.94.108.142	192.168.2.16
Apr 26, 2024 17:31:03.968693018 CEST	49702	443	192.168.2.16	104.94.108.142
Apr 26, 2024 17:31:03.969752073 CEST	49702	443	192.168.2.16	104.94.108.142
Apr 26, 2024 17:31:03.969780922 CEST	443	49702	104.94.108.142	192.168.2.16
Apr 26, 2024 17:31:04.112775087 CEST	49703	443	192.168.2.16	23.204.76.112
Apr 26, 2024 17:31:04.112808943 CEST	443	49703	23.204.76.112	192.168.2.16
Apr 26, 2024 17:31:04.112890959 CEST	49703	443	192.168.2.16	23.204.76.112
Apr 26, 2024 17:31:04.114986897 CEST	49703	443	192.168.2.16	23.204.76.112
Apr 26, 2024 17:31:04.115000010 CEST	443	49703	23.204.76.112	192.168.2.16
Apr 26, 2024 17:31:04.377371073 CEST	443	49703	23.204.76.112	192.168.2.16
Apr 26, 2024 17:31:04.377734900 CEST	49703	443	192.168.2.16	23.204.76.112
Apr 26, 2024 17:31:04.381198883 CEST	49703	443	192.168.2.16	23.204.76.112
Apr 26, 2024 17:31:04.381222010 CEST	443	49703	23.204.76.112	192.168.2.16
Apr 26, 2024 17:31:04.381689072 CEST	443	49703	23.204.76.112	192.168.2.16
Apr 26, 2024 17:31:04.423764944 CEST	49703	443	192.168.2.16	23.204.76.112
Apr 26, 2024 17:31:04.468115091 CEST	443	49703	23.204.76.112	192.168.2.16
Apr 26, 2024 17:31:04.550344944 CEST	49704	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:04.550405025 CEST	443	49704	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:04.550939083 CEST	49704	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:04.551992893 CEST	49704	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:04.552007914 CEST	443	49704	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:04.620076895 CEST	443	49703	23.204.76.112	192.168.2.16
Apr 26, 2024 17:31:04.620305061 CEST	443	49703	23.204.76.112	192.168.2.16
Apr 26, 2024 17:31:04.620575905 CEST	49703	443	192.168.2.16	23.204.76.112
Apr 26, 2024 17:31:04.620575905 CEST	49703	443	192.168.2.16	23.204.76.112
Apr 26, 2024 17:31:04.620768070 CEST	49703	443	192.168.2.16	23.204.76.112
Apr 26, 2024 17:31:04.620784044 CEST	443	49703	23.204.76.112	192.168.2.16
Apr 26, 2024 17:31:04.655399084 CEST	49705	443	192.168.2.16	23.204.76.112
Apr 26, 2024 17:31:04.655437946 CEST	443	49705	23.204.76.112	192.168.2.16
Apr 26, 2024 17:31:04.655636072 CEST	49705	443	192.168.2.16	23.204.76.112
Apr 26, 2024 17:31:04.655872107 CEST	49705	443	192.168.2.16	23.204.76.112
Apr 26, 2024 17:31:04.655885935 CEST	443	49705	23.204.76.112	192.168.2.16
Apr 26, 2024 17:31:04.911839008 CEST	443	49705	23.204.76.112	192.168.2.16
Apr 26, 2024 17:31:04.912281036 CEST	49705	443	192.168.2.16	23.204.76.112
Apr 26, 2024 17:31:04.920985937 CEST	49705	443	192.168.2.16	23.204.76.112
Apr 26, 2024 17:31:04.921010017 CEST	443	49705	23.204.76.112	192.168.2.16
Apr 26, 2024 17:31:04.921345949 CEST	443	49705	23.204.76.112	192.168.2.16
Apr 26, 2024 17:31:04.923316002 CEST	49705	443	192.168.2.16	23.204.76.112
Apr 26, 2024 17:31:04.968126059 CEST	443	49705	23.204.76.112	192.168.2.16
Apr 26, 2024 17:31:05.023746967 CEST	443	49704	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:05.023868084 CEST	49704	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:05.028793097 CEST	49704	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:05.028815031 CEST	443	49704	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:05.029014111 CEST	443	49704	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:05.080789089 CEST	49704	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:05.126780987 CEST	49704	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:05.161992073 CEST	443	49705	23.204.76.112	192.168.2.16
Apr 26, 2024 17:31:05.162075996 CEST	443	49705	23.204.76.112	192.168.2.16
Apr 26, 2024 17:31:05.166906118 CEST	49705	443	192.168.2.16	23.204.76.112
Apr 26, 2024 17:31:05.166906118 CEST	49705	443	192.168.2.16	23.204.76.112
Apr 26, 2024 17:31:05.167269945 CEST	49705	443	192.168.2.16	23.204.76.112
Apr 26, 2024 17:31:05.167309046 CEST	443	49705	23.204.76.112	192.168.2.16
Apr 26, 2024 17:31:05.168124914 CEST	443	49704	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:05.476289034 CEST	443	49704	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:05.476313114 CEST	443	49704	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:05.476321936 CEST	443	49704	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:05.476363897 CEST	443	49704	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:05.476378918 CEST	49704	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:05.476391077 CEST	443	49704	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:05.476403952 CEST	443	49704	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:05.476427078 CEST	49704	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:05.476428986 CEST	443	49704	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:05.476438046 CEST	443	49704	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:05.476449013 CEST	49704	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:05.476486921 CEST	49704	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:05.476507902 CEST	443	49704	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:05.476512909 CEST	49704	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:05.476548910 CEST	49704	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:06.057347059 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 26, 2024 17:31:06.074652910 CEST	49704	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:06.074697018 CEST	443	49704	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:06.074718952 CEST	49704	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:06.074727058 CEST	443	49704	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:06.367093086 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 26, 2024 17:31:06.975096941 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 26, 2024 17:31:06.975123882 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 26, 2024 17:31:08.188095093 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 26, 2024 17:31:10.265283108 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 26, 2024 17:31:10.568119049 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 26, 2024 17:31:10.600130081 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 26, 2024 17:31:11.176093102 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 26, 2024 17:31:12.394083977 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 26, 2024 17:31:14.801106930 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 26, 2024 17:31:15.412615061 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 26, 2024 17:31:16.588082075 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 26, 2024 17:31:19.606154919 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 26, 2024 17:31:25.025113106 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 26, 2024 17:31:29.206147909 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 26, 2024 17:31:42.814253092 CEST	49706	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:42.814292908 CEST	443	49706	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:42.814409018 CEST	49706	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:42.814941883 CEST	49706	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:42.814958096 CEST	443	49706	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:43.288856030 CEST	443	49706	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:43.289048910 CEST	49706	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:43.290632963 CEST	49706	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:43.290642977 CEST	443	49706	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:43.290888071 CEST	443	49706	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:43.292481899 CEST	49706	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:43.336133003 CEST	443	49706	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:43.745301962 CEST	443	49706	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:43.745332956 CEST	443	49706	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:43.745351076 CEST	443	49706	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:43.745423079 CEST	49706	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:43.745450974 CEST	443	49706	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:43.745521069 CEST	49706	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:43.745589018 CEST	443	49706	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:43.745630980 CEST	443	49706	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:43.745661974 CEST	49706	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:43.745672941 CEST	443	49706	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:43.745702982 CEST	443	49706	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:43.745717049 CEST	49706	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:43.745754004 CEST	49706	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:43.749087095 CEST	49706	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:43.749099970 CEST	443	49706	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:43.749129057 CEST	49706	443	192.168.2.16	20.12.23.50
Apr 26, 2024 17:31:43.749133110 CEST	443	49706	20.12.23.50	192.168.2.16
Apr 26, 2024 17:31:48.843689919 CEST	49710	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:48.843699932 CEST	443	49710	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:48.843755960 CEST	49710	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:48.843976021 CEST	49711	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:48.844000101 CEST	443	49711	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:48.844053030 CEST	49711	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:48.844829082 CEST	49710	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:48.844842911 CEST	443	49710	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:48.844976902 CEST	49711	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:48.844988108 CEST	443	49711	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.183547974 CEST	49712	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.183568954 CEST	443	49712	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.183665037 CEST	49712	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.186358929 CEST	49712	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.186367989 CEST	443	49712	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.212516069 CEST	49713	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.212563992 CEST	443	49713	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.212656975 CEST	49713	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.212837934 CEST	49713	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.212857008 CEST	443	49713	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.241674900 CEST	443	49711	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.241914034 CEST	49711	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.241924047 CEST	443	49711	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.243000031 CEST	443	49711	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.243066072 CEST	49711	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.243942976 CEST	49711	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.243994951 CEST	443	49711	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.244326115 CEST	49711	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.244333029 CEST	443	49711	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.244879961 CEST	443	49710	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.245115995 CEST	49710	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.245135069 CEST	443	49710	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.246562004 CEST	443	49710	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.246634960 CEST	49710	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.247436047 CEST	49710	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.247524977 CEST	443	49710	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.247567892 CEST	49710	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.288125038 CEST	443	49710	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.292155027 CEST	49710	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.292165041 CEST	443	49710	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.292213917 CEST	49711	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.340135098 CEST	49710	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.514883041 CEST	443	49712	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.516376019 CEST	49712	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.516388893 CEST	443	49712	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.517980099 CEST	443	49712	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.518074036 CEST	49712	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.518452883 CEST	49712	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.518539906 CEST	443	49712	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.518583059 CEST	49712	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.560132980 CEST	443	49712	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.561198950 CEST	49712	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.561209917 CEST	443	49712	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.602006912 CEST	443	49713	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.602245092 CEST	49713	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.602279902 CEST	443	49713	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.603705883 CEST	443	49713	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.603791952 CEST	49713	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.604152918 CEST	49713	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.604238033 CEST	443	49713	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.604259968 CEST	49713	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.609168053 CEST	49712	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.648139954 CEST	443	49713	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.657154083 CEST	49713	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:49.657176971 CEST	443	49713	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:49.705130100 CEST	49713	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.041461945 CEST	443	49710	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.041567087 CEST	443	49710	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.041646957 CEST	49710	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.041678905 CEST	49710	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.042274952 CEST	49710	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.042296886 CEST	443	49710	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.042309046 CEST	49710	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.043263912 CEST	49710	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.044473886 CEST	49714	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.044563055 CEST	443	49714	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.044647932 CEST	49714	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.044858932 CEST	49714	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.044878960 CEST	443	49714	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.136785984 CEST	443	49712	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.136863947 CEST	49712	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.136874914 CEST	443	49712	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.136890888 CEST	443	49712	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.136948109 CEST	49712	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.137316942 CEST	49712	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.137326956 CEST	443	49712	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.137335062 CEST	49712	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.137396097 CEST	49712	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.138576031 CEST	49715	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.138602972 CEST	443	49715	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.138674974 CEST	49715	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.138870955 CEST	49715	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.138879061 CEST	443	49715	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.185668945 CEST	443	49711	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.185717106 CEST	443	49711	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.185796022 CEST	49711	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.185805082 CEST	443	49711	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.187093973 CEST	443	49711	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.189454079 CEST	49711	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.189534903 CEST	49711	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.189541101 CEST	443	49711	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.407357931 CEST	443	49713	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.407449007 CEST	49713	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.407486916 CEST	443	49713	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.407517910 CEST	443	49713	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.407577038 CEST	49713	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.408366919 CEST	49713	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.408390045 CEST	443	49713	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.439105988 CEST	443	49714	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.439474106 CEST	49714	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.439496994 CEST	443	49714	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.440268993 CEST	443	49714	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.440685034 CEST	49714	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.440824986 CEST	443	49714	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.441271067 CEST	49716	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.441338062 CEST	443	49716	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.441447973 CEST	49716	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.441493988 CEST	49714	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.441767931 CEST	49716	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.441811085 CEST	443	49716	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.466042042 CEST	443	49715	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.466371059 CEST	49715	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.466382027 CEST	443	49715	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.466661930 CEST	443	49715	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.467081070 CEST	49715	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.467123985 CEST	443	49715	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.467370033 CEST	49715	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.488121033 CEST	443	49714	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.512120008 CEST	443	49715	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.797550917 CEST	443	49715	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.797593117 CEST	443	49715	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.797622919 CEST	443	49715	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.797666073 CEST	49715	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.797677994 CEST	443	49715	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.797714949 CEST	49715	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.798496962 CEST	443	49715	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.798540115 CEST	443	49715	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.798584938 CEST	49715	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.829351902 CEST	443	49716	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.830156088 CEST	443	49714	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.830240965 CEST	443	49714	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.830293894 CEST	49714	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.830308914 CEST	443	49714	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.830399990 CEST	443	49714	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:50.830445051 CEST	49714	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:50.883785009 CEST	49716	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:51.252115011 CEST	49716	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:51.252146959 CEST	443	49716	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:51.252254963 CEST	49715	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:51.252276897 CEST	443	49715	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:51.252794981 CEST	49714	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:51.252862930 CEST	443	49714	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:51.253752947 CEST	443	49716	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:51.256239891 CEST	49716	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:51.256472111 CEST	443	49716	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:51.312444925 CEST	49716	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:51.491316080 CEST	49716	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:51.536117077 CEST	443	49716	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:51.620949984 CEST	49716	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:51.621069908 CEST	443	49716	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:51.621146917 CEST	49716	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:51.623454094 CEST	49717	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:51.623483896 CEST	443	49717	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:51.623562098 CEST	49717	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:51.624267101 CEST	49717	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:51.624283075 CEST	443	49717	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:52.017715931 CEST	443	49717	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:52.018096924 CEST	49717	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:52.018121958 CEST	443	49717	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:52.022511959 CEST	443	49717	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:52.022619963 CEST	49717	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:52.023005962 CEST	49717	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:52.023205996 CEST	443	49717	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:52.023227930 CEST	49717	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:52.064131975 CEST	443	49717	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:52.071167946 CEST	49717	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:52.071191072 CEST	443	49717	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:52.119215965 CEST	49717	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:52.430036068 CEST	443	49717	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:52.430149078 CEST	443	49717	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:52.430232048 CEST	49717	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:52.430247068 CEST	443	49717	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:52.434513092 CEST	443	49717	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:52.434592009 CEST	49717	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:52.434663057 CEST	49717	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:52.434678078 CEST	443	49717	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:52.998120070 CEST	49719	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:52.998159885 CEST	443	49719	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:52.998250961 CEST	49719	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:52.998478889 CEST	49719	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:52.998492002 CEST	443	49719	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:53.348216057 CEST	443	49719	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:53.348545074 CEST	49719	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:53.348579884 CEST	443	49719	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:53.348901033 CEST	443	49719	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:53.349333048 CEST	49719	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:53.349385023 CEST	443	49719	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:53.349489927 CEST	49719	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:53.396119118 CEST	443	49719	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:53.726664066 CEST	443	49719	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:53.730263948 CEST	443	49719	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:53.730334997 CEST	49719	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:53.731412888 CEST	49719	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:53.731435061 CEST	443	49719	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:53.974339962 CEST	49720	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:53.974399090 CEST	443	49720	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:53.974505901 CEST	49720	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:53.974699974 CEST	49720	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:53.974709988 CEST	443	49720	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:54.315767050 CEST	443	49720	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:54.371167898 CEST	49720	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:54.449803114 CEST	49720	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:54.449842930 CEST	443	49720	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:54.451318026 CEST	443	49720	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:54.509192944 CEST	49720	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:54.514822960 CEST	49720	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:54.515048981 CEST	443	49720	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:54.570173979 CEST	49720	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:54.577970982 CEST	49720	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:54.624119043 CEST	443	49720	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:54.782370090 CEST	443	49720	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:54.783791065 CEST	443	49720	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:54.783880949 CEST	49720	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:54.783961058 CEST	443	49720	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:54.784012079 CEST	443	49720	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:54.784071922 CEST	49720	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:54.785099030 CEST	49720	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:54.785128117 CEST	443	49720	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:54.844091892 CEST	49721	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:54.844124079 CEST	443	49721	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:54.844187975 CEST	49721	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:54.844651937 CEST	49721	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:54.844666958 CEST	443	49721	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.162508965 CEST	49722	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:55.162539959 CEST	443	49722	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.162605047 CEST	49722	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:55.162935019 CEST	49722	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:55.162966013 CEST	443	49722	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.245989084 CEST	443	49721	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.246299982 CEST	49721	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:55.246320009 CEST	443	49721	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.246896029 CEST	443	49721	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.247262001 CEST	49721	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:55.247347116 CEST	443	49721	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.247416973 CEST	49721	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:55.288151026 CEST	443	49721	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.480848074 CEST	49721	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:55.481034994 CEST	443	49721	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.481132030 CEST	49721	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:55.481731892 CEST	49723	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:55.481812000 CEST	443	49723	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.481899023 CEST	49723	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:55.482228994 CEST	49723	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:55.482280016 CEST	443	49723	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.559437037 CEST	443	49722	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.559720993 CEST	49722	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:55.559731960 CEST	443	49722	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.560023069 CEST	443	49722	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.560435057 CEST	49722	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:55.560491085 CEST	443	49722	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.560591936 CEST	49722	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:55.604131937 CEST	443	49722	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.872579098 CEST	443	49723	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.872900009 CEST	49723	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:55.872952938 CEST	443	49723	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.874082088 CEST	443	49723	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.874181986 CEST	49723	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:55.874591112 CEST	49723	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:55.874670982 CEST	443	49723	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.925175905 CEST	49723	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:55.925198078 CEST	443	49723	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.973153114 CEST	49723	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:55.974457026 CEST	443	49722	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.974498987 CEST	443	49722	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.974541903 CEST	49722	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:55.974565983 CEST	443	49722	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.977436066 CEST	443	49722	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:55.977511883 CEST	49722	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:55.977603912 CEST	49722	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:55.977616072 CEST	443	49722	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:56.052380085 CEST	49723	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:56.100131035 CEST	443	49723	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:56.180454969 CEST	49723	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:56.180602074 CEST	443	49723	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:56.180665016 CEST	49723	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:56.181288958 CEST	49724	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:56.181334019 CEST	443	49724	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:56.181416988 CEST	49724	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:56.181622982 CEST	49724	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:56.181651115 CEST	443	49724	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:56.419182062 CEST	49725	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:56.419220924 CEST	443	49725	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:56.420640945 CEST	49725	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:56.420640945 CEST	49725	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:56.420679092 CEST	443	49725	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:56.524857044 CEST	443	49724	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:56.525238037 CEST	49724	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:56.525253057 CEST	443	49724	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:56.526328087 CEST	443	49724	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:56.526704073 CEST	49724	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:56.526704073 CEST	49724	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:56.526798964 CEST	443	49724	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:56.526932001 CEST	49724	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:56.526940107 CEST	443	49724	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:56.576210976 CEST	49724	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:56.812853098 CEST	443	49725	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:56.813163042 CEST	49725	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:56.813178062 CEST	443	49725	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:56.813666105 CEST	443	49725	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:56.814132929 CEST	49725	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:56.814217091 CEST	443	49725	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:56.864248037 CEST	49725	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:56.866430044 CEST	49724	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:56.866447926 CEST	49725	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:56.866550922 CEST	443	49724	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:56.866795063 CEST	443	49724	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:56.866900921 CEST	49724	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:56.866900921 CEST	49724	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:56.908118963 CEST	443	49725	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:57.078118086 CEST	49725	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:57.078217030 CEST	443	49725	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:57.078396082 CEST	443	49725	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:57.078494072 CEST	49725	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:57.078494072 CEST	49725	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:57.079005003 CEST	49726	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:57.079042912 CEST	443	49726	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:57.079389095 CEST	49726	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:57.079389095 CEST	49726	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:57.079438925 CEST	443	49726	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:57.469954967 CEST	443	49726	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:57.484458923 CEST	49726	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:57.484486103 CEST	443	49726	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:57.485943079 CEST	443	49726	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:57.486038923 CEST	49726	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:57.518595934 CEST	49726	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:57.518718004 CEST	443	49726	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:57.518805027 CEST	49726	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:57.518822908 CEST	443	49726	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:57.565179110 CEST	49726	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:57.878762960 CEST	443	49726	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:57.882096052 CEST	443	49726	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:57.885171890 CEST	49726	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:58.008759022 CEST	49726	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:58.008786917 CEST	443	49726	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:58.013540983 CEST	49727	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:58.013571978 CEST	443	49727	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:58.013664007 CEST	49727	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:58.013873100 CEST	49727	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:58.013890982 CEST	443	49727	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:58.209841013 CEST	49728	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:58.209892035 CEST	443	49728	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:58.209964991 CEST	49728	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:58.210266113 CEST	49728	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:58.210283041 CEST	443	49728	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:58.342752934 CEST	443	49727	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:58.343024015 CEST	49727	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:58.343043089 CEST	443	49727	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:58.343501091 CEST	443	49727	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:58.343959093 CEST	49727	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:58.344036102 CEST	443	49727	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:58.344084978 CEST	49727	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:58.388129950 CEST	443	49727	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:58.543226004 CEST	443	49728	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:58.543534040 CEST	49728	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:58.543571949 CEST	443	49728	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:58.544684887 CEST	443	49728	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:58.545079947 CEST	49728	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:58.545253992 CEST	443	49728	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:58.589162111 CEST	49728	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:58.691867113 CEST	443	49727	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:58.696281910 CEST	443	49727	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:58.696341991 CEST	49727	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:58.697033882 CEST	49727	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:58.697057009 CEST	443	49727	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:58.894454956 CEST	49728	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:58.940128088 CEST	443	49728	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:59.368721962 CEST	443	49728	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:59.370162010 CEST	443	49728	142.251.35.228	192.168.2.16
Apr 26, 2024 17:31:59.370381117 CEST	49728	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:59.371737003 CEST	49728	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:31:59.371758938 CEST	443	49728	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:01.575140953 CEST	49729	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:01.575182915 CEST	443	49729	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:01.575251102 CEST	49729	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:01.575505018 CEST	49729	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:01.575517893 CEST	443	49729	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:01.689522028 CEST	49730	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:01.689567089 CEST	443	49730	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:01.689749002 CEST	49730	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:01.689901114 CEST	49730	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:01.689919949 CEST	443	49730	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:01.907097101 CEST	443	49729	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:01.907449007 CEST	49729	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:01.907466888 CEST	443	49729	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:01.907810926 CEST	443	49729	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:01.908257961 CEST	49729	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:01.908330917 CEST	443	49729	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:01.908421993 CEST	49729	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:01.956121922 CEST	443	49729	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.053927898 CEST	49729	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.054039001 CEST	443	49729	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.054107904 CEST	49729	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.055037022 CEST	49731	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.055071115 CEST	443	49731	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.055166006 CEST	49731	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.056149960 CEST	49731	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.056164980 CEST	443	49731	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.214771032 CEST	49732	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.214852095 CEST	443	49732	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.214963913 CEST	49732	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.215281010 CEST	49732	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.215329885 CEST	443	49732	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.342012882 CEST	49733	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.342042923 CEST	443	49733	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.342170000 CEST	49733	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.342436075 CEST	49733	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.342449903 CEST	443	49733	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.445210934 CEST	443	49731	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.445470095 CEST	49731	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.445483923 CEST	443	49731	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.446511030 CEST	443	49731	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.446588039 CEST	49731	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.447012901 CEST	49731	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.447072983 CEST	443	49731	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.447190046 CEST	49731	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.447197914 CEST	443	49731	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.499187946 CEST	49731	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.605504036 CEST	443	49732	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.605787992 CEST	49732	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.605824947 CEST	443	49732	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.606894016 CEST	443	49732	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.607009888 CEST	49732	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.607363939 CEST	49732	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.607438087 CEST	443	49732	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.643320084 CEST	443	49730	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.643553019 CEST	49730	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.643569946 CEST	443	49730	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.644696951 CEST	443	49730	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.645061016 CEST	49730	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.645235062 CEST	443	49730	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.659158945 CEST	49732	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.659168005 CEST	443	49732	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.672068119 CEST	443	49733	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.672331095 CEST	49733	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.672346115 CEST	443	49733	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.673782110 CEST	443	49733	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.673888922 CEST	49733	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.674216986 CEST	49733	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.674292088 CEST	443	49733	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.691164017 CEST	49730	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.707159042 CEST	49732	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.723193884 CEST	49733	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.723206997 CEST	443	49733	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.771190882 CEST	49733	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.862572908 CEST	443	49731	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.863118887 CEST	443	49731	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.863179922 CEST	49731	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.864264965 CEST	49731	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.864281893 CEST	443	49731	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:02.950790882 CEST	49732	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:02.992161989 CEST	443	49732	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:03.794564962 CEST	443	49732	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:03.794653893 CEST	443	49732	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:03.794718981 CEST	49732	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:03.794730902 CEST	443	49732	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:03.794795990 CEST	49732	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:03.795294046 CEST	49732	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:03.795334101 CEST	443	49732	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:03.795361996 CEST	49732	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:03.795401096 CEST	49732	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:03.797652006 CEST	49730	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:03.840126038 CEST	443	49730	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:04.245078087 CEST	443	49730	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:04.245206118 CEST	443	49730	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:04.245268106 CEST	49730	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:04.245285034 CEST	443	49730	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:04.245577097 CEST	443	49730	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:04.245646000 CEST	49730	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:04.522398949 CEST	49730	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:04.522432089 CEST	443	49730	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:04.861341000 CEST	49733	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:04.908114910 CEST	443	49733	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:05.191485882 CEST	443	49733	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:05.191648960 CEST	443	49733	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:05.191711903 CEST	49733	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:05.261045933 CEST	49733	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:05.261076927 CEST	443	49733	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:07.192861080 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:07.192930937 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:07.193017960 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:07.193516016 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:07.193547964 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:07.582487106 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:07.637212992 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:07.980571985 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:07.980634928 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:07.981178999 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.033164978 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.107876062 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.108084917 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.159182072 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.165726900 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.165771008 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.585692883 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.585741043 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.585781097 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.585846901 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.585877895 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.585947037 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.585947037 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.585988045 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.586047888 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.598113060 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.611190081 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.611222982 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.611393929 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.611460924 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.611532927 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.620645046 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.636008024 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.636075974 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.636106014 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.678188086 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.772809982 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.779061079 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.779098988 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.779144049 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.779158115 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.779217005 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.792067051 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.805149078 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.805207014 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.805217028 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.820225954 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.820269108 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.820280075 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.820288897 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.820331097 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.831003904 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.844132900 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.844177008 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.844186068 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.844196081 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.844243050 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.855927944 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.869700909 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.869740963 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.869752884 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.869761944 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.869807959 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.881566048 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.892151117 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.892193079 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.892209053 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.892216921 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.892273903 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.904961109 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.905016899 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.905064106 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.905071020 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.921880007 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.921935081 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.921947002 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.922081947 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:08.922146082 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.922183990 CEST	49740	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:08.922195911 CEST	443	49740	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:09.626418114 CEST	49747	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:09.626470089 CEST	443	49747	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:09.626557112 CEST	49747	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:09.626773119 CEST	49747	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:09.626802921 CEST	443	49747	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:09.944654942 CEST	49749	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:09.944689989 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:09.944812059 CEST	49749	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:09.945024967 CEST	49749	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:09.945039034 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.055233002 CEST	443	49747	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.055442095 CEST	49747	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:10.055458069 CEST	443	49747	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.055792093 CEST	443	49747	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.056118965 CEST	49747	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:10.056185961 CEST	443	49747	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.056283951 CEST	49747	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:10.056312084 CEST	443	49747	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.275876999 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.276123047 CEST	49749	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:10.276159048 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.276485920 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.276784897 CEST	49749	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:10.276848078 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.276983023 CEST	49749	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:10.276995897 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.318186045 CEST	49749	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:10.453887939 CEST	443	49747	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.453978062 CEST	443	49747	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.454071045 CEST	49747	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:10.455040932 CEST	49747	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:10.455054998 CEST	443	49747	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.589318037 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.589358091 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.589390993 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.589421034 CEST	49749	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:10.589438915 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.589478016 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.589509964 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.589529037 CEST	49749	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:10.589536905 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.589551926 CEST	49749	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:10.605142117 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.605187893 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.605225086 CEST	49749	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:10.605235100 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.605276108 CEST	49749	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:10.616117001 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.626924992 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.626992941 CEST	49749	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:10.627003908 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.638087034 CEST	49750	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:10.638123989 CEST	443	49750	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.638237000 CEST	49750	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:10.638550043 CEST	49750	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:10.638565063 CEST	443	49750	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.668180943 CEST	49749	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:10.668190956 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.715193033 CEST	49749	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:10.744549036 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.749842882 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.749902010 CEST	49749	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:10.749914885 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:10.749968052 CEST	49749	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:10.750219107 CEST	49749	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:10.750241041 CEST	443	49749	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:11.026185036 CEST	443	49750	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:11.066251040 CEST	49750	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:11.508725882 CEST	49750	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:11.508747101 CEST	443	49750	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:11.509279966 CEST	443	49750	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:11.510210037 CEST	49750	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:11.510279894 CEST	443	49750	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:11.511065960 CEST	49750	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:11.511097908 CEST	443	49750	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:11.714782000 CEST	443	49750	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:11.714827061 CEST	443	49750	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:11.714859962 CEST	443	49750	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:11.714879990 CEST	49750	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:11.714900970 CEST	443	49750	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:11.714939117 CEST	49750	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:11.714943886 CEST	443	49750	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:11.714956045 CEST	443	49750	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:11.714987993 CEST	49750	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:11.714994907 CEST	443	49750	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:11.732003927 CEST	443	49750	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:11.732054949 CEST	49750	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:11.732156992 CEST	49750	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:11.732177019 CEST	443	49750	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:11.762365103 CEST	49751	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:11.762408972 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:11.762473106 CEST	49751	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:11.762718916 CEST	49751	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:11.762738943 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.066139936 CEST	49752	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.066180944 CEST	443	49752	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.066261053 CEST	49752	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.066508055 CEST	49752	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.066523075 CEST	443	49752	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.149234056 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.149504900 CEST	49751	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.149521112 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.149883986 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.150182962 CEST	49751	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.150247097 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.150316000 CEST	49751	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.150386095 CEST	49751	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.150409937 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.398705959 CEST	443	49752	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.399117947 CEST	49752	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.399148941 CEST	443	49752	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.399497986 CEST	443	49752	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.399801016 CEST	49752	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.399868011 CEST	443	49752	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.399930000 CEST	49752	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.440124035 CEST	443	49752	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.597137928 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.603168964 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.603197098 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.603252888 CEST	49751	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.603269100 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.603363991 CEST	49751	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.604636908 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.612309933 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.612399101 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.612417936 CEST	49751	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.612430096 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.612545013 CEST	49751	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.624599934 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.651294947 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.651367903 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.651369095 CEST	49751	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.651392937 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.651515007 CEST	49751	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.714437008 CEST	443	49752	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.714495897 CEST	443	49752	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.714534044 CEST	443	49752	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.714570999 CEST	443	49752	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.714643002 CEST	49752	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.714675903 CEST	443	49752	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.714715004 CEST	49752	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.715214014 CEST	49752	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.715262890 CEST	443	49752	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.715414047 CEST	443	49752	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.715478897 CEST	49752	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.715498924 CEST	49752	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.782978058 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.789362907 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.789405107 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.789432049 CEST	49751	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.789448023 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.789505005 CEST	49751	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.802525997 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.802696943 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.802781105 CEST	49751	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.802906990 CEST	49751	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.802920103 CEST	443	49751	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.829204082 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.829231024 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:12.829437017 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.829674006 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:12.829689980 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.217196941 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.217454910 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:13.217468977 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.218513966 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.218600988 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:13.218853951 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:13.218924999 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.219007015 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:13.219017029 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.260194063 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:13.260202885 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.306957960 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:13.608398914 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.608971119 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.609004974 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.609030008 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:13.609042883 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.609085083 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:13.609092951 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.621987104 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.622082949 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:13.622092009 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.634725094 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.634795904 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:13.634805918 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.648401022 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.648459911 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:13.648473024 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.662209988 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.662267923 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:13.662276030 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.706310987 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:13.795236111 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.802037954 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.802072048 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.802113056 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:13.802124977 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.802172899 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:13.814641953 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.827748060 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.827842951 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:13.827847004 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.827867031 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.827914953 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:13.840806961 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.853945017 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.854011059 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:13.854017973 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.868570089 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.868629932 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:13.868635893 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.868736029 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:13.868881941 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:13.868881941 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:14.184247971 CEST	49756	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:14.184295893 CEST	443	49756	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:14.878695965 CEST	49759	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:14.878735065 CEST	443	49759	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:14.878829002 CEST	49759	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:14.879359007 CEST	49759	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:14.879374981 CEST	443	49759	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:15.282116890 CEST	443	49759	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:15.282423973 CEST	49759	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:15.282444000 CEST	443	49759	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:15.282743931 CEST	443	49759	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:15.283139944 CEST	49759	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:15.283200979 CEST	49759	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:15.283212900 CEST	443	49759	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:15.283241987 CEST	49759	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:15.283242941 CEST	443	49759	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:15.283287048 CEST	443	49759	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:15.329277992 CEST	49759	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:15.682990074 CEST	443	49759	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:15.683126926 CEST	443	49759	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:15.683193922 CEST	49759	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:15.683223009 CEST	443	49759	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:15.683295965 CEST	443	49759	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:15.683346987 CEST	49759	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:15.683355093 CEST	443	49759	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:15.683486938 CEST	443	49759	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:15.683537006 CEST	49759	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:15.683542967 CEST	443	49759	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:15.691598892 CEST	443	49759	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:15.691700935 CEST	49759	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:15.693929911 CEST	49759	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:15.693963051 CEST	443	49759	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:15.699863911 CEST	49760	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:15.699903965 CEST	443	49760	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:15.699982882 CEST	49760	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:15.700347900 CEST	49760	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:15.700366020 CEST	443	49760	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.012260914 CEST	49761	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.012305975 CEST	443	49761	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.012387991 CEST	49761	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.012660027 CEST	49761	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.012679100 CEST	443	49761	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.052046061 CEST	443	49760	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.052330971 CEST	49760	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.052350044 CEST	443	49760	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.052675009 CEST	443	49760	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.052966118 CEST	49760	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.053031921 CEST	443	49760	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.053109884 CEST	49760	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.053145885 CEST	49760	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.053183079 CEST	443	49760	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.346831083 CEST	443	49761	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.347121954 CEST	49761	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.347136021 CEST	443	49761	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.348273039 CEST	443	49761	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.348628998 CEST	49761	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.348774910 CEST	49761	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.348807096 CEST	443	49761	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.385442972 CEST	443	49760	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.385581970 CEST	443	49760	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.385658979 CEST	49760	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.385689974 CEST	443	49760	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.385795116 CEST	443	49760	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.385843992 CEST	49760	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.385852098 CEST	443	49760	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.389200926 CEST	49761	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.396814108 CEST	443	49760	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.396912098 CEST	49760	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.397026062 CEST	49760	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.397042036 CEST	443	49760	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.400079012 CEST	49762	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.400122881 CEST	443	49762	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.400203943 CEST	49762	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.400485039 CEST	49762	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.400501966 CEST	443	49762	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.679883003 CEST	443	49761	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.680226088 CEST	443	49761	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.680290937 CEST	49761	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.680310011 CEST	443	49761	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.680407047 CEST	443	49761	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.680459976 CEST	49761	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.680468082 CEST	443	49761	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.687870026 CEST	443	49761	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.687936068 CEST	49761	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.688112974 CEST	49761	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.688132048 CEST	443	49761	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.708385944 CEST	49763	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.708435059 CEST	443	49763	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.708518028 CEST	49763	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.708873987 CEST	49763	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.708889961 CEST	443	49763	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.738998890 CEST	443	49762	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.739465952 CEST	49762	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.739480972 CEST	443	49762	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.739814997 CEST	443	49762	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.740190983 CEST	49762	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.740255117 CEST	443	49762	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:16.740401983 CEST	49762	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:16.740432024 CEST	443	49762	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:17.040162086 CEST	443	49763	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:17.040643930 CEST	49763	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:17.040659904 CEST	443	49763	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:17.041089058 CEST	443	49763	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:17.041578054 CEST	49763	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:17.041641951 CEST	443	49763	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:17.043868065 CEST	49763	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:17.043901920 CEST	443	49763	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:17.068865061 CEST	443	49762	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:17.068954945 CEST	443	49762	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:17.068994045 CEST	443	49762	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:17.069009066 CEST	49762	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:17.069025993 CEST	443	49762	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:17.069065094 CEST	49762	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:17.069470882 CEST	443	49762	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:17.069597960 CEST	443	49762	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:17.069644928 CEST	49762	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:17.069801092 CEST	49762	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:17.069817066 CEST	443	49762	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:17.381295919 CEST	443	49763	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:17.381386995 CEST	443	49763	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:17.381442070 CEST	49763	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:17.381459951 CEST	443	49763	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:17.392517090 CEST	443	49763	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:17.392590046 CEST	49763	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:17.392721891 CEST	49763	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:17.392739058 CEST	443	49763	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:19.108448982 CEST	49764	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:19.108489037 CEST	443	49764	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:19.108606100 CEST	49764	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:19.108819008 CEST	49764	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:19.108830929 CEST	443	49764	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:20.528178930 CEST	443	49764	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:20.528542995 CEST	49764	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:20.528562069 CEST	443	49764	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:20.528891087 CEST	443	49764	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:20.529289961 CEST	49764	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:20.529351950 CEST	443	49764	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:20.529495001 CEST	49764	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:20.529578924 CEST	49764	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:20.529603958 CEST	443	49764	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:20.921544075 CEST	443	49764	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:20.921585083 CEST	443	49764	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:20.921622038 CEST	443	49764	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:20.921655893 CEST	49764	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:20.921690941 CEST	443	49764	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:20.921745062 CEST	49764	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:20.921796083 CEST	443	49764	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:20.932977915 CEST	443	49764	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:20.933048010 CEST	49764	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:20.933197021 CEST	49764	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:20.933213949 CEST	443	49764	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:20.935534954 CEST	49765	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:20.935569048 CEST	443	49765	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:20.935646057 CEST	49765	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:20.935883045 CEST	49765	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:20.935895920 CEST	443	49765	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:21.269305944 CEST	443	49765	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:21.269682884 CEST	49765	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:21.269699097 CEST	443	49765	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:21.270792007 CEST	443	49765	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:21.271203995 CEST	49765	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:21.271373034 CEST	443	49765	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:21.271410942 CEST	49765	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:21.271447897 CEST	443	49765	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:21.315293074 CEST	49765	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:21.600327015 CEST	443	49765	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:21.600842953 CEST	443	49765	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:21.600944042 CEST	49765	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:21.600970030 CEST	443	49765	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:21.600997925 CEST	443	49765	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:21.601064920 CEST	49765	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:21.601098061 CEST	443	49765	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:21.607467890 CEST	443	49765	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:21.607539892 CEST	49765	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:21.607561111 CEST	443	49765	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:21.609152079 CEST	443	49765	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:21.609232903 CEST	49765	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:21.609288931 CEST	49765	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:21.609318018 CEST	443	49765	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:22.992631912 CEST	49766	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:22.992675066 CEST	443	49766	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:22.992789030 CEST	49766	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:22.993242979 CEST	49766	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:22.993264914 CEST	443	49766	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:23.320738077 CEST	443	49766	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:23.321346998 CEST	49766	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:23.321367979 CEST	443	49766	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:23.321826935 CEST	443	49766	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:23.323689938 CEST	49766	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:23.323775053 CEST	443	49766	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:23.323843956 CEST	49766	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:23.323870897 CEST	49766	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:23.323939085 CEST	443	49766	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:23.662090063 CEST	443	49766	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:23.662271023 CEST	443	49766	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:23.662343979 CEST	49766	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:23.662733078 CEST	49766	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:23.662758112 CEST	443	49766	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:23.671797991 CEST	49767	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:23.671833992 CEST	443	49767	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:23.671953917 CEST	49767	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:23.672159910 CEST	49767	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:23.672172070 CEST	443	49767	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:24.061307907 CEST	443	49767	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:24.061583042 CEST	49767	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:24.061608076 CEST	443	49767	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:24.062064886 CEST	443	49767	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:24.062546968 CEST	49767	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:24.062623024 CEST	443	49767	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:24.062781096 CEST	49767	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:24.062832117 CEST	443	49767	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:24.062871933 CEST	49767	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:24.104123116 CEST	443	49767	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:24.462752104 CEST	443	49767	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:24.463053942 CEST	443	49767	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:24.463126898 CEST	49767	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:24.464462996 CEST	49767	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:24.464462996 CEST	49767	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:24.464504957 CEST	443	49767	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:24.464581966 CEST	49767	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:24.465255022 CEST	49768	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:24.465296984 CEST	443	49768	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:24.465377092 CEST	49768	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:24.465579033 CEST	49768	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:24.465595007 CEST	443	49768	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:25.870002031 CEST	443	49768	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:25.918200016 CEST	49768	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:26.048495054 CEST	49768	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:26.048512936 CEST	443	49768	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:26.048984051 CEST	443	49768	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:26.093183994 CEST	49768	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:26.191649914 CEST	49768	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:26.191802979 CEST	443	49768	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:26.231239080 CEST	49768	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:26.231273890 CEST	443	49768	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:26.870218039 CEST	443	49768	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:26.870379925 CEST	443	49768	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:26.870471954 CEST	49768	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:26.870965004 CEST	49768	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:26.870985985 CEST	443	49768	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:26.873965979 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:26.874008894 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:26.874097109 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:26.874340057 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:26.874356031 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.203545094 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.203984022 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.204004049 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.204529047 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.204858065 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.204947948 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.205033064 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.205064058 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.254261017 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.616473913 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.616553068 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.616647005 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.616677999 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.616786003 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.619338036 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.627779961 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.627813101 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.627857924 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.627870083 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.627929926 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.638684034 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.649641991 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.649672031 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.649729013 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.649739027 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.649791002 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.773916960 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.778032064 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.778067112 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.778136969 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.778152943 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.778228998 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.791815042 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.800426006 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.800450087 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.800497055 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.800508022 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.800550938 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.812248945 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.816001892 CEST	49770	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.816055059 CEST	443	49770	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.816144943 CEST	49770	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.816406965 CEST	49770	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.816423893 CEST	443	49770	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.823391914 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.823431015 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.823487043 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.823497057 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.823540926 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.834237099 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.844568968 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.844594002 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.844671965 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.844681025 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.844736099 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.854855061 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.863727093 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.863838911 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.863852024 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.873851061 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.873930931 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.873938084 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.883887053 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.883960009 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.883968115 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.899274111 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.899420977 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.899430037 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.930469990 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.930514097 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.930548906 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.930557966 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.930608988 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.934916019 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.943559885 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.943607092 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.943624973 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.943634033 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.943682909 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.943687916 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.951550007 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.951612949 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.951618910 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.959060907 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.959120989 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.959127903 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.966725111 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.966782093 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.966787100 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.974359035 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.974428892 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.974433899 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.981889009 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.981950998 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.981956959 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.989406109 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.989464998 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.989474058 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.997040987 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:27.997109890 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:27.997117043 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.004664898 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.004726887 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.004734039 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.015871048 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.015954971 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.015960932 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.023401976 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.023451090 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.023469925 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.023478031 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.023530960 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.030894041 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.038408995 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.038470984 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.038477898 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.045603991 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.045664072 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.045676947 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.052726984 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.052803993 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.052804947 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.052815914 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.052876949 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.059763908 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.059879065 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.059932947 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.059942007 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.069140911 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.069216013 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.069224119 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.075023890 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.075093031 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.075098991 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.080425978 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.080502033 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.080517054 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.089809895 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.089853048 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.089883089 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.089890957 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.089946032 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.094507933 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.100867987 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.100941896 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.100949049 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.103662968 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.103732109 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.103738070 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.109208107 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.109275103 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.109282017 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.113102913 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.113178015 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.113194942 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.117402077 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.117497921 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.117503881 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.120826006 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.120888948 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.120893955 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.126327991 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.126385927 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.126395941 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.129756927 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.129817963 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.129822969 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.132349968 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.132415056 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.132421017 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.136141062 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.136301041 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.136307001 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.139571905 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.139648914 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.139653921 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.143376112 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.143440008 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.143445969 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.146107912 CEST	443	49770	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.146373987 CEST	49770	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.146404982 CEST	443	49770	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.146867990 CEST	443	49770	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.147171974 CEST	49770	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.147281885 CEST	443	49770	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.147747040 CEST	49773	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.147819042 CEST	443	49773	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.147918940 CEST	49773	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.148085117 CEST	49774	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.148139000 CEST	443	49774	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.148196936 CEST	49774	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.148247004 CEST	49770	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.148292065 CEST	443	49770	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.148533106 CEST	49773	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.148565054 CEST	443	49773	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.148731947 CEST	49774	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.148749113 CEST	443	49774	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.150372982 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.150439024 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.150445938 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.153968096 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.154052019 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.154068947 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.157392979 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.157423019 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.157450914 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.157459974 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.157505989 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.161154985 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.164666891 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.164686918 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.164720058 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.164730072 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.164736986 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.164772034 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.168215990 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.168302059 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.168311119 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.172147036 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.172207117 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.172214031 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.175368071 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.175431967 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.175441027 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.178839922 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.178926945 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.178936005 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.182501078 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.182580948 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.182590961 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.185689926 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.185755014 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.185762882 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.189730883 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.189790964 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.189798117 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.192241907 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.192313910 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.192320108 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.197196960 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.197227955 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.197261095 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.197269917 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.197323084 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.200536966 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.203885078 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.203939915 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.203948021 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.207127094 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.207148075 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.207191944 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.207201958 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.207245111 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.210398912 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.213617086 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.213661909 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.213690042 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.213700056 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.213743925 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.216754913 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.218533993 CEST	49775	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.218615055 CEST	443	49775	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.218715906 CEST	49775	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.218997955 CEST	49775	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.219047070 CEST	443	49775	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.219928026 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.220009089 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.220019102 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.222762108 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.222785950 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.222821951 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.222831011 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.222872019 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.226313114 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.229441881 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.229460955 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.229610920 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.229619026 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.229676008 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.232194901 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.235584021 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.235641956 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.235661983 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.237473965 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.237529993 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.237539053 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.240437031 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.240505934 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.240514994 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.243159056 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.243208885 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.243216991 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.246293068 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.246368885 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.246376991 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.249197006 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.249264002 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.249272108 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.252126932 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.252193928 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.252201080 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.254966974 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.255023003 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.255042076 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.258140087 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.258227110 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.258235931 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.258969069 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.259025097 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.259032011 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.264796019 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.264859915 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.264868021 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.266829967 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.266886950 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.266894102 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.270031929 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.270091057 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.270107985 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.273694992 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.273753881 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.273761034 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.276279926 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.276341915 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.276354074 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.278702974 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.278721094 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.278767109 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.278774977 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.278819084 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.281272888 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.283912897 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.283976078 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.283983946 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.285996914 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.286060095 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.286067009 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.288815022 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.288842916 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.288882017 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.288891077 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.288935900 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.290898085 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.293479919 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.293538094 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.293545961 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.295696974 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.295720100 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.295751095 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.295758963 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.295803070 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.296456099 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.300474882 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.300575972 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.300587893 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.302191973 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.302324057 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.302330971 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.304430008 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.304466963 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.304491043 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.304501057 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.304546118 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.306718111 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.307872057 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.307934046 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.307941914 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.309770107 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.309827089 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.309834957 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.311850071 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.311908960 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.311914921 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.311966896 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.312016010 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.312114000 CEST	49769	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.312131882 CEST	443	49769	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.479088068 CEST	443	49773	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.479203939 CEST	443	49770	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.479304075 CEST	443	49770	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.479374886 CEST	49770	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.479399920 CEST	49773	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.479424000 CEST	443	49773	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.479711056 CEST	443	49773	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.479931116 CEST	49770	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.479952097 CEST	443	49770	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.480695963 CEST	49773	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.480755091 CEST	443	49773	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.481041908 CEST	49773	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.481065035 CEST	443	49773	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.538844109 CEST	443	49774	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.539164066 CEST	49774	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.539182901 CEST	443	49774	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.539465904 CEST	443	49774	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.539767981 CEST	49774	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.539820910 CEST	443	49774	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.539935112 CEST	49774	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.539947987 CEST	443	49774	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.548666000 CEST	443	49775	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.548919916 CEST	49775	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.548953056 CEST	443	49775	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.549809933 CEST	443	49775	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.549882889 CEST	49775	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.550199986 CEST	49775	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.550275087 CEST	443	49775	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.550381899 CEST	49775	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.550399065 CEST	443	49775	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.593226910 CEST	49775	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.810914993 CEST	443	49773	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.810959101 CEST	443	49773	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.811022043 CEST	49773	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.811039925 CEST	443	49773	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.811635971 CEST	443	49773	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.811685085 CEST	49773	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.811880112 CEST	49773	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.811891079 CEST	443	49773	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.883027077 CEST	443	49775	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.883131027 CEST	443	49775	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.883209944 CEST	49775	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.883986950 CEST	49775	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.884021044 CEST	443	49775	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.926035881 CEST	443	49774	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.926065922 CEST	443	49774	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.926096916 CEST	443	49774	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.926131964 CEST	49774	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.926162004 CEST	443	49774	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.926206112 CEST	443	49774	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:28.926208973 CEST	49774	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.926271915 CEST	49774	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.927109957 CEST	49774	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:28.927124023 CEST	443	49774	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:29.055613041 CEST	49778	443	192.168.2.16	142.250.66.195
Apr 26, 2024 17:32:29.055656910 CEST	443	49778	142.250.66.195	192.168.2.16
Apr 26, 2024 17:32:29.055752039 CEST	49778	443	192.168.2.16	142.250.66.195
Apr 26, 2024 17:32:29.055965900 CEST	49778	443	192.168.2.16	142.250.66.195
Apr 26, 2024 17:32:29.055984974 CEST	443	49778	142.250.66.195	192.168.2.16
Apr 26, 2024 17:32:29.108902931 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:29.108949900 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:29.109033108 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:29.109244108 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:29.109261990 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:29.444940090 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:29.496184111 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:29.549416065 CEST	49780	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:29.549460888 CEST	443	49780	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:29.549560070 CEST	49780	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:29.592880011 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:29.592905045 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:29.594557047 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:29.644185066 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:29.916562080 CEST	443	49778	142.250.66.195	192.168.2.16
Apr 26, 2024 17:32:29.965192080 CEST	49778	443	192.168.2.16	142.250.66.195
Apr 26, 2024 17:32:29.973377943 CEST	49780	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:29.973406076 CEST	443	49780	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:29.973846912 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:29.974246979 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:29.974721909 CEST	49778	443	192.168.2.16	142.250.66.195
Apr 26, 2024 17:32:29.974729061 CEST	443	49778	142.250.66.195	192.168.2.16
Apr 26, 2024 17:32:29.975203037 CEST	443	49778	142.250.66.195	192.168.2.16
Apr 26, 2024 17:32:29.975260973 CEST	49778	443	192.168.2.16	142.250.66.195
Apr 26, 2024 17:32:29.975349903 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:29.975409985 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:29.975944042 CEST	443	49778	142.250.66.195	192.168.2.16
Apr 26, 2024 17:32:29.975986958 CEST	49778	443	192.168.2.16	142.250.66.195
Apr 26, 2024 17:32:29.977516890 CEST	49778	443	192.168.2.16	142.250.66.195
Apr 26, 2024 17:32:29.977581024 CEST	443	49778	142.250.66.195	192.168.2.16
Apr 26, 2024 17:32:29.977734089 CEST	49778	443	192.168.2.16	142.250.66.195
Apr 26, 2024 17:32:29.977741003 CEST	443	49778	142.250.66.195	192.168.2.16
Apr 26, 2024 17:32:30.024293900 CEST	49778	443	192.168.2.16	142.250.66.195
Apr 26, 2024 17:32:30.211337090 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.211404085 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.211443901 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.211457014 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.211476088 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.211525917 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.211534023 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.211673021 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.211729050 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.211736917 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.221729040 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.221806049 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.221822023 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.233007908 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.233098030 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.233125925 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.244119883 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.244190931 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.244213104 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.295227051 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.295245886 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.300261021 CEST	443	49780	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.300621033 CEST	49780	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.300641060 CEST	443	49780	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.300972939 CEST	443	49780	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.301528931 CEST	49780	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.301595926 CEST	443	49780	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.301754951 CEST	49780	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.301785946 CEST	443	49780	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.344551086 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.367459059 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.372149944 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.372206926 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.372234106 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.372267008 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.372318983 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.383533955 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.394283056 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.394365072 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.394380093 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.405359983 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.405441999 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.405451059 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.405479908 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.405529976 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.416610003 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.427401066 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.427472115 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.427488089 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.427501917 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.427545071 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.437597036 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.447902918 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.447952032 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.447971106 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.447981119 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.448035002 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.458093882 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.468408108 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.468461990 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.468470097 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.478583097 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.478653908 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.478672981 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.488677979 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.488748074 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.488758087 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.498832941 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.498899937 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.498909950 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.522850037 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.522931099 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.522945881 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.527307034 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.527342081 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.527373075 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.527384996 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.527429104 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.535736084 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.543862104 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.543904066 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.543940067 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.543952942 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.543999910 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.551248074 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.558806896 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.558871031 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.558886051 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.559043884 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.559094906 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.559103012 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.580303907 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.580545902 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.580559015 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.580809116 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.580864906 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.580874920 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.580966949 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.581029892 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.581037045 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.587347031 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.587409019 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.587418079 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.598026037 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.598109007 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.598115921 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.605320930 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.605401993 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.605411053 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.605442047 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.605487108 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.612164021 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.619304895 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.619359016 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.619368076 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.626317978 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.626368046 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.626398087 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.626408100 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.626457930 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.628705978 CEST	443	49780	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.628772974 CEST	443	49780	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.628824949 CEST	49780	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.629383087 CEST	49780	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.629410982 CEST	443	49780	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.629424095 CEST	49780	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.629462957 CEST	49780	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.633421898 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.640510082 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.640552044 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.640568018 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.640575886 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.640619993 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.647315979 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.647403002 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.647452116 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.647463083 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.657764912 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.657826900 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.657838106 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.663057089 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.663144112 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.663151026 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.668879986 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.668945074 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.668953896 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.678236008 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.678308964 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.678318024 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.686312914 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.686376095 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.686384916 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.691777945 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.691848993 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.691857100 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.697748899 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.697817087 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.697824955 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.700536013 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.700598001 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.700611115 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.703200102 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.703255892 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.703264952 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.706310987 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.706367970 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.706377983 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.710875988 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.710932970 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.710942984 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.714984894 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.715045929 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.715054035 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.717493057 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.717555046 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.717562914 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.720482111 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.720537901 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.720546007 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.724041939 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.724131107 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.724139929 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.727529049 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.727580070 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.727581978 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.727596998 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.727643967 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.731046915 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.732924938 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.732976913 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.732988119 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.736627102 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.736680984 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.736690998 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.740014076 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.740073919 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.740084887 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.743608952 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.743662119 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.743671894 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.747205019 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.747258902 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.747268915 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.750663996 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.750719070 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.750729084 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.754051924 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.754123926 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.754134893 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.758076906 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.758152008 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.758164883 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.760921955 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.760989904 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.761003017 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.764239073 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.764317989 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.764328003 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.767661095 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.767725945 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.767738104 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.771310091 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.771385908 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.771398067 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.775501966 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.775562048 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.775579929 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.778871059 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.778935909 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.778944016 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.781616926 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.781672955 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.781683922 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.785165071 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.785227060 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.785238028 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.788342953 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.788409948 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.788418055 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.791464090 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.791529894 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.791537046 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.794193983 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.794238091 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.794254065 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.794265985 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.794313908 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.797230959 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.797308922 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.797355890 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.797364950 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.800270081 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.800323009 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.800332069 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.803221941 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.803275108 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.803283930 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.805974960 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.806029081 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.806037903 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.808990002 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.809047937 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.809055090 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.813313007 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.813366890 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.813378096 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.816310883 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.816361904 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.816366911 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.816376925 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.816421032 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.819118977 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.822031975 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.822073936 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.822082996 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.822091103 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.822129965 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.824889898 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.827714920 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.827759027 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.827778101 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.827786922 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.827830076 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.830729961 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.832858086 CEST	443	49778	142.250.66.195	192.168.2.16
Apr 26, 2024 17:32:30.833477974 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.833529949 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.833534956 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.833549976 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.833595037 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.835706949 CEST	443	49778	142.250.66.195	192.168.2.16
Apr 26, 2024 17:32:30.835772038 CEST	49778	443	192.168.2.16	142.250.66.195
Apr 26, 2024 17:32:30.836195946 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.836287975 CEST	49778	443	192.168.2.16	142.250.66.195
Apr 26, 2024 17:32:30.836307049 CEST	443	49778	142.250.66.195	192.168.2.16
Apr 26, 2024 17:32:30.839071035 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.839137077 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.839148045 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.841720104 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.841762066 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.841777086 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.841785908 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.841835976 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.844521046 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.847485065 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.847533941 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.847543001 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.848831892 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.848893881 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.848902941 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.851619005 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.851681948 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.851690054 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.854311943 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.854366064 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.854374886 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.856868029 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.856925964 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.856934071 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.859607935 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.859663963 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.859672070 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.862006903 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.862061977 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.862071991 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.864512920 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.864569902 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.864578009 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.867012024 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.867077112 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.867086887 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.869221926 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.869282007 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.869290113 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.871865988 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.871927023 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.871934891 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.873768091 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.873827934 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.873836994 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.876053095 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.876115084 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.876126051 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.878422022 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.878479958 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.878489017 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.880520105 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.880584002 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.880593061 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.883609056 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.883640051 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.883666039 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.883676052 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.883733034 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.885690928 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.887861967 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.887917995 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.887926102 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.890002966 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.890058041 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.890065908 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.892030954 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.892066002 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.892082930 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.892091990 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.892132998 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.894104004 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.896471024 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.896586895 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.896598101 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.898082972 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.898134947 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.898142099 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.900536060 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.900592089 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.900599957 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.902014971 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.902065039 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.902079105 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.904007912 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.904059887 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.904067039 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.905977964 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.906008959 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.906034946 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.906044006 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.906101942 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.908092976 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.909727097 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.909830093 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.909838915 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.911550999 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.911607027 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.911616087 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.912499905 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.912554026 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.912563086 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.915106058 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.915174961 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.915184975 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.916604042 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.916662931 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.916671038 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.917859077 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.917917013 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.917926073 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.919564962 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.919619083 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.919625998 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.921329021 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.921380043 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.921389103 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.923258066 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.923309088 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.923317909 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.924977064 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.925033092 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.925041914 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.926573038 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.926626921 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.926635981 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.928252935 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.928303003 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.928313017 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.929927111 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.930085897 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.930111885 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.931934118 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.931988955 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.931999922 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.933252096 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.933305979 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.933315039 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.934899092 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.934948921 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.934957027 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.937308073 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.937361002 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.937371016 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.938926935 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.938980103 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.938990116 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.940579891 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.940673113 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.940675020 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.940686941 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.940740108 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.942203999 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.943682909 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.943737030 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.943737984 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.943751097 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.943799019 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.945286989 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.946938038 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.946995974 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.947006941 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.948317051 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.948369980 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.948378086 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.949923992 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.949944019 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.949974060 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.949984074 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.950058937 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.951422930 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.952950954 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.953006983 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.953016043 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.954572916 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.954633951 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.954643011 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.955914974 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.955936909 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.955976009 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.955986023 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.956044912 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.957935095 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.959886074 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.959937096 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.959945917 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.960661888 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.960709095 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.960725069 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.961966991 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.962017059 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.962025881 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.963784933 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.963850021 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.963859081 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.966995955 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.967050076 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.967057943 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.968080044 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.968125105 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.968135118 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.970020056 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.970071077 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.970079899 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.972182989 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.972249985 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.972259998 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.973228931 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.973280907 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.973289967 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.974448919 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.974495888 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.974504948 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.975975037 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.976028919 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.976037025 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.978740931 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.978800058 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.978809118 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.979731083 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.979780912 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.979790926 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.981103897 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.981175900 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.981184006 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.983082056 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.983133078 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.983141899 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.984798908 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.984827995 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.984843969 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.984853983 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.984898090 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.986932993 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.987698078 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.987731934 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.987756014 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.987766981 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.987832069 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.988992929 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.990056992 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.990103960 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.990111113 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.991930962 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.991959095 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.991981030 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.991992950 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.992033005 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.993154049 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.995873928 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.995928049 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.995943069 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.999851942 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.999876976 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.999902964 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:30.999912977 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:30.999952078 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.001118898 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.003911972 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.003942013 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.003961086 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.003971100 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.004013062 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.005310059 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.010023117 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.010080099 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.010087967 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.012449026 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.012466908 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.012516975 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.012530088 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.012567997 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.013901949 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.015889883 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.015907049 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.015935898 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.015948057 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.015997887 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.017050028 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.018277884 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.018301010 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.018326998 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.018337011 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.018378973 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.018934965 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.020095110 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.020184040 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.020193100 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.021614075 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.021665096 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.021672964 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.023127079 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.023159027 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.023191929 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.023201942 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.023350954 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.024027109 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.024377108 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.024405003 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.024430037 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.024440050 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.024483919 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.024863005 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.025367022 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.025425911 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.025435925 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.025553942 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.025610924 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.025619030 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.026165962 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.026221037 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.026228905 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.026848078 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.026906013 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.026916027 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.027316093 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.027375937 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.027384996 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.027931929 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.027980089 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.027987957 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.028251886 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.028300047 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.028309107 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.031764984 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.031817913 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.031826973 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.032238007 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.032273054 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.032284975 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.032294989 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.032335997 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.032371998 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.032459021 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.032502890 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.032510042 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.032562017 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.032615900 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.032618999 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.032628059 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.032669067 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.032670021 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.032680988 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.032733917 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.032743931 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.032819033 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.032852888 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.032865047 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.032875061 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.032916069 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.032918930 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.032929897 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.032987118 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.032994032 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.033073902 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.033103943 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.033116102 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.033123016 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.033171892 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.033178091 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.033188105 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.033232927 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.033232927 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.033243895 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.033282042 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.033291101 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.034455061 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.034498930 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.034507036 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.034584045 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.034626961 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.034636021 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.035336018 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.035382986 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.035401106 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.036420107 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.036472082 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.036479950 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.037537098 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.037580967 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.037590027 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.039191961 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.039231062 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.039251089 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.039259911 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.039298058 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.040149927 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.041151047 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.041183949 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.041203976 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.041215897 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.041254044 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.042098045 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.043333054 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.043366909 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.043428898 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.043440104 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.043478966 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.044239044 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.045502901 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.045542002 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.045567036 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.045578003 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.045625925 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.046562910 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.047254086 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.047286987 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.047310114 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.047318935 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.047363997 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.048219919 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.049232960 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.049256086 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.049283028 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.049293041 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.049334049 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.050268888 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.051620960 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.051646948 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.051671982 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.051681995 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.051727057 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.052252054 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.053231955 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.053260088 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.053282022 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.053292036 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.053338051 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.054251909 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.055442095 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.055479050 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.055491924 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.055505037 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.055555105 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.056191921 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.057223082 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.057250023 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.057271957 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.057284117 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.057322979 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.058175087 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.059175014 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.059200048 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.059226990 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.059237003 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.059279919 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.060091019 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.061031103 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.061049938 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.061093092 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.061109066 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.061166048 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.062140942 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.062961102 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.062995911 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.063033104 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.063044071 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.063087940 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.063889980 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.064450979 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.064502001 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.064512014 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.065346956 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.065408945 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.065431118 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.066297054 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.066349030 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.066358089 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.067256927 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.067307949 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.067317009 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.068226099 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.068276882 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.068284035 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.069122076 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.069179058 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.069186926 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.070091963 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.070141077 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.070148945 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.070964098 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.071032047 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.071041107 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.072974920 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.073024035 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.073061943 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.073405981 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.073463917 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.073476076 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.074287891 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.074354887 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.074364901 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.074902058 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.074949026 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.074956894 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.075546026 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.075649023 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.075659990 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.076447964 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.076522112 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.076560974 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.077356100 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.077414036 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.077445984 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.078211069 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.078267097 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.078279018 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.079077959 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.079129934 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.079138994 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.080077887 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.080126047 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.080140114 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.080898046 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.080950975 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.080964088 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.081733942 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.081784010 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.081793070 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.082580090 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.082657099 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.082665920 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.083569050 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.083623886 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.083632946 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.084373951 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.084429026 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.084439993 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.085406065 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.085458994 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.085468054 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.086132050 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.086185932 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.086201906 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.087464094 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.087491035 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.087517977 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.087531090 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.087582111 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.088238955 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.089099884 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.089122057 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.089168072 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.089179039 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.089220047 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.090902090 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.091332912 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.091358900 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.091386080 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.091396093 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.091440916 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.091711044 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.092844963 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.092869997 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.092895031 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.092905998 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.092953920 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.093360901 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.094384909 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.094419956 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.094434977 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.094448090 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.094485044 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.095083952 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.096194983 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.096214056 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.096246004 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.096256971 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.096306086 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.097022057 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.097521067 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.097547054 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.097573996 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.097584963 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.097623110 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.098368883 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.099445105 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.099467039 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.099543095 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.099551916 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.099601030 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.100104094 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.100792885 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.100809097 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.100933075 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.100945950 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.100999117 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.101723909 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.102760077 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.102783918 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.102811098 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.102823973 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.102883101 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.103151083 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.103981018 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.104036093 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.104046106 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.105045080 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.105067015 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.105101109 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.105112076 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.105175972 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.105552912 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.106384993 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.106408119 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.106440067 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.106451988 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.106498957 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.107161999 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.107918978 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.107971907 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.107980967 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.108309031 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.108370066 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.108381033 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.109147072 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.109200001 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.109209061 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.109885931 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.109939098 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.109946966 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.110671997 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.110724926 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.110733032 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.111469984 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.111525059 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.111534119 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.112267017 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.112328053 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.112337112 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.112973928 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.113030910 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.113039970 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.114193916 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.114272118 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.114280939 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.114543915 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.114599943 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.114614010 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.115633011 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.115694046 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.115703106 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.116048098 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.116108894 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.116117001 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.116780043 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.116833925 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.116842031 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.117535114 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.117588043 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.117598057 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.118283987 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.118338108 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.118346930 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.119105101 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.119174004 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.119182110 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.119827986 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.119882107 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.119890928 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.120634079 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.120682955 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.120691061 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.121371984 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.121429920 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.121437073 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.122359037 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.122412920 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.122421980 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.122873068 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.122927904 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.122936010 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.123924971 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.123987913 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.124002934 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.124869108 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.124924898 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.124933958 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.125433922 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.125492096 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.125499964 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.126192093 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.126244068 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.126252890 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.126635075 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.126687050 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.126696110 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.127552032 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.127595901 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.127605915 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.127616882 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.127660990 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.128326893 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.129018068 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.129072905 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.129076958 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.129089117 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.129134893 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.129779100 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.130489111 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.130511999 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.130543947 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.130554914 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.130598068 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.131334066 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.131969929 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.132011890 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.132025003 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.132036924 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.132083893 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.132869005 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.133487940 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.133539915 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.133544922 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.133555889 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.133598089 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.134196043 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.135164976 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.135189056 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.135226965 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.135238886 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.135288000 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.135572910 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.136295080 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.136317015 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.136353016 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.136364937 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.136411905 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.138917923 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.139523029 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.139542103 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.139614105 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.139630079 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.139681101 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.139961004 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.140444040 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.140465975 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.140501976 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.140516996 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.140566111 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.140578032 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.140933037 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.140953064 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.141109943 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.141133070 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.141191959 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.141277075 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.141954899 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.141983032 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.142018080 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.142038107 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.142087936 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.142781973 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.143575907 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.143594027 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.143982887 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.143996954 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.144048929 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.144072056 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.144819021 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.144874096 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.144884109 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.145445108 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.145499945 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.145508051 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.145911932 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.145965099 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.145975113 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.146497011 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.146553040 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.146562099 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.147289991 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.147361994 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.147370100 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.147927999 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.147984028 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.147994041 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.148621082 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.148678064 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.148688078 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.149259090 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.149313927 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.149322033 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.149923086 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.149977922 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.149986029 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.150612116 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.150675058 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.150684118 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.151278973 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.151335955 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.151345015 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.152215004 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.152307034 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.152317047 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.152700901 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.152757883 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.152770042 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.156008959 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.156075001 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.156085014 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.156280041 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.156335115 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.156344891 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.156955004 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.157007933 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.157016993 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.157612085 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.157666922 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.157674074 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.159708023 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.159763098 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.159771919 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.160115004 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.160186052 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.160193920 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.161197901 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.161257982 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.161266088 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.161474943 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.161529064 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.161536932 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.166074991 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.166186094 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.166193962 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.168638945 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.168700933 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.168709993 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.168875933 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.168926001 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.168934107 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.169624090 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.169677973 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.169686079 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.170295000 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.170355082 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.170366049 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.170891047 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.170945883 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.170953989 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.172198057 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.172215939 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.172270060 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.172278881 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.172332048 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.173207998 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.173552036 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.173568010 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.173619032 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.173626900 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.173681974 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.174217939 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.174915075 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.174937010 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.174983978 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.174993038 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.175045967 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.175626993 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.176245928 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.176264048 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.176300049 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.176311016 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.176903963 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.177572012 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.177581072 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.177611113 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.177624941 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.177634001 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.177683115 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.178299904 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.178889036 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.178931952 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.178946972 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.178955078 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.178998947 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.179764986 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.180386066 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.180440903 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.180449963 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.180818081 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.180846930 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.180876017 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.180886030 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.180927038 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.181538105 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.182159901 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.182187080 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.182204008 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.182214975 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.182226896 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.182255983 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.183211088 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.183247089 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.183273077 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.183283091 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.183325052 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.184061050 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.184096098 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.184146881 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.184155941 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.185241938 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.185261965 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.185316086 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.185327053 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.185369968 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.186305046 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.186388969 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.186440945 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.186450005 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.187052965 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.187086105 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.187112093 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.187122107 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.187197924 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.187999010 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.188040018 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.188081980 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.188088894 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.188826084 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.188880920 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.188886881 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.188896894 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.188939095 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.189693928 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.189744949 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.189790010 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.189798117 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.190570116 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.190596104 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.190624952 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.190634966 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.190675020 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.191294909 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.191353083 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.191399097 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.191406965 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.192147970 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.192172050 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.192199945 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.192209959 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.192256927 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.192748070 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.192801952 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.192868948 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.192876101 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.194044113 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.194082975 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.194097996 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.194108009 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.194143057 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.194232941 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.194300890 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.194338083 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.194345951 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.195020914 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.195051908 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.195089102 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.195096970 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.195132971 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.196232080 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.196302891 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.196352005 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.196523905 CEST	49779	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.196543932 CEST	443	49779	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.260286093 CEST	49781	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.260341883 CEST	443	49781	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.260449886 CEST	49781	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.260679960 CEST	49781	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.260701895 CEST	443	49781	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.589943886 CEST	49782	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.589991093 CEST	443	49782	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.590053082 CEST	49783	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.590104103 CEST	443	49783	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.590133905 CEST	49782	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.590178967 CEST	49783	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.590415001 CEST	49782	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.590432882 CEST	443	49782	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.590543985 CEST	49783	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.590559006 CEST	443	49783	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.605715036 CEST	49784	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.605736971 CEST	443	49784	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.605811119 CEST	49784	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.606091022 CEST	49785	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.606131077 CEST	443	49785	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.606199980 CEST	49785	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.606408119 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.606489897 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.606555939 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.606590986 CEST	49784	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.606601954 CEST	443	49784	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.606724977 CEST	49785	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.606744051 CEST	443	49785	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.606868982 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.606901884 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.650150061 CEST	443	49781	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.650471926 CEST	49781	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.650501966 CEST	443	49781	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.651266098 CEST	443	49781	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.651573896 CEST	49781	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.651642084 CEST	443	49781	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.651743889 CEST	49781	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.651771069 CEST	443	49781	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.938126087 CEST	443	49783	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.938476086 CEST	49783	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.938489914 CEST	443	49783	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.942274094 CEST	443	49783	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.942342997 CEST	49783	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.942713022 CEST	49783	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.942795992 CEST	443	49783	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.942893028 CEST	49783	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.942902088 CEST	443	49783	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.981934071 CEST	443	49782	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.982220888 CEST	49782	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.982249975 CEST	443	49782	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.982594967 CEST	443	49782	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.982932091 CEST	49782	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.983000040 CEST	443	49782	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.983143091 CEST	49782	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.983156919 CEST	443	49782	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.988368988 CEST	49783	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.994199038 CEST	443	49784	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.994411945 CEST	49784	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.994425058 CEST	443	49784	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.995511055 CEST	443	49784	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.995587111 CEST	49784	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.995598078 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.995832920 CEST	49784	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.995892048 CEST	443	49784	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.995971918 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.996015072 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.996088982 CEST	49784	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.996094942 CEST	443	49784	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.997067928 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.997140884 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.997392893 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.997466087 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:31.997504950 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:31.997520924 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.036191940 CEST	49782	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.036218882 CEST	49784	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.052206993 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.052232981 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.061579943 CEST	443	49781	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.061813116 CEST	443	49781	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.061875105 CEST	49781	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.062933922 CEST	49781	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.062951088 CEST	443	49781	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.063416958 CEST	49787	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.063452005 CEST	443	49787	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.063513041 CEST	49787	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.063971043 CEST	49787	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.063982964 CEST	443	49787	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.100223064 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.379182100 CEST	443	49783	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.379383087 CEST	443	49783	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.379457951 CEST	443	49783	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.379477978 CEST	49783	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.379503012 CEST	443	49783	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.379551888 CEST	49783	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.380675077 CEST	443	49783	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.392385006 CEST	443	49783	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.392424107 CEST	443	49783	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.392503977 CEST	49783	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.392517090 CEST	443	49783	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.392627001 CEST	49783	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.407285929 CEST	443	49784	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.408193111 CEST	443	49782	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.408327103 CEST	443	49787	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.408582926 CEST	49787	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.408598900 CEST	443	49787	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.408878088 CEST	443	49787	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.409198999 CEST	49787	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.409249067 CEST	443	49787	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.409410954 CEST	49787	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.409421921 CEST	443	49787	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.409742117 CEST	443	49784	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.409811020 CEST	49784	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.410657883 CEST	49784	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.410670042 CEST	443	49784	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.411290884 CEST	49788	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.411339045 CEST	443	49788	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.411416054 CEST	49788	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.411843061 CEST	49788	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.411861897 CEST	443	49788	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.436094999 CEST	443	49785	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.436386108 CEST	49785	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.436413050 CEST	443	49785	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.437835932 CEST	443	49785	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.437915087 CEST	49785	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.438208103 CEST	49785	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.438290119 CEST	443	49785	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.438361883 CEST	49785	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.438369036 CEST	443	49785	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.451220036 CEST	49782	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.451245070 CEST	443	49782	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.483320951 CEST	49785	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.499278069 CEST	49782	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.694044113 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.694086075 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.694111109 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.694150925 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.694179058 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.694227934 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.694418907 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.694518089 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.694566965 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.694576979 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.706878901 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.706952095 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.706959963 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.728250027 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.728318930 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.728327036 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.744910955 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.745009899 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.745017052 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.751513958 CEST	443	49787	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.751744032 CEST	443	49787	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.751844883 CEST	49787	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.752230883 CEST	49787	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.752244949 CEST	443	49787	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.752279043 CEST	49787	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.752286911 CEST	49787	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.752600908 CEST	49789	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.752660036 CEST	443	49789	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.752727032 CEST	49789	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.753036976 CEST	49789	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.753060102 CEST	443	49789	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.779525042 CEST	443	49785	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.779597044 CEST	443	49785	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.779685020 CEST	49785	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.787344933 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.787352085 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.801425934 CEST	49785	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.801465034 CEST	443	49785	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.811003923 CEST	443	49788	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.811316013 CEST	49788	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.811346054 CEST	443	49788	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.811641932 CEST	443	49788	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.811937094 CEST	49788	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.811996937 CEST	443	49788	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.812120914 CEST	49788	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.812150955 CEST	443	49788	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.835437059 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.880448103 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.889766932 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.889842987 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.889859915 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.901932001 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.901962996 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.902024984 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.902045965 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.902092934 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.913026094 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.926009893 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.926039934 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.926100969 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.926120043 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.926176071 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.938920021 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.952012062 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.952054024 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.952083111 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.952094078 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.952157974 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.966176987 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.978693962 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.978802919 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.978811979 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.990843058 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:32.990895033 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:32.990904093 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.003823042 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.003850937 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.003884077 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.003892899 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.003940105 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.005785942 CEST	443	49783	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.006056070 CEST	443	49783	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.006117105 CEST	49783	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.016247034 CEST	49783	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.016285896 CEST	443	49783	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.020780087 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.027204990 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.027281046 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.027287960 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.027333021 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.027374983 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.027412891 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.039416075 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.039489031 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.039504051 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.067276001 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.067367077 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.067392111 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.071604967 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.071661949 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.071683884 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.080964088 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.081063032 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.081072092 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.090392113 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.090451956 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.090461969 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.099673986 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.099742889 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.099750996 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.109738111 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.109764099 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.109792948 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.109803915 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.109843016 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.116544008 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.123747110 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.123791933 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.123819113 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.123836994 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.123892069 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.132450104 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.141153097 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.141171932 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.141228914 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.141247034 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.141309977 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.141988993 CEST	443	49789	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.149570942 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.153966904 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.154026985 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.154033899 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.162517071 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.162566900 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.162580967 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.179963112 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.180020094 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.180032969 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.180051088 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.180140018 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.183202028 CEST	49789	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.188221931 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.196799994 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.196820974 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.196861029 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.196877956 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.196935892 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.201487064 CEST	443	49788	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.201570034 CEST	443	49788	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.201621056 CEST	49788	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.205481052 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.214010000 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.214029074 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.214051008 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.214062929 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.214077950 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.214107990 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.222084045 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.222136974 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.222152948 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.230386972 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.230453968 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.230468988 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.237812996 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.237895966 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.237911940 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.245404005 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.245475054 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.245490074 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.256356001 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.256376028 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.256405115 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.256422043 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.256470919 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.264086008 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.271028042 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.271079063 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.271085024 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.275810957 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.275830984 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.275857925 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.275872946 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.275927067 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.280375004 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.284955978 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.284976006 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.285012007 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.285032034 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.285083055 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.289180994 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.293822050 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.293842077 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.293874979 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.293891907 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.293947935 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.297986984 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.302241087 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.302265882 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.302294970 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.302309990 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.302356958 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.306608915 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.310981989 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.311006069 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.311033964 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.311064959 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.311110020 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.315354109 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.317683935 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.317733049 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.317749023 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.321902037 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.321958065 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.321971893 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.326029062 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.326081991 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.326095104 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.329786062 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.329878092 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.329891920 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.334989071 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.335050106 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.335078001 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.338706017 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.338772058 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.338783979 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.341842890 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.341905117 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.341918945 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.346151114 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.346223116 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.346239090 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.349838972 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.349922895 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.349929094 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.353775978 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.353820086 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.353826046 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.357635975 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.357692957 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.357698917 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.361584902 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.361659050 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.361664057 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.367324114 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.367352009 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.367384911 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.367392063 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.367434025 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.371202946 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.374861956 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.374927998 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.374933004 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.374947071 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.374993086 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.378667116 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.382694006 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.382714033 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.382742882 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.382760048 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.382803917 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.386071920 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.389843941 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.389904976 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.389919996 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.393616915 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.393639088 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.393687010 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.393707037 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.393778086 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.396996975 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.400635958 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.400660038 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.400707006 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.400722980 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.400794983 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.404217958 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.407852888 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.407872915 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.407912970 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.407947063 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.407999039 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.411312103 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.413057089 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.413124084 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.413140059 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.416610003 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.416670084 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.416685104 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.420135975 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.420206070 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.420222044 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.423058987 CEST	49789	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.423149109 CEST	443	49789	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.423672915 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.423716068 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.423722982 CEST	443	49789	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.423729897 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.427117109 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.427187920 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.427192926 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.430706024 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.430788994 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.430803061 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.433866024 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.433917999 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.433931112 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.437246084 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.437287092 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.437299013 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.440596104 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.440650940 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.440664053 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.444292068 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.444339991 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.444345951 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.444583893 CEST	49788	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.444612026 CEST	443	49788	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.446022034 CEST	49789	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.446161032 CEST	443	49789	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.447448015 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.447494984 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.447500944 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.447987080 CEST	49789	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.448050022 CEST	443	49789	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.450403929 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.450445890 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.450453043 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.455162048 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.455189943 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.455209017 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.455215931 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.455260038 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.457292080 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.458331108 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.458759069 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.458798885 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.458879948 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.459199905 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.459216118 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.461687088 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.461764097 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.461781025 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.464881897 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.464936018 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.464941978 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.468826056 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.468880892 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.468893051 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.472459078 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.472515106 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.472528934 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.475285053 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.475339890 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.475353956 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.478230000 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.478293896 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.478298903 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.478307962 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.478355885 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.479863882 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.482053041 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.482119083 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.482142925 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.484489918 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.484556913 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.484587908 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.484606028 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.484651089 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.487699032 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.490067959 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.490094900 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.490149975 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.490165949 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.490277052 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.492588043 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.493851900 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.493930101 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.493942976 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.496191025 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.496252060 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.496264935 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.499285936 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.499352932 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.499366999 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.501724005 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.501791954 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.501805067 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.505479097 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.505548000 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.505561113 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.507791042 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.507854939 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.507868052 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.509552956 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.509615898 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.509628057 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.512480974 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.512545109 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.512557030 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.514751911 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.514806032 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.514818907 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.516474962 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.516531944 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.516539097 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.516587973 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.516772032 CEST	49786	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.516802073 CEST	443	49786	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.522161961 CEST	443	49782	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.522283077 CEST	443	49782	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.522285938 CEST	49782	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.522299051 CEST	443	49782	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.522360086 CEST	49782	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.522360086 CEST	49782	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.791867971 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.792231083 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.792248011 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.792726040 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.794325113 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.794404984 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.796120882 CEST	49792	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.796206951 CEST	443	49792	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.796274900 CEST	49793	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.796294928 CEST	49792	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.796325922 CEST	443	49793	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.796381950 CEST	49793	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.796690941 CEST	49794	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.796772957 CEST	443	49794	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.796838999 CEST	49794	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.796952963 CEST	49795	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.796977997 CEST	443	49795	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.797035933 CEST	49795	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.797096014 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.797130108 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.797302008 CEST	49792	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.797349930 CEST	443	49792	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.797760963 CEST	49793	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.797781944 CEST	443	49793	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.797940016 CEST	49794	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.797972918 CEST	443	49794	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:33.798063040 CEST	49795	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:33.798074961 CEST	443	49795	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.147392035 CEST	443	49795	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.147701979 CEST	49795	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.147711992 CEST	443	49795	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.148689032 CEST	443	49795	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.148756981 CEST	49795	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.149085999 CEST	49795	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.149142981 CEST	443	49795	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.149328947 CEST	49795	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.149336100 CEST	443	49795	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.168095112 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.168268919 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.168320894 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.168337107 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.168457031 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.168513060 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.168518066 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.168646097 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.168694019 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.168700933 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.179080009 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.179188967 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.179200888 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.187144041 CEST	443	49792	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.187489033 CEST	49792	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.187536001 CEST	443	49792	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.187935114 CEST	443	49794	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.188204050 CEST	49794	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.188218117 CEST	443	49794	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.188241005 CEST	443	49792	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.188559055 CEST	49792	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.188677073 CEST	443	49792	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.188751936 CEST	49792	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.188797951 CEST	443	49792	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.188870907 CEST	443	49793	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.189050913 CEST	49793	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.189089060 CEST	443	49793	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.189354897 CEST	443	49794	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.189419031 CEST	49794	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.189553022 CEST	443	49793	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.189613104 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.189665079 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.189672947 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.189687967 CEST	49794	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.189759016 CEST	443	49794	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.189918041 CEST	49793	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.190017939 CEST	443	49793	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.190069914 CEST	49794	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.190078974 CEST	443	49794	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.190193892 CEST	49793	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.190232992 CEST	443	49793	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.201174974 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.201251984 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.201258898 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.202215910 CEST	49795	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.233211040 CEST	49792	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.233362913 CEST	49794	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.249228954 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.249241114 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.297202110 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.324088097 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.329313040 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.329381943 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.329391003 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.329402924 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.329442024 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.340759993 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.352420092 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.352559090 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.352567911 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.362567902 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.362659931 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.362668037 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.362682104 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.362724066 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.373630047 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.380567074 CEST	443	49789	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.380829096 CEST	443	49789	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.380918980 CEST	49789	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.381258011 CEST	49789	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.381283045 CEST	443	49789	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.381297112 CEST	49789	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.381335020 CEST	49789	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.381640911 CEST	49796	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.381676912 CEST	443	49796	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.381808996 CEST	49796	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.382220030 CEST	49796	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.382236958 CEST	443	49796	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.384758949 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.384824991 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.384831905 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.396883011 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.396969080 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.396976948 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.405585051 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.405643940 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.405649900 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.415647030 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.415704966 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.415712118 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.425739050 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.425785065 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.425806046 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.425813913 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.425853968 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.435928106 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.445916891 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.445996046 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.446005106 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.446033955 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.446079016 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.446115971 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.457901001 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.457959890 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.457968950 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.483223915 CEST	443	49795	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.483264923 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.483367920 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.483387947 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.483414888 CEST	443	49795	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.483477116 CEST	49795	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.484291077 CEST	49795	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.484306097 CEST	443	49795	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.484317064 CEST	49795	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.484355927 CEST	49795	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.484797001 CEST	49797	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.484831095 CEST	443	49797	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.484903097 CEST	49797	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.485275984 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.485326052 CEST	49797	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.485344887 CEST	443	49797	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.485373974 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.485380888 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.492614985 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.492681980 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.492690086 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.501354933 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.501416922 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.501425982 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.508968115 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.509025097 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.509033918 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.514693975 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.514753103 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.514756918 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.521296024 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.521372080 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.521375895 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.528934956 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.528992891 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.528999090 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.535371065 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.535429001 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.535434008 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.542220116 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.542280912 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.542285919 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.553183079 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.553265095 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.553267956 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.553291082 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.553339958 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.560503960 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.567920923 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.567985058 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.568000078 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.574229956 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.574301004 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.574306965 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.577598095 CEST	443	49794	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.578442097 CEST	49794	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.578561068 CEST	443	49794	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.578634977 CEST	49794	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.578834057 CEST	49798	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.578862906 CEST	443	49798	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.578932047 CEST	49798	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.579298019 CEST	49798	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.579312086 CEST	443	49798	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.581233025 CEST	443	49793	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.581957102 CEST	443	49793	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.582022905 CEST	49793	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.582060099 CEST	49793	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.582077026 CEST	443	49793	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.582109928 CEST	49793	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.582129002 CEST	49793	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.582479954 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.582528114 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.582535028 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.584459066 CEST	443	49792	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.584579945 CEST	443	49792	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.584641933 CEST	49792	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.585103989 CEST	49792	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.585124016 CEST	443	49792	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.585138083 CEST	49792	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.585197926 CEST	49792	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.590204000 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.590284109 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.590292931 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.590317011 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.590359926 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.596044064 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.603022099 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.603072882 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.603091955 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.603106022 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.603146076 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.609323025 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.615792990 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.615854025 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.615860939 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.622452974 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.622490883 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.622509956 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.622515917 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.622570038 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.628664017 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.635108948 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.635196924 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.635204077 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.638195992 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.638258934 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.638264894 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.644301891 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.644361973 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.644366980 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.650439978 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.650513887 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.650530100 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.656443119 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.656506062 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.656519890 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.660290956 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.660355091 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.660361052 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.663846016 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.663908005 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.663914919 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.667634010 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.667706966 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.667714119 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.671348095 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.671412945 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.671420097 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.675151110 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.675210953 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.675219059 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.679732084 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.679789066 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.679797888 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.682476997 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.682547092 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.682562113 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.686260939 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.686326027 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.686332941 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.689733982 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.689908028 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.689920902 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.691320896 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.691390991 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.691397905 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.695209026 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.695282936 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.695290089 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.698417902 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.698478937 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.698486090 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.702248096 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.702306032 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.702311039 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.705398083 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.705451965 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.705457926 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.708487988 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.708544970 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.708549976 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.711630106 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.711682081 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.711688042 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.715055943 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.715110064 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.715116978 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.717757940 CEST	443	49796	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.718025923 CEST	49796	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.718041897 CEST	443	49796	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.718446970 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.718499899 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.718507051 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.721424103 CEST	443	49796	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.721504927 CEST	49796	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.721894979 CEST	49796	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.721977949 CEST	443	49796	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.722063065 CEST	49796	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.722093105 CEST	443	49796	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.722181082 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.722230911 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.722237110 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.724895000 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.724953890 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.724961042 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.728164911 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.728223085 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.728230000 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.732881069 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.732916117 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.732938051 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.732945919 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.732990980 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.736129045 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.739238024 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.739278078 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.739294052 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.739303112 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.739346981 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.742383003 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.745800972 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.745856047 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.745863914 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.748497009 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.748550892 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.748558044 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.751899004 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.751952887 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.751960993 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.755238056 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.755281925 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.755311966 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.755321026 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.755368948 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.757776976 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.761833906 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.761908054 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.761918068 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.763875008 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.763943911 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.763957024 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.766896963 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.766926050 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.766952991 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.766964912 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.767013073 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.770111084 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.771641016 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.771694899 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.771704912 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.774245024 CEST	49796	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.774257898 CEST	443	49796	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.774981976 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.775047064 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.775055885 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.777537107 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.777590036 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.777597904 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.782861948 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.782922029 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.782929897 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.785692930 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.785756111 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.785763025 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.786256075 CEST	49799	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.786282063 CEST	443	49799	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.786349058 CEST	49799	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.786556005 CEST	49799	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.786573887 CEST	443	49799	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.789371014 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.789431095 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.789438009 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.790416002 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.790471077 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.790477991 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.792841911 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.792924881 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.792932987 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.797313929 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.797343016 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.797369003 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.797378063 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.797425985 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.799951077 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.803278923 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.803320885 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.803344011 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.803354979 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.803400040 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.805623055 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.807789087 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.807845116 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.807852983 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.809788942 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.809843063 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.809850931 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.812252998 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.812308073 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.812315941 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.815296888 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.815349102 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.815357924 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.817116022 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.817199945 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.817207098 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.819931030 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.819992065 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.819999933 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.822237015 CEST	49796	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.823031902 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.823086977 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.823096037 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.827721119 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.827775002 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.827784061 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.829236984 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.829291105 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.829298973 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.831839085 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.831892967 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.831902027 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.834042072 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.834112883 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.834124088 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.836623907 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.836685896 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.836699963 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.838593006 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.838644028 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.838653088 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.841214895 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.841280937 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.841291904 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.842967033 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.843027115 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.843043089 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.845973969 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.846035004 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.846044064 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.848875999 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.848946095 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.848956108 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.851562023 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.851618052 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.851627111 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.853528023 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.853581905 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.853590012 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.856337070 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.856398106 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.856406927 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.858048916 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.858108044 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.858114958 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.859829903 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.859885931 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.859896898 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.860624075 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.860677958 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.860686064 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.861341000 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.861392975 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.861401081 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.862148046 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.862202883 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.862210989 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.862993002 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.863053083 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.863064051 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.864934921 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.865004063 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.865011930 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.866913080 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.866970062 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.866976023 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.869103909 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.869220972 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.869227886 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.871453047 CEST	443	49797	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.871579885 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.871633053 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.871640921 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.871685028 CEST	49797	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.871705055 CEST	443	49797	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.871990919 CEST	443	49797	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.872304916 CEST	49797	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.872370005 CEST	443	49797	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.872447968 CEST	49797	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.872478008 CEST	443	49797	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.872751951 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.872819901 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.872828007 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.874651909 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.874700069 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.874706984 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.876440048 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.876493931 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.876502037 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.878200054 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.878253937 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.878261089 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.880280972 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.880335093 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.880342960 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.880707979 CEST	49800	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.880728006 CEST	443	49800	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.880811930 CEST	49800	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.881009102 CEST	49800	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.881019115 CEST	443	49800	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.881838083 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.881886959 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.881895065 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.883789062 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.883841991 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.883848906 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.885328054 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.885380030 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.885387897 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.887003899 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.887058020 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.887065887 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.888761997 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.888824940 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.888833046 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.890403986 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.890458107 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.890465021 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.892054081 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.892121077 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.892127991 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.893745899 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.893814087 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.893822908 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.895416975 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.895482063 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.895489931 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.897120953 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.897193909 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.897202015 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.898741007 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.898816109 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.898823977 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.900671005 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.900723934 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.900731087 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.902124882 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.902195930 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.902201891 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.903650999 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.903703928 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.903711081 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.905400038 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.905452967 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.905459881 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.906766891 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.906820059 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.906827927 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.908401012 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.908457994 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.908468008 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.909801006 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.909854889 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.909862995 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.911201954 CEST	443	49798	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.911300898 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.911354065 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.911360979 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.911422014 CEST	49798	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.911429882 CEST	443	49798	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.912518024 CEST	443	49798	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.912581921 CEST	49798	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.912861109 CEST	49798	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.912870884 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.912919998 CEST	443	49798	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.912930965 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.912936926 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.913006067 CEST	49798	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.913012981 CEST	443	49798	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.914319038 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.914370060 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.914376974 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.915832996 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.915883064 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.915890932 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.917265892 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.917314053 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.917320967 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.919023991 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.919075012 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.919083118 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.920119047 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.920186043 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.920200109 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.921705961 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.921763897 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.921777964 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.923171997 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.923226118 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.923234940 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.924401999 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.924458027 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.924464941 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.925802946 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.925857067 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.925863981 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.927350998 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.927413940 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.927422047 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.928566933 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.928631067 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.928638935 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.929980040 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.930058002 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.930064917 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.931407928 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.931469917 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.931479931 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.932760954 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.932818890 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.932830095 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.934148073 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.934223890 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.934236050 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.935565948 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.935637951 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.935646057 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.936764956 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.936811924 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.936820984 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.938113928 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.938183069 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.938190937 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.939424992 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.939485073 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.939492941 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.940732002 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.940788031 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.940797091 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.942104101 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.942169905 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.942178965 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.943473101 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.943525076 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.943535089 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.944825888 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.944879055 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.944886923 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.946094036 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.946147919 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.946155071 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.947357893 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.947422028 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.947429895 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.948744059 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.948796034 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.948803902 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.950016022 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.950095892 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.950103998 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.951251984 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.951296091 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.951304913 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.952565908 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.952616930 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.952625990 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.953855991 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.953911066 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.953917980 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.955321074 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.955369949 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.955377102 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.956341028 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.956391096 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.956398010 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.957503080 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.957555056 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.957561970 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.958745003 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.958801031 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.958808899 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.960239887 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.960303068 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.960315943 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.961457014 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.961503029 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.961509943 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.962527990 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.962578058 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.962584972 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.963588953 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.963650942 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.963659048 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.964768887 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.964823961 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.964833021 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.965186119 CEST	49798	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.966156960 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.966207027 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.966214895 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.967133999 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.967189074 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.967195988 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.968420029 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.968470097 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.968478918 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.969487906 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.969538927 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.969546080 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.970601082 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.970663071 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.970669985 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.971755028 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.971807957 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.971815109 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.972963095 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.973016024 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.973022938 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.974145889 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.974200964 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.974206924 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.975359917 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.975425959 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.975433111 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.976367950 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.976419926 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.976427078 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.977503061 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.977555037 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.977561951 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.978688002 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.978741884 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.978759050 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.979746103 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.979806900 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.979815006 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.980801105 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.980853081 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.980859041 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.981877089 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.981931925 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.981940031 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.983037949 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.983089924 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.983097076 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.984025955 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.984096050 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.984108925 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.985168934 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.985228062 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.985234976 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.986402988 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.986459970 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.986466885 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.987343073 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.987402916 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.987411022 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.988461018 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.988512993 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.988521099 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.989469051 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.989567041 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.989573956 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.990573883 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.990624905 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.990632057 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.991692066 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.991738081 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.991749048 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.992693901 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.992750883 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.992758036 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.993742943 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.993856907 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.993865013 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.994884968 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.994945049 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.994951963 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.996117115 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.996174097 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.996184111 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.996979952 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.997030973 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.997040987 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.998016119 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.998064995 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.998076916 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.999084949 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:34.999140978 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:34.999151945 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.000183105 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.000236988 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.000246048 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.001195908 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.001259089 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.001266956 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.002286911 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.002341032 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.002347946 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.003309011 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.003365040 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.003374100 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.004337072 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.004388094 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.004395962 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.005418062 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.005477905 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.005485058 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.006547928 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.006607056 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.006624937 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.007411957 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.007462025 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.007469893 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.008562088 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.008610964 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.008625031 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.009457111 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.009510040 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.009516954 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.010536909 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.010596037 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.010602951 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.011569023 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.011642933 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.011650085 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.012595892 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.012644053 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.012651920 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.013595104 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.013645887 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.013653994 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.014592886 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.014635086 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.014642954 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.015732050 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.015779972 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.015789032 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.016627073 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.016674995 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.016681910 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.017640114 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.017694950 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.017703056 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.018627882 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.018676996 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.018686056 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.019728899 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.019778967 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.019793034 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.020540953 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.020585060 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.020595074 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.021478891 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.021523952 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.021532059 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.022438049 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.022491932 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.022505999 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.023358107 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.023410082 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.023416042 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.024333000 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.024382114 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.024388075 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.025232077 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.025279045 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.025290012 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.026179075 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.026227951 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.026235104 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.027080059 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.027126074 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.027132988 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.027205944 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.027250051 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.027389050 CEST	49790	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.027405024 CEST	443	49790	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.027736902 CEST	49801	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.027771950 CEST	443	49801	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.027842045 CEST	49801	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.028259993 CEST	49801	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.028270960 CEST	443	49801	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.052014112 CEST	443	49796	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.052258015 CEST	443	49796	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.052345037 CEST	49796	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.052791119 CEST	49796	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.052791119 CEST	49796	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.052817106 CEST	443	49796	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.052856922 CEST	49796	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.053226948 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.053257942 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.053313971 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.054105997 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.054121017 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.180715084 CEST	443	49799	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.181094885 CEST	49799	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.181123972 CEST	443	49799	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.181596994 CEST	443	49799	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.181921005 CEST	49799	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.182002068 CEST	443	49799	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.182094097 CEST	49799	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.182121992 CEST	443	49799	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.209191084 CEST	443	49800	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.209521055 CEST	49800	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.209537029 CEST	443	49800	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.209815979 CEST	443	49800	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.210127115 CEST	49800	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.210179090 CEST	443	49800	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.210321903 CEST	49800	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.210344076 CEST	443	49800	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.242569923 CEST	443	49798	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.243038893 CEST	443	49798	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.243089914 CEST	49798	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.243128061 CEST	49798	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.243133068 CEST	443	49798	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.243146896 CEST	49798	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.243184090 CEST	49798	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.243484974 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.243529081 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.243602037 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.243865967 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.243887901 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.261957884 CEST	443	49797	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.262048006 CEST	443	49797	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.262109041 CEST	49797	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.262485981 CEST	49797	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.262505054 CEST	443	49797	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.262537003 CEST	49797	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.262553930 CEST	49797	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.356503963 CEST	443	49801	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.356805086 CEST	49801	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.356821060 CEST	443	49801	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.357093096 CEST	443	49801	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.357156038 CEST	49804	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.357192039 CEST	443	49804	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.357263088 CEST	49804	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.357454062 CEST	49801	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.357506037 CEST	443	49801	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.357640982 CEST	49804	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.357657909 CEST	443	49804	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.357805967 CEST	49801	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.357830048 CEST	443	49801	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.443520069 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.443844080 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.443860054 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.444334984 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.444643974 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.444722891 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.444819927 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.444850922 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.542203903 CEST	443	49800	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.542267084 CEST	443	49800	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.542350054 CEST	49800	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.542917967 CEST	49800	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.542928934 CEST	443	49800	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.543649912 CEST	49805	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.543697119 CEST	443	49805	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.543767929 CEST	49805	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.544114113 CEST	49805	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.544126034 CEST	443	49805	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.576702118 CEST	443	49799	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.576906919 CEST	443	49799	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.577004910 CEST	49799	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.577315092 CEST	49799	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.577327967 CEST	443	49799	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.577337027 CEST	49799	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.577378035 CEST	49799	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.577677011 CEST	49806	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.577706099 CEST	443	49806	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.577864885 CEST	49806	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.578098059 CEST	49806	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.578113079 CEST	443	49806	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.635781050 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.636154890 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.636188030 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.636524916 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.636835098 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.636897087 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.637015104 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.680123091 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.683630943 CEST	443	49804	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.683952093 CEST	49804	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.683971882 CEST	443	49804	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.684357882 CEST	443	49804	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.684679985 CEST	49804	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.684743881 CEST	443	49804	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.684828997 CEST	49804	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.684858084 CEST	443	49804	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.900890112 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.900940895 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.900986910 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.901155949 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.901170969 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.901335001 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.901428938 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.912575960 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.912600040 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.912719011 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.912728071 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.912862062 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.926292896 CEST	443	49806	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.926651955 CEST	49806	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.926681995 CEST	443	49806	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.927017927 CEST	443	49806	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.927553892 CEST	49806	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.927617073 CEST	443	49806	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.927736044 CEST	49806	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:35.927762985 CEST	443	49806	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:35.969227076 CEST	49806	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.044995070 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.045063972 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.045108080 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.045124054 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.045146942 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.045202971 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.045217037 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.045224905 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.045267105 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.045274973 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.056397915 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.056466103 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.056478024 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.063637018 CEST	443	49804	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.072067976 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.072124958 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.072134972 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.072351933 CEST	443	49804	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.072417021 CEST	49804	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.073386908 CEST	49804	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.073405981 CEST	443	49804	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.073776960 CEST	49807	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.073816061 CEST	443	49807	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.073870897 CEST	49807	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.074297905 CEST	49807	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.074316978 CEST	443	49807	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.082433939 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.082499027 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.082515001 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.129234076 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.129246950 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.143943071 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.144011974 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.144042015 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.144078970 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.144094944 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.144118071 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.144139051 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.144151926 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.144181013 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.144201040 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.144207001 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.144239902 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.144244909 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.144251108 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.144295931 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.144295931 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.144304991 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.144342899 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.144349098 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.144409895 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.144507885 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.144514084 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.150618076 CEST	443	49801	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.150660038 CEST	443	49801	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.150697947 CEST	443	49801	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.150741100 CEST	49801	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.150753021 CEST	443	49801	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.150815010 CEST	49801	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.150907993 CEST	443	49801	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.157540083 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.157618046 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.157625914 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.161398888 CEST	443	49801	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.161464930 CEST	49801	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.161473989 CEST	443	49801	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.171688080 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.171773911 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.171791077 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.173551083 CEST	443	49801	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.173649073 CEST	443	49801	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.173681021 CEST	49801	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.173687935 CEST	443	49801	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.173731089 CEST	49801	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.177473068 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.184945107 CEST	443	49801	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.185131073 CEST	443	49801	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.185208082 CEST	49801	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.185266972 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.185350895 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.185373068 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.199490070 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.199556112 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.199575901 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.213099003 CEST	49801	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.213114977 CEST	443	49801	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.213514090 CEST	49808	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.213551044 CEST	443	49808	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.213608027 CEST	49808	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.214261055 CEST	49808	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.214279890 CEST	443	49808	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.218604088 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.218681097 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.218709946 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.228548050 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.228611946 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.228634119 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.231453896 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.237833977 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.237885952 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.237896919 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.241136074 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.241218090 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.241225958 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.251064062 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.251142979 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.251148939 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.251169920 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.251231909 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.263952971 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.277278900 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.277295113 CEST	443	49806	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.277322054 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.277383089 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.277390957 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.277435064 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.278964043 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.279042006 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.279057980 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.285293102 CEST	443	49806	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.285435915 CEST	49806	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.290292025 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.290342093 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.290436029 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.290450096 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.296950102 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.297013044 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.297027111 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.303595066 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.303647995 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.303654909 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.308855057 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.308917046 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.308929920 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.316649914 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.316698074 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.316713095 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.316720009 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.316757917 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.321141958 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.321217060 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.321254015 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.328598976 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.332979918 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.333058119 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.333089113 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.344716072 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.344767094 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.344773054 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.344786882 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.344825029 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.347258091 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.347309113 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.347316027 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.352372885 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.356326103 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.356353998 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.356398106 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.356405020 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.356446028 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.364223003 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.364263058 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.364272118 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.364281893 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.364319086 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.368246078 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.376558065 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.380502939 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.380579948 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.380588055 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.380609989 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.380665064 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.388139963 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.388195038 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.388202906 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.388206959 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.388251066 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.391735077 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.402834892 CEST	443	49807	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.403800964 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.403879881 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.403928041 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.403966904 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.404016972 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.414159060 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.417725086 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.422663927 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.422707081 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.422717094 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.424154997 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.424216032 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.424226046 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.424267054 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.424312115 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.431700945 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.431745052 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.431802034 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.431808949 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.431854010 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.434190989 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.442940950 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.445310116 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.445362091 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.445370913 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.448765039 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.448808908 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.448812008 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.448820114 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.448853016 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.449585915 CEST	49807	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.449613094 CEST	443	49807	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.449955940 CEST	443	49807	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.452971935 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.453017950 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.453026056 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.457386971 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.462414980 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.462503910 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.462517977 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.465693951 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.465740919 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.465744972 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.471595049 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.471699953 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.471714973 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.474292994 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.474335909 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.474339008 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.474348068 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.474385977 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.479765892 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.479847908 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.479861975 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.482743979 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.488692999 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.488780975 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.488784075 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.488816023 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.488869905 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.491625071 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.491668940 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.491672993 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.491682053 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.491723061 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.493678093 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.498681068 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.498739958 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.498753071 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.499864101 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.503690004 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.503746986 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.503758907 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.504178047 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.504220009 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.504225016 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.509193897 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.509234905 CEST	49807	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.509248018 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.509260893 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.512131929 CEST	49807	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.512229919 CEST	443	49807	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.512783051 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.512826920 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.512831926 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.513900995 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.513961077 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.513972998 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.516849995 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.516917944 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.516928911 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.521171093 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.521214962 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.521219969 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.521825075 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.521879911 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.521892071 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.526770115 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.526829004 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.526840925 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.529814959 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.529860973 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.529865026 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.531883001 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.531939983 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.531953096 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.536679983 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.536740065 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.536751986 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.538188934 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.538232088 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.538235903 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.541619062 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.541670084 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.541676998 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.546575069 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.546622038 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.546628952 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.546787024 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.546829939 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.546834946 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.551640987 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.551700115 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.551706076 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.552203894 CEST	49807	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.555349112 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.555398941 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.555403948 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.556567907 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.556615114 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.556622982 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.562216997 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.562283039 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.562299967 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.563687086 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.563734055 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.563740969 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.566829920 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.566905022 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.566916943 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.571584940 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.571649075 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.571661949 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.572407007 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.572448969 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.572453022 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.573561907 CEST	49807	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.573615074 CEST	443	49807	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.573705912 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.579144001 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.579206944 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.579219103 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.580097914 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.580147982 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.580153942 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.584017992 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.584119081 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.584124088 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.584148884 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.584199905 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.590966940 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.591835022 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.591887951 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.591922045 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.595309019 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.595369101 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.595382929 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.596990108 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.597038984 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.597064972 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.598643064 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.598700047 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.598711967 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.603636026 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.603699923 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.603712082 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.606861115 CEST	443	49808	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.611870050 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.611915112 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.611927032 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.611955881 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.611994982 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.613096952 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.613152027 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.613163948 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.620436907 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.620490074 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.620501995 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.621386051 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.622703075 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.622750998 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.622761965 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.623527050 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.623565912 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.623573065 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.623603106 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.623641968 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.623749971 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.623805046 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.623816013 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.627574921 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.627644062 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.627655983 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.628123999 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.632030964 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.632095098 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.632121086 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.632765055 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.632805109 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.632816076 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.632839918 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.632877111 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.636645079 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.636722088 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.636734962 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.637512922 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.638968945 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.639014959 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.639022112 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.641658068 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.641716957 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.641716957 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.641746998 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.641792059 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.643779993 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.643845081 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.643851995 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.645883083 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.649255037 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.649307966 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.649315119 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.649844885 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.649893045 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.649889946 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.649916887 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.649954081 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.652668953 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.652718067 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.652724981 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.653816938 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.657258987 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.657315969 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.657324076 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.657443047 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.657485962 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.657488108 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.657506943 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.657543898 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.661463022 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.661729097 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.661787987 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.661799908 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.662194014 CEST	49808	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.665370941 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.665443897 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.665467978 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.666237116 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.666291952 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.666304111 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.667059898 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.667431116 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.667480946 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.667490959 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.670519114 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.670578957 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.670605898 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.671766996 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.671808958 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.671821117 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.674915075 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.674967051 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.674978971 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.675749063 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.675796986 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.675808907 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.679317951 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.679389954 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.679402113 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.679848909 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.679892063 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.679903030 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.683608055 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.683664083 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.683676004 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.683787107 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.683834076 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.683850050 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.687308073 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.687381029 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.687392950 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.687988997 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.688069105 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.688087940 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.692759037 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.692775011 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.692806005 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.692825079 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.692837954 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.692851067 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.696134090 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.696196079 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.696208000 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.696810007 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.696854115 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.696877003 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.699707985 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.699784994 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.699790955 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.699816942 CEST	49808	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.699827909 CEST	443	49808	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.701023102 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.701072931 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.701092958 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.701098919 CEST	443	49808	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.702965021 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.703016043 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.703022957 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.704729080 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.704776049 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.704797029 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.706998110 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.707047939 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.707055092 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.708770990 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.708837032 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.708848953 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.710546970 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.710599899 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.710606098 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.715658903 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.715708971 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.715725899 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.715987921 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.716038942 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.716044903 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.718172073 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.718223095 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.718230009 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.719330072 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.719368935 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.719377995 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.719394922 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.719430923 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.720077038 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.720134020 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.720140934 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.723175049 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.723392963 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.723442078 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.723448038 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.727349043 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.727380991 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.727396965 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.727405071 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.727448940 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.727452040 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.727488995 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.727494001 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.727511883 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.727547884 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.730654001 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.730803967 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.733930111 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.733989000 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.733995914 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.735090971 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.735132933 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.735135078 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.735147953 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.735183954 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.735763073 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.735806942 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.735812902 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.737715960 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.738399982 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.738442898 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.738450050 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.741476059 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.741518974 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.741524935 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.741609097 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.741652966 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.741667032 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.744591951 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.744647980 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.744654894 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.744657993 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.744713068 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.744719028 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.748475075 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.748497009 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.748518944 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.748526096 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.748541117 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.748542070 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.748572111 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.748617887 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.750673056 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.750735998 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.750746965 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.751342058 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.752619982 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.752665043 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.752671003 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.754431963 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.754477978 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.754501104 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.754894018 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.754935980 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.754941940 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.756195068 CEST	49808	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.757325888 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.757369041 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.757375002 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.757383108 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.757424116 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.757436037 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.759977102 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.760023117 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.760029078 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.761142015 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.761184931 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.761204958 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.762487888 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.762552023 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.762558937 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.762609005 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.762650013 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.762662888 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.765031099 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.765089989 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.765096903 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.766129017 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.766179085 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.766197920 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.768374920 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.768400908 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.768413067 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.768419981 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.768455982 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.770662069 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.770701885 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.770718098 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.771707058 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.777055025 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.777127028 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.777143002 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.777157068 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.777163029 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.777194977 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.777218103 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.777234077 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.779876947 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.779932022 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.779973984 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.779979944 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.779990911 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.780042887 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.781672001 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.781718969 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.781734943 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.786906004 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.786955118 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.786982059 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.788224936 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.788273096 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.788281918 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.788367033 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.788409948 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.788414955 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.790035009 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.790092945 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.790098906 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.793817043 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.793868065 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.793874979 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.796777010 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.796822071 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.796827078 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.800237894 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.800296068 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.800301075 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.805021048 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.805072069 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.805078983 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.808351040 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.808396101 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.808399916 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.811654091 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.811701059 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.811706066 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.815177917 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.815227032 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.815232038 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.818061113 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.818106890 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.818111897 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.820976019 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.821032047 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.821038008 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.825018883 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.825067043 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.825072050 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.829888105 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.829936028 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.829941988 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.833420992 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.833465099 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.833470106 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.838013887 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.838068008 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.838083029 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.840810061 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.840857983 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.840863943 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.842472076 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.842523098 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.842529058 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.844540119 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.844623089 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.844646931 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.844652891 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.844702005 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.845747948 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.846966982 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.847012997 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.847018003 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.847918987 CEST	49808	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.848206043 CEST	443	49808	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.848232031 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.848748922 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.848797083 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.848834038 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.850085020 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.850126982 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.850132942 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.851104975 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.853017092 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.853063107 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.853068113 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.853703976 CEST	443	49805	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.855655909 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.855700970 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.855706930 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.858053923 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.858102083 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.858108044 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.858731985 CEST	49805	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.858758926 CEST	443	49805	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.858954906 CEST	49808	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.858988047 CEST	443	49808	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.859077930 CEST	443	49805	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.861171007 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.861217022 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.861222029 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.862332106 CEST	49805	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.862396955 CEST	443	49805	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.863147020 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.863845110 CEST	49806	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.863872051 CEST	443	49806	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.864032030 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.864068031 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.864073038 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.864388943 CEST	49809	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.864414930 CEST	443	49809	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.864495993 CEST	49809	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.868292093 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.868377924 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.868382931 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.868922949 CEST	49809	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.868941069 CEST	443	49809	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.869294882 CEST	49805	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.869327068 CEST	443	49805	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.873305082 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.873352051 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.873358011 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.876044035 CEST	49802	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.876055002 CEST	443	49802	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.876296043 CEST	49810	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.876323938 CEST	443	49810	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.876391888 CEST	49810	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.876734018 CEST	49810	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.876746893 CEST	443	49810	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.877711058 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.877772093 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.877778053 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.880295992 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.880361080 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.880367041 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.883488894 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.883548021 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.883553028 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.887016058 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.887058973 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.887084961 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.887090921 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.887134075 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.889075041 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.889909029 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.889950991 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.889978886 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.889987946 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.890031099 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.890630960 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.891010046 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.891048908 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.891058922 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.891072035 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.891108990 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.891635895 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.891920090 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.891979933 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.891984940 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.892599106 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.892657995 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.892663002 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.894743919 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.894824028 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.894829988 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.896663904 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.896727085 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.896732092 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.898787975 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.898839951 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.898845911 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.900805950 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.900873899 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.900880098 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.902899981 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.902965069 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.902970076 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.904949903 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.905026913 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.905033112 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.905930996 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.905992985 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.905997992 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.908087969 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.908181906 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.908188105 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.910016060 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.910137892 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.910144091 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.911958933 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.912019968 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.912024975 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.914009094 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.914069891 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.914078951 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.915899992 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.915961981 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.915968895 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.917992115 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.918051004 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.918056011 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.920005083 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.920066118 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.920072079 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.922107935 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.922182083 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.922187090 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.922461033 CEST	443	49807	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.924204111 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.924259901 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.924264908 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.926311970 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.926367998 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.926373005 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.928313971 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.928386927 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.928392887 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.930026054 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.930089951 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.930095911 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.932733059 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.932791948 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.932797909 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.933608055 CEST	443	49807	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.933681011 CEST	49807	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.934407949 CEST	49807	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.934423923 CEST	443	49807	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.934475899 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.934534073 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.934539080 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.936642885 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.936713934 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.936718941 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.938252926 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.938313961 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.938318968 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.940059900 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.940124989 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.940130949 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.941755056 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.941814899 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.941821098 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.943492889 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.943581104 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.943586111 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.945007086 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.945066929 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.945071936 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.946856976 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.946928024 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.946933031 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.948610067 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.948668003 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.948673010 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.950248957 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.950310946 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.950315952 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.951795101 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.951855898 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.951862097 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.953377962 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.953439951 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.953444958 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.955073118 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.955128908 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.955133915 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.956552029 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.956604958 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.956610918 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.957962990 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.958022118 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.958028078 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.959592104 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.959640980 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.959645033 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.961052895 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.961107969 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.961113930 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.962477922 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.962529898 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.962536097 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.964147091 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.964191914 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.964196920 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.965913057 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.965962887 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.965967894 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.967631102 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.967679977 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.967685938 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.969969988 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.970019102 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.970024109 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.971752882 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.971803904 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.971812010 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.971821070 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.971860886 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.973278046 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.974961996 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.975002050 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.975018978 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.975023985 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.975071907 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.975076914 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.976356983 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.976408005 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.976413965 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.977782965 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.977835894 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.977842093 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.979566097 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.979619026 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.979624987 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.980886936 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.980942011 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.980947018 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.982261896 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.982309103 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.982315063 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.983856916 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.983910084 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.983916998 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.985582113 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.985635996 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.985645056 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.986906052 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.986958981 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.986965895 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.988473892 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.988529921 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.988538980 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.989696026 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.989751101 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.989761114 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.991086960 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.991149902 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.991157055 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.992360115 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.992418051 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.992427111 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.993957043 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.994024992 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.994035959 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.995373011 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.995436907 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.995445013 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.997236013 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.997302055 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.997311115 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.998903036 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:36.998971939 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:36.998981953 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.000890970 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.000957012 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.000966072 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.002731085 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.002800941 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.002809048 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.005084038 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.005156994 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.005165100 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.006597042 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.006665945 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.006674051 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.007761002 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.007817984 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.007826090 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.009659052 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.009716988 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.009725094 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.010915995 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.010961056 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.010966063 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.012218952 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.012269974 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.012276888 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.013681889 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.013732910 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.013739109 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.015055895 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.015109062 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.015115023 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.016347885 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.016396999 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.016402960 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.017611027 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.017664909 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.017671108 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.019329071 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.019387960 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.019393921 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.020255089 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.020313978 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.020319939 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.021505117 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.021570921 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.021576881 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.022619963 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.022675991 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.022681952 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.023742914 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.023797035 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.023808002 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.025060892 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.025120020 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.025125980 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.026578903 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.026633978 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.026640892 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.027879953 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.027941942 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.027947903 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.028911114 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.028970003 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.028976917 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.030200005 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.030257940 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.030263901 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.031668901 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.031727076 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.031733036 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.032919884 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.032977104 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.032983065 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.034190893 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.034240961 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.034246922 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.034770966 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.034828901 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.034833908 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.035970926 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.036029100 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.036036015 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.037067890 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.037123919 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.037130117 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.039258957 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.039318085 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.039323092 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.040087938 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.040148020 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.040153027 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.041336060 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.041387081 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.041393042 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.042222977 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.042283058 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.042289019 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.043500900 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.043555975 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.043560982 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.045100927 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.045171976 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.045176983 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.046500921 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.046554089 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.046561956 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.048387051 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.048444033 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.048449039 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.049256086 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.049312115 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.049316883 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.050205946 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.050257921 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.050263882 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.051129103 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.051197052 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.051203012 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.052196980 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.052253008 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.052258015 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.053167105 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.053236008 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.053241968 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.054692030 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.054748058 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.054754019 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.055627108 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.055684090 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.055689096 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.057702065 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.057760954 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.057765961 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.058506012 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.058563948 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.058568954 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.059741020 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.059813976 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.059825897 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.063627005 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.063786983 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.063797951 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.064627886 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.064665079 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.064686060 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.064692020 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.064733982 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.066070080 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.067181110 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.067222118 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.067241907 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.067246914 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.067291021 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.068389893 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.069941044 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.069978952 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.069993019 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.069998980 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.070035934 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.071506977 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.072705984 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.072753906 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.072757006 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.072768927 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.072809935 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.076730967 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.077380896 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.077430964 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.077438116 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.077444077 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.077492952 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.078525066 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.079018116 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.079056978 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.079067945 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.079072952 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.079114914 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.079118967 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.079813004 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.079864025 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.079868078 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.080678940 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.080734968 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.080739975 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.081777096 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.081845045 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.081851006 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.082986116 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.083043098 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.083048105 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.084923983 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.084981918 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.084990025 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.086668015 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.086719990 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.086724997 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.087786913 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.087835073 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.087841034 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.088413954 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.088490009 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.088495016 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.089070082 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.089118004 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.089123011 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.089345932 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.089390039 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.089396000 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.090178013 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.090229034 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.090234995 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.091164112 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.091211081 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.091217041 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.092200041 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.092263937 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.092269897 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.093332052 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.093399048 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.093405008 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.094453096 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.094513893 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.094520092 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.095412016 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.095474958 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.095479965 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.096514940 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.096575022 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.096580982 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.097354889 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.097412109 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.097417116 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.098406076 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.098470926 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.098476887 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.099764109 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.099823952 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.099831104 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.100779057 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.100862980 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.100883961 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.100891113 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.100945950 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.101538897 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.102628946 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.102677107 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.102682114 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.103543997 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.103593111 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.103598118 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.104871035 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.104922056 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.104927063 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.105720043 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.105772018 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.105777979 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.106890917 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.106946945 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.106952906 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.107764006 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.107826948 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.107832909 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.108573914 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.108630896 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.108637094 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.109555960 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.109611988 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.109618902 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.110625029 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.110680103 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.110688925 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.111701012 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.111748934 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.111756086 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.112735033 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.112778902 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.112787008 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.113785982 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.113836050 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.113842964 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.114928961 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.114974022 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.114983082 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.116085052 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.116130114 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.116136074 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.116996050 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.117041111 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.117047071 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.118084908 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.118132114 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.118138075 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.119160891 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.119240999 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.119247913 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.120132923 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.120183945 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.120188951 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.121119022 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.121181011 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.121186018 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.121855021 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.121908903 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.121912956 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.122627020 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.122678995 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.122684002 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.123553991 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.123604059 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.123609066 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.124758959 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.124814987 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.124820948 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.125117064 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.125180006 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.125184059 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.125700951 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.125757933 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.125762939 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.126502037 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.126559019 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.126565933 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.127459049 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.127511978 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.127516985 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.128046036 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.128098011 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.128107071 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.128825903 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.128881931 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.128886938 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.129679918 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.129735947 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.129740953 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.130323887 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.130384922 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.130390882 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.131436110 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.131494045 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.131504059 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.131966114 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.132021904 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.132025957 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.132957935 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.133008957 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.133013964 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.133517981 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.133574009 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.133579016 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.134586096 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.134639025 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.134644032 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.135144949 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.135200024 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.135205030 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.135811090 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.135864973 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.135869980 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.136902094 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.136956930 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.136961937 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.137650013 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.137707949 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.137712955 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.138087034 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.138140917 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.138145924 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.139166117 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.139213085 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.139218092 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.139967918 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.140028000 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.140033007 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.140227079 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.140278101 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.140284061 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.141012907 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.141069889 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.141074896 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.141689062 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.141755104 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.141760111 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.142446995 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.142503977 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.142508984 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.143141985 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.143196106 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.143201113 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.143579960 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.143635035 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.143640041 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.144347906 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.144404888 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.144411087 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.145468950 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.145533085 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.145539999 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.146429062 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.146492958 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.146497965 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.146836996 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.146889925 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.146895885 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.147521973 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.147572994 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.147578955 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.148935080 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.148987055 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.148992062 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.149085045 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.149142981 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.149147987 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.149957895 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.150063992 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.150068998 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.150609016 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.150665998 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.150671959 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.151340008 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.151392937 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.151397943 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.152147055 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.152196884 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.152201891 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.153012991 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.153069019 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.153074026 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.153732061 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.153784037 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.153789997 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.154516935 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.154589891 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.154593945 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.155381918 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.155438900 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.155445099 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.156148911 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.156202078 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.156208038 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.156970024 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.157026052 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.157031059 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.157720089 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.157774925 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.157780886 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.158545017 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.158601046 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.158606052 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.159712076 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.159773111 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.159778118 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.160482883 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.160542965 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.160547972 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.161540031 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.161600113 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.161606073 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.162355900 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.162396908 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.162410975 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.162415981 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.162453890 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.162893057 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.163604021 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.163644075 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.163655996 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.163661003 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.163692951 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.164630890 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.165105104 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.165143967 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.165157080 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.165163994 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.165205956 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.165878057 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.166368008 CEST	49811	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.166404963 CEST	443	49811	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.166462898 CEST	49811	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.166672945 CEST	49811	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.166687965 CEST	443	49811	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.166743040 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.166779041 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.166793108 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.166798115 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.166835070 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.167541027 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.168281078 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.168323994 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.168334961 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.168343067 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.168379068 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.168936968 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.169948101 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.170005083 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.170011044 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.170464993 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.170501947 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.170519114 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.170526028 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.170562029 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.171250105 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.173208952 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.173249006 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.173266888 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.173274994 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.173310995 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.173899889 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.174113035 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.174151897 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.174175024 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.174180031 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.174215078 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.174859047 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.175606012 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.175646067 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.175662041 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.175668001 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.175704002 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.175862074 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.176568031 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.176605940 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.176637888 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.176655054 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.176713943 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.177594900 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.177891970 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.177932978 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.177966118 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.177982092 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.178030014 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.178680897 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.179542065 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.179600954 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.179608107 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.180721045 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.180769920 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.180782080 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.180788040 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.180831909 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.181170940 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.181943893 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.181982040 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.181999922 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.182013988 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.182064056 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.182962894 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.183408022 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.183448076 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.183463097 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.183468103 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.183511972 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.184257984 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.184911013 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.184950113 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.184961081 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.184966087 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.185009956 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.185935020 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.186192036 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.186230898 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.186243057 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.186249018 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.186290026 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.186722040 CEST	443	49805	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.187028885 CEST	443	49805	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.187103033 CEST	49805	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.187290907 CEST	49805	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.187310934 CEST	443	49805	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.187331915 CEST	49805	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.187355042 CEST	49805	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.187371969 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.187581062 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.187621117 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.187622070 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.187633038 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.187670946 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.188312054 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.189090014 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.189136982 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.189141989 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.189709902 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.189749002 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.189757109 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.189762115 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.189800024 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.190570116 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.190983057 CEST	49812	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.191016912 CEST	443	49812	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.191086054 CEST	49812	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.191293001 CEST	49812	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.191308975 CEST	443	49812	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.191576958 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.191617012 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.191632032 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.191637039 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.191668987 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.192303896 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.192517042 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.192553997 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.192560911 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.192565918 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.192606926 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.193675041 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.193914890 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.193958998 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.193960905 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.193969011 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.194006920 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.194633961 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.195547104 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.195585012 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.195602894 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.195610046 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.195645094 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.196228981 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.196886063 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.196932077 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.196937084 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.197098017 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.197143078 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.197148085 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.197813034 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.197861910 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.197866917 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.198487997 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.198535919 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.198540926 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.199206114 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.199253082 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.199258089 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.200059891 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.200114965 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.200119972 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.200613022 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.200659990 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.200664997 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.201387882 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.201436996 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.201442957 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.201972008 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.202023029 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.202028990 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.202521086 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.202573061 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.202579021 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.203219891 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.203272104 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.203277111 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.203938007 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.203989029 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.203994036 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.204665899 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.204715967 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.204722881 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.205259085 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.205311060 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.205317020 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.205959082 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.206017971 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.206022978 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.206718922 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.206778049 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.206783056 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.207245111 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.207298994 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.207304955 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.207933903 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.207986116 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.207990885 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.208682060 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.208735943 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.208740950 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.209541082 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.209599018 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.209605932 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.210119963 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.210181952 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.210186958 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.210760117 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.210798025 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.210814953 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.210820913 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.210867882 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.211533070 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.211602926 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.211652040 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.211657047 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.212436914 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.212488890 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.212492943 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.213391066 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.213440895 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.213445902 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.214042902 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.214096069 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.214099884 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.214144945 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.214184046 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.214190006 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.215764046 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.215815067 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.215818882 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.219768047 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.219796896 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.219966888 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.219974041 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.220042944 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.223511934 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.223531008 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.223592997 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.223601103 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.227773905 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.227796078 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.227849007 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.227855921 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.227874994 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.232819080 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.232855082 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.232887030 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.232892990 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.232918024 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.235867977 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.235893011 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.235941887 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.235946894 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.235974073 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.239898920 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.239917994 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.239978075 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.239986897 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.243933916 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.243959904 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.244007111 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.244014025 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.244038105 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.247348070 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.247368097 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.247421026 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.247436047 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.247447968 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.252376080 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.252398968 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.252444029 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.252460003 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.252471924 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.255881071 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.255897999 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.255956888 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.255964994 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.259814024 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.259835005 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.259881020 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.259887934 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.259912014 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.259954929 CEST	443	49808	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.260438919 CEST	443	49808	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.260493040 CEST	49808	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.260523081 CEST	49808	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.260523081 CEST	49808	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.260541916 CEST	443	49808	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.260592937 CEST	49808	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.260942936 CEST	49813	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.260974884 CEST	443	49813	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.261044025 CEST	49813	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.261420965 CEST	49813	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.261436939 CEST	443	49813	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.261439085 CEST	443	49809	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.261624098 CEST	49809	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.261653900 CEST	443	49809	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.261960030 CEST	443	49809	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.262382984 CEST	49809	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.262443066 CEST	443	49809	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.262473106 CEST	49809	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.262502909 CEST	443	49809	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.263490915 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.263509989 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.263556957 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.263562918 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.263591051 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.269656897 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.269679070 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.269731998 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.269740105 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.269773960 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.270621061 CEST	443	49810	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.270847082 CEST	49810	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.270862103 CEST	443	49810	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.271336079 CEST	443	49810	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.272464037 CEST	49810	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.272589922 CEST	443	49810	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.272716999 CEST	49810	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.272731066 CEST	443	49810	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.273564100 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.273582935 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.273622036 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.273627996 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.273677111 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.275954008 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.275973082 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.276027918 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.276034117 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.279326916 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.279349089 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.279412985 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.279419899 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.282207966 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.282239914 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.282305002 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.282311916 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.285002947 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.285026073 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.285077095 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.285084009 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.285109043 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.287558079 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.287576914 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.287616014 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.287622929 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.287645102 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.291055918 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.291083097 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.291115999 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.291121960 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.291146040 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.293610096 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.293629885 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.293664932 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.293669939 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.293684006 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.296540976 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.296565056 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.296597958 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.296605110 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.296647072 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.299727917 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.299746990 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.299786091 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.299792051 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.299824953 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.302218914 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.302241087 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.302274942 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.302279949 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.302309036 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.305048943 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.305071115 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.305102110 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.305109024 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.305151939 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.309845924 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.309865952 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.309935093 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.309941053 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.311572075 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.311594009 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.311625957 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.311631918 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.311661005 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.313980103 CEST	49809	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.314548969 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.314568043 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.314663887 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.314663887 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.314673901 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.317950964 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.317995071 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.318027020 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.318033934 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.318073988 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.320416927 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.320435047 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.320491076 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.320497990 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.323090076 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.323112965 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.323147058 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.323153973 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.323178053 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.325510025 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.325530052 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.325563908 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.325571060 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.325593948 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.328902960 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.328927040 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.328972101 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.328979969 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.328999996 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.331543922 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.331563950 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.331609964 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.331623077 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.331634998 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.334024906 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.334048986 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.334104061 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.334119081 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.334136963 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.337446928 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.337467909 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.337517977 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.337537050 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.337548971 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.340120077 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.340143919 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.340218067 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.340250015 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.342545986 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.342566013 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.342629910 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.342639923 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.345233917 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.345256090 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.345298052 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.345304012 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.345324039 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.347955942 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.347975016 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.348048925 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.348054886 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.352197886 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.352221012 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.352271080 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.352277040 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.352296114 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.354912043 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.354931116 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.354974031 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.354991913 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.355003119 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.357743979 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.357768059 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.357806921 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.357814074 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.357830048 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.362484932 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.362512112 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.362565994 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.362571001 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.362595081 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.366513014 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.366533995 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.366585970 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.366592884 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.366617918 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.367352962 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.367378950 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.367407084 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.367412090 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.367436886 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.368180037 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.368201971 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.368237972 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.368243933 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.368268013 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.368747950 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.368804932 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.368805885 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.368818998 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.368860960 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.369811058 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.369847059 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.369874001 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.369880915 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.369893074 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.370939016 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.370961905 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.371001959 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.371009111 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.371033907 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.373590946 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.373609066 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.373646975 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.373653889 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.373681068 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.375575066 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.375621080 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.375641108 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.375647068 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.375674963 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.378218889 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.378238916 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.378288031 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.378298998 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.378310919 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.380923033 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.380983114 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.380985975 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.381000042 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.381036043 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.382653952 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.382674932 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.382726908 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.382736921 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.382761002 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.385561943 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.385605097 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.385637999 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.385646105 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.385664940 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.387034893 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.387052059 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.387111902 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.387118101 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.389708996 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.389728069 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.389760971 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.389766932 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.389790058 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.391326904 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.391347885 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.391385078 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.391391993 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.391403913 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.393886089 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.393907070 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.393956900 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.393961906 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.393976927 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.395797014 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.395812035 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.395874977 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.395880938 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.398332119 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.398399115 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.398411989 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.398432016 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.398458004 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.399916887 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.399960041 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.399981022 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.399986982 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.400013924 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.403552055 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.403601885 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.403624058 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.403630018 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.403656006 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.404241085 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.404282093 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.404301882 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.404308081 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.404339075 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.406589031 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.406636000 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.406662941 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.406667948 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.406697035 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.408571005 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.408611059 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.408632994 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.408638954 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.408665895 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.410036087 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.410084963 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.410099983 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.410104990 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.410149097 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.412839890 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.412883043 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.412919044 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.412924051 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.412951946 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.414587021 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.414650917 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.414664984 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.414670944 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.414711952 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.416496038 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.416538954 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.416565895 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.416578054 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.416589022 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.417948008 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.417996883 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.418010950 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.418016911 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.418056965 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.420595884 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.420636892 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.420666933 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.420671940 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.420701981 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.422375917 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.422439098 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.422462940 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.422472000 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.422494888 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.424098015 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.424174070 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.424185038 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.424201965 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.424226999 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.425559998 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.425611019 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.425625086 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.425631046 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.425668955 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.428477049 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.428519011 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.428561926 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.428567886 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.428586006 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.429897070 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.429949999 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.429965019 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.429970980 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.430011988 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.431627035 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.431668997 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.431698084 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.431703091 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.431729078 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.433830023 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.433878899 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.433909893 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.433916092 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.433953047 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.435673952 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.435713053 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.435746908 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.435754061 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.435776949 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.437297106 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.437344074 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.437366009 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.437375069 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.437406063 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.439013958 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.439054966 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.439094067 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.439101934 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.439124107 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.439364910 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.439421892 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.439590931 CEST	49803	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.439608097 CEST	443	49803	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.439951897 CEST	49814	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.439986944 CEST	443	49814	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.440049887 CEST	49814	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.440586090 CEST	49814	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.440603018 CEST	443	49814	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.558290005 CEST	443	49811	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.558633089 CEST	49811	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.558670044 CEST	443	49811	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.559556961 CEST	443	49811	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.559644938 CEST	49811	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.559921026 CEST	49811	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.559978962 CEST	443	49811	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.560070038 CEST	49811	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.560086012 CEST	443	49811	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.594696045 CEST	443	49813	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.594986916 CEST	49813	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.595009089 CEST	443	49813	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.598572969 CEST	443	49813	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.598707914 CEST	49813	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.598961115 CEST	49813	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.599128008 CEST	443	49813	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.599133968 CEST	49813	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.599332094 CEST	443	49813	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.601229906 CEST	49811	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.649225950 CEST	49813	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.649236917 CEST	443	49813	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.651726007 CEST	443	49809	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.651770115 CEST	443	49809	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.651798964 CEST	443	49809	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.651828051 CEST	49809	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.651849985 CEST	443	49809	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.651881933 CEST	443	49809	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.651901960 CEST	49809	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.651911974 CEST	443	49809	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.651961088 CEST	49809	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.664555073 CEST	443	49809	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.677297115 CEST	443	49810	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.677350998 CEST	443	49810	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.677455902 CEST	49810	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.677480936 CEST	443	49810	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.678443909 CEST	443	49809	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.678472042 CEST	443	49809	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.678517103 CEST	49809	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.678530931 CEST	443	49809	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.678577900 CEST	49809	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.683768034 CEST	443	49810	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.683866978 CEST	49810	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.683876038 CEST	443	49810	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.688918114 CEST	443	49809	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.690881968 CEST	443	49810	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.690949917 CEST	49810	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.690968037 CEST	443	49810	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.697222948 CEST	49813	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.702140093 CEST	443	49809	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.702212095 CEST	49809	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.702224970 CEST	443	49809	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.703810930 CEST	443	49810	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.703872919 CEST	49810	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.704047918 CEST	49810	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.704065084 CEST	443	49810	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.745245934 CEST	49809	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.838349104 CEST	443	49809	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.839715004 CEST	443	49814	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.840054989 CEST	49814	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.840076923 CEST	443	49814	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.841227055 CEST	443	49814	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.841722012 CEST	49814	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.841805935 CEST	443	49814	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.841975927 CEST	49814	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.842010975 CEST	443	49814	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.851130009 CEST	443	49809	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.851201057 CEST	443	49809	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.851208925 CEST	49809	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.851243973 CEST	49809	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.851483107 CEST	49809	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.851497889 CEST	443	49809	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.852632999 CEST	49815	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.852710009 CEST	443	49815	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.852792025 CEST	49815	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.853075027 CEST	49815	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.853106976 CEST	443	49815	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.928693056 CEST	443	49813	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.928858042 CEST	443	49813	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.928930044 CEST	49813	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.929534912 CEST	49813	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.929554939 CEST	443	49813	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.929569006 CEST	49813	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.929608107 CEST	49813	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.956860065 CEST	443	49811	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.956938028 CEST	49811	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.957751989 CEST	443	49811	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.957796097 CEST	443	49811	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.957844973 CEST	49811	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.957885981 CEST	49811	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.957914114 CEST	443	49811	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:37.957925081 CEST	49811	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:37.957962036 CEST	49811	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.160140991 CEST	49817	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.160202980 CEST	443	49817	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.160293102 CEST	49817	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.160321951 CEST	49818	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.160381079 CEST	443	49818	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.160438061 CEST	49818	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.160531998 CEST	49817	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.160548925 CEST	443	49817	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.160671949 CEST	49818	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.160690069 CEST	443	49818	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.185340881 CEST	443	49815	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.185726881 CEST	49815	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.185745001 CEST	443	49815	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.186038017 CEST	443	49815	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.186445951 CEST	49815	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.186491013 CEST	443	49815	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.186639071 CEST	49815	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.186661959 CEST	443	49815	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.234002113 CEST	443	49814	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.234330893 CEST	443	49814	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.234401941 CEST	49814	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.234771967 CEST	49814	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.234783888 CEST	443	49814	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.234793901 CEST	49814	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.234834909 CEST	49814	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.270613909 CEST	49819	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.270658016 CEST	443	49819	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.270750999 CEST	49819	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.271068096 CEST	49819	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.271083117 CEST	443	49819	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.490977049 CEST	443	49818	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.491312027 CEST	49818	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.491331100 CEST	443	49818	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.492341042 CEST	443	49818	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.492404938 CEST	49818	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.493424892 CEST	49818	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.493488073 CEST	443	49818	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.493869066 CEST	49820	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.493891954 CEST	443	49820	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.493967056 CEST	49818	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.493969917 CEST	49820	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.493977070 CEST	443	49818	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.494173050 CEST	49820	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.494179964 CEST	443	49820	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.538588047 CEST	443	49815	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.538645983 CEST	443	49815	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.538676977 CEST	443	49815	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.538724899 CEST	443	49815	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.538748026 CEST	49815	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.538769960 CEST	443	49815	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.538781881 CEST	49815	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.540246010 CEST	49818	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.546875000 CEST	443	49815	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.546950102 CEST	49815	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.546963930 CEST	443	49815	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.553508043 CEST	443	49815	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.553579092 CEST	49815	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.553747892 CEST	49815	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.553760052 CEST	443	49815	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.554522038 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.554538012 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.554603100 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.554960966 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.554971933 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.567336082 CEST	443	49817	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.567586899 CEST	49817	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.567608118 CEST	443	49817	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.567936897 CEST	443	49817	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.568237066 CEST	49817	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.568306923 CEST	443	49817	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.568375111 CEST	49817	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.568403006 CEST	443	49817	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.607651949 CEST	443	49819	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.608010054 CEST	49819	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.608020067 CEST	443	49819	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.608488083 CEST	443	49819	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.608784914 CEST	49819	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.608875036 CEST	443	49819	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.608952999 CEST	49819	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.608982086 CEST	443	49819	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.611257076 CEST	443	49812	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.611444950 CEST	49812	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.611464977 CEST	443	49812	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.612904072 CEST	443	49812	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.612981081 CEST	49812	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.613225937 CEST	49812	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.613308907 CEST	443	49812	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.613342047 CEST	49812	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.613377094 CEST	443	49812	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.652271986 CEST	49819	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.668212891 CEST	49812	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.668239117 CEST	443	49812	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.715305090 CEST	49812	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.847970009 CEST	443	49818	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.848706961 CEST	49818	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.848758936 CEST	443	49818	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.848819017 CEST	49818	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.855762959 CEST	49822	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.855794907 CEST	443	49822	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.855863094 CEST	49822	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.856062889 CEST	49822	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.856079102 CEST	443	49822	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.886224985 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.886464119 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.886476994 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.887536049 CEST	443	49820	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.887537956 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.887610912 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.887723923 CEST	49820	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.887737989 CEST	443	49820	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.887991905 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.888051987 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.888093948 CEST	443	49820	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.888149023 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.888160944 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.888372898 CEST	49820	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.888434887 CEST	443	49820	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.888497114 CEST	49820	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.888520956 CEST	443	49820	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.938199997 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.940794945 CEST	443	49819	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.941001892 CEST	443	49819	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.941057920 CEST	49819	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.941338062 CEST	49819	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.941338062 CEST	49819	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.941353083 CEST	443	49819	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.941402912 CEST	49819	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.941993952 CEST	49823	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.942037106 CEST	443	49823	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.942105055 CEST	49823	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.942348957 CEST	49823	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.942370892 CEST	443	49823	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.960196018 CEST	443	49817	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.960597992 CEST	443	49817	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.960650921 CEST	49817	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.960669041 CEST	443	49817	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:38.960695028 CEST	49817	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:38.960709095 CEST	49817	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.009218931 CEST	443	49812	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.009848118 CEST	49812	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.009907007 CEST	443	49812	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.009978056 CEST	49812	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.010540962 CEST	49824	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.010571957 CEST	443	49824	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.010637045 CEST	49824	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.010883093 CEST	49824	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.010898113 CEST	443	49824	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.185923100 CEST	443	49822	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.186183929 CEST	49822	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.186222076 CEST	443	49822	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.188422918 CEST	443	49822	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.188508034 CEST	49822	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.188785076 CEST	49822	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.188901901 CEST	443	49822	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.188947916 CEST	49822	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.189002037 CEST	443	49822	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.219149113 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.219197989 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.219230890 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.219254971 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.219268084 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.219295025 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.219314098 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.219321012 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.219379902 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.232454062 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.238291025 CEST	49822	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.238318920 CEST	443	49822	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.252906084 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.252938986 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.252974033 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.252985954 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.253124952 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.269814014 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.277935028 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.278017044 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.278026104 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.285264969 CEST	49822	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.295936108 CEST	443	49820	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.295994043 CEST	443	49820	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.296164036 CEST	49820	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.296561003 CEST	49820	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.296574116 CEST	443	49820	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.333338022 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.367149115 CEST	443	49823	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.367563009 CEST	49823	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.367585897 CEST	443	49823	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.368072987 CEST	443	49823	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.368390083 CEST	49823	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.368479967 CEST	443	49823	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.368565083 CEST	49823	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.368601084 CEST	443	49823	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.377227068 CEST	443	49824	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.377443075 CEST	49824	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.377475977 CEST	443	49824	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.377780914 CEST	443	49824	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.378058910 CEST	49824	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.378112078 CEST	443	49824	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.378413916 CEST	49825	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.378438950 CEST	443	49825	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.378489971 CEST	49824	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.378524065 CEST	443	49824	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.378532887 CEST	49825	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.378740072 CEST	49825	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.378755093 CEST	443	49825	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.389556885 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.393745899 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.393789053 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.393908978 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.393920898 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.393986940 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.405071974 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.445322037 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.445333958 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.484272003 CEST	49826	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.484313011 CEST	443	49826	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.484412909 CEST	49826	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.484612942 CEST	49826	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.484627962 CEST	443	49826	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.493235111 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.552427053 CEST	443	49822	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.552634954 CEST	443	49822	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.552716017 CEST	49822	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.553138018 CEST	49822	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.553175926 CEST	443	49822	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.553193092 CEST	49822	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.553242922 CEST	49822	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.590810061 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.590867043 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.590929985 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.590965033 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591008902 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591044903 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591054916 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.591054916 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.591101885 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.591105938 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591121912 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591154099 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.591165066 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591193914 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.591202974 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591238976 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591255903 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.591260910 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591291904 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591310024 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.591315031 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591356039 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591367006 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.591371059 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591401100 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591408968 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.591413975 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591456890 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.591460943 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591495991 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591511011 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.591511965 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591521025 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591543913 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.591564894 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591567039 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.591574907 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591609001 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591619015 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.591624022 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591676950 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591689110 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.591694117 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591744900 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.591747999 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591759920 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.591806889 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.641602039 CEST	49821	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.641625881 CEST	443	49821	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.706172943 CEST	443	49825	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.708151102 CEST	443	49824	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.708211899 CEST	443	49824	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.708271980 CEST	49824	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.748341084 CEST	49825	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.760924101 CEST	443	49823	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.761050940 CEST	443	49823	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.761243105 CEST	49823	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:39.815608025 CEST	443	49826	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:39.860260963 CEST	49826	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:40.341692924 CEST	49824	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:40.341733932 CEST	443	49824	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:40.342819929 CEST	49825	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:40.342863083 CEST	443	49825	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:40.343539953 CEST	443	49825	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:40.343580961 CEST	49823	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:40.343600988 CEST	443	49823	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:40.346139908 CEST	49826	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:40.346163034 CEST	443	49826	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:40.346930027 CEST	443	49826	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:40.347441912 CEST	49825	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:40.347537994 CEST	443	49825	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:40.348462105 CEST	49826	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:40.348562956 CEST	443	49826	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:40.349212885 CEST	49825	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:40.349245071 CEST	443	49825	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:40.349777937 CEST	49826	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:40.349816084 CEST	443	49826	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:40.397814989 CEST	49827	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:40.397841930 CEST	443	49827	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:40.397908926 CEST	49827	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:40.398284912 CEST	49827	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:40.398297071 CEST	443	49827	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:40.524017096 CEST	443	49826	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:40.524533033 CEST	443	49826	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:40.524650097 CEST	49826	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:40.527367115 CEST	49826	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:40.527378082 CEST	443	49826	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:40.692495108 CEST	443	49825	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:40.692583084 CEST	443	49825	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:40.692642927 CEST	49825	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:40.707576990 CEST	49825	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:40.707592964 CEST	443	49825	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:40.736315012 CEST	443	49827	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:40.736643076 CEST	49827	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:40.736659050 CEST	443	49827	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:40.736953020 CEST	443	49827	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:40.746376038 CEST	49827	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:40.746483088 CEST	443	49827	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:40.746567011 CEST	49827	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:40.746582031 CEST	443	49827	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:40.800888062 CEST	49827	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:41.068759918 CEST	443	49827	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:41.068805933 CEST	443	49827	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:41.068922043 CEST	49827	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:41.068936110 CEST	443	49827	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:41.069312096 CEST	443	49827	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:41.069367886 CEST	49827	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:41.069788933 CEST	49827	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:41.069798946 CEST	443	49827	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:41.073221922 CEST	49828	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:41.073261976 CEST	443	49828	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:41.073359966 CEST	49828	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:41.073585033 CEST	49828	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:41.073604107 CEST	443	49828	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:41.462523937 CEST	443	49828	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:41.462862015 CEST	49828	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:41.462883949 CEST	443	49828	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:41.463191986 CEST	443	49828	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:41.463500023 CEST	49828	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:41.463562012 CEST	443	49828	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:41.463701010 CEST	49828	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:41.463728905 CEST	443	49828	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:41.851341009 CEST	443	49828	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:41.851418972 CEST	443	49828	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:41.851506948 CEST	49828	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:41.851530075 CEST	443	49828	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:41.851602077 CEST	443	49828	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:41.851654053 CEST	49828	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:41.852663040 CEST	49828	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:41.852685928 CEST	443	49828	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:41.857603073 CEST	49829	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:41.857660055 CEST	443	49829	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:41.857745886 CEST	49829	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:41.857954979 CEST	49829	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:41.857973099 CEST	443	49829	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:42.248795033 CEST	443	49829	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:42.249169111 CEST	49829	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:42.249181032 CEST	443	49829	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:42.249469042 CEST	443	49829	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:42.249779940 CEST	49829	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:42.249840975 CEST	443	49829	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:42.249922037 CEST	49829	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:42.249950886 CEST	443	49829	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:42.639617920 CEST	443	49829	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:42.639694929 CEST	443	49829	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:42.639755011 CEST	49829	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:42.640856028 CEST	49829	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:42.640886068 CEST	443	49829	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:43.733828068 CEST	49830	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:43.733887911 CEST	443	49830	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:43.733961105 CEST	49830	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:43.734216928 CEST	49830	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:43.734239101 CEST	443	49830	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:44.064712048 CEST	443	49830	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:44.065066099 CEST	49830	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:44.065095901 CEST	443	49830	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:44.065417051 CEST	443	49830	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:44.065721035 CEST	49830	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:44.065783024 CEST	443	49830	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:44.065848112 CEST	49830	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:44.112114906 CEST	443	49830	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:44.415191889 CEST	443	49830	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:44.418241024 CEST	443	49830	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:44.418425083 CEST	49830	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:44.419137955 CEST	49830	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:44.419166088 CEST	443	49830	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:45.807001114 CEST	49831	443	192.168.2.16	104.94.109.142
Apr 26, 2024 17:32:45.807043076 CEST	443	49831	104.94.109.142	192.168.2.16
Apr 26, 2024 17:32:45.807137012 CEST	49831	443	192.168.2.16	104.94.109.142
Apr 26, 2024 17:32:45.816962957 CEST	49832	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:45.816998005 CEST	443	49832	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:45.817068100 CEST	49832	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:45.818475008 CEST	49832	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:45.818490982 CEST	443	49832	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:45.821917057 CEST	49833	443	192.168.2.16	104.94.109.142
Apr 26, 2024 17:32:45.821957111 CEST	443	49833	104.94.109.142	192.168.2.16
Apr 26, 2024 17:32:45.822129011 CEST	49833	443	192.168.2.16	104.94.109.142
Apr 26, 2024 17:32:45.822859049 CEST	49831	443	192.168.2.16	104.94.109.142
Apr 26, 2024 17:32:45.822876930 CEST	443	49831	104.94.109.142	192.168.2.16
Apr 26, 2024 17:32:45.822925091 CEST	443	49831	104.94.109.142	192.168.2.16
Apr 26, 2024 17:32:45.823266029 CEST	49833	443	192.168.2.16	104.94.109.142
Apr 26, 2024 17:32:45.823288918 CEST	443	49833	104.94.109.142	192.168.2.16
Apr 26, 2024 17:32:45.823328018 CEST	443	49833	104.94.109.142	192.168.2.16
Apr 26, 2024 17:32:45.823718071 CEST	49834	443	192.168.2.16	104.94.109.142
Apr 26, 2024 17:32:45.823750973 CEST	443	49834	104.94.109.142	192.168.2.16
Apr 26, 2024 17:32:45.823822975 CEST	49834	443	192.168.2.16	104.94.109.142
Apr 26, 2024 17:32:45.823940039 CEST	49834	443	192.168.2.16	104.94.109.142
Apr 26, 2024 17:32:45.823956013 CEST	443	49834	104.94.109.142	192.168.2.16
Apr 26, 2024 17:32:45.823980093 CEST	443	49834	104.94.109.142	192.168.2.16
Apr 26, 2024 17:32:46.234261036 CEST	443	49832	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:46.234745979 CEST	49832	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:46.234764099 CEST	443	49832	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:46.235130072 CEST	443	49832	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:46.235583067 CEST	49832	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:46.235652924 CEST	443	49832	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:46.236216068 CEST	49835	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:46.236299992 CEST	443	49835	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:46.236326933 CEST	49832	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:46.236361027 CEST	443	49832	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:46.236406088 CEST	49835	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:46.236645937 CEST	49835	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:46.236679077 CEST	443	49835	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:46.628740072 CEST	443	49835	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:46.637726068 CEST	443	49832	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:46.637840033 CEST	443	49832	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:46.637895107 CEST	49832	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:46.683231115 CEST	49835	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:46.683589935 CEST	49832	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:46.683604002 CEST	443	49832	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:46.684072018 CEST	49835	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:46.684092045 CEST	443	49835	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:46.684710026 CEST	443	49835	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:46.719850063 CEST	49835	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:46.719986916 CEST	443	49835	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:46.755495071 CEST	49835	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:46.755553961 CEST	443	49835	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:47.052424908 CEST	443	49835	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:47.053023100 CEST	443	49835	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:47.053119898 CEST	49835	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:47.257531881 CEST	49836	443	192.168.2.16	104.94.109.142
Apr 26, 2024 17:32:47.257560968 CEST	443	49836	104.94.109.142	192.168.2.16
Apr 26, 2024 17:32:47.257632971 CEST	49836	443	192.168.2.16	104.94.109.142
Apr 26, 2024 17:32:47.259563923 CEST	49837	443	192.168.2.16	104.94.109.142
Apr 26, 2024 17:32:47.259592056 CEST	443	49837	104.94.109.142	192.168.2.16
Apr 26, 2024 17:32:47.259645939 CEST	49837	443	192.168.2.16	104.94.109.142
Apr 26, 2024 17:32:47.266993046 CEST	49835	443	192.168.2.16	142.251.35.228
Apr 26, 2024 17:32:47.267030001 CEST	443	49835	142.251.35.228	192.168.2.16
Apr 26, 2024 17:32:47.283544064 CEST	49837	443	192.168.2.16	104.94.109.142
Apr 26, 2024 17:32:47.283559084 CEST	443	49837	104.94.109.142	192.168.2.16
Apr 26, 2024 17:32:47.283631086 CEST	443	49837	104.94.109.142	192.168.2.16
Apr 26, 2024 17:32:47.283946991 CEST	49836	443	192.168.2.16	104.94.109.142
Apr 26, 2024 17:32:47.283960104 CEST	443	49836	104.94.109.142	192.168.2.16
Apr 26, 2024 17:32:47.283998013 CEST	443	49836	104.94.109.142	192.168.2.16
Apr 26, 2024 17:32:47.285967112 CEST	49838	443	192.168.2.16	104.94.109.142
Apr 26, 2024 17:32:47.286010981 CEST	443	49838	104.94.109.142	192.168.2.16
Apr 26, 2024 17:32:47.286077023 CEST	49838	443	192.168.2.16	104.94.109.142
Apr 26, 2024 17:32:47.286211967 CEST	49838	443	192.168.2.16	104.94.109.142
Apr 26, 2024 17:32:47.286228895 CEST	443	49838	104.94.109.142	192.168.2.16
Apr 26, 2024 17:32:47.286258936 CEST	443	49838	104.94.109.142	192.168.2.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 17:31:48.713849068 CEST	53163	53	192.168.2.16	1.1.1.1
Apr 26, 2024 17:31:48.714487076 CEST	56037	53	192.168.2.16	1.1.1.1
Apr 26, 2024 17:31:48.798743963 CEST	53	52362	1.1.1.1	192.168.2.16
Apr 26, 2024 17:31:48.840959072 CEST	53	53163	1.1.1.1	192.168.2.16
Apr 26, 2024 17:31:48.841922998 CEST	53	56037	1.1.1.1	192.168.2.16
Apr 26, 2024 17:31:48.841937065 CEST	53	62008	1.1.1.1	192.168.2.16
Apr 26, 2024 17:31:49.690470934 CEST	53	63150	1.1.1.1	192.168.2.16
Apr 26, 2024 17:31:52.561763048 CEST	53	61386	1.1.1.1	192.168.2.16
Apr 26, 2024 17:32:01.963613987 CEST	138	138	192.168.2.16	192.168.2.255
Apr 26, 2024 17:32:02.417359114 CEST	53	52888	1.1.1.1	192.168.2.16
Apr 26, 2024 17:32:05.401667118 CEST	53	52427	1.1.1.1	192.168.2.16
Apr 26, 2024 17:32:06.896075964 CEST	53	59870	1.1.1.1	192.168.2.16
Apr 26, 2024 17:32:07.419483900 CEST	53	58639	1.1.1.1	192.168.2.16
Apr 26, 2024 17:32:09.768932104 CEST	53	51569	1.1.1.1	192.168.2.16
Apr 26, 2024 17:32:26.911715031 CEST	53	52831	1.1.1.1	192.168.2.16
Apr 26, 2024 17:32:28.929563046 CEST	62697	53	192.168.2.16	1.1.1.1
Apr 26, 2024 17:32:28.929775000 CEST	62346	53	192.168.2.16	1.1.1.1
Apr 26, 2024 17:32:29.054938078 CEST	53	62697	1.1.1.1	192.168.2.16
Apr 26, 2024 17:32:29.054955006 CEST	53	62346	1.1.1.1	192.168.2.16
Apr 26, 2024 17:32:48.681973934 CEST	53	64786	1.1.1.1	192.168.2.16
Apr 26, 2024 17:32:49.539858103 CEST	53	61649	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 26, 2024 17:32:49.537256956 CEST	192.168.2.16	1.1.1.1	c204	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2024 17:31:48.713849068 CEST	192.168.2.16	1.1.1.1	0x5310	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:31:48.714487076 CEST	192.168.2.16	1.1.1.1	0xadb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 17:32:28.929563046 CEST	192.168.2.16	1.1.1.1	0xad5a	Standard query (0)	id.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:32:28.929775000 CEST	192.168.2.16	1.1.1.1	0xb951	Standard query (0)	id.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Apr 26, 2024 17:31:48.840959072 CEST	1.1.1.1	192.168.2.16	0x5310	No error (0)	www.google.com	142.251.35.228	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:31:48.841922998 CEST	1.1.1.1	192.168.2.16	0xadb	No error (0)	www.google.com		65	IN (0x0001)	false
Apr 26, 2024 17:32:29.054938078 CEST	1.1.1.1	192.168.2.16	0xad5a	No error (0)	id.google.com	142.250.66.195	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

armmf.adobe.com

fs.microsoft.com

slscr.update.microsoft.com

www.google.com

https:

id.google.com

104.94.109.142:443

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49831	104.94.109.142	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 17:32:45.822859049 CEST	433	OUT	GET / HTTP/1.1 Host: 104.94.109.142:443 Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49833	104.94.109.142	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 17:32:45.823266029 CEST	433	OUT	GET / HTTP/1.1 Host: 104.94.109.142:443 Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49834	104.94.109.142	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 17:32:45.823940039 CEST	433	OUT	GET / HTTP/1.1 Host: 104.94.109.142:443 Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49837	104.94.109.142	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 17:32:47.283544064 CEST	459	OUT	GET / HTTP/1.1 Host: 104.94.109.142:443 Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49836	104.94.109.142	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 17:32:47.283946991 CEST	459	OUT	GET / HTTP/1.1 Host: 104.94.109.142:443 Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49838	104.94.109.142	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 17:32:47.286211967 CEST	459	OUT	GET / HTTP/1.1 Host: 104.94.109.142:443 Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49702	104.94.108.142	443	6192	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:31:03 UTC	390	OUT	GET /onboarding/smskillreader.txt HTTP/1.1 Host: armmf.adobe.com Connection: keep-alive Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br
2024-04-26 15:31:03 UTC	225	IN	HTTP/1.1 200 OK Server: Apache Last-Modified: Mon, 01 May 2023 15:02:33 GMT ETag: "78-5faa31cce96da" Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 15:31:03 GMT Content-Length: 120 Connection: close
2024-04-26 15:31:03 UTC	120	IN	Data Raw: 46 69 6c 65 20 74 68 61 74 20 61 63 74 73 20 6c 69 6b 65 20 61 20 4b 69 6c 6c 20 73 77 69 74 63 68 20 66 6f 72 20 53 4d 53 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 69 6e 20 52 65 61 64 65 72 2e 20 44 65 6c 65 74 65 20 74 68 69 73 20 66 69 6c 65 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 6b 69 6c 6c 20 73 77 69 74 63 68 20 69 6e 20 52 65 61 64 65 72 2e Data Ascii: File that acts like a Kill switch for SMS functionality in Reader. Delete this file to enable the kill switch in Reader.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49703	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:31:04 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 15:31:04 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=55961 Date: Fri, 26 Apr 2024 15:31:04 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49705	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:31:04 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 15:31:05 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DZ+oYgAAAABSxwJpMgMuSLkfS640ajfFQVRBRURHRTEyMTkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=55954 Date: Fri, 26 Apr 2024 15:31:05 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-26 15:31:05 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49704	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:31:05 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=DWP23o5EnE1h4Lz&MD=RHUsShKZ HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-26 15:31:05 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: e9cad243-662f-4fd1-9d26-bd09ed92d66b MS-RequestId: 2e81f19a-a993-4e74-a591-bad10d6116d3 MS-CV: WzVeGvc2F0GDMVna.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 15:31:05 GMT Connection: close Content-Length: 24490
2024-04-26 15:31:05 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-26 15:31:05 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49706	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:31:43 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=DWP23o5EnE1h4Lz&MD=RHUsShKZ HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-26 15:31:43 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: b1ff0803-b6b1-40e9-a909-8c5d537c85f1 MS-RequestId: 64c7e4f4-bd72-424f-8721-3a6dc8adcb0c MS-CV: awKevOUHSkeefWlf.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 15:31:43 GMT Connection: close Content-Length: 25457
2024-04-26 15:31:43 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-26 15:31:43 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49711	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:31:49 UTC	627	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:31:50 UTC	1703	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:31:50 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-uXBPepWVemMYos3lKhafoQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:31:50 UTC	775	IN	Data Raw: 33 30 30 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 73 6c 69 70 6b 6e 6f 74 20 64 72 75 6d 6d 65 72 22 2c 22 74 65 72 72 69 6f 6e 20 61 72 6e 6f 6c 64 20 6e 66 6c 20 64 72 61 66 74 22 2c 22 65 78 70 72 65 73 73 20 73 74 6f 72 65 73 20 63 6c 6f 73 69 6e 67 20 6c 69 73 74 22 2c 22 61 70 70 6c 65 20 69 70 68 6f 6e 65 20 31 36 20 70 72 6f 20 6d 61 78 22 2c 22 6e 61 73 61 20 6d 61 72 73 20 73 70 69 64 65 72 73 22 2c 22 74 68 65 6d 20 74 68 65 20 73 63 61 72 65 20 70 72 69 6d 65 20 76 69 64 65 6f 22 2c 22 66 72 61 6e 6b 20 63 73 6f 72 62 61 20 64 65 61 74 68 22 2c 22 6e 65 77 20 73 6d 79 72 6e 61 20 62 65 61 63 68 20 66 6c 6f 72 69 64 61 20 65 78 70 6c 6f 73 69 6f 6e 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b Data Ascii: 300)]}'["",["slipknot drummer","terrion arnold nfl draft","express stores closing list","apple iphone 16 pro max","nasa mars spiders","them the scare prime video","frank csorba death","new smyrna beach florida explosion"],["","","","","","","",""],[],{
2024-04-26 15:31:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49710	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:31:49 UTC	353	OUT	GET /async/ddljson?async=ntp:2 HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:31:50 UTC	1816	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/async/ddljson%3Fasync%3Dntp:2&q=EgRmgZjcGOWRr7EGIjAYJ3QVf-O4n1OlHlPKBhkXWIUr604rG6r5pnTUiiWw31X6XxmsodXgoVOZRgnMBcAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgwI5ZGvsQYQkb2FvgMSBGaBmNw Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Fri, 26 Apr 2024 15:31:49 GMT Server: gws Content-Length: 427 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-26-15; expires=Sun, 26-May-2024 15:31:49 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: NID=513=W1mZR-aXWl5F6RnrFrWKXyVTKL_QEGV8MFqM8tWIoF3k6FDspOjqDzSzYz_lgl06u3acrkjEaJgVZ0MKNH3XTyl_Uv_ORLX_O6L_EMjq4zqKZb9ZedIemU_px2FpyyibTNscIBv3ppzTtRBWxuR5PxL-x7zUPNQwt0SpndWKwlo; expires=Sat, 26-Oct-2024 15:31:49 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:31:50 UTC	427	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 64 64 6c 6a 73 6f 6e 25 33 46 61 73 79 6e Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/async/ddljson%3Fasyn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49712	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:31:49 UTC	530	OUT	GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:31:50 UTC	1842	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgRmgZjcGOWRr7EGIjBl3Z8mdV7iuQlXx3vrRkL4AVRIBUGOwGPzUYmxiw-erxFt5zhM4ErcjFfPkRW3OPQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgsI5pGvsQYQmqKEHRIEZoGY3A Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Fri, 26 Apr 2024 15:31:50 GMT Server: gws Content-Length: 458 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-26-15; expires=Sun, 26-May-2024 15:31:50 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: NID=513=aAgFRJ-84LrbS9myeZFj7--hl8Dl4FLDUfiX76lTQbi2Vo5UrN8T2kyvmso5OxT9Qmo7_JvmFUzyGh_QG94RwcSkdq4r-AqUEAYA_OpqVQNBnMyLpAmzfueFr-LWRkcvSxq62OizXI3GcnHQUmK96YelFaRGPMZALMKDlzywC7E; expires=Sat, 26-Oct-2024 15:31:49 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:31:50 UTC	458	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 6f 67 62 25 33 46 68 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49713	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:31:49 UTC	353	OUT	GET /async/newtab_promos HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:31:50 UTC	1761	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgRmgZjcGOWRr7EGIjAHwueNDSQI-WXeAdig1ilxcW5kJRzd2zjnuDDx24OkMugOmCswnljnlrWZEzXJrwEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgwI5pGvsQYQqeenjgESBGaBmNw Content-Type: text/html; charset=UTF-8 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Fri, 26 Apr 2024 15:31:50 GMT Server: gws Content-Length: 417 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-26-15; expires=Sun, 26-May-2024 15:31:50 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; expires=Sat, 26-Oct-2024 15:31:49 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:31:50 UTC	417	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 70 72 6f 6d 6f 73 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_promos&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49714	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:31:50 UTC	932	OUT	GET /sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgRmgZjcGOWRr7EGIjBl3Z8mdV7iuQlXx3vrRkL4AVRIBUGOwGPzUYmxiw-erxFt5zhM4ErcjFfPkRW3OPQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=aAgFRJ-84LrbS9myeZFj7--hl8Dl4FLDUfiX76lTQbi2Vo5UrN8T2kyvmso5OxT9Qmo7_JvmFUzyGh_QG94RwcSkdq4r-AqUEAYA_OpqVQNBnMyLpAmzfueFr-LWRkcvSxq62OizXI3GcnHQUmK96YelFaRGPMZALMKDlzywC7E
2024-04-26 15:31:50 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Fri, 26 Apr 2024 15:31:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3186 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:31:50 UTC	899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 6f 67 62 3f 68 6c 3d 65 6e 2d 55 53 26 61 6d 70 3b 61 73 79 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/async/newtab_ogb?hl=en-US&asy
2024-04-26 15:31:50 UTC	1255	IN	Data Raw: 0a 3c 73 63 72 69 70 74 3e 76 61 72 20 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 61 74 61 2d 73 3d 22 46 54 2d 73 56 69 4e 61 41 Data Ascii: <script>var submitCallback = function(response) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" data-s="FT-sViNaA
2024-04-26 15:31:50 UTC	1032	IN	Data Raw: 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 65 6d 3b 22 3e 0a 54 68 69 73 20 70 61 67 65 20 61 70 70 65 61 72 73 20 77 68 65 6e 20 47 6f 6f 67 6c 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 65 74 65 63 74 73 20 72 65 71 75 65 73 74 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 70 70 65 61 72 20 74 6f 20 62 65 20 69 6e 20 76 69 6f 6c 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 74 65 72 6d 73 2f 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 2e 20 54 68 65 20 62 6c 6f 63 6b 20 77 69 6c 6c 20 65 78 70 69 72 65 20 73 68 6f 72 74 6c 79 20 61 66 74 Data Ascii: ; line-height:1.4em;">This page appears when Google automatically detects requests coming from your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">Terms of Service</a>. The block will expire shortly aft

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49715	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:31:50 UTC	738	OUT	GET /sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgRmgZjcGOWRr7EGIjAHwueNDSQI-WXeAdig1ilxcW5kJRzd2zjnuDDx24OkMugOmCswnljnlrWZEzXJrwEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
2024-04-26 15:31:50 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Fri, 26 Apr 2024 15:31:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3114 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:31:50 UTC	899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 70 72 6f 6d 6f 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/async/newtab_promos</title></head
2024-04-26 15:31:50 UTC	1255	IN	Data Raw: 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 61 74 61 2d 73 3d 22 74 5a 2d 70 5f 62 71 5a 67 4a 77 5a 50 52 74 30 39 70 64 35 53 55 58 67 39 6d 58 46 56 58 43 76 4e Data Ascii: ack = function(response) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" data-s="tZ-p_bqZgJwZPRt09pd5SUXg9mXFVXCvN
2024-04-26 15:31:50 UTC	960	IN	Data Raw: 6f 67 6c 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 65 74 65 63 74 73 20 72 65 71 75 65 73 74 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 70 70 65 61 72 20 74 6f 20 62 65 20 69 6e 20 76 69 6f 6c 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 74 65 72 6d 73 2f 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 2e 20 54 68 65 20 62 6c 6f 63 6b 20 77 69 6c 6c 20 65 78 70 69 72 65 20 73 68 6f 72 74 6c 79 20 61 66 74 65 72 20 74 68 6f 73 65 20 72 65 71 75 65 73 74 73 20 73 74 6f 70 2e 20 20 49 6e 20 74 68 65 20 6d 65 61 6e 74 69 6d 65 2c 20 73 6f 6c 76 69 6e Data Ascii: ogle automatically detects requests coming from your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">Terms of Service</a>. The block will expire shortly after those requests stop. In the meantime, solvin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49716	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:31:51 UTC	858	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=1&oit=4&cp=1&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49717	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:31:52 UTC	859	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=10&oit=4&cp=2&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
2024-04-26 15:31:52 UTC	1703	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:31:52 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-5SBeGiwITgflFEdRgaYeFA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:31:52 UTC	1161	IN	Data Raw: 34 38 32 0d 0a 29 5d 7d 27 0a 5b 22 31 30 22 2c 5b 22 31 30 20 6d 69 6e 75 74 65 20 74 69 6d 65 72 22 2c 22 31 30 20 6d 69 6e 75 74 65 20 74 69 6d 65 72 22 2c 22 31 30 39 39 22 2c 22 31 30 20 79 65 61 72 20 74 72 65 61 73 75 72 79 22 2c 22 31 30 34 30 22 2c 22 31 30 39 39 20 66 6f 72 6d 22 2c 22 31 30 20 79 65 61 72 20 74 72 65 61 73 75 72 79 20 79 69 65 6c 64 22 2c 22 31 30 34 30 20 74 61 78 20 66 6f 72 6d 22 2c 22 31 30 30 31 20 67 61 6d 65 73 22 2c 22 31 30 39 39 2d 6b 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 Data Ascii: 482)]}'["10",["10 minute timer","10 minute timer","1099","10 year treasury","1040","1099 form","10 year treasury yield","1040 tax form","1001 games","1099-k"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:sug
2024-04-26 15:31:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49719	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:31:53 UTC	860	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104&oit=4&cp=3&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
2024-04-26 15:31:53 UTC	1703	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:31:53 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-1bg9fxgdhYxzRnVvLrt82w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:31:53 UTC	579	IN	Data Raw: 32 33 63 0d 0a 29 5d 7d 27 0a 5b 22 31 30 34 22 2c 5b 22 31 30 34 30 22 2c 22 31 30 34 30 20 74 61 78 20 66 6f 72 6d 22 2c 22 31 30 34 30 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 22 2c 22 31 30 34 2e 33 20 74 68 65 20 66 61 6e 22 2c 22 31 30 34 30 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 32 30 32 33 22 2c 22 31 30 34 32 2d 73 22 2c 22 31 30 34 30 20 66 6f 72 6d 20 32 30 32 33 22 2c 22 31 30 34 2e 33 22 2c 22 31 30 34 30 20 73 63 68 65 64 75 6c 65 20 31 22 2c 22 31 30 34 30 78 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 Data Ascii: 23c)]}'["104",["1040","1040 tax form","1040 instructions","104.3 the fan","1040 instructions 2023","1042-s","1040 form 2023","104.3","1040 schedule 1","1040x"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:su
2024-04-26 15:31:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49720	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:31:54 UTC	861	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.&oit=4&cp=4&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
2024-04-26 15:31:54 UTC	1703	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:31:54 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-v4f3ABYdLFtvST19dBzXNg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:31:54 UTC	590	IN	Data Raw: 32 34 37 0d 0a 29 5d 7d 27 0a 5b 22 31 30 34 2e 22 2c 5b 22 31 30 34 2e 33 22 2c 22 31 30 34 2e 33 20 74 68 65 20 66 61 6e 22 2c 22 31 30 34 2e 31 22 2c 22 31 30 34 2e 35 22 2c 22 31 30 34 2e 37 22 2c 22 31 30 34 2e 35 20 74 68 65 20 7a 6f 6e 65 22 2c 22 31 30 34 2e 31 20 6b 72 62 65 22 2c 22 31 30 34 2e 39 22 2c 22 31 30 34 2e 33 20 6d 79 20 66 6d 22 2c 22 31 30 34 2e 31 20 72 61 64 69 6f 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 31 32 35 31 2c 31 32 35 30 2c 39 35 Data Ascii: 247)]}'["104.",["104.3","104.3 the fan","104.1","104.5","104.7","104.5 the zone","104.1 krbe","104.9","104.3 my fm","104.1 radio"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[1251,1250,95
2024-04-26 15:31:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49721	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:31:55 UTC	863	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94&oit=4&cp=6&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49722	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:31:55 UTC	864	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.&oit=4&cp=7&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
2024-04-26 15:31:55 UTC	1703	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:31:55 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-3Cfw1QddoyK_sCZUcngNbw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:31:55 UTC	660	IN	Data Raw: 32 38 64 0d 0a 29 5d 7d 27 0a 5b 22 31 30 34 2e 39 34 2e 22 2c 5b 22 31 30 34 2e 39 34 20 75 73 20 74 6f 20 63 61 6e 61 64 69 61 6e 20 64 6f 6c 6c 61 72 73 22 2c 22 31 30 34 2e 39 34 20 69 6e 20 70 6f 75 6e 64 73 22 2c 22 31 30 34 2e 39 34 20 64 6f 6c 6c 61 72 73 20 69 6e 20 70 6f 75 6e 64 73 22 2c 22 31 30 34 2e 39 34 20 74 6f 20 64 6f 6c 6c 61 72 73 22 2c 22 31 30 34 2e 39 34 20 70 6f 75 6e 64 20 73 74 65 72 6c 69 6e 67 20 74 6f 20 75 73 22 2c 22 31 30 34 2e 39 34 20 6b 67 20 74 6f 20 70 6f 75 6e 64 73 22 2c 22 31 30 34 2e 39 34 20 69 6e 20 75 73 20 64 6f 6c 6c 61 72 73 22 2c 22 31 30 34 2e 39 34 20 70 6f 75 6e 64 73 20 69 6e 20 75 73 20 64 6f 6c 6c 61 72 73 22 2c 22 31 30 34 2e 39 34 20 78 20 32 30 20 70 65 72 63 65 6e 74 22 2c 22 31 30 34 2e 39 34 20 Data Ascii: 28d)]}'["104.94.",["104.94 us to canadian dollars","104.94 in pounds","104.94 dollars in pounds","104.94 to dollars","104.94 pound sterling to us","104.94 kg to pounds","104.94 in us dollars","104.94 pounds in us dollars","104.94 x 20 percent","104.94
2024-04-26 15:31:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49723	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:31:56 UTC	865	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.1&oit=4&cp=8&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49724	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:31:56 UTC	868	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109&oit=4&cp=10&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49725	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:31:56 UTC	869	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.&oit=4&cp=11&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49726	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:31:57 UTC	870	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.1&oit=3&cp=12&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
2024-04-26 15:31:57 UTC	1703	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:31:57 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-MsOu6V21o2htY0VHLN7sEQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:31:57 UTC	138	IN	Data Raw: 38 34 0d 0a 29 5d 7d 27 0a 5b 22 31 30 34 2e 39 34 2e 31 30 39 2e 31 22 2c 5b 5d 2c 5b 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 74 72 75 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 7d 5d 0d 0a Data Ascii: 84)]}'["104.94.109.1",[],[],[],{"google:clientdata":{"bpc":false,"tlw":true},"google:suggesttype":[],"google:verbatimrelevance":851}]
2024-04-26 15:31:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49727	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:31:58 UTC	872	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.142&oit=3&cp=14&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
2024-04-26 15:31:58 UTC	1703	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:31:58 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-N5MWE6SViNTIjgw3hLL4yA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:31:58 UTC	140	IN	Data Raw: 38 36 0d 0a 29 5d 7d 27 0a 5b 22 31 30 34 2e 39 34 2e 31 30 39 2e 31 34 32 22 2c 5b 5d 2c 5b 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 74 72 75 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 7d 5d 0d 0a Data Ascii: 86)]}'["104.94.109.142",[],[],[],{"google:clientdata":{"bpc":false,"tlw":true},"google:suggesttype":[],"google:verbatimrelevance":851}]
2024-04-26 15:31:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49728	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:31:58 UTC	875	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.142%3A&oit=3&cp=15&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
2024-04-26 15:31:59 UTC	1703	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:31:59 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-29NsDJdfiu9AaHoNmJZmyg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:31:59 UTC	141	IN	Data Raw: 38 37 0d 0a 29 5d 7d 27 0a 5b 22 31 30 34 2e 39 34 2e 31 30 39 2e 31 34 32 3a 22 2c 5b 5d 2c 5b 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 74 72 75 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 7d 5d 0d 0a Data Ascii: 87)]}'["104.94.109.142:",[],[],[],{"google:clientdata":{"bpc":false,"tlw":true},"google:suggesttype":[],"google:verbatimrelevance":851}]
2024-04-26 15:31:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49729	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:01 UTC	872	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.142&oit=3&cp=14&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49731	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:02 UTC	875	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.142443&oit=4&cp=17&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
2024-04-26 15:32:02 UTC	1703	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:32:02 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-AgmZU3bVwSjLjxB9NV0cbg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:32:02 UTC	143	IN	Data Raw: 38 39 0d 0a 29 5d 7d 27 0a 5b 22 31 30 34 2e 39 34 2e 31 30 39 2e 31 34 32 34 34 33 22 2c 5b 5d 2c 5b 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 74 72 75 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 7d 5d 0d 0a Data Ascii: 89)]}'["104.94.109.142443",[],[],[],{"google:clientdata":{"bpc":false,"tlw":true},"google:suggesttype":[],"google:verbatimrelevance":851}]
2024-04-26 15:32:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49732	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:02 UTC	1152	OUT	GET /search?q=104.94.109.142443&oq=104.94.109.142443&gs_lcrp=EgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA&sourceid=chrome&ie=UTF-8 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
2024-04-26 15:32:03 UTC	1976	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRmgZjcGPORr7EGIjAjT-is8k6Uwm1EagwkXv7b_3Y6lH1AXZSE6X-OCgzMA9YBQPBGvSt1H2oAX7BK9VoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgwI85GvsQYQvr_ixwISBGaBmNw Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-oEX62mMIIASE2pvnSkLpnw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:03 GMT Server: gws Content-Length: 545 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-26-15; expires=Sun, 26-May-2024 15:32:03 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; expires=Wed, 23-Oct-2024 15:32:03 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:03 UTC	545	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 65 61 72 63 68 25 33 46 71 25 33 44 31 30 34 2e 39 34 2e Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49730	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:03 UTC	1410	OUT	GET /sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRmgZjcGPORr7EGIjAjT-is8k6Uwm1EagwkXv7b_3Y6lH1AXZSE6X-OCgzMA9YBQPBGvSt1H2oAX7BK9VoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
2024-04-26 15:32:04 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Fri, 26 Apr 2024 15:32:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3486 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:04 UTC	899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 65 61 72 63 68 3f 71 3d 31 30 34 2e 39 34 2e 31 30 39 2e 31 34 32 34 34 33 26 61 6d 70 3b 6f 71 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/search?q=104.94.109.142443&oq
2024-04-26 15:32:04 UTC	1255	IN	Data Raw: 77 73 65 72 2e 0a 3c 2f 64 69 76 3e 0a 3c 2f 6e 6f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 2e 6a 73 22 20 61 73 79 6e 63 20 64 65 66 65 72 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 76 61 72 20 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 Data Ascii: wser.</div></noscript><script src="https://www.google.com/recaptcha/api.js" async defer></script><script>var submitCallback = function(response) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data
2024-04-26 15:32:04 UTC	1255	IN	Data Raw: 65 63 6b 73 20 74 6f 20 73 65 65 20 69 66 20 69 74 27 73 20 72 65 61 6c 6c 79 20 61 20 68 75 6d 61 6e 20 73 65 6e 64 69 6e 67 20 74 68 65 20 72 65 71 75 65 73 74 73 20 61 6e 64 20 6e 6f 74 20 61 20 72 6f 62 6f 74 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 74 68 69 73 20 6e 65 74 77 6f 72 6b 2e 20 3c 62 72 3e 3c 62 72 3e 0a 3c 64 69 76 20 69 64 3d 22 69 6e 66 6f 44 69 76 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 20 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 20 6d 61 72 67 69 6e 3a 30 20 30 20 31 35 70 78 20 30 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 65 6d 3b 22 3e 0a 54 68 69 73 20 70 61 67 65 20 61 70 70 65 61 72 73 20 77 68 65 6e 20 47 6f 6f 67 6c 65 20 61 75 Data Ascii: ecks to see if it's really a human sending the requests and not a robot coming from this network. <br><br><div id="infoDiv" style="display:none; background-color:#eee; padding:10px; margin:0 0 15px 0; line-height:1.4em;">This page appears when Google au
2024-04-26 15:32:04 UTC	77	IN	Data Raw: 36 67 43 41 4c 41 43 41 41 26 61 6d 70 3b 73 6f 75 72 63 65 69 64 3d 63 68 72 6f 6d 65 26 61 6d 70 3b 69 65 3d 55 54 46 2d 38 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: 6gCALACAA&sourceid=chrome&ie=UTF-8<br></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49733	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:04 UTC	1282	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRmgZjcGPORr7EGIjAjT-is8k6Uwm1EagwkXv7b_3Y6lH1AXZSE6X-OCgzMA9YBQPBGvSt1H2oAX7BK9VoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
2024-04-26 15:32:05 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 26 Apr 2024 15:32:05 GMT Date: Fri, 26 Apr 2024 15:32:05 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:32:05 UTC	727	IN	Data Raw: 34 63 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4c6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-26 15:32:05 UTC	502	IN	Data Raw: 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 30 6c 4a 6b 4f 56 48 44 79 33 49 74 59 6c 43 62 55 Data Ascii: cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-0lJkOVHDy3ItYlCbU
2024-04-26 15:32:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49740	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:08 UTC	1889	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&s=KAN_iKlHLO8R0NKiNKk0WWR6Z4gU4gG-TPOCOwjgtQNuPSfT4mukUg8B3rgwcZpUeZThhdud0p8kEuaohNHeLAcLw0ux1hPsgJBn1gjdnNI3jWHwexkcVfz0HXBxWL9dURbBXp0dPLOVXmf9O3riZSDttRSH47QuZk9GsRQYh5pRA1fVKpGZKKvfHwMuWe6uuVUYxRa19V86h5I4JU8bMZfoqXUPctpZ7ib1akxUq5T0kaC4wuEFOI8V6PwRbaxi1ink_9AZRHy9f4zmxv7kclRLhUX4SKM&cb=7zgrwx65alt9 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRmgZjcGPORr7EGIjAjT-is8k6Uwm1EagwkXv7b_3Y6lH1AXZSE6X-OCgzMA9YBQPBGvSt1H2oAX7BK9VoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
2024-04-26 15:32:08 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 26 Apr 2024 15:32:08 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-YKnHozHcyblkm4dMBKd5IQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:32:08 UTC	364	IN	Data Raw: 32 61 65 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2ae4<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-26 15:32:08 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-26 15:32:08 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-26 15:32:08 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-26 15:32:08 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-26 15:32:08 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-26 15:32:08 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 59 4b 6e 48 6f 7a 48 63 79 62 6c 6b 6d 34 64 4d 42 4b 64 35 49 51 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script nonce="YKnHozHcyblkm4dMBKd5IQ" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-26 15:32:08 UTC	1255	IN	Data Raw: 74 77 68 32 6a 31 4b 34 42 5a 39 79 44 43 79 76 58 65 34 37 6b 65 4e 33 55 33 77 73 58 71 2d 7a 66 6a 6d 47 48 45 55 66 56 62 4c 62 72 72 4a 4a 72 4a 35 33 67 41 55 42 73 64 6f 70 79 36 78 51 34 37 5f 73 59 73 6a 57 44 7a 35 56 57 75 48 55 36 5f 36 6c 47 76 7a 54 7a 68 42 66 32 7a 7a 6f 77 45 2d 35 47 4a 6b 6f 47 48 2d 51 47 64 73 61 4e 6f 68 56 53 70 64 62 2d 35 6c 61 75 48 57 53 74 58 66 44 6c 77 6c 52 66 7a 44 39 48 5a 45 71 6d 35 53 73 58 52 79 75 6e 68 78 6d 47 38 59 77 55 6b 77 48 4d 66 78 44 48 47 4d 33 79 46 79 4e 77 4c 53 38 45 43 59 41 67 4c 33 78 63 71 6b 58 4a 64 65 39 57 76 52 33 7a 37 51 30 79 56 62 43 47 32 6c 6c 6e 76 52 38 41 6a 79 66 7a 65 41 56 67 44 75 44 61 69 31 50 4b 4c 76 52 69 35 2d 43 50 35 75 42 44 35 35 53 43 7a 56 32 32 49 54 Data Ascii: twh2j1K4BZ9yDCyvXe47keN3U3wsXq-zfjmGHEUfVbLbrrJJrJ53gAUBsdopy6xQ47_sYsjWDz5VWuHU6_6lGvzTzhBf2zzowE-5GJkoGH-QGdsaNohVSpdb-5lauHWStXfDlwlRfzD9HZEqm5SsXRyunhxmG8YwUkwHMfxDHGM3yFyNwLS8ECYAgL3xcqkXJde9WvR3z7Q0yVbCG2llnvR8AjyfzeAVgDuDai1PKLvRi5-CP5uBD55SCzV22IT
2024-04-26 15:32:08 UTC	1255	IN	Data Raw: 68 77 33 7a 5a 4d 50 6a 42 71 42 57 36 43 61 51 51 5a 37 5a 4f 30 42 74 32 66 4d 50 5a 67 38 32 6e 43 33 55 5a 76 4b 59 35 66 70 41 79 65 7a 51 65 5f 53 44 35 63 41 53 2d 4e 58 43 31 72 58 5f 38 4c 69 72 65 42 68 49 37 6e 71 78 53 59 7a 30 76 66 65 74 4d 6f 42 78 58 37 6a 78 61 4c 6a 6f 75 67 79 77 54 6c 31 44 76 59 38 36 39 39 6a 46 6e 5f 58 6e 46 6d 41 2d 64 6a 73 57 77 35 6e 58 35 31 4c 48 54 36 43 32 33 62 54 7a 77 39 36 63 79 41 52 51 39 4f 79 43 53 33 66 30 56 55 44 59 4d 55 45 42 4f 48 46 72 41 37 37 42 61 34 62 32 4f 4a 76 49 35 31 4c 36 6a 48 53 36 5f 6e 58 4e 2d 51 38 47 42 50 77 36 4d 73 5a 5a 42 35 77 6f 73 37 5a 32 70 39 67 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d Data Ascii: hw3zZMPjBqBW6CaQQZ7ZO0Bt2fMPZg82nC3UZvKY5fpAyezQe_SD5cAS-NXC1rX_8LireBhI7nqxSYz0vfetMoBxX7jxaLjougywTl1DvY8699jFn_XnFmA-djsWw5nX51LHT6C23bTzw96cyARQ9OyCS3f0VUDYMUEBOHFrA77Ba4b2OJvI51L6jHS6_nXN-Q8GBPw6MsZZB5wos7Z2p9g"><script type="text/javascript" nonce=
2024-04-26 15:32:08 UTC	584	IN	Data Raw: 52 42 63 55 39 43 4d 45 68 6a 51 6c 42 58 4f 54 4a 6c 51 57 4d 76 63 32 4a 36 4d 54 52 44 63 48 6c 77 63 79 73 7a 4d 54 6c 77 62 55 35 5a 5a 56 68 78 5a 48 4a 78 55 55 4e 4a 4d 58 49 76 65 47 56 7a 59 31 42 70 56 6b 64 50 54 30 70 75 61 56 70 48 56 6d 4a 34 65 45 4d 7a 64 45 56 71 5a 44 52 52 4f 56 42 75 56 7a 4e 4f 55 47 31 77 61 6e 46 6c 4e 56 70 46 4e 54 5a 44 55 33 56 77 5a 48 6c 5a 56 44 56 69 55 57 5a 4a 62 45 31 4d 4e 32 6b 72 53 47 31 43 4f 47 6c 33 65 6a 42 31 51 57 39 43 61 33 52 79 54 6d 5a 45 65 44 6b 35 56 45 5a 4b 57 56 51 77 64 6b 46 4b 61 57 56 36 53 45 78 77 56 47 77 76 62 33 4a 48 5a 58 46 7a 62 54 67 30 4c 7a 4e 4b 65 6a 42 69 5a 6e 6b 33 4e 7a 46 46 4e 47 78 51 56 48 59 30 4c 30 35 4b 53 57 52 45 57 56 46 47 4f 47 46 79 56 58 42 68 54 Data Ascii: RBcU9CMEhjQlBXOTJlQWMvc2J6MTRDcHlwcyszMTlwbU5ZZVhxZHJxUUNJMXIveGVzY1BpVkdPT0puaVpHVmJ4eEMzdEVqZDRROVBuVzNOUG1wanFlNVpFNTZDU3VwZHlZVDViUWZJbE1MN2krSG1COGl3ejB1QW9Ca3RyTmZEeDk5VEZKWVQwdkFKaWV6SExwVGwvb3JHZXFzbTg0LzNKejBiZnk3NzFFNGxQVHY0L05KSWREWVFGOGFyVXBhT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49747	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:10 UTC	1469	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&s=KAN_iKlHLO8R0NKiNKk0WWR6Z4gU4gG-TPOCOwjgtQNuPSfT4mukUg8B3rgwcZpUeZThhdud0p8kEuaohNHeLAcLw0ux1hPsgJBn1gjdnNI3jWHwexkcVfz0HXBxWL9dURbBXp0dPLOVXmf9O3riZSDttRSH47QuZk9GsRQYh5pRA1fVKpGZKKvfHwMuWe6uuVUYxRa19V86h5I4JU8bMZfoqXUPctpZ7ib1akxUq5T0kaC4wuEFOI8V6PwRbaxi1ink_9AZRHy9f4zmxv7kclRLhUX4SKM&cb=7zgrwx65alt9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
2024-04-26 15:32:10 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Fri, 26 Apr 2024 15:32:10 GMT Date: Fri, 26 Apr 2024 15:32:10 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:32:10 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js');
2024-04-26 15:32:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49749	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:10 UTC	1457	OUT	GET /js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&s=KAN_iKlHLO8R0NKiNKk0WWR6Z4gU4gG-TPOCOwjgtQNuPSfT4mukUg8B3rgwcZpUeZThhdud0p8kEuaohNHeLAcLw0ux1hPsgJBn1gjdnNI3jWHwexkcVfz0HXBxWL9dURbBXp0dPLOVXmf9O3riZSDttRSH47QuZk9GsRQYh5pRA1fVKpGZKKvfHwMuWe6uuVUYxRa19V86h5I4JU8bMZfoqXUPctpZ7ib1akxUq5T0kaC4wuEFOI8V6PwRbaxi1ink_9AZRHy9f4zmxv7kclRLhUX4SKM&cb=7zgrwx65alt9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
2024-04-26 15:32:10 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18268 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 24 Apr 2024 18:09:12 GMT Expires: Thu, 24 Apr 2025 18:09:12 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 13:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 163378 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:10 UTC	443	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 69 66 28 21 28 4e 3d 28 52 3d 65 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 52 29 7c 7c 21 52 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 4e 3b 74 72 79 7b 4e 3d 52 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 70 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 70 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 70 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var f=function(R,N){if(!(N=(R=e.trustedTypes,null),R)\|\|!R.createPolicy)return N;try{N=R.createPolicy("bg",{createHTML:p,createScript:p,createScriptURL:p}
2024-04-26 15:32:10 UTC	1255	IN	Data Raw: 72 65 61 74 65 53 63 72 69 70 74 28 50 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 50 29 7b 72 65 74 75 72 6e 22 22 2b 50 7d 7d 28 65 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 52 65 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 72 65 74 75 72 6e 20 52 5b 4e 5d 3c 3c 32 34 7c 52 5b 28 4e 7c 30 29 2b 31 5d 3c 3c 31 36 7c 52 5b 28 4e 7c 30 29 2b 32 5d 3c 3c 38 7c 52 5b 28 4e 7c 30 29 2b 33 5d 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 69 66 28 34 33 38 Data Ascii: reateScript(P)}:function(P){return""+P}}(e)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var Re=function(R,N){return R[N]<<24\|R[(N\|0)+1]<<16\|R[(N\|0)+2]<<8\|R[(N\|0)+3]},d=function(R,N,p){if(438
2024-04-26 15:32:10 UTC	1255	IN	Data Raw: 2e 67 5b 77 5d 2c 52 29 3b 72 65 74 75 72 6e 20 4e 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 66 6f 72 28 4e 3d 5b 5d 3b 52 2d 2d 3b 29 4e 2e 70 75 73 68 28 32 35 35 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 3b 72 65 74 75 72 6e 20 4e 7d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 4e 3d 4e 2e 58 5b 52 5d 2c 4e 29 29 74 68 72 6f 77 5b 4d 2c 33 30 2c 52 5d 3b 69 66 28 4e 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 4e 2e 63 72 65 61 74 65 28 29 3b 72 65 74 75 72 6e 28 4e 2e 63 72 65 61 74 65 28 33 2a 52 2a 52 2b 32 31 2a 52 2b 2d 33 34 29 2c 4e 29 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 50 52 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 2c 77 2c 54 2c 6b 2c 50 29 7b 72 65 74 75 72 6e 20 50 3d Data Ascii: .g[w],R);return N},c=function(R,N){for(N=[];R--;)N.push(255Math.random()\|0);return N},Z=function(R,N){if(void 0===(N=N.X[R],N))throw[M,30,R];if(N.value)return N.create();return(N.create(3RR+21R+-34),N).prototype},PR=function(R,N,p,e,w,T,k,P){return P=
2024-04-26 15:32:10 UTC	1255	IN	Data Raw: 54 2e 67 69 3d 66 2c 32 5d 5d 2c 66 29 3c 3c 33 29 2d 34 3b 74 72 79 7b 54 2e 63 4f 3d 74 41 28 52 65 28 54 2c 28 66 7c 30 29 2b 34 29 2c 52 65 28 54 2c 66 29 2c 79 29 7d 63 61 74 63 68 28 61 29 7b 74 68 72 6f 77 20 61 3b 7d 7d 54 2e 70 75 73 68 28 54 2e 63 4f 5b 50 26 37 5d 5e 6b 29 7d 2c 77 3d 5a 28 35 39 2c 4e 29 29 3a 52 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 54 2e 70 75 73 68 28 6b 29 7d 2c 65 26 26 52 28 65 26 32 35 35 29 2c 4e 3d 70 2e 6c 65 6e 67 74 68 2c 65 3d 30 3b 65 3c 4e 3b 65 2b 2b 29 52 28 70 5b 65 5d 29 7d 2c 45 2c 56 30 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 28 70 3d 74 79 70 65 6f 66 20 52 2c 70 29 29 69 66 28 52 29 7b 69 66 28 52 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 Data Ascii: T.gi=f,2]],f)<<3)-4;try{T.cO=tA(Re(T,(f\|0)+4),Re(T,f),y)}catch(a){throw a;}}T.push(T.cO[P&7]^k)},w=Z(59,N)):R=function(k){T.push(k)},e&&R(e&255),N=p.length,e=0;e<N;e++)R(p[e])},E,V0=function(R,N,p){if("object"==(p=typeof R,p))if(R){if(R instanceof Array)r
2024-04-26 15:32:10 UTC	1255	IN	Data Raw: 37 37 2c 28 4b 28 33 33 36 2c 52 2c 28 4b 28 34 38 35 2c 28 4b 28 28 64 28 35 35 2c 52 2c 28 4b 28 28 64 28 28 64 28 35 30 33 2c 52 2c 28 4b 28 31 32 37 2c 28 64 28 32 39 38 2c 52 2c 63 28 28 4b 28 34 31 38 2c 52 2c 28 4b 28 33 37 2c 52 2c 28 64 28 28 64 28 33 30 31 2c 52 2c 28 64 28 31 36 37 2c 28 4b 28 28 64 28 35 39 2c 52 2c 5b 30 2c 28 4b 28 31 37 31 2c 52 2c 28 4b 28 32 35 2c 28 4b 28 31 31 37 2c 28 4b 28 31 35 33 2c 52 2c 28 64 28 31 36 33 2c 52 2c 28 64 28 33 33 31 2c 28 64 28 34 33 38 2c 52 2c 28 52 2e 61 79 3d 28 4e 3d 28 28 52 2e 57 4f 3d 32 35 2c 52 29 2e 53 3d 28 52 2e 50 3d 5b 5d 2c 28 52 2e 54 3d 28 52 2e 6a 3d 66 61 6c 73 65 2c 52 29 2c 52 29 2e 4c 43 3d 30 2c 52 2e 5a 3d 28 28 28 28 52 2e 73 3d 30 2c 52 2e 59 3d 76 6f 69 64 20 30 2c 52 2e Data Ascii: 77,(K(336,R,(K(485,(K((d(55,R,(K((d((d(503,R,(K(127,(d(298,R,c((K(418,R,(K(37,R,(d((d(301,R,(d(167,(K((d(59,R,[0,(K(171,R,(K(25,(K(117,(K(153,R,(d(163,R,(d(331,(d(438,R,(R.ay=(N=((R.WO=25,R).S=(R.P=[],(R.T=(R.j=false,R),R).LC=0,R.Z=((((R.s=0,R.Y=void 0,R.
2024-04-26 15:32:10 UTC	1255	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 64 28 28 66 3d 28 61 3d 56 28 28 79 3d 56 28 50 29 2c 50 29 29 2c 56 29 28 50 29 2c 66 29 2c 50 2c 5a 28 79 2c 50 29 7c 7c 5a 28 61 2c 50 29 29 7d 29 2c 39 34 31 29 29 2c 34 34 29 2c 52 2c 72 29 2c 31 37 29 2c 52 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 21 58 28 66 2c 74 72 75 65 2c 66 61 6c 73 65 2c 50 29 26 26 28 66 3d 54 32 28 50 29 2c 61 3d 66 2e 73 52 2c 79 3d 66 2e 6e 43 2c 50 2e 54 3d 3d 50 7c 7c 61 3d 3d 50 2e 5a 55 26 26 79 3d 3d 50 29 26 26 28 64 28 66 2e 7a 73 2c 50 2c 61 2e 61 70 70 6c 79 28 79 2c 66 2e 67 29 29 2c 50 2e 41 3d 50 2e 4e 28 29 29 7d 29 2c 30 29 29 2c 35 30 38 29 2c 52 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 2c 74 2c 47 2c 53 2c 43 2c 62 2c 42 2c Data Ascii: ,function(P,f,y,a){d((f=(a=V((y=V(P),P)),V)(P),f),P,Z(y,P)\|\|Z(a,P))}),941)),44),R,r),17),R,function(P,f,y,a){!X(f,true,false,P)&&(f=T2(P),a=f.sR,y=f.nC,P.T==P\|\|a==P.ZU&&y==P)&&(d(f.zs,P,a.apply(y,f.g)),P.A=P.N())}),0)),508),R,function(P,f,y,a,t,G,S,C,b,B,
2024-04-26 15:32:10 UTC	1255	IN	Data Raw: 50 29 2c 50 29 29 2c 56 29 28 50 29 2c 5a 28 66 2c 50 29 29 2c 74 29 2c 50 29 2c 5a 28 53 2c 50 29 29 2c 79 3d 5a 28 79 2c 50 29 2c 53 29 29 29 7b 66 6f 72 28 61 20 69 6e 20 47 3d 5b 5d 2c 53 29 47 2e 70 75 73 68 28 61 29 3b 53 3d 47 7d 69 66 28 50 2e 54 3d 3d 50 29 66 6f 72 28 66 3d 30 3c 66 3f 66 3a 31 2c 50 3d 53 2e 6c 65 6e 67 74 68 2c 61 3d 30 3b 61 3c 50 3b 61 2b 3d 66 29 74 28 53 2e 73 6c 69 63 65 28 61 2c 28 61 7c 30 29 2b 28 66 7c 30 29 29 2c 79 29 7d 7d 29 2c 52 29 2e 48 4f 3d 30 2c 52 29 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 28 61 3d 56 28 28 79 3d 28 66 3d 56 28 50 29 2c 56 28 50 29 29 2c 50 29 29 2c 50 2e 54 3d 3d 50 29 26 26 28 79 3d 5a 28 79 2c 50 29 2c 61 3d 5a 28 61 2c 50 29 2c 5a 28 66 2c 50 29 5b 79 5d 3d 61 2c 32 34 Data Ascii: P),P)),V)(P),Z(f,P)),t),P),Z(S,P)),y=Z(y,P),S))){for(a in G=[],S)G.push(a);S=G}if(P.T==P)for(f=0<f?f:1,P=S.length,a=0;a<P;a+=f)t(S.slice(a,(a\|0)+(f\|0)),y)}}),R).HO=0,R),function(P,f,y,a){(a=V((y=(f=V(P),V(P)),P)),P.T==P)&&(y=Z(y,P),a=Z(a,P),Z(f,P)[y]=a,24
2024-04-26 15:32:10 UTC	1255	IN	Data Raw: 72 6e 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 2c 28 52 28 66 75 6e 63 74 69 6f 6e 28 70 29 7b 70 28 4e 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 5d 7d 2c 72 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 29 7b 72 65 74 75 72 6e 20 5a 28 28 64 28 34 33 38 2c 52 2c 28 46 79 28 4e 2c 28 28 65 3d 5a 28 34 33 38 2c 52 29 2c 52 2e 50 29 26 26 65 3c 52 2e 73 3f 28 64 28 34 33 38 2c 52 2c 52 2e 73 29 2c 5a 65 28 52 2c 70 29 29 3a 64 28 34 33 38 2c 52 2c 70 29 2c 52 29 29 2c 65 29 29 2c 32 36 31 29 2c 52 29 7d 2c 4e 5f 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 72 65 74 75 72 6e 28 70 3d 6c 5b 4e 2e 57 5d 28 4e 2e 4f 52 29 2c 70 5b 4e 2e 57 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: rn[function(){return N},(R(function(p){p(N)}),function(){})]},r=this\|\|self,Ie=function(R,N,p,e){return Z((d(438,R,(Fy(N,((e=Z(438,R),R.P)&&e<R.s?(d(438,R,R.s),Ze(R,p)):d(438,R,p),R)),e)),261),R)},N_=function(R,N,p){return(p=l[N.W](N.OR),p[N.W]=function(){
2024-04-26 15:32:10 UTC	1255	IN	Data Raw: 5b 4e 5d 7c 30 29 2d 28 52 5b 28 28 4e 7c 30 29 2b 31 29 25 33 5d 7c 30 29 2d 28 65 7c 30 29 5e 28 31 3d 3d 4e 3f 65 3c 3c 70 3a 65 3e 3e 3e 70 29 7d 63 61 74 63 68 28 77 29 7b 74 68 72 6f 77 20 77 3b 7d 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 2c 77 2c 54 29 7b 69 66 28 21 70 2e 72 69 26 26 28 54 3d 76 6f 69 64 20 30 2c 4e 26 26 4e 5b 30 5d 3d 3d 3d 4d 26 26 28 54 3d 4e 5b 32 5d 2c 52 3d 4e 5b 31 5d 2c 4e 3d 76 6f 69 64 20 30 29 2c 65 3d 5a 28 31 37 32 2c 70 29 2c 30 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 28 77 3d 5a 28 33 33 31 2c 70 29 3e 3e 33 2c 65 2e 70 75 73 68 28 52 2c 77 3e 3e 38 26 32 35 35 2c 77 26 32 35 35 29 2c 76 6f 69 64 20 30 21 3d 54 26 26 65 2e 70 75 73 68 28 54 26 32 35 35 29 29 2c 52 3d 22 22 2c 4e 26 26 28 4e 2e 6d 65 Data Ascii: [N]\|0)-(R[((N\|0)+1)%3]\|0)-(e\|0)^(1==N?e<<p:e>>>p)}catch(w){throw w;}},n=function(R,N,p,e,w,T){if(!p.ri&&(T=void 0,N&&N[0]===M&&(T=N[2],R=N[1],N=void 0),e=Z(172,p),0==e.length&&(w=Z(331,p)>>3,e.push(R,w>>8&255,w&255),void 0!=T&&e.push(T&255)),R="",N&&(N.me
2024-04-26 15:32:10 UTC	1255	IN	Data Raw: 65 2e 41 3d 54 3b 69 66 28 21 6b 7c 7c 54 2d 65 2e 43 3c 65 2e 42 4f 2d 28 70 3f 32 35 35 3a 4e 3f 35 3a 32 29 29 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 72 65 74 75 72 6e 20 65 2e 5a 3d 28 64 28 34 33 38 2c 28 70 3d 5a 28 28 65 2e 74 54 3d 52 2c 4e 29 3f 33 33 31 3a 34 33 38 2c 65 29 2c 65 29 2c 65 2e 73 29 2c 65 2e 56 2e 70 75 73 68 28 5b 69 47 2c 70 2c 4e 3f 52 2b 31 3a 52 2c 65 2e 44 2c 65 2e 6a 2c 65 2e 76 2c 65 2e 69 5d 29 2c 44 65 29 2c 74 72 75 65 7d 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 4e 2e 42 3d 28 28 4e 2e 42 3f 4e 2e 42 2b 22 7e 22 3a 22 45 3a 22 29 2b 52 2e 6d 65 73 73 61 67 65 2b 22 3a 22 2b 52 2e 73 74 61 63 6b 29 2e 73 6c 69 63 65 28 30 2c 32 30 34 38 29 7d 2c 44 65 3d 72 2e 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 Data Ascii: e.A=T;if(!k\|\|T-e.C<e.BO-(p?255:N?5:2))return false;return e.Z=(d(438,(p=Z((e.tT=R,N)?331:438,e),e),e.s),e.V.push([iG,p,N?R+1:R,e.D,e.j,e.v,e.i]),De),true},H=function(R,N){N.B=((N.B?N.B+"~":"E:")+R.message+":"+R.stack).slice(0,2048)},De=r.requestIdleCallba

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49750	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:11 UTC	1546	OUT	GET /recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRmgZjcGPORr7EGIjAjT-is8k6Uwm1EagwkXv7b_3Y6lH1AXZSE6X-OCgzMA9YBQPBGvSt1H2oAX7BK9VoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
2024-04-26 15:32:11 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 26 Apr 2024 15:32:11 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-UYCXB_0x6j3vUavkrrCedQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:32:11 UTC	364	IN	Data Raw: 31 64 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d14<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-04-26 15:32:11 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-04-26 15:32:11 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-04-26 15:32:11 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-26 15:32:11 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-04-26 15:32:11 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-04-26 15:32:11 UTC	813	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 55 59 43 58 42 5f 30 78 36 6a 33 76 55 61 76 6b 72 72 43 65 64 51 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script nonce="UYCXB_0x6j3vUavkrrCedQ" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.co
2024-04-26 15:32:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49751	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:12 UTC	1198	OUT	POST /recaptcha/api2/reload?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7790 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
2024-04-26 15:32:12 UTC	7790	OUT	Data Raw: 0a 18 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 12 e4 10 30 33 41 46 63 57 65 41 35 63 4a 50 4f 70 41 4e 53 49 31 6f 61 53 49 74 66 45 36 58 47 56 75 69 4f 41 34 48 35 44 38 38 71 52 57 58 75 62 4d 48 38 51 46 30 4a 77 6a 77 4d 73 34 75 33 36 36 4e 6a 46 4d 64 51 6a 42 66 59 4e 4d 36 45 63 62 54 74 50 70 49 49 45 73 55 56 72 4e 43 78 61 38 39 72 56 5a 56 7a 70 78 45 39 70 57 72 51 50 4c 5a 71 54 79 72 50 37 73 67 64 49 39 50 6a 37 7a 71 42 34 35 6e 44 51 66 4c 36 35 38 52 73 56 76 54 65 72 45 6c 39 57 50 58 65 32 45 65 69 6b 35 67 6e 4a 51 57 50 55 6f 4e 79 72 65 42 46 55 32 41 30 75 69 74 46 4a 79 6e 34 52 71 38 6e 6b 32 67 4b 31 71 6b 2d 75 62 35 62 55 64 4d 56 67 76 70 39 79 39 69 42 54 79 53 4c 4e 37 63 2d 32 39 79 57 47 Data Ascii: V6_85qpc2Xf2sbe3xTnRte7m03AFcWeA5cJPOpANSI1oaSItfE6XGVuiOA4H5D88qRWXubMH8QF0JwjwMs4u366NjFMdQjBfYNM6EcbTtPpIIEsUVrNCxa89rVZVzpxE9pWrQPLZqTyrP7sgdI9Pj7zqB45nDQfL658RsVvTerEl9WPXe2Eeik5gnJQWPUoNyreBFU2A0uitFJyn4Rq8nk2gK1qk-ub5bUdMVgvp9y9iBTySLN7c-29yWG
2024-04-26 15:32:12 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Fri, 26 Apr 2024 15:32:12 GMT Expires: Fri, 26 Apr 2024 15:32:12 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09AEdsM9PDFaukKvlTlHSflSkwqygHONJPfvWK7qQ1uvIFU_r50US66f4O1u9-2AWCLMB8FOo6Nmt9GdiEovjwKxM;Path=/recaptcha;Expires=Wed, 23-Oct-2024 15:32:12 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:32:12 UTC	559	IN	Data Raw: 32 33 38 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 36 78 77 6d 2d 35 42 52 30 59 52 33 63 51 35 31 69 78 37 74 36 37 6d 70 59 65 38 37 67 35 39 6e 47 74 46 67 31 36 46 74 58 5a 59 33 50 55 71 46 38 33 4d 6f 73 77 38 76 59 4f 6b 4c 45 57 62 52 67 6e 74 62 6b 4b 51 52 58 4b 72 73 50 5a 36 5a 67 72 70 35 67 63 47 4e 67 67 42 63 77 6c 43 34 52 50 77 72 6e 66 77 33 47 53 72 58 32 5f 78 45 4a 69 58 45 41 39 39 38 53 75 5a 4f 76 52 55 77 70 35 39 7a 63 6c 56 49 34 72 56 45 36 7a 4e 62 42 39 43 36 5f 63 59 55 4c 45 69 79 43 51 64 6e 64 56 30 4c 49 70 50 63 43 63 44 2d 37 62 38 5f 39 4a 52 73 31 79 4e 54 6d 6a 64 30 53 33 44 53 56 53 6e 52 65 37 59 4a 73 49 4b 49 55 61 74 6b 57 51 61 43 4c 50 34 67 43 75 41 77 31 6a 6c 4d 44 4a 2d Data Ascii: 238)]}'["rresp","03AFcWeA6xwm-5BR0YR3cQ51ix7t67mpYe87g59nGtFg16FtXZY3PUqF83Mosw8vYOkLEWbRgntbkKQRXKrsPZ6Zgrp5gcGNggBcwlC4RPwrnfw3GSrX2_xEJiXEA998SuZOvRUwp59zclVI4rVE6zNbB9C6_cYULEiyCQdndV0LIpPcCcD-7b8_9JRs1yNTmjd0S3DSVSnRe7YJsIKIUatkWQaCLP4gCuAw1jlMDJ-
2024-04-26 15:32:12 UTC	16	IN	Data Raw: 77 35 67 53 44 73 5a 66 6b 76 58 77 5a 37 0d 0a Data Ascii: w5gSDsZfkvXwZ7
2024-04-26 15:32:12 UTC	1255	IN	Data Raw: 61 33 62 0d 0a 65 45 6e 77 62 6d 30 36 63 66 63 4e 4a 44 78 58 52 6b 49 74 75 38 34 67 78 61 77 75 71 34 6b 2d 56 75 6e 79 38 39 59 4b 78 75 61 51 4f 5f 45 33 30 49 5f 68 38 4b 51 33 4d 61 32 57 52 4a 7a 76 76 65 75 70 75 79 64 48 6c 6c 73 5a 34 52 5a 51 4f 71 57 6a 46 44 71 71 58 69 70 58 77 65 4e 50 62 49 39 33 37 79 4f 2d 39 63 70 53 34 41 55 76 64 30 6f 66 2d 43 5f 70 76 39 5a 31 74 5a 59 44 5a 52 33 4e 72 72 6a 57 32 64 39 38 44 75 32 65 6c 31 49 67 4e 34 66 37 37 31 79 44 7a 73 45 62 4f 79 78 75 50 56 73 62 4e 58 38 44 57 46 68 51 53 64 6a 6c 73 39 4e 70 72 62 39 5f 45 79 49 4e 67 47 6a 59 64 62 6d 59 46 71 57 6e 42 6f 51 6d 75 70 33 7a 6a 73 4a 58 6d 2d 4f 55 44 6e 2d 34 50 42 39 4a 59 4d 46 62 5a 70 56 4d 49 34 39 39 39 79 6e 6d 44 4a 45 56 31 39 Data Ascii: a3beEnwbm06cfcNJDxXRkItu84gxawuq4k-Vuny89YKxuaQO_E30I_h8KQ3Ma2WRJzvveupuydHllsZ4RZQOqWjFDqqXipXweNPbI937yO-9cpS4AUvd0of-C_pv9Z1tZYDZR3NrrjW2d98Du2el1IgN4f771yDzsEbOyxuPVsbNX8DWFhQSdjls9Nprb9_EyINgGjYdbmYFqWnBoQmup3zjsJXm-OUDn-4PB9JYMFbZpVMI4999ynmDJEV19
2024-04-26 15:32:12 UTC	1255	IN	Data Raw: 76 6e 69 6c 51 38 72 39 33 47 45 45 51 4e 31 4b 69 5f 45 53 6e 37 73 41 46 59 35 46 5a 66 70 68 48 6d 30 4f 63 43 34 48 2d 4d 62 53 75 75 39 63 77 78 65 46 77 70 76 4d 6a 31 46 72 32 4a 36 45 62 4a 6b 4a 5a 38 68 75 67 71 74 55 51 75 33 6e 49 77 4e 6b 34 70 62 50 53 34 39 56 6f 69 56 41 77 61 58 48 57 49 64 6a 68 79 77 67 33 6f 68 74 51 30 6b 38 6b 55 73 73 74 55 2d 67 79 48 6e 4c 47 6c 31 54 6d 71 6f 30 42 53 73 51 36 66 4c 2d 52 56 56 6c 50 58 2d 7a 71 6e 50 4e 57 75 6c 48 64 6a 32 57 63 78 33 34 73 43 75 4d 47 57 30 49 30 67 4a 67 38 79 54 30 39 38 39 42 31 70 6c 73 6c 46 78 74 53 71 4d 79 36 4d 57 4f 4c 4a 59 6e 71 34 77 55 63 4f 69 31 61 71 5a 6f 6e 6c 46 42 4b 65 64 70 77 4a 5a 68 58 5f 58 5a 42 38 48 39 4e 79 69 44 4c 33 52 35 6c 72 43 77 77 75 77 Data Ascii: vnilQ8r93GEEQN1Ki_ESn7sAFY5FZfphHm0OcC4H-MbSuu9cwxeFwpvMj1Fr2J6EbJkJZ8hugqtUQu3nIwNk4pbPS49VoiVAwaXHWIdjhywg3ohtQ0k8kUsstU-gyHnLGl1Tmqo0BSsQ6fL-RVVlPX-zqnPNWulHdj2Wcx34sCuMGW0I0gJg8yT0989B1plslFxtSqMy6MWOLJYnq4wUcOi1aqZonlFBKedpwJZhX_XZB8H9NyiDL3R5lrCwwuw
2024-04-26 15:32:12 UTC	116	IN	Data Raw: 54 61 65 32 48 64 72 6c 6b 6a 57 44 7a 76 50 39 37 52 49 4b 6b 50 79 2d 5f 67 64 2d 44 58 41 4d 4f 56 33 2d 5f 76 53 77 65 45 73 53 2d 44 46 5a 59 77 70 46 6d 66 6c 55 72 42 39 38 30 44 7a 69 71 34 6e 70 4a 4e 77 4f 65 70 63 75 39 6c 45 4e 37 5f 6b 6a 56 6a 42 6d 69 41 5f 4f 46 65 32 4e 7a 5f 31 55 74 50 33 39 72 4d 58 39 6b 36 57 66 46 78 0d 0a Data Ascii: Tae2HdrlkjWDzvP97RIKkPy-_gd-DXAMOV3-_vSweEsS-DFZYwpFmflUrB980Dziq4npJNwOepcu9lEN7_kjVjBmiA_OFe2Nz_1UtP39rMX9k6WfFx
2024-04-26 15:32:12 UTC	1255	IN	Data Raw: 34 32 64 34 0d 0a 31 42 72 51 5f 77 72 68 58 69 50 62 39 39 5a 56 35 66 73 55 7a 64 6e 31 44 68 4e 35 54 44 65 59 67 75 4b 77 5f 65 65 71 37 48 71 46 39 38 68 48 54 31 56 4f 7a 32 70 46 54 71 72 56 6b 4b 63 38 77 33 61 74 31 42 53 44 73 72 7a 37 46 6f 78 4e 49 4b 43 42 41 45 57 4b 31 73 33 72 50 4f 4e 48 74 62 54 6f 69 41 57 6e 47 6b 61 74 74 34 4f 4c 51 77 71 4b 68 68 32 70 48 50 53 72 43 68 36 71 46 2d 4e 72 6f 4d 72 52 4c 44 55 4a 46 50 53 71 50 6a 4b 43 6b 32 51 59 55 48 4e 62 5f 74 31 59 59 34 6d 43 4d 73 78 73 4b 6d 39 62 6a 68 5f 41 59 50 69 53 46 50 55 6c 61 55 73 6c 4f 4e 44 69 35 63 6a 37 71 4b 6b 77 58 6d 38 69 6a 49 6b 51 45 64 74 73 6a 33 61 58 57 55 35 52 4d 50 4a 67 30 4a 73 74 62 35 34 4f 78 36 43 34 4e 35 34 38 67 47 33 48 56 69 5f 6f 37 Data Ascii: 42d41BrQ_wrhXiPb99ZV5fsUzdn1DhN5TDeYguKw_eeq7HqF98hHT1VOz2pFTqrVkKc8w3at1BSDsrz7FoxNIKCBAEWK1s3rPONHtbToiAWnGkatt4OLQwqKhh2pHPSrCh6qF-NroMrRLDUJFPSqPjKCk2QYUHNb_t1YY4mCMsxsKm9bjh_AYPiSFPUlaUslONDi5cj7qKkwXm8ijIkQEdtsj3aXWU5RMPJg0Jstb54Ox6C4N548gG3HVi_o7
2024-04-26 15:32:12 UTC	1255	IN	Data Raw: 43 78 61 50 77 34 71 72 45 2d 45 4a 47 35 61 6d 50 4a 76 33 45 52 68 66 39 56 78 42 42 48 73 72 36 73 43 4c 35 4a 6f 51 63 74 53 32 6c 47 53 56 36 42 49 72 4f 34 49 32 61 65 68 71 34 44 6a 61 49 30 69 68 65 74 6f 77 4d 6b 65 65 69 78 4d 2d 77 74 58 41 46 57 69 6a 32 5f 78 36 58 62 4a 31 53 51 77 4c 71 6d 52 6e 77 62 70 39 52 55 5a 58 64 4a 44 7a 34 61 75 54 4f 48 63 72 45 55 4c 56 51 4f 67 6a 57 47 70 34 6a 37 6e 59 52 69 4f 42 73 55 55 64 72 6e 43 6a 74 75 51 6f 52 51 59 43 72 48 66 2d 47 47 41 4c 57 2d 5f 77 4b 43 67 79 66 4e 6a 78 2d 46 34 6d 6e 68 72 37 69 72 41 65 6f 43 4c 30 45 6a 43 66 57 51 31 68 69 33 7a 36 67 7a 5a 32 6a 2d 43 50 6a 30 53 4f 66 6b 70 56 5f 68 35 4d 41 4c 6a 34 52 61 46 73 45 47 4f 54 45 62 6e 48 63 39 30 58 48 55 66 78 5f 71 68 Data Ascii: CxaPw4qrE-EJG5amPJv3ERhf9VxBBHsr6sCL5JoQctS2lGSV6BIrO4I2aehq4DjaI0ihetowMkeeixM-wtXAFWij2_x6XbJ1SQwLqmRnwbp9RUZXdJDz4auTOHcrEULVQOgjWGp4j7nYRiOBsUUdrnCjtuQoRQYCrHf-GGALW-_wKCgyfNjx-F4mnhr7irAeoCL0EjCfWQ1hi3z6gzZ2j-CPj0SOfkpV_h5MALj4RaFsEGOTEbnHc90XHUfx_qh
2024-04-26 15:32:12 UTC	1255	IN	Data Raw: 45 5a 37 77 79 42 73 73 6c 48 71 74 6e 49 37 38 59 67 4d 54 76 6b 53 68 52 54 48 32 68 42 74 61 7a 6f 51 64 6c 57 73 5f 52 69 41 43 36 6e 42 64 4e 62 54 4e 46 72 4f 43 45 4b 75 74 41 42 43 32 50 4c 78 59 6f 4a 55 6b 4c 39 58 57 57 49 41 6c 56 66 45 42 79 66 76 65 53 4e 49 4c 6b 71 45 49 33 5f 53 32 70 41 52 2d 37 47 46 71 7a 4d 51 59 6c 75 59 72 71 59 37 36 4d 75 33 75 63 38 35 4b 6e 6d 33 59 6e 6e 79 72 76 34 62 53 31 4e 79 4d 61 54 37 6b 42 44 62 4b 62 6c 4e 7a 76 38 63 45 47 70 41 56 4e 53 7a 67 54 34 74 78 42 7a 6b 65 6d 59 79 32 78 74 67 66 6f 31 75 45 6c 4f 35 78 7a 62 50 76 54 53 4a 39 41 6c 75 42 63 22 2c 6e 75 6c 6c 2c 31 32 30 2c 5b 22 70 6d 65 74 61 22 2c 5b 22 2f 6d 2f 30 31 70 6e 73 30 22 2c 6e 75 6c 6c 2c 33 2c 33 2c 33 2c 6e 75 6c 6c 2c 22 Data Ascii: EZ7wyBsslHqtnI78YgMTvkShRTH2hBtazoQdlWs_RiAC6nBdNbTNFrOCEKutABC2PLxYoJUkL9XWWIAlVfEByfveSNILkqEI3_S2pAR-7GFqzMQYluYrqY76Mu3uc85Knm3Ynnyrv4bS1NyMaT7kBDbKblNzv8cEGpAVNSzgT4txBzkemYy2xtgfo1uElO5xzbPvTSJ9AluBc",null,120,["pmeta",["/m/01pns0",null,3,3,3,null,"
2024-04-26 15:32:12 UTC	1255	IN	Data Raw: 35 52 6b 34 76 52 6c 42 68 62 47 64 6b 55 55 6c 61 65 57 4a 45 4b 32 56 42 65 44 63 79 53 6c 42 52 4d 6a 4a 4b 4e 33 41 77 56 56 64 6f 61 7a 6b 31 63 33 4a 44 5a 6d 38 79 54 56 68 68 56 45 74 52 4e 44 6b 33 62 45 31 74 65 6b 52 31 5a 47 4a 78 56 47 5a 73 64 6d 4a 4f 62 54 46 46 55 56 56 73 55 32 39 72 54 48 4e 6f 51 56 70 30 5a 45 34 30 4d 58 49 31 55 55 4d 30 4d 56 52 52 64 57 78 6d 4e 57 63 32 53 56 4d 32 54 53 74 35 63 47 64 6f 57 6b 6c 74 61 45 56 75 65 57 4a 34 4d 48 52 59 4f 54 64 45 52 55 4e 59 62 57 30 77 62 57 56 33 5a 48 4d 72 51 58 42 35 5a 69 74 47 62 6d 6f 33 63 45 67 77 53 32 63 78 53 32 35 4f 53 48 68 6a 55 45 59 31 4e 6b 39 68 5a 30 68 53 61 57 64 68 64 57 39 50 64 54 68 59 56 32 30 79 4e 6c 52 49 53 44 46 79 63 6a 46 78 52 44 67 72 61 45 Data Ascii: 5Rk4vRlBhbGdkUUlaeWJEK2VBeDcySlBRMjJKN3AwVVdoazk1c3JDZm8yTVhhVEtRNDk3bE1tekR1ZGJxVGZsdmJObTFFUVVsU29rTHNoQVp0ZE40MXI1UUM0MVRRdWxmNWc2SVM2TSt5cGdoWkltaEVueWJ4MHRYOTdERUNYbW0wbWV3ZHMrQXB5ZitGbmo3cEgwS2cxS25OSHhjUEY1Nk9hZ0hSaWdhdW9PdThYV20yNlRISDFycjFxRDgraE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49752	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:12 UTC	1337	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRmgZjcGPORr7EGIjAjT-is8k6Uwm1EagwkXv7b_3Y6lH1AXZSE6X-OCgzMA9YBQPBGvSt1H2oAX7BK9VoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
2024-04-26 15:32:12 UTC	706	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 26 Apr 2024 11:48:34 GMT Expires: Sat, 04 May 2024 11:48:34 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 13418 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:12 UTC	549	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-04-26 15:32:12 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C;I
2024-04-26 15:32:12 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4S4S
2024-04-26 15:32:12 UTC	1255	IN	Data Raw: ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
2024-04-26 15:32:12 UTC	1116	IN	Data Raw: 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: 5C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49756	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:13 UTC	1501	OUT	GET /recaptcha/api2/payload?p=06AFcWeA4usRjYkJfr9srSp2HD4-ZZAVZywMgBTv-cvcNDNMdzhtedLDEkllNnkQiQBbtl3h4As3V2Iew446Zxj5dcFMe0MMOrTyv4ts3-hjod8380h_vsvEgOVv7dHXvzSlPNaf0Z9uZQr8h58zsC5_C-Yi198SrWQsa7MZ5u3dpR8HcvIT4q5vas_t9yZ6LuKTyDOaezHVWLaYozqtkSHXw9w1wzsX9jSQ&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AEdsM9PDFaukKvlTlHSflSkwqygHONJPfvWK7qQ1uvIFU_r50US66f4O1u9-2AWCLMB8FOo6Nmt9GdiEovjwKxM; 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
2024-04-26 15:32:13 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 26 Apr 2024 15:32:13 GMT Date: Fri, 26 Apr 2024 15:32:13 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:13 UTC	6	IN	Data Raw: 37 41 42 44 0d 0a Data Ascii: 7ABD
2024-04-26 15:32:13 UTC	1255	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C,,"}!1AQa"q2
2024-04-26 15:32:13 UTC	1255	IN	Data Raw: 5f 33 fe c9 0b 24 51 f8 8e 25 ba b8 74 41 66 23 12 71 b7 fd 77 38 cf 71 8a fa 4b 4e 79 9a 1f df 1d c4 1e 0d 77 43 de a4 99 c7 3d 2a b2 c3 2a b1 04 8e 57 a1 f4 ac ab 8f 0f d8 4b a8 0b f8 fc c8 2e 32 49 68 db 19 3f 43 c5 6a 4b c4 6c 7d ab 3f ed d2 94 f2 91 33 28 ee 7d 2b 4a 52 9c 75 83 b1 95 45 07 a4 91 93 0d b6 a5 05 f4 cf a7 de 59 8b 40 cc 25 13 46 37 6e cf f1 63 a8 f4 35 c5 eb d2 69 ff 00 6a 22 0b 4f 24 87 21 fe 72 55 b9 ea 3d 07 f4 ae c3 c5 5a 4d c8 8a 5b bb 0f 98 b9 01 d0 f7 cf 7f c2 b8 9d 63 44 d5 2c 64 3f 68 b5 90 ae dd e5 d0 16 5c 77 e7 da be 83 2e 70 93 e6 72 57 fb be fe e7 91 8b 52 8a b2 8f ea 7a 3f 82 e0 b2 87 44 8f ec 65 5b 71 25 9b 76 49 e4 f5 ad a6 5c f5 3c 63 18 ed 5e 2f a3 ea 77 da 4d ca dc 5a 4a ca 33 86 4c fc ac 3d 08 ae cd 3c 70 92 2c 41 Data Ascii: _3$Q%tAf#qw8qKNywC=**WK.2Ih?CjKl}?3(}+JRuEY@%F7nc5ij"O$!rU=ZM[cD,d?h\w.prWRz?De[q%vI\<c^/wMZJ3L=<p,A
2024-04-26 15:32:13 UTC	1255	IN	Data Raw: e9 2a e0 60 30 e9 91 d8 8c 1c 37 e7 c5 5f 5e 78 72 f6 43 25 de 95 7d a7 c8 c7 2c 2d 64 59 10 fd 03 63 14 e1 63 8b 13 46 b3 f7 b9 5f 29 da 47 7b a6 5f a1 9f 43 59 ac a1 86 15 89 d8 29 68 c3 1c e0 b6 7a 9f cf f4 a9 35 18 23 b9 b5 03 ed 56 a2 e2 4f 9d cc 50 17 52 73 dc 00 36 e4 f0 33 9e bd fa d5 6f 02 ea da 5c 1a 0e a3 a6 e9 96 5a 84 ff 00 68 74 56 9e e2 30 a8 bc 75 62 09 e4 76 03 15 a1 6c 4b 03 2a fd 92 58 9a 3c 6e 39 2c c9 8e 33 c8 23 38 e8 3d f9 c9 a7 2f 74 df 0b cd c9 66 65 db c1 2a 48 f6 fa 85 dc b2 14 50 ae 88 86 37 8f e5 3b 7a 71 8c 1c 9e 79 27 d6 ad da b6 9b 35 bc b0 7d 80 20 95 7e 69 89 19 23 20 9e 54 fa f1 f5 ab 52 0d 3e e6 5f b5 37 94 d2 9f 92 58 c6 7e f1 6e 7e 60 32 38 c1 c0 38 ea 7a 55 b9 b4 7d 35 ad ee d6 d6 de 64 7b 61 e7 34 eb 72 71 e5 f6 1b Data Ascii: `07_^xrC%},-dYccF_)G{_CY)hz5#VOPRs63o\ZhtV0ubvlKX<n9,3#8=/tfe*HP7;zqy'5} ~i# TR>_7X~n~`288zU}5d{a4rq
2024-04-26 15:32:13 UTC	1255	IN	Data Raw: d7 91 12 c2 dc da 2b 40 37 90 56 7b 72 ed 1a 38 27 90 c7 9c 74 1d 3a 93 c9 cd 27 1b 84 9d f4 34 9e 4b 08 e3 3a 84 91 48 aa c7 ca 58 04 60 7c cc 70 09 24 12 07 23 03 b9 c6 7a 8a 48 19 ec 22 58 ae 2c cc 2d 34 43 0a 06 d5 71 b4 72 31 83 c8 38 00 9e 95 43 40 93 50 28 52 f6 d3 36 d2 a3 b3 cc 42 b4 64 1e 43 0f af 7c 7b 8e 3b 6e 5c 41 26 a3 1c 68 24 68 45 8c 2b b4 fc ac cc 87 80 4b 29 c9 03 38 e9 d8 01 d4 50 b4 d0 12 6d 1c ee b3 e2 3d 36 d6 ea 7b 35 48 c2 86 f9 63 dd 92 98 e3 91 d3 27 9f d3 19 15 04 56 7a 25 e4 4f 73 2c 84 0e 79 18 e2 ab f8 a7 4f b5 96 ee 56 31 07 21 8e 1d 94 06 07 39 e0 f5 c7 41 cf a7 1d 6b 22 fe 29 96 d3 cb b5 c8 66 18 da 3b d6 73 69 b5 6d 0f a7 c9 a1 56 96 1a 53 97 bc 9e a9 76 3a 86 d6 f4 ed 1d 05 bd 9d 9f da 9e 25 12 0f 2f a4 5e 8c c4 83 b8 Data Ascii: +@7V{r8't:'4K:HX`\|p$#zH"X,-4Cqr18C@P(R6BdC\|{;n\A&h$hE+K)8Pm=6{5Hc'Vz%Os,yOV1!9Ak")f;simVSv:%/^
2024-04-26 15:32:13 UTC	1255	IN	Data Raw: cf a1 65 76 c1 c7 50 69 8b 74 11 9a 27 1c 64 60 e2 bc 5b c3 9e 23 9f 58 d7 57 46 12 6b 56 93 7c 87 7a 6a cc c0 6e 00 8e 19 0f af af 6a f4 ad 0e 47 6d 3a 03 3c 8f 24 86 31 b9 d8 ee 24 fb 9a 99 45 c7 51 a7 75 63 0b c4 fa eb 27 8a 16 d6 0b 86 96 36 90 17 8c 12 a6 35 c7 cc 0f b0 00 9c fb d7 90 f8 ba 53 71 af 5d ce d2 b4 a5 e4 27 7b 28 05 be a0 71 5e 8d e3 19 7c bd 62 7b db 6b 63 1d c4 28 49 f3 00 01 c7 03 23 3e c5 bb fa 57 99 78 83 e6 d4 5c f1 82 7b 7f 4a 8c 23 6e 6e e7 2e 23 4b 14 d4 7c c0 71 ef ed 57 ad ff 00 d5 01 92 6a 88 1c e3 19 f7 ad 0b 66 02 2e 73 9c fb d7 a1 03 91 ea 69 5b da b4 8c 93 24 f2 c3 29 21 5f 18 cb 0f 94 0e 00 e7 18 f4 3c 76 e9 89 d1 77 49 2e 9b ac 44 24 82 12 24 43 b8 95 2c 0a 73 b7 f8 46 dc e0 f1 dc 7d 68 78 9a fe de e6 ee 1d b7 46 d6 e6 Data Ascii: evPit'd`[#XWFkV\|zjnjGm:<$1$EQuc'65Sq]'{(q^\|b{kc(I#>Wx\{J#nn.#K\|qWjf.si[$)!_<vwI.D$$C,sF}hxF
2024-04-26 15:32:13 UTC	1255	IN	Data Raw: ad 07 7b 2d 4e 9e d8 2c d6 17 33 45 2e 4b bc b1 e7 77 2d cb 36 7d 88 18 e3 d5 71 d6 b7 74 85 69 5a 40 09 fd d6 d4 3f 36 47 4c f0 3f 11 cd 65 e9 36 ac 34 eb a4 59 23 68 ad 95 6d fc c8 ce e1 23 37 19 ca f5 c9 20 9c 67 38 f7 e7 7b 4c fd c5 bd dd c3 c4 22 3b 8b 30 6e 32 73 8f e9 5d 32 a8 ad a1 c3 35 ad 87 3c 78 ed 53 5d d9 da 8b 38 e5 82 70 d2 01 fb d4 62 01 07 b6 3d 69 96 57 0b 76 f3 2a ed f9 18 81 8e e3 fc ff 00 3a 92 48 7d a9 73 3b ad 4c f6 dd 19 8f 17 b5 79 db 36 a0 8a 19 23 bb 53 9c 9c a3 57 a7 bc 55 e3 96 ba 66 b9 13 12 df 6a 07 92 15 6e 7a 8f a6 ea f9 be 26 92 97 b2 bf f7 bf 43 df c8 34 f6 9f 2f d4 d0 49 2f fe d4 cd 23 4f b1 94 0c 34 79 19 1f 51 ef 4c bf f3 cc 12 10 14 48 17 87 11 29 23 f4 ac db 3b 2f 13 41 a8 dd c9 29 d4 04 52 91 b4 f9 c5 b1 81 f5 e2 Data Ascii: {-N,3E.Kw-6}qtiZ@?6GL?e64Y#hm#7 g8{L";0n2s]25<xS]8pb=iWv*:H}s;Ly6#SWUfjnz&C4/I/#O4yQLH)#;/A)R
2024-04-26 15:32:13 UTC	1255	IN	Data Raw: 09 44 6d c8 61 92 32 47 cb 8e bc 6e e9 c5 2f 77 a8 49 59 5d 9d 87 8b 6d 35 ef 87 da 66 9f a3 69 f7 11 5e c9 77 33 cb 3d e2 5a f2 8a 00 1b 79 24 0f 94 9c e7 39 c0 c7 43 5c 0c 9a 83 5d 69 71 5e ea ba ec 1b a4 94 a9 06 7f 3e e2 20 47 ce 44 44 aa 81 f3 9c 73 c9 cf d4 4b e3 3d 61 b5 ff 00 b2 0b cd 42 6d 48 da 47 b6 38 44 83 cb 4c e3 77 23 93 9c 7e 9f 85 58 ba d5 b4 48 ed f4 e8 ac 7c 08 6d cd a5 92 47 3d da b4 6d 2b dc 29 27 cc 00 f1 f3 12 33 b9 58 60 74 f4 f6 30 6e 93 8a 8a 67 0d 75 3b dc c7 68 34 e9 ad af 65 17 3a d6 ad 19 8b 64 57 10 42 fe 50 7e 0e d6 24 7c a0 1d bf 81 38 ed 99 34 cb 4b a8 ef ff 00 b3 62 f0 1d f4 f3 c8 e2 35 82 e6 27 47 8d 94 16 90 29 de 0e 4a 8c e4 f4 c7 41 5e b9 e0 6f 1b 43 6b ab d8 5d db 78 6b 41 b0 ba 86 dd a1 6b ab eb f9 11 a5 77 c1 79 Data Ascii: Dma2Gn/wIY]m5fi^w3=Zy$9C\]iq^> GDDsK=aBmHG8DLw#~XH\|mG=m+)'3X`t0ngu;h4e:dWBP~$\|84Kb5'G)JA^oCk]xkAkwy
2024-04-26 15:32:13 UTC	1255	IN	Data Raw: 00 53 e5 5f af 1d 7a 7a f4 aa 77 8a 16 62 a3 03 1c 60 71 da bb 2d 5b 4c b6 5d 1d ed e3 8e 53 29 03 61 c7 24 e7 8f c7 b5 71 da 88 0b 72 c3 be 7a 1a f4 30 93 e6 8d ae 72 e3 b4 a7 18 f6 b9 10 18 90 91 d0 fa 9a bf 6a 73 10 ce 7a d5 03 c9 1b 48 e2 b4 6d 95 8c 20 ed fa f1 9a ee 8b 56 3c 89 6a 5e d4 64 92 57 17 2d 26 62 64 0e 08 cb 0c 13 90 d9 1d 38 ef d7 9a 86 6d f2 40 c5 9a 68 8c 18 95 37 67 71 07 3c 81 d4 81 c7 39 a7 6a d1 dc b3 92 36 c7 1c 18 4d e1 14 80 41 c8 ea 33 f7 78 ed cd 65 ad c4 30 91 2d b5 b0 86 35 81 b7 c5 1c 46 41 2f 04 33 1c 9c 63 e9 d3 3d 2b c8 b3 6c fa 0b 23 7b 4b 9a eb cd 99 e3 59 6e a3 8c 05 99 4c 65 f0 09 c6 e2 0f 51 9f 51 f4 3c 1a b1 65 f6 84 82 ee 1b cb 66 48 22 e2 24 63 bb cc c1 dc 70 33 9c 63 39 1d 48 5e be 99 57 e9 6f 76 3c b0 f3 42 52 Data Ascii: S_zzwb`q-[L]S)a$qrz0rjszHm V<j^dW-&bd8m@h7gq<9j6MA3xe0-5FA/3c=+l#{KYnLeQQ<efH"$cp3c9H^Wov<BR
2024-04-26 15:32:13 UTC	1255	IN	Data Raw: 2d 4f 0a ae 48 fd e5 b9 c6 3d 57 9c 74 35 c2 c7 39 9d bc 96 de b1 f2 41 dd 90 4e 3d fe a2 b6 34 5b 0d 13 52 d6 66 b4 f1 0a c6 ba 68 91 e5 48 e3 73 b1 9c aa ae f0 fb 83 c7 27 19 38 f9 0e d1 95 38 cd 46 6d ad a6 8f 6b 20 ca 20 24 a9 1c 70 73 f9 71 51 9a 54 52 50 b3 ef fa 1a e5 d4 d5 37 3d 37 b7 ea 53 b7 be b8 59 36 79 8b e5 e0 e4 9f 98 8f 4c 7a e7 a7 eb 4f 79 1a e6 52 d1 ff 00 ac 80 83 b0 1c 0e 3b e0 67 d6 98 f6 48 27 48 50 e2 35 1b 89 53 93 d3 e9 53 db 58 f9 d7 05 64 8e 3f b4 c8 4a 97 1c 1e 06 7b 76 fa d7 92 b5 57 3d 3d 36 20 fb 44 9f 68 db 11 70 8a 01 52 8e 4a 8f ff 00 5d 5d 8a ee 58 c2 89 65 62 aa d8 3c 60 8c e7 bf a5 27 d8 e4 53 32 5b 79 6a f9 20 a8 c1 5c 90 78 c7 f9 eb 55 a4 b4 ba 86 11 b6 43 2c 89 f7 9c 9c 82 79 c8 f7 f4 fc 28 52 ec 27 6e 85 f8 f5 29 Data Ascii: -OH=Wt59AN=4[RfhHs'88Fmk $psqQTRP7=7SY6yLzOyR;gH'HP5SSXd?J{vW==6 DhpRJ]]Xeb<`'S2[yj \xUC,y(R'n)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49759	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:15 UTC	1329	OUT	POST /recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 5921 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AEdsM9PDFaukKvlTlHSflSkwqygHONJPfvWK7qQ1uvIFU_r50US66f4O1u9-2AWCLMB8FOo6Nmt9GdiEovjwKxM; 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
2024-04-26 15:32:15 UTC	5921	OUT	Data Raw: 76 3d 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 26 63 3d 30 33 41 46 63 57 65 41 36 78 77 6d 2d 35 42 52 30 59 52 33 63 51 35 31 69 78 37 74 36 37 6d 70 59 65 38 37 67 35 39 6e 47 74 46 67 31 36 46 74 58 5a 59 33 50 55 71 46 38 33 4d 6f 73 77 38 76 59 4f 6b 4c 45 57 62 52 67 6e 74 62 6b 4b 51 52 58 4b 72 73 50 5a 36 5a 67 72 70 35 67 63 47 4e 67 67 42 63 77 6c 43 34 52 50 77 72 6e 66 77 33 47 53 72 58 32 5f 78 45 4a 69 58 45 41 39 39 38 53 75 5a 4f 76 52 55 77 70 35 39 7a 63 6c 56 49 34 72 56 45 36 7a 4e 62 42 39 43 36 5f 63 59 55 4c 45 69 79 43 51 64 6e 64 56 30 4c 49 70 50 63 43 63 44 2d 37 62 38 5f 39 4a 52 73 31 79 4e 54 6d 6a 64 30 53 33 44 53 56 53 6e 52 65 37 59 4a 73 49 4b 49 55 61 74 6b 57 51 61 43 4c 50 34 67 43 75 Data Ascii: v=V6_85qpc2Xf2sbe3xTnRte7m&c=03AFcWeA6xwm-5BR0YR3cQ51ix7t67mpYe87g59nGtFg16FtXZY3PUqF83Mosw8vYOkLEWbRgntbkKQRXKrsPZ6Zgrp5gcGNggBcwlC4RPwrnfw3GSrX2_xEJiXEA998SuZOvRUwp59zclVI4rVE6zNbB9C6_cYULEiyCQdndV0LIpPcCcD-7b8_9JRs1yNTmjd0S3DSVSnRe7YJsIKIUatkWQaCLP4gCu
2024-04-26 15:32:15 UTC	483	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 15:32:15 GMT Expires: Fri, 26 Apr 2024 15:32:15 GMT Cache-Control: private, max-age=0 X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:32:15 UTC	772	IN	Data Raw: 31 38 30 66 0d 0a 29 5d 7d 27 0a 5b 22 64 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 35 76 63 37 51 46 37 6c 65 77 72 68 64 75 56 58 59 6d 38 6a 37 36 36 68 6f 71 42 46 6b 76 61 4a 37 45 49 73 44 4c 68 78 33 56 35 4c 42 49 47 6a 4a 69 6b 6e 78 6a 77 47 4d 59 72 59 38 6f 51 6d 43 78 38 41 38 6b 5f 54 34 2d 45 4e 66 39 6a 65 46 6f 4a 42 54 79 70 44 4d 4f 53 6e 34 75 33 37 2d 2d 71 50 50 6d 78 4a 2d 6a 7a 55 6a 66 4a 6b 77 57 41 69 48 63 4f 47 33 32 4c 5f 42 56 74 47 6c 74 6f 46 6e 72 4c 71 55 6a 38 4a 58 36 63 45 6b 35 45 69 61 57 4e 31 6c 31 42 67 59 30 46 71 56 6f 59 57 33 63 65 70 53 4a 74 48 48 34 6a 57 44 32 48 72 4a 30 6e 67 4a 51 54 36 46 37 39 58 6c 73 4c 53 4c 66 6c 51 72 35 4c 33 32 45 6e 6a 5f 52 6b 47 41 5f 6f 73 6d 32 51 35 31 4f 2d 79 42 45 Data Ascii: 180f)]}'["dresp","03AFcWeA5vc7QF7lewrhduVXYm8j766hoqBFkvaJ7EIsDLhx3V5LBIGjJiknxjwGMYrY8oQmCx8A8k_T4-ENf9jeFoJBTypDMOSn4u37--qPPmxJ-jzUjfJkwWAiHcOG32L_BVtGltoFnrLqUj8JX6cEk5EiaWN1l1BgY0FqVoYW3cepSJtHH4jWD2HrJ0ngJQT6F79XlsLSLflQr5L32Enj_RkGA_osm2Q51O-yBE
2024-04-26 15:32:15 UTC	1255	IN	Data Raw: 76 4d 4d 68 5a 63 57 41 76 2d 50 4b 73 56 65 72 52 45 69 6c 41 50 43 34 54 56 37 6c 48 6b 61 32 64 55 62 36 71 6d 79 62 48 4f 39 76 51 6b 61 6f 6f 75 76 69 33 78 46 30 6f 66 5a 49 6a 31 64 59 4d 63 57 58 79 64 57 4f 32 6a 69 76 56 4d 4c 44 6e 41 6d 36 45 35 6f 6d 6f 33 64 48 6c 79 57 66 74 42 79 62 47 78 4f 53 61 67 4d 59 36 68 65 6f 6c 4e 34 70 75 62 37 74 66 48 45 42 6c 49 6b 4c 46 30 32 4c 6f 56 75 67 35 71 66 61 52 39 63 57 5a 57 78 36 70 62 31 68 79 35 47 31 75 32 34 6d 68 42 4a 39 44 56 44 4b 6d 31 75 7a 6c 59 62 48 5a 51 5f 79 62 52 2d 33 57 6b 30 63 2d 58 50 69 61 31 63 6b 42 59 44 6f 73 4d 6b 75 45 59 76 79 78 65 49 41 49 50 6c 55 42 67 35 56 71 66 62 55 76 44 39 55 4c 30 35 34 32 65 51 63 4b 45 31 51 45 37 69 50 32 6d 5a 6c 59 65 63 71 78 30 72 Data Ascii: vMMhZcWAv-PKsVerREilAPC4TV7lHka2dUb6qmybHO9vQkaoouvi3xF0ofZIj1dYMcWXydWO2jivVMLDnAm6E5omo3dHlyWftBybGxOSagMY6heolN4pub7tfHEBlIkLF02LoVug5qfaR9cWZWx6pb1hy5G1u24mhBJ9DVDKm1uzlYbHZQ_ybR-3Wk0c-XPia1ckBYDosMkuEYvyxeIAIPlUBg5VqfbUvD9UL0542eQcKE1QE7iP2mZlYecqx0r
2024-04-26 15:32:15 UTC	1255	IN	Data Raw: 31 41 7a 76 6c 42 6b 30 70 49 36 4e 62 4f 69 4b 4f 67 6a 71 48 76 61 4b 39 35 48 46 4a 56 39 61 33 59 41 79 33 68 4f 79 48 32 30 62 73 53 69 57 34 79 52 6d 75 33 44 6e 6c 4b 6a 53 64 2d 4a 45 61 4b 35 67 52 48 69 43 61 6a 79 41 65 67 49 70 69 6c 70 53 62 58 55 44 4c 53 72 34 72 79 5f 53 36 73 75 4a 54 41 4d 43 7a 54 77 4f 6d 42 6f 57 56 58 47 4f 59 5f 71 65 41 55 33 53 49 5a 38 64 6f 79 79 51 34 43 70 46 33 4c 4d 71 55 48 58 6d 77 55 33 42 50 5a 69 32 4f 61 41 76 34 45 45 70 30 69 61 5a 64 72 50 58 4a 71 78 6e 34 70 4d 70 32 35 4d 48 4f 31 6c 78 34 7a 36 44 52 55 76 7a 72 31 45 57 63 4f 6c 7a 77 6c 77 33 4a 36 4b 61 6b 33 63 59 75 39 4e 79 43 62 72 67 76 4e 49 52 74 5f 62 75 33 2d 79 56 53 65 43 72 6b 51 4e 35 30 38 76 49 2d 42 35 76 61 4a 6b 55 6a 72 79 Data Ascii: 1AzvlBk0pI6NbOiKOgjqHvaK95HFJV9a3YAy3hOyH20bsSiW4yRmu3DnlKjSd-JEaK5gRHiCajyAegIpilpSbXUDLSr4ry_S6suJTAMCzTwOmBoWVXGOY_qeAU3SIZ8doyyQ4CpF3LMqUHXmwU3BPZi2OaAv4EEp0iaZdrPXJqxn4pMp25MHO1lx4z6DRUvzr1EWcOlzwlw3J6Kak3cYu9NyCbrgvNIRt_bu3-yVSeCrkQN508vI-B5vaJkUjry
2024-04-26 15:32:15 UTC	1255	IN	Data Raw: 4d 64 4f 4b 73 68 6c 49 66 51 58 58 62 33 61 65 71 58 6f 54 6c 7a 39 78 62 66 47 49 35 35 4b 57 57 64 4a 46 6c 6c 46 52 5f 56 41 72 6f 49 76 51 46 36 69 49 63 2d 74 4c 67 53 44 73 64 71 67 77 57 57 4c 77 49 49 6e 46 46 4c 56 70 76 51 6a 6f 4f 32 66 74 58 35 52 2d 50 53 35 30 62 34 31 6e 37 43 78 4a 48 77 70 5f 78 4b 41 66 68 71 68 5a 32 71 33 67 48 30 5f 47 43 73 66 55 4c 6a 41 79 7a 46 6e 78 73 75 6e 65 57 34 64 6f 76 4f 4a 68 48 39 30 51 33 59 6e 68 6b 41 69 37 7a 63 68 4c 4b 66 58 53 45 4c 4b 44 58 38 46 4f 72 77 78 36 6b 31 57 6f 36 32 45 35 4b 63 70 2d 6c 31 73 74 4b 35 33 30 55 7a 77 65 6e 6b 73 56 4e 6c 36 59 4e 35 65 4b 52 35 46 6f 5a 30 52 35 46 43 49 6b 52 48 36 73 74 50 4f 31 38 64 36 4e 6b 47 39 5a 69 75 49 63 37 63 69 72 49 51 32 43 31 4f 48 Data Ascii: MdOKshlIfQXXb3aeqXoTlz9xbfGI55KWWdJFllFR_VAroIvQF6iIc-tLgSDsdqgwWWLwIInFFLVpvQjoO2ftX5R-PS50b41n7CxJHwp_xKAfhqhZ2q3gH0_GCsfULjAyzFnxsuneW4dovOJhH90Q3YnhkAi7zchLKfXSELKDX8FOrwx6k1Wo62E5Kcp-l1stK530UzwenksVNl6YN5eKR5FoZ0R5FCIkRH6stPO18d6NkG9ZiuIc7cirIQ2C1OH
2024-04-26 15:32:15 UTC	1255	IN	Data Raw: 62 35 37 54 56 6f 57 7a 53 45 4d 45 37 6b 4e 73 72 54 4f 30 30 36 68 6c 74 6e 75 66 77 49 78 4f 55 63 4e 37 4f 42 55 37 6c 58 49 43 4c 75 67 66 6e 69 37 74 33 5f 45 55 66 2d 73 52 46 42 68 75 5a 35 49 57 2d 75 65 6e 6a 49 6e 33 32 7a 6b 5a 72 50 42 61 5a 37 41 65 34 52 61 62 42 70 47 31 5f 32 42 79 38 34 43 4d 45 52 4d 72 4c 5f 51 38 58 30 66 30 44 44 36 5f 59 73 6a 6b 59 4c 33 7a 6f 52 54 38 4a 45 77 39 6b 4d 4a 59 52 57 35 63 6b 7a 6b 62 65 34 78 77 79 55 30 7a 55 59 74 71 67 4e 4b 6b 47 46 31 65 6d 32 56 58 35 4b 77 4c 5a 62 4a 53 53 4a 50 6b 7a 65 5f 55 51 6c 2d 31 75 5a 51 39 51 72 58 6b 62 68 71 54 71 46 49 33 71 74 38 34 50 54 32 61 72 68 39 33 57 5a 4e 69 69 49 4c 57 36 74 6d 66 41 72 5f 38 70 6e 65 54 33 41 54 30 79 38 68 55 54 2d 71 51 4e 55 4f Data Ascii: b57TVoWzSEME7kNsrTO006hltnufwIxOUcN7OBU7lXICLugfni7t3_EUf-sRFBhuZ5IW-uenjIn32zkZrPBaZ7Ae4RabBpG1_2By84CMERMrL_Q8X0f0DD6_YsjkYL3zoRT8JEw9kMJYRW5ckzkbe4xwyU0zUYtqgNKkGF1em2VX5KwLZbJSSJPkze_UQl-1uZQ9QrXkbhqTqFI3qt84PT2arh93WZNiiILW6tmfAr_8pneT3AT0y8hUT-qQNUO
2024-04-26 15:32:15 UTC	375	IN	Data Raw: 39 39 4e 45 51 49 6c 4e 4a 53 6d 5a 6e 57 45 45 7a 55 4a 4b 57 43 70 4c 62 63 36 38 73 6f 78 47 75 77 4e 39 75 70 54 68 5f 78 4d 79 65 79 4c 30 39 39 37 69 5a 56 44 6a 44 68 75 31 39 5a 6b 42 6a 6a 62 78 34 71 54 76 48 57 55 67 2d 46 7a 4f 30 69 74 6d 36 53 36 4e 56 33 31 7a 51 54 71 7a 4b 42 73 64 39 6b 43 68 2d 34 31 72 4e 45 22 2c 5b 22 63 65 64 38 66 64 35 64 37 33 35 32 62 37 34 22 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 30 36 41 46 63 57 65 41 36 75 30 2d 4a 4d 53 4f 61 65 63 6f 43 58 48 7a 64 73 58 2d 78 78 72 63 56 72 67 43 73 54 59 63 35 39 6e 74 36 4b 4d 71 38 42 52 64 35 45 78 2d 36 37 5f 52 50 47 77 52 50 4d 54 45 5a 69 38 6c 4e 70 46 68 6c 63 67 79 35 59 37 2d 77 51 57 65 32 4b 6e 48 56 4b 35 5a 66 54 6f 5a 4c 2d 56 6d 6e 30 47 74 74 6b 68 35 Data Ascii: 99NEQIlNJSmZnWEEzUJKWCpLbc68soxGuwN9upTh_xMyeyL0997iZVDjDhu19ZkBjjbx4qTvHWUg-FzO0itm6S6NV31zQTqzKBsd9kCh-41rNE",["ced8fd5d7352b74"],null,null,"06AFcWeA6u0-JMSOaecoCXHzdsX-xxrcVrgCsTYc59nt6KMq8BRd5Ex-67_RPGwRPMTEZi8lNpFhlcgy5Y7-wQWe2KnHVK5ZfToZL-Vmn0Gttkh5
2024-04-26 15:32:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49760	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:16 UTC	1329	OUT	POST /recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 5925 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AEdsM9PDFaukKvlTlHSflSkwqygHONJPfvWK7qQ1uvIFU_r50US66f4O1u9-2AWCLMB8FOo6Nmt9GdiEovjwKxM; 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
2024-04-26 15:32:16 UTC	5925	OUT	Data Raw: 76 3d 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 26 63 3d 30 33 41 46 63 57 65 41 35 76 63 37 51 46 37 6c 65 77 72 68 64 75 56 58 59 6d 38 6a 37 36 36 68 6f 71 42 46 6b 76 61 4a 37 45 49 73 44 4c 68 78 33 56 35 4c 42 49 47 6a 4a 69 6b 6e 78 6a 77 47 4d 59 72 59 38 6f 51 6d 43 78 38 41 38 6b 5f 54 34 2d 45 4e 66 39 6a 65 46 6f 4a 42 54 79 70 44 4d 4f 53 6e 34 75 33 37 2d 2d 71 50 50 6d 78 4a 2d 6a 7a 55 6a 66 4a 6b 77 57 41 69 48 63 4f 47 33 32 4c 5f 42 56 74 47 6c 74 6f 46 6e 72 4c 71 55 6a 38 4a 58 36 63 45 6b 35 45 69 61 57 4e 31 6c 31 42 67 59 30 46 71 56 6f 59 57 33 63 65 70 53 4a 74 48 48 34 6a 57 44 32 48 72 4a 30 6e 67 4a 51 54 36 46 37 39 58 6c 73 4c 53 4c 66 6c 51 72 35 4c 33 32 45 6e 6a 5f 52 6b 47 41 5f 6f 73 6d 32 Data Ascii: v=V6_85qpc2Xf2sbe3xTnRte7m&c=03AFcWeA5vc7QF7lewrhduVXYm8j766hoqBFkvaJ7EIsDLhx3V5LBIGjJiknxjwGMYrY8oQmCx8A8k_T4-ENf9jeFoJBTypDMOSn4u37--qPPmxJ-jzUjfJkwWAiHcOG32L_BVtGltoFnrLqUj8JX6cEk5EiaWN1l1BgY0FqVoYW3cepSJtHH4jWD2HrJ0ngJQT6F79XlsLSLflQr5L32Enj_RkGA_osm2
2024-04-26 15:32:16 UTC	483	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 15:32:16 GMT Expires: Fri, 26 Apr 2024 15:32:16 GMT Cache-Control: private, max-age=0 X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:32:16 UTC	772	IN	Data Raw: 61 36 31 0d 0a 29 5d 7d 27 0a 5b 22 64 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 36 37 76 34 4b 4b 53 49 49 76 4e 72 66 30 74 75 69 57 78 75 4c 76 52 75 4d 4f 30 6c 72 50 70 74 37 61 49 6f 66 44 6f 6f 77 36 2d 6d 31 4e 59 48 5a 5a 44 55 34 50 7a 79 64 4b 6f 65 73 66 78 41 4d 78 45 57 4e 54 53 4e 77 70 38 38 37 77 42 42 4e 51 58 79 72 33 4c 58 32 6b 4d 65 37 74 44 36 4f 6a 79 42 6d 4e 72 2d 54 78 34 53 69 30 6a 34 51 4d 73 76 54 5a 52 57 6c 41 53 5a 79 6d 57 39 55 45 37 6f 37 66 4d 68 35 72 50 31 4b 70 61 43 77 6f 39 57 46 35 31 58 35 46 64 45 47 69 78 4e 34 47 5f 6a 35 36 7a 68 47 44 6d 37 2d 43 6f 56 75 50 66 4e 4a 77 48 36 66 4b 47 78 56 76 34 6e 62 6e 68 4c 50 74 7a 4c 6f 72 65 43 30 66 4b 7a 30 78 52 61 39 5a 38 71 30 4d 31 63 7a 48 47 39 72 74 6f Data Ascii: a61)]}'["dresp","03AFcWeA67v4KKSIIvNrf0tuiWxuLvRuMO0lrPpt7aIofDoow6-m1NYHZZDU4PzydKoesfxAMxEWNTSNwp887wBBNQXyr3LX2kMe7tD6OjyBmNr-Tx4Si0j4QMsvTZRWlASZymW9UE7o7fMh5rP1KpaCwo9WF51X5FdEGixN4G_j56zhGDm7-CoVuPfNJwH6fKGxVv4nbnhLPtzLoreC0fKz0xRa9Z8q0M1czHG9rto
2024-04-26 15:32:16 UTC	1255	IN	Data Raw: 6c 39 43 55 34 6f 34 52 53 78 59 54 4e 31 78 32 67 6e 5a 7a 42 56 39 34 46 33 35 7a 4c 39 4f 49 6e 6f 44 52 58 45 32 44 4c 53 4d 69 46 61 4e 74 44 52 52 49 65 6b 68 34 49 4e 71 31 76 35 6d 38 58 5a 4d 32 62 52 6a 4f 2d 63 72 77 4b 49 41 5f 35 43 62 57 6f 41 47 5a 6d 41 35 78 75 78 50 72 51 79 67 6d 57 7a 45 50 77 50 5a 47 32 7a 67 6a 4d 64 74 4d 53 51 37 74 31 58 69 59 65 51 5f 67 6b 75 39 32 31 66 63 6c 64 45 30 34 79 42 4c 53 4f 44 72 78 68 47 65 4c 46 71 46 30 51 38 49 66 46 68 6d 76 70 2d 6d 6d 5f 4e 45 4f 56 54 6b 33 31 53 69 76 5a 61 39 47 53 36 72 76 6b 38 75 6f 49 67 62 44 68 31 52 79 50 76 56 63 70 6f 59 43 57 4a 54 68 6e 4a 66 69 45 6b 52 44 76 6d 6a 72 73 5f 64 6d 54 66 65 4e 4d 5f 55 67 5a 6b 37 36 35 4f 66 43 67 4f 58 73 65 45 50 74 55 67 50 Data Ascii: l9CU4o4RSxYTN1x2gnZzBV94F35zL9OInoDRXE2DLSMiFaNtDRRIekh4INq1v5m8XZM2bRjO-crwKIA_5CbWoAGZmA5xuxPrQygmWzEPwPZG2zgjMdtMSQ7t1XiYeQ_gku921fcldE04yBLSODrxhGeLFqF0Q8IfFhmvp-mm_NEOVTk31SivZa9GS6rvk8uoIgbDh1RyPvVcpoYCWJThnJfiEkRDvmjrs_dmTfeNM_UgZk765OfCgOXseEPtUgP
2024-04-26 15:32:16 UTC	637	IN	Data Raw: 37 32 6a 53 32 42 51 32 58 4a 44 70 49 63 2d 76 2d 46 48 54 75 67 77 77 54 32 53 31 48 70 2d 6e 54 62 53 72 76 4a 5a 67 5a 71 51 65 4d 56 73 41 74 73 35 67 4d 7a 62 38 54 4c 66 55 4d 61 46 72 50 52 64 31 4d 33 33 6f 74 31 39 6d 61 56 79 31 46 2d 6e 77 7a 6d 74 57 7a 51 4f 6d 76 64 46 65 79 6f 64 4c 46 66 66 69 4a 6c 71 6a 65 42 50 5f 47 63 6a 50 76 67 61 42 6f 46 4c 4b 6e 4d 79 7a 4e 37 30 64 57 41 53 30 75 46 59 35 70 56 76 67 47 7a 30 69 31 59 6f 69 66 6e 59 61 58 74 4f 37 4b 4f 4c 45 62 70 5f 4e 75 4a 6a 38 36 42 79 6b 37 73 54 5a 54 45 65 63 54 36 53 69 30 6d 55 33 79 54 46 77 46 49 67 62 32 39 57 6f 4b 5a 67 2d 36 55 76 6d 78 42 65 43 37 73 51 79 77 59 68 48 62 68 73 30 56 6b 71 4c 77 78 2d 39 57 75 32 74 57 6f 46 65 6d 78 73 4a 58 6a 5a 53 55 45 6c Data Ascii: 72jS2BQ2XJDpIc-v-FHTugwwT2S1Hp-nTbSrvJZgZqQeMVsAts5gMzb8TLfUMaFrPRd1M33ot19maVy1F-nwzmtWzQOmvdFeyodLFffiJlqjeBP_GcjPvgaBoFLKnMyzN70dWAS0uFY5pVvgGz0i1YoifnYaXtO7KOLEbp_NuJj86Byk7sTZTEecT6Si0mU3yTFwFIgb29WoKZg-6UvmxBeC7sQywYhHbhs0VkqLwx-9Wu2tWoFemxsJXjZSUEl
2024-04-26 15:32:16 UTC	1255	IN	Data Raw: 64 65 64 0d 0a 4c 4f 69 33 6f 30 47 52 6e 54 73 31 57 62 66 63 45 61 59 51 66 6a 52 4b 5a 38 78 42 5f 38 6e 62 44 31 5f 4b 32 61 67 6d 35 65 4e 63 30 41 31 43 57 78 50 4c 5a 35 41 37 61 42 6d 5a 62 30 65 6e 5a 4b 41 6f 43 61 6a 4f 45 5f 63 55 45 4e 4d 31 4b 50 52 4f 43 4e 58 4b 63 67 73 43 50 43 53 59 35 6e 6b 6c 35 64 74 59 6e 41 4a 67 35 56 46 6f 50 67 4d 64 6e 47 51 51 4b 4d 35 55 52 61 71 4d 72 4d 38 61 38 73 68 52 75 43 68 34 64 67 4d 72 61 61 57 67 79 31 35 7a 39 42 37 50 57 5f 48 33 49 66 59 76 68 35 32 51 70 33 77 72 72 44 55 46 4e 46 47 35 50 38 49 6b 45 66 50 59 57 55 45 75 51 54 64 61 6e 42 33 49 7a 31 52 50 58 35 30 35 67 44 6f 51 35 4e 6c 77 4c 4d 35 67 6c 4d 62 42 73 31 33 4a 53 62 38 37 53 74 69 39 55 70 4a 79 53 66 71 68 62 6b 33 5a 6c 41 Data Ascii: dedLOi3o0GRnTs1WbfcEaYQfjRKZ8xB_8nbD1_K2agm5eNc0A1CWxPLZ5A7aBmZb0enZKAoCajOE_cUENM1KPROCNXKcgsCPCSY5nkl5dtYnAJg5VFoPgMdnGQQKM5URaqMrM8a8shRuCh4dgMraaWgy15z9B7PW_H3IfYvh52Qp3wrrDUFNFG5P8IkEfPYWUEuQTdanB3Iz1RPX505gDoQ5NlwLM5glMbBs13JSb87Sti9UpJySfqhbk3ZlA
2024-04-26 15:32:16 UTC	1255	IN	Data Raw: 34 51 33 37 69 46 5a 33 65 71 4e 59 6d 65 49 47 5a 7a 39 43 54 79 46 70 4a 39 44 4f 6d 30 34 71 46 68 4f 39 39 4e 76 43 56 6d 5a 54 4c 75 44 52 68 79 4c 4a 42 72 56 6c 49 57 30 4e 76 31 44 58 6a 4a 4e 52 77 53 5f 4b 69 6a 4a 43 79 59 53 4e 5a 63 36 50 63 70 78 57 2d 34 48 6a 62 58 78 6a 61 6b 65 46 39 68 79 69 51 57 70 56 65 31 44 61 57 4d 75 61 51 55 48 63 32 71 71 67 58 54 47 6f 76 71 5a 78 2d 37 59 7a 30 37 75 6d 4a 30 4b 50 55 46 74 45 63 2d 45 35 70 51 53 76 6e 75 52 6d 6c 68 69 59 41 65 32 68 50 55 72 61 4d 57 43 32 62 41 47 75 67 63 66 55 39 41 6a 6f 52 30 52 38 6a 6c 6f 41 71 49 4c 6c 34 5f 67 7a 66 5a 70 66 56 33 4c 35 73 2d 56 67 46 4c 74 6a 66 35 78 75 77 4d 67 71 34 68 43 51 33 55 4d 5a 44 6c 68 36 67 71 64 63 56 5f 4a 42 74 6b 76 71 68 5f 64 Data Ascii: 4Q37iFZ3eqNYmeIGZz9CTyFpJ9DOm04qFhO99NvCVmZTLuDRhyLJBrVlIW0Nv1DXjJNRwS_KijJCyYSNZc6PcpxW-4HjbXxjakeF9hyiQWpVe1DaWMuaQUHc2qqgXTGovqZx-7Yz07umJ0KPUFtEc-E5pQSvnuRmlhiYAe2hPUraMWC2bAGugcfU9AjoR0R8jloAqILl4_gzfZpfV3L5s-VgFLtjf5xuwMgq4hCQ3UMZDlh6gqdcV_JBtkvqh_d
2024-04-26 15:32:16 UTC	1062	IN	Data Raw: 79 68 4a 31 73 76 45 49 41 4e 6c 48 67 68 66 4e 74 2d 5f 54 63 64 4a 64 53 62 72 32 4e 43 59 42 4c 57 45 4f 62 5f 6e 51 31 4d 44 50 66 41 51 4e 64 70 44 43 63 62 48 74 57 42 47 61 6e 51 72 57 74 6d 4f 63 69 39 34 4c 44 77 73 73 4f 73 35 73 4b 6d 6b 34 41 63 51 37 70 6a 4e 37 72 43 4f 72 6d 70 4a 61 6f 4a 6f 43 46 31 63 6c 5f 34 4e 6c 6d 6d 77 4f 63 66 49 72 59 2d 66 35 4a 31 6f 54 54 34 57 7a 33 38 50 2d 61 50 42 49 32 65 47 43 49 6a 6e 79 70 4c 4c 75 5a 52 51 46 78 34 35 58 6c 45 36 6f 62 42 79 43 72 34 71 56 50 4f 39 56 6e 34 35 63 65 41 48 2d 54 43 7a 35 56 30 78 51 2d 32 36 63 4c 78 67 61 49 35 37 53 38 6c 6b 71 71 67 5a 59 32 77 4b 2d 76 74 69 79 4d 6b 58 73 53 38 7a 50 53 4c 4d 58 65 67 6e 32 4a 67 77 55 31 4c 6f 54 48 4d 7a 71 34 71 63 55 58 76 74 Data Ascii: yhJ1svEIANlHghfNt-_TcdJdSbr2NCYBLWEOb_nQ1MDPfAQNdpDCcbHtWBGanQrWtmOci94LDwssOs5sKmk4AcQ7pjN7rCOrmpJaoJoCF1cl_4NlmmwOcfIrY-f5J1oTT4Wz38P-aPBI2eGCIjnypLLuZRQFx45XlE6obByCr4qVPO9Vn45ceAH-TCz5V0xQ-26cLxgaI57S8lkqqgZY2wK-vtiyMkXsS8zPSLMXegn2JgwU1LoTHMzq4qcUXvt
2024-04-26 15:32:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49761	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:16 UTC	1520	OUT	GET /recaptcha/api2/payload?p=06AFcWeA6u0-JMSOaecoCXHzdsX-xxrcVrgCsTYc59nt6KMq8BRd5Ex-67_RPGwRPMTEZi8lNpFhlcgy5Y7-wQWe2KnHVK5ZfToZL-Vmn0Gttkh5Yl8o5rao17hCvwzK1zjndSb_zIf76VRoc2NtYot5-zOEOdfcEXA6g2mN7FHkMnr0u6AnUZuYajaPHwihB0Zx4V6YIUYxUYXrwQdWApHkKoki170EAOfQ&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=ced8fd5d7352b74 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AEdsM9PDFaukKvlTlHSflSkwqygHONJPfvWK7qQ1uvIFU_r50US66f4O1u9-2AWCLMB8FOo6Nmt9GdiEovjwKxM; 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
2024-04-26 15:32:16 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 26 Apr 2024 15:32:16 GMT Date: Fri, 26 Apr 2024 15:32:16 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:16 UTC	6	IN	Data Raw: 31 30 31 41 0d 0a Data Ascii: 101A
2024-04-26 15:32:16 UTC	1255	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 64 00 64 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$Cdd"}!1AQa"q2
2024-04-26 15:32:16 UTC	1255	IN	Data Raw: d4 2c 6d ae 65 f2 2e 55 0b 36 dc 92 bc 83 db 3d 46 01 ae 7e f3 c4 57 37 b7 43 cb 9e 54 33 c6 b1 4a 7c cc 16 da 38 3f cc 57 af 4e 52 6a f1 8e 8c f9 49 45 c2 4e 2d 6c 5f d2 f5 95 b7 9e 56 ba 4f 29 ca b1 59 61 60 a4 9e 4a 2f 43 91 db 18 ee 33 d3 22 ed 96 a9 6b a8 01 6f 7e f3 3c aa a0 44 fc b1 0f 82 a7 8e 37 1c b7 7e 98 23 a5 64 dc df d8 a7 87 fc f0 63 b8 d4 65 97 69 69 0f dd 51 d3 03 18 07 a6 4e 49 e0 fa d5 ed 0e ee d2 59 96 e0 5b b7 da d9 d0 3f cf b5 0b 77 6c 9e 47 38 35 9c a5 a3 7c a4 dc c7 bf 59 e0 98 33 ba ca 25 41 22 3c a5 77 10 78 f5 3d c1 a2 ba 1d 73 53 88 df ed 6b 38 5d e3 45 8d 88 05 46 54 60 f0 1b 1d a8 ab 85 79 38 af 74 67 a4 6a 1a 4f 83 34 ef 88 3a a6 87 e3 bd 31 a4 bc b4 36 ed 69 15 a6 a0 ca 55 5a 24 66 05 88 da c7 04 70 00 c9 e0 7a d6 5f c7 59 Data Ascii: ,me.U6=F~W7CT3J\|8?WNRjIEN-l_VO)Ya`J/C3"ko~<D7~#dceiiQNIY[?wlG85\|Y3%A"<wx=sSk8]EFT`y8tgjO4:16iUZ$fpz_Y
2024-04-26 15:32:16 UTC	1255	IN	Data Raw: fa d1 d6 2c f6 9b ff 00 04 f8 63 51 7d f7 da 06 99 33 03 90 c6 dd 55 97 e8 46 0d 78 af c7 19 2c 3c 0d aa d8 4b e1 58 6d ed 36 ab 3d cc 91 44 1d a0 63 fe af 07 04 8c ed 93 f1 5f 71 5e 8b a1 f8 c6 ef c6 9e 17 d3 b5 18 22 93 4d fb 49 3e 64 50 cb 9c 8c 95 c6 ec 03 d7 d3 1d 2b 23 c5 5e 16 b1 d5 bc 45 6b a2 69 5a c5 bc 7a bc 4a 66 bd 85 a7 12 bb 29 5f e2 05 8b 2e 00 1f 36 3f 89 45 73 d3 ae a3 55 7b 28 73 72 fe 26 f0 a1 34 ad 5a a7 2f 37 e1 e6 79 17 82 74 b8 35 8f 10 9f 15 ea 76 d2 3d c2 4a 71 37 9a ca b3 95 55 55 60 bd 08 00 30 cf d3 af 35 e8 ef 65 14 e0 c9 67 27 3d 4a 1a cb 0a 6d 65 6b 57 8f ca 68 98 c6 50 7f 09 1c 62 ac c3 23 46 db 91 88 3e a2 be 9e 77 97 bd 17 6f c8 f2 23 65 a4 b5 1b 22 49 13 fc ca 63 6f 51 d2 9c 24 27 fd 62 6e 1d d9 7a d6 a5 bd e4 13 a7 97 Data Ascii: ,cQ}3UFx,<KXm6=Dc_q^"MI>dP+#^EkiZzJf)_.6?EsU{(sr&4Z/7yt5v=Jq7UU`05eg'=JmekWhPb#F>wo#e"IcoQ$'bnz
2024-04-26 15:32:16 UTC	333	IN	Data Raw: 32 6e 19 c7 5a e2 ea 74 b7 73 20 8d a7 dc 74 a7 a4 80 60 60 9e c6 a5 9d 0e 79 51 ed 55 5b 70 ee 54 8e 84 55 a2 49 9a 55 53 82 54 7a 65 b1 45 43 e7 20 e1 df 69 f4 34 53 b0 88 77 2e 33 8f d2 90 10 4e 72 07 af 34 dc f6 14 a9 82 79 e9 de ac cc 9a 32 48 27 27 19 a7 21 3b b9 e3 15 18 21 78 24 05 3f 85 49 81 8c 13 fa 52 18 92 64 7c e3 9c 71 8c 54 91 39 24 e0 1a 8b ca 8e 44 21 97 9e b4 89 1a ac 8b 1a 7c a3 19 3c d4 8c b4 24 00 f2 18 7e b5 66 19 76 ff 00 7b f2 35 53 8e e6 a6 8c 83 c9 61 81 eb 43 43 b9 7d ee 11 6d db cd 07 6f bf ad 25 a4 ab 3c 20 ab 86 c7 a7 6f 6a 64 58 74 31 e5 b0 46 0e 1b 07 f3 a9 d6 38 94 8f 29 00 70 3b 2f 26 a0 a2 09 e3 c8 e9 8a a3 34 7c e7 1c d6 bb ed 65 cf 6f 7a a3 32 70 70 79 f7 a1 30 66 71 38 38 e0 7e 74 54 ae 9f 37 5c 51 57 72 4c d6 27 6b Data Ascii: 2nZts t``yQU[pTUIUSTzeEC i4Sw.3Nr4y2H''!;!x$?IRd\|qT9$D!\|<$~fv{5SaCC}mo%< ojdXt1F8)p;/&4\|eoz2ppy0fq88~tT7\QWrL'k
2024-04-26 15:32:16 UTC	24	IN	Data Raw: 8c 01 90 2a 29 4f 20 60 74 3d a8 a2 84 04 12 20 0d de 8a 28 aa 03 ff d9 Data Ascii: *)O `t= (
2024-04-26 15:32:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-26 15:32:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49762	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:16 UTC	1521	OUT	GET /recaptcha/api2/payload?p=06AFcWeA4qo7BvEsw6c5x7L0zWkwDxk41s4QXBFq-UTbLoYi4mYg5pWAHsT9vh8DMhbPPHIyjECIZ4cYU41ywyA8hdRigYZQJnKI4_I3uv32GImq_xmDdqm2nF9i9bAfGu7AlTCwBDt7YWEwIJ3RtEJzTJZfrDDqE8Eyg8H6v_CVaI8sLZw3REAQxg9HgOdQ_aRKGSEE8JfJrWqTp2iL71Gqv5cBxUH_2LMA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=d14cdf2cf524340b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AEdsM9PDFaukKvlTlHSflSkwqygHONJPfvWK7qQ1uvIFU_r50US66f4O1u9-2AWCLMB8FOo6Nmt9GdiEovjwKxM; 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
2024-04-26 15:32:17 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 26 Apr 2024 15:32:17 GMT Date: Fri, 26 Apr 2024 15:32:17 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:17 UTC	1255	IN	Data Raw: 45 45 38 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 64 00 64 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: EE8JFIFC!"$"$Cdd"}!1AQa"q
2024-04-26 15:32:17 UTC	1255	IN	Data Raw: 0b 82 c0 67 af e1 4c bc d6 96 35 21 9d 47 39 ce cc f1 f9 d7 1d e2 3f 1a c3 6a a6 28 ee e5 69 48 fb b0 3a 45 f9 9c 13 f9 57 34 aa ab ee 7b bf 52 55 29 38 ca 08 f6 60 c1 65 f3 a0 62 eb 9d 8d 93 f9 f0 2a f4 0f 18 55 20 90 ae 78 00 63 1d ba 57 cb 7e 14 f8 cb 71 a5 78 c1 6d 21 f2 8e 8a e0 a5 d2 05 2c 43 93 fe b1 59 89 66 23 be 49 cf e5 8f a4 f4 b9 a6 b8 df 12 4a ad 1f 96 92 47 20 2a c1 c3 73 b8 63 b7 f9 15 d8 b4 48 f9 4a f4 95 2a 8e 29 dc d4 31 dc 31 ca cb b4 7a 62 8a 72 89 42 81 bd 07 e1 ff 00 d7 a2 a8 c4 c4 b0 8c a5 e2 15 96 49 4a 28 cb 03 94 eb eb ec 73 f9 fb 56 95 ef 21 5c 10 5b b0 c7 51 55 5a 48 90 ac 50 22 7d e2 a0 0f 94 83 db 8e d4 d8 ee 1e 3b 2f 31 c3 21 24 9c 92 06 39 ee 7a 56 69 81 91 ac ac 93 5d 33 b6 e4 40 bf 28 1d be 9e 86 ab e9 09 20 bb 5d db e3 Data Ascii: gL5!G9?j(iH:EW4{RU)8`ebU xcW~qxm!,CYf#IJG scHJ*)11zbrBIJ(sV!\[QUZHP"};/1!$9zVi]3@( ]
2024-04-26 15:32:17 UTC	1255	IN	Data Raw: 74 b7 00 85 18 00 1e 4f b1 38 ae 86 f6 1b d9 42 a5 a5 d2 44 aa d9 60 63 dd 9f ad 52 9d 35 28 47 98 a8 b3 30 ea 53 82 47 5e 87 fc 6b 09 45 1b 46 4d 2b 26 67 f9 57 16 12 37 91 69 1a 42 b8 0a 91 92 e9 81 ea 0f 43 9f 4a ce 92 f6 fd 2e 63 98 98 e4 8c b1 ca ba b2 8c 74 0a 39 c7 1c 75 1d 87 35 26 a3 ad dc c1 73 1c 53 89 60 66 c7 cb b4 30 20 fa f3 d6 9d 6d e2 7d 2a ea 21 12 5c e6 46 6f de 09 53 00 0c 1e 47 cb ed fa d4 f3 c9 6c cb e5 8b dd 11 43 76 6f a7 7b 79 2d e1 84 81 b8 98 ca e4 9e b9 fd 7a 57 31 e3 2f 19 47 e1 59 a3 86 f3 4d b9 b8 f3 50 98 e4 8b 01 18 fa 1c f4 3d 3d 7a d7 5d 6b 6f 66 b7 66 4b 74 65 38 39 e7 20 fa 91 59 be 2d d3 34 cd 52 c9 ac f5 38 96 48 fe f2 e4 e0 a9 f5 07 b1 ad e1 27 28 de 47 b1 97 28 c5 72 da e9 9e 17 e2 4f 14 6a de 27 bd ff 00 4a 7f 2a Data Ascii: tO8BD`cR5(G0SG^kEFM+&gW7iBCJ.ct9u5&sS`f0 m}!\FoSGlCvo{y-zW1/GYMP==z]koffKte89 Y-4R8H'(G(rOj'J
2024-04-26 15:32:17 UTC	58	IN	Data Raw: 79 e6 5b 92 fb b2 e0 00 38 c6 30 b8 e3 0c 6b b8 b6 8a 33 04 72 b2 86 66 c3 1c fa d1 45 4d 3d 5e a3 7b 04 57 72 3b cc a4 2e 11 f6 8c 7a 60 1f eb 45 14 56 97 04 91 ff d9 0d 0a Data Ascii: y[80k3rfEM=^{Wr;.z`EV
2024-04-26 15:32:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49763	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:17 UTC	1521	OUT	GET /recaptcha/api2/payload?p=06AFcWeA4qo7BvEsw6c5x7L0zWkwDxk41s4QXBFq-UTbLoYi4mYg5pWAHsT9vh8DMhbPPHIyjECIZ4cYU41ywyA8hdRigYZQJnKI4_I3uv32GImq_xmDdqm2nF9i9bAfGu7AlTCwBDt7YWEwIJ3RtEJzTJZfrDDqE8Eyg8H6v_CVaI8sLZw3REAQxg9HgOdQ_aRKGSEE8JfJrWqTp2iL71Gqv5cBxUH_2LMA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=abd561db531187e4 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AEdsM9PDFaukKvlTlHSflSkwqygHONJPfvWK7qQ1uvIFU_r50US66f4O1u9-2AWCLMB8FOo6Nmt9GdiEovjwKxM; 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
2024-04-26 15:32:17 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 26 Apr 2024 15:32:17 GMT Date: Fri, 26 Apr 2024 15:32:17 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:17 UTC	836	IN	Data Raw: 41 36 34 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 64 00 64 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: A64JFIFC!"$"$Cdd"}!1AQa"q
2024-04-26 15:32:17 UTC	1255	IN	Data Raw: 8a 18 83 9a 64 04 18 50 e7 aa 8a 7e d4 5e c4 7f e5 48 46 7a 93 4b c5 38 01 47 b5 0f 62 47 b4 67 ff 00 af 46 3d 5a aa 5e 6b 1a 4d 9b 85 b8 be 85 1b 19 c0 3b 8f e9 58 3a af 8f 74 2b 22 42 ef 91 bb 6e 61 18 3f 9f 3f a5 5a 9b 64 3a 69 6e 75 3b 45 1b 7e 98 af 32 bc f8 91 7b 39 2b a7 d9 11 e8 52 22 7f 56 c0 fd 2b 1e f3 59 f1 4e a4 0e f6 68 d0 f6 92 52 47 fd f2 b8 15 a2 e6 ea 47 22 e8 7a 7d e5 e5 94 53 94 92 ee dd 1b d0 c8 01 a2 bc 4a 5b 6d 5a 4b 89 7c cb f0 a5 5b 18 58 97 1d 01 ee 09 ef 45 6a af dc 3d 99 ec 9a 17 84 ac f4 eb 69 22 9d e4 b9 2e fb 81 f3 1d 70 30 06 31 bb da 99 73 fd 9f 66 45 c5 89 7b 79 a1 ba 8a 37 cc c7 12 2b 48 11 81 04 9c f1 93 ed 8c d4 56 5e 20 58 7c 07 16 a5 2e b5 6d 7d ab 5c cb 98 e1 48 48 11 47 82 0e ef 7c e3 1d 7b d6 4e a3 ae e8 f7 d6 86 Data Ascii: dP~^HFzK8GbGgF=Z^kM;X:t+"Bna??Zd:inu;E~2{9+R"V+YNhRGG"z}SJ[mZK\|[XEj=i".p01sfE{y7+HV^ X\|.m}\HHG\|{N
2024-04-26 15:32:17 UTC	576	IN	Data Raw: e3 19 a2 a5 4d a3 07 04 dd ce 6a e8 c2 20 44 87 4b 9a 2b 85 c6 e6 24 9c fa f1 5b 7a 07 88 ae cc 76 ba 2c b1 42 90 47 3b cf bb ca 02 4d c5 31 82 d8 ce 38 1c 74 ad cb 9d 2e d6 43 b8 86 cf d6 aa 26 8d 67 1d d0 9c 23 79 80 60 12 c6 b2 5a ee 6b cc e3 f0 b2 e4 97 31 b9 24 1e 7b d5 66 99 0f 04 54 c2 d6 21 d3 34 1b 78 98 e0 f0 7b 1f 5a 7c a9 19 f3 36 45 6d 7d 3d 9b 86 8a 46 da 0f 03 3d 2b 72 df 52 b7 bf da 46 16 41 d4 56 23 db 2a d4 62 df 6b 6f 8d 8a b7 63 52 e2 b7 0b b7 b9 d2 cb 72 2d fc b5 60 5b 79 c6 47 6a 96 78 2d ae 06 c9 e2 49 07 fb 43 a7 d2 b9 d8 ee a6 12 46 6e 18 b2 a9 15 d0 43 3a 4c a0 ab 06 07 b8 a5 b1 2d 14 2e 34 35 d8 56 c6 ee 6b 70 58 36 d2 c5 97 23 a5 24 50 df c2 24 37 d1 2d c9 23 02 44 e4 93 d8 9a d5 e4 74 34 e0 71 df 14 6e 0a 72 89 ce 48 d9 72 4a Data Ascii: Mj DK+$[zv,BG;M18t.C&g#y`Zk1${fT!4x{Z\|6Em}=F=+rRFAV#*bkocRr-`[yGjx-ICFnC:L-.45VkpX6#$P$7-#Dt4qnrHrJ
2024-04-26 15:32:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49764	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:20 UTC	1329	OUT	POST /recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 5965 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AEdsM9PDFaukKvlTlHSflSkwqygHONJPfvWK7qQ1uvIFU_r50US66f4O1u9-2AWCLMB8FOo6Nmt9GdiEovjwKxM; 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
2024-04-26 15:32:20 UTC	5965	OUT	Data Raw: 76 3d 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 26 63 3d 30 33 41 46 63 57 65 41 36 37 76 34 4b 4b 53 49 49 76 4e 72 66 30 74 75 69 57 78 75 4c 76 52 75 4d 4f 30 6c 72 50 70 74 37 61 49 6f 66 44 6f 6f 77 36 2d 6d 31 4e 59 48 5a 5a 44 55 34 50 7a 79 64 4b 6f 65 73 66 78 41 4d 78 45 57 4e 54 53 4e 77 70 38 38 37 77 42 42 4e 51 58 79 72 33 4c 58 32 6b 4d 65 37 74 44 36 4f 6a 79 42 6d 4e 72 2d 54 78 34 53 69 30 6a 34 51 4d 73 76 54 5a 52 57 6c 41 53 5a 79 6d 57 39 55 45 37 6f 37 66 4d 68 35 72 50 31 4b 70 61 43 77 6f 39 57 46 35 31 58 35 46 64 45 47 69 78 4e 34 47 5f 6a 35 36 7a 68 47 44 6d 37 2d 43 6f 56 75 50 66 4e 4a 77 48 36 66 4b 47 78 56 76 34 6e 62 6e 68 4c 50 74 7a 4c 6f 72 65 43 30 66 4b 7a 30 78 52 61 39 5a 38 71 30 4d Data Ascii: v=V6_85qpc2Xf2sbe3xTnRte7m&c=03AFcWeA67v4KKSIIvNrf0tuiWxuLvRuMO0lrPpt7aIofDoow6-m1NYHZZDU4PzydKoesfxAMxEWNTSNwp887wBBNQXyr3LX2kMe7tD6OjyBmNr-Tx4Si0j4QMsvTZRWlASZymW9UE7o7fMh5rP1KpaCwo9WF51X5FdEGixN4G_j56zhGDm7-CoVuPfNJwH6fKGxVv4nbnhLPtzLoreC0fKz0xRa9Z8q0M
2024-04-26 15:32:20 UTC	483	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 15:32:20 GMT Expires: Fri, 26 Apr 2024 15:32:20 GMT Cache-Control: private, max-age=0 X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:32:20 UTC	772	IN	Data Raw: 61 36 33 0d 0a 29 5d 7d 27 0a 5b 22 64 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 37 37 72 79 5f 78 6e 53 73 63 55 6b 7a 41 56 48 41 6d 6b 2d 56 6f 73 6b 45 67 2d 4a 45 65 50 34 74 4d 46 33 2d 58 47 4e 67 4f 6e 43 76 6e 56 76 70 53 5a 61 41 49 33 42 6d 47 41 6b 37 37 47 31 31 61 2d 71 50 70 47 5a 6e 65 49 49 44 31 43 4d 73 4f 42 35 6c 6c 61 49 7a 6a 78 63 34 32 66 4f 7a 32 71 74 55 35 35 47 32 6c 4e 58 79 6c 79 68 39 72 45 63 75 4b 4f 43 77 6d 67 52 64 76 73 72 56 77 6d 51 73 65 55 52 37 6e 4a 57 56 36 4b 51 54 69 77 31 53 32 72 71 5a 33 57 53 6f 76 50 31 34 31 4a 4e 52 77 56 79 5a 37 68 6d 4b 56 7a 55 74 74 56 51 4b 31 4d 48 36 49 34 42 44 74 65 4d 76 48 4b 67 73 45 30 78 59 52 78 74 58 73 36 59 65 41 72 49 45 75 44 77 64 4e 53 66 76 2d 74 69 67 31 5a Data Ascii: a63)]}'["dresp","03AFcWeA77ry_xnSscUkzAVHAmk-VoskEg-JEeP4tMF3-XGNgOnCvnVvpSZaAI3BmGAk77G11a-qPpGZneIID1CMsOB5llaIzjxc42fOz2qtU55G2lNXylyh9rEcuKOCwmgRdvsrVwmQseUR7nJWV6KQTiw1S2rqZ3WSovP141JNRwVyZ7hmKVzUttVQK1MH6I4BDteMvHKgsE0xYRxtXs6YeArIEuDwdNSfv-tig1Z
2024-04-26 15:32:20 UTC	1255	IN	Data Raw: 4c 64 42 4e 50 4b 6c 71 33 37 58 6d 6a 68 39 58 2d 55 66 7a 57 59 36 2d 36 50 5a 79 79 79 58 38 6b 6c 72 73 45 43 42 79 59 5a 38 64 4f 76 65 65 47 31 4a 42 67 32 77 72 71 50 6e 78 49 6e 6a 75 4d 67 53 55 4a 52 41 6b 52 75 63 73 75 72 67 41 33 75 48 76 48 68 48 30 56 72 57 49 4a 33 6e 70 59 68 5f 55 77 52 7a 32 51 76 35 4e 76 48 31 63 75 55 41 52 79 6b 36 4c 48 71 4f 7a 50 47 2d 39 4b 74 36 5a 68 43 4c 43 42 4b 63 2d 47 41 4e 78 6f 53 51 67 48 36 77 34 4f 6f 4d 47 4b 48 38 2d 57 30 46 67 72 62 4f 76 39 78 44 65 65 62 66 44 32 4a 32 6b 33 66 56 46 54 6f 42 72 41 52 48 65 43 44 4d 70 4a 75 6f 2d 50 41 73 68 47 68 75 44 79 30 52 39 37 6d 65 68 32 78 6e 46 6e 58 39 5f 62 55 74 6c 35 69 30 4d 71 61 33 69 6f 36 74 43 79 53 6d 58 53 35 7a 78 6c 6a 66 4e 69 6e 55 Data Ascii: LdBNPKlq37Xmjh9X-UfzWY6-6PZyyyX8klrsECByYZ8dOveeG1JBg2wrqPnxInjuMgSUJRAkRucsurgA3uHvHhH0VrWIJ3npYh_UwRz2Qv5NvH1cuUARyk6LHqOzPG-9Kt6ZhCLCBKc-GANxoSQgH6w4OoMGKH8-W0FgrbOv9xDeebfD2J2k3fVFToBrARHeCDMpJuo-PAshGhuDy0R97meh2xnFnX9_bUtl5i0Mqa3io6tCySmXS5zxljfNinU
2024-04-26 15:32:20 UTC	639	IN	Data Raw: 50 35 71 34 41 6c 33 57 72 71 6e 51 7a 72 4f 66 4f 70 74 34 4b 79 79 31 59 46 50 74 72 78 62 6e 31 4a 58 38 55 48 31 77 6f 30 76 48 6b 6f 43 74 49 4e 6c 6d 75 7a 30 65 63 6c 6b 71 54 2d 63 73 4d 6b 52 74 4a 58 6d 59 41 37 69 43 53 30 30 72 44 42 56 42 38 47 33 37 64 70 6f 31 51 4a 5f 4a 5a 31 58 35 43 69 58 72 4b 39 7a 77 4e 6c 6c 5a 4e 4d 74 30 70 59 64 6c 5a 43 4d 61 39 63 52 36 71 6d 72 35 73 41 43 42 4e 63 35 67 31 47 67 71 30 53 6e 4e 69 67 6b 4b 48 48 42 76 71 52 30 56 79 4e 42 45 44 30 51 46 32 67 72 46 4a 52 5a 63 75 38 2d 2d 71 35 49 70 57 6f 74 68 68 77 71 5a 62 61 64 5a 55 47 39 75 45 48 7a 58 70 49 49 61 2d 35 67 35 33 41 67 7a 38 73 57 6d 37 37 66 5a 46 33 70 68 43 53 73 62 5a 7a 79 38 5f 30 4c 6f 74 51 73 36 39 56 6f 55 32 37 46 52 63 61 49 Data Ascii: P5q4Al3WrqnQzrOfOpt4Kyy1YFPtrxbn1JX8UH1wo0vHkoCtINlmuz0eclkqT-csMkRtJXmYA7iCS00rDBVB8G37dpo1QJ_JZ1X5CiXrK9zwNllZNMt0pYdlZCMa9cR6qmr5sACBNc5g1Ggq0SnNigkKHHBvqR0VyNBED0QF2grFJRZcu8--q5IpWothhwqZbadZUG9uEHzXpIIa-5g53Agz8sWm77fZF3phCSsbZzy8_0LotQs69VoU27FRcaI
2024-04-26 15:32:20 UTC	1255	IN	Data Raw: 64 64 38 0d 0a 58 43 79 4f 7a 36 59 39 52 4a 7a 77 4a 76 46 41 58 75 4a 74 56 68 53 5f 76 4e 51 2d 43 46 59 4c 77 58 42 64 76 61 65 42 2d 32 78 62 53 46 59 64 78 77 43 42 6a 52 42 69 79 73 33 70 4b 4b 49 6e 6f 47 6a 36 4d 42 46 71 56 44 36 63 47 64 54 6b 63 54 45 6f 4c 6a 51 77 7a 4f 31 46 66 4a 52 46 66 78 59 64 4a 49 35 47 30 5a 4e 6b 4e 37 47 37 62 67 2d 69 6f 72 75 76 54 54 61 32 6e 5a 51 33 6b 4a 67 32 56 5a 64 4b 70 73 6c 61 51 48 72 78 6e 41 6b 62 74 73 62 37 62 67 65 73 51 66 6a 52 78 63 72 50 66 43 42 32 6b 6c 52 61 52 6e 63 52 58 31 49 62 6c 79 6d 75 31 64 4f 56 2d 78 61 71 7a 65 55 63 4e 78 4d 65 52 54 53 49 46 70 4f 54 2d 70 77 4e 70 6a 58 37 74 50 4c 6a 63 49 31 76 50 61 6d 75 50 35 61 37 45 6a 43 66 4e 4c 51 4f 72 62 73 46 69 63 39 71 61 77 Data Ascii: dd8XCyOz6Y9RJzwJvFAXuJtVhS_vNQ-CFYLwXBdvaeB-2xbSFYdxwCBjRBiys3pKKInoGj6MBFqVD6cGdTkcTEoLjQwzO1FfJRFfxYdJI5G0ZNkN7G7bg-ioruvTTa2nZQ3kJg2VZdKpslaQHrxnAkbtsb7bgesQfjRxcrPfCB2klRaRncRX1Iblymu1dOV-xaqzeUcNxMeRTSIFpOT-pwNpjX7tPLjcI1vPamuP5a7EjCfNLQOrbsFic9qaw
2024-04-26 15:32:20 UTC	1255	IN	Data Raw: 43 74 69 62 6a 6b 45 5f 7a 4b 33 71 4d 7a 4e 43 55 4c 5a 6c 51 38 49 43 63 62 38 78 69 69 56 79 47 46 78 47 33 6f 57 63 54 76 33 36 41 75 33 5a 4b 69 79 76 64 77 58 76 72 37 77 43 30 6e 6e 61 34 48 4e 41 6c 75 35 52 58 5a 4f 64 62 79 52 38 44 72 79 73 4c 6b 76 63 42 6e 31 74 77 33 38 57 44 38 72 6c 78 51 62 35 37 4f 53 75 68 74 4b 5a 70 4c 6c 37 2d 44 4d 4f 42 65 46 44 48 6f 6d 2d 7a 70 73 49 66 57 64 45 6c 64 58 72 39 56 5a 30 46 6a 79 51 57 35 75 59 6e 55 63 50 4b 69 71 56 4a 50 32 65 77 56 62 37 5a 33 44 70 79 52 68 45 52 30 61 75 43 4e 44 54 55 4f 44 43 38 46 53 72 48 79 7a 30 61 37 68 4f 38 67 74 50 62 71 79 49 4c 6b 6a 62 31 42 58 71 32 38 51 5f 59 43 43 36 39 4a 65 4a 5f 64 62 46 47 4e 38 44 38 78 6f 74 6b 48 4d 52 4c 4f 5f 61 33 58 38 72 50 63 59 Data Ascii: CtibjkE_zK3qMzNCULZlQ8ICcb8xiiVyGFxG3oWcTv36Au3ZKiyvdwXvr7wC0nna4HNAlu5RXZOdbyR8DrysLkvcBn1tw38WD8rlxQb57OSuhtKZpLl7-DMOBeFDHom-zpsIfWdEldXr9VZ0FjyQW5uYnUcPKiqVJP2ewVb7Z3DpyRhER0auCNDTUODC8FSrHyz0a7hO8gtPbqyILkjb1BXq28Q_YCC69JeJ_dbFGN8D8xotkHMRLO_a3X8rPcY
2024-04-26 15:32:20 UTC	1041	IN	Data Raw: 6a 4c 39 35 4a 78 7a 75 68 4f 68 4c 76 46 70 49 5a 34 4e 2d 57 44 69 51 42 47 51 66 67 61 36 30 34 50 73 36 65 6b 52 70 4f 64 37 79 30 5a 50 69 70 6e 32 6a 49 63 67 64 62 45 30 69 79 74 41 32 33 4f 33 43 42 49 34 33 66 78 63 71 78 77 6a 77 79 64 4b 62 55 78 63 53 4b 30 6f 38 4e 2d 67 64 6d 6a 72 6f 75 4e 6d 34 2d 31 44 56 71 6c 49 32 51 53 52 79 44 43 37 6c 5a 46 48 64 58 66 41 39 74 47 6d 48 56 75 33 4d 72 67 70 61 59 41 73 74 63 39 31 6b 64 7a 53 6c 48 6d 76 49 67 4c 76 35 44 62 55 33 52 69 6f 5f 78 41 75 45 6b 4b 47 6a 63 4a 32 46 59 4f 56 49 35 78 4a 42 75 62 67 58 58 31 35 68 54 67 59 6c 56 6c 4f 4b 6a 4d 2d 73 37 42 49 6c 31 2d 41 39 36 5a 6f 6e 35 6f 54 48 43 63 42 63 45 61 31 38 68 75 4d 77 66 4f 6a 39 69 76 46 73 59 6d 47 68 7a 37 34 48 55 4d 67 Data Ascii: jL95JxzuhOhLvFpIZ4N-WDiQBGQfga604Ps6ekRpOd7y0ZPipn2jIcgdbE0iytA23O3CBI43fxcqxwjwydKbUxcSK0o8N-gdmjrouNm4-1DVqlI2QSRyDC7lZFHdXfA9tGmHVu3MrgpaYAstc91kdzSlHmvIgLv5DbU3Rio_xAuEkKGjcJ2FYOVI5xJBubgXX15hTgYlVlOKjM-s7BIl1-A96Zon5oTHCcBcEa18huMwfOj9ivFsYmGhz74HUMg
2024-04-26 15:32:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49765	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:21 UTC	1521	OUT	GET /recaptcha/api2/payload?p=06AFcWeA5n2WF8wv-ME7L61a1BMVDol7SKjmXRzD04LO-5qnc5Yo-7Uv3YESGK03INgkSkcBpqFw2IVRslTj_HEYCSE0bVNqb0YyT3pUC2Pe29yUaioY0zttD_Tipl2_G5Tpu8XD-YvFrTqIJ61dTX4sv2npmlKj-lwoCG7y0yslq1m5awBb8XY2F4ks8gOphnefktV5tmjcSue1lYveyn69HCB7uZNEAi1g&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=1868db878e889a63 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AEdsM9PDFaukKvlTlHSflSkwqygHONJPfvWK7qQ1uvIFU_r50US66f4O1u9-2AWCLMB8FOo6Nmt9GdiEovjwKxM; 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
2024-04-26 15:32:21 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 26 Apr 2024 15:32:21 GMT Date: Fri, 26 Apr 2024 15:32:21 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:21 UTC	6	IN	Data Raw: 31 36 33 30 0d 0a Data Ascii: 1630
2024-04-26 15:32:21 UTC	1255	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 64 00 64 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$Cdd"}!1AQa"q2
2024-04-26 15:32:21 UTC	1255	IN	Data Raw: 3b 3b a9 05 82 8c e0 b1 00 02 7a 71 b8 f4 e3 9c 57 d7 65 31 e4 c3 c6 9d 69 7b cb e6 df af 99 bc a3 5e 2e ee 3a 1f 3c 34 b2 35 ba fe f1 41 3f 2b 01 c1 20 73 cf ad 3a 28 3c f7 d9 1a 37 e7 8a da 2e ee bb 06 cc 83 c1 68 d5 bf 98 35 b7 a5 78 77 50 bc b5 3a 8a da d9 34 50 cc 16 69 24 51 1e d5 2b 92 7e 5c 1e 32 3a 0e 72 00 af 4a bd 1f 63 1b c9 e8 44 71 29 ea ce 74 e8 fa b1 44 2d a7 dc b8 db f2 b1 ee 3f 1a 2b d5 ed 6f de ca d9 2d 67 bc d5 1d 63 05 62 6d 3c b4 71 32 64 e0 e0 82 73 9c f5 e7 d6 8a f2 1e 27 12 9e 94 d7 e3 fe 42 78 a6 76 3a 77 c1 08 20 91 2e e7 f0 cf 8c 38 25 da 5b ab 9b 33 1a 9f f6 d0 39 24 7b 00 73 5d a6 91 f0 e9 6f ad e3 b7 92 c2 d5 2d 5d 77 23 a5 ca 44 ae 87 9e 83 91 c3 6d e4 e7 1e b5 e7 7e 2c d4 bf b2 be 16 68 e7 40 bb 9b 50 b8 b7 bc 78 af 64 9d Data Ascii: ;;zqWe1i{^.:<45A?+ s:(<7.h5xwP:4Pi$Q+~\2:rJcDq)tD-?+o-gcbm<q2ds'Bxv:w .8%[39${s]o-]w#Dm~,h@Pxd
2024-04-26 15:32:21 UTC	1255	IN	Data Raw: 52 69 76 d6 47 ce 81 5e e6 65 bd 58 a2 69 bf 8c a8 23 2a 58 f3 dc 72 7d 39 4d 07 e1 8f c4 1d 0b 48 bc d3 6c 74 ab 1b 89 ae 20 48 7e d0 b7 b6 ff 00 79 84 86 46 c9 6d d9 05 91 47 fb b9 e3 8a eb 83 a3 53 0b 18 73 5d a2 25 81 c4 28 eb 4d fd cc 64 9a d5 ef fc 21 d7 9a c3 78 85 6e dd e2 9c 7d 9c 5c 30 93 f7 72 44 c4 46 7d 00 4e 99 07 0c 7a e4 67 83 f0 d5 fc 9e 34 d5 a6 ba d6 8b dc 6a 76 e0 5c 2c a7 2c 5d 03 8d c8 49 61 90 03 16 c9 e8 01 e7 a5 74 f2 fe cf 1f 15 d6 28 d6 7b 7d 3a d6 09 c3 bf 92 da 94 68 a0 fc 80 92 0b 75 62 aa 78 cf dd ed c5 6e 69 5f 03 7c 65 a5 5a 98 ec ac 2c a7 96 60 c2 e1 a4 d5 ad c2 aa 81 c1 08 af d4 1c f5 cf 40 78 35 d1 ec a9 d0 8b 51 d6 4c 98 e1 ea 2b 7b ad fc 82 c7 43 d5 35 5d 22 69 74 b9 24 89 d1 97 ce 54 94 af 9b 1e 71 9d a3 39 db 96 39 Data Ascii: RivG^eXi#*Xr}9MHlt H~yFmGSs]%(Md!xn}\0rDF}Nzg4jv\,,]Iat({}:hubxni_\|eZ,`@x5QL+{C5]"it$Tq99
2024-04-26 15:32:21 UTC	333	IN	Data Raw: d9 db 27 68 3b 49 04 7a 91 db 03 1f 5a d9 f8 1f e1 9b c3 ac db 6b 8f 0a 0b 3b 66 60 09 72 8d 2b 15 23 0a 73 db 3c 9f c3 9a ed 3c 5c 67 d5 bc 3c 96 5a 26 a0 03 a4 98 2d 73 06 e9 d7 e7 de a9 1b 80 58 85 c3 7d e3 8c 9e 70 05 70 63 31 ce 35 bd 9a 7a 3f c0 e1 c5 51 ab 86 92 8d 48 da ea ff 00 23 63 e1 75 84 5a 67 85 75 43 0a bd 90 d5 2e 16 69 ed a7 55 49 61 29 bc 18 fd f0 72 46 46 4e 47 bd 3b c2 77 3e 1f d1 85 cd 96 9f 2c 4f 1c b3 b3 3a c9 0f 96 46 08 ca 7c c7 2c 77 1f d4 76 c5 64 68 d3 3f f6 55 96 99 0d a0 b6 bc 12 9b 83 73 7c 37 96 97 e6 c2 8e 31 cf 18 e9 db 06 98 d6 f6 b3 98 9f c4 37 09 67 74 81 0a dc fc aa cd 3a c9 fb c6 2a 33 92 07 f1 03 ce 07 5c 0c f8 f5 25 ce f5 66 2f 54 8d 8f 12 e9 09 7f 7b 1d cc e9 a9 ef 68 b9 fb 30 42 83 e6 6e ee 73 9a 2b 4f 43 92 ee Data Ascii: 'h;IzZk;f`r+#s<<\g<Z&-sX}ppc15z?QH#cuZguC.iUIa)rFFNG;w>,O:F\|,wvdh?Us\|717gt:*3\%f/T{h0Bns+OC
2024-04-26 15:32:21 UTC	1255	IN	Data Raw: 80 bc 33 a5 79 d1 5b dd 2f 99 21 cb b4 a3 21 8b 00 7a 7b 60 91 8a fa c8 c1 61 69 3e 55 a2 d4 e8 95 35 4a 37 4c f2 d3 0f d9 a3 8b 24 33 05 3c 7a 75 19 cf 7e 6b a2 b0 bb 49 f4 25 b1 69 d0 06 bd 47 28 54 36 df 91 81 3c fa f0 3d b1 5e 81 af fc 27 d3 a4 d3 d2 2d 1a fa 58 af 5d 83 27 9e 77 8d be 80 28 cf 24 d5 bf 86 9f b3 f7 8e b5 0d 5e 19 f5 4d 2e 0d 3f 4d 52 7c c6 ba 90 c6 e4 8c 8c a0 00 b1 1c 02 33 c7 35 ad 4c ca 18 ca 76 a5 7d 0c b0 71 a7 ed a2 e7 b5 f5 1f e0 4f 09 6a 17 ca a2 c5 16 6e 8e 54 06 e0 7f df 55 d7 c3 e1 e9 ad f5 db 7b 0d 60 18 6d d8 86 0a a0 9d cc 3e e8 e4 9e 0b 63 3f 53 5c ae bd 79 7b f0 d7 c6 12 e8 17 9f 6a dd 10 00 4b 03 e5 5d 4f 4c 70 38 a9 b4 3f 1a 2e b3 e2 cb 28 5a 2b a9 18 ca a1 5a 46 e9 cd 72 3f 6d cb a9 f6 32 79 57 33 b5 ad 6f 3b dc f4 Data Ascii: 3y[/!!z{`ai>U5J7L$3<zu~kI%iG(T6<=^'-X]'w($^M.?MR\|35Lv}qOjnTU{`m>c?S\y{jK]OLp8?.(Z+ZFr?m2yW3o;
2024-04-26 15:32:21 UTC	327	IN	Data Raw: 4c b1 ef 24 b2 11 8e 87 d3 9e 95 db 7c 5a f1 3f 88 74 0d 37 ed 3a 36 b5 a8 58 4a 59 13 75 bd c3 c7 80 72 4f 43 ed 45 15 f4 92 d2 a2 b1 ea 5f f7 66 7a 78 b7 c4 b7 b6 9a 0e a1 7f ad 5f 5e 5c ed de 24 9e 76 7c 30 51 82 01 38 1d 73 5f 44 78 2f e2 2e bb aa ec 4b b8 2c 0f 03 2c b1 b0 27 8f f7 b1 45 15 d3 45 de 1a 99 bd cf 52 b6 91 a5 b6 8e 46 00 16 5c 9c 56 47 8e f5 6b 9d 0b c1 fa a6 b1 66 91 3d c5 a5 bb 4b 1a ca 09 42 47 a8 04 1c 7e 34 51 4e 3b a1 2d cf 0f d0 3e 23 78 83 c5 1e 07 ba 97 56 5b 39 24 7e ac 91 b2 e3 e4 27 81 bb 03 ae 3a 7f 8d 62 db 4b 2c b6 58 32 32 84 0d 30 00 ff 00 10 67 61 d7 b7 1d 28 a2 bc ac 7e 93 d3 b7 ea 67 77 ce ff 00 ae a5 6f 0d 4e fa 95 ca 9b ac 31 04 ff 00 e8 0a 7b fb 93 57 6f 63 f2 a1 bb ba 89 de 37 b5 81 65 8c 03 91 b8 e4 64 e7 d3 1c Data Ascii: L$\|Z?t7:6XJYurOCE_fzx_^\$v\|0Q8s_Dx/.K,,'EERF\VGkf=KBG~4QN;->#xV[9$~':bK,X220ga(~gwoN1{Woc7ed
2024-04-26 15:32:21 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-26 15:32:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49766	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:23 UTC	1327	OUT	POST /recaptcha/api2/userverify?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7159 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AEdsM9PDFaukKvlTlHSflSkwqygHONJPfvWK7qQ1uvIFU_r50US66f4O1u9-2AWCLMB8FOo6Nmt9GdiEovjwKxM; 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
2024-04-26 15:32:23 UTC	7159	OUT	Data Raw: 76 3d 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 26 63 3d 30 33 41 46 63 57 65 41 37 37 72 79 5f 78 6e 53 73 63 55 6b 7a 41 56 48 41 6d 6b 2d 56 6f 73 6b 45 67 2d 4a 45 65 50 34 74 4d 46 33 2d 58 47 4e 67 4f 6e 43 76 6e 56 76 70 53 5a 61 41 49 33 42 6d 47 41 6b 37 37 47 31 31 61 2d 71 50 70 47 5a 6e 65 49 49 44 31 43 4d 73 4f 42 35 6c 6c 61 49 7a 6a 78 63 34 32 66 4f 7a 32 71 74 55 35 35 47 32 6c 4e 58 79 6c 79 68 39 72 45 63 75 4b 4f 43 77 6d 67 52 64 76 73 72 56 77 6d 51 73 65 55 52 37 6e 4a 57 56 36 4b 51 54 69 77 31 53 32 72 71 5a 33 57 53 6f 76 50 31 34 31 4a 4e 52 77 56 79 5a 37 68 6d 4b 56 7a 55 74 74 56 51 4b 31 4d 48 36 49 34 42 44 74 65 4d 76 48 4b 67 73 45 30 78 59 52 78 74 58 73 36 59 65 41 72 49 45 75 44 77 64 4e Data Ascii: v=V6_85qpc2Xf2sbe3xTnRte7m&c=03AFcWeA77ry_xnSscUkzAVHAmk-VoskEg-JEeP4tMF3-XGNgOnCvnVvpSZaAI3BmGAk77G11a-qPpGZneIID1CMsOB5llaIzjxc42fOz2qtU55G2lNXylyh9rEcuKOCwmgRdvsrVwmQseUR7nJWV6KQTiw1S2rqZ3WSovP141JNRwVyZ7hmKVzUttVQK1MH6I4BDteMvHKgsE0xYRxtXs6YeArIEuDwdN
2024-04-26 15:32:23 UTC	483	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Fri, 26 Apr 2024 15:32:23 GMT Expires: Fri, 26 Apr 2024 15:32:23 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:32:23 UTC	772	IN	Data Raw: 34 30 30 0d 0a 29 5d 7d 27 0a 5b 22 75 76 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 35 34 47 43 6d 70 76 31 34 53 64 63 48 49 54 64 55 73 36 31 44 31 38 74 77 50 52 69 78 32 46 68 75 48 67 31 54 72 2d 48 69 65 2d 46 31 47 68 2d 4b 46 52 45 6e 6b 6c 35 54 62 6a 4d 6f 63 44 72 67 57 4a 39 6d 43 38 79 4e 54 38 30 39 47 77 76 36 34 48 77 39 44 4d 7a 74 32 63 58 39 79 4a 47 67 65 6a 55 36 33 58 68 4a 35 61 42 55 4c 7a 50 74 65 5a 6f 5f 39 45 65 6b 6c 53 76 72 54 4f 49 72 54 68 56 75 38 76 76 73 33 33 76 6b 4e 74 58 4f 41 2d 75 5f 71 64 61 30 63 54 42 4c 64 30 2d 69 35 45 61 45 79 6d 39 66 41 75 51 62 66 53 53 51 56 55 75 53 7a 38 6b 43 4a 77 43 33 36 30 47 4d 5a 54 5f 63 66 56 2d 53 54 32 44 48 74 49 33 4c 4d 57 62 57 75 54 75 58 63 76 2d 33 35 78 72 59 73 Data Ascii: 400)]}'["uvresp","03AFcWeA54GCmpv14SdcHITdUs61D18twPRix2FhuHg1Tr-Hie-F1Gh-KFREnkl5TbjMocDrgWJ9mC8yNT809Gwv64Hw9DMzt2cX9yJGgejU63XhJ5aBULzPteZo_9EeklSvrTOIrThVu8vvs33vkNtXOA-u_qda0cTBLd0-i5EaEym9fAuQbfSSQVUuSz8kCJwC360GMZT_cfV-ST2DHtI3LMWbWuTuXcv-35xrYs
2024-04-26 15:32:23 UTC	259	IN	Data Raw: 58 4b 4f 54 57 79 4b 70 75 76 4d 66 64 76 6c 6f 44 45 5a 57 35 68 66 6f 70 7a 71 36 51 76 42 7a 73 7a 31 71 47 5f 42 53 5f 65 45 30 65 55 53 6e 31 33 5a 4a 62 32 42 6e 38 74 49 5f 79 64 76 79 65 47 63 42 4c 65 74 65 71 43 6b 32 59 4f 78 32 57 34 45 70 5f 33 5a 70 6e 34 4d 73 6a 69 4c 64 6b 6b 4c 70 68 30 4d 78 51 47 42 67 53 76 4a 51 69 4b 75 72 77 22 2c 31 2c 31 32 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 30 39 41 45 64 73 4d 39 4e 6d 37 5f 57 6d 62 71 66 56 71 2d 54 75 71 50 72 70 75 71 68 37 77 79 66 43 6b 49 39 6d 74 4f 4e 4c 2d 54 51 53 5a 79 4b 6f 4d 71 6d 44 75 42 53 41 63 39 76 73 61 45 39 46 58 50 71 61 37 33 38 70 39 63 65 70 37 41 4b 69 66 33 46 43 46 72 4f 5f 6b 6e 43 74 6b 57 56 6b 45 6f 7a 5f 32 77 Data Ascii: XKOTWyKpuvMfdvloDEZW5hfopzq6QvBzsz1qG_BS_eE0eUSn13ZJb2Bn8tI_ydvyeGcBLeteqCk2YOx2W4Ep_3Zpn4MsjiLdkkLph0MxQGBgSvJQiKurw",1,120,null,null,null,null,null,"09AEdsM9Nm7_WmbqfVq-TuqPrpuqh7wyfCkI9mtONL-TQSZyKoMqmDuBSAc9vsaE9FXPqa738p9cep7AKif3FCFrO_knCtkWVkEoz_2w
2024-04-26 15:32:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49767	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:24 UTC	1592	OUT	POST /sorry/index HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 1207 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRmgZjcGPORr7EGIjAjT-is8k6Uwm1EagwkXv7b_3Y6lH1AXZSE6X-OCgzMA9YBQPBGvSt1H2oAX7BK9VoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
2024-04-26 15:32:24 UTC	1207	OUT	Data Raw: 67 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 3d 30 33 41 46 63 57 65 41 35 34 47 43 6d 70 76 31 34 53 64 63 48 49 54 64 55 73 36 31 44 31 38 74 77 50 52 69 78 32 46 68 75 48 67 31 54 72 2d 48 69 65 2d 46 31 47 68 2d 4b 46 52 45 6e 6b 6c 35 54 62 6a 4d 6f 63 44 72 67 57 4a 39 6d 43 38 79 4e 54 38 30 39 47 77 76 36 34 48 77 39 44 4d 7a 74 32 63 58 39 79 4a 47 67 65 6a 55 36 33 58 68 4a 35 61 42 55 4c 7a 50 74 65 5a 6f 5f 39 45 65 6b 6c 53 76 72 54 4f 49 72 54 68 56 75 38 76 76 73 33 33 76 6b 4e 74 58 4f 41 2d 75 5f 71 64 61 30 63 54 42 4c 64 30 2d 69 35 45 61 45 79 6d 39 66 41 75 51 62 66 53 53 51 56 55 75 53 7a 38 6b 43 4a 77 43 33 36 30 47 4d 5a 54 5f 63 66 56 2d 53 54 32 44 48 74 49 33 4c 4d 57 62 57 75 54 75 58 63 76 2d 33 35 78 72 59 73 Data Ascii: g-recaptcha-response=03AFcWeA54GCmpv14SdcHITdUs61D18twPRix2FhuHg1Tr-Hie-F1Gh-KFREnkl5TbjMocDrgWJ9mC8yNT809Gwv64Hw9DMzt2cX9yJGgejU63XhJ5aBULzPteZo_9EeklSvrTOIrThVu8vvs33vkNtXOA-u_qda0cTBLd0-i5EaEym9fAuQbfSSQVUuSz8kCJwC360GMZT_cfV-ST2DHtI3LMWbWuTuXcv-35xrYs
2024-04-26 15:32:24 UTC	730	IN	HTTP/1.1 302 Found Location: https://www.google.com/search?q=104.94.109.142443&oq=104.94.109.142443&gs_lcrp=EgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA&sourceid=chrome&ie=UTF-8&google_abuse=GOOGLE_ABUSE_EXEMPTION%3DID%3D211ac792a2de2ae0:TM%3D1714145544:C%3Dr:IP%3D102.129.152.220-:S%3DbW_BRuXgiNkknohxpUtoqJ0%3B+path%3D/%3B+domain%3Dgoogle.com%3B+expires%3DFri,+26-Apr-2024+18:32:24+GMT Date: Fri, 26 Apr 2024 15:32:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 577 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:24 UTC	525	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 65 61 72 63 68 3f 71 3d 31 30 34 2e 39 34 2e 31 30 39 2e 31 34 32 34 34 33 26 61 6d 70 3b 6f 71 3d 31 30 34 2e 39 34 2e 31 30 39 2e 31 34 32 34 34 33 26 61 6d 70 3b 67 73 5f 6c 63 72 70 3d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/search?q=104.94.109.142443&oq=104.94.109.142443&gs_lcrp=
2024-04-26 15:32:24 UTC	52	IN	Data Raw: 36 2d 41 70 72 2d 32 30 32 34 2b 31 38 3a 33 32 3a 32 34 2b 47 4d 54 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: 6-Apr-2024+18:32:24+GMT">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49768	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:26 UTC	1814	OUT	GET /search?q=104.94.109.142443&oq=104.94.109.142443&gs_lcrp=EgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA&sourceid=chrome&ie=UTF-8&google_abuse=GOOGLE_ABUSE_EXEMPTION%3DID%3D211ac792a2de2ae0:TM%3D1714145544:C%3Dr:IP%3D102.129.152.220-:S%3DbW_BRuXgiNkknohxpUtoqJ0%3B+path%3D/%3B+domain%3Dgoogle.com%3B+expires%3DFri,+26-Apr-2024+18:32:24+GMT HTTP/1.1 Host: www.google.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRmgZjcGPORr7EGIjAjT-is8k6Uwm1EagwkXv7b_3Y6lH1AXZSE6X-OCgzMA9YBQPBGvSt1H2oAX7BK9VoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
2024-04-26 15:32:26 UTC	1793	IN	HTTP/1.1 302 Found Location: https://www.google.com/search?q=104.94.109.142443&oq=104.94.109.142443&gs_lcrp=EgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA&sourceid=chrome&ie=UTF-8 x-hallmonitor-challenge: CgwIipKvsQYQoOqs6wISBGaBmNw Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Fy50JSQIGekhv1JmU_Bd_g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:26 GMT Server: gws Content-Length: 363 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; path=/; domain=google.com; expires=Fri, 26-Apr-2024 18:32:24 GMT Set-Cookie: 1P_JAR=2024-04-26-15; expires=Sun, 26-May-2024 15:32:26 GMT; path=/; domain=.google.com; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:26 UTC	363	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 65 61 72 63 68 3f 71 3d 31 30 34 2e 39 34 2e 31 30 39 2e 31 34 32 34 34 33 26 61 6d 70 3b 6f 71 3d 31 30 34 2e 39 34 2e 31 30 39 2e 31 34 32 34 34 33 26 61 6d 70 3b 67 73 5f 6c 63 72 70 3d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/search?q=104.94.109.142443&oq=104.94.109.142443&gs_lcrp=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49769	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:27 UTC	1712	OUT	GET /search?q=104.94.109.142443&oq=104.94.109.142443&gs_lcrp=EgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA&sourceid=chrome&ie=UTF-8 HTTP/1.1 Host: www.google.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRmgZjcGPORr7EGIjAjT-is8k6Uwm1EagwkXv7b_3Y6lH1AXZSE6X-OCgzMA9YBQPBGvSt1H2oAX7BK9VoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0
2024-04-26 15:32:27 UTC	2115	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Fri, 26 Apr 2024 15:32:27 GMT Expires: -1 Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-1l5MlyUOBV_7zvmSppURKw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-26-15; expires=Thu, 01-Jan-1970 00:00:00 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: NID=513=b51YpLo4VR1MIeifPjI6wC1AZiY3GgI94kQnKHVX8ICBbDBgB6C1XG4hPNwsOPh0zeb4QtsPOdjysJlWqeTZk0yQDpcqoBuOXBu5GHyB2hq29z3ahDw9JiGpGyYTB1lqXMlrGtwa4kVVcxFGFVSG8PXDFAkU-VSj6gACLVMtelxQalQ9CTU; expires=Sat, 26-Oct-2024 15:31:49 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:32:27 UTC	2115	IN	Data Raw: 39 63 66 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 53 65 61 72 63 68 52 65 73 75 6c 74 73 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 67 2f 31 78 2f 67 6f 6f 67 6c 65 67 5f 73 74 61 6e 64 61 72 64 5f 63 6f 6c 6f 72 5f 31 32 38 64 70 2e 70 6e 67 22 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 Data Ascii: 9cf<!doctype html><html itemscope="" itemtype="http://schema.org/SearchResultsPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image
2024-04-26 15:32:27 UTC	403	IN	Data Raw: 21 31 7d 3b 67 6f 6f 67 6c 65 2e 73 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 73 79 2e 70 75 73 68 28 61 29 7d 3b 67 6f 6f 67 6c 65 2e 6c 6d 3d 5b 5d 3b 67 6f 6f 67 6c 65 2e 70 6c 6d 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 6c 6d 2e 70 75 73 68 2e 61 70 70 6c 79 28 67 6f 6f 67 6c 65 2e 6c 6d 2c 61 29 7d 3b 67 6f 6f 67 6c 65 2e 6c 71 3d 5b 5d 3b 67 6f 6f 67 6c 65 2e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 67 6f 6f 67 6c 65 2e 6c 71 2e 70 75 73 68 28 5b 5b 61 5d 2c 62 2c 63 5d 29 7d 3b 67 6f 6f 67 6c 65 2e 6c 6f 61 64 41 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 67 6f 6f 67 6c 65 2e 6c 71 2e 70 75 73 68 28 5b 61 2c 62 5d 29 7d 3b 67 6f 6f 67 6c 65 2e 62 78 3d 21 31 3b 67 6f 6f 67 6c 65 Data Ascii: !1};google.sx=function(a){google.sy.push(a)};google.lm=[];google.plm=function(a){google.lm.push.apply(google.lm,a)};google.lq=[];google.load=function(a,b,c){google.lq.push([[a],b,c])};google.loadAll=function(a,b){google.lq.push([a,b])};google.bx=!1;google
2024-04-26 15:32:27 UTC	147	IN	Data Raw: 38 64 0d 0a 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 75 62 6d 69 74 22 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 61 3b 69 66 28 61 3d 62 2e 74 61 72 67 65 74 29 7b 76 61 72 20 63 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 75 62 6d 69 74 66 61 6c 73 65 22 29 3b 61 3d 22 31 22 3d 3d 3d 63 7c 7c 22 71 22 3d 3d 3d 63 26 26 21 61 2e 65 6c 65 6d 65 6e 74 73 2e 71 2e 76 61 0d 0a Data Ascii: 8dment.addEventListener("submit",function(b){var a;if(a=b.target){var c=a.getAttribute("data-submitfalse");a="1"===c\|\|"q"===c&&!a.elements.q.va
2024-04-26 15:32:27 UTC	1255	IN	Data Raw: 38 30 30 30 0d 0a 6c 75 65 3f 21 30 3a 21 31 7d 65 6c 73 65 20 61 3d 21 31 3b 61 26 26 28 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 62 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 29 7d 2c 21 30 29 3b 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 61 3b 61 3a 7b 66 6f 72 28 61 3d 62 2e 74 61 72 67 65 74 3b 61 26 26 61 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 61 3d 61 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 69 66 28 22 41 22 3d 3d 3d 61 2e 74 61 67 4e 61 6d 65 29 7b 61 3d 22 31 22 3d 3d 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 Data Ascii: 8000lue?!0:!1}else a=!1;a&&(b.preventDefault(),b.stopPropagation())},!0);document.documentElement.addEventListener("click",function(b){var a;a:{for(a=b.target;a&&a!==document.documentElement;a=a.parentElement)if("A"===a.tagName){a="1"===a.getAttribute("
2024-04-26 15:32:27 UTC	1255	IN	Data Raw: 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 61 29 2c 21 21 61 26 26 28 22 68 69 64 64 65 6e 22 3d 3d 3d 61 2e 76 69 73 69 62 69 6c 69 74 79 7c 7c 22 30 70 78 22 3d 3d 3d 61 2e 68 65 69 67 68 74 26 26 22 30 70 78 22 3d 3d 3d 61 2e 77 69 64 74 68 29 29 3a 21 31 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 61 28 61 2c 62 2c 63 2c 64 2c 66 2c 68 29 7b 76 61 72 20 6b 3d 66 28 61 29 2c 67 3d 6b 2e 6c 65 66 74 2b 28 63 3f 30 3a 77 69 6e 64 6f 77 2e 70 61 67 65 58 4f 66 66 73 65 74 29 2c 6c 3d 6b 2e 74 6f 70 2b 28 63 3f 30 3a 77 69 6e 64 6f 77 2e 70 61 67 65 59 4f 66 66 73 65 74 29 2c 6e 3d 6b 2e 77 69 64 74 68 2c 65 3d 6b 2e 68 65 69 67 68 74 2c 6d 3d 30 3b 69 66 28 21 62 26 26 30 3e 3d 65 26 26 30 3e 3d 6e 29 72 65 74 75 72 6e 20 6d 3b Data Ascii: aultView.getComputedStyle(a),!!a&&("hidden"===a.visibility\|\|"0px"===a.height&&"0px"===a.width)):!1}function ca(a,b,c,d,f,h){var k=f(a),g=k.left+(c?0:window.pageXOffset),l=k.top+(c?0:window.pageYOffset),n=k.width,e=k.height,m=0;if(!b&&0>=e&&0>=n)return m;
2024-04-26 15:32:27 UTC	1255	IN	Data Raw: 73 2e 6c 3d 62 3b 74 68 69 73 2e 47 3d 74 68 69 73 2e 67 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 62 73 72 63 22 29 3b 28 61 3d 74 68 69 73 2e 67 2e 73 72 63 29 26 26 74 68 69 73 2e 6c 26 26 28 74 68 69 73 2e 44 3d 61 29 3b 21 74 68 69 73 2e 6c 26 26 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 26 26 61 7c 7c 74 68 69 73 2e 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6c 7a 79 5f 22 2c 22 31 22 29 3b 74 68 69 73 2e 42 3f 61 3d 21 30 3a 74 68 69 73 2e 6a 7c 7c 74 68 69 73 2e 6c 3f 61 3d 21 31 3a 28 61 3d 74 68 69 73 2e 67 2e 73 72 63 2c 61 3d 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 21 61 2c 62 3d 74 68 69 73 2e 67 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 22 Data Ascii: s.l=b;this.G=this.g.hasAttribute("data-bsrc");(a=this.g.src)&&this.l&&(this.D=a);!this.l&&"string"===typeof a&&a\|\|this.g.setAttribute("data-lzy_","1");this.B?a=!0:this.j\|\|this.l?a=!1:(a=this.g.src,a="string"!==typeof a\|\|!a,b=this.g.getAttribute("data-cmp"
2024-04-26 15:32:27 UTC	1255	IN	Data Raw: 6b 61 29 3b 44 5b 62 5d 7c 7c 28 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 73 69 69 64 22 2c 62 29 2c 44 5b 62 5d 3d 6e 65 77 20 6a 61 28 61 29 29 3b 72 65 74 75 72 6e 20 44 5b 62 5d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 61 2c 62 29 7b 62 3d 28 62 7c 7c 64 6f 63 75 6d 65 6e 74 29 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 69 6d 67 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 30 2c 64 3d 62 2e 6c 65 6e 67 74 68 3b 63 3c 64 3b 2b 2b 63 29 61 28 45 28 62 5b 63 5d 29 29 7d 3b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 3d 7b 7d 3b 67 6f 6f 67 6c 65 2e 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 61 5d 3d 7b 74 3a 7b 73 74 61 72 74 3a 44 61 74 65 2e 6e 6f 77 28 Data Ascii: ka);D[b]\|\|(a.setAttribute("data-csiid",b),D[b]=new ja(a));return D[b]}function F(a,b){b=(b\|\|document).getElementsByTagName("img");for(var c=0,d=b.length;c<d;++c)a(E(b[c]))};google.timers={};google.startTick=function(a){google.timers[a]={t:{start:Date.now(
2024-04-26 15:32:27 UTC	1255	IN	Data Raw: 6f 6f 72 28 71 2e 6e 6f 77 28 29 29 29 7d 7d 67 6f 6f 67 6c 65 2e 63 2e 62 28 22 78 65 22 2c 22 6c 6f 61 64 22 29 3b 76 61 72 20 4c 3b 69 66 28 6e 75 6c 6c 3d 3d 28 4c 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 29 3f 30 3a 4c 2e 73 74 61 72 74 29 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 2e 6c 6f 61 64 2e 74 2e 73 74 61 72 74 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 73 74 61 72 74 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 61 29 7b 69 66 28 22 68 69 64 64 65 6e 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 29 7b 67 6f 6f 67 6c 65 2e 63 2e 66 68 3d 61 3b 76 61 72 20 62 3b 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 26 26 28 62 3d 4d 61 74 68 Data Ascii: oor(q.now()))}}google.c.b("xe","load");var L;if(null==(L=google.stvsc)?0:L.start)google.timers.load.t.start=google.stvsc.start;function M(a){if("hidden"===document.visibilityState){google.c.fh=a;var b;window.performance&&window.performance.timing&&(b=Math
2024-04-26 15:32:27 UTC	1255	IN	Data Raw: 65 77 20 52 65 67 45 78 70 28 22 5b 3f 26 5d 22 2b 61 2b 22 3d 28 5c 5c 64 2b 29 22 29 29 29 3f 4e 75 6d 62 65 72 28 61 5b 31 5d 29 3a 2d 31 7d 0a 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 76 61 72 20 62 3d 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 2e 6c 6f 61 64 2c 63 3d 62 2e 6d 3b 69 66 28 21 63 7c 7c 21 63 2e 70 72 73 29 7b 76 61 72 20 64 3d 51 28 29 3f 30 3a 52 28 22 71 73 75 62 74 73 22 29 3b 30 3c 64 26 26 28 63 3d 52 28 22 66 62 74 73 22 29 2c 30 3c 63 26 26 28 62 2e 74 2e 73 74 61 72 74 3d 4d 61 74 68 2e 6d 61 78 28 64 2c 63 29 29 29 3b 76 61 72 20 66 3d 62 2e 74 2c 68 3d 66 2e 73 74 61 72 74 3b 63 3d 7b 77 73 72 74 3a 62 2e 77 73 72 74 7c 7c 30 7d 3b 69 66 28 68 29 66 6f 72 28 76 61 72 20 6b 3d 30 2c 67 3b 67 3d 6e 61 5b 6b 2b 2b 5d 3b 29 7b 76 Data Ascii: ew RegExp("[?&]"+a+"=(\\d+)")))?Number(a[1]):-1}function oa(a){var b=google.timers.load,c=b.m;if(!c\|\|!c.prs){var d=Q()?0:R("qsubts");0<d&&(c=R("fbts"),0<c&&(b.t.start=Math.max(d,c)));var f=b.t,h=f.start;c={wsrt:b.wsrt\|\|0};if(h)for(var k=0,g;g=na[k++];){v
2024-04-26 15:32:27 UTC	1255	IN	Data Raw: 72 20 66 3d 21 30 2c 68 3d 30 2c 6b 3d 30 2c 67 3d 30 3b 46 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 61 28 6c 29 26 26 28 2b 2b 68 2c 6c 2e 69 7c 7c 6c 2e 41 3f 64 28 6c 2e 69 7c 7c 30 29 3a 6c 2e 76 2e 70 75 73 68 28 64 29 29 7d 29 3b 62 28 29 3b 28 66 3d 21 31 2c 68 21 3d 3d 6b 29 7c 7c 63 28 67 29 7d 3b 76 61 72 20 55 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 66 75 6e 63 74 69 6f 6e 20 73 61 28 29 7b 69 66 28 67 6f 6f 67 6c 65 2e 63 2e 63 34 74 26 26 55 26 26 55 2e 6d 61 72 6b 26 26 55 2e 74 69 6d 69 6e 67 29 7b 76 61 72 20 61 3d 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 2e 6c 6f 61 64 2c 62 3d 61 2e 77 73 72 74 3b 61 3d 61 2e 74 2e 61 66 74 3b 62 26 26 30 3c 62 26 26 61 26 26 30 3c 61 26 26 28 61 2d 3d 55 2e 74 69 6d 69 6e 67 2e 6e 61 76 Data Ascii: r f=!0,h=0,k=0,g=0;F(function(l){a(l)&&(++h,l.i\|\|l.A?d(l.i\|\|0):l.v.push(d))});b();(f=!1,h!==k)\|\|c(g)};var U=window.performance;function sa(){if(google.c.c4t&&U&&U.mark&&U.timing){var a=google.timers.load,b=a.wsrt;a=a.t.aft;b&&0<b&&a&&0<a&&(a-=U.timing.nav

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49770	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:28 UTC	1520	OUT	POST /gen_204?s=web&t=cap&atyp=csi&ei=C8krZr7QHOyTwbkPuNyGwAw&rt=wsrt.3948,cbt.197,hst.197&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=b51YpLo4VR1MIeifPjI6wC1AZiY3GgI94kQnKHVX8ICBbDBgB6C1XG4hPNwsOPh0zeb4QtsPOdjysJlWqeTZk0yQDpcqoBuOXBu5GHyB2hq29z3ahDw9JiGpGyYTB1lqXMlrGtwa4kVVcxFGFVSG8PXDFAkU-VSj6gACLVMtelxQalQ9CTU
2024-04-26 15:32:28 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Q1xV-u9I_RLZRgrDMaE1qw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:28 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49773	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:28 UTC	1755	OUT	GET /xjs/_/ss/k=xjs.s.GGin1mxRzvU.L.W.O/am=gB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKACAmXAAAsCGAADgg0MAAIAAAAACAACAwgEAABAgIABgAAAgAAAAAAAAHAABAAAgBAACBECAAJIQkIEAAEQwwQCkAgDDjwAAIIAEAAAAoEAAAAEDESA8hAABgACQQAQCIIIAACAHCAEAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAAAAAAQ/d=1/ed=1/br=1/rs=ACT90oGSC2kJ5MOZFnDJZQWz14iwbMFYQQ/m=attn,cdos,gwc,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=b51YpLo4VR1MIeifPjI6wC1AZiY3GgI94kQnKHVX8ICBbDBgB6C1XG4hPNwsOPh0zeb4QtsPOdjysJlWqeTZk0yQDpcqoBuOXBu5GHyB2hq29z3ahDw9JiGpGyYTB1lqXMlrGtwa4kVVcxFGFVSG8PXDFAkU-VSj6gACLVMtelxQalQ9CTU
2024-04-26 15:32:28 UTC	809	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/css; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 3409 Date: Fri, 26 Apr 2024 15:32:28 GMT Expires: Sat, 26 Apr 2025 15:32:28 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 26 Apr 2024 06:52:28 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:28 UTC	446	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 67 53 35 6a 58 62 3a 23 64 61 64 63 65 30 3b 2d 2d 41 71 6e 37 78 64 3a 23 64 32 64 32 64 32 3b 2d 2d 45 70 46 4e 57 3a 23 66 66 66 3b 2d 2d 49 58 6f 78 55 65 3a 23 35 65 35 65 35 65 3b 2d 2d 62 62 51 78 41 62 3a 23 34 37 34 37 34 37 3b 2d 2d 59 4c 4e 4e 48 63 3a 23 31 66 31 66 31 66 3b 2d 2d 43 4f 45 6d 59 3a 23 31 66 31 66 31 66 3b 2d 2d 54 4d 59 53 39 3a 23 30 62 35 37 64 30 3b 2d 2d 61 6d 6e 50 77 65 3a 23 35 65 35 65 35 65 3b 2d 2d 4a 4b 71 78 32 3a 23 31 61 30 64 61 62 3b 2d 2d 72 72 4a 4a 55 63 3a 23 30 62 35 37 64 30 3b 2d 2d 6d 58 5a 6b 71 63 3a 23 64 32 64 32 64 32 3b 2d 2d 4e 73 6d 30 63 65 3a 23 30 62 35 37 64 30 3b 2d 2d 58 4b 4d 44 78 63 3a 23 66 37 66 38 66 39 3b 2d 2d 61 59 6e 32 53 3a 23 65 63 65 64 65 65 3b 2d 2d Data Ascii: :root{--gS5jXb:#dadce0;--Aqn7xd:#d2d2d2;--EpFNW:#fff;--IXoxUe:#5e5e5e;--bbQxAb:#474747;--YLNNHc:#1f1f1f;--COEmY:#1f1f1f;--TMYS9:#0b57d0;--amnPwe:#5e5e5e;--JKqx2:#1a0dab;--rrJJUc:#0b57d0;--mXZkqc:#d2d2d2;--Nsm0ce:#0b57d0;--XKMDxc:#f7f8f9;--aYn2S:#ecedee;--
2024-04-26 15:32:28 UTC	1255	IN	Data Raw: 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 30 25 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 67 2d 73 6e 61 63 6b 62 61 72 2d 73 68 6f 77 7b 66 72 6f 6d 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 30 25 29 3b 74 72 61 6e 73 66 6f Data Ascii: lateY(0);transform:translateY(0)}to{-webkit-transform:translateY(-100%);transform:translateY(-100%)}}@keyframes g-snackbar-show{from{pointer-events:none;-webkit-transform:translateY(0);transform:translateY(0)}to{-webkit-transform:translateY(-100%);transfo
2024-04-26 15:32:28 UTC	347	IN	Data Raw: 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 62 6f 74 68 3b 61 6e 69 6d 61 74 69 6f 6e 3a 67 2d 73 6e 61 63 6b 62 61 72 2d 73 68 6f 77 20 2e 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 62 6f 74 68 3b 76 69 73 69 62 69 6c 69 74 79 3a 69 6e 68 65 72 69 74 7d 2e 62 37 37 48 4b 66 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 32 33 32 33 32 3b 70 61 64 64 69 6e 67 3a 30 20 32 34 70 78 7d 2e 72 49 78 73 76 65 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 Data Ascii: er(0.4,0,0.2,1) both;animation:g-snackbar-show .5s cubic-bezier(0.4,0,0.2,1) both;visibility:inherit}.b77HKf{background-color:#323232;padding:0 24px}.rIxsve{-webkit-box-align:center;-webkit-align-items:center;align-items:center;display:box;display:-webkit
2024-04-26 15:32:28 UTC	1255	IN	Data Raw: 74 65 6e 74 20 2e 33 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 62 6f 74 68 3b 61 6e 69 6d 61 74 69 6f 6e 3a 67 2d 73 6e 61 63 6b 62 61 72 2d 68 69 64 65 2d 63 6f 6e 74 65 6e 74 20 2e 33 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 62 6f 74 68 7d 2e 55 65 77 50 4d 64 20 2e 72 49 78 73 76 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 67 2d 73 6e 61 63 6b 62 61 72 2d 73 68 6f 77 2d 63 6f 6e 74 65 6e 74 20 2e 33 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 2e 31 35 73 20 62 6f 74 68 3b 61 6e 69 6d 61 74 69 6f 6e 3a 67 2d 73 6e 61 63 6b 62 61 72 2d 73 68 6f 77 2d 63 6f 6e 74 65 6e 74 20 2e 33 35 73 20 63 75 62 69 63 2d Data Ascii: tent .35s cubic-bezier(0.4,0,0.2,1) both;animation:g-snackbar-hide-content .35s cubic-bezier(0.4,0,0.2,1) both}.UewPMd .rIxsve{-webkit-animation:g-snackbar-show-content .35s cubic-bezier(0.4,0,0.2,1) .15s both;animation:g-snackbar-show-content .35s cubic-
2024-04-26 15:32:28 UTC	106	IN	Data Raw: 20 32 35 30 6d 73 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 69 6e 73 65 74 3a 30 7d 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 75 67 67 65 73 74 69 6f 6e 5f 67 72 6f 75 70 2e 63 73 73 2e 6d 61 70 20 2a 2f 73 65 6e 74 69 6e 65 6c 7b 7d Data Ascii: 250ms;position:fixed;visibility:hidden;inset:0}/# sourceMappingURL=suggestion_group.css.map /sentinel{}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49774	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:28 UTC	1450	OUT	GET /images/branding/googlelogo/2x/googlelogo_color_92x30dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=b51YpLo4VR1MIeifPjI6wC1AZiY3GgI94kQnKHVX8ICBbDBgB6C1XG4hPNwsOPh0zeb4QtsPOdjysJlWqeTZk0yQDpcqoBuOXBu5GHyB2hq29z3ahDw9JiGpGyYTB1lqXMlrGtwa4kVVcxFGFVSG8PXDFAkU-VSj6gACLVMtelxQalQ9CTU
2024-04-26 15:32:28 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 3831 Date: Fri, 26 Apr 2024 15:32:28 GMT Expires: Fri, 26 Apr 2024 15:32:28 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:28 UTC	584	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b8 00 00 00 3c 08 06 00 00 00 d5 12 70 09 00 00 0e be 49 44 41 54 78 da ed 5d 09 90 5c 45 19 6e c8 ce 12 6e 0f 50 b9 44 c5 60 08 72 ed 9b 37 1b 63 70 e6 bd 99 4d 62 8c 58 10 97 43 94 33 22 77 04 14 8a a3 18 6b 67 66 97 70 68 45 0e 21 87 05 94 1c 15 44 10 39 c2 1e e1 50 82 10 08 58 24 24 20 16 05 45 92 9d 9d cd f5 de cc 5e 09 3b fe 9f ec 66 37 bb db fd ee 99 1d ab bf aa ae 0c ec 9b d7 35 dd df fb fb ef ef ff ff 7e cc 0f 44 93 c5 aa 58 63 a1 56 4f e7 af d3 33 f9 87 b5 b4 b1 3a 96 c9 67 63 19 a3 40 ff 5d d4 53 46 1f fd 9b d3 d3 c6 db 5a 3a ff 18 7d be 41 cf 18 27 2b f7 15 43 4c 42 62 bc 42 4f 17 22 b1 8c f9 07 3d 95 df 02 22 3b 6d 9f 7d cf bc 2f de 94 3f 89 49 48 8c 17 10 29 eb 88 a0 2f 81 a4 be b5 b4 Data Ascii: PNGIHDR<pIDATx]\EnnPD`r7cpMbXC3"wkgfphE!D9PX$$ E^;f75~DXcVO3:gc@]SFZ:}A'+CLBbBO"=";m}/?IH)/
2024-04-26 15:32:28 UTC	1255	IN	Data Raw: 13 33 ce 24 24 2a 95 e0 90 05 05 9b ca 16 26 21 51 a9 04 47 b4 90 f2 b7 37 f3 08 1e 6f cc cf 62 15 8e 8e 44 ed a4 6c 5c bd 24 1b 0f 2f a6 d6 d6 ae 2b ab d0 f0 99 da 12 fc ad 23 ae 1e cd 02 42 4f 73 f5 a4 be e6 aa 4b 76 b4 4c 58 dc db 12 6a db d1 1a 5a 85 f6 bf cf cd 13 96 e0 6f 3d 2d d5 81 f5 9f b8 65 cb 81 94 de 7c 2a 05 ef 32 14 60 7b 88 56 e4 a7 90 9b 4f 72 ef ed 14 31 9e 3b 6d 41 6e ff 72 13 bc a8 28 a1 0e 4d fd 5e 56 57 af 6b d7 d5 a5 1d ba fa 24 cd cb 53 34 2f 0f 76 e8 e1 9b 69 be ea de 9f f5 cd bd 98 53 68 4d 05 85 ef 9e 18 1b 2b 35 5c 8e 01 cb c6 23 e7 80 c8 34 48 45 3b ad 3d ae be 49 03 7c 1e be eb b9 ff 37 58 68 67 4b e8 9c 01 32 17 ed 34 22 fb 9b bd ad a1 f3 f0 5d 9f 62 1a 35 b4 02 3f 4a 41 b9 5e 8b a0 5d 81 ae fd fd f4 8c 71 f0 67 df 33 eb 11 Data Ascii: 3$$&!QG7obDl\$/+#BOsKvLXjZo=-e\|2`{VOr1;mAnr(M^VWk$S4/viShM+5\#4HE;=I\|7XhgK24"]b5?JA^]qg3
2024-04-26 15:32:28 UTC	1255	IN	Data Raw: ba cc 30 bf 6e 31 67 63 d9 6d 95 b7 60 19 88 d0 94 9d 3c 5d 7c 98 7a b2 98 43 c2 6e a8 24 ae 35 fd 17 d8 7e b4 02 ec e4 e9 e2 76 ca 0b e3 8d 5d df 71 4d f0 8c 71 9a af 04 d7 c2 f7 73 dc 93 f5 6c 18 e0 87 d3 9c 5e 0a 55 cb 01 a9 f3 a4 b0 dc db ae d7 1e cf 2d 17 43 88 96 6b c5 1b f3 b3 59 89 81 83 39 79 01 0b 2d 65 9e 35 8c e0 6d bc 1d 39 f3 08 0c b2 95 9f 87 64 29 5e 4e 09 f3 08 9e 74 48 c4 df d5 3f 1e 76 de 29 61 b3 16 f6 bb 7e c0 a2 4d dd 5f f3 91 e0 98 a7 15 a2 b1 dc a4 a9 c7 c2 70 d0 ff 33 ed 12 1b aa 16 11 fb 8a 2d 09 e5 40 66 05 1c a2 29 90 e5 56 94 21 7d 57 e3 17 3c 6f db e5 83 c2 57 e6 10 fc 59 cf 04 d7 d4 16 de 8e 7f f0 1a f8 ca 1c 0b ee b9 7f 22 72 0b c7 82 ef ea 1f 47 dd 71 dc b8 0e e6 01 90 87 fd 24 38 0c 0e 2f e7 87 88 fa a2 6d 52 63 55 d5 d5 Data Ascii: 0n1gcm`<]\|zCn$5~v]qMqsl^U-CkY9y-e5m9d)^NtH?v)a~M_p3-@f)V!}W<oWY"rGq$8/mRcU
2024-04-26 15:32:28 UTC	737	IN	Data Raw: 16 de e3 e9 48 5d 5f a5 1f f9 e7 60 09 6e 2c e7 6c 28 6d 93 3c a7 ab d7 0c 05 69 dc 37 f8 ee b9 78 f8 22 e6 00 20 39 11 f2 1a 4e 90 86 d3 44 be 7b e8 22 17 2a d8 6c 72 39 b6 79 5b 3d 8d e7 bd 13 5c bc 6f 1a ca 04 f5 d8 50 b5 a5 2b 3f f6 35 11 0a 09 58 3e 17 31 ac 83 bf ee 97 be be 29 56 53 8b 4a 1f 0f 56 fb d5 ac 16 39 81 b9 44 df 8a aa da a1 4a 1f 57 ed 55 0a e8 b8 ee 3f de d4 fd 0d 14 86 b8 a8 77 dd 46 51 cc 39 be 1f fc 23 0e a8 e5 3c b8 8e af 0d e5 7f fb 0c 44 d1 06 8a 12 72 2e 2d 45 0f de e2 86 37 b1 b9 7d cf 0f 20 54 46 12 ea e9 34 10 af 38 48 c1 7c 91 76 fa 3f 1a 52 2b dc 03 ca 08 45 24 4f df d1 1c 7a c5 01 b1 5f 24 29 d0 97 fe 61 2c a0 56 a1 24 d1 a6 d5 7e 90 88 7d d8 40 3e f8 25 63 5f 67 ae f4 fb e8 36 a4 bb e2 ec 41 52 41 36 39 39 62 8f be 73 26 Data Ascii: H]_`n,l(m<i7x" 9ND{"*lr9y[=\oP+?5X>1)VSJV9DJWU?wFQ9#<Dr.-E7} TF48H\|v?R+E$Oz_$)a,V$~}@>%c_g6ARA699bs&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49775	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:28 UTC	1572	OUT	GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/search?q=104.94.109.142443&oq=104.94.109.142443&gs_lcrp=EgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA&sourceid=chrome&ie=UTF-8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=b51YpLo4VR1MIeifPjI6wC1AZiY3GgI94kQnKHVX8ICBbDBgB6C1XG4hPNwsOPh0zeb4QtsPOdjysJlWqeTZk0yQDpcqoBuOXBu5GHyB2hq29z3ahDw9JiGpGyYTB1lqXMlrGtwa4kVVcxFGFVSG8PXDFAkU-VSj6gACLVMtelxQalQ9CTU
2024-04-26 15:32:28 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 660 Date: Fri, 26 Apr 2024 15:32:28 GMT Expires: Fri, 26 Apr 2024 15:32:28 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 22 Apr 2020 22:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:28 UTC	584	IN	Data Raw: 52 49 46 46 8c 02 00 00 57 45 42 50 56 50 38 4c 80 02 00 00 2f 27 c0 1e 10 d5 48 76 b6 3d 6e 95 fb bf 0a bb 07 b8 51 ea d8 9f 99 61 e5 e8 28 52 76 0c 6f ab da 55 98 1c c6 fe ea 8a 99 6c 18 b6 6d 1b a6 ff 1f dc da f4 06 30 6c db 36 6c ae ed 66 da 0c b1 ed 09 a4 90 41 3f 42 08 43 98 41 19 94 c1 32 68 06 9d 41 67 30 84 10 0e e1 47 38 07 6e 23 29 52 ba 6a f1 78 a0 e6 be 50 9e 46 e5 ce 49 3b cc 4f 78 a1 e7 c7 cf f5 1c 37 2d f7 c8 cf 62 58 9e 2f eb c0 5d c5 88 96 af 33 cb b8 1c 54 80 ab 93 e1 a2 35 b7 ba 01 78 ee ac da f6 47 2e 43 09 aa 19 e0 b7 25 e2 75 03 8e 19 f9 14 75 2f 97 5f b4 3d f0 b2 94 98 bc 10 3c 21 71 06 5c 86 f8 07 39 02 f7 de b2 c2 15 5c f7 a6 1a 07 70 3a 14 bc 50 f8 34 1f 61 53 00 4e 29 9c 3e b0 3e 18 ae 22 06 db 83 39 99 e0 56 68 20 a7 aa d0 80 Data Ascii: RIFFWEBPVP8L/'Hv=nQa(RvoUlm0l6lfA?BCA2hAg0G8n#)RjxPFI;Ox7-bX/]3T5xG.C%uu/_=<!q\9\p:P4aSN)>>"9Vh
2024-04-26 15:32:28 UTC	76	IN	Data Raw: 25 ed f7 1a 3b 0c 5b 52 3e 4e 12 23 dc 57 c2 65 8f e2 40 71 07 08 1e 28 e6 10 c1 ef 5d 26 7f 02 0d 1d 96 e2 4b 99 03 b9 bf 9a ed c8 3f af 7c 07 7a 10 1e 28 df 11 e5 3a 26 6d 01 56 ce 43 e7 27 c6 9f c0 0f 44 5e e3 52 9e bb aa 00 Data Ascii: %;[R>N#We@q(]&K?\|z(:&mVC'D^R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49779	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:29 UTC	3906	OUT	GET /xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=1/ed=1/dg=2/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf,FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KeeMUb:HiPxjc;KpRAue:Tia57b;LBgRLc:XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe,KG2eXe;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;PqHfGe:im2cZe;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO,fTfGO;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VsAqSb:PGf2Re;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YV5bee:IvPZ6d;YkQtAf:rx8ur;ZMvdv:PHFPjb;ZWEUA:afR4Cf;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bDXwRe:UsyOtc;bFZ6gf:gU6kfd;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:VruDBd;eHDfl:ofjVkb;eO3lse:nFClrf;fWLTFc:TVBJbf;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;hsLsYc:Vl118;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;io8t5d:sgY6Zb;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;lkq0A:JyBE3e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO,fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;p2tIDb:tp1Cx;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qGV2uc:HHi04c;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;uknmt:GkPrzb;uuQkY:u2V3ud;vGrMZ:lPJJ0c;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;xbe2wc:uRMPBc;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=attn,cdos,gwc,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=b51YpLo4VR1MIeifPjI6wC1AZiY3GgI94kQnKHVX8ICBbDBgB6C1XG4hPNwsOPh0zeb4QtsPOdjysJlWqeTZk0yQDpcqoBuOXBu5GHyB2hq29z3ahDw9JiGpGyYTB1lqXMlrGtwa4kVVcxFGFVSG8PXDFAkU-VSj6gACLVMtelxQalQ9CTU
2024-04-26 15:32:30 UTC	819	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 1025634 Date: Fri, 26 Apr 2024 15:32:30 GMT Expires: Sat, 26 Apr 2025 15:32:30 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 26 Apr 2024 06:52:27 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:30 UTC	436	IN	Data Raw: 74 68 69 73 2e 5f 73 3d 74 68 69 73 2e 5f 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 4d 49 54 0a 2a 2f 0a 2f 2a 0a 20 53 50 44 Data Ascii: this._s=this._s\|\|{};(function(_){var window=this;try{/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// SPDX-License-Identifier: Apache-2.0// Copyright 2024 Google, Inc SPDX-License-Identifier: MIT// SPD
2024-04-26 15:32:30 UTC	1255	IN	Data Raw: 61 2c 44 61 61 2c 42 61 61 2c 45 61 61 2c 47 61 61 2c 46 61 61 2c 48 61 61 2c 49 61 61 2c 4a 61 61 2c 4c 61 61 2c 4d 61 61 2c 53 61 61 2c 66 62 61 2c 6c 62 61 2c 75 62 61 2c 77 62 61 2c 41 62 61 2c 42 62 61 2c 47 62 61 2c 48 62 61 2c 4b 62 61 2c 4f 62 61 2c 50 62 61 2c 52 62 61 2c 55 62 61 2c 54 62 61 2c 57 62 61 2c 4c 62 61 2c 59 61 2c 58 62 61 2c 24 61 2c 62 63 61 2c 63 63 61 2c 69 63 61 2c 6d 63 61 2c 70 63 61 2c 71 63 61 2c 64 62 2c 74 63 61 2c 76 63 61 2c 78 63 61 2c 41 63 61 2c 43 63 61 2c 44 63 61 2c 46 63 61 2c 4c 63 61 2c 4e 63 61 2c 57 63 61 2c 58 63 61 2c 59 63 61 2c 55 63 61 2c 5a 63 61 2c 54 63 61 2c 24 63 61 2c 53 63 61 2c 61 64 61 2c 62 64 61 2c 63 64 61 2c 69 64 61 2c 6b 64 61 2c 6c 64 61 2c 73 64 61 2c 74 64 61 2c 75 64 61 2c 78 64 61 2c Data Ascii: a,Daa,Baa,Eaa,Gaa,Faa,Haa,Iaa,Jaa,Laa,Maa,Saa,fba,lba,uba,wba,Aba,Bba,Gba,Hba,Kba,Oba,Pba,Rba,Uba,Tba,Wba,Lba,Ya,Xba,$a,bca,cca,ica,mca,pca,qca,db,tca,vca,xca,Aca,Cca,Dca,Fca,Lca,Nca,Wca,Xca,Yca,Uca,Zca,Tca,$ca,Sca,ada,bda,cda,ida,kda,lda,sda,tda,uda,xda,
2024-04-26 15:32:30 UTC	1255	IN	Data Raw: 2c 52 72 61 2c 57 72 61 2c 5a 72 61 2c 61 73 61 2c 62 73 61 2c 65 73 61 2c 70 73 61 2c 71 73 61 2c 73 73 61 2c 75 73 61 2c 79 73 61 2c 7a 73 61 2c 45 73 61 2c 48 73 61 2c 4b 73 61 2c 4c 73 61 2c 50 73 61 2c 52 73 61 2c 53 73 61 2c 59 73 61 2c 24 73 61 2c 62 74 61 2c 65 74 61 2c 63 74 61 2c 6f 74 61 2c 76 74 61 2c 77 74 61 2c 78 74 61 2c 71 67 2c 79 74 61 2c 41 74 61 2c 42 74 61 2c 49 74 61 2c 4a 74 61 2c 4b 74 61 2c 4c 74 61 2c 4f 74 61 2c 52 74 61 2c 50 74 61 2c 51 74 61 2c 53 74 61 2c 54 74 61 2c 55 74 61 3b 0a 5f 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 Data Ascii: ,Rra,Wra,Zra,asa,bsa,esa,psa,qsa,ssa,usa,ysa,zsa,Esa,Hsa,Ksa,Lsa,Psa,Rsa,Ssa,Ysa,$sa,bta,eta,cta,ota,vta,wta,xta,qg,yta,Ata,Bta,Ita,Jta,Kta,Lta,Ota,Rta,Pta,Qta,Sta,Tta,Uta;_.aa=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.aa);e
2024-04-26 15:32:30 UTC	1255	IN	Data Raw: 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3b 64 3f 28 65 3d 68 61 61 29 7c 7c 28 65 3d 68 61 61 3d 6e 65 77 20 54 65 78 74 44 65 63 6f 64 65 72 28 22 75 74 66 2d 38 22 2c 7b 66 61 74 61 6c 3a 21 30 7d 29 29 3a 28 65 3d 69 61 61 29 7c 7c 28 65 3d 69 61 61 3d 6e 65 77 20 54 65 78 74 44 65 63 6f 64 65 72 28 22 75 74 66 2d 38 22 2c 7b 66 61 74 61 6c 3a 21 31 7d 29 29 3b 63 3d 62 2b 63 3b 61 3d 30 3d 3d 3d 62 26 26 63 3d 3d 3d 61 2e 6c 65 6e 67 74 68 3f 61 3a 61 2e 73 75 62 61 72 72 61 79 28 62 2c 63 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 2e 64 65 63 6f 64 65 28 61 29 7d 63 61 74 63 68 28 66 29 7b 69 66 28 62 3d 64 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6a 61 61 29 7b 74 72 79 7b 65 2e 64 65 63 6f 64 65 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 5b 31 Data Ascii: ,b,c,d){var e;d?(e=haa)\|\|(e=haa=new TextDecoder("utf-8",{fatal:!0})):(e=iaa)\|\|(e=iaa=new TextDecoder("utf-8",{fatal:!1}));c=b+c;a=0===b&&c===a.length?a:a.subarray(b,c);try{return e.decode(a)}catch(f){if(b=d){if(void 0===jaa){try{e.decode(new Uint8Array([1
2024-04-26 15:32:30 UTC	1255	IN	Data Raw: 74 75 72 6e 28 62 3d 62 2e 62 72 61 6e 64 29 26 26 5f 2e 66 61 28 62 2c 61 29 7d 29 3a 21 31 3a 21 31 7d 3b 5f 2e 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 66 61 28 5f 2e 64 61 28 29 2c 61 29 7d 3b 0a 72 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 52 65 67 45 78 70 28 22 28 5b 41 2d 5a 5d 5b 5c 5c 77 20 5d 2b 29 2f 28 5b 5e 5c 5c 73 5d 2b 29 5c 5c 73 2a 28 3f 3a 5c 5c 28 28 2e 2a 3f 29 5c 5c 29 29 3f 22 2c 22 67 22 29 2c 63 3d 5b 5d 2c 64 3b 64 3d 62 2e 65 78 65 63 28 61 29 3b 29 63 2e 70 75 73 68 28 5b 64 5b 31 5d 2c 64 5b 32 5d 2c 64 5b 33 5d 7c 7c 76 6f 69 64 20 30 5d 29 3b 72 65 74 75 72 6e 20 63 7d 3b 73 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 Data Ascii: turn(b=b.brand)&&_.fa(b,a)}):!1:!1};_.ha=function(a){return _.fa(_.da(),a)};raa=function(a){for(var b=RegExp("([A-Z][\\w ]+)/([^\\s]+)\\s(?:\$(.?)\$)?","g"),c=[],d;d=b.exec(a);)c.push([d[1],d[2],d[3]\|\|void 0]);return c};saa=function(a){return void 0!
2024-04-26 15:32:30 UTC	1255	IN	Data Raw: 22 45 64 67 22 5d 29 3a 42 61 61 28 29 3f 62 28 5b 22 53 69 6c 6b 22 5d 29 3a 7a 61 61 28 29 3f 62 28 5b 22 43 68 72 6f 6d 65 22 2c 22 43 72 69 4f 53 22 2c 22 48 65 61 64 6c 65 73 73 43 68 72 6f 6d 65 22 5d 29 3a 28 61 3d 61 5b 32 5d 29 26 26 61 5b 31 5d 7c 7c 22 22 7d 3b 0a 46 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 2f 72 76 3a 20 2a 28 5b 5c 64 5c 2e 5d 2a 29 2f 2e 65 78 65 63 28 61 29 3b 69 66 28 62 26 26 62 5b 31 5d 29 72 65 74 75 72 6e 20 62 5b 31 5d 3b 62 3d 22 22 3b 76 61 72 20 63 3d 2f 4d 53 49 45 20 2b 28 5b 5c 64 5c 2e 5d 2b 29 2f 2e 65 78 65 63 28 61 29 3b 69 66 28 63 26 26 63 5b 31 5d 29 69 66 28 61 3d 2f 54 72 69 64 65 6e 74 5c 2f 28 5c 64 2e 5c 64 29 2f 2e 65 78 65 63 28 61 29 2c 22 37 2e 30 22 3d 3d 63 5b 31 5d 29 69 Data Ascii: "Edg"]):Baa()?b(["Silk"]):zaa()?b(["Chrome","CriOS","HeadlessChrome"]):(a=a[2])&&a[1]\|\|""};Faa=function(a){var b=/rv: ([\d\.])/.exec(a);if(b&&b[1])return b[1];b="";var c=/MSIE +([\d\.]+)/.exec(a);if(c&&c[1])if(a=/Trident\/(\d.\d)/.exec(a),"7.0"==c[1])i
2024-04-26 15:32:30 UTC	1255	IN	Data Raw: 66 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 64 2e 62 72 61 6e 64 3d 3d 3d 61 7d 29 29 72 65 74 75 72 6e 7d 65 6c 73 65 20 69 66 28 22 22 3d 3d 3d 62 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 6e 65 77 20 4b 61 61 28 61 2c 63 2c 62 29 7d 3b 0a 4d 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 70 61 61 3f 21 21 5f 2e 65 61 26 26 21 21 5f 2e 65 61 2e 70 6c 61 74 66 6f 72 6d 3a 21 31 7d 3b 5f 2e 4e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 61 61 28 29 3f 22 41 6e 64 72 6f 69 64 22 3d 3d 3d 5f 2e 65 61 2e 70 6c 61 74 66 6f 72 6d 3a 5f 2e 68 61 28 22 41 6e 64 72 6f 69 64 22 29 7d 3b 5f 2e 4f 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 68 61 28 22 69 50 68 6f 6e Data Ascii: find(function(d){return d.brand===a}))return}else if(""===b)return;return new Kaa(a,c,b)};Maa=function(){return _.paa?!!_.ea&&!!_.ea.platform:!1};_.Naa=function(){return Maa()?"Android"===_.ea.platform:_.ha("Android")};_.Oaa=function(){return _.ha("iPhon
2024-04-26 15:32:30 UTC	1255	IN	Data Raw: 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 65 3d 61 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 65 3b 2d 2d 65 29 65 20 69 6e 20 64 26 26 62 2e 63 61 6c 6c 28 63 2c 64 5b 65 5d 2c 65 2c 61 29 7d 3b 5f 2e 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 3d 5f 2e 6e 61 28 61 2c 62 2c 63 29 3b 72 65 74 75 72 6e 20 30 3e 62 3f 6e 75 6c 6c 3a 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 61 2e 63 68 61 72 41 74 28 62 29 3a 61 5b 62 5d 7d 3b 5f 2e 6e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 61 2e 6c 65 6e 67 74 68 2c 65 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 69 Data Ascii: "===typeof a?a.split(""):a,e=a.length-1;0<=e;--e)e in d&&b.call(c,d[e],e,a)};_.pa=function(a,b,c){b=_.na(a,b,c);return 0>b?null:"string"===typeof a?a.charAt(b):a[b]};_.na=function(a,b,c){for(var d=a.length,e="string"===typeof a?a.split(""):a,f=0;f<d;f++)i
2024-04-26 15:32:30 UTC	1255	IN	Data Raw: 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 31 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 5f 2e 43 61 28 64 29 29 7b 76 61 72 20 65 3d 61 2e 6c 65 6e 67 74 68 7c 7c 30 2c 66 3d 64 2e 6c 65 6e 67 74 68 7c 7c 30 3b 61 2e 6c 65 6e 67 74 68 3d 65 2b 66 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 61 5b 65 2b 67 5d 3d 64 5b 67 5d 7d 65 6c 73 65 20 61 2e 70 75 73 68 28 64 29 7d 7d 3b 5f 2e 64 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 63 65 2e 61 70 70 6c 79 28 61 2c 5f 2e 63 62 61 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 7d 3b 5f 2e Data Ascii: ion(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(_.Ca(d)){var e=a.length\|\|0,f=d.length\|\|0;a.length=e+f;for(var g=0;g<f;g++)a[e+g]=d[g]}else a.push(d)}};_.dba=function(a,b,c,d){return Array.prototype.splice.apply(a,_.cba(arguments,1))};_.
2024-04-26 15:32:30 UTC	1255	IN	Data Raw: 64 20 30 2c 64 2c 65 2c 61 29 5d 3d 64 7d 29 3b 72 65 74 75 72 6e 20 63 7d 3b 0a 5f 2e 4d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 5b 5d 2c 65 3d 30 2c 66 3d 61 3b 63 3d 63 7c 7c 31 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 65 3d 61 2c 66 3d 62 29 3b 69 66 28 30 3e 63 2a 28 66 2d 65 29 29 72 65 74 75 72 6e 5b 5d 3b 69 66 28 30 3c 63 29 66 6f 72 28 61 3d 65 3b 61 3c 66 3b 61 2b 3d 63 29 64 2e 70 75 73 68 28 61 29 3b 65 6c 73 65 20 66 6f 72 28 61 3d 65 3b 61 3e 66 3b 61 2b 3d 63 29 64 2e 70 75 73 68 28 61 29 3b 72 65 74 75 72 6e 20 64 7d 3b 5f 2e 6e 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 2c 64 3d 30 3b 64 3c 62 3b 64 2b 2b 29 63 5b 64 5d 3d 61 3b 72 65 74 75 72 6e 20 63 7d 3b 5f Data Ascii: d 0,d,e,a)]=d});return c};_.Ma=function(a,b,c){var d=[],e=0,f=a;c=c\|\|1;void 0!==b&&(e=a,f=b);if(0>c*(f-e))return[];if(0<c)for(a=e;a<f;a+=c)d.push(a);else for(a=e;a>f;a+=c)d.push(a);return d};_.nba=function(a,b){for(var c=[],d=0;d<b;d++)c[d]=a;return c};_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49778	142.250.66.195	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:29 UTC	1215	OUT	GET /verify/AAtmn1bTSyw2hAKlZ3LnbiQ1Wqu5634m12FM1sn670oINgsM5w6AM4xkxQt_rNluBR52tCI5NrrO_xyQcOfIPkLWLk9JFqI6z1l0UNJetPNOAxmS HTTP/1.1 Host: id.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=b51YpLo4VR1MIeifPjI6wC1AZiY3GgI94kQnKHVX8ICBbDBgB6C1XG4hPNwsOPh0zeb4QtsPOdjysJlWqeTZk0yQDpcqoBuOXBu5GHyB2hq29z3ahDw9JiGpGyYTB1lqXMlrGtwa4kVVcxFGFVSG8PXDFAkU-VSj6gACLVMtelxQalQ9CTU
2024-04-26 15:32:30 UTC	1045	IN	HTTP/1.1 204 No Content Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 15:32:30 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Cross-Origin-Resource-Policy: cross-origin Server: scaffolding on HTTPServer2 Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; expires=Sat, 26-Oct-2024 15:32:30 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Set-Cookie: SNID=AKzhCTbJv-CZi9svrseLladtvWD0wC-hd_P7q-nk5WeIGMrmkKWpEpnsDKr3OEqL3kMCfQHtDukWKQE1PT41E1v-8iQmO2J5cw; expires=Sat, 26-Oct-2024 15:31:49 GMT; path=/verify; domain=.google.com; Secure; HttpOnly; SameSite=lax Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49780	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:30 UTC	1612	OUT	POST /gen_204?s=web&t=aft&atyp=csi&ei=C8krZr7QHOyTwbkPuNyGwAw&rt=wsrt.3948,aft.1311,afti.1311,afts.474,cbt.197,hst.197,prt.558,sct.429&imn=8&ima=2&imad=1&imac=0&wh=870&aft=1&aftp=870&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=b51YpLo4VR1MIeifPjI6wC1AZiY3GgI94kQnKHVX8ICBbDBgB6C1XG4hPNwsOPh0zeb4QtsPOdjysJlWqeTZk0yQDpcqoBuOXBu5GHyB2hq29z3ahDw9JiGpGyYTB1lqXMlrGtwa4kVVcxFGFVSG8PXDFAkU-VSj6gACLVMtelxQalQ9CTU
2024-04-26 15:32:30 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-MgB88vjqt0EdVtlFVTDwlQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:30 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49781	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:31 UTC	1561	OUT	GET /compressiontest/gzip.html HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0
2024-04-26 15:32:32 UTC	1734	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Fri, 26 Apr 2024 15:32:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-l3PGb16co2zFMzuPdzJdmA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Encoding: gzip Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-26-15; expires=Sun, 26-May-2024 15:32:31 GMT; path=/; domain=.google.com; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-26 15:32:32 UTC	127	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 31 63 0d 0a 00 02 ff b3 51 4c c9 4f 2e a9 2c 48 55 c8 28 c9 cd b1 03 00 48 ec b9 87 0f 00 00 00 0d 0a Data Ascii: 00000001000000010000000100000001000000010000000100000001001cQLO.,HU(H
2024-04-26 15:32:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49783	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:31 UTC	1495	OUT	GET /complete/search?q&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=2&hl=en&authuser=0&pq=104.94.109.142443&psi=C8krZr7QHOyTwbkPuNyGwAw.1714145550203&dpr=1&nolsbt=1 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV
2024-04-26 15:32:32 UTC	1742	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 15:32:32 GMT Expires: Fri, 26 Apr 2024 15:32:32 GMT Cache-Control: private, max-age=3600 Content-Type: application/json; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Kt7c51XWnqmGeNPi3wyl_w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:32:32 UTC	1742	IN	Data Raw: 61 62 36 0d 0a 29 5d 7d 27 0a 5b 5b 5b 22 70 68 69 6c 6c 79 20 70 72 65 74 7a 65 6c 20 66 61 63 74 6f 72 79 20 66 72 65 65 20 70 72 65 74 7a 65 6c 20 64 61 79 22 2c 30 2c 5b 33 2c 33 30 38 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 39 30 30 30 30 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 62 61 6c 74 69 6d 6f 72 65 20 72 61 76 65 6e 73 20 6e 66 6c 20 64 72 61 66 74 20 70 69 63 6b 73 22 2c 30 2c 5b 33 2c 33 30 38 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 39 30 30 30 30 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 68 6f 75 73 65 68 6f 6c 64 20 63 61 76 61 6c 72 79 20 68 6f 72 73 65 73 20 6c 6f 6e Data Ascii: ab6)]}'[[["philly pretzel factory free pretzel day",0,[3,308,357,362,396,143],{"zf":33,"zl":90000,"zp":{"gs_ss":"1"}}],["baltimore ravens nfl draft picks",0,[3,308,357,362,396,143],{"zf":33,"zl":90000,"zp":{"gs_ss":"1"}}],["household cavalry horses lon
2024-04-26 15:32:32 UTC	1007	IN	Data Raw: 53 75 6f 53 53 6b 6b 67 53 53 61 45 45 55 4a 70 4b 51 69 45 49 51 67 6b 6d 6b 6d 6f 41 70 4a 42 4e 41 30 4a 42 4e 41 77 6d 6f 70 6f 4d 64 56 55 52 55 73 45 6b 38 37 67 32 4f 4e 75 5a 78 36 42 55 57 70 78 47 62 46 71 6f 7a 53 64 68 6a 66 39 4f 50 6c 47 33 37 72 63 32 34 78 46 7a 70 59 38 4e 69 64 59 64 2b 58 7a 35 44 36 2b 69 35 75 45 47 4b 4f 50 65 50 4e 32 67 36 41 38 7a 34 72 68 79 35 2f 54 74 68 6a 39 6c 57 34 64 4a 55 4d 75 38 6c 6b 4e 74 47 6e 55 75 38 54 39 75 43 72 6c 5a 67 63 74 55 34 74 69 61 31 6a 41 4d 7a 6e 4f 31 4e 75 70 4a 30 48 68 37 37 4b 38 46 73 6d 49 4f 44 49 75 79 30 36 35 69 4f 41 36 72 70 51 59 52 46 4a 46 75 69 43 36 4f 39 33 46 33 46 35 36 6c 63 4a 6b 37 7a 44 62 79 32 6d 77 70 37 59 70 6f 6f 37 76 62 62 76 5a 53 4e 52 30 57 31 67 Data Ascii: SuoSSkkgSSaEEUJpKQiEIQgkmkmoApJBNA0JBNAwmopoMdVURUsEk87g2ONuZx6BUWpxGbFqozSdhjf9OPlG37rc24xFzpY8NidYd+Xz5D6+i5uEGKOPePN2g6A8z4rhy5/Tthj9lW4dJUMu8lkNtGnUu8T9uCrlZgctU4tia1jAMznO1NupJ0Hh77K8FsmIODIuy065iOA6rpQYRFJFuiC6O93F3F56lcJk7zDby2mwp7Ypoo7vbbvZSNR0W1g
2024-04-26 15:32:32 UTC	1255	IN	Data Raw: 31 31 63 36 0d 0a 4f 76 7a 57 55 62 4d 43 65 73 64 46 46 46 4d 39 72 67 32 30 7a 69 34 75 6a 74 62 4e 63 48 69 54 72 79 39 46 77 6d 4d 79 61 66 4b 34 2b 6f 39 48 70 4d 51 69 71 34 77 36 46 34 63 44 30 57 57 6f 71 54 41 30 6e 57 36 72 6d 41 34 54 50 68 56 5a 6c 63 39 78 67 63 53 41 43 62 2b 52 38 50 4a 57 75 74 67 44 6d 4e 61 33 55 6b 63 31 78 73 30 37 65 53 6c 34 70 6a 2b 4a 76 4a 62 4a 4d 79 6a 70 37 32 7a 48 56 78 43 31 38 4c 78 2f 41 49 48 46 73 75 61 70 6c 4e 73 30 30 72 67 34 6b 2b 41 76 70 36 4c 71 31 47 42 66 35 4c 4a 35 49 78 55 62 70 32 59 4d 6b 76 59 6e 78 73 50 52 63 73 37 4a 47 71 66 6c 6b 4c 48 78 74 7a 43 4a 6a 69 58 5a 4c 6e 6c 62 39 6c 31 78 6b 73 37 55 79 75 57 2b 6c 67 68 46 4e 4f 33 66 55 4c 67 49 33 36 6c 72 65 36 56 57 64 73 63 4f 5a Data Ascii: 11c6OvzWUbMCesdFFFM9rg20zi4ujtbNcHiTry9FwmMyafK4+o9HpMQiq4w6F4cD0WWoqTA0nW6rmA4TPhVZlc9xgcSACb+R8PJWutgDmNa3Ukc1xs07eSl4pj+JvJbJMyjp72zHVxC18Lx/AIHFsuaplNs00rg4k+Avp6Lq1GBf5LJ5IxUbp2YMkvYnxsPRcs7JGqflkLHxtzCJjiXZLnlb9l1xks7UyuW+lghFNO3fULgI36lre6VWdscOZ
2024-04-26 15:32:32 UTC	1255	IN	Data Raw: 73 57 34 77 75 51 75 65 39 78 73 54 64 35 31 74 64 78 48 77 54 66 46 66 66 45 43 77 44 50 6f 44 39 43 6c 76 64 63 64 64 4f 2f 73 37 4d 58 30 78 59 65 4c 62 48 31 43 36 34 56 61 77 65 54 63 56 63 54 54 6f 32 53 50 4c 37 2b 53 73 59 57 76 69 75 38 57 62 4f 61 79 53 54 55 62 70 33 58 52 51 30 4a 58 51 67 45 49 51 67 68 64 4b 36 56 30 72 6f 48 64 46 30 6b 72 71 41 37 6f 75 6f 33 53 4c 6b 45 6c 57 39 6f 33 67 7a 4e 6a 2f 55 62 44 2b 65 39 57 45 75 56 5a 32 6a 41 45 30 55 6a 75 52 50 79 56 4d 2f 53 2b 48 74 77 4d 52 67 33 74 46 49 62 33 37 66 30 58 43 32 57 78 55 30 4f 49 79 30 55 72 73 75 70 4d 64 2b 59 35 68 57 61 4e 75 38 70 5a 57 38 53 54 64 65 64 34 32 77 73 78 52 37 6d 6e 4b 35 68 75 43 4f 53 34 59 39 39 4f 31 75 72 74 37 42 42 41 79 76 68 44 75 79 62 64 Data Ascii: sW4wuQue9xsTd51tdxHwTfFffECwDPoD9ClvdcddO/s7MX0xYeLbH1C64VaweTcVcTTo2SPL7+SsYWviu8WbOaySTUbp3XRQ0JXQgEIQghdK6V0roHdF0krqA7ouo3SLkElW9o3gzNj/UbD+e9WEuVZ2jAE0UjuRPyVM/S+HtwMRg3tFIb37f0XC2WxU0OIy0UrsupMd+Y5hWaNu8pZW8STded42wsxR7mnK5huCOS4Y99O1urt7BBAyvhDuybd
2024-04-26 15:32:32 UTC	1255	IN	Data Raw: 55 78 47 39 5a 33 67 65 61 34 33 70 69 6b 63 64 6d 48 42 70 67 70 32 74 73 77 44 4d 66 49 42 62 4d 4f 47 48 4d 39 2b 58 51 72 72 51 78 74 66 4d 35 37 67 44 5a 6f 61 30 65 2f 55 2f 4a 64 4e 6b 54 52 52 75 65 57 67 44 6b 6e 6b 76 34 74 54 43 6f 53 77 42 67 4e 74 46 6e 69 32 6c 69 70 70 58 55 31 55 31 70 65 77 32 4c 6d 4f 41 50 6f 56 4c 43 72 5a 69 53 73 32 49 34 54 54 31 41 4d 72 47 48 50 7a 79 38 2f 56 52 5a 74 50 70 74 78 37 52 77 50 5a 2b 42 43 39 31 78 6f 53 52 5a 63 6d 71 72 70 44 6e 65 39 6e 34 6a 2b 4a 76 77 58 49 6d 46 5a 54 4f 64 54 55 63 42 63 2b 2f 45 4e 75 66 56 61 2b 4a 59 76 58 59 66 43 32 47 53 43 4b 4b 6f 63 4f 4e 75 31 62 72 34 42 56 38 61 76 78 38 65 58 4a 6c 4d 63 5a 75 6f 56 37 48 4e 64 76 4b 71 59 52 73 41 76 6c 35 6b 66 62 78 58 4e 5a Data Ascii: UxG9Z3gea43pikcdmHBpgp2tswDMfIBbMOGHM9+XQrrQxtfM57gDZoa0e/U/JdNkTRRueWgDknkv4tTCoSwBgNtFni2lippXU1U1pew2LmOAPoVLCrZiSs2I4TT1AMrGHPzy8/VRZtPptx7RwPZ+BC91xoSRZcmqrpDne9n4j+JvwXImFZTOdTUcBc+/ENufVa+JYvXYfC2GSCKKocONu1br4BV8avx8eXJlMcZuoV7HNdvKqYRsAvl5kfbxXNZ
2024-04-26 15:32:32 UTC	793	IN	Data Raw: 49 66 32 57 67 4b 54 42 6c 61 6a 72 4a 33 70 4a 4a 2f 41 65 61 59 53 64 78 43 68 30 79 39 45 37 55 65 56 6c 48 6d 53 6e 2b 58 33 71 50 35 53 71 75 64 53 36 4a 6c 52 4a 31 41 54 56 69 56 46 36 39 41 2f 70 6e 56 5a 38 4e 71 36 55 6d 35 69 6c 44 77 4f 67 63 50 75 30 72 7a 39 33 42 57 66 2b 6d 39 54 75 73 62 6e 70 79 65 7a 4e 41 53 50 4e 70 42 2b 52 4b 37 38 56 37 65 54 2b 71 34 65 58 78 38 6e 70 61 45 67 55 4c 57 2b 52 61 35 4b 67 34 36 49 51 6f 6f 67 34 72 47 34 6f 51 67 78 4f 4b 72 32 32 73 67 62 67 4d 72 53 64 58 76 59 30 65 74 2f 6f 6b 68 56 7a 2f 6a 57 6a 34 6e 66 50 68 2f 74 35 37 48 72 47 50 45 72 59 62 72 6f 68 43 78 50 73 75 48 31 47 52 48 4d 49 51 6f 2b 6d 70 46 35 37 4a 4b 66 64 61 50 41 58 53 51 71 7a 30 6a 4c 33 57 4f 45 58 64 63 72 4a 33 70 62 Data Ascii: If2WgKTBlajrJ3pJJ/AeaYSdxCh0y9E7UeVlHmSn+X3qP5SqudS6JlRJ1ATViVF69A/pnVZ8Nq6Um5ilDwOgcPu0rz93BWf+m9TusbnpyezNASPNpB+RK78V7eT+q4eXx8npaEgULW+Ra5Kg46IQoog4rG4oQgxOKr22sgbgMrSdXvY0et/okhVz/jWj4nfPh/t57HrGPErYbrohCxPsuH1GRHMIQo+mpF57JKfdaPAXSQqz0jL3WOEXdcrJ3pb
2024-04-26 15:32:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49782	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:31 UTC	1512	OUT	GET /complete/search?q=104.94.109.142443&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=3&hl=en&authuser=0&pq=104.94.109.142443&psi=C8krZr7QHOyTwbkPuNyGwAw.1714145550203&dpr=1&ofp=EAE HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV
2024-04-26 15:32:32 UTC	1742	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 15:32:32 GMT Expires: Fri, 26 Apr 2024 15:32:32 GMT Cache-Control: private, max-age=3600 Content-Type: application/json; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-lq1Sg40GSksGLtU128TI1g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:32:32 UTC	75	IN	Data Raw: 34 35 0d 0a 29 5d 7d 27 0a 5b 5b 5d 2c 7b 22 69 22 3a 22 31 30 34 2e 39 34 2e 31 30 39 2e 31 34 32 34 34 33 22 2c 22 71 22 3a 22 64 45 4f 55 46 54 77 4b 2d 45 58 42 6d 43 6e 62 64 37 43 4c 49 74 7a 6b 79 54 30 22 7d 5d 0d 0a Data Ascii: 45)]}'[[],{"i":"104.94.109.142443","q":"dEOUFTwK-EXBmCnbd7CLItzkyT0"}]
2024-04-26 15:32:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49784	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:31 UTC	1520	OUT	GET /complete/search?q=104.94.109.142443&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=undefined&hl=en&authuser=0&pq=104.94.109.142443&psi=C8krZr7QHOyTwbkPuNyGwAw.1714145550203&dpr=1&ofp=EAE HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV
2024-04-26 15:32:32 UTC	1742	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 15:32:32 GMT Expires: Fri, 26 Apr 2024 15:32:32 GMT Cache-Control: private, max-age=3600 Content-Type: application/json; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-W1cxwvm_UuTz3kBbJmEeQA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:32:32 UTC	75	IN	Data Raw: 34 35 0d 0a 29 5d 7d 27 0a 5b 5b 5d 2c 7b 22 69 22 3a 22 31 30 34 2e 39 34 2e 31 30 39 2e 31 34 32 34 34 33 22 2c 22 71 22 3a 22 64 45 4f 55 46 54 77 4b 2d 45 58 42 6d 43 6e 62 64 37 43 4c 49 74 7a 6b 79 54 30 22 7d 5d 0d 0a Data Ascii: 45)]}'[[],{"i":"104.94.109.142443","q":"dEOUFTwK-EXBmCnbd7CLItzkyT0"}]
2024-04-26 15:32:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49786	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:31 UTC	1674	OUT	GET /xjs/_/js/md=3/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV
2024-04-26 15:32:32 UTC	818	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 291714 Date: Fri, 26 Apr 2024 15:32:32 GMT Expires: Sat, 26 Apr 2025 15:32:32 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 26 Apr 2024 06:52:27 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:32 UTC	437	IN	Data Raw: 7b 22 63 68 75 6e 6b 54 79 70 65 73 22 3a 22 31 30 30 30 30 31 31 31 31 31 31 31 31 30 30 31 31 31 31 30 30 30 31 30 30 30 30 31 30 31 31 30 31 30 30 30 30 30 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 31 31 31 31 30 31 31 31 31 31 31 31 31 31 31 31 30 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: {"chunkTypes":"100001111111100111100010000101101000000111111111111111111111111111111111111111101111011111111111010111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
2024-04-26 15:32:32 UTC	1255	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 30 30 31 31 30 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 31 30 31 30 30 31 31 31 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 32 32 32 32 32 32 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 Data Ascii: 111111111111111110001101011111111111111111111111111111111111111111111111111110101001111212121212121212222222222121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212
2024-04-26 15:32:32 UTC	1255	IN	Data Raw: 32 32 32 31 31 33 31 33 32 32 32 32 32 31 31 31 31 31 31 31 31 31 31 31 31 31 33 32 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 32 32 32 31 31 31 31 31 31 32 32 32 31 31 32 32 32 32 32 31 31 31 31 31 32 31 31 32 32 32 32 32 32 32 32 32 32 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 31 31 Data Ascii: 222113132222211111111111113213111111111111131111131111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111211111111111111121111111122211111122211222221111121122222222221121111111111111221111111111111111112211
2024-04-26 15:32:32 UTC	1255	IN	Data Raw: 31 33 31 32 31 32 31 31 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 32 31 32 31 32 32 31 31 32 31 32 32 31 31 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 33 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 31 31 31 31 32 31 32 31 32 31 32 31 31 32 32 31 31 31 33 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 31 31 31 31 31 Data Ascii: 131212111222222222222222222222222222222222222111111111111111111111111111121212122112122111222222222222222222222222222231211111111111113111111111111111131111112121212112211131121111111111111111111111111111111111111111111121131111111111111111111111111011111
2024-04-26 15:32:32 UTC	1255	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 31 31 30 31 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111111111011011011111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111311111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
2024-04-26 15:32:32 UTC	1255	IN	Data Raw: 31 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 33 33 33 33 33 32 31 32 31 32 31 32 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 32 32 32 32 32 32 32 31 32 31 32 31 33 31 33 33 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 32 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 112121212121212121212121212133333212121212111111111111111111121122222221212131333111111111111111111111111111111111111111111111111111111111111111111312311111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
2024-04-26 15:32:32 UTC	1255	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 31 31 31 31 30 31 31 30 31 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 33 30 31 30 31 31 31 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 30 31 31 31 31 31 33 32 31 31 31 33 33 31 31 33 33 32 33 31 31 33 31 32 33 31 31 33 33 33 33 33 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111101111111111111111111111111101111011011011111111111113010111111311111111111101111132111331133231131231133333311111111111111111111111111111111111111111111111111111
2024-04-26 15:32:32 UTC	1255	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
2024-04-26 15:32:32 UTC	1255	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
2024-04-26 15:32:32 UTC	1255	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 33 31 31 33 31 31 31 31 33 31 31 31 31 31 31 31 31 33 33 31 31 31 31 30 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 31 31 31 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111131131111311111111331111001111111111111111110111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111131111110111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49787	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:32 UTC	1506	OUT	POST /gen_204?atyp=csi&ei=C8krZr7QHOyTwbkPuNyGwAw&s=web&nt=navigate&t=fi&st=7363&fid=1&zx=1714145550176&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV
2024-04-26 15:32:32 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-CYYohmuj8bBJBBgouh2hOA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:32 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49785	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:32 UTC	1535	OUT	POST /gen_204?atyp=csi&ei=C8krZr7QHOyTwbkPuNyGwAw&s=jsa&jsi=s,st.7364,t.249,at.249,et.click,n.vZr2rb,cn.1,ie.0,vi.1&zx=1714145550198&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV
2024-04-26 15:32:32 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-ta7QS9p4zfvc2PoGIZ3IFg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:32 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49788	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:32 UTC	1526	OUT	POST /gen_204?atyp=i&ei=C8krZr7QHOyTwbkPuNyGwAw&ved=0ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ39UDCAw&bl=jahV&s=web&zx=1714145550199&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV
2024-04-26 15:32:33 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-oDrs0AKPevGelx6QlkqC8A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:33 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49789	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:33 UTC	1526	OUT	POST /gen_204?atyp=i&ei=C8krZr7QHOyTwbkPuNyGwAw&ved=0ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ39UDCAw&bl=jahV&s=web&zx=1714145550208&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV
2024-04-26 15:32:34 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-5lVwWziTF9vTePxR3JUltw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:34 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49790	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:33 UTC	4225	OUT	GET /xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/ck=xjs.s.GGin1mxRzvU.L.W.O/am=gB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKYGgmXAACsCGIADgg0MAAMAQAABCAAjA5oEKARQhIABgAIAggZ__BAAAHACBAQAgZAICBEC4AJIQkIMAAEQwwQCkAgDDjwAAIIAEAAAcoMB-AAEDESA8hAABgACYYPwDoIIAICQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=1/exm=SNUn3,attn,cEt90b,cdos,csi,d,dtl0hd,eHDfl,gwc,hsm,jsa,mb4ZUb,qddgKe,sTsDMc/excm=ABxRVc,AD6AIb,AOTkuc,CVVp5c,FmnE6b,KYXthe,KiXlnd,NsEUGe,Ok4XMd,Ollhtb,PlCTlc,RP6nyf,SpjoE,Ut0TMc,VL58m,WFRJOb,WuIPnb,ZGLUZ,ZrXR8b,bXyZdf,fNMhz,gKO30e,hU1IHe,hWJjIf,rL2AR,xB2dQd,y25qZb,yChgtb/ed=1/dg=0/br=1/ujg=1/rs=ACT90oFHhWzRDSD7HZXJ5E0CbPv4n89phQ/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KeeMUb:HiPxjc;KpRAue:Tia57b;LBgRLc:XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;PqHfGe:im2cZe;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VsAqSb:PGf2Re;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YV5bee:IvPZ6d;YkQtAf:rx8ur;ZMvdv:PHFPjb;ZWEUA:afR4Cf;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bDXwRe:UsyOtc;bFZ6gf:gU6kfd;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:VruDBd;eHDfl:ofjVkb;eO3lse:nFClrf;fWLTFc:TVBJbf;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;hsLsYc:Vl118;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;io8t5d:sgY6Zb;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;lkq0A:JyBE3e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;p2tIDb:tp1Cx;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qGV2uc:HHi04c;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;uknmt:GkPrzb;uuQkY:u2V3ud;vGrMZ:lPJJ0c;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;xbe2wc:uRMPBc;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=Eox39d,GElbSc,HYSCof,KHourd,ajbYod,pHXghd,tIj4fb,vrkJ0e,xdV1C?xjs=s1 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
2024-04-26 15:32:34 UTC	818	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 616721 Date: Fri, 26 Apr 2024 15:32:34 GMT Expires: Sat, 26 Apr 2025 15:32:34 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 26 Apr 2024 06:52:27 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:34 UTC	437	IN	Data Raw: 5f 46 5f 69 6e 73 74 61 6c 6c 43 73 73 28 22 2e 76 53 79 52 66 66 2e 66 43 32 4b 47 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 78 68 55 47 77 63 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 32 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 29 2c 30 20 32 70 78 20 36 70 78 20 36 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 30 36 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 33 32 30 70 78 29 7b 2e 76 53 79 52 66 66 2e 66 43 32 4b 47 7b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 34 38 30 70 78 29 7b 2e 76 53 79 52 66 66 2e 66 43 32 4b 47 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b Data Ascii: _F_installCss(".vSyRff.fC2KG{background-color:var(--xhUGwc);box-shadow:0 2px 2px 2px rgba(0,0,0,0.1),0 2px 6px 6px rgba(0,0,0,0.06)}@media (min-width:320px){.vSyRff.fC2KG{bottom:0;left:0;right:0}}@media (min-width:480px){.vSyRff.fC2KG{display:inline-block
2024-04-26 15:32:34 UTC	1255	IN	Data Raw: 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 30 70 78 7d 2e 6c 67 6f 39 6b 63 2e 76 4b 57 34 6d 64 7b 6f 70 61 63 69 74 79 3a 2e 32 3b 76 69 73 69 62 69 6c 69 74 79 3a 69 6e 68 65 72 69 74 7d 2e 76 53 79 52 66 66 2e 76 4b 57 34 6d 64 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 6f 70 61 63 69 74 79 3a 31 3b 76 69 73 69 62 69 6c 69 74 79 3a 69 6e 68 65 72 69 74 7d 2e 6c 67 6f 39 6b 63 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 32 35 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 32 35 73 3b 62 6f 74 74 6f 6d Data Ascii: order-radius:20px}.lgo9kc.vKW4md{opacity:.2;visibility:inherit}.vSyRff.vKW4md{-webkit-transform:translateY(0);transform:translateY(0);opacity:1;visibility:inherit}.lgo9kc{background-color:#000;-webkit-transition:opacity .25s;transition:opacity .25s;bottom
2024-04-26 15:32:34 UTC	1255	IN	Data Raw: 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 31 36 70 78 7d 2e 6a 6e 79 78 52 64 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 49 45 42 78 58 64 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 76 53 79 52 66 66 20 2e 75 42 45 69 68 66 7b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 34 38 30 70 78 29 7b 2e 4a 58 58 73 72 2e 66 43 32 4b 47 7b 6c 65 66 74 3a 32 30 70 78 3b 72 69 67 68 74 3a 61 75 74 6f 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 34 38 30 70 78 29 7b 2e 63 33 6b 36 5a 63 2e 66 43 32 4b 47 7b 6c 65 66 74 3a 61 75 74 Data Ascii: ;border-top-right-radius:16px}.jnyxRd:focus{outline:none}.IEBxXd{height:100%}.vSyRff .uBEihf{padding:10px;position:absolute;right:0;top:0;z-index:1}@media (min-width:480px){.JXXsr.fC2KG{left:20px;right:auto}}@media (min-width:480px){.c3k6Zc.fC2KG{left:aut
2024-04-26 15:32:34 UTC	1255	IN	Data Raw: 69 74 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 7d 2c 6d 47 64 3a 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 7d 7d 29 7d 3b 0a 67 51 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 2e 4c 47 63 7d 3b 68 51 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 4c 47 63 7d 3b 69 51 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 4c 47 63 3d 62 7d 3b 6a 51 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 6c 47 64 7d 3b 6b 51 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 6c 47 64 3d 62 7d 3b 6c 51 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: itable:!0,enumerable:!1},mGd:{value:void 0,configurable:!0,writable:!0,enumerable:!1}})};gQb=function(a){return null!=a.LGc};hQb=function(a){return a.LGc};iQb=function(a,b){a.LGc=b};jQb=function(a){return a.lGd};kQb=function(a,b){a.lGd=b};lQb=function(a)
2024-04-26 15:32:34 UTC	1255	IN	Data Raw: 62 7d 3b 5f 2e 7a 51 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 5b 47 51 62 5d 7d 3b 0a 5f 2e 41 51 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 5b 47 51 62 5d 3d 62 7d 3b 5f 2e 42 51 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 5b 48 51 62 5d 7d 3b 5f 2e 43 51 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 5b 48 51 62 5d 3d 62 7d 7d 65 6c 73 65 20 5f 2e 73 51 62 3d 64 51 62 2c 5f 2e 74 51 62 3d 65 51 62 2c 5f 2e 71 51 62 3d 66 51 62 2c 5f 2e 75 51 62 3d 67 51 62 2c 5f 2e 76 51 62 3d 68 51 62 2c 5f 2e 77 51 62 3d 69 51 62 2c 5f 2e 78 51 62 3d 6a 51 62 2c 5f 2e 79 51 62 3d 6b 51 62 2c 5f 2e 7a 51 62 3d 6c 51 62 2c 5f 2e 41 51 62 3d 6d 51 62 2c 5f 2e 42 51 62 3d 6e 51 62 2c 5f 2e 43 Data Ascii: b};_.zQb=function(a){return a[GQb]};_.AQb=function(a,b){a[GQb]=b};_.BQb=function(a){return a[HQb]};_.CQb=function(a,b){return a[HQb]=b}}else _.sQb=dQb,_.tQb=eQb,_.qQb=fQb,_.uQb=gQb,_.vQb=hQb,_.wQb=iQb,_.xQb=jQb,_.yQb=kQb,_.zQb=lQb,_.AQb=mQb,_.BQb=nQb,_.C
2024-04-26 15:32:34 UTC	1255	IN	Data Raw: 29 69 66 28 21 28 63 20 69 6e 20 62 26 26 49 77 63 28 61 5b 63 5d 2c 62 5b 63 5d 29 29 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 62 29 69 66 28 21 28 64 20 69 6e 20 61 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 3b 49 77 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 7c 7c 21 28 21 30 21 3d 3d 61 26 26 31 21 3d 3d 61 7c 7c 21 30 21 3d 3d 62 26 26 31 21 3d 3d 62 29 7c 7c 21 28 21 31 21 3d 3d 61 26 26 30 21 3d 3d 61 7c 7c 21 31 21 3d 3d 62 26 26 30 21 3d 3d 62 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 26 26 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 7b 69 66 28 21 4a 77 63 28 61 2c 62 29 29 72 65 74 75 72 6e 21 31 7d Data Ascii: )if(!(c in b&&Iwc(a[c],b[c])))return!1;for(var d in b)if(!(d in a))return!1;return!0};Iwc=function(a,b){if(a===b\|\|!(!0!==a&&1!==a\|\|!0!==b&&1!==b)\|\|!(!1!==a&&0!==a\|\|!1!==b&&0!==b))return!0;if(a instanceof Object&&b instanceof Object){if(!Jwc(a,b))return!1}
2024-04-26 15:32:34 UTC	1255	IN	Data Raw: 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 45 28 61 2c 31 37 29 7d 3b 5f 2e 76 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 45 28 61 2c 32 30 29 7d 3b 5f 2e 77 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 45 28 61 2c 31 32 29 7d 3b 5f 2e 78 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 45 28 61 2c 31 29 7d 3b 5f 2e 79 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 45 28 61 2c 32 39 29 7d 3b 5f 2e 7a 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 45 28 61 2c 33 34 29 7d 3b 5f 2e 41 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 45 28 61 2c 36 29 7d 3b 5f 2e 42 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: z=function(a){return _.E(a,17)};_.vz=function(a){return _.E(a,20)};_.wz=function(a){return _.E(a,12)};_.xz=function(a){return _.E(a,1)};_.yz=function(a){return _.E(a,29)};_.zz=function(a){return _.E(a,34)};_.Az=function(a){return _.E(a,6)};_.Bz=function(a
2024-04-26 15:32:34 UTC	1255	IN	Data Raw: 73 2e 49 61 3d 5f 2e 70 28 61 29 7d 3b 5f 2e 47 28 61 4d 62 2c 5f 2e 74 29 3b 61 4d 62 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5f 2e 50 68 28 74 68 69 73 2c 31 2c 5f 2e 24 4c 62 2c 61 2c 62 29 7d 3b 61 4d 62 2e 77 62 3d 5b 31 5d 3b 62 4d 62 3d 5f 2e 4d 62 28 61 4d 62 29 3b 0a 5f 2e 63 4d 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 49 61 3d 5f 2e 70 28 61 29 7d 3b 5f 2e 47 28 5f 2e 63 4d 62 2c 5f 2e 74 29 3b 5f 2e 64 4d 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 49 61 3d 5f 2e 70 28 61 29 7d 3b 5f 2e 47 28 5f 2e 64 4d 62 2c 5f 2e 74 29 3b 5f 2e 64 4d 62 2e 77 62 3d 5b 31 5d 3b 5f 2e 64 4d 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 62 3d 22 74 71 37 50 78 Data Ascii: s.Ia=_.p(a)};_.G(aMb,_.t);aMb.prototype.addRule=function(a,b){return _.Ph(this,1,_.$Lb,a,b)};aMb.wb=[1];bMb=_.Mb(aMb);_.cMb=function(a){this.Ia=_.p(a)};_.G(_.cMb,_.t);_.dMb=function(a){this.Ia=_.p(a)};_.G(_.dMb,_.t);_.dMb.wb=[1];_.dMb.prototype.ob="tq7Px
2024-04-26 15:32:34 UTC	1255	IN	Data Raw: 22 7d 29 2c 5f 2e 75 53 61 2e 61 64 64 28 61 29 29 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 54 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5f 2e 63 63 28 61 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 20 61 3d 3d 3d 5f 2e 79 68 61 2e 74 6f 53 74 72 69 6e 67 28 29 3f 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 6a 73 6c 61 79 6f 75 74 7a 22 3a 61 7d 3b 5f 2e 55 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 79 79 63 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 61 3b 61 3d 5f 2e 63 63 28 61 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 20 61 3d 3d 3d 5f 2e 79 68 61 2e 74 6f 53 74 72 69 6e 67 28 29 3f 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 6a 73 6c 61 79 6f 75 74 7a 22 3a 61 7d 3b 0a 5f 2e 56 7a 3d 66 75 6e 63 74 Data Ascii: "}),_.uSa.add(a));return c};_.Tz=function(a){a=_.cc(a).toString();return a===_.yha.toString()?"about:invalid#zjslayoutz":a};_.Uz=function(a){if(yyc.test(a))return a;a=_.cc(a).toString();return a===_.yha.toString()?"about:invalid#zjslayoutz":a};_.Vz=funct
2024-04-26 15:32:34 UTC	1255	IN	Data Raw: 6e 22 7a 6a 73 6c 61 79 6f 75 74 7a 69 6e 76 61 6c 69 64 22 3b 6c 3d 67 5b 31 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6c 29 72 65 74 75 72 6e 22 7a 6a 73 6c 61 79 6f 75 74 7a 69 6e 76 61 6c 69 64 22 3b 67 3d 30 3d 3d 6c 2e 6c 65 6e 67 74 68 3f 30 3a 63 2e 6c 61 73 74 49 6e 64 65 78 3b 69 66 28 22 29 22 21 3d 61 2e 63 68 61 72 41 74 28 67 29 29 72 65 74 75 72 6e 22 7a 6a 73 6c 61 79 6f 75 74 7a 69 6e 76 61 6c 69 64 22 3b 68 3d 22 22 3b 31 3c 6c 2e 6c 65 6e 67 74 68 26 26 28 5f 2e 70 66 28 6c 2c 27 22 27 29 26 26 5f 2e 72 75 61 28 6c 2c 27 22 27 29 3f 28 6c 3d 6c 2e 73 75 62 73 74 72 69 6e 67 28 31 2c 6c 2e 6c 65 6e 67 74 68 2d 31 29 2c 68 3d 27 22 27 29 3a 5f 2e 70 66 28 6c 2c 22 27 22 29 26 26 5f 2e 72 75 61 28 6c 2c 22 27 22 29 26 26 28 6c 3d 6c 2e 73 Data Ascii: n"zjslayoutzinvalid";l=g[1];if(void 0===l)return"zjslayoutzinvalid";g=0==l.length?0:c.lastIndex;if(")"!=a.charAt(g))return"zjslayoutzinvalid";h="";1<l.length&&(_.pf(l,'"')&&_.rua(l,'"')?(l=l.substring(1,l.length-1),h='"'):_.pf(l,"'")&&_.rua(l,"'")&&(l=l.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49795	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:34 UTC	1509	OUT	GET /client_204?atyp=i&biw=1034&bih=870&ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
2024-04-26 15:32:34 UTC	1394	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-gnpKewa4C9rLWb4j6Ps5uw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:34 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-26-15; expires=Thu, 01-Jan-1970 00:00:00 GMT; path=/; domain=.google.com; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49792	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:34 UTC	1576	OUT	GET /gen_204?atyp=i&ct=rcm&cad=&ei=C8krZr7QHOyTwbkPuNyGwAw&ved=0ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ39UDCAw&jsname=gLFyf&zx=1714145552364&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
2024-04-26 15:32:34 UTC	1351	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-HAm2GPhxYXp3YrGqPoD8Iw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:34 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-26-15; expires=Sun, 26-May-2024 15:32:34 GMT; path=/; domain=.google.com; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49794	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:34 UTC	1576	OUT	GET /gen_204?atyp=i&ct=rcm&cad=&ei=C8krZr7QHOyTwbkPuNyGwAw&ved=0ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ39UDCAw&jsname=gLFyf&zx=1714145552380&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
2024-04-26 15:32:34 UTC	1351	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-6_ffLWmSzwKOCWe5bBSvcg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:34 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-26-15; expires=Sun, 26-May-2024 15:32:34 GMT; path=/; domain=.google.com; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49793	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:34 UTC	1576	OUT	GET /gen_204?atyp=i&ct=rcm&cad=&ei=C8krZr7QHOyTwbkPuNyGwAw&ved=0ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ39UDCAw&jsname=gLFyf&zx=1714145552500&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
2024-04-26 15:32:34 UTC	1351	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-02Mpa7Uz9UmieiFV2MX4VA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:34 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-26-15; expires=Sun, 26-May-2024 15:32:34 GMT; path=/; domain=.google.com; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49796	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:34 UTC	2058	OUT	POST /gen_204?atyp=csi&ei=C8krZr7QHOyTwbkPuNyGwAw&s=web&t=all&imn=8&ima=2&imad=1&imac=0&wh=870&aft=1&aftp=870&adh=tv.-188&cls=0.0010946031434360575&ime=0&imex=0&imeh=0&imeha=0&imehb=0&imea=0&imeb=0&imel=0&imed=0&scp=0&mem=ujhs.17,tjhs.21,jhsl.2173,dm.8&nv=ne.2,feid.6b7c86dd-5656-4e17-b8e8-3066ab3bf4fd&net=dl.1300,ect.3g,rtt.350&hp=&sys=hc.4&p=bs.false&rt=hst.197,cbt.197,sct.429,prt.558,xjspls.1199,xjsls.1199,afti.1311,afts.474,aft.1311,aftqf.1313,dcl.2394,xjses.3600,xjsee.3640,xjs.3640,lcp.566,fcp.364,wsrt.3948,cst.331,dnst.0,rdxt.3197,rqst.1107,rspt.695,sslt.331,rqstt.3536,unt.3203,cstt.3205,dit.6342&zx=1714145550215&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
2024-04-26 15:32:35 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-k-7dXrk1CrWPN2YVvpTktw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:34 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49797	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:34 UTC	1565	OUT	POST /gen_204?atyp=csi&ei=C8krZr7QHOyTwbkPuNyGwAw&s=jsa&jsi=s,st.8916,tni.0,atni.2,et.click,n.vZr2rb,cn.2,ie.0,vi.1&zx=1714145551503&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
2024-04-26 15:32:35 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-YSQ_bjTGJRQSDgNQtj7eLg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:35 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49798	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:34 UTC	1556	OUT	POST /gen_204?atyp=i&ei=C8krZr7QHOyTwbkPuNyGwAw&ved=0ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ39UDCAw&bl=jahV&s=web&zx=1714145551504&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
2024-04-26 15:32:35 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-wX77Fdxx2VYRPC-ezfm-pg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:35 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49799	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:35 UTC	1545	OUT	POST /gen_204?atyp=csi&ei=C8krZr7QHOyTwbkPuNyGwAw&s=jsa&jsi=s,st.9317,tni.0,atni.154,et.click,n.vZr2rb,cn.3,ie.0,vi.1&zx=1714145552057&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0
2024-04-26 15:32:35 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-y46KZ4LbIyJAcgwsxbVouQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:35 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49800	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:35 UTC	1556	OUT	POST /gen_204?atyp=i&ei=C8krZr7QHOyTwbkPuNyGwAw&ved=0ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ39UDCAw&bl=jahV&s=web&zx=1714145552180&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
2024-04-26 15:32:35 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-vq3h65jPNBeRRwyOGXx_hA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:35 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49801	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:35 UTC	1810	OUT	GET /xjs/_/ss/k=xjs.s.GGin1mxRzvU.L.W.O/am=gB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKACAmXAAAsCGAADgg0MAAIAAAAACAACAwgEAABAgIABgAAAgAAAAAAAAHAABAAAgBAACBECAAJIQkIEAAEQwwQCkAgDDjwAAIIAEAAAAoEAAAAEDESA8hAABgACQQAQCIIIAACAHCAEAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAAAAAAQ/d=0/br=1/rs=ACT90oGSC2kJ5MOZFnDJZQWz14iwbMFYQQ/m=y05UD,sy13c,sy1k1,sy1qj,sy1pf,sy1qq,sy2fh,sy13j,sy1pb,sy1pc,sy1pd,sy1qy,sy16x,sy3hx,sy6z8,epYOx,L1AAkb?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
2024-04-26 15:32:36 UTC	810	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/css; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 12727 Date: Fri, 26 Apr 2024 15:32:36 GMT Expires: Sat, 26 Apr 2025 15:32:36 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 26 Apr 2024 06:52:28 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:36 UTC	445	IN	Data Raw: 2e 6a 62 42 49 74 66 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 44 55 30 4e 4a 7b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 7d 2e 6c 50 33 4a 6f 66 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6e 4e 4d 75 4f 64 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 71 6c 69 2d 63 6f 6e 74 61 69 6e 65 72 2d 72 6f 74 61 74 65 20 31 35 36 38 2e 32 33 35 32 39 34 31 31 37 36 6d 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 3a 71 6c 69 2d 63 6f 6e 74 61 69 6e 65 72 2d 72 6f 74 61 74 65 20 31 Data Ascii: .jbBItf{display:block;position:relative}.DU0NJ{bottom:0;left:0;position:absolute;right:0;top:0}.lP3Jof{display:inline-block;position:relative}.nNMuOd{-webkit-animation:qli-container-rotate 1568.2352941176ms linear infinite;animation:qli-container-rotate 1
2024-04-26 15:32:36 UTC	1255	IN	Data Raw: 66 72 61 6d 65 73 20 71 6c 69 2d 63 6f 6e 74 61 69 6e 65 72 2d 72 6f 74 61 74 65 7b 66 72 6f 6d 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 7d 7d 2e 52 6f 4b 6d 68 62 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 70 61 63 69 74 79 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6e 4e 4d 75 4f 64 20 2e 56 51 64 65 61 62 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 71 6c 69 2d 66 69 6c 6c 2d 75 6e 66 69 6c 6c 2d 72 6f 74 61 74 Data Ascii: frames qli-container-rotate{from{-webkit-transform:rotate(0);transform:rotate(0)}to{-webkit-transform:rotate(1turn);transform:rotate(1turn)}}.RoKmhb{height:100%;opacity:0;position:absolute;width:100%}.nNMuOd .VQdeab{-webkit-animation:qli-fill-unfill-rotat
2024-04-26 15:32:36 UTC	1255	IN	Data Raw: 69 6e 69 74 65 20 62 6f 74 68 2c 71 6c 69 2d 67 72 65 65 6e 2d 66 61 64 65 2d 69 6e 2d 6f 75 74 20 35 33 33 32 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 3b 61 6e 69 6d 61 74 69 6f 6e 3a 71 6c 69 2d 66 69 6c 6c 2d 75 6e 66 69 6c 6c 2d 72 6f 74 61 74 65 20 35 33 33 32 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 2c 71 6c 69 2d 67 72 65 65 6e 2d 66 61 64 65 2d 69 6e 2d 6f 75 74 20 35 33 33 32 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 7d 2e 42 53 6e 4c 62 20 2e 6e 4e 4d 75 4f 64 20 2e 52 6f 4b 6d 68 62 7b 2d 77 65 Data Ascii: inite both,qli-green-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both;animation:qli-fill-unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,qli-green-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both}.BSnLb .nNMuOd .RoKmhb{-we
2024-04-26 15:32:36 UTC	1255	IN	Data Raw: 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 30 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 30 35 64 65 67 29 7d 35 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 35 34 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 35 34 30 64 65 67 29 7d 36 32 2e 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 36 37 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 36 37 35 64 65 67 29 7d 37 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 38 31 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 38 31 30 64 65 67 29 7d 38 37 2e 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 Data Ascii: transform:rotate(405deg);transform:rotate(405deg)}50%{-webkit-transform:rotate(540deg);transform:rotate(540deg)}62.5%{-webkit-transform:rotate(675deg);transform:rotate(675deg)}75%{-webkit-transform:rotate(810deg);transform:rotate(810deg)}87.5%{-webkit-tra
2024-04-26 15:32:36 UTC	1255	IN	Data Raw: 3a 30 7d 37 35 25 7b 6f 70 61 63 69 74 79 3a 30 2e 39 39 7d 39 30 25 7b 6f 70 61 63 69 74 79 3a 30 2e 39 39 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 7d 2e 62 65 44 51 50 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 35 30 25 7d 2e 46 63 58 66 69 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 34 35 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 25 7d 2e 53 50 4b 46 6d 63 7b 62 6f 72 64 65 72 2d 72 61 64 Data Ascii: :0}75%{opacity:0.99}90%{opacity:0.99}100%{opacity:0}}.beDQP{display:inline-block;height:100%;overflow:hidden;position:relative;width:50%}.FcXfi{box-sizing:border-box;height:100%;left:45%;overflow:hidden;position:absolute;top:0;width:10%}.SPKFmc{border-rad
2024-04-26 15:32:36 UTC	1255	IN	Data Raw: 33 33 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 7d 2e 42 53 6e 4c 62 20 2e 6e 4e 4d 75 4f 64 20 2e 4a 37 75 75 55 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 71 6c 69 2d 6c 65 66 74 2d 73 70 69 6e 20 31 33 33 33 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 3b 61 6e 69 6d 61 74 69 6f 6e 3a 71 6c 69 2d 6c 65 66 74 2d 73 70 69 6e 20 31 33 33 33 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 3b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 45 70 46 4e 57 29 3b 62 6f 72 64 65 72 Data Ascii: 33ms cubic-bezier(0.4,0,0.2,1) infinite both}.BSnLb .nNMuOd .J7uuUe{-webkit-animation:qli-left-spin 1333ms cubic-bezier(0.4,0,0.2,1) infinite both;animation:qli-left-spin 1333ms cubic-bezier(0.4,0,0.2,1) infinite both;border-left-color:var(--EpFNW);border
2024-04-26 15:32:36 UTC	1255	IN	Data Raw: 71 6c 69 2d 72 69 67 68 74 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 33 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 33 30 64 65 67 29 7d 35 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 35 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 33 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 33 30 64 65 67 29 7d 7d 63 2d 77 69 7a 7b 63 6f 6e 74 61 69 6e 3a 73 74 79 6c 65 7d 63 2d 77 69 7a 3e 63 2d 64 61 74 61 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 63 2d 77 69 7a 2e 72 Data Ascii: qli-right-spin{0%{-webkit-transform:rotate(-130deg);transform:rotate(-130deg)}50%{-webkit-transform:rotate(5deg);transform:rotate(5deg)}100%{-webkit-transform:rotate(-130deg);transform:rotate(-130deg)}}c-wiz{contain:style}c-wiz>c-data{display:none}c-wiz.r
2024-04-26 15:32:36 UTC	217	IN	Data Raw: 70 78 7d 2e 67 49 59 4a 55 63 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 28 32 34 38 2c 32 34 39 2c 32 35 30 29 3b 62 6f 72 64 65 72 3a 31 70 78 20 64 61 73 68 65 64 20 23 63 30 63 30 63 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d Data Ascii: px}.gIYJUc{background:rgb(248,249,250);border:1px dashed #c0c0c0;border-radius:8px;box-sizing:border-box;display:-webkit-box;display:-webkit-flex;display:flex;-webkit-box-orient:vertical;-webkit-box-direction:normal;-
2024-04-26 15:32:36 UTC	1255	IN	Data Raw: 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 68 65 69 67 68 74 3a 32 38 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 4e 64 6a 34 52 7b 62 6f 72 64 65 72 3a 31 70 78 20 64 61 73 68 65 64 20 23 63 30 63 30 63 30 7d 2e 69 64 35 76 4d 62 7b 62 6f 72 64 65 72 3a 31 70 78 20 64 61 73 68 65 64 20 23 63 30 63 30 63 30 7d 2e 66 36 47 41 30 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 2d Data Ascii: webkit-flex-direction:column;flex-direction:column;-webkit-box-flex:1;-webkit-flex-grow:1;flex-grow:1;height:280px;position:relative;width:100%}.Ndj4R{border:1px dashed #c0c0c0}.id5vMb{border:1px dashed #c0c0c0}.f6GA0{height:100%;-webkit-box-pack:center;-
2024-04-26 15:32:36 UTC	1255	IN	Data Raw: 66 6c 65 78 3a 31 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3a 31 3b 66 6c 65 78 3a 31 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 47 6f 6f 67 6c 65 20 53 61 6e 73 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 3a 35 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 55 61 37 59 75 66 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 73 65 6c 66 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 73 65 6c 66 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 Data Ascii: flex:1;-webkit-flex:1;flex:1;font-family:"Google Sans",Roboto,Arial,sans-serif;font-size:12px;padding:5px;text-align:center}.Ua7Yuf{-webkit-box-align:center;-webkit-align-items:center;align-items:center;-webkit-align-self:center;align-self:center;backgrou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49802	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:35 UTC	3103	OUT	GET /xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=sb_wiz,aa,abd,sy1ee,sy1ek,sy1el,sy1ej,sy1em,sy1yg,async,bgd,sy3z4,sy3z5,foot,sy2jo,sy6iz,kyn,sy1k9,lli,sf,sy1e8,sy1e9,sy3fx,sonic,TxCJfd,sy6y9,sy6ya,qzxzOb,IsdWVc,sy15m,sy170,sy173,sy316,sy6y8,syeq,sy155,sy6yc,spch,tl,MpJwZc,UUJqVe,sy7m,sOXFj,sy7l,s39S4,NTMZac,nAFL3,oGtAuc,sy8f,sy8g,q0xTif,y05UD,sy12g,sy13c,sy13a,sy13b,sy13e,sy13g,sy13h,sy13d,sy13i,sy1k1,sy1k2,sy1ph,sy1pi,sy1qf,sy1qj,sy1p9,sy1qn,sy1pr,sy1pf,sy1po,sy1pp,sy1qq,sy1qr,sy2ge,sy2gf,sy2fh,sy2lf,sy13j,sy13k,sy1pb,sy1pc,sy1pd,sy13x,sy1pg,sy175,sy1pj,syf2,sy142,sy1pk,sy1pl,sy1pm,sy1qy,sy1r0,sy16x,sy3hx,sy3hy,sy6z8,epYOx,synw,synv,rtH1bd,syo2,syxb,syxr,syo0,sy1ef,sy1eg,sy1eh,sy2ot,sy2ou,sy2ov,EkevXb,syzp,syzq,syzr,syzo,syzs,syzn,sy1cd,SMquOb,syzy,sy1ce,sy1cf,sy1cg,sy1ch,sy1ci,d5EhJe,sy1cj,sy1ck,sy1cl,syzt,syzu,sy1au,sy1cn,sy1co,zx30Y,syyf,sy1d9,sy1da,sy1db,sy1dc,sy1dd,sy1df,sy1de,T1HOxc,sy1dh,sy1di,DQfvme,syzl,sy1dj,Wo3n8,synz,L1AAkb,sy1f2,SZXsif,sy1zj,fiAufb,syn5,syos,syor,sy2xd,sy3yf,sy40p,sy40q,sy40o,sy4e7,sYEX8b,sy4u7,GU4Gab,sy3a5,T5VV,sy1zu,aDVF7,sy4u9,rhYw1b,E9M6Uc,Zilivc,syzw,sy11c,sy1cp,sy10i,sy10j,sy10e,sy10f,sy10g,sy10h,sy10d,sy10l,sy10m,sy10k,sy10n,sy10o,sy113,sy114,sy10u,sy10y,sy10z,sy110,sy111,sy10v,sy115,sy112,sy10s,sy10t,sy10r,sy10q,sy12p,sy1ii,sy1ik,sy1ij,sy1im,sy1il,sy1ip,sy1io,sy2mu,sy2mx,sy2n5,sy2n2,sy2n6,sy116,sy118,sy119,sy2mv,sy2n7,sy2n9,Hlw0zd,M6QgBb,sy2ni,sy2nj,EO13pd,RagDlc?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
2024-04-26 15:32:35 UTC	818	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 276060 Date: Fri, 26 Apr 2024 15:32:35 GMT Expires: Sat, 26 Apr 2025 15:32:35 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 26 Apr 2024 06:52:27 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:35 UTC	437	IN	Data Raw: 74 68 69 73 2e 5f 73 3d 74 68 69 73 2e 5f 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 7a 28 22 73 62 5f 77 69 7a 22 29 3b 0a 0a 5f 2e 41 28 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 7a 28 22 61 61 22 29 3b 0a 0a 5f 2e 41 28 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 7a 28 22 61 62 64 22 29 3b 0a 76 61 72 20 7a 6a 6d 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 22 22 2c 63 3d 32 31 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 33 21 3d 64 25 34 26 26 28 62 2b 3d 53 74 72 69 6e Data Ascii: this._s=this._s\|\|{};(function(_){var window=this;try{_.z("sb_wiz");_.A();}catch(e){_._DumpException(e)}try{_.z("aa");_.A();}catch(e){_._DumpException(e)}try{_.z("abd");var zjm=function(a){for(var b="",c=21,d=0;d<a.length;d++)3!=d%4&&(b+=Strin
2024-04-26 15:32:35 UTC	1255	IN	Data Raw: 42 6a 6d 5d 2c 62 3a 21 5f 2e 4c 71 6b 28 43 6a 6d 29 7d 3b 62 5b 44 6a 6d 5d 3d 7b 65 3a 21 21 61 5b 44 6a 6d 5d 2c 62 3a 21 5f 2e 4c 71 6b 28 45 6a 6d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 2c 47 6a 6d 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 2c 63 3b 66 6f 72 28 63 20 69 6e 20 61 29 61 5b 63 5d 2e 65 26 26 62 2e 70 75 73 68 28 63 2b 22 3a 22 2b 28 61 5b 63 5d 2e 62 3f 22 31 22 3a 22 30 22 29 29 3b 72 65 74 75 72 6e 20 62 2e 6a 6f 69 6e 28 22 2c 22 29 7d 2c 49 6a 6d 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 53 74 72 69 6e 67 28 61 29 3b 62 26 26 28 61 2b 3d 22 2c 22 2b 62 29 3b 67 6f 6f 67 6c 65 2e 6c 6f 67 28 48 6a 6d 2c 61 29 7d 2c 4a 6a 6d 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 3d 0a 76 6f 69 64 20 30 3d 3d Data Ascii: Bjm],b:!_.Lqk(Cjm)};b[Djm]={e:!!a[Djm],b:!_.Lqk(Ejm)};return b},Gjm=function(a){var b=[],c;for(c in a)a[c].e&&b.push(c+":"+(a[c].b?"1":"0"));return b.join(",")},Ijm=function(a,b){a=String(a);b&&(a+=","+b);google.log(Hjm,a)},Jjm=function(a,b,c){c=void 0==
2024-04-26 15:32:35 UTC	1255	IN	Data Raw: 22 6e 22 3a 22 73 22 2c 61 29 7d 3b 6f 54 64 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 6f 72 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 63 61 63 68 65 2e 73 65 74 28 61 2c 62 2e 73 65 72 69 61 6c 69 7a 65 28 29 29 7d 3b 6f 54 64 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 3d 74 68 69 73 2e 63 61 63 68 65 2e 67 65 74 28 61 29 29 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6b 61 28 61 2e 73 6c 69 63 65 28 29 29 7d 63 61 74 63 68 28 62 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 0a 6f 54 64 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 63 61 63 68 65 2e 72 65 6d 6f 76 65 28 61 29 7d 3b 6f 54 64 2e 70 72 6f 74 6f 74 79 70 65 2e Data Ascii: "n":"s",a)};oTd.prototype.store=function(a,b){this.cache.set(a,b.serialize())};oTd.prototype.get=function(a){if(a=this.cache.get(a))try{return this.ka(a.slice())}catch(b){}return null};oTd.prototype.remove=function(a){this.cache.remove(a)};oTd.prototype.
2024-04-26 15:32:35 UTC	1255	IN	Data Raw: 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 68 45 28 61 2e 63 6f 6e 74 61 69 6e 65 72 49 64 2c 63 2e 78 4d 28 29 2c 64 29 7d 3b 5f 2e 74 54 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 73 54 64 28 61 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 62 28 63 29 3b 72 65 74 75 72 6e 21 30 7d 29 7d 3b 0a 73 54 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 28 61 29 26 26 61 2e 63 68 69 6c 64 72 65 6e 26 26 5f 2e 4c 61 28 61 2e 63 68 69 6c 64 72 65 6e 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 73 54 64 28 63 2c 62 29 7d 29 7d 3b 5f 2e 68 45 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 69 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 72 68 22 29 3b 7d 3b 75 54 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 30 5d 2c 63 3d 61 Data Ascii: return new _.hE(a.containerId,c.xM(),d)};_.tTd=function(a,b){sTd(a,function(c){b(c);return!0})};sTd=function(a,b){b(a)&&a.children&&_.La(a.children,function(c){sTd(c,b)})};_.hE.prototype.print=function(){throw Error("rh");};uTd=function(a){var b=a[0],c=a
2024-04-26 15:32:35 UTC	1255	IN	Data Raw: 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 7a 54 64 28 74 68 69 73 2c 61 2c 62 2c 22 61 66 74 65 72 62 65 67 69 6e 22 29 7d 3b 0a 76 61 72 20 7a 54 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 41 72 72 61 79 2e 66 72 6f 6d 28 5f 2e 69 6c 28 22 53 43 52 49 50 54 22 2c 63 29 29 3b 5f 2e 6b 69 61 28 63 2c 64 2c 5f 2e 53 65 28 62 2e 68 74 6d 6c 29 29 3b 78 54 64 26 26 79 54 64 28 63 2c 6e 65 77 20 53 65 74 28 65 29 29 3b 65 3d 7b 7d 3b 61 2e 61 74 74 72 69 62 75 74 65 73 26 26 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 65 2c 61 2e 61 74 74 72 69 62 75 74 65 73 29 3b 69 66 28 62 2e 61 74 74 72 69 62 75 74 65 73 29 7b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 65 2c 62 2e 61 74 74 72 69 62 75 74 65 73 29 3b 66 6f 72 28 76 61 72 20 66 Data Ascii: (a,b){return zTd(this,a,b,"afterbegin")};var zTd=function(a,b,c,d){var e=Array.from(_.il("SCRIPT",c));_.kia(c,d,_.Se(b.html));xTd&&yTd(c,new Set(e));e={};a.attributes&&Object.assign(e,a.attributes);if(b.attributes){Object.assign(e,b.attributes);for(var f
2024-04-26 15:32:35 UTC	1255	IN	Data Raw: 63 2e 63 6f 6e 74 61 69 6e 65 72 49 64 29 7b 76 61 72 20 64 3d 5f 2e 70 54 64 2e 67 65 74 28 63 2e 69 5a 61 29 3b 64 3f 28 63 3d 64 2e 78 4d 28 29 2c 5f 2e 70 54 64 2e 73 74 6f 72 65 28 63 2c 64 29 29 3a 5f 2e 59 63 28 45 72 72 6f 72 28 22 73 68 22 29 2c 7b 5a 65 3a 7b 6b 3a 61 2c 63 3a 63 2e 63 6f 6e 74 61 69 6e 65 72 49 64 7d 7d 29 7d 7d 29 7d 3b 5f 2e 72 54 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 78 4d 28 29 3b 5f 2e 70 54 64 2e 63 61 63 68 65 2e 73 65 74 28 62 2c 61 2e 73 65 72 69 61 6c 69 7a 65 28 29 2c 22 78 22 29 7d 3b 0a 5f 2e 70 54 64 3d 6e 65 77 20 6f 54 64 28 7b 6e 61 6d 65 3a 22 61 63 74 61 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 73 68 69 66 74 28 29 3b 61 5b 34 5d 26 26 28 61 5b 34 5d 3d 61 5b 34 5d 2e 6d Data Ascii: c.containerId){var d=_.pTd.get(c.iZa);d?(c=d.xM(),_.pTd.store(c,d)):_.Yc(Error("sh"),{Ze:{k:a,c:c.containerId}})}})};_.rTd=function(a){var b=a.xM();_.pTd.cache.set(b,a.serialize(),"x")};_.pTd=new oTd({name:"acta"},function(a){a.shift();a[4]&&(a[4]=a[4].m
2024-04-26 15:32:35 UTC	1255	IN	Data Raw: 2e 68 61 73 28 64 29 26 26 28 62 2e 68 61 73 28 64 29 7c 7c 62 2e 73 65 74 28 64 2c 53 74 72 69 6e 67 28 61 2e 67 65 74 28 64 29 29 29 2c 61 2e 64 65 6c 65 74 65 28 64 29 29 3b 72 65 74 75 72 6e 7b 63 6f 6e 74 65 78 74 3a 61 2c 75 66 3a 62 7d 7d 3b 42 55 64 3d 5b 22 71 22 2c 22 73 74 61 72 74 22 5d 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 44 55 64 3d 5f 2e 57 70 28 22 76 50 71 43 70 22 2c 5b 5d 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 76 61 72 20 47 55 64 3b 5f 2e 45 55 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 61 7c 7c 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 4d 61 70 3f 6e 65 77 20 Data Ascii: .has(d)&&(b.has(d)\|\|b.set(d,String(a.get(d))),a.delete(d));return{context:a,uf:b}};BUd=["q","start"];}catch(e){_._DumpException(e)}try{_.DUd=_.Wp("vPqCp",[]);}catch(e){_._DumpException(e)}try{var GUd;_.EUd=function(a){return!a\|\|a instanceof Map?new
2024-04-26 15:32:35 UTC	1255	IN	Data Raw: 65 66 61 75 6c 74 3a 5f 2e 59 63 28 45 72 72 6f 72 28 22 73 66 60 22 2b 72 2e 6d 65 74 61 64 61 74 61 2e 44 4e 61 28 29 29 29 2c 72 2e 6d 65 74 61 64 61 74 61 2e 44 4e 61 28 29 7d 6c 61 2e 48 62 28 30 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 4c 3d 5f 2e 6b 4d 62 28 72 2e 62 6f 64 79 2c 5f 2e 78 4d 62 2c 0a 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 59 63 28 45 72 72 6f 72 28 22 78 68 22 29 2c 7b 6c 65 76 65 6c 3a 30 2c 5a 65 3a 7b 6c 3a 22 22 2b 72 2e 62 6f 64 79 2e 6c 65 6e 67 74 68 2c 74 3a 61 2e 51 48 7d 7d 29 7d 29 2c 5f 2e 74 67 28 6c 61 2c 34 29 2c 6c 61 2e 79 69 65 6c 64 28 5f 2e 6b 66 28 76 6f 69 64 20 30 2c 7b 73 65 72 76 69 63 65 3a 7b 72 65 6e 64 65 72 65 72 3a 5f 2e 44 55 64 7d 7d 29 2c 36 29 3b 63 61 73 65 20 36 3a 72 65 Data Ascii: efault:_.Yc(Error("sf`"+r.metadata.DNa())),r.metadata.DNa()}la.Hb(0);break;case 2:return L=_.kMb(r.body,_.xMb,function(){_.Yc(Error("xh"),{level:0,Ze:{l:""+r.body.length,t:a.QH}})}),_.tg(la,4),la.yield(_.kf(void 0,{service:{renderer:_.DUd}}),6);case 6:re
2024-04-26 15:32:36 UTC	1255	IN	Data Raw: 6a 65 63 74 2e 76 61 6c 75 65 73 28 49 55 64 29 29 3b 22 22 21 3d 3d 62 26 26 28 5f 2e 6e 6d 2e 61 64 64 28 61 2e 65 6c 65 6d 65 6e 74 2c 49 55 64 5b 62 5d 29 2c 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 62 29 29 7d 3b 4c 55 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 5f 2e 6e 6d 2e 72 65 6d 6f 76 65 41 6c 6c 28 61 2e 65 6c 65 6d 65 6e 74 2c 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 28 5f 2e 4d 55 64 29 29 3b 5f 2e 6e 6d 2e 61 64 64 28 61 2e 65 6c 65 6d 65 6e 74 2c 5f 2e 4d 55 64 5b 62 5d 29 3b 5f 2e 4e 55 64 28 61 2c 22 22 29 3b 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 62 29 7d 3b 5f 2e 4a 55 64 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 4e 75 28 74 68 69 73 2e 65 6c Data Ascii: ject.values(IUd));""!==b&&(_.nm.add(a.element,IUd[b]),a.dispatchEvent(b))};LUd=function(a,b){_.nm.removeAll(a.element,Object.values(_.MUd));_.nm.add(a.element,_.MUd[b]);_.NUd(a,"");a.dispatchEvent(b)};_.JUd.prototype.dispatchEvent=function(a){_.Nu(this.el
2024-04-26 15:32:36 UTC	1255	IN	Data Raw: 5f 2e 53 55 64 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 52 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 73 65 74 28 22 5f 66 6d 74 22 2c 22 70 63 22 29 3b 76 61 72 20 61 3d 5f 2e 4c 63 28 74 68 69 73 2e 74 61 72 67 65 74 2e 65 6c 65 6d 65 6e 74 29 2c 62 3d 5f 2e 45 63 28 74 68 69 73 2e 74 61 72 67 65 74 2e 65 6c 65 6d 65 6e 74 29 2c 63 3d 74 68 69 73 2e 74 72 69 67 67 65 72 3f 5f 2e 4c 63 28 74 68 69 73 2e 74 72 69 67 67 65 72 29 3a 76 6f 69 64 20 30 2c 64 3d 74 68 69 73 2e 74 72 69 67 67 65 72 26 26 5f 2e 53 69 61 28 74 68 69 73 2e 74 72 69 67 67 65 72 29 7c 7c 76 6f 69 64 20 30 2c 65 2c 66 3b 61 3d 5f 2e 55 4c 62 28 74 68 69 73 2e 74 61 72 67 65 74 2e 74 79 70 65 2c 74 68 69 73 2e 63 6f 6e 74 65 78 74 Data Ascii: _.SUd.prototype.sendRequest=function(){this.context.set("_fmt","pc");var a=_.Lc(this.target.element),b=_.Ec(this.target.element),c=this.trigger?_.Lc(this.trigger):void 0,d=this.trigger&&_.Sia(this.trigger)\|\|void 0,e,f;a=_.ULb(this.target.type,this.context

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49803	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:35 UTC	1400	OUT	GET /logos/fnbx/zrp/full_yeti.json HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
2024-04-26 15:32:36 UTC	739	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="client-side-funbox" Report-To: {"group":"client-side-funbox","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/client-side-funbox"}]} Content-Length: 2408507 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 26 Apr 2024 15:32:35 GMT Expires: Fri, 26 Apr 2024 16:22:35 GMT Cache-Control: public, max-age=3000 Last-Modified: Tue, 07 Sep 2021 21:00:00 GMT Content-Type: application/json Vary: Accept-Encoding Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:36 UTC	516	IN	Data Raw: 7b 22 76 22 3a 22 35 2e 35 2e 31 30 22 2c 22 66 72 22 3a 32 34 2c 22 69 70 22 3a 30 2c 22 6f 70 22 3a 31 31 36 35 2c 22 77 22 3a 34 31 31 2c 22 68 22 3a 32 35 30 2c 22 6e 6d 22 3a 22 45 58 50 4f 52 54 22 2c 22 64 64 64 22 3a 30 2c 22 61 73 73 65 74 73 22 3a 5b 7b 22 69 64 22 3a 22 63 6f 6d 70 5f 30 22 2c 22 6c 61 79 65 72 73 22 3a 5b 7b 22 64 64 64 22 3a 30 2c 22 69 6e 64 22 3a 31 2c 22 74 79 22 3a 30 2c 22 6e 6d 22 3a 22 72 69 70 70 6c 65 5f 61 6e 6d 22 2c 22 72 65 66 49 64 22 3a 22 63 6f 6d 70 5f 31 22 2c 22 73 72 22 3a 31 2c 22 6b 73 22 3a 7b 22 6f 22 3a 7b 22 61 22 3a 31 2c 22 6b 22 3a 5b 7b 22 69 22 3a 7b 22 78 22 3a 5b 30 2e 38 33 33 5d 2c 22 79 22 3a 5b 30 2e 38 33 33 5d 7d 2c 22 6f 22 3a 7b 22 78 22 3a 5b 30 2e 31 36 37 5d 2c 22 79 22 3a 5b 30 2e Data Ascii: {"v":"5.5.10","fr":24,"ip":0,"op":1165,"w":411,"h":250,"nm":"EXPORT","ddd":0,"assets":[{"id":"comp_0","layers":[{"ddd":0,"ind":1,"ty":0,"nm":"ripple_anm","refId":"comp_1","sr":1,"ks":{"o":{"a":1,"k":[{"i":{"x":[0.833],"y":[0.833]},"o":{"x":[0.167],"y":[0.
2024-04-26 15:32:36 UTC	1255	IN	Data Raw: 7b 22 69 22 3a 7b 22 78 22 3a 30 2e 35 32 2c 22 79 22 3a 30 2e 39 35 35 7d 2c 22 6f 22 3a 7b 22 78 22 3a 30 2e 34 38 2c 22 79 22 3a 30 2e 30 34 35 7d 2c 22 74 22 3a 39 36 32 2c 22 73 22 3a 5b 37 30 30 2c 34 35 36 2c 30 5d 2c 22 74 6f 22 3a 5b 2d 30 2e 36 36 37 2c 30 2c 30 5d 2c 22 74 69 22 3a 5b 2d 30 2e 30 38 33 2c 30 2c 30 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 30 2e 35 32 2c 22 79 22 3a 30 2e 39 36 7d 2c 22 6f 22 3a 7b 22 78 22 3a 30 2e 34 38 2c 22 79 22 3a 30 2e 30 34 7d 2c 22 74 22 3a 39 37 36 2c 22 73 22 3a 5b 36 39 36 2c 34 35 36 2c 30 5d 2c 22 74 6f 22 3a 5b 30 2e 30 38 33 2c 30 2c 30 5d 2c 22 74 69 22 3a 5b 30 2c 30 2c 30 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 30 2e 35 32 2c 22 79 22 3a 30 2e 39 36 7d 2c 22 6f 22 3a 7b 22 78 22 3a 30 2e 34 38 2c Data Ascii: {"i":{"x":0.52,"y":0.955},"o":{"x":0.48,"y":0.045},"t":962,"s":[700,456,0],"to":[-0.667,0,0],"ti":[-0.083,0,0]},{"i":{"x":0.52,"y":0.96},"o":{"x":0.48,"y":0.04},"t":976,"s":[696,456,0],"to":[0.083,0,0],"ti":[0,0,0]},{"i":{"x":0.52,"y":0.96},"o":{"x":0.48,
2024-04-26 15:32:36 UTC	1255	IN	Data Raw: 2e 34 37 2c 30 2c 30 5d 2c 22 74 69 22 3a 5b 30 2e 33 38 31 2c 30 2c 30 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 30 2e 36 31 35 2c 22 79 22 3a 30 2e 39 36 38 7d 2c 22 6f 22 3a 7b 22 78 22 3a 30 2e 33 32 34 2c 22 79 22 3a 30 2e 30 32 36 7d 2c 22 74 22 3a 31 31 34 36 2c 22 73 22 3a 5b 36 36 37 2e 35 31 33 2c 34 35 36 2c 30 5d 2c 22 74 6f 22 3a 5b 2d 30 2e 36 36 34 2c 30 2c 30 5d 2c 22 74 69 22 3a 5b 30 2e 37 37 39 2c 30 2c 30 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 30 2e 38 33 33 2c 22 79 22 3a 30 2e 38 33 33 7d 2c 22 6f 22 3a 7b 22 78 22 3a 30 2e 32 37 31 2c 22 79 22 3a 30 2e 34 34 33 7d 2c 22 74 22 3a 31 31 35 30 2c 22 73 22 3a 5b 36 34 33 2e 30 32 2c 34 36 30 2c 30 5d 2c 22 74 6f 22 3a 5b 2d 30 2e 36 30 32 2c 30 2c 30 5d 2c 22 74 69 22 3a 5b 2d 30 2e 30 32 Data Ascii: .47,0,0],"ti":[0.381,0,0]},{"i":{"x":0.615,"y":0.968},"o":{"x":0.324,"y":0.026},"t":1146,"s":[667.513,456,0],"to":[-0.664,0,0],"ti":[0.779,0,0]},{"i":{"x":0.833,"y":0.833},"o":{"x":0.271,"y":0.443},"t":1150,"s":[643.02,460,0],"to":[-0.602,0,0],"ti":[-0.02
2024-04-26 15:32:36 UTC	1255	IN	Data Raw: 22 74 6f 22 3a 5b 2d 30 2e 36 36 37 2c 30 2c 30 5d 2c 22 74 69 22 3a 5b 2d 30 2e 30 38 33 2c 30 2c 30 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 30 2e 35 32 2c 22 79 22 3a 30 2e 39 36 7d 2c 22 6f 22 3a 7b 22 78 22 3a 30 2e 34 38 2c 22 79 22 3a 30 2e 30 34 7d 2c 22 74 22 3a 31 30 30 33 2c 22 73 22 3a 5b 36 39 36 2c 34 35 36 2c 30 5d 2c 22 74 6f 22 3a 5b 30 2e 30 38 33 2c 30 2c 30 5d 2c 22 74 69 22 3a 5b 30 2c 30 2c 30 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 30 2e 35 32 2c 22 79 22 3a 30 2e 39 36 7d 2c 22 6f 22 3a 7b 22 78 22 3a 30 2e 34 38 2c 22 79 22 3a 30 2e 30 34 7d 2c 22 74 22 3a 31 30 31 37 2c 22 73 22 3a 5b 37 30 30 2e 35 2c 34 35 36 2c 30 5d 2c 22 74 6f 22 3a 5b 30 2c 30 2c 30 5d 2c 22 74 69 22 3a 5b 30 2e 32 35 2c 30 2c 30 5d 7d 2c 7b 22 69 22 3a 7b 22 Data Ascii: "to":[-0.667,0,0],"ti":[-0.083,0,0]},{"i":{"x":0.52,"y":0.96},"o":{"x":0.48,"y":0.04},"t":1003,"s":[696,456,0],"to":[0.083,0,0],"ti":[0,0,0]},{"i":{"x":0.52,"y":0.96},"o":{"x":0.48,"y":0.04},"t":1017,"s":[700.5,456,0],"to":[0,0,0],"ti":[0.25,0,0]},{"i":{"
2024-04-26 15:32:36 UTC	1255	IN	Data Raw: 30 2e 30 32 36 7d 2c 22 74 22 3a 31 31 37 33 2c 22 73 22 3a 5b 36 36 37 2e 35 31 33 2c 34 35 36 2c 30 5d 2c 22 74 6f 22 3a 5b 2d 30 2e 36 36 34 2c 30 2c 30 5d 2c 22 74 69 22 3a 5b 30 2e 37 37 39 2c 30 2c 30 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 30 2e 38 33 33 2c 22 79 22 3a 30 2e 38 33 33 7d 2c 22 6f 22 3a 7b 22 78 22 3a 30 2e 32 37 31 2c 22 79 22 3a 30 2e 34 34 33 7d 2c 22 74 22 3a 31 31 37 37 2c 22 73 22 3a 5b 36 34 33 2e 30 32 2c 34 36 30 2c 30 5d 2c 22 74 6f 22 3a 5b 2d 30 2e 36 30 32 2c 30 2c 30 5d 2c 22 74 69 22 3a 5b 2d 30 2e 30 32 33 2c 30 2c 30 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 30 2e 38 33 33 2c 22 79 22 3a 30 2e 38 33 33 7d 2c 22 6f 22 3a 7b 22 78 22 3a 30 2e 31 36 37 2c 22 79 22 3a 30 2e 31 36 37 7d 2c 22 74 22 3a 31 31 38 31 2c 22 73 22 Data Ascii: 0.026},"t":1173,"s":[667.513,456,0],"to":[-0.664,0,0],"ti":[0.779,0,0]},{"i":{"x":0.833,"y":0.833},"o":{"x":0.271,"y":0.443},"t":1177,"s":[643.02,460,0],"to":[-0.602,0,0],"ti":[-0.023,0,0]},{"i":{"x":0.833,"y":0.833},"o":{"x":0.167,"y":0.167},"t":1181,"s"
2024-04-26 15:32:36 UTC	1255	IN	Data Raw: 30 30 2c 22 69 78 22 3a 31 31 7d 2c 22 72 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 30 2c 22 69 78 22 3a 31 30 7d 2c 22 70 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 37 31 31 2e 35 2c 34 35 36 2c 30 5d 2c 22 69 78 22 3a 32 7d 2c 22 61 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 37 31 31 2e 35 2c 34 35 36 2c 30 5d 2c 22 69 78 22 3a 31 7d 2c 22 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 31 30 30 2c 31 30 30 2c 31 30 30 5d 2c 22 69 78 22 3a 36 7d 7d 2c 22 61 6f 22 3a 30 2c 22 77 22 3a 31 34 32 33 2c 22 68 22 3a 39 31 32 2c 22 69 70 22 3a 39 35 30 2c 22 6f 70 22 3a 39 38 39 2c 22 73 74 22 3a 39 35 30 2c 22 62 6d 22 3a 30 7d 2c 7b 22 64 64 64 22 3a 30 2c 22 69 6e 64 22 3a 35 2c 22 74 79 22 3a 30 2c 22 6e 6d 22 3a 22 72 69 70 70 6c 65 5f 61 6e 6d 22 2c 22 72 65 66 Data Ascii: 00,"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"a":0,"k":[711.5,456,0],"ix":2},"a":{"a":0,"k":[711.5,456,0],"ix":1},"s":{"a":0,"k":[100,100,100],"ix":6}},"ao":0,"w":1423,"h":912,"ip":950,"op":989,"st":950,"bm":0},{"ddd":0,"ind":5,"ty":0,"nm":"ripple_anm","ref
2024-04-26 15:32:36 UTC	1255	IN	Data Raw: 22 3a 5b 36 39 30 2c 34 35 36 2c 30 5d 2c 22 74 6f 22 3a 5b 30 2c 30 2c 30 5d 2c 22 74 69 22 3a 5b 30 2c 30 2c 30 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 30 2e 35 38 2c 22 79 22 3a 31 7d 2c 22 6f 22 3a 7b 22 78 22 3a 30 2e 30 30 31 2c 22 79 22 3a 30 7d 2c 22 74 22 3a 37 34 32 2c 22 73 22 3a 5b 36 39 30 2c 34 35 36 2c 30 5d 2c 22 74 6f 22 3a 5b 31 2e 36 36 37 2c 30 2c 30 5d 2c 22 74 69 22 3a 5b 2d 31 2e 36 36 37 2c 30 2c 30 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 30 2e 38 33 33 2c 22 79 22 3a 30 2e 38 33 33 7d 2c 22 6f 22 3a 7b 22 78 22 3a 30 2e 30 30 31 2c 22 79 22 3a 30 2e 30 30 31 7d 2c 22 74 22 3a 37 35 36 2c 22 73 22 3a 5b 37 30 30 2c 34 35 36 2c 30 5d 2c 22 74 6f 22 3a 5b 30 2c 30 2c 30 5d 2c 22 74 69 22 3a 5b 30 2c 30 2c 30 5d 7d 2c 7b 22 69 22 3a 7b Data Ascii: ":[690,456,0],"to":[0,0,0],"ti":[0,0,0]},{"i":{"x":0.58,"y":1},"o":{"x":0.001,"y":0},"t":742,"s":[690,456,0],"to":[1.667,0,0],"ti":[-1.667,0,0]},{"i":{"x":0.833,"y":0.833},"o":{"x":0.001,"y":0.001},"t":756,"s":[700,456,0],"to":[0,0,0],"ti":[0,0,0]},{"i":{
2024-04-26 15:32:36 UTC	1255	IN	Data Raw: 3a 5b 31 2c 30 2c 30 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 30 2e 35 38 2c 22 79 22 3a 31 7d 2c 22 6f 22 3a 7b 22 78 22 3a 30 2e 31 36 37 2c 22 79 22 3a 30 2e 31 36 37 7d 2c 22 74 22 3a 38 34 30 2c 22 73 22 3a 5b 37 30 30 2c 34 35 36 2c 30 5d 2c 22 74 6f 22 3a 5b 2d 31 2c 30 2c 30 5d 2c 22 74 69 22 3a 5b 30 2c 30 2c 30 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 30 2e 38 33 33 2c 22 79 22 3a 30 2e 38 33 33 7d 2c 22 6f 22 3a 7b 22 78 22 3a 30 2e 31 36 37 2c 22 79 22 3a 30 7d 2c 22 74 22 3a 38 36 37 2c 22 73 22 3a 5b 36 39 30 2c 34 35 36 2c 30 5d 2c 22 74 6f 22 3a 5b 30 2c 30 2c 30 5d 2c 22 74 69 22 3a 5b 2d 31 2c 30 2c 30 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 30 2e 35 32 2c 22 79 22 3a 30 2e 39 35 38 7d 2c 22 6f 22 3a 7b 22 78 22 3a 30 2e 34 38 2c 22 79 22 3a Data Ascii: :[1,0,0]},{"i":{"x":0.58,"y":1},"o":{"x":0.167,"y":0.167},"t":840,"s":[700,456,0],"to":[-1,0,0],"ti":[0,0,0]},{"i":{"x":0.833,"y":0.833},"o":{"x":0.167,"y":0},"t":867,"s":[690,456,0],"to":[0,0,0],"ti":[-1,0,0]},{"i":{"x":0.52,"y":0.958},"o":{"x":0.48,"y":
2024-04-26 15:32:36 UTC	1255	IN	Data Raw: 30 2e 38 33 33 5d 2c 22 79 22 3a 5b 30 2e 38 33 33 5d 7d 2c 22 6f 22 3a 7b 22 78 22 3a 5b 30 2e 31 36 37 5d 2c 22 79 22 3a 5b 30 2e 31 36 37 5d 7d 2c 22 74 22 3a 37 35 37 2c 22 73 22 3a 5b 30 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 5b 30 2e 38 33 33 5d 2c 22 79 22 3a 5b 30 2e 38 33 33 5d 7d 2c 22 6f 22 3a 7b 22 78 22 3a 5b 30 2e 31 36 37 5d 2c 22 79 22 3a 5b 30 2e 31 36 37 5d 7d 2c 22 74 22 3a 38 34 39 2c 22 73 22 3a 5b 33 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 5b 30 2e 38 33 33 5d 2c 22 79 22 3a 5b 30 2e 38 33 33 5d 7d 2c 22 6f 22 3a 7b 22 78 22 3a 5b 30 2e 31 36 37 5d 2c 22 79 22 3a 5b 30 2e 31 36 37 5d 7d 2c 22 74 22 3a 39 37 34 2c 22 73 22 3a 5b 30 5d 7d 2c 7b 22 74 22 3a 31 30 36 36 2c 22 73 22 3a 5b 33 5d 7d 5d 2c 22 69 78 22 3a 32 2c 22 78 22 3a 22 Data Ascii: 0.833],"y":[0.833]},"o":{"x":[0.167],"y":[0.167]},"t":757,"s":[0]},{"i":{"x":[0.833],"y":[0.833]},"o":{"x":[0.167],"y":[0.167]},"t":849,"s":[3]},{"i":{"x":[0.833],"y":[0.833]},"o":{"x":[0.167],"y":[0.167]},"t":974,"s":[0]},{"t":1066,"s":[3]}],"ix":2,"x":"
2024-04-26 15:32:36 UTC	1255	IN	Data Raw: 3a 7b 22 78 22 3a 30 2e 31 36 37 2c 22 79 22 3a 30 2e 31 36 37 7d 2c 22 74 22 3a 34 36 39 2c 22 73 22 3a 5b 37 30 30 2c 34 35 36 2c 30 5d 2c 22 74 6f 22 3a 5b 2d 31 2c 30 2c 30 5d 2c 22 74 69 22 3a 5b 31 2e 36 36 37 2c 30 2c 30 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 30 2e 35 38 2c 22 79 22 3a 30 2e 35 38 7d 2c 22 6f 22 3a 7b 22 78 22 3a 30 2e 30 30 31 2c 22 79 22 3a 30 2e 30 30 31 7d 2c 22 74 22 3a 34 39 36 2c 22 73 22 3a 5b 36 39 30 2c 34 35 36 2c 30 5d 2c 22 74 6f 22 3a 5b 30 2c 30 2c 30 5d 2c 22 74 69 22 3a 5b 30 2c 30 2c 30 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 30 2e 35 38 2c 22 79 22 3a 31 7d 2c 22 6f 22 3a 7b 22 78 22 3a 30 2e 30 30 31 2c 22 79 22 3a 30 7d 2c 22 74 22 3a 35 34 39 2c 22 73 22 3a 5b 36 39 30 2c 34 35 36 2c 30 5d 2c 22 74 6f 22 3a 5b Data Ascii: :{"x":0.167,"y":0.167},"t":469,"s":[700,456,0],"to":[-1,0,0],"ti":[1.667,0,0]},{"i":{"x":0.58,"y":0.58},"o":{"x":0.001,"y":0.001},"t":496,"s":[690,456,0],"to":[0,0,0],"ti":[0,0,0]},{"i":{"x":0.58,"y":1},"o":{"x":0.001,"y":0},"t":549,"s":[690,456,0],"to":[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49804	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:35 UTC	2215	OUT	GET /async/asyncContextualTask?vet=12ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ4dMLegQIBRAA..i&ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449&yv=3&cid=10943804590251964565&cs=0&async=_k:xjs.s.en_US.DNHITQOYOgk.O,_am:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.s.GGin1mxRzvU.L.W.O%2Fam%3DgB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKACAmXAAAsCGAADgg0MAAIAAAAACAACAwgEAABAgIABgAAAgAAAAAAAAHAABAAAgBAACBECAAJIQkIEAAEQwwQCkAgDDjwAAIIAEAAAAoEAAAAEDESA8hAABgACQQAQCIIIAACAHCAEAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAAAAAAQ%2Fbr%3D1%2Frs%3DACT90oGSC2kJ5MOZFnDJZQWz14iwbMFYQQ,_fmt:prog,_id:rNi7Zc HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-DoS-Behavior: Embed sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
2024-04-26 15:32:36 UTC	1637	IN	HTTP/1.1 200 OK Version: 627109246 X-Content-Type-Options: nosniff Content-Type: text/plain; charset=UTF-8 Content-Disposition: attachment; filename="f.txt" Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:35 GMT Server: gws Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Expires: Fri, 26 Apr 2024 15:32:35 GMT Set-Cookie: 1P_JAR=2024-04-26-15; expires=Thu, 01-Jan-1970 00:00:00 GMT; path=/; domain=.google.com; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:32:36 UTC	48	IN	Data Raw: 32 61 0d 0a 29 5d 7d 27 0a 32 32 3b 5b 22 45 38 6b 72 5a 74 71 30 4f 35 44 76 6b 76 51 50 68 63 71 39 6f 41 45 22 2c 22 31 39 39 35 22 5d 0d 0a Data Ascii: 2a)]}'22;["E8krZtq0O5DvkvQPhcq9oAE","1995"]
2024-04-26 15:32:36 UTC	19	IN	Data Raw: 65 0d 0a 33 3b 5b 32 5d 30 3b 33 3b 5b 39 5d 30 3b 0d 0a Data Ascii: e3;[2]0;3;[9]0;
2024-04-26 15:32:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49806	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:35 UTC	2215	OUT	GET /async/asyncContextualTask?vet=12ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ4dMLegQICBAA..i&ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449&yv=3&cid=10194214981100978668&cs=0&async=_k:xjs.s.en_US.DNHITQOYOgk.O,_am:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.s.GGin1mxRzvU.L.W.O%2Fam%3DgB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKACAmXAAAsCGAADgg0MAAIAAAAACAACAwgEAABAgIABgAAAgAAAAAAAAHAABAAAgBAACBECAAJIQkIEAAEQwwQCkAgDDjwAAIIAEAAAAoEAAAAEDESA8hAABgACQQAQCIIIAACAHCAEAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAAAAAAQ%2Fbr%3D1%2Frs%3DACT90oGSC2kJ5MOZFnDJZQWz14iwbMFYQQ,_fmt:prog,_id:rNi7Zc HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-DoS-Behavior: Embed sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
2024-04-26 15:32:36 UTC	1637	IN	HTTP/1.1 200 OK Version: 627109246 X-Content-Type-Options: nosniff Content-Type: text/plain; charset=UTF-8 Content-Disposition: attachment; filename="f.txt" Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:36 GMT Server: gws Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Expires: Fri, 26 Apr 2024 15:32:36 GMT Set-Cookie: 1P_JAR=2024-04-26-15; expires=Thu, 01-Jan-1970 00:00:00 GMT; path=/; domain=.google.com; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:32:36 UTC	48	IN	Data Raw: 32 61 0d 0a 29 5d 7d 27 0a 32 32 3b 5b 22 46 4d 6b 72 5a 76 69 77 43 39 2d 4c 77 62 6b 50 37 62 65 53 6d 41 4d 22 2c 22 31 39 39 35 22 5d 0d 0a Data Ascii: 2a)]}'22;["FMkrZviwC9-LwbkP7beSmAM","1995"]
2024-04-26 15:32:36 UTC	12	IN	Data Raw: 37 0d 0a 33 3b 5b 32 5d 30 3b 0d 0a Data Ascii: 73;[2]0;
2024-04-26 15:32:36 UTC	12	IN	Data Raw: 37 0d 0a 33 3b 5b 39 5d 30 3b 0d 0a Data Ascii: 73;[9]0;
2024-04-26 15:32:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	49807	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:36 UTC	2214	OUT	GET /async/asyncContextualTask?vet=12ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ4dMLegQIBhAA..i&ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449&yv=3&cid=4586455008918215834&cs=0&async=_k:xjs.s.en_US.DNHITQOYOgk.O,_am:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.s.GGin1mxRzvU.L.W.O%2Fam%3DgB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKACAmXAAAsCGAADgg0MAAIAAAAACAACAwgEAABAgIABgAAAgAAAAAAAAHAABAAAgBAACBECAAJIQkIEAAEQwwQCkAgDDjwAAIIAEAAAAoEAAAAEDESA8hAABgACQQAQCIIIAACAHCAEAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAAAAAAQ%2Fbr%3D1%2Frs%3DACT90oGSC2kJ5MOZFnDJZQWz14iwbMFYQQ,_fmt:prog,_id:rNi7Zc HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-DoS-Behavior: Embed sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
2024-04-26 15:32:36 UTC	1637	IN	HTTP/1.1 200 OK Version: 627109246 X-Content-Type-Options: nosniff Content-Type: text/plain; charset=UTF-8 Content-Disposition: attachment; filename="f.txt" Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:36 GMT Server: gws Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Expires: Fri, 26 Apr 2024 15:32:36 GMT Set-Cookie: 1P_JAR=2024-04-26-15; expires=Thu, 01-Jan-1970 00:00:00 GMT; path=/; domain=.google.com; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:32:36 UTC	47	IN	Data Raw: 32 39 0d 0a 29 5d 7d 27 0a 32 31 3b 5b 22 46 4d 6b 72 5a 70 76 5a 4d 72 65 5a 77 74 30 50 6e 62 65 72 43 41 22 2c 22 31 39 39 35 22 5d 0d 0a Data Ascii: 29)]}'21;["FMkrZpvZMreZwt0PnberCA","1995"]
2024-04-26 15:32:36 UTC	12	IN	Data Raw: 37 0d 0a 33 3b 5b 32 5d 30 3b 0d 0a Data Ascii: 73;[2]0;
2024-04-26 15:32:36 UTC	12	IN	Data Raw: 37 0d 0a 33 3b 5b 39 5d 30 3b 0d 0a Data Ascii: 73;[9]0;
2024-04-26 15:32:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	49808	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:36 UTC	1567	OUT	POST /gen_204?atyp=csi&ei=C8krZr7QHOyTwbkPuNyGwAw&s=jsa&jsi=s,st.9536,tni.0,atni.243,et.click,n.vZr2rb,cn.4,ie.0,vi.1&zx=1714145552365&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
2024-04-26 15:32:37 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-d18-SfJbdenoNO5h-Kvxyg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:37 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	49805	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:36 UTC	1556	OUT	POST /gen_204?atyp=i&ei=C8krZr7QHOyTwbkPuNyGwAw&ved=0ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ39UDCAw&bl=jahV&s=web&zx=1714145552366&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
2024-04-26 15:32:37 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-cZBm7wD_SqMXfs6_Bd6q-g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:37 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49809	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:37 UTC	1897	OUT	GET /xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=uKlGbf,syyj,sy3ze,DpX64d,sy3zf,EufiNb,sy1fp,P10Owf,syy4,syzv,gSZvdb,sy5ul,vTw9Fc,sym1,syoh,syoi,syoj,syok,syol,DPreE,sy2tx,qcH9Lc,sy3l6,ROaKxe,sy3l8,sy3l9,pj8IAe,sy15a,sy37l,sy3lf,sy3zm,YFicMc?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0
2024-04-26 15:32:37 UTC	817	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 17723 Date: Fri, 26 Apr 2024 15:32:37 GMT Expires: Sat, 26 Apr 2025 15:32:37 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 26 Apr 2024 06:52:27 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:37 UTC	438	IN	Data Raw: 74 68 69 73 2e 5f 73 3d 74 68 69 73 2e 5f 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 7a 28 22 75 4b 6c 47 62 66 22 29 3b 0a 5f 2e 4b 45 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 78 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4b 61 29 3b 74 68 69 73 2e 77 69 6e 64 6f 77 3d 61 2e 73 65 72 76 69 63 65 2e 77 69 6e 64 6f 77 7d 3b 5f 2e 47 28 5f 2e 4b 45 2c 5f 2e 78 6e 29 3b 5f 2e 4b 45 2e 6e 62 3d 5f 2e 78 6e 2e 6e 62 3b 5f 2e 4b 45 2e 47 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 73 65 72 76 69 63 65 3a 7b 77 69 6e 64 6f 77 3a 5f 2e 79 6e 7d 7d 7d 3b 5f 2e 4b 45 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 Data Ascii: this._s=this._s\|\|{};(function(_){var window=this;try{_.z("uKlGbf");_.KE=function(a){_.xn.call(this,a.Ka);this.window=a.service.window};_.G(_.KE,_.xn);_.KE.nb=_.xn.nb;_.KE.Ga=function(){return{service:{window:_.yn}}};_.KE.prototype.reload=function(){thi
2024-04-26 15:32:37 UTC	1255	IN	Data Raw: 3b 5f 2e 42 37 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 6b 61 2e 43 63 28 5f 2e 6a 76 62 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 62 29 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 31 21 3d 3d 5f 2e 24 68 28 63 2c 31 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 56 66 60 22 2b 5f 2e 24 68 28 63 2c 31 29 29 3b 72 65 74 75 72 6e 20 63 7d 29 7d 3b 5f 2e 6c 77 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 6e 65 77 20 5f 2e 56 73 2c 67 3d 6e 65 77 20 5f 2e 54 73 2c 68 3d 6e 65 77 20 5f 2e 52 73 3b 5f 2e 65 76 62 28 5f 2e 53 73 28 68 2c 62 29 2c 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 43 7a 68 29 3b 68 2e 73 65 74 56 61 6c 75 65 28 63 29 3b 5f 2e 55 73 28 67 2c 68 Data Ascii: ;_.B7b=function(a,b){return a.ka.Cc(_.jvb.getInstance(b)).then(function(c){if(1!==_.$h(c,1))throw Error("Vf`"+_.$h(c,1));return c})};_.lw=function(a,b,c,d,e){var f=new _.Vs,g=new _.Ts,h=new _.Rs;_.evb(_.Ss(h,b),null==e?void 0:e.Czh);h.setValue(c);_.Us(g,h
2024-04-26 15:32:37 UTC	1255	IN	Data Raw: 74 65 64 53 74 79 6c 65 28 61 2c 6e 75 6c 6c 29 2c 22 6e 6f 6e 65 22 21 3d 3d 61 2e 64 69 73 70 6c 61 79 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 61 2e 76 69 73 69 62 69 6c 69 74 79 26 26 22 61 75 74 6f 22 3d 3d 3d 61 2e 63 6c 69 70 29 3a 21 31 7d 2c 55 74 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 26 26 28 22 41 22 3d 3d 3d 61 2e 74 61 67 4e 61 6d 65 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 29 29 7d 2c 56 74 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 6e 28 61 2e 51 67 61 28 21 31 29 29 2c 63 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 62 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 5f 2e 6c 77 28 6e 65 77 Data Ascii: tedStyle(a,null),"none"!==a.display&&"hidden"!==a.visibility&&"auto"===a.clip):!1},Utk=function(a){return null!=a&&("A"===a.tagName\|\|"button"===a.getAttribute("role"))},Vtk=function(a){var b=_.n(a.Qga(!1)),c=b.next().value;b=b.next().value;return _.lw(new
2024-04-26 15:32:37 UTC	1255	IN	Data Raw: 61 72 20 58 74 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 50 44 62 26 26 28 61 2e 50 44 62 2e 73 65 74 54 69 6d 65 6f 75 74 28 33 45 34 29 2c 61 2e 50 44 62 2e 73 68 6f 77 28 29 29 3b 61 2e 6b 61 3d 21 31 7d 3b 5f 2e 4a 28 57 74 6b 2e 70 72 6f 74 6f 74 79 70 65 2c 22 58 5a 39 34 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 61 7d 29 3b 5f 2e 4a 28 57 74 6b 2e 70 72 6f 74 6f 74 79 70 65 2c 22 78 6f 69 7a 73 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 77 61 7d 29 3b 5f 2e 4a 28 57 74 6b 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 33 76 69 6f 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 41 61 7d 29 3b 0a 5f 2e 50 71 28 5f 2e 53 74 6b 2c 57 74 6b 29 3b 0a Data Ascii: ar Xtk=function(a){a.PDb&&(a.PDb.setTimeout(3E4),a.PDb.show());a.ka=!1};_.J(Wtk.prototype,"XZ94se",function(){return this.oa});_.J(Wtk.prototype,"xoizsc",function(){return this.wa});_.J(Wtk.prototype,"i3viod",function(){return this.Aa});_.Pq(_.Stk,Wtk);
2024-04-26 15:32:37 UTC	1255	IN	Data Raw: 7b 0a 5f 2e 42 36 62 3d 5f 2e 4f 6e 28 22 64 6c 33 62 6d 22 29 3b 5f 2e 43 36 62 3d 5f 2e 4f 6e 28 22 45 62 50 57 59 64 22 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 73 62 63 3d 5f 2e 43 28 22 67 53 5a 76 64 62 22 2c 5b 5d 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 7a 28 22 67 53 5a 76 64 62 22 29 3b 0a 76 61 72 20 74 62 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 46 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4b 61 29 3b 74 68 69 73 2e 77 61 3d 74 68 69 73 2e 67 65 74 44 61 74 61 28 22 6d 73 66 22 29 2e 47 62 28 29 3b 74 68 69 73 2e 6f 61 3d 74 68 69 73 2e 67 65 74 44 61 74 61 28 22 63 6d 65 70 22 Data Ascii: {_.B6b=_.On("dl3bm");_.C6b=_.On("EbPWYd");}catch(e){_._DumpException(e)}try{_.sbc=_.C("gSZvdb",[]);}catch(e){_._DumpException(e)}try{_.z("gSZvdb");var tbc=function(a){_.F.call(this,a.Ka);this.wa=this.getData("msf").Gb();this.oa=this.getData("cmep"
2024-04-26 15:32:37 UTC	1255	IN	Data Raw: 72 6f 74 6f 74 79 70 65 2e 6f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 3b 4a 63 43 28 74 68 69 73 2c 61 2e 64 61 74 61 29 26 26 74 68 69 73 2e 67 65 74 43 6f 6e 74 72 6f 6c 6c 65 72 28 74 68 69 73 2e 6b 61 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 2e 73 68 6f 77 28 29 3b 63 3d 62 2e 45 61 28 22 4e 31 63 4f 5a 65 22 29 2e 65 6c 28 29 3b 5f 2e 71 74 28 5b 6e 65 77 20 5f 2e 67 6e 28 63 2c 22 73 68 6f 77 22 29 5d 29 7d 29 7d 3b 5f 2e 4a 28 49 63 43 2e 70 72 6f 74 6f 74 79 70 65 2c 22 71 69 61 75 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 61 7d 29 3b 5f 2e 50 71 28 5f 2e 58 74 6c 2c 49 63 43 29 3b 0a 5f 2e 41 28 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 Data Ascii: rototype.oa=function(a){var b=this;JcC(this,a.data)&&this.getController(this.ka).then(function(c){c.show();c=b.Ea("N1cOZe").el();_.qt([new _.gn(c,"show")])})};_.J(IcC.prototype,"qiause",function(){return this.oa});_.Pq(_.Xtl,IcC);_.A();}catch(e){_._Dump
2024-04-26 15:32:37 UTC	1255	IN	Data Raw: 3a 31 29 2a 65 2e 79 29 3b 69 66 28 67 29 69 66 28 6c 29 76 61 72 20 77 3d 6c 3b 65 6c 73 65 20 69 66 28 77 3d 5f 2e 79 2e 64 5f 28 63 29 29 77 2e 74 6f 70 2d 3d 6d 2e 79 2c 77 2e 72 69 67 68 74 2d 3d 6d 2e 78 2c 77 2e 62 6f 74 74 6f 6d 2d 3d 6d 2e 79 2c 77 2e 6c 65 66 74 2d 3d 6d 2e 78 3b 72 65 74 75 72 6e 20 5f 2e 79 46 62 28 71 2c 63 2c 64 2c 66 2c 77 2c 67 2c 68 29 7d 3b 0a 5f 2e 77 46 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 3d 61 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 29 7b 76 61 72 20 62 3d 22 48 54 4d 4c 22 3d 3d 61 2e 74 61 67 4e 61 6d 65 7c 7c 22 42 4f 44 59 22 3d 3d 61 2e 74 61 67 4e 61 6d 65 3b 69 66 28 21 62 7c 7c 22 73 74 61 74 69 63 22 21 3d 5f 2e 79 2e 50 79 61 28 61 29 29 7b 76 61 72 20 63 3d 5f 2e 79 2e 75 42 28 61 29 3b 62 Data Ascii: :1)*e.y);if(g)if(l)var w=l;else if(w=_.y.d_(c))w.top-=m.y,w.right-=m.x,w.bottom-=m.y,w.left-=m.x;return _.yFb(q,c,d,f,w,g,h)};_.wFb=function(a){if(a=a.offsetParent){var b="HTML"==a.tagName\|\|"BODY"==a.tagName;if(!b\|\|"static"!=_.y.Pya(a)){var c=_.y.uB(a);b
2024-04-26 15:32:37 UTC	1255	IN	Data Raw: 2e 74 6f 70 26 26 28 67 2e 79 3d 65 2e 74 6f 70 2c 64 7c 3d 38 29 2c 67 2e 79 2b 63 2e 68 65 69 67 68 74 3e 65 2e 62 6f 74 74 6f 6d 26 26 28 63 2e 68 65 69 67 68 74 3d 4d 61 74 68 2e 6d 69 6e 28 65 2e 62 6f 74 74 6f 6d 2d 67 2e 79 2c 68 2b 63 2e 68 65 69 67 68 74 2d 65 2e 74 6f 70 29 2c 63 2e 68 65 69 67 68 74 3d 4d 61 74 68 2e 6d 61 78 28 63 2e 68 65 69 67 68 74 2c 30 29 2c 64 7c 3d 38 29 29 3b 67 2e 79 2b 63 2e 68 65 69 67 68 74 3e 65 2e 62 6f 74 74 6f 6d 26 26 66 26 34 26 26 28 67 2e 79 3d 4d 61 74 68 2e 6d 61 78 28 65 2e 62 6f 74 74 6f 6d 2d 63 2e 68 65 69 67 68 74 2c 65 2e 74 6f 70 29 2c 64 7c 3d 32 29 3b 66 26 38 26 26 28 64 7c 3d 28 67 2e 79 3c 65 2e 74 6f 70 3f 36 34 3a 30 29 7c 28 67 2e 79 2b 63 2e 68 65 69 67 68 74 3e 65 2e 62 6f 74 74 6f 6d 3f Data Ascii: .top&&(g.y=e.top,d\|=8),g.y+c.height>e.bottom&&(c.height=Math.min(e.bottom-g.y,h+c.height-e.top),c.height=Math.max(c.height,0),d\|=8));g.y+c.height>e.bottom&&f&4&&(g.y=Math.max(e.bottom-c.height,e.top),d\|=2);f&8&&(d\|=(g.y<e.top?64:0)\|(g.y+c.height>e.bottom?
2024-04-26 15:32:37 UTC	1255	IN	Data Raw: 2e 47 61 28 63 29 26 26 30 3c 63 2e 6e 6f 64 65 54 79 70 65 26 26 5f 2e 68 66 28 74 68 69 73 2e 61 4d 28 29 2c 63 29 7c 7c 61 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 5f 2e 68 66 28 64 2c 63 29 7d 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 5f 2e 48 28 74 68 69 73 2e 64 61 74 61 2c 31 32 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 74 72 69 67 67 65 72 28 5f 2e 69 46 62 2c 7b 74 79 70 65 3a 62 2c 45 7a 3a 63 7d 29 2c 21 30 3b 74 68 69 73 2e 73 65 74 56 69 73 69 62 6c 65 28 21 31 29 3b 5f 2e 63 66 28 64 6f 63 75 6d 65 6e 74 2c 5f 2e 69 46 62 29 3b 32 3d 3d 3d 62 26 26 28 61 3d 74 68 69 73 2e 61 4d 28 29 2c 61 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 29 7c 7c 28 61 3d 61 2e 66 69 72 73 74 45 6c 65 Data Ascii: .Ga(c)&&0<c.nodeType&&_.hf(this.aM(),c)\|\|a.some(function(d){return _.hf(d,c)}))return!1;if(_.H(this.data,12))return this.trigger(_.iFb,{type:b,Ez:c}),!0;this.setVisible(!1);_.cf(document,_.iFb);2===b&&(a=this.aM(),a.hasAttribute("tabindex")\|\|(a=a.firstEle
2024-04-26 15:32:37 UTC	782	IN	Data Raw: 68 2d 68 2e 78 2c 67 2e 70 61 67 65 54 6f 70 2b 67 2e 68 65 69 67 68 74 2d 68 2e 79 2c 67 2e 70 61 67 65 4c 65 66 74 2d 68 2e 78 29 7d 65 6c 73 65 20 67 3d 76 6f 69 64 20 30 3b 5f 2e 45 75 28 62 2c 64 2c 61 2c 65 2c 63 2c 76 6f 69 64 20 30 2c 66 2c 76 6f 69 64 20 30 2c 67 29 7d 7d 7d 3b 5f 2e 6b 2e 69 73 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 79 2e 4e 65 28 74 68 69 73 2e 67 65 74 50 6f 70 75 70 28 29 29 7d 3b 5f 2e 6b 2e 64 69 73 6d 69 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 73 56 69 73 69 62 6c 65 28 29 26 26 74 68 69 73 2e 6b 61 2e 64 69 73 6d 69 73 73 28 74 68 69 73 2e 70 6f 70 75 70 29 7d 3b 0a 5f 2e 6b 2e 73 65 74 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 Data Ascii: h-h.x,g.pageTop+g.height-h.y,g.pageLeft-h.x)}else g=void 0;_.Eu(b,d,a,e,c,void 0,f,void 0,g)}}};_.k.isVisible=function(){return _.y.Ne(this.getPopup())};_.k.dismiss=function(){this.isVisible()&&this.ka.dismiss(this.popup)};_.k.setVisible=function(a,b,c,d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	49810	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:37 UTC	1449	OUT	GET /async/bgasy?ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449&yv=3&cs=0&async=_fmt:jspb HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-DoS-Behavior: Embed sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0
2024-04-26 15:32:37 UTC	1479	IN	HTTP/1.1 200 OK Version: 627109246 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Date: Fri, 26 Apr 2024 15:32:37 GMT Server: gws Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:32:37 UTC	1479	IN	Data Raw: 39 64 61 0d 0a 29 5d 7d 27 0a 7b 22 62 67 61 73 79 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 6a 73 2f 62 67 2f 6d 52 47 47 6d 46 79 66 6b 78 72 61 42 53 69 6a 57 6d 52 62 4d 76 4a 62 66 30 6c 78 51 71 78 4b 4e 51 52 56 72 59 36 55 52 35 55 2e 6a 73 22 2c 22 4d 77 4c 67 72 66 4b 67 54 6e 50 6e 30 61 43 39 49 75 47 72 59 4b 75 62 6f 73 6d 2f 4d 58 37 65 47 50 48 58 47 39 4d 72 75 78 50 71 2b 51 48 41 4f 52 65 62 69 73 37 56 37 71 59 76 6c 58 4e 50 65 76 34 31 4a 6c 5a 7a 6c 61 71 68 35 39 4c 5a 71 6a 30 39 6d 34 4e 4c 79 42 76 78 75 42 68 4f 64 5a 69 4b 72 6e 4f 6f 69 59 63 51 31 76 6d 50 73 44 53 75 66 46 69 65 75 70 72 78 6a 46 48 74 5a 6d 42 61 59 37 47 45 33 75 69 55 2b 47 52 32 5a 6f 42 51 47 37 62 6d 41 58 59 41 Data Ascii: 9da)]}'{"bgasy":["https://www.google.com/js/bg/mRGGmFyfkxraBSijWmRbMvJbf0lxQqxKNQRVrY6UR5U.js","MwLgrfKgTnPn0aC9IuGrYKubosm/MX7eGPHXG9MruxPq+QHAORebis7V7qYvlXNPev41JlZzlaqh59LZqj09m4NLyBvxuBhOdZiKrnOoiYcQ1vmPsDSufFieuprxjFHtZmBaY7GE3uiU+GR2ZoBQG7bmAXYA
2024-04-26 15:32:37 UTC	1050	IN	Data Raw: 41 77 49 61 70 6d 31 37 56 7a 68 52 33 4d 55 30 6b 58 35 4a 6d 4e 2f 59 33 52 6c 37 31 7a 71 62 45 30 54 4e 4e 44 55 57 34 52 6f 61 78 4b 6b 68 32 69 58 73 67 4c 37 53 44 32 64 4e 4b 4a 6d 34 37 51 57 7a 47 57 6d 53 71 6e 2f 67 49 77 53 67 47 50 4f 58 74 74 77 50 6c 47 56 41 52 36 4d 30 6f 35 50 67 6a 6e 54 41 72 79 46 5a 32 4f 63 77 72 79 69 64 51 47 4d 64 6e 67 50 64 33 73 6e 32 39 6d 2b 7a 37 72 63 47 78 75 58 55 4a 6f 45 73 42 59 4b 6f 58 6d 72 57 39 35 4a 55 38 53 68 75 55 71 69 73 7a 31 6a 4d 4c 4f 42 74 4f 6d 2b 7a 74 2f 61 71 76 2b 66 46 47 4a 59 67 46 2b 74 32 69 4c 4e 65 51 53 78 6c 41 56 32 64 6d 37 2b 52 37 51 61 7a 43 74 37 68 4b 34 4e 42 32 56 52 2f 5a 44 35 37 42 68 2f 68 76 79 33 6a 6f 53 66 57 46 42 39 69 4e 63 76 77 2b 42 59 4b 4f 61 30 Data Ascii: AwIapm17VzhR3MU0kX5JmN/Y3Rl71zqbE0TNNDUW4RoaxKkh2iXsgL7SD2dNKJm47QWzGWmSqn/gIwSgGPOXttwPlGVAR6M0o5PgjnTAryFZ2OcwryidQGMdngPd3sn29m+z7rcGxuXUJoEsBYKoXmrW95JU8ShuUqisz1jMLOBtOm+zt/aqv+fFGJYgF+t2iLNeQSxlAV2dm7+R7QazCt7hK4NB2VR/ZD57Bh/hvy3joSfWFB9iNcvw+BYKOa0
2024-04-26 15:32:37 UTC	1255	IN	Data Raw: 31 35 36 61 0d 0a 4d 4f 6e 69 2b 4c 44 31 32 34 76 4c 45 41 53 5a 4d 65 6a 45 6d 49 42 44 36 47 58 2f 75 38 4d 49 5a 6e 71 6d 2b 33 6c 61 47 41 49 79 4c 55 4c 75 79 47 45 48 6b 50 67 43 75 45 30 6a 5a 4e 37 45 6c 45 66 6b 37 72 33 46 57 65 46 49 74 30 6a 67 63 71 49 6f 6a 4b 47 65 32 6e 36 51 2b 47 37 47 53 68 68 73 4b 7a 79 69 49 35 78 54 69 6c 38 53 64 34 70 55 36 63 68 76 75 6b 42 6e 52 64 33 63 45 57 38 39 2f 4b 55 4d 37 31 4c 49 51 4d 45 48 54 6c 75 58 56 74 35 6c 4f 38 79 76 6c 6e 32 79 6d 39 6d 50 69 79 7a 78 4b 30 71 54 73 61 69 37 79 55 4e 66 61 73 59 48 65 4c 6f 35 71 54 43 46 66 6c 43 50 70 33 31 46 46 54 69 67 51 2f 4c 78 4d 34 32 4b 35 6a 61 76 77 39 58 2b 65 33 43 46 70 4f 72 56 7a 34 47 45 47 59 30 69 69 78 45 49 2f 51 4c 62 62 50 49 6d 57 Data Ascii: 156aMOni+LD124vLEASZMejEmIBD6GX/u8MIZnqm+3laGAIyLULuyGEHkPgCuE0jZN7ElEfk7r3FWeFIt0jgcqIojKGe2n6Q+G7GShhsKzyiI5xTil8Sd4pU6chvukBnRd3cEW89/KUM71LIQMEHTluXVt5lO8yvln2ym9mPiyzxK0qTsai7yUNfasYHeLo5qTCFflCPp31FFTigQ/LxM42K5javw9X+e3CFpOrVz4GEGY0iixEI/QLbbPImW
2024-04-26 15:32:37 UTC	1255	IN	Data Raw: 75 6d 6e 36 39 54 45 45 2b 41 41 77 59 6b 69 64 38 39 4b 47 53 6b 76 7a 52 4d 4f 48 70 71 71 67 75 69 44 74 6a 32 64 47 6e 36 47 38 43 71 67 41 4e 69 63 4f 67 68 2b 59 42 70 46 39 51 35 4e 57 62 4d 58 73 32 2b 34 72 73 2f 49 43 65 34 6e 6f 49 4a 4d 64 31 35 75 37 49 2b 47 41 2b 68 76 4d 36 63 45 7a 2f 73 30 47 64 55 71 52 36 61 57 57 4a 41 69 6c 51 4f 4f 36 47 53 2f 64 33 2b 64 5a 36 49 63 52 4f 72 76 66 5a 5a 50 68 78 38 4b 66 78 6b 5a 70 55 51 68 38 70 50 4f 52 61 70 4a 2b 34 61 64 4f 6b 53 4b 56 50 32 35 71 42 39 2f 76 54 37 50 70 57 66 70 7a 7a 69 58 54 46 43 68 6e 53 44 38 4e 50 32 6d 4d 4a 49 52 38 36 35 73 38 53 4a 53 4f 6b 6a 79 6f 52 71 76 61 63 44 73 4e 76 78 79 6f 75 55 30 70 76 49 75 62 6a 4a 53 69 70 6f 4d 56 63 72 71 52 74 4b 64 6a 77 46 79 Data Ascii: umn69TEE+AAwYkid89KGSkvzRMOHpqqguiDtj2dGn6G8CqgANicOgh+YBpF9Q5NWbMXs2+4rs/ICe4noIJMd15u7I+GA+hvM6cEz/s0GdUqR6aWWJAilQOO6GS/d3+dZ6IcROrvfZZPhx8KfxkZpUQh8pPORapJ+4adOkSKVP25qB9/vT7PpWfpzziXTFChnSD8NP2mMJIR865s8SJSOkjyoRqvacDsNvxyouU0pvIubjJSipoMVcrqRtKdjwFy
2024-04-26 15:32:37 UTC	1255	IN	Data Raw: 4c 4c 42 79 6f 32 55 35 4d 57 30 68 55 61 55 36 47 6f 37 68 30 45 79 51 53 47 55 61 6b 37 70 2f 43 4a 6c 63 50 51 30 49 43 70 44 74 38 61 34 58 53 4b 43 78 47 77 74 39 4a 65 6a 57 2f 35 47 6c 31 35 6c 4b 72 78 6b 75 6e 70 70 2b 30 6a 31 67 76 37 76 2b 7a 6c 6c 6c 74 42 37 6c 46 55 4f 6f 70 6d 32 49 6c 68 6e 36 30 46 50 47 45 43 43 78 37 6e 4a 2f 56 58 31 71 71 4a 36 30 51 66 7a 61 77 62 57 58 50 61 78 74 54 79 56 63 4f 4e 64 59 4e 70 35 32 53 4c 32 78 37 59 66 30 4f 42 63 69 42 4d 51 42 62 35 68 65 2b 49 65 56 76 37 77 4c 65 5a 46 30 47 4a 65 67 57 48 47 70 72 48 64 6c 54 41 42 47 33 69 4f 6c 77 53 4b 4e 43 4a 62 51 55 31 67 4d 6e 65 70 30 63 62 4b 49 50 46 74 4a 4b 76 35 36 43 59 56 72 49 2f 36 2f 65 73 31 2f 41 76 67 76 71 77 58 63 70 76 74 54 55 69 37 Data Ascii: LLByo2U5MW0hUaU6Go7h0EyQSGUak7p/CJlcPQ0ICpDt8a4XSKCxGwt9JejW/5Gl15lKrxkunpp+0j1gv7v+zllltB7lFUOopm2Ilhn60FPGECCx7nJ/VX1qqJ60QfzawbWXPaxtTyVcONdYNp52SL2x7Yf0OBciBMQBb5he+IeVv7wLeZF0GJegWHGprHdlTABG3iOlwSKNCJbQU1gMnep0cbKIPFtJKv56CYVrI/6/es1/AvgvqwXcpvtTUi7
2024-04-26 15:32:37 UTC	1255	IN	Data Raw: 53 68 78 53 57 61 4a 52 6d 41 31 73 6d 74 4c 6d 68 6c 42 4e 72 4b 73 6c 6d 38 6f 58 74 46 6b 44 32 32 4b 74 54 4e 51 6f 69 4e 73 4b 2b 31 55 74 41 54 47 65 58 66 68 43 31 31 74 32 72 5a 69 35 38 54 32 42 6a 74 38 63 63 70 50 65 6c 61 39 65 34 50 71 46 2b 38 2f 64 63 49 4f 37 2b 41 72 6a 30 61 6a 31 6b 73 35 38 6b 46 36 7a 30 71 54 46 2b 61 42 67 42 4a 58 56 52 43 65 44 41 48 74 4d 36 33 53 67 71 4c 51 62 4c 43 64 6f 4d 7a 59 75 63 48 4e 4e 47 2f 64 55 4d 66 61 70 42 43 59 62 36 57 51 54 4d 70 76 4c 30 36 45 68 57 61 30 68 51 54 50 69 45 42 6b 6f 78 68 48 35 6b 6a 49 46 74 55 65 54 48 4a 33 2b 50 79 71 4b 6a 76 48 44 45 35 42 39 62 43 37 59 6d 53 6e 53 39 57 7a 53 46 57 32 6b 35 64 53 6b 37 5a 77 31 33 6b 34 31 4e 4f 46 6f 47 41 63 57 46 6b 7a 30 70 2b 54 Data Ascii: ShxSWaJRmA1smtLmhlBNrKslm8oXtFkD22KtTNQoiNsK+1UtATGeXfhC11t2rZi58T2Bjt8ccpPela9e4PqF+8/dcIO7+Arj0aj1ks58kF6z0qTF+aBgBJXVRCeDAHtM63SgqLQbLCdoMzYucHNNG/dUMfapBCYb6WQTMpvL06EhWa0hQTPiEBkoxhH5kjIFtUeTHJ3+PyqKjvHDE5B9bC7YmSnS9WzSFW2k5dSk7Zw13k41NOFoGAcWFkz0p+T
2024-04-26 15:32:37 UTC	470	IN	Data Raw: 78 64 33 4b 62 56 4e 43 69 49 6c 62 42 4b 44 55 4b 6f 53 59 2b 4e 36 48 36 6a 77 30 6a 35 7a 4e 56 63 66 54 62 30 61 55 61 30 32 73 68 4e 37 77 68 30 5a 37 73 4d 51 52 38 57 68 46 49 39 4c 72 50 65 4e 47 44 47 4a 67 64 4c 48 57 46 59 47 48 2b 71 59 50 71 72 57 50 36 37 77 45 55 76 54 76 2b 68 5a 75 50 55 4c 61 42 61 41 72 74 70 57 47 55 4a 46 70 76 2f 6b 4e 73 4a 56 56 58 43 34 55 32 7a 57 48 66 44 50 4c 31 71 65 37 35 7a 65 47 71 47 54 31 34 79 57 77 45 45 43 6b 69 59 6f 77 6d 45 49 55 69 58 65 31 44 30 66 52 44 53 6e 4a 5a 39 51 42 2f 52 4e 51 75 46 56 57 66 65 46 33 78 67 4b 61 6e 79 46 54 61 59 6f 48 31 39 33 4d 6d 50 38 63 61 4f 4d 43 32 31 62 78 2f 63 4f 73 77 34 6a 56 63 4e 75 68 46 6b 54 46 75 78 42 53 6a 4b 6d 65 68 6f 36 36 36 63 34 30 2f 4b 69 Data Ascii: xd3KbVNCiIlbBKDUKoSY+N6H6jw0j5zNVcfTb0aUa02shN7wh0Z7sMQR8WhFI9LrPeNGDGJgdLHWFYGH+qYPqrWP67wEUvTv+hZuPULaBaArtpWGUJFpv/kNsJVVXC4U2zWHfDPL1qe75zeGqGT14yWwEECkiYowmEIUiXe1D0fRDSnJZ9QB/RNQuFVWfeF3xgKanyFTaYoH193MmP8caOMC21bx/cOsw4jVcNuhFkTFuxBSjKmeho666c40/Ki
2024-04-26 15:32:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.16	49811	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:37 UTC	1413	OUT	GET /client_204?cs=1&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg
2024-04-26 15:32:37 UTC	1664	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-yEjoS8cZ6DkkMbXIc26Ztw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Fri, 26 Apr 2024 15:32:37 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE; expires=Sat, 26-Oct-2024 15:32:30 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.16	49813	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:37 UTC	1565	OUT	POST /gen_204?atyp=csi&ei=C8krZr7QHOyTwbkPuNyGwAw&s=jsa&jsi=s,st.9793,tni.0,atni.2,et.click,n.vZr2rb,cn.5,ie.0,vi.1&zx=1714145552381&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
2024-04-26 15:32:37 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-jimk3XnFIVP9HnrrXUqIAA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:37 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.16	49814	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:37 UTC	1556	OUT	POST /gen_204?atyp=i&ei=C8krZr7QHOyTwbkPuNyGwAw&ved=0ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ39UDCAw&bl=jahV&s=web&zx=1714145552381&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
2024-04-26 15:32:38 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-qQPZIxavG32gaJHoQXkElA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:38 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.16	49815	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:38 UTC	1852	OUT	GET /xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=sy3zk,sy4e6,w4UyN,sywu,sywv,EbPKJf,sy4tu,sy72c,J9Q59e,sy4tv,a6Sgfb,Tia57b,KpRAue,sy1kd,NyeqM,sy2t9,sy2ta,O9SqHb?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg
2024-04-26 15:32:38 UTC	816	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 8305 Date: Fri, 26 Apr 2024 15:32:38 GMT Expires: Sat, 26 Apr 2025 15:32:38 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 26 Apr 2024 06:52:27 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:38 UTC	439	IN	Data Raw: 74 68 69 73 2e 5f 73 3d 74 68 69 73 2e 5f 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 65 75 6b 3d 5f 2e 4f 6e 28 22 4c 68 78 38 65 66 22 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 42 57 6b 3d 5f 2e 43 28 22 77 34 55 79 4e 22 2c 5b 5d 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 7a 28 22 77 34 55 79 4e 22 29 3b 0a 76 61 72 20 4d 63 76 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 46 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4b 61 29 3b 74 68 69 73 2e 6b 61 3d 21 31 3b 74 68 69 73 2e 6f 61 3d 5f 2e 64 64 28 22 65 6c 50 64 Data Ascii: this._s=this._s\|\|{};(function(_){var window=this;try{_.euk=_.On("Lhx8ef");}catch(e){_._DumpException(e)}try{_.BWk=_.C("w4UyN",[]);}catch(e){_._DumpException(e)}try{_.z("w4UyN");var Mcv=function(a){_.F.call(this,a.Ka);this.ka=!1;this.oa=_.dd("elPd
2024-04-26 15:32:38 UTC	1255	IN	Data Raw: 75 6b 29 2c 21 74 68 69 73 2e 6b 61 29 7b 76 61 72 20 61 3d 5f 2e 49 75 28 6e 65 77 20 5f 2e 47 75 2c 5f 2e 48 75 28 31 33 34 36 33 34 29 29 3b 5f 2e 63 66 28 64 6f 63 75 6d 65 6e 74 2c 5f 2e 4a 75 2c 7b 49 73 3a 61 7d 29 3b 74 68 69 73 2e 6b 61 3d 21 30 7d 7d 65 6c 73 65 20 5f 2e 79 2e 73 65 74 53 74 79 6c 65 28 74 68 69 73 2e 6f 61 2c 22 74 72 61 6e 73 66 6f 72 6d 22 2c 22 22 29 3b 74 68 69 73 2e 79 62 28 22 73 75 45 4f 64 63 22 29 2e 73 65 74 53 74 79 6c 65 28 22 76 69 73 69 62 69 6c 69 74 79 22 2c 22 68 69 64 64 65 6e 22 29 7d 3b 0a 4d 63 76 2e 70 72 6f 74 6f 74 79 70 65 2e 73 68 6f 77 54 6f 6f 6c 74 69 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 79 62 28 22 73 75 45 4f 64 63 22 29 2e 73 65 74 53 74 79 6c 65 28 22 76 69 73 69 62 69 6c 69 74 Data Ascii: uk),!this.ka){var a=_.Iu(new _.Gu,_.Hu(134634));_.cf(document,_.Ju,{Is:a});this.ka=!0}}else _.y.setStyle(this.oa,"transform","");this.yb("suEOdc").setStyle("visibility","hidden")};Mcv.prototype.showTooltip=function(){this.yb("suEOdc").setStyle("visibilit
2024-04-26 15:32:38 UTC	1255	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 20 5f 2e 4b 66 28 74 68 69 73 2c 31 29 7d 3b 5f 2e 6b 2e 59 4c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 51 65 28 74 68 69 73 2c 31 29 7d 3b 5f 2e 6b 2e 67 74 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 45 28 74 68 69 73 2c 32 29 7d 3b 5f 2e 6b 2e 67 58 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 7a 65 28 74 68 69 73 2c 32 2c 61 29 7d 3b 5f 2e 6b 2e 6e 34 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 4b 66 28 74 68 69 73 2c 32 29 7d 3b 5f 2e 6b 2e 66 4a 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 51 65 28 74 68 69 73 2c 32 29 7d 3b 5f 2e 6b 2e 6a 79 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 45 Data Ascii: (){return _.Kf(this,1)};_.k.YLf=function(){return _.Qe(this,1)};_.k.gtd=function(){return _.E(this,2)};_.k.gXd=function(a){return _.ze(this,2,a)};_.k.n4e=function(){return _.Kf(this,2)};_.k.fJf=function(){return _.Qe(this,2)};_.k.jyc=function(){return _.E
2024-04-26 15:32:38 UTC	1255	IN	Data Raw: 28 61 29 7b 5f 2e 6b 67 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4b 61 29 3b 74 68 69 73 2e 53 67 3d 61 2e 53 64 2e 56 70 63 7d 3b 5f 2e 47 28 5f 2e 64 51 76 2c 5f 2e 6b 67 29 3b 5f 2e 64 51 76 2e 47 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 53 64 3a 7b 56 70 63 3a 5f 2e 63 51 76 7d 7d 7d 3b 5f 2e 74 71 28 5f 2e 59 35 6b 2c 5f 2e 64 51 76 29 3b 0a 5f 2e 41 28 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 5a 35 6b 3d 5f 2e 43 28 22 61 36 53 67 66 62 22 2c 5b 5f 2e 59 35 6b 5d 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 7a 28 22 61 36 53 67 66 62 22 29 3b 0a 76 61 72 20 65 51 76 3d 66 75 Data Ascii: (a){_.kg.call(this,a.Ka);this.Sg=a.Sd.Vpc};_.G(_.dQv,_.kg);_.dQv.Ga=function(){return{Sd:{Vpc:_.cQv}}};_.tq(_.Y5k,_.dQv);_.A();}catch(e){_._DumpException(e)}try{_.Z5k=_.C("a6Sgfb",[_.Y5k]);}catch(e){_._DumpException(e)}try{_.z("a6Sgfb");var eQv=fu
2024-04-26 15:32:38 UTC	1255	IN	Data Raw: 64 51 76 7d 2c 6a 73 64 61 74 61 3a 7b 64 61 74 61 3a 67 51 76 7d 7d 7d 3b 6b 51 76 2e 70 72 6f 74 6f 74 79 70 65 2e 48 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 51 76 28 74 68 69 73 2e 6d 6f 64 65 6c 2c 6c 51 76 28 74 68 69 73 29 29 7d 3b 0a 76 61 72 20 6a 51 76 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 4d 71 28 61 29 2e 6c 69 73 74 65 6e 28 5f 2e 4d 65 28 29 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 63 64 28 29 2e 75 44 28 29 3f 66 51 76 28 61 2e 6d 6f 64 65 6c 29 3a 65 51 76 28 61 2e 6d 6f 64 65 6c 2c 6c 51 76 28 61 29 29 7d 29 7d 2c 6c 51 76 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 6f 61 3d 61 2e 6d 6f 64 65 6c 2e 53 67 2e 67 65 74 28 29 2e 6a 79 63 28 29 3b 69 66 28 21 61 2e 6f 61 29 72 Data Ascii: dQv},jsdata:{data:gQv}}};kQv.prototype.Ha=function(){eQv(this.model,lQv(this))};var jQv=function(a){_.Mq(a).listen(_.Me(),"visibilitychange",function(){_.cd().uD()?fQv(a.model):eQv(a.model,lQv(a))})},lQv=function(a){a.oa=a.model.Sg.get().jyc();if(!a.oa)r
2024-04-26 15:32:38 UTC	1255	IN	Data Raw: 5f 2e 75 55 61 29 3b 0a 5f 2e 41 28 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 73 38 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 6d 61 74 63 68 28 2f 2e 2a 63 6f 6d 5c 2f 73 65 61 72 63 68 7c 5e 5c 2f 73 65 61 72 63 68 2f 29 29 72 65 74 75 72 6e 20 5f 2e 59 63 28 6e 65 77 20 5f 2e 45 64 28 22 75 72 6c 20 69 6e 76 61 6c 69 64 20 6e 6f 74 20 2f 73 65 61 72 63 68 22 29 29 2c 7b 78 50 61 3a 21 31 2c 6e 42 64 3a 21 30 7d 3b 76 61 72 20 62 2c 63 3d 6e 75 6c 6c 21 3d 28 62 3d 5f 2e 63 6d 28 61 2c 22 74 62 6d 22 29 29 3f 62 3a 22 77 65 62 22 3b 72 65 74 75 72 6e 22 77 65 62 22 21 3d 3d 63 3f 28 5f 2e 59 63 28 6e 65 77 20 5f 2e 45 64 28 22 75 72 6c 20 69 6e 76 61 6c 69 Data Ascii: _.uUa);_.A();}catch(e){_._DumpException(e)}try{_.s8d=function(a){if(!a.match(/.*com\/search\|^\/search/))return _.Yc(new _.Ed("url invalid not /search")),{xPa:!1,nBd:!0};var b,c=null!=(b=_.cm(a,"tbm"))?b:"web";return"web"!==c?(_.Yc(new _.Ed("url invali
2024-04-26 15:32:38 UTC	1255	IN	Data Raw: 6e 74 29 7b 66 6f 72 28 64 3d 63 3b 64 26 26 21 64 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6a 73 6c 6f 67 22 29 26 26 21 64 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 76 65 64 22 29 3b 29 64 3d 64 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3b 64 7c 7c 5f 2e 59 63 28 45 72 72 6f 72 28 22 42 6c 22 29 29 3b 67 2e 74 72 69 67 67 65 72 45 6c 65 6d 65 6e 74 3d 64 7d 61 2e 74 72 61 6e 73 69 74 69 6f 6e 28 63 2e 68 72 65 66 2c 67 29 3b 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 7d 7d 7d 63 61 74 63 68 28 68 29 7b 5f 2e 59 63 28 45 72 72 6f 72 28 22 7a 6c 60 22 2b 68 29 29 7d 7d 29 29 7d 2c 69 36 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 72 79 7b 76 61 72 20 63 3d 0a 6a 36 67 28 61 2c 62 29 2c 64 3d 63 3f 61 2e 6f 61 2e Data Ascii: nt){for(d=c;d&&!d.getAttribute("jslog")&&!d.getAttribute("data-ved");)d=d.parentElement;d\|\|_.Yc(Error("Bl"));g.triggerElement=d}a.transition(c.href,g);b.preventDefault()}}}}catch(h){_.Yc(Error("zl`"+h))}}))},i6g=function(a,b){try{var c=j6g(a,b),d=c?a.oa.
2024-04-26 15:32:38 UTC	223	IN	Data Raw: 7c 7c 7b 7d 3b 64 3d 63 2e 75 72 6c 3b 69 66 28 21 62 2e 67 47 29 7b 66 2e 48 62 28 32 29 3b 62 72 65 61 6b 7d 5f 2e 74 67 28 66 2c 33 29 3b 72 65 74 75 72 6e 20 66 2e 79 69 65 6c 64 28 62 2e 67 47 2e 74 72 61 6e 73 69 74 69 6f 6e 28 64 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 35 29 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 66 2e 72 65 74 75 72 6e 28 29 3b 63 61 73 65 20 33 3a 65 3d 5f 2e 78 67 28 66 29 2c 5f 2e 59 63 28 45 72 72 6f 72 28 22 45 6c 60 22 2b 65 29 29 3b 63 61 73 65 20 32 3a 62 2e 49 63 2e 47 68 28 64 2c 21 31 29 2c 5f 2e 73 67 28 66 29 7d 7d 29 7d 3b 5f 2e 4a 28 4f 36 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 52 79 53 4f 36 64 22 2c 66 75 6e 63 74 Data Ascii: \|\|{};d=c.url;if(!b.gG){f.Hb(2);break}_.tg(f,3);return f.yield(b.gG.transition(d.toString()),5);case 5:return f.return();case 3:e=_.xg(f),_.Yc(Error("El`"+e));case 2:b.Ic.Gh(d,!1),_.sg(f)}})};_.J(O6g.prototype,"RySO6d",funct
2024-04-26 15:32:38 UTC	113	IN	Data Raw: 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 61 76 69 67 61 74 65 7d 29 3b 0a 5f 2e 50 71 28 5f 2e 4e 36 67 2c 4f 36 67 29 3b 0a 5f 2e 41 28 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 7d 29 28 74 68 69 73 2e 5f 73 29 3b 0a 2f 2f 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 0a Data Ascii: ion(){return this.navigate});_.Pq(_.N6g,O6g);_.A();}catch(e){_._DumpException(e)}})(this._s);// Google Inc.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.16	49818	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:38 UTC	1579	OUT	POST /gen_204?atyp=csi&ei=C8krZr7QHOyTwbkPuNyGwAw&s=jsa&jsi=s,st.9912,tni.0,atni.3,et.click,n.vZr2rb,cn.6,ie.0,vi.1&zx=1714145552501&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg
2024-04-26 15:32:38 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-BOcAy-DtxdxOdm4-KOQ_TQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:38 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.16	49817	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:38 UTC	1570	OUT	POST /gen_204?atyp=i&ei=C8krZr7QHOyTwbkPuNyGwAw&ved=0ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ39UDCAw&bl=jahV&s=web&zx=1714145552501&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg
2024-04-26 15:32:38 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-ci25DWjGnsksW55TfO9X8A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:38 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.16	49819	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:38 UTC	2854	OUT	POST /gen_204?atyp=i&ei=C8krZr7QHOyTwbkPuNyGwAw&ct=slh&v=t1&m=HV&pv=0.14650127985811778&me=1:1714145547008,V,0,0,1034,870:0,B,1812:0,N,1,C8krZr7QHOyTwbkPuNyGwAw:0,R,1,9,24,36,92,34:0,R,1,CA0QAA,28,88,1065,57:0,R,1,CA0QAQ,28,88,670,45:0,R,1,CBIQAA,28,88,36,45:0,R,1,CBIQAQ,28,102,36,31:0,R,1,CBEQAA,66,90,66,42:0,R,1,CBEQAQ,66,90,66,42:0,R,1,CA8QAA,133,90,79,42:0,R,1,CA8QAQ,133,90,79,42:0,R,1,CBAQAA,215,90,54,42:0,R,1,CBAQAQ,215,90,54,42:0,R,1,CA4QAA,271,90,63,42:0,R,1,CA4QAQ,271,90,63,42:0,R,1,CAEQAA,28,202,652,1496:0,R,1,CAoQAQ,28,348,652,1350:3217,x:14,T:0,R,1,9,24,36,92,34:0,R,1,CA0QAA,28,88,951,57:0,R,1,CA0QAQ,28,88,670,45:0,R,1,CBIQAA,28,88,36,45:0,R,1,CBIQAQ,28,102,36,31:0,R,1,CBEQAA,66,90,66,42:0,R,1,CBEQAQ,66,90,66,42:0,R,1,CA8QAA,133,90,79,42:0,R,1,CA8QAQ,133,90,79,42:0,R,1,CBAQAA,215,90,54,42:0,R,1,CBAQAQ,215,90,54,42:0,R,1,CA4QAA,271,90,63,42:0,R,1,CA4QAQ,271,90,63,42:0,R,1,CAEQAA,28,202,652,1496:0,R,1,CAoQAQ,28,348,652,1350:7,T:0,R,1,9,24,36,92,34:0,R,1,CA0QAA,28,88,951,57:0,R,1,CA0QAQ,28,88,670,45:0,R,1,CBIQAA,28,88,36,45:0,R,1,CBIQAQ,28,102,36,31:0,R,1,CBEQAA,66,90,66,42:0,R,1,CBEQAQ,66,90,66,42:0,R,1,CA8QAA,133,90,79,42:0,R,1,CA8QAQ,133,90,79,42:0,R,1,CBAQAA,215,90,54,42:0,R,1,CBAQAQ,215,90,54,42:0,R,1,CA4QAA,271,90,63,42:0,R,1,CA4QAQ,271,90,63,42:0,R,1,CAEQAA,28,202,652,1496:0,R,1,CAoQAQ,28,348,652,1350:1258,V,0,0,0,0:3019,V,0,0,1034,870:1,e,B&zx=1714145554524&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg; NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE
2024-04-26 15:32:38 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-COT6J6K8Q5Jx2v9ojbkcbA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:38 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.16	49812	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:38 UTC	1714	OUT	POST /gen_204?atyp=csi&ei=E8krZtq0O5DvkvQPhcq9oAE&s=async&astyp=asyncContextualTask&ima=0&imn=0&mem=ujhs.17,tjhs.21,jhsl.2173,dm.8&nv=ne.2,feid.6b7c86dd-5656-4e17-b8e8-3066ab3bf4fd&hp=&rt=ttfb.1013,st.1014,bs.0,aaft.1014,acrt.1015,art.1015&zx=1714145554994&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg; NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE
2024-04-26 15:32:39 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-N9vtWg6kGLh17Yv0kJ47QA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:38 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.16	49821	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:38 UTC	1984	OUT	GET /xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=sywy,syx0,syx1,WlNQGd,sy2mm,sy2mn,nabPbb,syww,sywx,sywz,CnSW2d,sy1f9,sy1fa,sy1fb,sy1fc,sy1fd,sy1fe,sy4dj,sy6y6,VD4Qme,syf9,BYwJlf,syns,syo1,syo6,VEbNoe,symg,sy2ob,sy2oc,sy5a0,ND0kmf,pjDTFb,sy1wv,sy2t7,sy2tg,sy2th,KgxeNb,sy2tc,khkNpe?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg; NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE
2024-04-26 15:32:39 UTC	817	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 61299 Date: Fri, 26 Apr 2024 15:32:39 GMT Expires: Sat, 26 Apr 2025 15:32:39 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 26 Apr 2024 06:52:27 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:39 UTC	438	IN	Data Raw: 74 68 69 73 2e 5f 73 3d 74 68 69 73 2e 5f 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 6a 31 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 65 76 65 6e 74 2e 64 65 74 61 69 6c 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 74 79 70 65 3f 22 6d 65 6e 75 5f 69 74 65 6d 5f 73 65 6c 65 63 74 65 64 22 3d 3d 3d 62 2e 74 79 70 65 3a 53 74 72 69 6e 67 28 61 2e 74 79 70 65 29 3d 3d 3d 53 74 72 69 6e 67 28 5f 2e 69 31 62 29 7d 3b 5f 2e 69 31 62 3d 5f 2e 4f 6e 28 22 6d 4d 66 36 31 65 22 29 3b 5f 2e 6b 31 62 3d 5f 2e 4f 6e 28 22 4c 79 57 4e 45 66 22 29 3b 5f 2e 6c 31 62 3d 5f 2e 4f 6e 28 22 4f 56 59 31 6b 64 22 29 3b 5f 2e 6d 31 62 3d 5f 2e 4f 6e 28 22 6e 75 6e 58 5a 22 29 Data Ascii: this._s=this._s\|\|{};(function(_){var window=this;try{_.j1b=function(a){var b=a.event.detail;return b&&b.type?"menu_item_selected"===b.type:String(a.type)===String(_.i1b)};_.i1b=_.On("mMf61e");_.k1b=_.On("LyWNEf");_.l1b=_.On("OVY1kd");_.m1b=_.On("nunXZ")
2024-04-26 15:32:39 UTC	1255	IN	Data Raw: 6f 6e 28 61 29 7b 5f 2e 46 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4b 61 29 3b 74 68 69 73 2e 42 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 41 61 3d 5b 5d 3b 74 68 69 73 2e 6f 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 70 72 65 66 69 78 3d 22 22 3b 74 68 69 73 2e 51 69 61 3d 5b 5d 2e 63 6f 6e 63 61 74 28 5f 2e 61 64 28 61 2e 63 6f 6e 74 72 6f 6c 6c 65 72 73 2e 51 69 61 29 2c 5f 2e 61 64 28 61 2e 63 6f 6e 74 72 6f 6c 6c 65 72 73 2e 62 6c 67 29 2c 5f 2e 61 64 28 61 2e 63 6f 6e 74 72 6f 6c 6c 65 72 73 2e 65 38 65 29 29 3b 74 68 69 73 2e 6d 65 6e 75 3d 74 68 69 73 2e 67 65 74 52 6f 6f 74 28 29 2e 65 6c 28 29 3b 74 68 69 73 2e 4a 61 3d 22 6c 69 73 74 62 6f 78 22 3d 3d 3d 5f 2e 41 43 61 28 74 68 69 73 2e 6d 65 6e 75 29 3b 74 68 69 73 2e 51 61 3d 6e 65 77 20 5f 2e 6d 71 28 74 Data Ascii: on(a){_.F.call(this,a.Ka);this.Ba=null;this.Aa=[];this.oa=null;this.prefix="";this.Qia=[].concat(_.ad(a.controllers.Qia),_.ad(a.controllers.blg),_.ad(a.controllers.e8e));this.menu=this.getRoot().el();this.Ja="listbox"===_.ACa(this.menu);this.Qa=new _.mq(t
2024-04-26 15:32:39 UTC	1255	IN	Data Raw: 65 61 6b 3b 63 61 73 65 20 31 3a 63 61 73 65 20 37 3a 63 61 73 65 20 36 3a 63 61 73 65 20 34 3a 63 61 73 65 20 35 3a 63 61 73 65 20 31 30 3a 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 62 2e 67 65 74 54 79 70 65 28 29 7d 62 2e 43 73 28 21 31 29 7d 72 31 62 28 74 68 69 73 2c 6e 75 6c 6c 29 7d 3b 76 61 72 20 71 31 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 42 61 26 26 28 61 2e 6b 61 28 61 2e 42 61 29 2e 43 73 28 21 31 29 2c 61 2e 42 61 3d 6e 75 6c 6c 29 7d 3b 4c 76 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 51 69 61 2e 66 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 2e 67 65 74 52 6f 6f 74 28 29 2e 65 6c 28 29 3d 3d 3d 61 7d 29 7d 3b 0a 76 61 72 20 73 31 62 Data Ascii: eak;case 1:case 7:case 6:case 4:case 5:case 10:break;default:b.getType()}b.Cs(!1)}r1b(this,null)};var q1b=function(a){a.Ba&&(a.ka(a.Ba).Cs(!1),a.Ba=null)};Lv.prototype.ka=function(a){return this.Qia.find(function(b){return b.getRoot().el()===a})};var s1b
2024-04-26 15:32:39 UTC	1255	IN	Data Raw: 74 75 72 6e 20 61 3b 62 3d 28 6e 65 77 20 5f 2e 56 66 28 5b 61 5d 29 29 2e 66 69 6e 64 28 22 2a 22 29 2e 74 6f 41 72 72 61 79 28 29 3b 72 65 74 75 72 6e 28 61 3d 5b 61 5d 2e 63 6f 6e 63 61 74 28 62 29 2e 66 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 5f 2e 62 65 28 63 29 26 26 5f 2e 79 2e 4e 65 28 63 29 26 26 28 22 6d 65 6e 75 69 74 65 6d 22 3d 3d 3d 63 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 29 26 26 63 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 29 7c 7c 5f 2e 4b 6c 28 63 29 29 7d 29 29 3f 61 3a 6e 75 6c 6c 7d 3b 5f 2e 6b 2e 69 4e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 26 26 21 73 31 62 28 74 68 69 73 2c 61 29 7c 7c 72 31 62 28 74 68 69 73 2c 61 29 7d 3b 0a 76 61 72 20 72 31 Data Ascii: turn a;b=(new _.Vf([a])).find("*").toArray();return(a=[a].concat(b).find(function(c){return _.be(c)&&_.y.Ne(c)&&("menuitem"===c.getAttribute("role")&&c.hasAttribute("tabindex")\|\|_.Kl(c))}))?a:null};_.k.iNa=function(a){a&&!s1b(this,a)\|\|r1b(this,a)};var r1
2024-04-26 15:32:39 UTC	1255	IN	Data Raw: 65 74 75 72 6e 21 31 3b 76 61 72 20 63 3d 62 2e 77 68 69 63 68 7c 7c 62 2e 6b 65 79 43 6f 64 65 2c 64 3d 21 31 3b 69 66 28 32 37 3d 3d 3d 63 29 72 65 74 75 72 6e 21 30 3b 69 66 28 34 30 3d 3d 3d 63 7c 7c 33 38 3d 3d 3d 63 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6f 61 2c 66 3d 74 68 69 73 2e 4b 39 28 29 3b 65 3d 33 38 3d 3d 3d 63 3f 65 3d 3d 3d 66 5b 30 5d 3a 65 3d 3d 3d 66 2e 70 6f 70 28 29 3b 69 66 28 21 74 68 69 73 2e 4a 61 7c 7c 21 65 29 7b 63 3d 34 30 3d 3d 3d 63 3b 65 3d 77 31 62 28 74 68 69 73 2c 63 29 3b 76 61 72 20 67 3b 63 3d 6e 75 6c 6c 21 3d 28 67 3d 63 3f 65 2e 73 68 69 66 74 28 29 3a 65 2e 70 6f 70 28 29 29 3f 67 3a 6e 75 6c 6c 3b 72 31 62 28 74 68 69 73 2c 63 29 3b 74 68 69 73 2e 48 61 28 74 68 69 73 2e 6f 61 29 7d 7d 65 6c 73 65 20 69 66 28 Data Ascii: eturn!1;var c=b.which\|\|b.keyCode,d=!1;if(27===c)return!0;if(40===c\|\|38===c){var e=this.oa,f=this.K9();e=38===c?e===f[0]:e===f.pop();if(!this.Ja\|\|!e){c=40===c;e=w1b(this,c);var g;c=null!=(g=c?e.shift():e.pop())?g:null;r1b(this,c);this.Ha(this.oa)}}else if(
2024-04-26 15:32:39 UTC	1255	IN	Data Raw: 6d 65 6e 75 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 74 6f 70 2c 65 3d 5f 2e 79 2e 67 65 74 53 69 7a 65 28 61 29 3b 64 3d 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 74 6f 70 2d 64 3b 76 61 72 20 66 3d 65 2e 68 65 69 67 68 74 2f 32 3b 64 3c 66 3f 74 68 69 73 2e 6d 65 6e 75 2e 73 63 72 6f 6c 6c 54 6f 70 2b 3d 64 2d 66 3a 64 2b 65 2e 68 65 69 67 68 74 3e 63 2e 68 65 69 67 68 74 2d 66 26 26 28 74 68 69 73 2e 6d 65 6e 75 2e 73 63 72 6f 6c 6c 54 6f 70 2b 3d 64 2b 65 2e 68 65 69 67 68 74 2d 63 2e 68 65 69 67 68 74 2b 66 29 3b 62 26 26 28 74 68 69 73 2e 6d 65 6e 75 2e 73 63 72 6f 6c 6c 54 6f 70 2b 3d 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 74 6f 70 2d 74 68 Data Ascii: menu.getBoundingClientRect().top,e=_.y.getSize(a);d=a.getBoundingClientRect().top-d;var f=e.height/2;d<f?this.menu.scrollTop+=d-f:d+e.height>c.height-f&&(this.menu.scrollTop+=d+e.height-c.height+f);b&&(this.menu.scrollTop+=a.getBoundingClientRect().top-th
2024-04-26 15:32:39 UTC	1255	IN	Data Raw: 67 58 66 4f 71 62 22 29 3b 5f 2e 6a 4a 67 3d 5f 2e 4f 6e 28 22 6e 31 49 71 33 22 29 3b 5f 2e 6b 4a 67 3d 5f 2e 4f 6e 28 22 78 36 42 43 66 62 22 29 3b 5f 2e 6c 4a 67 3d 5f 2e 4f 6e 28 22 42 56 66 6a 68 66 22 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 6e 4a 67 3d 5f 2e 43 28 22 6e 61 62 50 62 62 22 2c 5b 5d 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 7a 28 22 6e 61 62 50 62 62 22 29 3b 0a 76 61 72 20 6f 4a 67 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 46 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4b 61 29 3b 74 68 69 73 2e 6b 61 3d 61 2e 63 6f 6e 74 72 6f 6c 6c 65 72 2e 48 68 2e 45 61 28 22 78 6c 30 37 Data Ascii: gXfOqb");_.jJg=_.On("n1Iq3");_.kJg=_.On("x6BCfb");_.lJg=_.On("BVfjhf");}catch(e){_._DumpException(e)}try{_.nJg=_.C("nabPbb",[]);}catch(e){_._DumpException(e)}try{_.z("nabPbb");var oJg=function(a){_.F.call(this,a.Ka);this.ka=a.controller.Hh.Ea("xl07
2024-04-26 15:32:39 UTC	1255	IN	Data Raw: 2e 4e 65 28 68 29 29 7b 65 2e 69 4e 61 28 68 29 3b 65 2e 48 61 28 68 29 3b 62 72 65 61 6b 7d 7d 62 2e 6e 6f 74 69 66 79 28 5f 2e 68 4a 67 29 7d 7d 29 7d 3b 0a 6f 4a 67 2e 70 72 6f 74 6f 74 79 70 65 2e 77 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 64 64 28 22 73 65 61 72 63 68 66 6f 72 6d 22 29 2c 63 3d 74 68 69 73 2e 70 6f 70 75 70 2e 67 65 74 50 6f 70 75 70 28 29 3b 62 26 26 62 2e 63 6f 6e 74 61 69 6e 73 28 61 2e 74 61 72 67 65 74 45 6c 65 6d 65 6e 74 2e 65 6c 28 29 29 3f 28 5f 2e 79 2e 73 65 74 53 74 79 6c 65 28 62 2c 22 7a 2d 69 6e 64 65 78 22 2c 22 22 29 2c 5f 2e 79 2e 73 65 74 53 74 79 6c 65 28 63 2c 22 70 6f 73 69 74 69 6f 6e 22 2c 22 22 29 2c 74 68 69 73 2e 70 6f 70 75 70 2e 58 61 62 28 30 2c 30 29 29 3a 74 68 69 73 2e 6f 61 Data Ascii: .Ne(h)){e.iNa(h);e.Ha(h);break}}b.notify(_.hJg)}})};oJg.prototype.wa=function(a){var b=_.dd("searchform"),c=this.popup.getPopup();b&&b.contains(a.targetElement.el())?(_.y.setStyle(b,"z-index",""),_.y.setStyle(c,"position",""),this.popup.Xab(0,0)):this.oa
2024-04-26 15:32:39 UTC	1255	IN	Data Raw: 74 61 3d 61 2e 6a 73 64 61 74 61 2e 6d 69 66 3b 74 68 69 73 2e 72 6f 6f 74 3d 74 68 69 73 2e 67 65 74 52 6f 6f 74 28 29 2e 65 6c 28 29 3b 74 68 69 73 2e 72 6f 6f 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 26 26 74 68 69 73 2e 73 65 74 45 6e 61 62 6c 65 64 28 21 31 29 7d 3b 5f 2e 47 28 4b 76 2c 5f 2e 46 29 3b 4b 76 2e 47 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 6a 73 64 61 74 61 3a 7b 6d 69 66 3a 5f 2e 66 31 62 7d 7d 7d 3b 5f 2e 6b 3d 4b 76 2e 70 72 6f 74 6f 74 79 70 65 3b 5f 2e 6b 2e 64 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 6f 6f 74 7d 3b 5f 2e 6b 2e 79 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 6f 6f 74 7d 3b 5f 2e 6b 2e 67 Data Ascii: ta=a.jsdata.mif;this.root=this.getRoot().el();this.root.getAttribute("disabled")&&this.setEnabled(!1)};_.G(Kv,_.F);Kv.Ga=function(){return{jsdata:{mif:_.f1b}}};_.k=Kv.prototype;_.k.dce=function(){return this.root};_.k.yh=function(){return this.root};_.k.g
2024-04-26 15:32:39 UTC	1255	IN	Data Raw: 2e 72 6f 6f 74 2c 22 73 68 6f 72 74 4c 61 62 65 6c 22 29 7d 3b 5f 2e 6b 2e 67 65 74 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 61 74 61 2e 67 65 74 56 61 6c 75 65 28 29 7d 3b 0a 5f 2e 4a 28 4b 76 2e 70 72 6f 74 6f 74 79 70 65 2c 22 48 76 6e 4b 32 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 56 61 6c 75 65 7d 29 3b 5f 2e 4a 28 4b 76 2e 70 72 6f 74 6f 74 79 70 65 2c 22 54 49 4e 77 5a 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 48 61 7d 29 3b 5f 2e 4a 28 4b 76 2e 70 72 6f 74 6f 74 79 70 65 2c 22 61 44 47 73 34 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 43 6f 6e 74 65 6e 74 7d 29 3b 5f 2e 4a Data Ascii: .root,"shortLabel")};_.k.getValue=function(){return this.data.getValue()};_.J(Kv.prototype,"HvnK2b",function(){return this.getValue});_.J(Kv.prototype,"TINwZb",function(){return this.pHa});_.J(Kv.prototype,"aDGs4d",function(){return this.getContent});_.J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.16	49820	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:38 UTC	1613	OUT	POST /gen_204?atyp=i&ei=C8krZr7QHOyTwbkPuNyGwAw&vet=12ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ4dMLegQIBRAA.E8krZtq0O5DvkvQPhcq9oAE.s&bl=jahV&s=web&zx=1714145554995&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg; NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE
2024-04-26 15:32:39 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-a3utmccDgC2x-Bx6z61vJA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:39 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.16	49822	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:39 UTC	1714	OUT	POST /gen_204?atyp=csi&ei=FMkrZviwC9-LwbkP7beSmAM&s=async&astyp=asyncContextualTask&ima=0&imn=0&mem=ujhs.17,tjhs.21,jhsl.2173,dm.8&nv=ne.2,feid.6b7c86dd-5656-4e17-b8e8-3066ab3bf4fd&hp=&rt=ttfb.1802,st.1803,bs.0,aaft.1803,acrt.1806,art.1806&zx=1714145555787&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg; NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE
2024-04-26 15:32:39 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-znlK8-wREfS853RZ9mPz0Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:39 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.16	49823	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:39 UTC	1613	OUT	POST /gen_204?atyp=i&ei=C8krZr7QHOyTwbkPuNyGwAw&vet=12ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ4dMLegQICBAA.FMkrZviwC9-LwbkP7beSmAM.s&bl=jahV&s=web&zx=1714145555788&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg; NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE
2024-04-26 15:32:39 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-fqodR-hTlpqL6bgKlmC0Dg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:39 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.16	49824	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:39 UTC	1529	OUT	POST /gen_204?atyp=i&ei=C8krZr7QHOyTwbkPuNyGwAw&dt19=2&zx=1714145555816&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg; NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE
2024-04-26 15:32:39 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-yaeuA7nMkce2j7qVVarFzw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:39 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.16	49825	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:40 UTC	1713	OUT	POST /gen_204?atyp=csi&ei=FMkrZpvZMreZwt0PnberCA&s=async&astyp=asyncContextualTask&ima=0&imn=0&mem=ujhs.17,tjhs.21,jhsl.2173,dm.8&nv=ne.2,feid.6b7c86dd-5656-4e17-b8e8-3066ab3bf4fd&hp=&rt=ttfb.1870,st.1870,bs.0,aaft.1870,acrt.1871,art.1871&zx=1714145555853&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg; NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE
2024-04-26 15:32:40 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-YbLSV5mhCzdnyqcX7ur8jQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:40 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.16	49826	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:40 UTC	1612	OUT	POST /gen_204?atyp=i&ei=C8krZr7QHOyTwbkPuNyGwAw&vet=12ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ4dMLegQIBhAA.FMkrZpvZMreZwt0PnberCA.s&bl=jahV&s=web&zx=1714145555853&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg; NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE
2024-04-26 15:32:40 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-hAVnfB8osXmPjElK7lO7lA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:40 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.16	49827	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:40 UTC	1767	OUT	GET /xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=syfc,syfd,aLUfP?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg; NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE
2024-04-26 15:32:41 UTC	816	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 1637 Date: Fri, 26 Apr 2024 15:32:40 GMT Expires: Sat, 26 Apr 2025 15:32:40 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 26 Apr 2024 06:52:27 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:41 UTC	439	IN	Data Raw: 74 68 69 73 2e 5f 73 3d 74 68 69 73 2e 5f 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 62 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 4f 6d 3d 61 7d 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 76 61 72 20 63 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 78 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4b 61 29 3b 76 61 72 20 62 3d 74 68 69 73 3b 74 68 69 73 2e 77 69 6e 64 6f 77 3d 61 2e 73 65 72 76 69 63 65 2e 77 69 6e 64 6f 77 2e 67 65 74 28 29 3b 74 68 69 73 2e 77 61 3d 74 68 69 73 2e 4f 6d 28 29 3b 74 68 69 73 2e 6f 61 3d 77 69 6e 64 6f 77 2e 6f 72 69 65 6e 74 61 74 69 6f 6e 3b 74 68 Data Ascii: this._s=this._s\|\|{};(function(_){var window=this;try{_.btb=function(a){this.Om=a};}catch(e){_._DumpException(e)}try{var ctb=function(a){_.xn.call(this,a.Ka);var b=this;this.window=a.service.window.get();this.wa=this.Om();this.oa=window.orientation;th
2024-04-26 15:32:41 UTC	585	IN	Data Raw: 65 2e 64 6f 6e 65 3b 65 3d 64 2e 6e 65 78 74 28 29 29 7b 65 3d 65 2e 76 61 6c 75 65 3b 76 61 72 20 66 3d 6e 65 77 20 5f 2e 62 74 62 28 63 29 3b 74 72 79 7b 65 28 66 29 7d 63 61 74 63 68 28 67 29 7b 5f 2e 63 61 28 67 29 7d 7d 7d 7d 3b 74 68 69 73 2e 47 65 3d 6e 65 77 20 53 65 74 3b 74 68 69 73 2e 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 74 68 69 73 2e 6b 61 29 3b 74 68 69 73 2e 65 4e 62 28 29 26 26 74 68 69 73 2e 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6f 72 69 65 6e 74 61 74 69 6f 6e 63 68 61 6e 67 65 22 2c 0a 74 68 69 73 2e 6b 61 29 7d 3b 5f 2e 47 28 63 74 62 2c 5f 2e 78 6e 29 3b 63 74 62 2e 6e 62 3d 5f 2e 78 6e 2e 6e 62 3b 63 74 62 2e 47 61 3d 66 75 6e 63 74 69 Data Ascii: e.done;e=d.next()){e=e.value;var f=new _.btb(c);try{e(f)}catch(g){_.ca(g)}}}};this.Ge=new Set;this.window.addEventListener("resize",this.ka);this.eNb()&&this.window.addEventListener("orientationchange",this.ka)};_.G(ctb,_.xn);ctb.nb=_.xn.nb;ctb.Ga=functi
2024-04-26 15:32:41 UTC	613	IN	Data Raw: 29 3a 74 68 69 73 2e 77 69 6e 64 6f 77 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 29 3f 5f 2e 70 6c 28 74 68 69 73 2e 77 69 6e 64 6f 77 29 3a 6e 65 77 20 5f 2e 59 6b 28 74 68 69 73 2e 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 2c 74 68 69 73 2e 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 29 3b 72 65 74 75 72 6e 20 61 2e 68 65 69 67 68 74 3c 61 2e 77 69 64 74 68 7d 3b 63 74 62 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 74 68 69 73 2e 6b 61 29 3b 74 68 69 73 2e 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6f 72 69 65 6e 74 61 74 69 Data Ascii: ):this.window.visualViewport)?_.pl(this.window):new _.Yk(this.window.innerWidth,this.window.innerHeight);return a.height<a.width};ctb.prototype.destroy=function(){this.window.removeEventListener("resize",this.ka);this.window.removeEventListener("orientati

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.16	49828	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:41 UTC	1770	OUT	GET /xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=kMFpHd,sy8s,bm51tf?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg; NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE
2024-04-26 15:32:41 UTC	816	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 1671 Date: Fri, 26 Apr 2024 15:32:41 GMT Expires: Sat, 26 Apr 2025 15:32:41 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 26 Apr 2024 06:52:27 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:32:41 UTC	439	IN	Data Raw: 74 68 69 73 2e 5f 73 3d 74 68 69 73 2e 5f 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 7a 28 22 6b 4d 46 70 48 64 22 29 3b 0a 5f 2e 73 63 62 3d 6e 65 77 20 5f 2e 75 64 28 5f 2e 54 4c 61 29 3b 0a 5f 2e 41 28 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 76 61 72 20 42 63 62 3b 5f 2e 43 63 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 74 68 69 73 2e 75 6c 62 3d 61 3b 74 68 69 73 2e 6a 51 66 3d 62 3b 74 68 69 73 2e 71 70 63 3d 63 3b 74 68 69 73 2e 53 59 66 3d 64 3b 74 68 69 73 2e 55 68 67 3d 65 3b 74 68 69 73 2e 6d 61 63 3d 30 3b 74 68 69 73 2e 70 70 63 3d 42 63 62 28 74 68 69 73 29 7d Data Ascii: this._s=this._s\|\|{};(function(_){var window=this;try{_.z("kMFpHd");_.scb=new _.ud(_.TLa);_.A();}catch(e){_._DumpException(e)}try{var Bcb;_.Ccb=function(a,b,c,d,e){this.ulb=a;this.jQf=b;this.qpc=c;this.SYf=d;this.Uhg=e;this.mac=0;this.ppc=Bcb(this)}
2024-04-26 15:32:41 UTC	585	IN	Data Raw: 2e 75 6c 62 3f 21 31 3a 6e 75 6c 6c 21 3d 61 3f 21 21 74 68 69 73 2e 55 68 67 5b 61 5d 3a 21 30 7d 3b 5f 2e 44 63 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 76 53 61 28 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 68 65 60 22 2b 61 2e 75 6c 62 29 3b 2b 2b 61 2e 6d 61 63 3b 61 2e 70 70 63 3d 42 63 62 28 61 29 7d 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 7a 28 22 62 6d 35 31 74 66 22 29 3b 0a 76 61 72 20 45 63 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 7b 7d 3b 5f 2e 4c 61 28 61 2e 76 42 63 28 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 62 5b 65 5d 3d 21 30 7d 29 3b 76 61 72 20 63 3d 61 2e 48 7a 63 28 29 2c 64 3d 61 2e 6e 41 63 28 29 3b 72 65 74 75 Data Ascii: .ulb?!1:null!=a?!!this.Uhg[a]:!0};_.Dcb=function(a){if(!a.vSa())throw Error("he`"+a.ulb);++a.mac;a.ppc=Bcb(a)};}catch(e){_._DumpException(e)}try{_.z("bm51tf");var Ecb=function(a){var b={};_.La(a.vBc(),function(e){b[e]=!0});var c=a.Hzc(),d=a.nAc();retu
2024-04-26 15:32:41 UTC	647	IN	Data Raw: 6f 74 79 70 65 2e 6f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 31 21 3d 74 68 69 73 2e 41 61 2e 67 65 74 54 79 70 65 28 61 2e 58 72 28 29 29 29 72 65 74 75 72 6e 20 5f 2e 58 62 62 28 61 29 3b 76 61 72 20 63 3d 74 68 69 73 2e 77 61 2e 6b 61 3b 28 63 3d 63 3f 45 63 62 28 63 29 3a 6e 75 6c 6c 29 26 26 63 2e 76 53 61 28 29 3f 28 62 3d 48 63 62 28 74 68 69 73 2c 61 2c 62 2c 63 29 2c 61 3d 6e 65 77 20 5f 2e 54 62 62 28 61 2c 62 2c 32 29 29 3a 61 3d 5f 2e 58 62 62 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 76 61 72 20 48 63 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 63 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 46 63 62 29 Data Ascii: otype.oa=function(a,b){if(1!=this.Aa.getType(a.Xr()))return _.Xbb(a);var c=this.wa.ka;(c=c?Ecb(c):null)&&c.vSa()?(b=Hcb(this,a,b,c),a=new _.Tbb(a,b,2)):a=_.Xbb(a);return a};var Hcb=function(a,b,c,d){return c.then(function(e){return e},function(e){if(Fcb)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.16	49829	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:42 UTC	1556	OUT	GET /gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=C8krZr7QHOyTwbkPuNyGwAw&zx=1714145560773&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg; NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE
2024-04-26 15:32:42 UTC	1351	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-nKew2-re8MCqoQqWXWe2hg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:42 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-26-15; expires=Sun, 26-May-2024 15:32:42 GMT; path=/; domain=.google.com; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.16	49830	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:44 UTC	1090	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.142443&oit=4&cp=15&url=https%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&pgcl=9&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE; 1P_JAR=2024-04-26-15
2024-04-26 15:32:44 UTC	1703	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:32:44 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-iV-gjByFuN-4pfYxLNkIag' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:32:44 UTC	144	IN	Data Raw: 38 61 0d 0a 29 5d 7d 27 0a 5b 22 31 30 34 2e 39 34 2e 31 30 39 2e 31 34 32 34 34 33 22 2c 5b 5d 2c 5b 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 7d 5d 0d 0a Data Ascii: 8a)]}'["104.94.109.142443",[],[],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggesttype":[],"google:verbatimrelevance":851}]
2024-04-26 15:32:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.16	49832	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:46 UTC	1723	OUT	POST /gen_204?oq=****************&gs_lp=Egxnd3Mtd2l6LXNlcnAiESoqKioqKioqKioqKioqKioqSLxxUABYAHAFeACQAQCYAeIIoAHiCKoBAzctMbgBFsgBAJgCAKACAJgDAIgGAZIHAKAHRQ&sclient=gws-wiz-serp&ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: /* Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg; NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE; 1P_JAR=2024-04-26-15
2024-04-26 15:32:46 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-v4SgFz51nzwl0rIqk0MEtA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:46 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.16	49835	142.251.35.228	443	6492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:46 UTC	1643	OUT	POST /gen_204?atyp=i&ei=C8krZr7QHOyTwbkPuNyGwAw&ct=slh&v=t1&im=M&pv=0.14650127985811778&me=55:1714145554525,V,0,0,0,0:6249,V,0,0,1034,870:4089,e,B&zx=1714145564863&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg; NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE; 1P_JAR=2024-04-26-15
2024-04-26 15:32:47 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-KH8eUs3T0ueHLhOWPnWqmw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 26 Apr 2024 15:32:46 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	17:30:48
Start date:	26/04/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Invoice INV-0003.pdf"
Imagebase:	0x7ff7fdfe0000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	17:30:49
Start date:	26/04/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff783b30000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	17:30:51
Start date:	26/04/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2268 --field-trial-handle=1568,i,12462945902927182256,8710539947262449294,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff783b30000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	17:31:46
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	17:31:47
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1924,i,1629623515606547392,5655261091976178097,262144 /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: Joe Sandbox View	IP Address: 104.94.108.142 104.94.108.142
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: global traffic	HTTP traffic detected: GET /onboarding/smskillreader.txt HTTP/1.1Host: armmf.adobe.comConnection: keep-aliveAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=DWP23o5EnE1h4Lz&MD=RHUsShKZ HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=DWP23o5EnE1h4Lz&MD=RHUsShKZ HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/ddljson?async=ntp:2 HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgRmgZjcGOWRr7EGIjBl3Z8mdV7iuQlXx3vrRkL4AVRIBUGOwGPzUYmxiw-erxFt5zhM4ErcjFfPkRW3OPQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=aAgFRJ-84LrbS9myeZFj7--hl8Dl4FLDUfiX76lTQbi2Vo5UrN8T2kyvmso5OxT9Qmo7_JvmFUzyGh_QG94RwcSkdq4r-AqUEAYA_OpqVQNBnMyLpAmzfueFr-LWRkcvSxq62OizXI3GcnHQUmK96YelFaRGPMZALMKDlzywC7E
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgRmgZjcGOWRr7EGIjAHwueNDSQI-WXeAdig1ilxcW5kJRzd2zjnuDDx24OkMugOmCswnljnlrWZEzXJrwEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=1&oit=4&cp=1&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=10&oit=4&cp=2&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104&oit=4&cp=3&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.&oit=4&cp=4&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94&oit=4&cp=6&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.&oit=4&cp=7&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.1&oit=4&cp=8&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109&oit=4&cp=10&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.&oit=4&cp=11&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.1&oit=3&cp=12&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.142&oit=3&cp=14&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.142%3A&oit=3&cp=15&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.142&oit=3&cp=14&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.142443&oit=4&cp=17&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /search?q=104.94.109.142443&oq=104.94.109.142443&gs_lcrp=EgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA&sourceid=chrome&ie=UTF-8 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRmgZjcGPORr7EGIjAjT-is8k6Uwm1EagwkXv7b_3Y6lH1AXZSE6X-OCgzMA9YBQPBGvSt1H2oAX7BK9VoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRmgZjcGPORr7EGIjAjT-is8k6Uwm1EagwkXv7b_3Y6lH1AXZSE6X-OCgzMA9YBQPBGvSt1H2oAX7BK9VoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&s=KAN_iKlHLO8R0NKiNKk0WWR6Z4gU4gG-TPOCOwjgtQNuPSfT4mukUg8B3rgwcZpUeZThhdud0p8kEuaohNHeLAcLw0ux1hPsgJBn1gjdnNI3jWHwexkcVfz0HXBxWL9dURbBXp0dPLOVXmf9O3riZSDttRSH47QuZk9GsRQYh5pRA1fVKpGZKKvfHwMuWe6uuVUYxRa19V86h5I4JU8bMZfoqXUPctpZ7ib1akxUq5T0kaC4wuEFOI8V6PwRbaxi1ink_9AZRHy9f4zmxv7kclRLhUX4SKM&cb=7zgrwx65alt9 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRmgZjcGPORr7EGIjAjT-is8k6Uwm1EagwkXv7b_3Y6lH1AXZSE6X-OCgzMA9YBQPBGvSt1H2oAX7BK9VoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&s=KAN_iKlHLO8R0NKiNKk0WWR6Z4gU4gG-TPOCOwjgtQNuPSfT4mukUg8B3rgwcZpUeZThhdud0p8kEuaohNHeLAcLw0ux1hPsgJBn1gjdnNI3jWHwexkcVfz0HXBxWL9dURbBXp0dPLOVXmf9O3riZSDttRSH47QuZk9GsRQYh5pRA1fVKpGZKKvfHwMuWe6uuVUYxRa19V86h5I4JU8bMZfoqXUPctpZ7ib1akxUq5T0kaC4wuEFOI8V6PwRbaxi1ink_9AZRHy9f4zmxv7kclRLhUX4SKM&cb=7zgrwx65alt9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&s=KAN_iKlHLO8R0NKiNKk0WWR6Z4gU4gG-TPOCOwjgtQNuPSfT4mukUg8B3rgwcZpUeZThhdud0p8kEuaohNHeLAcLw0ux1hPsgJBn1gjdnNI3jWHwexkcVfz0HXBxWL9dURbBXp0dPLOVXmf9O3riZSDttRSH47QuZk9GsRQYh5pRA1fVKpGZKKvfHwMuWe6uuVUYxRa19V86h5I4JU8bMZfoqXUPctpZ7ib1akxUq5T0kaC4wuEFOI8V6PwRbaxi1ink_9AZRHy9f4zmxv7kclRLhUX4SKM&cb=7zgrwx65alt9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRmgZjcGPORr7EGIjAjT-is8k6Uwm1EagwkXv7b_3Y6lH1AXZSE6X-OCgzMA9YBQPBGvSt1H2oAX7BK9VoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRmgZjcGPORr7EGIjAjT-is8k6Uwm1EagwkXv7b_3Y6lH1AXZSE6X-OCgzMA9YBQPBGvSt1H2oAX7BK9VoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA4usRjYkJfr9srSp2HD4-ZZAVZywMgBTv-cvcNDNMdzhtedLDEkllNnkQiQBbtl3h4As3V2Iew446Zxj5dcFMe0MMOrTyv4ts3-hjod8380h_vsvEgOVv7dHXvzSlPNaf0Z9uZQr8h58zsC5_C-Yi198SrWQsa7MZ5u3dpR8HcvIT4q5vas_t9yZ6LuKTyDOaezHVWLaYozqtkSHXw9w1wzsX9jSQ&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AEdsM9PDFaukKvlTlHSflSkwqygHONJPfvWK7qQ1uvIFU_r50US66f4O1u9-2AWCLMB8FOo6Nmt9GdiEovjwKxM; 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA6u0-JMSOaecoCXHzdsX-xxrcVrgCsTYc59nt6KMq8BRd5Ex-67_RPGwRPMTEZi8lNpFhlcgy5Y7-wQWe2KnHVK5ZfToZL-Vmn0Gttkh5Yl8o5rao17hCvwzK1zjndSb_zIf76VRoc2NtYot5-zOEOdfcEXA6g2mN7FHkMnr0u6AnUZuYajaPHwihB0Zx4V6YIUYxUYXrwQdWApHkKoki170EAOfQ&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=ced8fd5d7352b74 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AEdsM9PDFaukKvlTlHSflSkwqygHONJPfvWK7qQ1uvIFU_r50US66f4O1u9-2AWCLMB8FOo6Nmt9GdiEovjwKxM; 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA4qo7BvEsw6c5x7L0zWkwDxk41s4QXBFq-UTbLoYi4mYg5pWAHsT9vh8DMhbPPHIyjECIZ4cYU41ywyA8hdRigYZQJnKI4_I3uv32GImq_xmDdqm2nF9i9bAfGu7AlTCwBDt7YWEwIJ3RtEJzTJZfrDDqE8Eyg8H6v_CVaI8sLZw3REAQxg9HgOdQ_aRKGSEE8JfJrWqTp2iL71Gqv5cBxUH_2LMA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=d14cdf2cf524340b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AEdsM9PDFaukKvlTlHSflSkwqygHONJPfvWK7qQ1uvIFU_r50US66f4O1u9-2AWCLMB8FOo6Nmt9GdiEovjwKxM; 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA4qo7BvEsw6c5x7L0zWkwDxk41s4QXBFq-UTbLoYi4mYg5pWAHsT9vh8DMhbPPHIyjECIZ4cYU41ywyA8hdRigYZQJnKI4_I3uv32GImq_xmDdqm2nF9i9bAfGu7AlTCwBDt7YWEwIJ3RtEJzTJZfrDDqE8Eyg8H6v_CVaI8sLZw3REAQxg9HgOdQ_aRKGSEE8JfJrWqTp2iL71Gqv5cBxUH_2LMA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=abd561db531187e4 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AEdsM9PDFaukKvlTlHSflSkwqygHONJPfvWK7qQ1uvIFU_r50US66f4O1u9-2AWCLMB8FOo6Nmt9GdiEovjwKxM; 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA5n2WF8wv-ME7L61a1BMVDol7SKjmXRzD04LO-5qnc5Yo-7Uv3YESGK03INgkSkcBpqFw2IVRslTj_HEYCSE0bVNqb0YyT3pUC2Pe29yUaioY0zttD_Tipl2_G5Tpu8XD-YvFrTqIJ61dTX4sv2npmlKj-lwoCG7y0yslq1m5awBb8XY2F4ks8gOphnefktV5tmjcSue1lYveyn69HCB7uZNEAi1g&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=1868db878e889a63 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AEdsM9PDFaukKvlTlHSflSkwqygHONJPfvWK7qQ1uvIFU_r50US66f4O1u9-2AWCLMB8FOo6Nmt9GdiEovjwKxM; 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /search?q=104.94.109.142443&oq=104.94.109.142443&gs_lcrp=EgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA&sourceid=chrome&ie=UTF-8&google_abuse=GOOGLE_ABUSE_EXEMPTION%3DID%3D211ac792a2de2ae0:TM%3D1714145544:C%3Dr:IP%3D102.129.152.220-:S%3DbW_BRuXgiNkknohxpUtoqJ0%3B+path%3D/%3B+domain%3Dgoogle.com%3B+expires%3DFri,+26-Apr-2024+18:32:24+GMT HTTP/1.1Host: www.google.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRmgZjcGPORr7EGIjAjT-is8k6Uwm1EagwkXv7b_3Y6lH1AXZSE6X-OCgzMA9YBQPBGvSt1H2oAX7BK9VoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /search?q=104.94.109.142443&oq=104.94.109.142443&gs_lcrp=EgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA&sourceid=chrome&ie=UTF-8 HTTP/1.1Host: www.google.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRmgZjcGPORr7EGIjAjT-is8k6Uwm1EagwkXv7b_3Y6lH1AXZSE6X-OCgzMA9YBQPBGvSt1H2oAX7BK9VoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0
Source: global traffic	HTTP traffic detected: GET /xjs/_/ss/k=xjs.s.GGin1mxRzvU.L.W.O/am=gB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKACAmXAAAsCGAADgg0MAAIAAAAACAACAwgEAABAgIABgAAAgAAAAAAAAHAABAAAgBAACBECAAJIQkIEAAEQwwQCkAgDDjwAAIIAEAAAAoEAAAAEDESA8hAABgACQQAQCIIIAACAHCAEAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAAAAAAQ/d=1/ed=1/br=1/rs=ACT90oGSC2kJ5MOZFnDJZQWz14iwbMFYQQ/m=attn,cdos,gwc,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=b51YpLo4VR1MIeifPjI6wC1AZiY3GgI94kQnKHVX8ICBbDBgB6C1XG4hPNwsOPh0zeb4QtsPOdjysJlWqeTZk0yQDpcqoBuOXBu5GHyB2hq29z3ahDw9JiGpGyYTB1lqXMlrGtwa4kVVcxFGFVSG8PXDFAkU-VSj6gACLVMtelxQalQ9CTU
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/2x/googlelogo_color_92x30dp.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=b51YpLo4VR1MIeifPjI6wC1AZiY3GgI94kQnKHVX8ICBbDBgB6C1XG4hPNwsOPh0zeb4QtsPOdjysJlWqeTZk0yQDpcqoBuOXBu5GHyB2hq29z3ahDw9JiGpGyYTB1lqXMlrGtwa4kVVcxFGFVSG8PXDFAkU-VSj6gACLVMtelxQalQ9CTU
Source: global traffic	HTTP traffic detected: GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/search?q=104.94.109.142443&oq=104.94.109.142443&gs_lcrp=EgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA&sourceid=chrome&ie=UTF-8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=b51YpLo4VR1MIeifPjI6wC1AZiY3GgI94kQnKHVX8ICBbDBgB6C1XG4hPNwsOPh0zeb4QtsPOdjysJlWqeTZk0yQDpcqoBuOXBu5GHyB2hq29z3ahDw9JiGpGyYTB1lqXMlrGtwa4kVVcxFGFVSG8PXDFAkU-VSj6gACLVMtelxQalQ9CTU
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=1/ed=1/dg=2/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf,FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KeeMUb:HiPxjc;KpRAue:Tia57b;LBgRLc:XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe,KG2eXe;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;PqHfGe:im2cZe;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO,fTfGO;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VsAqSb:PGf2Re;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YV5bee:IvPZ6d;YkQtAf:rx8ur;ZMvdv:PHFPjb;ZWEUA:afR4Cf;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bDXwRe:UsyOtc;bFZ6gf:gU6kfd;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:VruDBd;eHDfl:ofjVkb;eO3lse:nFClrf;fWLTFc:TVBJbf;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;hsLsYc:Vl118;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;io8t5d:sgY6Zb;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;lkq0A:JyBE3e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO,fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;p2tIDb:tp1Cx;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qGV2uc:HHi04c;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;uknmt:GkPrzb;uuQkY:u2V3ud;vGrMZ:lPJJ0c;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;xbe2wc:uRMPBc;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=attn,cdos,gwc,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google
Source: global traffic	HTTP traffic detected: GET /verify/AAtmn1bTSyw2hAKlZ3LnbiQ1Wqu5634m12FM1sn670oINgsM5w6AM4xkxQt_rNluBR52tCI5NrrO_xyQcOfIPkLWLk9JFqI6z1l0UNJetPNOAxmS HTTP/1.1Host: id.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=b51YpLo4VR1MIeifPjI6wC1AZiY3GgI94kQnKHVX8ICBbDBgB6C1XG4hPNwsOPh0zeb4QtsPOdjysJlWqeTZk0yQDpcqoBuOXBu5GHyB2hq29z3ahDw9JiGpGyYTB1lqXMlrGtwa4kVVcxFGFVSG8PXDFAkU-VSj6gACLVMtelxQalQ9CTU
Source: global traffic	HTTP traffic detected: GET /compressiontest/gzip.html HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /complete/search?q&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=2&hl=en&authuser=0&pq=104.94.109.142443&psi=C8krZr7QHOyTwbkPuNyGwAw.1714145550203&dpr=1&nolsbt=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV
Source: global traffic	HTTP traffic detected: GET /complete/search?q=104.94.109.142443&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=3&hl=en&authuser=0&pq=104.94.109.142443&psi=C8krZr7QHOyTwbkPuNyGwAw.1714145550203&dpr=1&ofp=EAE HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV
Source: global traffic	HTTP traffic detected: GET /complete/search?q=104.94.109.142443&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=undefined&hl=en&authuser=0&pq=104.94.109.142443&psi=C8krZr7QHOyTwbkPuNyGwAw.1714145550203&dpr=1&ofp=EAE HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/md=3/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/ck=xjs.s.GGin1mxRzvU.L.W.O/am=gB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKYGgmXAACsCGIADgg0MAAMAQAABCAAjA5oEKARQhIABgAIAggZ__BAAAHACBAQAgZAICBEC4AJIQkIMAAEQwwQCkAgDDjwAAIIAEAAAcoMB-AAEDESA8hAABgACYYPwDoIIAICQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=1/exm=SNUn3,attn,cEt90b,cdos,csi,d,dtl0hd,eHDfl,gwc,hsm,jsa,mb4ZUb,qddgKe,sTsDMc/excm=ABxRVc,AD6AIb,AOTkuc,CVVp5c,FmnE6b,KYXthe,KiXlnd,NsEUGe,Ok4XMd,Ollhtb,PlCTlc,RP6nyf,SpjoE,Ut0TMc,VL58m,WFRJOb,WuIPnb,ZGLUZ,ZrXR8b,bXyZdf,fNMhz,gKO30e,hU1IHe,hWJjIf,rL2AR,xB2dQd,y25qZb,yChgtb/ed=1/dg=0/br=1/ujg=1/rs=ACT90oFHhWzRDSD7HZXJ5E0CbPv4n89phQ/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KeeMUb:HiPxjc;KpRAue:Tia57b;LBgRLc:XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;PqHfGe:im2cZe;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VsAqSb:PGf2Re;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YV5bee:IvPZ6d;YkQtAf:rx8ur;ZMvdv:PHFPjb;ZWEUA:afR4Cf;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bDXwRe:UsyOtc;bFZ6gf:gU6kfd;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:VruDBd;eHDfl:ofjVkb;eO3lse:nFClrf;fWLTFc:TVBJbf;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;hsLsYc:Vl118;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;io8t5d:sgY6Zb;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;lkq0A:JyBE3e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;p2tIDb:tp1Cx;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qGV2uc:HHi04c;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;uknmt:GkPrzb;uuQkY:u2V3ud;vGrMZ:lPJJ0c;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;xbe2wc:uRMPBc;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=Eox39d,GElbSc,HYSCof,KHourd,ajbYod,pHXghd,tIj4fb,vrkJ0e,xdV1C?xjs=s1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-m
Source: global traffic	HTTP traffic detected: GET /client_204?atyp=i&biw=1034&bih=870&ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
Source: global traffic	HTTP traffic detected: GET /gen_204?atyp=i&ct=rcm&cad=&ei=C8krZr7QHOyTwbkPuNyGwAw&ved=0ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ39UDCAw&jsname=gLFyf&zx=1714145552364&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
Source: global traffic	HTTP traffic detected: GET /gen_204?atyp=i&ct=rcm&cad=&ei=C8krZr7QHOyTwbkPuNyGwAw&ved=0ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ39UDCAw&jsname=gLFyf&zx=1714145552380&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
Source: global traffic	HTTP traffic detected: GET /gen_204?atyp=i&ct=rcm&cad=&ei=C8krZr7QHOyTwbkPuNyGwAw&ved=0ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ39UDCAw&jsname=gLFyf&zx=1714145552500&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
Source: global traffic	HTTP traffic detected: GET /xjs/_/ss/k=xjs.s.GGin1mxRzvU.L.W.O/am=gB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKACAmXAAAsCGAADgg0MAAIAAAAACAACAwgEAABAgIABgAAAgAAAAAAAAHAABAAAgBAACBECAAJIQkIEAAEQwwQCkAgDDjwAAIIAEAAAAoEAAAAEDESA8hAABgACQQAQCIIIAACAHCAEAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAAAAAAQ/d=0/br=1/rs=ACT90oGSC2kJ5MOZFnDJZQWz14iwbMFYQQ/m=y05UD,sy13c,sy1k1,sy1qj,sy1pf,sy1qq,sy2fh,sy13j,sy1pb,sy1pc,sy1pd,sy1qy,sy16x,sy3hx,sy6z8,epYOx,L1AAkb?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=sb_wiz,aa,abd,sy1ee,sy1ek,sy1el,sy1ej,sy1em,sy1yg,async,bgd,sy3z4,sy3z5,foot,sy2jo,sy6iz,kyn,sy1k9,lli,sf,sy1e8,sy1e9,sy3fx,sonic,TxCJfd,sy6y9,sy6ya,qzxzOb,IsdWVc,sy15m,sy170,sy173,sy316,sy6y8,syeq,sy155,sy6yc,spch,tl,MpJwZc,UUJqVe,sy7m,sOXFj,sy7l,s39S4,NTMZac,nAFL3,oGtAuc,sy8f,sy8g,q0xTif,y05UD,sy12g,sy13c,sy13a,sy13b,sy13e,sy13g,sy13h,sy13d,sy13i,sy1k1,sy1k2,sy1ph,sy1pi,sy1qf,sy1qj,sy1p9,sy1qn,sy1pr,sy1pf,sy1po,sy1pp,sy1qq,sy1qr,sy2ge,sy2gf,sy2fh,sy2lf,sy13j,sy13k,sy1pb,sy1pc,sy1pd,sy13x,sy1pg,sy175,sy1pj,syf2,sy142,sy1pk,sy1pl,sy1pm,sy1qy,sy1r0,sy16x,sy3hx,sy3hy,sy6z8,epYOx,synw,synv,rtH1bd,syo2,syxb,syxr,syo0,sy1ef,sy1eg,sy1eh,sy2ot,sy2ou,sy2ov,EkevXb,syzp,syzq,syzr,syzo,syzs,syzn,sy1cd,SMquOb,syzy,sy1ce,sy1cf,sy1cg,sy1ch,sy1ci,d5EhJe,sy1cj,sy1ck,sy1cl,syzt,syzu,sy1au,sy1cn,sy1co,zx30Y,syyf,sy1d9,sy1da,sy1db,sy1dc,sy1dd,sy1df,sy1de,T1HOxc,sy1dh,sy1di,DQfvme,syzl,sy1dj,Wo3n8,synz,L1AAkb,sy1f2,SZXsif,sy1zj,fiAufb,syn5,syos,syor,sy2xd,sy3yf,sy40p,sy40q,sy40o,sy4e7,sYEX8b,sy4u7,GU4Gab,sy3a5,T5VV,sy1zu,aDVF7,sy4u9,rhYw1b,E9M6Uc,Zilivc,syzw,sy11c,sy1cp,sy10i,sy10j,sy10e,sy10f,sy10g,sy10h,sy10d,sy10l,sy10m,sy10k,sy10n,sy10o,sy113,sy114,sy10u,sy10y,sy10z,sy110,sy111,sy10v,sy115,sy112,sy10s,sy10t,sy10r,sy10q,sy12p,sy1ii,sy1ik,sy1ij,sy1im,sy1il,sy1ip,sy1io,sy2mu,sy2mx,sy2n5,sy2n2,sy2n6,sy116,sy118,sy119,sy2mv,sy2n7,sy2n9,Hlw0zd,M6QgBb,sy2ni,sy2nj,EO13pd,RagDlc?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySw
Source: global traffic	HTTP traffic detected: GET /logos/fnbx/zrp/full_yeti.json HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
Source: global traffic	HTTP traffic detected: GET /async/asyncContextualTask?vet=12ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ4dMLegQIBRAA..i&ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449&yv=3&cid=10943804590251964565&cs=0&async=_k:xjs.s.en_US.DNHITQOYOgk.O,_am:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.s.GGin1mxRzvU.L.W.O%2Fam%3DgB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKACAmXAAAsCGAADgg0MAAIAAAAACAACAwgEAABAgIABgAAAgAAAAAAAAHAABAAAgBAACBECAAJIQkIEAAEQwwQCkAgDDjwAAIIAEAAAAoEAAAAEDESA8hAABgACQQAQCIIIAACAHCAEAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAAAAAAQ%2Fbr%3D1%2Frs%3DACT90oGSC2kJ5MOZFnDJZQWz14iwbMFYQQ,_fmt:prog,_id:rNi7Zc HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-DoS-Behavior: Embedsec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
Source: global traffic	HTTP traffic detected: GET /async/asyncContextualTask?vet=12ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ4dMLegQICBAA..i&ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449&yv=3&cid=10194214981100978668&cs=0&async=_k:xjs.s.en_US.DNHITQOYOgk.O,_am:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.s.GGin1mxRzvU.L.W.O%2Fam%3DgB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKACAmXAAAsCGAADgg0MAAIAAAAACAACAwgEAABAgIABgAAAgAAAAAAAAHAABAAAgBAACBECAAJIQkIEAAEQwwQCkAgDDjwAAIIAEAAAAoEAAAAEDESA8hAABgACQQAQCIIIAACAHCAEAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAAAAAAQ%2Fbr%3D1%2Frs%3DACT90oGSC2kJ5MOZFnDJZQWz14iwbMFYQQ,_fmt:prog,_id:rNi7Zc HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-DoS-Behavior: Embedsec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
Source: global traffic	HTTP traffic detected: GET /async/asyncContextualTask?vet=12ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ4dMLegQIBhAA..i&ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449&yv=3&cid=4586455008918215834&cs=0&async=_k:xjs.s.en_US.DNHITQOYOgk.O,_am:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.s.GGin1mxRzvU.L.W.O%2Fam%3DgB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKACAmXAAAsCGAADgg0MAAIAAAAACAACAwgEAABAgIABgAAAgAAAAAAAAHAABAAAgBAACBECAAJIQkIEAAEQwwQCkAgDDjwAAIIAEAAAAoEAAAAEDESA8hAABgACQQAQCIIIAACAHCAEAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAAAAAAQ%2Fbr%3D1%2Frs%3DACT90oGSC2kJ5MOZFnDJZQWz14iwbMFYQQ,_fmt:prog,_id:rNi7Zc HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-DoS-Behavior: Embedsec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=uKlGbf,syyj,sy3ze,DpX64d,sy3zf,EufiNb,sy1fp,P10Owf,syy4,syzv,gSZvdb,sy5ul,vTw9Fc,sym1,syoh,syoi,syoj,syok,syol,DPreE,sy2tx,qcH9Lc,sy3l6,ROaKxe,sy3l8,sy3l9,pj8IAe,sy15a,sy37l,sy3lf,sy3zm,YFicMc?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /async/bgasy?ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449&yv=3&cs=0&async=_fmt:jspb HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-DoS-Behavior: Embedsec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /client_204?cs=1&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=sy3zk,sy4e6,w4UyN,sywu,sywv,EbPKJf,sy4tu,sy72c,J9Q59e,sy4tv,a6Sgfb,Tia57b,KpRAue,sy1kd,NyeqM,sy2t9,sy2ta,O9SqHb?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=sywy,syx0,syx1,WlNQGd,sy2mm,sy2mn,nabPbb,syww,sywx,sywz,CnSW2d,sy1f9,sy1fa,sy1fb,sy1fc,sy1fd,sy1fe,sy4dj,sy6y6,VD4Qme,syf9,BYwJlf,syns,syo1,syo6,VEbNoe,symg,sy2ob,sy2oc,sy5a0,ND0kmf,pjDTFb,sy1wv,sy2t7,sy2tg,sy2th,KgxeNb,sy2tc,khkNpe?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg; NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=syfc,syfd,aLUfP?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg; NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=kMFpHd,sy8s,bm51tf?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg; NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE
Source: global traffic	HTTP traffic detected: GET /gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=C8krZr7QHOyTwbkPuNyGwAw&zx=1714145560773&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg; NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.142443&oit=4&cp=15&url=https%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&pgcl=9&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE; 1P_JAR=2024-04-26-15
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 104.94.109.142:443Connection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 104.94.109.142:443Connection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 104.94.109.142:443Connection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 104.94.109.142:443Connection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 104.94.109.142:443Connection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 104.94.109.142:443Connection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: id.google.com

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.50.112.54
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.94.108.142
Source: unknown	TCP traffic detected without corresponding DNS query: 104.94.108.142
Source: unknown	TCP traffic detected without corresponding DNS query: 104.94.108.142
Source: unknown	TCP traffic detected without corresponding DNS query: 104.94.108.142
Source: unknown	TCP traffic detected without corresponding DNS query: 104.94.108.142
Source: unknown	TCP traffic detected without corresponding DNS query: 104.94.108.142
Source: unknown	TCP traffic detected without corresponding DNS query: 104.94.108.142
Source: unknown	TCP traffic detected without corresponding DNS query: 104.94.108.142
Source: unknown	TCP traffic detected without corresponding DNS query: 104.94.108.142
Source: unknown	TCP traffic detected without corresponding DNS query: 104.94.108.142
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Invoice INV-0003.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\57976eb8-e795-42a2-ae2a-36f82186c22f.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF5d434e.TMP (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\e1a9dfbb-a1c2-45d1-94ed-f4999b77d8cf.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240426153055Z-179.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Windows Analysis Report
Invoice INV-0003.pdf