Edit tour

Windows Analysis Report
https://globalgrimmer.com/xxxj

Overview

General Information

Sample URL:	https://globalgrimmer.com/xxxj
Analysis ID:	1432299
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4348 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3428 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 --field-trial-handle=2024,i,15679915342265595539,6128884579569338529,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6488 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://globalgrimmer.com/xxxj" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155730387&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&sid=1714155737&sct=1&seg=0&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&dt=Request%20Your%20FREE%20Moon%20Reading!&en=page_view&_fv=1&_ss=1&_ee=1&tfd=17951 HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.moonreading.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_126.2.dr, chromecache_130.2.dr, chromecache_100.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_126.2.dr, chromecache_130.2.dr, chromecache_100.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_93.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_126.2.dr, chromecache_130.2.dr, chromecache_98.2.dr, chromecache_96.2.dr, chromecache_100.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_127.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_127.2.dr	String found in binary or memory: https://github.com/necolas/normalize.css/blob/master/LICENSE.md)
Source: chromecache_127.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_100.2.dr	String found in binary or memory: https://google.com
Source: chromecache_100.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_100.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_126.2.dr, chromecache_130.2.dr, chromecache_98.2.dr, chromecache_96.2.dr, chromecache_100.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_130.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_130.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_93.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_93.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_126.2.dr, chromecache_130.2.dr, chromecache_98.2.dr, chromecache_96.2.dr, chromecache_100.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_98.2.dr, chromecache_96.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_93.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_93.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_93.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_100.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_93.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_109.2.dr, chromecache_123.2.dr, chromecache_94.2.dr, chromecache_114.2.dr, chromecache_99.2.dr, chromecache_118.2.dr, chromecache_120.2.dr, chromecache_106.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/590897327/?random
Source: chromecache_100.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_126.2.dr, chromecache_130.2.dr, chromecache_98.2.dr, chromecache_96.2.dr, chromecache_100.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_93.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_130.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_130.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49744 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@25/84@43/18

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 --field-trial-handle=2024,i,15679915342265595539,6128884579569338529,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://globalgrimmer.com/xxxj"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 --field-trial-handle=2024,i,15679915342265595539,6128884579569338529,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://globalgrimmer.com/xxxj	0%	Avira URL Cloud	safe
https://globalgrimmer.com/xxxj	0%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://www.google.%/ads/ga-audiences	0%	URL Reputation	safe
https://www.merchant-center-analytics.goog	0%	URL Reputation	safe
https://www.moonreading.com/img/white-back.png	0%	Avira URL Cloud	safe
https://www.moonreading.com/img/bg-wavewhite.png	0%	Avira URL Cloud	safe
https://www.moonreading.com/start/?hop=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1	0%	Avira URL Cloud	safe
https://www.moonreading.com/css/o-0IIpQlx3QUlC5A4PNr5TRASf6M7Q.woff2	0%	Avira URL Cloud	safe
https://www.moonreading.com/_api/timezone.php?timezone=Europe/Berlin	0%	Avira URL Cloud	safe
https://globalgrimmer.com/xxxj/	0%	Avira URL Cloud	safe
https://www.moonreading.com/img/moon-icon-16.png	0%	Avira URL Cloud	safe
https://www.moonreading.com/cdn-cgi/rum?	0%	Avira URL Cloud	safe
https://www.moonreading.com/start?hop=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1	0%	Avira URL Cloud	safe
https://www.moonreading.com/css/kmKiZrc3Hgbbcjq75U4uslyuy4kn0qviTgY3KcC-wLOj.woff2	0%	Avira URL Cloud	safe
https://www.moonreading.com/css/o-0OIpQlx3QUlC5A4PNr4ARCQ_mu72Bi.woff2	0%	Avira URL Cloud	safe
https://www.moonreading.com/css/o-0NIpQlx3QUlC5A4PNjOhBVZNyBx2pqPA.woff2	0%	Avira URL Cloud	safe
https://www.moonreading.com/img/moon-reading-text-logo.png	0%	Avira URL Cloud	safe
https://static.cloudflareinsights.com/beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793	0%	Avira URL Cloud	safe
https://www.moonreading.com/css/fonts.css	0%	Avira URL Cloud	safe
https://www.moonreading.com/css/clean.css	0%	Avira URL Cloud	safe
https://www.moonreading.com/css/bootstrap-reboot.min.css	0%	Avira URL Cloud	safe
https://www.moonreading.com/css/icons.css	0%	Avira URL Cloud	safe
https://www.moonreading.com/js/jstz-1.0.4.min.js	0%	Avira URL Cloud	safe
https://globalgrimmer.com/xxxj/	1%	Virustotal		Browse
https://static.cloudflareinsights.com/beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
star-mini.c10r.facebook.com	157.240.14.35	true	false	high
www.moonreading.com	172.67.73.212	true	false	unknown
static.cloudflareinsights.com	104.16.80.73	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
stats.g.doubleclick.net	172.217.193.155	true	false	high
globalgrimmer.com	63.250.47.116	true	false	unknown
scontent.xx.fbcdn.net	31.13.67.20	true	false	high
analytics-alv.google.com	216.239.34.181	true	false	high
googleads.g.doubleclick.net	142.250.189.130	true	false	high
www.google.com	142.250.217.228	true	false	high
td.doubleclick.net	142.250.189.130	true	false	high
analytics.google.com	172.217.165.206	true	false	high
0bef7y10siuwczdssj39pr-fbx.hop.clickbank.net	35.80.252.204	true	false	high
www.facebook.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-146859082-1&cid=630221053.1714155737&jid=892447600&_u=YEBAAUAAAAAAACAAI~&z=317188382	false		high
https://analytics.google.com/g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155786655&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo&dt=Get%20your%20FREE%20Moon%20Reading!&en=page_view&_ee=1&tfd=857	false		high
https://www.facebook.com/tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini&rl=&if=false&ts=1714155768081&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155767931&coo=false&rqm=GET	false		high
https://www.moonreading.com/start/?hop=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo&rl=&if=false&ts=1714155781782&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155781689&coo=false&rqm=GET	false		high
https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1	false		unknown
https://analytics.google.com/g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155781594&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EEA&_s=2&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo&dt=Get%20your%20FREE%20Moon%20Reading!&en=scroll&epn.percent_scrolled=90&_et=5&tfd=6232	false		high
https://www.moonreading.com/css/o-0IIpQlx3QUlC5A4PNr5TRASf6M7Q.woff2	false	Avira URL Cloud: safe	unknown
https://www.moonreading.com/img/bg-wavewhite.png	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&rl=&if=false&ts=1714155734545&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155733570&coo=false&rqm=FGET	false		high
https://analytics.google.com/g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155795632&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EEA&_s=2&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra&dt=Get%20your%20FREE%20Moon%20Reading!&en=scroll&epn.percent_scrolled=90&_et=5&tfd=5988	false		high
https://www.moonreading.com/start/2/?sign=virgo	false		unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer&rl=&if=false&ts=1714155772792&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155772719&coo=false&rqm=FGET	false		high
https://www.moonreading.com/img/white-back.png	false	Avira URL Cloud: safe	unknown
https://0bef7y10siuwczdssj39pr-fbx.hop.clickbank.net/	false		high
https://connect.facebook.net/signals/config/2523922164511192?v=2.9.154&r=stable&domain=www.moonreading.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105	false		high
https://www.moonreading.com/start/2/?sign=libra	false		unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus&rl=&if=false&ts=1714155758561&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155758448&coo=false&rqm=FGET	false		high
https://www.moonreading.com/start/2/?sign=taurus	false		unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra&rl=&if=false&ts=1714155795861&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155795752&coo=false&rqm=FGET	false		high
https://www.moonreading.com/_api/timezone.php?timezone=Europe/Berlin	false	Avira URL Cloud: safe	unknown
https://analytics.google.com/g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155767833&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini&dt=Get%20your%20FREE%20Moon%20Reading!&en=page_view&_ee=1&tfd=1308	false		high
https://globalgrimmer.com/xxxj/	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://connect.facebook.net/en_US/fbevents.js	false		high
https://www.moonreading.com/img/moon-icon-16.png	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo&rl=&if=false&ts=1714155781782&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155781689&coo=false&rqm=FGET	false		high
https://globalgrimmer.com/xxxj	false		unknown
https://analytics.google.com/g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155786655&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EEA&_s=2&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo&dt=Get%20your%20FREE%20Moon%20Reading!&en=scroll&epn.percent_scrolled=90&_et=4&tfd=5872	false		high
https://www.moonreading.com/cdn-cgi/rum?	false	Avira URL Cloud: safe	unknown
https://analytics.google.com/g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155758382&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EEA&_s=2&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus&dt=Get%20your%20FREE%20Moon%20Reading!&en=scroll&epn.percent_scrolled=90&_et=4&tfd=5971	false		high
https://www.moonreading.com/start?hop=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Daries&rl=&if=false&ts=1714155749504&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155749144&coo=false&rqm=FGET	false		high
https://www.moonreading.com/start/2/?sign=aries	false		unknown
https://www.moonreading.com/css/kmKiZrc3Hgbbcjq75U4uslyuy4kn0qviTgY3KcC-wLOj.woff2	false	Avira URL Cloud: safe	unknown
https://www.moonreading.com/css/o-0OIpQlx3QUlC5A4PNr4ARCQ_mu72Bi.woff2	false	Avira URL Cloud: safe	unknown
https://www.moonreading.com/css/o-0NIpQlx3QUlC5A4PNjOhBVZNyBx2pqPA.woff2	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini&rl=&if=false&ts=1714155768081&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155767931&coo=false&rqm=FGET	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo&rl=&if=false&ts=1714155786766&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155786705&coo=false&rqm=FGET	false		high
https://analytics.google.com/g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155758382&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus&dt=Get%20your%20FREE%20Moon%20Reading!&en=page_view&_ee=1&tfd=965	false		high
https://www.moonreading.com/start/2/?sign=cancer	false		unknown
https://www.moonreading.com/img/moon-reading-text-logo.png	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer&rl=&if=false&ts=1714155772792&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155772719&coo=false&rqm=GET	false		high
https://analytics.google.com/g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155772654&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer&dt=Get%20your%20FREE%20Moon%20Reading!&en=page_view&_ee=1&tfd=902	false		high
https://analytics.google.com/g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155772654&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EEA&_s=2&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer&dt=Get%20your%20FREE%20Moon%20Reading!&en=scroll&epn.percent_scrolled=90&_et=4&tfd=5915	false		high
https://static.cloudflareinsights.com/beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.moonreading.com/start/2/?sign=leo	false		unknown
https://stats.g.doubleclick.net/g/collect?v=2&tid=G-H802VRJEV8&cid=630221053.1714155737&gtm=45je44o0v895586847za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0	false		high
https://www.facebook.com/tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Daries&rl=&if=false&ts=1714155749504&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155749144&coo=false&rqm=GET	false		high
https://analytics.google.com/g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155748297&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Daries&dt=Get%20your%20FREE%20Moon%20Reading!&en=page_view&_ee=1&tfd=3485	false		high
https://www.facebook.com/tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus&rl=&if=false&ts=1714155758561&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155758448&coo=false&rqm=GET	false		high
https://analytics.google.com/g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155748297&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EEA&_s=2&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Daries&dt=Get%20your%20FREE%20Moon%20Reading!&en=scroll&epn.percent_scrolled=90&_et=16&tfd=8500	false		high
https://www.moonreading.com/css/fonts.css	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&rl=&if=false&ts=1714155734545&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155733570&coo=false&rqm=GET	false		high
https://analytics.google.com/g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155795632&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra&dt=Get%20your%20FREE%20Moon%20Reading!&en=page_view&_ee=1&tfd=974	false		high
https://www.moonreading.com/start/2/?sign=gemini	false		unknown
https://www.moonreading.com/css/clean.css	false	Avira URL Cloud: safe	unknown
https://analytics.google.com/g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155730387&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EEA&_s=2&sid=1714155737&sct=1&seg=0&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&dt=Request%20Your%20FREE%20Moon%20Reading!&en=scroll&epn.percent_scrolled=90&_et=23&tfd=22992	false		high
https://analytics.google.com/g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155730387&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&sid=1714155737&sct=1&seg=0&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&dt=Request%20Your%20FREE%20Moon%20Reading!&en=page_view&_fv=1&_ss=1&_ee=1&tfd=17951	false		high
https://www.facebook.com/tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo&rl=&if=false&ts=1714155786766&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155786705&coo=false&rqm=GET	false		high
https://analytics.google.com/g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155767833&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EEA&_s=2&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini&dt=Get%20your%20FREE%20Moon%20Reading!&en=scroll&epn.percent_scrolled=90&_et=15&tfd=7300	false		high
https://analytics.google.com/g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155781594&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo&dt=Get%20your%20FREE%20Moon%20Reading!&en=page_view&_ee=1&tfd=1012	false		high
https://www.moonreading.com/css/bootstrap-reboot.min.css	false	Avira URL Cloud: safe	unknown
https://www.moonreading.com/css/icons.css	false	Avira URL Cloud: safe	unknown
https://www.moonreading.com/js/jstz-1.0.4.min.js	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-146859082-1&cid=630221053.1714155737&jid=892447600&gjid=466285172&_gid=337683595.1714155737&_u=YEBAAUAAAAAAACAAI~&z=133570130	false		high
https://www.facebook.com/tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra&rl=&if=false&ts=1714155795861&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155795752&coo=false&rqm=GET	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_130.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_93.2.dr	false		high
https://www.google.com	chromecache_100.2.dr	false		high
https://www.youtube.com/iframe_api	chromecache_130.2.dr	false		high
https://www.google.com/pagead/1p-user-list/590897327/?random	chromecache_109.2.dr, chromecache_123.2.dr, chromecache_94.2.dr, chromecache_114.2.dr, chromecache_99.2.dr, chromecache_118.2.dr, chromecache_120.2.dr, chromecache_106.2.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_93.2.dr	false		high
https://github.com/necolas/normalize.css/blob/master/LICENSE.md)	chromecache_127.2.dr	false		high
https://googleads.g.doubleclick.net	chromecache_100.2.dr	false		high
https://tagassistant.google.com/	chromecache_93.2.dr	false		high
https://adservice.google.com/pagead/regclk	chromecache_126.2.dr, chromecache_130.2.dr, chromecache_100.2.dr	false		high
https://getbootstrap.com/)	chromecache_127.2.dr	false		high
https://cct.google/taggy/agent.js	chromecache_126.2.dr, chromecache_130.2.dr, chromecache_98.2.dr, chromecache_96.2.dr, chromecache_100.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/ads/ga-audiences	chromecache_93.2.dr	false		high
https://www.google.%/ads/ga-audiences	chromecache_93.2.dr	false	URL Reputation: safe	low
https://td.doubleclick.net	chromecache_126.2.dr, chromecache_130.2.dr, chromecache_98.2.dr, chromecache_96.2.dr, chromecache_100.2.dr	false		high
https://www.merchant-center-analytics.goog	chromecache_130.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_127.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_130.2.dr	false		high
https://google.com	chromecache_100.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.165.206	analytics.google.com	United States	15169	GOOGLEUS	false
216.239.34.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
157.240.14.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
104.16.80.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
31.13.80.36	unknown	Ireland	32934	FACEBOOKUS	false
172.217.165.194	unknown	United States	15169	GOOGLEUS	false
142.250.189.130	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
173.194.212.157	unknown	United States	15169	GOOGLEUS	false
142.250.217.228	www.google.com	United States	15169	GOOGLEUS	false
104.26.1.66	unknown	United States	13335	CLOUDFLARENETUS	false
63.250.47.116	globalgrimmer.com	United States	22612	NAMECHEAP-NETUS	false
172.217.193.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.217.196	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.251.35.228	unknown	United States	15169	GOOGLEUS	false
31.13.67.20	scontent.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
35.80.252.204	0bef7y10siuwczdssj39pr-fbx.hop.clickbank.net	United States	237	MERIT-AS-14US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1432299
Start date and time:	2024-04-26 20:21:05 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://globalgrimmer.com/xxxj
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@25/84@43/18
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.moonreading.com/start/2/?sign=aries Browse: https://www.moonreading.com/start/2/?sign=taurus Browse: https://www.moonreading.com/start/2/?sign=gemini Browse: https://www.moonreading.com/start/2/?sign=cancer Browse: https://www.moonreading.com/start/2/?sign=leo Browse: https://www.moonreading.com/start/2/?sign=virgo Browse: https://www.moonreading.com/start/2/?sign=libra

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.217.238, 142.251.107.84, 142.250.64.227, 34.104.35.123, 40.127.169.103, 142.250.217.170, 23.45.182.80, 23.45.182.96, 23.45.182.84, 23.45.182.82, 23.45.182.87, 142.250.217.200, 192.229.211.108, 52.165.164.15, 142.250.189.142, 20.3.187.198, 172.217.165.195, 142.250.64.238
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ajax.googleapis.com, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, wu-bg-shim.trafficmanager.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	226772
Entropy (8bit):	5.547650562962807
Encrypted:	false
SSDEEP:	3072:4RQaf5qZ3fhO+A7cE8LG1LceF2/ea8LR9Wk9AR6UOQPGA2STnXDL9btIMP8PL:0QX5NAwYLceF+v9TnXP9RIMkz
MD5:	BBB5F28739DE016981F56E1B8C924B8C
SHA1:	974A2040D629D92B01539DED90AB93167EA16C11
SHA-256:	38979AD36E6B1AC9A5C0265709BAF55E14B8C24C681192E21CD1262DFD72D834
SHA-512:	7BDC3A1E13FC8FCCCAB7672ACB5CB12328839069014A566E6463067F59C3615D01DD74D9D1E55CF0C45F41FB6527EA2AC22BAD4DC69156FF98A160EF353BE60E
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-590897327&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":14,"vtp_instanceDestinationId":"AW-590897327","tag_id":8},{"function":"__ogt_1p_data_v2","priority":4,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regio

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/590897327?random=1714155795718&cv=11&fst=1714155795718&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 17920, version 1.0
Category:	downloaded
Size (bytes):	17920
Entropy (8bit):	7.987731403541915
Encrypted:	false
SSDEEP:	384:zQgQaIXhfXUp2td0Tn1V9cfNvyQraaI+x4P+m:zQgYhUpNQfN6QeGk+m
MD5:	B105CF87BFE3A58447DB822E7FDB0875
SHA1:	DB5553E071B4CA5347B4DDA7E1FC9A4C398F9DC4
SHA-256:	546DB554B9A7C8DAB36A67CA582D98882C575957BD515A4BC1E00563BC0B46D2
SHA-512:	784BF0E5E8F18E523D936225BBDCD0CE09A334C0C9DC0BF838F627357388B900C5E4ABEA2A2ACDE367FCF2F91956B255C13E1F7F369DD9164CA66D6CC9CD9FB0
Malicious:	false
Reputation:	low
URL:	https://www.moonreading.com/css/kmKiZrc3Hgbbcjq75U4uslyuy4kn0qviTgY3KcC-wLOj.woff2
Preview:	wOF2......F........<..E..............................B.`..Z.....<..3..b..6.$..@. .....I.g.%.mF...~BUK.(....GQ1zM.....c`.xoO.B.6.}...........+ob.f.R.......}...~....MBi....^8...{E...D+:.\t..>.....wiu<.....Wn`.......R..dw.^.RS.J.0.V.l.E..V..V.I.....!.....5!.".#..8... ..H0...@.^J....YM.....G........~.....M ....B.$...H..y........<..........pRpX0i~..C..._{.~..@.].a@.8.W..Cv._4.+.\|../.E<c5....a.l.4.7=.. ..e+..q...6G...o......!O.....N"....L.....W.V)F.......wI.....C. .+.....(..q......A#..x.Z.3...;o2...../R}....~h........T.X&..p....(..`p.^.I.{...w.@.)..".p.v.`....z..e..-.eE..y.j....U.v..p..'"...$H..{..X...:v.....Dj._`..-3..5t+.#.B...y......k..;.....=......H.mW.. se.'.D...A..z.R.-.......@..M....88..0._IP.V.C....r1f<.".#.t...U&..a....kWt..7..:....K."D*....9..C.......d=8....D......6..../\..v.....<.......=.<K..I.D.3...~....$..qMN..A.w..".M@.........HmU..............p.....-5.h...p..H..RK.....p.......Y.m...;...au...v..G..N\.@.l)...C.;..p

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11608, version 1.0
Category:	downloaded
Size (bytes):	11608
Entropy (8bit):	7.981908918075216
Encrypted:	false
SSDEEP:	192:jiFgxAQ0AxrjREMV8FWnAnMLM5BfVX+nX8oGOyuTBA1w87qMTOtfKugrgkA+pA7L:uFgeAxr9DV8vniW+L5Y157qCOtfKugrW
MD5:	BC83CC7C28B234E56A4C755C10E657A0
SHA1:	70265CC6DF1EEB9EBE6993D04E8904311B909F69
SHA-256:	DA2704436D0C1CA2F39C174776FC1AE4E434D25AADE210C27F025F74EDB421FF
SHA-512:	37028D58D307135368770A6747C8C7BC39C64EED579C961BF97F9AB26297F5EC0250C868CD26C85D1EC618725BB8D6CF1696C8F0998B980685A2BDDE690EE6B1
Malicious:	false
Reputation:	low
URL:	https://www.moonreading.com/css/o-0OIpQlx3QUlC5A4PNr4ARCQ_mu72Bi.woff2
Preview:	wOF2......-X......_@..,...........................2.."..N.`..........=..(..6.$..L. ..,..w..N.d^K.....Q.6Q.H....0......:..C.../.D)&....R=..u....tF..s>...~..cC.(...6..Q...6L....t......_!.....\... N.....".N...{._{.M.DU.....-.....[.........h...`...#..x.W....O}......H..G...C]....Y..@..J..F.....G..Jm..=.p.L.4),.1.........?.:.}.X..t.i.4.#X...cu.D"1.4...Ph.,6Q.f./..!..._kq0c..k...W.....]..oD4.=.......c(dX.YM9.;;s...9.k...wNw-.x..v.hD.O..zF._.,..-..z...>.a......t.......;m`....r...Uyb;...xa.p....u.s)..M2.4..H...}.5.....3hAvq....u.....B!..2..O.c.5..2`n.p..7......IM....kc,...x?......T4.i..^9....1...".L......E.6.tm.M....3....."....N@;..;......]-.......i......v.I]m V...>..Y...:....e.c.%s....7....$........p3sv.,Ri.K}.h.WF-..^.Z..s."g..~f.r..*1.......p$....$B...RZo.\|.G.H.bl...&uo[....E.1'\.DV.&...1.g.}...CAF.Q.&~..5....lX.U+..Au\D.i@.....~W....W...}...R..[.....Y\|.....2Q..C...-...H.1.9.%.5.-3.;...<...+.V.\...g...Zd...Yo..6.b.m..a.]...}.\|`...t.G.....p.)g\|

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1190
Entropy (8bit):	6.482770840892596
Encrypted:	false
SSDEEP:	24:C1hxWwjx82lY2T3dV2QoUQKyJ3VZQR1QPGaGu2Qh6im6GSobc:A6Nn2xLYxJ3AEPRGu206imtU
MD5:	D220D19781902102B895711947636307
SHA1:	96B27279C892039E002402CABC77E5A5D428E97F
SHA-256:	953CD2B7A9F5033DDE29B93C093FD24150B5AA0BAC851339A5DF5230254C336B
SHA-512:	48FE0D419FD8F87D5C051C3B89DDDB1E9C6281C9AAEFB3B26B02DD1E4E026DB085EA0DD8F5152256937CE35189C50995252F247A0BE6CB69F3C7B4FC227DD397
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmpMM:InstanceID="xmp.iid:76B7D8A0BE0B11E9BE8AB091931E3898" xmpMM:DocumentID="xmp.did:76B7D8A1BE0B11E9BE8AB091931E3898"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:76B7D89EBE0B11E9BE8AB091931E3898" stRef:documentID="xmp.did:76B7D89FBE0B11E9BE8AB091931E3898"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>N.3K....IDATx.b\|........l ..bs >..6.8...?...#.?.q .....F...i@....@.mA.{...lN f.g@....H.b .....@..E...{#..E.3...

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/590897327?random=1714155749002&cv=11&fst=1714155749002&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Daries&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2409), with no line terminators
Category:	downloaded
Size (bytes):	2409
Entropy (8bit):	5.854619682382857
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08SOLFyTK1Qg1N2gKy96:wsbSUtJfxrqLWWWdV6j1PLwToX1gz
MD5:	5248D2ABC8A856292AFB7D0D64661762
SHA1:	2D85F26D702C495A1DC0258AE9AD2DFE9312598D
SHA-256:	5982AE04C8CDA50B2CBDC7ECE0B06049084BB1137E544C0A40BCCB7EDF9A75A9
SHA-512:	D81CC35EF9FFF9568886472144AE96988FB5355458003D762B8A9CBE35F5C2AA8CCA52EE851AF18595754141A499BBD965E589674290CDB9BC1FAEC4679AB538
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/590897327/?random=1714155795718&cv=11&fst=1714155795718&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/590897327?random=1714155758513&cv=11&fst=1714155758513&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10160)
Category:	downloaded
Size (bytes):	501412
Entropy (8bit):	5.960777289923871
Encrypted:	false
SSDEEP:	12288:drc8lhk2khBKNrEjri3eSKfj2jh438lTKcW/PzadXK:do8lhkdhBKJDtKKaslTKItK
MD5:	C2DA9C56E57CC39E6F9A07FE987BEEA1
SHA1:	6A20E02EE2BECB6D5AFF01116365F2721194E97E
SHA-256:	350FCAD4D719EA33CE8BD0000D6FFA994FFD6C44915DEB51A9A92E73D66E4DD0
SHA-512:	99E53894E6F454D4F8116907FC9D7A80F97A206ECF2CAB524B8F9E18A7C208B18F4A1EB88AC03B154D3E8543F0A2FCFF1AB1CC89743115F0355E8D149CBEDFB7
Malicious:	false
Reputation:	low
URL:	https://www.moonreading.com/css/icons.css
Preview:	.ico-aquarius {.background-image: url('data:image/png;base64,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

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2615), with no line terminators
Category:	downloaded
Size (bytes):	2615
Entropy (8bit):	5.857636918271005
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08SNLFyCYGK1Qg1N2SG9sKTg:wsbSUtJfxrqLWWWdV6j1sLwCYGoX1gK
MD5:	761D88CF6F8A223F76B7417CFD32C638
SHA1:	F90990EC9041BE2462D4DDB8513A11D3818BF17C
SHA-256:	FCD4CDA3D0CCBAF47463C88E67BBE080A46CE7A63A4E59382056146022E79FCF
SHA-512:	A00D8FD9FE04565375C5022A1427A64CA64837E63F1EE8DBEC97D5B6D93B3353C71FFEB8D31AA012A35EA4F40055D3581E65AFAEC284D79228757A52AD48E7B8
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/590897327/?random=1714155772736&cv=11&fst=1714155772736&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (345)
Category:	downloaded
Size (bytes):	10860
Entropy (8bit):	5.02478245851118
Encrypted:	false
SSDEEP:	192:xcL/5VwprIfrbALQHFz+a74QGYXOTw6HzHljTA:aL/5OrSjFqXQGY+MI0
MD5:	4F4B734C170035CFFDAF44792A9519BC
SHA1:	F641F67EF8699C4D184E39B28179D25BCFCF479D
SHA-256:	FF5EE8F150404794B05E0E63CF3FB3EEDEF25A8B6E5A947589BFAF5422C4BA9D
SHA-512:	59B2527D820B37945A86261A041A03E66B8D7DC9AFBC4AB1DE448026EEAA3F1B559670B4C861A72B1D92AC21E24A0F724B74C2D550520AE67AC6CEC911534E87
Malicious:	false
Reputation:	low
URL:	https://www.moonreading.com/css/clean.css
Preview:	.bg-grey {. background-color: #f2f2f7;.}...bg-sky {. background-color: #e0e6f4;.}...top .title {. font-family: 'Libre Baskerville', serif;. font-size: 22px;. margin-top: -38px;. text-align: center;.}..h1 {.font-family: 'Libre Baskerville', serif;.}..h2, h3, h4, h5, p, label, li {. font-family: 'Noto Sans', sans-serif;.}..content {. max-width: 700px;. margin: 0 auto;. padding: 0 20px 20px 20px;.}...max-450 {. max-width: 450px;. margin: 0 auto;.}...center {. text-align: center;.}..footer {. font-size: 14px;. width: 100%;. max-width: 600px;. margin: 15px auto 0 auto;. padding: 16px;.}..footer a {. color: #222;.}...splash-inner {. width: 100%;. max-width: 600px;. margin: 0 auto;. padding: 16px;.}...splash {. background-color: #e0e6f4;. background-repeat: no-repeat;. background-position: bottom center;. background-image: url('/img/bg-wavewhite.png'); . background-size: 100%;. padding-bottom: 10%;.}...splash h1 {. font-weight: normal;. padding-top: 5%;.}...s

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5400)
Category:	downloaded
Size (bytes):	5434
Entropy (8bit):	5.237166686930515
Encrypted:	false
SSDEEP:	96:xgLmp5tRSVwRdK8249rz1bvd0TDZAEc8nx/Zcxx9qDiuBfJqbohoD:xgLK5HSVMIUD6Dhn54wDXBfQbsoD
MD5:	CF77C217A823810AB91C5430A021A5F5
SHA1:	3294044B8DE59BEFE54C0EE64338C257798B1031
SHA-256:	35A3913CEDD5F32C17FB626FDAC5363FEEC1AB3921DDE24B3D9831D15A5F643A
SHA-512:	FF08A13FF22AC21DC4474115A8E084194FC503F8BB9275EEFDBD054F0F2FBF86D3A79A83646F4B4C17D56B81755FA7749B5F9CA5770F6EFE45F9CDB767479B55
Malicious:	false
Reputation:	low
URL:	https://www.moonreading.com/js/jstz-1.0.4.min.js
Preview:	/! jstz - v1.0.4 - 2012-12-12 /.(function(e){var t=function(){"use strict";var e="s",n=function(e){var t=-e.getTimezoneOffset();return t!==null?t:0},r=function(e,t,n){var r=new Date;return e!==undefined&&r.setFullYear(e),r.setDate(n),r.setMonth(t),r},i=function(e){return n(r(e,0,2))},s=function(e){return n(r(e,5,2))},o=function(e){var t=e.getMonth()>7?s(e.getFullYear()):i(e.getFullYear()),r=n(e);return t-r!==0},u=function(){var t=i(),n=s(),r=i()-s();return r<0?t+",1":r>0?n+",1,"+e:t+",0"},a=function(){var e=u();return new t.TimeZone(t.olson.timezones[e])};return{determine:a,date_is_dst:o}}();t.TimeZone=function(e){"use strict";var n=null,r=function(){return n},i=function(){var e=t.olson.ambiguity_list[n],r=e.length,i=0,s=e[0];for(;i<r;i+=1){s=e[i];if(t.date_is_dst(t.olson.dst_start_dates[s])){n=s;return}}},s=function(){return typeof t.olson.ambiguity_list[n]!="undefined"};return n=e,s()&&i(),{name:r}},t.olson={},t.olson.timezones={"-720,0":"Etc/GMT+12","-660,0":"Pacific/Pago_Pago","-

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2160 x 175, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	5510
Entropy (8bit):	7.322293776338417
Encrypted:	false
SSDEEP:	96:c2l0Ob7yXBRKGBGiEFWgJZ8goJHAemEu0Z/Fldv4GLQJ9KgsCYik6coGnD:OOnhGoF9JCHaeDVNFbBLkyCzkeGD
MD5:	4CACC92DE7AB81E53024A7B1B4DDD85F
SHA1:	6DE1487F7563727E32371D300922EA7127F36B01
SHA-256:	F2AB94D9925615E97339029F1C4DA28DA9FE02B0F1EC2FDBDD7ECFCD3FB5D3DA
SHA-512:	2F6E849EEBC2F7A4F323051B420A2BEF18D7947E05B89DEC6FCF8A3BF9151099F5E7431F6FEAB8E1D2B16891BED9803A8B3DD5F4300A3E99BC44A1AE15EB34DE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...p..........),.....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:236A3E9269F911ECA5BE99FDF8182CF5" xmpMM:DocumentID="xmp.did:236A3E9369F911ECA5BE99FDF8182CF5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CF73807F69F511ECA5BE99FDF8182CF5" stRef:documentID="xmp.did:CF73808069F511ECA5BE99FDF8182CF5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..7.....IDATx...ir...Qb$......W.m. ...2...(Q.0....Jv...d..y.....n.......X........>'.......\!.......\!.......\!......

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2160 x 175, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	5510
Entropy (8bit):	7.322293776338417
Encrypted:	false
SSDEEP:	96:c2l0Ob7yXBRKGBGiEFWgJZ8goJHAemEu0Z/Fldv4GLQJ9KgsCYik6coGnD:OOnhGoF9JCHaeDVNFbBLkyCzkeGD
MD5:	4CACC92DE7AB81E53024A7B1B4DDD85F
SHA1:	6DE1487F7563727E32371D300922EA7127F36B01
SHA-256:	F2AB94D9925615E97339029F1C4DA28DA9FE02B0F1EC2FDBDD7ECFCD3FB5D3DA
SHA-512:	2F6E849EEBC2F7A4F323051B420A2BEF18D7947E05B89DEC6FCF8A3BF9151099F5E7431F6FEAB8E1D2B16891BED9803A8B3DD5F4300A3E99BC44A1AE15EB34DE
Malicious:	false
Reputation:	low
URL:	https://www.moonreading.com/img/bg-wavewhite.png
Preview:	.PNG........IHDR...p..........),.....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:236A3E9269F911ECA5BE99FDF8182CF5" xmpMM:DocumentID="xmp.did:236A3E9369F911ECA5BE99FDF8182CF5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CF73807F69F511ECA5BE99FDF8182CF5" stRef:documentID="xmp.did:CF73808069F511ECA5BE99FDF8182CF5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..7.....IDATx...ir...Qb$......W.m. ...2...(Q.0....Jv...d..y.....n.......X........>'.......\!.......\!.......\!......

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2614), with no line terminators
Category:	downloaded
Size (bytes):	2614
Entropy (8bit):	5.860366662428816
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08SXLFyV/6K1Qg1Z2SG9sKIs:wsbSUtJfxrqLWWWdV6j1+Lwd6oX18+s
MD5:	4A4B015BE9092337ADE7D3078C1960D4
SHA1:	5D9006A044736D5A6E6449E7E48C97EF832585A9
SHA-256:	DC090B65A748C2F2896C20B6E293386964810C385C5DD21F2B15BB773612B918
SHA-512:	8553E421E07503072EA76A14E8FF913D3CE8B35F1B50A791B59CD9667E9C633BD056C3EDA2443795919DA22FBA54B6DA71B322B41ACD92A71EB3BFF4FB213863
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/590897327/?random=1714155749002&cv=11&fst=1714155749002&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Daries&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/590897327?random=1714155734435&cv=11&fst=1714155734435&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&hn=www.googleadservices.com&frm=0&tiba=Request%20Your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1846
Entropy (8bit):	5.328556323199144
Encrypted:	false
SSDEEP:	48:xOpaJFNkowY3QEalNkowOEaFNkowOxMa2RNkowOXaDRNkoz:xOpaJFNUYgEalNUOEaFNUOxMa2RNUOXi
MD5:	E3CDE220C848CE4DDC200F035AD1ADC3
SHA1:	250F62BB8349D295A449B1254C73E8B7F00750DF
SHA-256:	55F8D13D8EF94D15F330E66652CDCFEBF1DA212212D70F5DDAFBD73EF10ACE37
SHA-512:	74181016DBC5C249FAD991F0DDE4D96933F5AFC3041A1FD1A64AA6F02CD46E10E73ECCCE8A531F58A729BE8D258E41DB495E20B0C041CE883C9E3CDF20F52E3D
Malicious:	false
Reputation:	low
URL:	https://www.moonreading.com/css/fonts.css
Preview:	/* latin /.@font-face {. font-family: 'Libre Baskerville';. font-style: normal;. font-weight: 700;. font-display: swap;. src: url(/css/kmKiZrc3Hgbbcjq75U4uslyuy4kn0qviTgY3KcC-wLOj.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin /.@font-face {. font-family: 'Noto Sans';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(/css/o-0OIpQlx3QUlC5A4PNr4ARCQ_mu72Bi.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin */.@font-face {. font-family: 'Noto Sans';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(/css/o-0IIpQlx3QUlC5A4PNr5TRASf6M7Q.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	57892
Entropy (8bit):	5.33104156552154
Encrypted:	false
SSDEEP:	768:so/MPceY1M9WU9Yw5d1uYMxBMYUYNQj+DYfq5j1jYY8Z02LKVYKYLyYmKw+27q3d:RJeUwT7ltMHM9eEqJ1UTZ02LKVlEyw
MD5:	B847ADE1CFAF365B5E7DD95352DC41E2
SHA1:	81CA652DA8EB2BCF9FC6088BFAC53629F6C0CA7A
SHA-256:	B76A8D26DD35EEF1679C50B89835FC6C25420405AD2B82F208A6943E17691322
SHA-512:	A5F8DF278D12F4C76E8A2A08AC3090B0CBCEF5521EFCCBACA385C531520875AA371D18633FFB68291D34E4837E3976691097B6C61195CD2670A9793916EA4722
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/2523922164511192?v=2.9.154&r=stable&domain=www.moonreading.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2613), with no line terminators
Category:	downloaded
Size (bytes):	2613
Entropy (8bit):	5.856561680024683
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08SALFyHK1Qg1f2SG9sK0S6:wsbSUtJfxrqLWWWdV6j15LwHoX1uw
MD5:	CBF2FEA275F10256667076BFBB6D8713
SHA1:	943092BDDC493ECFA2518F066B092D9E96C97F93
SHA-256:	2456238C4762DF8BBE4E64CA433AE058B22EEFD8B097C2D47BE1EE39C61C0F76
SHA-512:	1C0C9DD013C3FABF05F99AA984A367979E6F088DA0030CFF3381F98490BA1E9B4A820AD85A859269241BF9E7F187BFEB7EA871A356044889780942DAAB87BBCF
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/590897327/?random=1714155781702&cv=11&fst=1714155781702&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/590897327?random=1714155786721&cv=11&fst=1714155786721&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2614), with no line terminators
Category:	downloaded
Size (bytes):	2614
Entropy (8bit):	5.861903276371394
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08SaLFy5hK1Qg1S2SG9sKgy6:wsbSUtJfxrqLWWWdV6j1fLwHoX1LA
MD5:	5BAB79125EE43C9D1B126241F39FFB49
SHA1:	57DEEC5EEE402D8D7839D3ECA8714F47F6B61963
SHA-256:	9904BB44881935979CE306F5A4E31FED11CFDF50095C4A5B24C8B5ED0B49535E
SHA-512:	AE4ACD7F1DEC6DB4CEB8A8B97BEF3D905FE523658541B4A17E434FF207EAB66AA42DEC22970020ACA50FB4032D72E362F841B24B7DFE13B66973AD3EE9778337
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/590897327/?random=1714155786721&cv=11&fst=1714155786721&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2156
Entropy (8bit):	7.4362368709076945
Encrypted:	false
SSDEEP:	48:mVQ5Nn2D9trG/J39DuTo1Pny3zNbY6OKr4a7FRR5JJkkimoPUVSzr:tL2ptrGrDuE1PyBr/4a7FPJimqyS
MD5:	CBA22880FB0372AB011AA5F26AA46738
SHA1:	9B2C69799F4161EA2614B04076C5CFBA503808D0
SHA-256:	5C35C53AAA3394F7B4EBC4B4E3BB3B6401228E52A5B264ECBC15F520AE8C4DA7
SHA-512:	74F48B2B68AFD71333C56ED88F1EC0C74E40C500360F90BEBAD04C6710F1B17444F35028489ECCCE835E2AF7F1DDDFDA787A2CD079F49F56D6205B65FD3363BC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...d.....p.T....tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 23.2 (Macintosh)" xmpMM:InstanceID="xmp.iid:C481BA7D586911EDAF12C8B747DDB4F8" xmpMM:DocumentID="xmp.did:C481BA7E586911EDAF12C8B747DDB4F8"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C481BA7B586911EDAF12C8B747DDB4F8" stRef:documentID="xmp.did:C481BA7C586911EDAF12C8B747DDB4F8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.&I.....IDATx..q.0......U...T....AR.....dRA.AL.8...`*8:...#..............y_.d....A\....1........\......((7.. ..

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/590897327?random=1714155767945&cv=11&fst=1714155767945&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2616), with no line terminators
Category:	downloaded
Size (bytes):	2616
Entropy (8bit):	5.85793203555181
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08SQLFyqK1Qg1g2SG9sKa6:wsbSUtJfxrqLWWWdV6j1pLwqoX1dR
MD5:	E16566C09A5B7F9B415ACB7FDD0AFA58
SHA1:	2CCD5ECA2AC0C8C016579ACEFA46F6C09D64BCBA
SHA-256:	1CC6406614C0A4822C3D6AFF271A118EC95C862516F597B1F911CDB4E6CB3369
SHA-512:	837C2B74DAAA786B29C96082844D1D904FAE09FDE7C2710D200FF28A7B74A7F76F740834E2B5B043E7869521D88BA9B41A390E4BCE39F0F4717841AF2BF5A483
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/590897327/?random=1714155767945&cv=11&fst=1714155767945&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 13020, version 1.0
Category:	downloaded
Size (bytes):	13020
Entropy (8bit):	7.979737477530015
Encrypted:	false
SSDEEP:	384:k6TIo4mJjpJUV23oxAP5yvM700V+GbB1AiCnHOWGYY/b:k680jw2M2cF0VXCnuZ
MD5:	D5382465C092A866BB58A53030A24348
SHA1:	9AE10C7B1F1927FDB2907ED3DE3054B516D0DF2B
SHA-256:	DF3111EBF7A54A08878F3B239DEE2E463DB0EB24CCED9223B9F0DC9550F0E79B
SHA-512:	7498D9D44AA5E3FEAABF85185FC78CC6F180B1BEBAE41EDC4037BD80FDB7405F31A9DAFE1E6B3072F35DA9D59790F070C6C78A704C63FC5146D005824E08249C
Malicious:	false
Reputation:	low
URL:	https://www.moonreading.com/css/o-0NIpQlx3QUlC5A4PNjOhBVZNyBx2pqPA.woff2
Preview:	wOF2......2.......m...2................................,.`........X.L.....6.$.... ..(..;..X5..... H.Y>.....D...I5..?$.q=.....g$....%HMi.Z.q...I.YJpJ...f.g:...8.b@..Qbi./.j.. ......O.7..,.Z.RHa...l...P.....)bZ........(T...P.Z.ri.7<... ...T.Es......AT.........(..F]wW6.~c..l._]..W..u.7s.?Z.wj3R.oF.KA...lo..KJ."..k......S...Hi;f.l'd.....w.<.."..H...m.Y^l.;...... .8.~n.;2.......'.L"{&.D..<......M..?.uY...[ PM.,P.....L.....~...r{=.V....A.3.<P..o[K>".FC..=..s.b.\.T9.)p.A..T4... $..f.:t...P/$._.........X..c..woZ...azY..u..%....WD....8.f..G...'.p.n?d.e...X....x. . ....=..x.[@....lg93H6...G.B.."....'6d......]v.C}G..h..b.....p..u...N.............;...D...`.3..y@.......<....XCS.F..2...N.......YT........y....vl2.[j....C.......Z....x.}......WQ.za/......h...6.7GR-]N...o4v.X... ..K6t....V.`..zs.:w..92644<)hs..M;...3{K.f6kb....9...DFio.....R..K..U.....0o...Y.<y.."28&....X.D.((...J.G*.I....bO.V.....Y.J0d..5_Z\.l....{.....R9d..Q'...,...%.....}..{.FP..i..,..).!.. ..

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19261), with no line terminators
Category:	downloaded
Size (bytes):	19261
Entropy (8bit):	5.258945303143264
Encrypted:	false
SSDEEP:	384:64GPSjrMqRthMt2rWN1h2e9AIxV7KQtdS2EGo:M2dRDm17KQfEGo
MD5:	3BE93FD15D2F7DEE2FC0C8981C6FA5C6
SHA1:	8CD88C36FAD3E96641DBC4D781F5DDBE5123312F
SHA-256:	17106BF803D42BCF2F2BDF778ECE084D3F91C68E7EA41DAE7BFF61FEFA573DEE
SHA-512:	148291151C600F6D26A00A3DEA1919432FF94288D90C06F2C74990D7B8C418708973FBE2D06D875CBB687F00FB4373668AFBCFF5AB7911581B46A39A3906FE46
Malicious:	false
Reputation:	low
URL:	https://static.cloudflareinsights.com/beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var i=n\|\|0,r=t;return[r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var i=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),i[t]=e>>>((3&t)<<3)&255;return i}}},508:function(e,t,n){"use strict";var i=n(944),r=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|i)();if(

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	226746
Entropy (8bit):	5.547715828534317
Encrypted:	false
SSDEEP:	3072:4RQaf5qZ3fhO+A3cE8lG1LceF2/ea8LR9Wk9AR6UOQPGA2STnXDL9btIM08Pw:0QX5NAkYLceF+v9TnXP9RIMbY
MD5:	C54B3DD59C6B7EC2EFFDDB51E531CC53
SHA1:	6D2AB7C524D030E0AC75D981B3A3119CA9FC46E2
SHA-256:	FCDE03A5FEA6E57B89D2F83975268528EF7EE38F22BF20E73DEE1B4EAF29423B
SHA-512:	DB9F5DC89363A1890829D385E4E7C789A918F3D1D63A86B0134A34B83546B0F15C92A10AC261B3C51E55CF226BA3317E3B3D237E446C0F9E92AB306127FB5C0E
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-590897327
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":14,"vtp_instanceDestinationId":"AW-590897327","tag_id":8},{"function":"__ogt_1p_data_v2","priority":4,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regio

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3640)
Category:	downloaded
Size (bytes):	4021
Entropy (8bit):	5.0759640023673125
Encrypted:	false
SSDEEP:	96:xM9SOiCwJXXXqXXX3oDqKgxGm2DuNemLg:x0biCwpHyHL7xcKs
MD5:	220E4DC01283A9E9C5C146F984EB8934
SHA1:	990F408175CAEF6B397C247F3AA614692211C5B4
SHA-256:	740458B82DE9774C1AFFB4781E4B7FB11DB37CB1C281B9D5010DAC3F084D7B40
SHA-512:	094DEB9EC05B7C0BE1CA0130AD5118482888AC9061D293C751A0DC9919B36711E536306540C47E44EC152D6C23C3395FC08962472A1D5CF5FB321CA02408A683
Malicious:	false
Reputation:	low
URL:	https://www.moonreading.com/css/bootstrap-reboot.min.css
Preview:	/!. Bootstrap Reboot v4.3.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors. * Copyright 2011-2019 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). * Forked from Normalize.css, licensed MIT (https://github.com/necolas/normalize.css/blob/master/LICENSE.md). /,::after,::before{box-sizing:border-box}html{font-family:sans-serif;line-height:1.15;-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:transparent}article,aside,figcaption,figure,footer,header,hgroup,main,nav,section{display:block}body{margin:0;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-size:1rem;font-weight:400;line-height:1.5;color:#212529;text-align:left;background-color:#fff}[tabindex="-1"]:focus{outline:0!important}hr{box-sizing:content-box;height:0;overflow:visible}h1,h2,h3,h4,h5,h6{margin-top:0;margin-b

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 860 x 130, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	37864
Entropy (8bit):	7.97525277934936
Encrypted:	false
SSDEEP:	768:tJU07xp/cNZcP/FVeqwNPEyrvhRDmhVGC9PQL0n51d9yLwUm:tJpp/K2XChPEyXIVzT5ZyL4
MD5:	4974222EEA9D84136D18A58CD0D3FF36
SHA1:	A3B95EBD156B6F263B30C1A33609CB1411F5F2E4
SHA-256:	B112019E9548E12C74669AEF363DE97BC2D9760AA5C76ECD9DD826FA55B639B5
SHA-512:	2D06A45C5029CC1607C2A80C95BA302E2959CB84CCE6A484F751FEAE8A36B33A1384E3CD7EBD8953DB665908DC5AC8E37B488A97E29AA5A613945685A8F1029F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\.........R9......tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.dabacbb, 2021/04/14-00:39:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.4 (Macintosh)" xmpMM:InstanceID="xmp.iid:1A108887BD9511EB9A6AF9477F6D6AF1" xmpMM:DocumentID="xmp.did:1A108888BD9511EB9A6AF9477F6D6AF1"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1A108885BD9511EB9A6AF9477F6D6AF1" stRef:documentID="xmp.did:1A108886BD9511EB9A6AF9477F6D6AF1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......XIDATx...`.....z..F.J.$...*.TDE..?....!.PQl........^..5...'@z..\....v/.p..%w.%...K.{...{....=.^.GDDDDDDD

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2156
Entropy (8bit):	7.4362368709076945
Encrypted:	false
SSDEEP:	48:mVQ5Nn2D9trG/J39DuTo1Pny3zNbY6OKr4a7FRR5JJkkimoPUVSzr:tL2ptrGrDuE1PyBr/4a7FPJimqyS
MD5:	CBA22880FB0372AB011AA5F26AA46738
SHA1:	9B2C69799F4161EA2614B04076C5CFBA503808D0
SHA-256:	5C35C53AAA3394F7B4EBC4B4E3BB3B6401228E52A5B264ECBC15F520AE8C4DA7
SHA-512:	74F48B2B68AFD71333C56ED88F1EC0C74E40C500360F90BEBAD04C6710F1B17444F35028489ECCCE835E2AF7F1DDDFDA787A2CD079F49F56D6205B65FD3363BC
Malicious:	false
Reputation:	low
URL:	https://www.moonreading.com/img/white-back.png
Preview:	.PNG........IHDR...d...d.....p.T....tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 23.2 (Macintosh)" xmpMM:InstanceID="xmp.iid:C481BA7D586911EDAF12C8B747DDB4F8" xmpMM:DocumentID="xmp.did:C481BA7E586911EDAF12C8B747DDB4F8"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C481BA7B586911EDAF12C8B747DDB4F8" stRef:documentID="xmp.did:C481BA7C586911EDAF12C8B747DDB4F8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.&I.....IDATx..q.0......U...T....AR.....dRA.AL.8...`*8:...#..............y_.d....A\....1........\......((7.. ..

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	328877
Entropy (8bit):	5.59699508497474
Encrypted:	false
SSDEEP:	6144:c4EQX5NzJeYLceF+qKXjXP9RIME3d5Y0ac:lE+xJzNloc
MD5:	034B4BC58D92116FAB43E42E6C64A7BD
SHA1:	02D64123B44B63FE831EAA31E5396FB68AF00CD9
SHA-256:	F2729C529AC7F4C6A57AEC4BBD74D99F1974286DEB2CF8F9564022016D90122E
SHA-512:	6FD055D0C08A7C502B1719076206B1D50D69542F7B2DF44B2020BA1C5671DD6B2D5D3C8036125EBDE7799347F6521AEBC2DF7F3B8FF02BEFB7B05C7211CA71B3
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-H802VRJEV8&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":17,"vtp_value":true,"tag_id":16},{"function":"__ogt_referral_exclusion","priority":17,"vtp_includeConditions":["list","moonreading\\.com"],"tag_id":18},{"function":"__ogt_session_timeout","priority":17,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":19},{"function":"__ogt_1p_data_v2","priority":17,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/590897327?random=1714155772736&cv=11&fst=1714155772736&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/590897327?random=1714155781702&cv=11&fst=1714155781702&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223683
Entropy (8bit):	5.454805360153245
Encrypted:	false
SSDEEP:	3072:tt8WClBZIncVuP0bteuvQ+AMPpgArl0xYu5GKnPt:ttlWBZ7O0bvQQGArHu5GKn1
MD5:	85F41014BE15CC3E54A4123C00C5021E
SHA1:	1E5468F507A8B0216114A8D8F63309BE8CBCAB9F
SHA-256:	01E9582655224C83E6C075F44B7EECB135E108B6AD2150BF6F78A0A77C4AD5E0
SHA-512:	78F6D6CD922AA42FD340CF215D7D91DDFABEF5EC393DFA5EB578436B9B668F839747218A4DE980AEC2395194667B1E0215623EC902EAAF8CE592536172414FCD
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1190
Entropy (8bit):	6.482770840892596
Encrypted:	false
SSDEEP:	24:C1hxWwjx82lY2T3dV2QoUQKyJ3VZQR1QPGaGu2Qh6im6GSobc:A6Nn2xLYxJ3AEPRGu206imtU
MD5:	D220D19781902102B895711947636307
SHA1:	96B27279C892039E002402CABC77E5A5D428E97F
SHA-256:	953CD2B7A9F5033DDE29B93C093FD24150B5AA0BAC851339A5DF5230254C336B
SHA-512:	48FE0D419FD8F87D5C051C3B89DDDB1E9C6281C9AAEFB3B26B02DD1E4E026DB085EA0DD8F5152256937CE35189C50995252F247A0BE6CB69F3C7B4FC227DD397
Malicious:	false
Reputation:	low
URL:	https://www.moonreading.com/img/moon-icon-16.png
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmpMM:InstanceID="xmp.iid:76B7D8A0BE0B11E9BE8AB091931E3898" xmpMM:DocumentID="xmp.did:76B7D8A1BE0B11E9BE8AB091931E3898"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:76B7D89EBE0B11E9BE8AB091931E3898" stRef:documentID="xmp.did:76B7D89FBE0B11E9BE8AB091931E3898"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>N.3K....IDATx.b\|........l ..bs >..6.8...?...#.?.q .....F...i@....@.mA.{...lN f.g@....H.b .....@..E...{#..E.3...

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 860 x 130, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	37864
Entropy (8bit):	7.97525277934936
Encrypted:	false
SSDEEP:	768:tJU07xp/cNZcP/FVeqwNPEyrvhRDmhVGC9PQL0n51d9yLwUm:tJpp/K2XChPEyXIVzT5ZyL4
MD5:	4974222EEA9D84136D18A58CD0D3FF36
SHA1:	A3B95EBD156B6F263B30C1A33609CB1411F5F2E4
SHA-256:	B112019E9548E12C74669AEF363DE97BC2D9760AA5C76ECD9DD826FA55B639B5
SHA-512:	2D06A45C5029CC1607C2A80C95BA302E2959CB84CCE6A484F751FEAE8A36B33A1384E3CD7EBD8953DB665908DC5AC8E37B488A97E29AA5A613945685A8F1029F
Malicious:	false
Reputation:	low
URL:	https://www.moonreading.com/img/moon-reading-text-logo.png
Preview:	.PNG........IHDR...\.........R9......tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.dabacbb, 2021/04/14-00:39:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.4 (Macintosh)" xmpMM:InstanceID="xmp.iid:1A108887BD9511EB9A6AF9477F6D6AF1" xmpMM:DocumentID="xmp.did:1A108888BD9511EB9A6AF9477F6D6AF1"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1A108885BD9511EB9A6AF9477F6D6AF1" stRef:documentID="xmp.did:1A108886BD9511EB9A6AF9477F6D6AF1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......XIDATx...`.....z..F.J.$...*.TDE..?....!.PQl........^..5...'@z..\....v/.p..%w.%...K.{...{....=.^.GDDDDDDD

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2654), with no line terminators
Category:	downloaded
Size (bytes):	2654
Entropy (8bit):	5.850933181197078
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08SzLFyOK1QgZzzz9lSG9sRW:wsbSUtJfxrqLWWWdV6j16LwOoXZztlV/
MD5:	2D60863B0B8E6060DF13F5192EAAEB18
SHA1:	EC343569F3431F03CB9B00F1ED5B1D70134213B1
SHA-256:	0C92F260091131E30E315C47EE1FA56E78E85F29C5C52C5336CFA204CB93318E
SHA-512:	9D8B9FB0469438D1FFFEBFABCC3ADB527C21227134D341802914CD22FB35817F7FEC373A28E9136387D4246A095A6393B5152D42157F275E9832B2A35D1DABA7
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/590897327/?random=1714155734435&cv=11&fst=1714155734435&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&hn=www.googleadservices.com&frm=0&tiba=Request%20Your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32077)
Category:	downloaded
Size (bytes):	97163
Entropy (8bit):	5.373204330051448
Encrypted:	false
SSDEEP:	1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV
MD5:	4F252523D4AF0B478C810C2547A63E19
SHA1:	5A9DCFBEF655A2668E78BAEBEAA8DC6F41D8DABB
SHA-256:	668B046D12DB350CCBA6728890476B3EFEE53B2F42DBB84743E5E9F1AE0CC404
SHA-512:	8C6B0C1FCDE829EF5AB02A643959019D4AC30D3A7CC25F9A7640760FEFFF26D9713B84AB2E825D85B3B2B08150265A10143F82E05975ACCB10645EFA26357479
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
Preview:	/! jQuery v1.12.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="1.12.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.ca

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	199599
Entropy (8bit):	5.540974134272004
Encrypted:	false
SSDEEP:	3072:RvQaf5qZ3fhO+RW/8vG1LceF2/easOQthTnXDL9btIMPwfNT:NQX5NhYLceF+UJTnXP9RIMu9
MD5:	AF9827EE2459C01CBDAE71C3266CEBB2
SHA1:	DED7A2A73ACA8BE471C207A5CFE271C4B6B4A367
SHA-256:	827E153649E258BC9BBF45C75898EE158261BB635A3D4214FDA5E3FFB8EA302A
SHA-512:	CB91DBB7077FF4D1E48E8B383DCA8930200319F70C0681994C4CF62D2600C0693CAD5A5FF778A31272D47D085028DE497E795126F17414E8AA8E63093343CB45
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-146859082-1&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"c"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":10},{"function":"__ccd_ga_first","priority":1,"vtp_instanceDestinationId":"UA-146859082-1","tag_id":13},{"function":"__rep","vtp_containerId":"UA-146859082-1","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__ccd_ga_last","priority":0,"vtp_instanceDestinationId":"UA-146859082-1","tag_id":12}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":"_eq","arg0":["macro",0],"arg1":"gtm.init"}],. "rules":[[["if",0],["add",2]],[["if",1],["add",0,3,1]]].},."runtime":[ [50,

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 12852, version 1.0
Category:	downloaded
Size (bytes):	12852
Entropy (8bit):	7.981264516865146
Encrypted:	false
SSDEEP:	192:HUlASflklKNuF+G3bphvKKLdWT14vG8EnMvg4uMDGo9YBV7:0lA6yAoFX3TCxCO8bv9uM6Lr7
MD5:	3B5DF7E947D77201EAF22F3DBDAC08CC
SHA1:	21989CA07E4AFE32D48982B816B8FAC85CE3E668
SHA-256:	4A46D61A9AED90CEA010DBABCDB510B9CEFF1B729A06B169CDBE142F66CBC86F
SHA-512:	D448958194D51637E4C6279B84DFA764089D2EB3B896162DEA7745A16FFF6CC019079A82FC0015270DDA8FE796D5A9A8CCA8C8CBC2C7FBEF40F17BFD4E767D8E
Malicious:	false
Reputation:	low
URL:	https://www.moonreading.com/css/o-0IIpQlx3QUlC5A4PNr5TRASf6M7Q.woff2
Preview:	wOF2......24......mt..1................................,.`........8.(.....6.$.... ..4..;..XEF...m....h.D......c..c..FQU8.Gb.1."3.Z."Sb..V.>.n.........q)........d.3..V4......;w....~.u..JQ..9....? 8Q.0..Q.......dK.f.9..6.......o....m.....EmT.`.. ....T...]aMe...........uY..........8im]......bb.R.{./...!.......N..1..O....TS.....(+.u.....M..Y..._ ..l..~J..p.'.UAW/~....\|.....nC=.......s.vve.&eV.\|...g.2..R/p...XG..~.......v.tW.Z.].j.PK..%..I....z..k.. i.`fg.sg`..._.$.....i.80...k.......P..;w...... .......\|z.C...f_}S..^....(.F(,';.....6.m..q..j..S.p.......wY.Y...f.A....., Q...X8....J.p..9Xv.X.,[.....F.....f.Nl..l.....yp..`.-`......4.@<.\|G. ^.Q...W..Z....u....- . n.......E.O......m/.6.....t....P.,!9&o[Cc.A=....By./.Y.R.F..B...S.4R.B..kK.I.G.......Za.......... ..&.5.'..`...,.2..z....v.VF.b....j....5..T..7i...&Wz.(t7.T.n.,.\|a...<...P..X]".6.u.p......./.2p...aba.e...;......[....R2. J8jD....YY.{t:.J$.,..l.-B......JE....V..."..~*...u.q&g.gv.%v.ns....)..D..+.a.{

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	202765
Entropy (8bit):	5.5404211486592985
Encrypted:	false
SSDEEP:	3072:tZQaf5qZ3fhO+zWE8pG1LceF2/easOQthTnXDL9btIMFw3S4:LQX5NuYLceF+UJTnXP9RIMIx
MD5:	F1DA48DF933D5EA501450E7C14CF570F
SHA1:	D9D2D8FBD6CDE8415669131A93732A919802374E
SHA-256:	3225B0033797D19DCEC1F07C30EFDCF89E62397A75457878628FC80B27A92425
SHA-512:	70E98CB1DE10D4C50AF2B8DE1600D9291A64628D3009F310D242D175F8E772568093BAD40A8BE8751054ABF41E3033FA6F563449CFA51DBA6D4B1AF2E151FDF0
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-146859082-1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"undefined"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":10},{"function":"__ccd_ga_first","priority":1,"vtp_instanceDestinationId":"UA-146859082-1","tag_id":13},{"function":"__rep","vtp_containerId":"UA-146859082-1","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","G-FE7FSZWY65"]],"vtp_enableConfiguration":false,"tag_id":3},{"function":"__ccd_ga_last","priority":0,"vtp_instanceDestinationId":"UA-146859082-1","tag_id":12}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2616), with no line terminators
Category:	downloaded
Size (bytes):	2616
Entropy (8bit):	5.866489008318939
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08SlLFytK1Qg112SG9sKBjc6:wsbSUtJfxrqLWWWdV6j1gLwtoX1IXh
MD5:	D0616DD2EAAD1F89255F66F375AD3D98
SHA1:	85900494C880E4C85B6304477B1849AA244C34FF
SHA-256:	720859412A9C8B3049AAFD201ABB103BFF492A739A90425C23666D7F2A9B93FD
SHA-512:	0500662FE13690938956E40266052D13E6E6DCFDDD2DA57B2E40812108797EAD40B118CD16180825AF8A040C44ABD96403F1C005FB92C557D8F18BCADBA701E5
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/590897327/?random=1714155758513&cv=11&fst=1714155758513&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 20:21:47.906088114 CEST	49678	443	192.168.2.4	104.46.162.224
Apr 26, 2024 20:21:49.124782085 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 26, 2024 20:21:58.781732082 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 26, 2024 20:22:00.817769051 CEST	49735	443	192.168.2.4	63.250.47.116
Apr 26, 2024 20:22:00.817811966 CEST	443	49735	63.250.47.116	192.168.2.4
Apr 26, 2024 20:22:00.817877054 CEST	49735	443	192.168.2.4	63.250.47.116
Apr 26, 2024 20:22:00.818298101 CEST	49736	443	192.168.2.4	63.250.47.116
Apr 26, 2024 20:22:00.818325996 CEST	443	49736	63.250.47.116	192.168.2.4
Apr 26, 2024 20:22:00.818387985 CEST	49736	443	192.168.2.4	63.250.47.116
Apr 26, 2024 20:22:00.818543911 CEST	49735	443	192.168.2.4	63.250.47.116
Apr 26, 2024 20:22:00.818556070 CEST	443	49735	63.250.47.116	192.168.2.4
Apr 26, 2024 20:22:00.818706036 CEST	49736	443	192.168.2.4	63.250.47.116
Apr 26, 2024 20:22:00.818720102 CEST	443	49736	63.250.47.116	192.168.2.4
Apr 26, 2024 20:22:01.219741106 CEST	443	49736	63.250.47.116	192.168.2.4
Apr 26, 2024 20:22:01.220304966 CEST	49736	443	192.168.2.4	63.250.47.116
Apr 26, 2024 20:22:01.220320940 CEST	443	49736	63.250.47.116	192.168.2.4
Apr 26, 2024 20:22:01.221291065 CEST	443	49736	63.250.47.116	192.168.2.4
Apr 26, 2024 20:22:01.221359968 CEST	49736	443	192.168.2.4	63.250.47.116
Apr 26, 2024 20:22:01.223385096 CEST	49736	443	192.168.2.4	63.250.47.116
Apr 26, 2024 20:22:01.223448992 CEST	443	49736	63.250.47.116	192.168.2.4
Apr 26, 2024 20:22:01.223592997 CEST	49736	443	192.168.2.4	63.250.47.116
Apr 26, 2024 20:22:01.223599911 CEST	443	49736	63.250.47.116	192.168.2.4
Apr 26, 2024 20:22:01.230609894 CEST	443	49735	63.250.47.116	192.168.2.4
Apr 26, 2024 20:22:01.231081963 CEST	49735	443	192.168.2.4	63.250.47.116
Apr 26, 2024 20:22:01.231097937 CEST	443	49735	63.250.47.116	192.168.2.4
Apr 26, 2024 20:22:01.232798100 CEST	443	49735	63.250.47.116	192.168.2.4
Apr 26, 2024 20:22:01.232888937 CEST	49735	443	192.168.2.4	63.250.47.116
Apr 26, 2024 20:22:01.235321045 CEST	49735	443	192.168.2.4	63.250.47.116
Apr 26, 2024 20:22:01.235404015 CEST	443	49735	63.250.47.116	192.168.2.4
Apr 26, 2024 20:22:01.361421108 CEST	49735	443	192.168.2.4	63.250.47.116
Apr 26, 2024 20:22:01.361440897 CEST	443	49735	63.250.47.116	192.168.2.4
Apr 26, 2024 20:22:01.391959906 CEST	49736	443	192.168.2.4	63.250.47.116
Apr 26, 2024 20:22:01.549983025 CEST	49735	443	192.168.2.4	63.250.47.116
Apr 26, 2024 20:22:01.606992960 CEST	443	49736	63.250.47.116	192.168.2.4
Apr 26, 2024 20:22:01.607117891 CEST	443	49736	63.250.47.116	192.168.2.4
Apr 26, 2024 20:22:01.607187986 CEST	49736	443	192.168.2.4	63.250.47.116
Apr 26, 2024 20:22:01.607671022 CEST	49736	443	192.168.2.4	63.250.47.116
Apr 26, 2024 20:22:01.607686043 CEST	443	49736	63.250.47.116	192.168.2.4
Apr 26, 2024 20:22:01.607695103 CEST	49736	443	192.168.2.4	63.250.47.116
Apr 26, 2024 20:22:01.607741117 CEST	49736	443	192.168.2.4	63.250.47.116
Apr 26, 2024 20:22:01.610764027 CEST	49735	443	192.168.2.4	63.250.47.116
Apr 26, 2024 20:22:01.652149916 CEST	443	49735	63.250.47.116	192.168.2.4
Apr 26, 2024 20:22:02.135890007 CEST	443	49735	63.250.47.116	192.168.2.4
Apr 26, 2024 20:22:02.138367891 CEST	49735	443	192.168.2.4	63.250.47.116
Apr 26, 2024 20:22:02.138458014 CEST	443	49735	63.250.47.116	192.168.2.4
Apr 26, 2024 20:22:02.138509035 CEST	49735	443	192.168.2.4	63.250.47.116
Apr 26, 2024 20:22:02.274036884 CEST	49739	443	192.168.2.4	35.80.252.204
Apr 26, 2024 20:22:02.274075985 CEST	443	49739	35.80.252.204	192.168.2.4
Apr 26, 2024 20:22:02.274144888 CEST	49739	443	192.168.2.4	35.80.252.204
Apr 26, 2024 20:22:02.274895906 CEST	49739	443	192.168.2.4	35.80.252.204
Apr 26, 2024 20:22:02.274908066 CEST	443	49739	35.80.252.204	192.168.2.4
Apr 26, 2024 20:22:02.346602917 CEST	49740	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:22:02.346698046 CEST	443	49740	142.250.217.228	192.168.2.4
Apr 26, 2024 20:22:02.346777916 CEST	49740	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:22:02.347418070 CEST	49740	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:22:02.347453117 CEST	443	49740	142.250.217.228	192.168.2.4
Apr 26, 2024 20:22:02.744024038 CEST	443	49740	142.250.217.228	192.168.2.4
Apr 26, 2024 20:22:02.744349003 CEST	49740	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:22:02.744386911 CEST	443	49740	142.250.217.228	192.168.2.4
Apr 26, 2024 20:22:02.745807886 CEST	443	49740	142.250.217.228	192.168.2.4
Apr 26, 2024 20:22:02.745872021 CEST	49740	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:22:02.982563019 CEST	49740	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:22:02.982763052 CEST	443	49740	142.250.217.228	192.168.2.4
Apr 26, 2024 20:22:03.100713968 CEST	443	49739	35.80.252.204	192.168.2.4
Apr 26, 2024 20:22:03.151070118 CEST	49739	443	192.168.2.4	35.80.252.204
Apr 26, 2024 20:22:03.151165009 CEST	49740	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:22:03.151226044 CEST	443	49740	142.250.217.228	192.168.2.4
Apr 26, 2024 20:22:03.250233889 CEST	49740	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:22:05.188508987 CEST	49739	443	192.168.2.4	35.80.252.204
Apr 26, 2024 20:22:05.188535929 CEST	443	49739	35.80.252.204	192.168.2.4
Apr 26, 2024 20:22:05.192538977 CEST	443	49739	35.80.252.204	192.168.2.4
Apr 26, 2024 20:22:05.192610025 CEST	49739	443	192.168.2.4	35.80.252.204
Apr 26, 2024 20:22:05.288662910 CEST	49739	443	192.168.2.4	35.80.252.204
Apr 26, 2024 20:22:05.288980961 CEST	443	49739	35.80.252.204	192.168.2.4
Apr 26, 2024 20:22:05.288999081 CEST	49739	443	192.168.2.4	35.80.252.204
Apr 26, 2024 20:22:05.332118988 CEST	443	49739	35.80.252.204	192.168.2.4
Apr 26, 2024 20:22:05.357247114 CEST	49739	443	192.168.2.4	35.80.252.204
Apr 26, 2024 20:22:05.357259989 CEST	443	49739	35.80.252.204	192.168.2.4
Apr 26, 2024 20:22:05.519530058 CEST	49739	443	192.168.2.4	35.80.252.204
Apr 26, 2024 20:22:05.572838068 CEST	443	49739	35.80.252.204	192.168.2.4
Apr 26, 2024 20:22:05.573019028 CEST	443	49739	35.80.252.204	192.168.2.4
Apr 26, 2024 20:22:05.573077917 CEST	49739	443	192.168.2.4	35.80.252.204
Apr 26, 2024 20:22:05.619822979 CEST	49739	443	192.168.2.4	35.80.252.204
Apr 26, 2024 20:22:05.619851112 CEST	443	49739	35.80.252.204	192.168.2.4
Apr 26, 2024 20:22:06.043389082 CEST	49741	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:06.043435097 CEST	443	49741	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:06.043514967 CEST	49741	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:06.043930054 CEST	49741	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:06.043942928 CEST	443	49741	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:06.314469099 CEST	443	49741	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:06.358259916 CEST	49741	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:06.400593042 CEST	49741	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:06.400614023 CEST	443	49741	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:06.403249025 CEST	49742	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:22:06.403331041 CEST	443	49742	23.204.76.112	192.168.2.4
Apr 26, 2024 20:22:06.403414011 CEST	49742	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:22:06.404490948 CEST	443	49741	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:06.404561043 CEST	49741	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:06.405386925 CEST	49742	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:22:06.405426025 CEST	443	49742	23.204.76.112	192.168.2.4
Apr 26, 2024 20:22:06.664618969 CEST	443	49742	23.204.76.112	192.168.2.4
Apr 26, 2024 20:22:06.664717913 CEST	49742	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:22:06.666973114 CEST	49742	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:22:06.667001963 CEST	443	49742	23.204.76.112	192.168.2.4
Apr 26, 2024 20:22:06.667246103 CEST	443	49742	23.204.76.112	192.168.2.4
Apr 26, 2024 20:22:06.788089991 CEST	49742	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:22:07.279262066 CEST	49742	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:22:07.320128918 CEST	443	49742	23.204.76.112	192.168.2.4
Apr 26, 2024 20:22:07.406424999 CEST	443	49742	23.204.76.112	192.168.2.4
Apr 26, 2024 20:22:07.406527996 CEST	443	49742	23.204.76.112	192.168.2.4
Apr 26, 2024 20:22:07.406579018 CEST	49742	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:22:07.434856892 CEST	49741	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:07.435041904 CEST	49741	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:07.435048103 CEST	443	49741	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:07.435235023 CEST	443	49741	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:07.449740887 CEST	49742	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:22:07.449779987 CEST	443	49742	23.204.76.112	192.168.2.4
Apr 26, 2024 20:22:07.449812889 CEST	49742	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:22:07.449831009 CEST	443	49742	23.204.76.112	192.168.2.4
Apr 26, 2024 20:22:07.519076109 CEST	49741	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:07.519090891 CEST	443	49741	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:07.655258894 CEST	443	49741	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:07.655324936 CEST	49741	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:07.655338049 CEST	443	49741	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:07.655416012 CEST	443	49741	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:07.655457020 CEST	49741	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:08.497438908 CEST	49741	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:08.497462988 CEST	443	49741	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:08.505192041 CEST	49743	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:08.505228996 CEST	443	49743	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:08.505475044 CEST	49743	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:08.505786896 CEST	49743	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:08.505800962 CEST	443	49743	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:08.526360035 CEST	49744	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:22:08.526396990 CEST	443	49744	23.204.76.112	192.168.2.4
Apr 26, 2024 20:22:08.526470900 CEST	49744	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:22:08.526792049 CEST	49744	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:22:08.526808023 CEST	443	49744	23.204.76.112	192.168.2.4
Apr 26, 2024 20:22:08.770493984 CEST	443	49743	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:08.770852089 CEST	49743	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:08.770869970 CEST	443	49743	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:08.771974087 CEST	443	49743	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:08.772727966 CEST	49743	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:08.772893906 CEST	443	49743	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:08.772905111 CEST	49743	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:08.779694080 CEST	443	49744	23.204.76.112	192.168.2.4
Apr 26, 2024 20:22:08.779778957 CEST	49744	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:22:08.781483889 CEST	49744	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:22:08.781497002 CEST	443	49744	23.204.76.112	192.168.2.4
Apr 26, 2024 20:22:08.781702995 CEST	443	49744	23.204.76.112	192.168.2.4
Apr 26, 2024 20:22:08.782958031 CEST	49744	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:22:08.820121050 CEST	443	49743	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:08.828116894 CEST	443	49744	23.204.76.112	192.168.2.4
Apr 26, 2024 20:22:08.888525963 CEST	49743	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:09.031419039 CEST	443	49744	23.204.76.112	192.168.2.4
Apr 26, 2024 20:22:09.031547070 CEST	443	49744	23.204.76.112	192.168.2.4
Apr 26, 2024 20:22:09.031600952 CEST	49744	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:22:09.035120010 CEST	49744	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:22:09.035139084 CEST	443	49744	23.204.76.112	192.168.2.4
Apr 26, 2024 20:22:09.035156012 CEST	49744	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:22:09.035161972 CEST	443	49744	23.204.76.112	192.168.2.4
Apr 26, 2024 20:22:09.155770063 CEST	443	49743	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:09.155941010 CEST	443	49743	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:09.156001091 CEST	49743	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:09.471101999 CEST	49743	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:09.471129894 CEST	443	49743	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:09.472385883 CEST	49745	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:09.472433090 CEST	443	49745	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:09.472492933 CEST	49745	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:09.472786903 CEST	49745	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:09.472805977 CEST	443	49745	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:09.741430044 CEST	443	49745	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:09.741698027 CEST	49745	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:09.741755009 CEST	443	49745	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:09.742819071 CEST	443	49745	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:09.749327898 CEST	49745	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:09.749423027 CEST	443	49745	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:09.749666929 CEST	49745	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:09.792145014 CEST	443	49745	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.129832029 CEST	443	49745	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.129971981 CEST	443	49745	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.130063057 CEST	443	49745	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.130072117 CEST	49745	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.130115986 CEST	443	49745	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.130209923 CEST	443	49745	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.130223036 CEST	49745	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.130239964 CEST	443	49745	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.130296946 CEST	49745	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.130321026 CEST	443	49745	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.130459070 CEST	443	49745	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.130532026 CEST	49745	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.146966934 CEST	49745	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.147011995 CEST	443	49745	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.256052971 CEST	49746	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.256097078 CEST	443	49746	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.256170034 CEST	49746	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.256690025 CEST	49747	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.256726027 CEST	443	49747	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.256815910 CEST	49747	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.257095098 CEST	49746	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.257107019 CEST	443	49746	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.257462978 CEST	49747	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.257476091 CEST	443	49747	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.258088112 CEST	49748	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.258121014 CEST	443	49748	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.258255959 CEST	49748	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.258707047 CEST	49749	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.258738995 CEST	443	49749	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.258826971 CEST	49749	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.259088039 CEST	49749	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.259100914 CEST	443	49749	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.259263992 CEST	49748	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.259280920 CEST	443	49748	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.259901047 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.259982109 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.260044098 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.261388063 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.261426926 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.262124062 CEST	49751	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.262188911 CEST	443	49751	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.262273073 CEST	49751	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.262836933 CEST	49751	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.262871027 CEST	443	49751	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.515667915 CEST	443	49747	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.516187906 CEST	49747	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.516210079 CEST	443	49747	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.516563892 CEST	443	49747	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.517384052 CEST	49747	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.517460108 CEST	443	49747	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.517771959 CEST	49747	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.518474102 CEST	443	49748	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.518639088 CEST	49748	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.518649101 CEST	443	49748	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.519735098 CEST	443	49748	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.519789934 CEST	49748	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.520251036 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.520524979 CEST	49748	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.520601988 CEST	443	49748	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.520741940 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.520787001 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.520889044 CEST	49748	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.520895004 CEST	443	49748	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.521826029 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.521888018 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.522325993 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.522403002 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.522469997 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.523710966 CEST	443	49746	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.523823977 CEST	443	49751	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.523947954 CEST	49746	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.523962975 CEST	443	49746	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.524117947 CEST	49751	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.524153948 CEST	443	49751	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.525167942 CEST	443	49746	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.525176048 CEST	443	49751	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.525234938 CEST	49751	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.525531054 CEST	49746	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.525712967 CEST	443	49746	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.525927067 CEST	49751	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.526005983 CEST	443	49751	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.526103020 CEST	49746	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.526179075 CEST	49751	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.526195049 CEST	443	49751	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.526463032 CEST	443	49749	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.526798964 CEST	49749	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.526813030 CEST	443	49749	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.528258085 CEST	443	49749	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.528311014 CEST	49749	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.528676987 CEST	49749	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.528753996 CEST	443	49749	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.528827906 CEST	49749	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.528834105 CEST	443	49749	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.560148954 CEST	443	49747	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.568120003 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.568142891 CEST	443	49746	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.645203114 CEST	49748	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.645267963 CEST	49751	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.687957048 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.687982082 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.688019991 CEST	49749	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.787712097 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.819926977 CEST	443	49747	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.819971085 CEST	443	49747	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.820039034 CEST	443	49747	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.820096016 CEST	49747	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.820851088 CEST	49747	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.820868969 CEST	443	49747	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.821477890 CEST	49752	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.821504116 CEST	443	49752	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.821517944 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.821585894 CEST	49752	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.821641922 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.821703911 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.821723938 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.822352886 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.822395086 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.822410107 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.822463989 CEST	49752	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.822469950 CEST	443	49752	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.823308945 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.823353052 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.823367119 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.823584080 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.823654890 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.823681116 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.823709011 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.823731899 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.823759079 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.824284077 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.824374914 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.824426889 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.824440956 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.824491978 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.824506998 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.824804068 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.824851990 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.824865103 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.824924946 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.825021982 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.825069904 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.825083971 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.825303078 CEST	443	49748	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.825335979 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.825412989 CEST	443	49748	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.825459957 CEST	49748	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.825474024 CEST	443	49748	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.825511932 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.826198101 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.826220989 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.826261044 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.826276064 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.826347113 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.826392889 CEST	443	49748	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.826433897 CEST	49748	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.826440096 CEST	443	49748	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.826452017 CEST	443	49748	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.826466084 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.826507092 CEST	49748	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.826566935 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.826617002 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.826631069 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.826829910 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.826853037 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.826874971 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.826888084 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.826941013 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.826953888 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.827042103 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.827073097 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.827090025 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.827105045 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.827155113 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.827230930 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.827512026 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.827562094 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.827574968 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.827820063 CEST	49748	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.827828884 CEST	443	49748	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.827898026 CEST	443	49751	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.827950001 CEST	443	49751	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.827975035 CEST	443	49751	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.827991009 CEST	49751	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.828006983 CEST	443	49751	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.828063011 CEST	49751	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.828183889 CEST	443	49751	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.828283072 CEST	443	49751	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.828380108 CEST	49751	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.828387976 CEST	443	49751	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.828425884 CEST	49753	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.828447104 CEST	443	49753	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.828494072 CEST	49753	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.828552961 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.828582048 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.828633070 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.828646898 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.828839064 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.828851938 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.829045057 CEST	443	49751	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.829143047 CEST	443	49751	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.829193115 CEST	49751	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.829201937 CEST	443	49751	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.829242945 CEST	49751	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.829257011 CEST	443	49751	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.829600096 CEST	49753	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.829611063 CEST	443	49753	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.830003977 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.830064058 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.830076933 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.830142021 CEST	443	49751	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.830255032 CEST	443	49751	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.830281973 CEST	443	49751	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.830303907 CEST	49751	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.830312014 CEST	443	49751	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.830327034 CEST	49751	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.830333948 CEST	443	49751	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.830379009 CEST	49751	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.830575943 CEST	443	49746	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.830635071 CEST	443	49746	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.830673933 CEST	443	49746	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.830696106 CEST	49746	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.830709934 CEST	443	49746	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.830749989 CEST	49746	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.830858946 CEST	443	49746	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.830946922 CEST	443	49746	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.830987930 CEST	49746	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.830992937 CEST	443	49746	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.831026077 CEST	443	49746	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.831068993 CEST	443	49746	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.831110954 CEST	49746	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.831118107 CEST	443	49746	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.831147909 CEST	443	49746	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.831152916 CEST	49746	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.831182957 CEST	49746	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.832268953 CEST	49751	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.832282066 CEST	443	49751	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.832660913 CEST	49746	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.832669973 CEST	443	49746	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.835269928 CEST	443	49749	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.835413933 CEST	443	49749	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.835474014 CEST	49749	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.835486889 CEST	443	49749	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.835619926 CEST	443	49749	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.835670948 CEST	49749	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.835675955 CEST	443	49749	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.835794926 CEST	443	49749	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.835844040 CEST	49749	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.835849047 CEST	443	49749	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.835973978 CEST	443	49749	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.836074114 CEST	443	49749	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.836116076 CEST	49749	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.836122036 CEST	443	49749	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.836159945 CEST	49749	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.836164951 CEST	443	49749	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.836241961 CEST	443	49749	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.836364985 CEST	49749	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.836894989 CEST	49749	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.836901903 CEST	443	49749	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.947563887 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.947603941 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.947638035 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.947669983 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.947696924 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.947715998 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.947770119 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.947783947 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.947833061 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.948381901 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.948390007 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.948434114 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.949047089 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.949054003 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.949114084 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.949220896 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.949228048 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.949270964 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.949970007 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.949975967 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.950022936 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.950723886 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.950731039 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.950788975 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.950809956 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.950860023 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.951615095 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.951678991 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.952343941 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.952414989 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.952564001 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.952624083 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.953399897 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.953473091 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.954144955 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.954216003 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.955059052 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.955120087 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.955642939 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.955707073 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.996623993 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.996675014 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.996685028 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:10.996702909 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:10.996738911 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.069988966 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.070056915 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.070075035 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.070128918 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.072263002 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.072272062 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.072325945 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.072834015 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.072840929 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.072899103 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.073015928 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.073021889 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.073070049 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.073474884 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.073534012 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.073681116 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.073740005 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.074522972 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.074590921 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.074853897 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.074908972 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.075470924 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.075531006 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.076149940 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.076205015 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.076226950 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.076277018 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.077030897 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.077102900 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.077934980 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.078013897 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.078154087 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.078208923 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.078980923 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.079055071 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.079283953 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.079349041 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.080075026 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.080148935 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.080434084 CEST	443	49752	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.080553055 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.080610037 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.080801964 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.080852985 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.080888987 CEST	49752	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.080902100 CEST	443	49752	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.081228971 CEST	443	49752	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.081507921 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.081562996 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.081779003 CEST	49752	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.081829071 CEST	443	49752	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.082036972 CEST	49752	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.082499027 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.082561970 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.083585978 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.083592892 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.083626032 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.083662033 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.083677053 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.083708048 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.086014986 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.086033106 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.086087942 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.086110115 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.086137056 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.088430882 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.088443995 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.088500977 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.088520050 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.089813948 CEST	443	49753	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.090015888 CEST	49753	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.090044022 CEST	443	49753	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.090411901 CEST	443	49753	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.090694904 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.090708971 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.090764046 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.090780020 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.090806007 CEST	49753	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.090867043 CEST	443	49753	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.091053963 CEST	49753	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.092797995 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.092812061 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.092869043 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.092885971 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.095020056 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.095040083 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.095101118 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.095117092 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.096986055 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.096999884 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.097079039 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.097094059 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.121592045 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.121607065 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.121671915 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.121687889 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.122600079 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.122615099 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.122678995 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.122695923 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.124120951 CEST	443	49752	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.132128954 CEST	443	49753	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.197510958 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.197529078 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.197593927 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.197623968 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.197649002 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.200232029 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.200239897 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.200249910 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.200270891 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.200304985 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.200341940 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.200370073 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.202418089 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.202431917 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.202517033 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.202531099 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.207377911 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.207393885 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.207437992 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.207453966 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.207480907 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.209413052 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.209431887 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.209475994 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.209491014 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.209517002 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.210611105 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.210625887 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.210680962 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.210704088 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.210727930 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.212977886 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.212992907 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.213059902 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.213074923 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.214489937 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.214514017 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.214556932 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.214570999 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.214597940 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.215267897 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.215295076 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.215325117 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.215341091 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.215367079 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.215370893 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.215415955 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.215820074 CEST	49750	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.215847015 CEST	443	49750	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.238466024 CEST	49754	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.238495111 CEST	443	49754	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.238574028 CEST	49754	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.238894939 CEST	49754	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.238912106 CEST	443	49754	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.276897907 CEST	49755	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.276947021 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.277050018 CEST	49755	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.282641888 CEST	49755	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.282670021 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.381474972 CEST	443	49752	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.381535053 CEST	443	49752	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.381572008 CEST	443	49752	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.381598949 CEST	443	49752	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.381613016 CEST	49752	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.381624937 CEST	443	49752	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.381661892 CEST	49752	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.381934881 CEST	443	49752	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.381968021 CEST	443	49752	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.382014990 CEST	49752	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.382019043 CEST	443	49752	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.382064104 CEST	49752	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.382102966 CEST	443	49752	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.382194042 CEST	443	49752	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.382261038 CEST	443	49752	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.382303953 CEST	49752	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.389894962 CEST	443	49753	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.389944077 CEST	443	49753	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.389976025 CEST	443	49753	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.390002012 CEST	443	49753	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.390007973 CEST	49753	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.390028000 CEST	443	49753	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.390062094 CEST	443	49753	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.390078068 CEST	49753	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.390084982 CEST	443	49753	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.390127897 CEST	49753	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.390132904 CEST	443	49753	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.390172005 CEST	49753	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.390530109 CEST	443	49753	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.390600920 CEST	443	49753	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.390647888 CEST	49753	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.390655041 CEST	443	49753	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.390678883 CEST	443	49753	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.390724897 CEST	49753	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.401357889 CEST	49753	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.401371956 CEST	443	49753	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.406577110 CEST	49752	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.406591892 CEST	443	49752	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.506505966 CEST	443	49754	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.547106981 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:11.590838909 CEST	49755	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:11.654766083 CEST	49754	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:12.722278118 CEST	443	49740	142.250.217.228	192.168.2.4
Apr 26, 2024 20:22:12.722345114 CEST	443	49740	142.250.217.228	192.168.2.4
Apr 26, 2024 20:22:12.722403049 CEST	49740	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:22:12.855115891 CEST	49754	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:12.855133057 CEST	443	49754	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:12.855700016 CEST	49755	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:12.855729103 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:12.856575966 CEST	443	49754	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:12.857134104 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:12.883589983 CEST	49754	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:12.884223938 CEST	443	49754	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:12.885955095 CEST	49755	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:12.886174917 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:12.886495113 CEST	49754	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:12.886676073 CEST	49755	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:12.932118893 CEST	443	49754	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:12.932123899 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.022881985 CEST	443	49754	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.022927046 CEST	443	49754	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.022954941 CEST	443	49754	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.022969961 CEST	49754	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.022981882 CEST	443	49754	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.023017883 CEST	49754	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.023024082 CEST	443	49754	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.023087025 CEST	443	49754	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.023127079 CEST	49754	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.030834913 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.030903101 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.030946016 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.030980110 CEST	49755	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.030985117 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.031043053 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.031085968 CEST	49755	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.031126022 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.031160116 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.031171083 CEST	49755	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.031184912 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.031239986 CEST	49755	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.031408072 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.031472921 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.031517982 CEST	49755	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.031522036 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.031533957 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.031577110 CEST	49755	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.032305956 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.032392025 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.032443047 CEST	49755	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.032457113 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.032494068 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.032546997 CEST	49755	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.032558918 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.033189058 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.033231020 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.033250093 CEST	49755	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.033262014 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.033308983 CEST	49755	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.033319950 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.034120083 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.034158945 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.034168005 CEST	49755	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.034179926 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.034215927 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.034228086 CEST	49755	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.034240007 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.034301043 CEST	49755	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.034976959 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.035046101 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.035078049 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.035096884 CEST	49755	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.035109043 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.035141945 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.035161018 CEST	49755	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.035192013 CEST	49755	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.131886005 CEST	49754	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.131911993 CEST	443	49754	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.163460016 CEST	49740	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:22:13.163495064 CEST	443	49740	142.250.217.228	192.168.2.4
Apr 26, 2024 20:22:13.163836002 CEST	49759	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.163880110 CEST	443	49759	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.163937092 CEST	49759	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.165569067 CEST	49759	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.165580034 CEST	443	49759	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.165776968 CEST	49755	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.165791035 CEST	443	49755	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.296797991 CEST	49762	443	192.168.2.4	104.16.80.73
Apr 26, 2024 20:22:13.296828032 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.296875000 CEST	49762	443	192.168.2.4	104.16.80.73
Apr 26, 2024 20:22:13.297225952 CEST	49762	443	192.168.2.4	104.16.80.73
Apr 26, 2024 20:22:13.297238111 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.299325943 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:13.299365044 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.299417973 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:13.299810886 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:13.299837112 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.339941025 CEST	49764	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.339963913 CEST	443	49764	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.340017080 CEST	49764	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.340219021 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.340255022 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.340302944 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.340606928 CEST	49764	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.340620041 CEST	443	49764	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.340987921 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.341016054 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.424052954 CEST	443	49759	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.424251080 CEST	49759	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.424263000 CEST	443	49759	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.424585104 CEST	443	49759	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.425112009 CEST	49759	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.425159931 CEST	443	49759	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.425256014 CEST	49759	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.472112894 CEST	443	49759	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.558914900 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.570703983 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.591062069 CEST	49762	443	192.168.2.4	104.16.80.73
Apr 26, 2024 20:22:13.591078043 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.591187954 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:13.591263056 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.592231035 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.592295885 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:13.594980001 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.595061064 CEST	49762	443	192.168.2.4	104.16.80.73
Apr 26, 2024 20:22:13.599915028 CEST	443	49764	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.603415966 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.603924990 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:13.604006052 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.604063034 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:13.604192019 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.604233027 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.604262114 CEST	49764	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.604273081 CEST	443	49764	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.605175972 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.605217934 CEST	443	49764	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.605237007 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.605268955 CEST	49764	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.621794939 CEST	49762	443	192.168.2.4	104.16.80.73
Apr 26, 2024 20:22:13.621921062 CEST	49762	443	192.168.2.4	104.16.80.73
Apr 26, 2024 20:22:13.621927977 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.621994019 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.628525972 CEST	49764	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.628586054 CEST	443	49764	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.631289005 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.631390095 CEST	49764	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.631397009 CEST	443	49764	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.631397009 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.631442070 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.644134998 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.672123909 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.691101074 CEST	49764	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.712559938 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:13.712578058 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.712593079 CEST	49762	443	192.168.2.4	104.16.80.73
Apr 26, 2024 20:22:13.712599039 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.712605953 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.712631941 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.722548962 CEST	443	49759	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.722696066 CEST	443	49759	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.722728968 CEST	443	49759	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.722738981 CEST	49759	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.722744942 CEST	443	49759	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.722785950 CEST	49759	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.723396063 CEST	443	49759	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.723472118 CEST	443	49759	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.723509073 CEST	49759	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.777650118 CEST	49759	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.777666092 CEST	443	49759	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.784008026 CEST	49766	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.784039974 CEST	443	49766	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.784102917 CEST	49766	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.784281969 CEST	49766	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.784291983 CEST	443	49766	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.811810970 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.811867952 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:13.811889887 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.811928034 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.811974049 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:13.811988115 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.859225035 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.859232903 CEST	49762	443	192.168.2.4	104.16.80.73
Apr 26, 2024 20:22:13.859235048 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:13.893222094 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.893347979 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.893394947 CEST	49762	443	192.168.2.4	104.16.80.73
Apr 26, 2024 20:22:13.893404961 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.893507004 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.893548965 CEST	49762	443	192.168.2.4	104.16.80.73
Apr 26, 2024 20:22:13.893553972 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.893654108 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.893697977 CEST	49762	443	192.168.2.4	104.16.80.73
Apr 26, 2024 20:22:13.893702984 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.893851995 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.893893003 CEST	49762	443	192.168.2.4	104.16.80.73
Apr 26, 2024 20:22:13.893897057 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.893994093 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.894045115 CEST	49762	443	192.168.2.4	104.16.80.73
Apr 26, 2024 20:22:13.894049883 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.894328117 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.894370079 CEST	49762	443	192.168.2.4	104.16.80.73
Apr 26, 2024 20:22:13.894373894 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.894479990 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.894517899 CEST	49762	443	192.168.2.4	104.16.80.73
Apr 26, 2024 20:22:13.894522905 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.894695997 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.894742966 CEST	49762	443	192.168.2.4	104.16.80.73
Apr 26, 2024 20:22:13.900682926 CEST	49762	443	192.168.2.4	104.16.80.73
Apr 26, 2024 20:22:13.900697947 CEST	443	49762	104.16.80.73	192.168.2.4
Apr 26, 2024 20:22:13.902645111 CEST	443	49764	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.902688026 CEST	443	49764	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.902718067 CEST	443	49764	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.902729988 CEST	49764	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.902741909 CEST	443	49764	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.902784109 CEST	49764	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.902786016 CEST	443	49764	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.902793884 CEST	443	49764	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.902823925 CEST	49764	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.902828932 CEST	443	49764	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.902856112 CEST	443	49764	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.902894974 CEST	49764	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.906126976 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.906172037 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.906200886 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.906217098 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.906228065 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.906236887 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.906269073 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.906455040 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.906497002 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.906517982 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.907017946 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.907044888 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.907066107 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.907079935 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.907130003 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.907484055 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.907546043 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.907572985 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.907583952 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.907598019 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.907651901 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.908478022 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.908539057 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.908567905 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.908581972 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.908595085 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.908643007 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.908653021 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.909409046 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.909452915 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.909463882 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.909502029 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.909552097 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.909563065 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.910427094 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.910464048 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.910466909 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.910490036 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.910527945 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.910530090 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.910542011 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.910584927 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.911297083 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.911365032 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.911406994 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.924717903 CEST	49764	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.924735069 CEST	443	49764	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.925587893 CEST	49765	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:13.925616026 CEST	443	49765	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:13.937371969 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.937381983 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.937417030 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.937441111 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:13.937467098 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.937514067 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:13.937514067 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:13.937530994 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.937566042 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.937594891 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:13.995208979 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.995220900 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.995251894 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.995266914 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:13.995285034 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.995309114 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.995333910 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.995349884 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:13.995351076 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:13.995351076 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:13.995361090 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:13.995371103 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.044260979 CEST	443	49766	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:14.051521063 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.052622080 CEST	49766	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:14.052639961 CEST	443	49766	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:14.052984953 CEST	443	49766	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:14.053426981 CEST	49766	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:14.053498030 CEST	443	49766	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:14.072298050 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.072307110 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.072345018 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.072355986 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.072375059 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.072396994 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.072407961 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.072423935 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.072427988 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.072438002 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.072469950 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.073148012 CEST	49766	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:14.120120049 CEST	443	49766	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:14.254684925 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.254698038 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.254759073 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.254790068 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.254837990 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.254846096 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.254851103 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.254853010 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.254878044 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.254885912 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.254916906 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.254925013 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.254930973 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.254968882 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.254977942 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.255002975 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.255009890 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.255027056 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.255036116 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.255043983 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.255070925 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.255078077 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.255090952 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.255111933 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.255131006 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.255163908 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.255173922 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.255187035 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.255203009 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.255209923 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.255244970 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.255253077 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.255263090 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.255275965 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.255296946 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.255300045 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.255311966 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.255352974 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.255354881 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.255378008 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.255403042 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.255420923 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.274785995 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.274810076 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.274846077 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.274852991 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.274887085 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.274909019 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.302774906 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.302793026 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.302865982 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.302882910 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.302936077 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.337059975 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.337080956 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.337126970 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.337141037 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.337202072 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.337202072 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.340451956 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.340508938 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.366643906 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.366673946 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.366735935 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.366766930 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.366796017 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.376032114 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.376065016 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.376123905 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.376132011 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.376172066 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.376262903 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.377315998 CEST	49763	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.377342939 CEST	443	49763	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.417860985 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.417891979 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.417958975 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.418272018 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.418289900 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.430747986 CEST	443	49766	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:14.430840015 CEST	443	49766	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:14.431020021 CEST	49766	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:14.432163954 CEST	49766	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:14.432178974 CEST	443	49766	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:14.445055962 CEST	49771	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:14.445085049 CEST	443	49771	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:14.445175886 CEST	49771	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:14.445485115 CEST	49771	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:14.445493937 CEST	443	49771	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:14.672467947 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.672890902 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.672905922 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.673294067 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.686513901 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.686580896 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.689718962 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:14.702527046 CEST	443	49771	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:14.708164930 CEST	49771	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:14.708179951 CEST	443	49771	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:14.708515882 CEST	443	49771	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:14.718353987 CEST	49771	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:14.718405008 CEST	443	49771	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:14.723655939 CEST	49771	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:14.732151031 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:14.768107891 CEST	443	49771	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:15.002717972 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.002772093 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.002934933 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.002970934 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.002996922 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.003036022 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.003043890 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.003065109 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.003087997 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.003097057 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.003182888 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.011215925 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.017159939 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.017210007 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.017218113 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.017261028 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.025854111 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.025904894 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.025929928 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.025974989 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.034559011 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.078010082 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.089142084 CEST	443	49771	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:15.089256048 CEST	443	49771	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:15.089306116 CEST	49771	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:15.089771032 CEST	49771	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:15.089783907 CEST	443	49771	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:15.128264904 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.128307104 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.128338099 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.128377914 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.132412910 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.132458925 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.141074896 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.141124964 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.141130924 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.149879932 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.149910927 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.149920940 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.149926901 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.149966955 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.158957005 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.159001112 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.159054041 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.159106970 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.167886972 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.167918921 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.167978048 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.167984962 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.176094055 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.176139116 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.176146030 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.184895039 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.184966087 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.184973001 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.192974091 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.193006992 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.193062067 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.193069935 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.193109035 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.200403929 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.200448990 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.200454950 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.208398104 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.208420992 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.208441973 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.208450079 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.208489895 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.216059923 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.216106892 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.216111898 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.227909088 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.227953911 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.227960110 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.228001118 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.254753113 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.254787922 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.254801035 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.254808903 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.254903078 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.259861946 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.259907961 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.259927988 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.267407894 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.267450094 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.267456055 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.267513037 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.267570019 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.267576933 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.270972013 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.271003962 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.271034002 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.271040916 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.271080971 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.274755955 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.274940014 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.274993896 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.277482986 CEST	49770	443	192.168.2.4	31.13.67.20
Apr 26, 2024 20:22:15.277492046 CEST	443	49770	31.13.67.20	192.168.2.4
Apr 26, 2024 20:22:15.486164093 CEST	49777	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:15.486231089 CEST	443	49777	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:15.486296892 CEST	49777	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:15.486666918 CEST	49777	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:15.486700058 CEST	443	49777	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:15.487224102 CEST	49778	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:15.487251997 CEST	443	49778	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:15.487442017 CEST	49778	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:15.487864971 CEST	49778	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:15.487879038 CEST	443	49778	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:15.535995960 CEST	49780	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:15.536025047 CEST	443	49780	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:15.536115885 CEST	49780	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:15.536410093 CEST	49781	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:15.536439896 CEST	443	49781	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:15.536489964 CEST	49781	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:15.537085056 CEST	49780	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:15.537108898 CEST	443	49780	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:15.537666082 CEST	49781	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:15.537704945 CEST	443	49781	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:15.792079926 CEST	443	49781	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:15.792321920 CEST	443	49780	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:15.792346001 CEST	49781	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:15.792381048 CEST	443	49781	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:15.792505980 CEST	49780	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:15.792530060 CEST	443	49780	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:15.793277025 CEST	443	49781	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:15.793346882 CEST	49781	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:15.793391943 CEST	443	49780	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:15.793447018 CEST	49780	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:15.794914007 CEST	49781	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:15.794979095 CEST	443	49781	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:15.795300961 CEST	49780	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:15.795367956 CEST	443	49780	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:15.795701027 CEST	49781	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:15.795718908 CEST	443	49781	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:15.795975924 CEST	49780	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:15.795994043 CEST	443	49780	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:15.818232059 CEST	443	49777	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:15.820408106 CEST	49777	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:15.820425987 CEST	443	49777	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:15.821295977 CEST	443	49777	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:15.821361065 CEST	49777	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:15.822932959 CEST	49777	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:15.822998047 CEST	443	49777	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:15.823522091 CEST	49777	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:15.823538065 CEST	443	49777	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:15.858802080 CEST	49780	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:15.886985064 CEST	49781	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:15.887375116 CEST	49777	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:15.892092943 CEST	443	49778	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:15.895592928 CEST	49778	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:15.895617962 CEST	443	49778	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:15.897336960 CEST	443	49778	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:15.897402048 CEST	49778	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:15.900211096 CEST	49778	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:15.900300980 CEST	443	49778	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:15.900552034 CEST	49778	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:15.900558949 CEST	443	49778	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:16.044179916 CEST	443	49781	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:16.044245958 CEST	443	49781	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:16.044337034 CEST	49781	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:16.088059902 CEST	49778	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:16.152034998 CEST	443	49777	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:16.152076960 CEST	443	49777	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:16.152154922 CEST	49777	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:16.152180910 CEST	443	49777	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:16.152237892 CEST	443	49777	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:16.153624058 CEST	49777	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:16.257286072 CEST	443	49778	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:16.257615089 CEST	443	49778	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:16.261742115 CEST	49778	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:17.706299067 CEST	49781	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:17.706347942 CEST	443	49781	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:17.721409082 CEST	49777	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:17.721436024 CEST	443	49777	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:17.722605944 CEST	49778	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:17.722640038 CEST	443	49778	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:17.750875950 CEST	443	49780	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:17.751024008 CEST	443	49780	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:17.751071930 CEST	49780	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:17.751092911 CEST	443	49780	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:17.751286983 CEST	443	49780	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:17.751326084 CEST	49780	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:17.751338005 CEST	443	49780	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:17.751492977 CEST	443	49780	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:17.751545906 CEST	49780	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:17.753305912 CEST	49780	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:17.753320932 CEST	443	49780	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:18.488513947 CEST	49783	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:18.488593102 CEST	443	49783	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:18.488692045 CEST	49783	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:18.489782095 CEST	49783	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:18.489815950 CEST	443	49783	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:18.686836958 CEST	49784	443	192.168.2.4	172.217.193.155
Apr 26, 2024 20:22:18.686882973 CEST	443	49784	172.217.193.155	192.168.2.4
Apr 26, 2024 20:22:18.686940908 CEST	49784	443	192.168.2.4	172.217.193.155
Apr 26, 2024 20:22:18.687669039 CEST	49785	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:18.687747955 CEST	443	49785	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:18.687905073 CEST	49784	443	192.168.2.4	172.217.193.155
Apr 26, 2024 20:22:18.687912941 CEST	443	49784	172.217.193.155	192.168.2.4
Apr 26, 2024 20:22:18.687941074 CEST	49785	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:18.688311100 CEST	49785	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:18.688327074 CEST	443	49785	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:18.731208086 CEST	49786	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:18.731275082 CEST	443	49786	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:18.731373072 CEST	49786	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:18.731729984 CEST	49787	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:18.731806040 CEST	443	49787	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:18.731992960 CEST	49786	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:18.732011080 CEST	443	49786	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:18.732021093 CEST	49787	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:18.732491970 CEST	49787	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:18.732527018 CEST	443	49787	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:18.820800066 CEST	443	49783	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:18.822308064 CEST	49783	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:18.822345972 CEST	443	49783	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:18.823318958 CEST	443	49783	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:18.823395967 CEST	49783	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:18.824003935 CEST	49783	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:18.824069977 CEST	443	49783	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:18.824356079 CEST	49783	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:18.824373007 CEST	443	49783	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:18.983913898 CEST	49783	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:19.016040087 CEST	443	49785	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:19.025392056 CEST	49785	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:19.025424957 CEST	443	49785	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:19.025832891 CEST	443	49785	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:19.025901079 CEST	49785	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:19.026511908 CEST	443	49785	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:19.026559114 CEST	49785	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:19.030508995 CEST	49785	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:19.030570984 CEST	443	49785	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:19.030862093 CEST	49785	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:19.030869007 CEST	443	49785	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:19.044348001 CEST	443	49784	172.217.193.155	192.168.2.4
Apr 26, 2024 20:22:19.044819117 CEST	49784	443	192.168.2.4	172.217.193.155
Apr 26, 2024 20:22:19.044831038 CEST	443	49784	172.217.193.155	192.168.2.4
Apr 26, 2024 20:22:19.045795918 CEST	443	49784	172.217.193.155	192.168.2.4
Apr 26, 2024 20:22:19.045852900 CEST	49784	443	192.168.2.4	172.217.193.155
Apr 26, 2024 20:22:19.050409079 CEST	49784	443	192.168.2.4	172.217.193.155
Apr 26, 2024 20:22:19.050457954 CEST	443	49784	172.217.193.155	192.168.2.4
Apr 26, 2024 20:22:19.053986073 CEST	49784	443	192.168.2.4	172.217.193.155
Apr 26, 2024 20:22:19.053992033 CEST	443	49784	172.217.193.155	192.168.2.4
Apr 26, 2024 20:22:19.080313921 CEST	443	49787	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:19.080872059 CEST	49787	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:19.080890894 CEST	443	49787	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:19.082315922 CEST	443	49787	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:19.082369089 CEST	49787	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:19.083028078 CEST	443	49786	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:19.101358891 CEST	49787	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:19.101445913 CEST	443	49787	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:19.101810932 CEST	49786	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:19.101826906 CEST	443	49786	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:19.103498936 CEST	49787	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:19.103514910 CEST	443	49787	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:19.105403900 CEST	443	49786	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:19.105463982 CEST	49786	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:19.108016014 CEST	49786	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:19.108223915 CEST	49786	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:19.108227968 CEST	443	49786	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:19.152143955 CEST	443	49786	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:19.153470993 CEST	443	49783	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:19.154118061 CEST	443	49783	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:19.154182911 CEST	49783	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:19.157242060 CEST	49787	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:19.157243013 CEST	49785	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:19.163852930 CEST	49783	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:19.163885117 CEST	443	49783	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:19.187612057 CEST	49784	443	192.168.2.4	172.217.193.155
Apr 26, 2024 20:22:19.187668085 CEST	49786	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:19.187699080 CEST	443	49786	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:19.199429035 CEST	49789	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:19.199474096 CEST	443	49789	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:19.199537992 CEST	49789	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:19.200140953 CEST	49789	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:19.200158119 CEST	443	49789	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:19.222556114 CEST	49790	443	192.168.2.4	172.217.193.155
Apr 26, 2024 20:22:19.222579956 CEST	443	49790	172.217.193.155	192.168.2.4
Apr 26, 2024 20:22:19.222630978 CEST	49790	443	192.168.2.4	172.217.193.155
Apr 26, 2024 20:22:19.223017931 CEST	49790	443	192.168.2.4	172.217.193.155
Apr 26, 2024 20:22:19.223033905 CEST	443	49790	172.217.193.155	192.168.2.4
Apr 26, 2024 20:22:19.226145983 CEST	49791	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:19.226152897 CEST	443	49791	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:19.226207972 CEST	49791	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:19.226365089 CEST	49791	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:19.226377964 CEST	443	49791	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:19.347939968 CEST	443	49785	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:19.348022938 CEST	443	49785	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:19.348077059 CEST	49785	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:19.348285913 CEST	49785	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:19.348305941 CEST	443	49785	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:19.348315001 CEST	49785	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:19.348349094 CEST	49785	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:19.392992973 CEST	49786	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:19.401468039 CEST	443	49784	172.217.193.155	192.168.2.4
Apr 26, 2024 20:22:19.401537895 CEST	443	49784	172.217.193.155	192.168.2.4
Apr 26, 2024 20:22:19.401581049 CEST	49784	443	192.168.2.4	172.217.193.155
Apr 26, 2024 20:22:19.401760101 CEST	49784	443	192.168.2.4	172.217.193.155
Apr 26, 2024 20:22:19.401772022 CEST	443	49784	172.217.193.155	192.168.2.4
Apr 26, 2024 20:22:19.401787043 CEST	49784	443	192.168.2.4	172.217.193.155
Apr 26, 2024 20:22:19.401809931 CEST	49784	443	192.168.2.4	172.217.193.155
Apr 26, 2024 20:22:19.424057007 CEST	443	49787	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:19.424247980 CEST	443	49787	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:19.424309015 CEST	49787	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:19.424563885 CEST	49787	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:19.424563885 CEST	49787	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:19.424606085 CEST	443	49787	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:19.424643040 CEST	49787	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:19.454202890 CEST	443	49786	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:19.454377890 CEST	443	49786	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:19.454427004 CEST	49786	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:19.454438925 CEST	443	49786	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:19.454602957 CEST	443	49786	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:19.454647064 CEST	49786	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:19.454654932 CEST	443	49786	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:19.454760075 CEST	443	49786	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:19.454802036 CEST	49786	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:19.455218077 CEST	49786	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:19.455229998 CEST	443	49786	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:19.455240965 CEST	49786	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:19.455270052 CEST	49786	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:19.457797050 CEST	443	49789	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:19.457981110 CEST	49789	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:19.457989931 CEST	443	49789	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:19.458292007 CEST	443	49789	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:19.458605051 CEST	49789	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:19.458662987 CEST	443	49789	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:19.458734035 CEST	49789	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:19.458760977 CEST	49789	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:19.458801031 CEST	443	49789	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:19.504142046 CEST	443	49791	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:19.504322052 CEST	49791	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:19.504333019 CEST	443	49791	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:19.505425930 CEST	443	49791	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:19.505953074 CEST	49791	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:19.506047010 CEST	49791	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:19.506052971 CEST	443	49791	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:19.506124020 CEST	443	49791	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:19.553531885 CEST	49791	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:19.594544888 CEST	443	49790	172.217.193.155	192.168.2.4
Apr 26, 2024 20:22:19.594762087 CEST	49790	443	192.168.2.4	172.217.193.155
Apr 26, 2024 20:22:19.594769955 CEST	443	49790	172.217.193.155	192.168.2.4
Apr 26, 2024 20:22:19.595065117 CEST	443	49790	172.217.193.155	192.168.2.4
Apr 26, 2024 20:22:19.595340967 CEST	49790	443	192.168.2.4	172.217.193.155
Apr 26, 2024 20:22:19.595400095 CEST	443	49790	172.217.193.155	192.168.2.4
Apr 26, 2024 20:22:19.595444918 CEST	49790	443	192.168.2.4	172.217.193.155
Apr 26, 2024 20:22:19.640115976 CEST	443	49790	172.217.193.155	192.168.2.4
Apr 26, 2024 20:22:19.708884954 CEST	443	49789	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:19.708954096 CEST	443	49789	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:19.709001064 CEST	49789	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:19.709675074 CEST	49789	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:19.709683895 CEST	443	49789	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:19.802264929 CEST	443	49791	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:19.802505016 CEST	443	49791	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:19.802555084 CEST	49791	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:19.810631990 CEST	49791	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:19.810642004 CEST	443	49791	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:19.817609072 CEST	49792	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:19.817651987 CEST	443	49792	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:19.817706108 CEST	49792	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:19.817910910 CEST	49792	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:19.817919016 CEST	443	49792	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:19.843393087 CEST	49793	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:19.843415022 CEST	443	49793	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:19.843462944 CEST	49793	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:19.843703985 CEST	49793	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:19.843714952 CEST	443	49793	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:19.969036102 CEST	443	49790	172.217.193.155	192.168.2.4
Apr 26, 2024 20:22:19.969132900 CEST	443	49790	172.217.193.155	192.168.2.4
Apr 26, 2024 20:22:19.970351934 CEST	49790	443	192.168.2.4	172.217.193.155
Apr 26, 2024 20:22:19.971550941 CEST	49790	443	192.168.2.4	172.217.193.155
Apr 26, 2024 20:22:19.971556902 CEST	443	49790	172.217.193.155	192.168.2.4
Apr 26, 2024 20:22:19.977060080 CEST	49795	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:19.977122068 CEST	443	49795	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:19.977905035 CEST	49795	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:19.980386019 CEST	49795	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:19.980433941 CEST	443	49795	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:20.082242012 CEST	443	49792	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:20.161434889 CEST	49792	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:20.161461115 CEST	443	49792	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:20.161931038 CEST	49796	443	192.168.2.4	173.194.212.157
Apr 26, 2024 20:22:20.161956072 CEST	443	49796	173.194.212.157	192.168.2.4
Apr 26, 2024 20:22:20.162009954 CEST	49796	443	192.168.2.4	173.194.212.157
Apr 26, 2024 20:22:20.162703037 CEST	443	49792	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:20.163300991 CEST	49796	443	192.168.2.4	173.194.212.157
Apr 26, 2024 20:22:20.163300991 CEST	49792	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:20.163311958 CEST	443	49796	173.194.212.157	192.168.2.4
Apr 26, 2024 20:22:20.163460970 CEST	49792	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:20.163465977 CEST	443	49792	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:20.163499117 CEST	443	49792	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:20.169513941 CEST	443	49793	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:20.169998884 CEST	49793	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:20.170006990 CEST	443	49793	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:20.170975924 CEST	443	49793	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:20.171103954 CEST	49793	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:20.171480894 CEST	49793	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:20.171535969 CEST	443	49793	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:20.171648026 CEST	49793	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:20.171654940 CEST	443	49793	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:20.308115005 CEST	443	49795	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:20.376144886 CEST	443	49792	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:20.379962921 CEST	49792	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:20.379962921 CEST	49793	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:20.393857002 CEST	443	49792	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:20.394088984 CEST	443	49792	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:20.401583910 CEST	49792	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:20.461853981 CEST	49795	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:20.507801056 CEST	443	49793	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:20.507890940 CEST	443	49793	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:20.514143944 CEST	49793	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:20.524976015 CEST	443	49796	173.194.212.157	192.168.2.4
Apr 26, 2024 20:22:20.661612988 CEST	49796	443	192.168.2.4	173.194.212.157
Apr 26, 2024 20:22:21.975172043 CEST	49796	443	192.168.2.4	173.194.212.157
Apr 26, 2024 20:22:21.975212097 CEST	443	49796	173.194.212.157	192.168.2.4
Apr 26, 2024 20:22:21.979178905 CEST	443	49796	173.194.212.157	192.168.2.4
Apr 26, 2024 20:22:21.979211092 CEST	443	49796	173.194.212.157	192.168.2.4
Apr 26, 2024 20:22:21.979239941 CEST	49796	443	192.168.2.4	173.194.212.157
Apr 26, 2024 20:22:21.990333080 CEST	49795	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:21.990356922 CEST	443	49795	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:21.990364075 CEST	49793	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:21.990382910 CEST	443	49793	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:21.990880966 CEST	443	49795	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:21.991240025 CEST	49796	443	192.168.2.4	173.194.212.157
Apr 26, 2024 20:22:21.991429090 CEST	443	49796	173.194.212.157	192.168.2.4
Apr 26, 2024 20:22:21.991807938 CEST	49796	443	192.168.2.4	173.194.212.157
Apr 26, 2024 20:22:21.991822004 CEST	443	49796	173.194.212.157	192.168.2.4
Apr 26, 2024 20:22:21.992103100 CEST	49795	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:21.992170095 CEST	49795	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:21.992175102 CEST	443	49795	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:21.992186069 CEST	443	49795	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:22.161314011 CEST	49796	443	192.168.2.4	173.194.212.157
Apr 26, 2024 20:22:22.161320925 CEST	49795	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:22.170394897 CEST	443	49796	173.194.212.157	192.168.2.4
Apr 26, 2024 20:22:22.170589924 CEST	443	49796	173.194.212.157	192.168.2.4
Apr 26, 2024 20:22:22.170644999 CEST	49796	443	192.168.2.4	173.194.212.157
Apr 26, 2024 20:22:22.212213993 CEST	443	49795	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:22.214113951 CEST	443	49795	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:22.214759111 CEST	49795	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:22.222359896 CEST	49796	443	192.168.2.4	173.194.212.157
Apr 26, 2024 20:22:22.222376108 CEST	443	49796	173.194.212.157	192.168.2.4
Apr 26, 2024 20:22:22.225994110 CEST	49795	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:22.226027966 CEST	443	49795	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:22.363558054 CEST	49792	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:22.363593102 CEST	443	49792	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:23.342905998 CEST	49797	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:23.342995882 CEST	443	49797	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:23.343079090 CEST	49797	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:23.343439102 CEST	49797	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:23.343472958 CEST	443	49797	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:23.570055008 CEST	49798	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:23.570097923 CEST	443	49798	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:23.570164919 CEST	49798	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:23.570462942 CEST	49798	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:23.570472956 CEST	443	49798	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:23.737899065 CEST	443	49797	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:23.738456011 CEST	49797	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:23.738491058 CEST	443	49797	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:23.739588976 CEST	443	49797	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:23.740852118 CEST	49797	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:23.741030931 CEST	443	49797	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:23.741514921 CEST	49797	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:23.784157038 CEST	443	49797	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:23.907186031 CEST	443	49798	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:23.907505989 CEST	49798	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:23.907520056 CEST	443	49798	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:23.908145905 CEST	443	49798	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:23.909316063 CEST	49798	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:23.909403086 CEST	443	49798	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:23.909629107 CEST	49798	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:23.956115007 CEST	443	49798	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:24.176064014 CEST	443	49797	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:24.177290916 CEST	443	49797	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:24.177458048 CEST	49797	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:24.184470892 CEST	49797	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:24.184510946 CEST	443	49797	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:24.235868931 CEST	443	49798	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:24.236260891 CEST	443	49798	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:24.236315966 CEST	49798	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:24.236504078 CEST	49798	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:24.236517906 CEST	443	49798	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:26.850411892 CEST	49799	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:26.850436926 CEST	443	49799	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:26.850641012 CEST	49799	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:26.851771116 CEST	49800	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:26.851860046 CEST	443	49800	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:26.852082014 CEST	49800	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:26.868923903 CEST	49800	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:26.868959904 CEST	443	49800	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:26.869718075 CEST	49799	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:26.869735003 CEST	443	49799	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:27.131958961 CEST	443	49800	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:27.136621952 CEST	443	49799	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:27.168092012 CEST	49799	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:27.168111086 CEST	443	49799	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:27.168694973 CEST	49800	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:27.168757915 CEST	443	49800	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:27.169384003 CEST	443	49800	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:27.169466972 CEST	443	49799	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:27.170253038 CEST	49800	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:27.170347929 CEST	443	49800	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:27.176548958 CEST	49799	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:27.176745892 CEST	443	49799	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:27.177623034 CEST	49800	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:27.178247929 CEST	49799	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:27.179142952 CEST	49799	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:27.179147959 CEST	443	49799	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:27.220119953 CEST	443	49800	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:27.433294058 CEST	443	49799	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:27.433464050 CEST	443	49799	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:27.433542013 CEST	49799	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:27.789849997 CEST	443	49800	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:27.789911032 CEST	443	49800	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:27.789956093 CEST	443	49800	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:27.789972067 CEST	49800	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:27.790024996 CEST	443	49800	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:27.790077925 CEST	443	49800	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:27.790122986 CEST	49800	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:27.790139914 CEST	443	49800	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:27.790188074 CEST	49800	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:27.790199041 CEST	443	49800	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:27.790218115 CEST	443	49800	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:27.793612957 CEST	49800	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:28.921864033 CEST	49799	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:28.921885014 CEST	443	49799	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:28.949889898 CEST	49800	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:28.949959993 CEST	443	49800	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:29.078713894 CEST	49801	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:29.078754902 CEST	443	49801	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:29.078803062 CEST	49801	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:29.079077005 CEST	49801	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:29.079088926 CEST	443	49801	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:29.345686913 CEST	443	49801	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:29.388199091 CEST	49801	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:29.388217926 CEST	443	49801	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:29.389491081 CEST	443	49801	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:29.427948952 CEST	49801	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:29.428210974 CEST	49801	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:29.428215981 CEST	443	49801	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:29.472148895 CEST	443	49801	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:29.482430935 CEST	49801	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:29.648840904 CEST	443	49801	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:29.648989916 CEST	443	49801	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:29.649044991 CEST	49801	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:29.649063110 CEST	443	49801	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:29.649220943 CEST	443	49801	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:29.649271965 CEST	49801	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:30.050348043 CEST	49804	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:30.050384045 CEST	443	49804	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:30.050436974 CEST	49804	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:30.051101923 CEST	49804	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:30.051115990 CEST	443	49804	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:30.061549902 CEST	49801	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:30.061561108 CEST	443	49801	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:30.132014036 CEST	49806	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:30.132122993 CEST	443	49806	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:30.132210016 CEST	49806	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:30.133302927 CEST	49806	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:30.133336067 CEST	443	49806	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:30.540215015 CEST	443	49806	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:30.540442944 CEST	49806	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:30.540465117 CEST	443	49806	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:30.541651964 CEST	443	49806	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:30.542062998 CEST	49806	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:30.542191029 CEST	49806	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:30.542196035 CEST	443	49806	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:30.542246103 CEST	443	49806	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:30.674285889 CEST	49806	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:30.765666008 CEST	49808	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:30.765731096 CEST	443	49808	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:30.765887976 CEST	49808	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:30.766158104 CEST	49808	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:30.766187906 CEST	443	49808	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:30.777282000 CEST	49809	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:30.777306080 CEST	443	49809	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:30.777465105 CEST	49809	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:30.778847933 CEST	49809	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:30.778862000 CEST	443	49809	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:30.780934095 CEST	49810	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:30.780962944 CEST	443	49810	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:30.781064987 CEST	49810	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:30.781595945 CEST	49810	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:30.781611919 CEST	443	49810	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:30.791136980 CEST	49811	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:30.791212082 CEST	443	49811	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:30.791286945 CEST	49811	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:30.791657925 CEST	49811	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:30.791690111 CEST	443	49811	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:30.904890060 CEST	443	49806	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:30.905018091 CEST	443	49806	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:30.905261040 CEST	49806	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:30.905286074 CEST	443	49806	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:30.905363083 CEST	443	49806	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:30.905417919 CEST	49806	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:30.908117056 CEST	49806	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:30.908140898 CEST	443	49806	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:30.915144920 CEST	49813	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:30.915158987 CEST	443	49813	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:30.915222883 CEST	49813	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:30.915653944 CEST	49813	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:30.915668011 CEST	443	49813	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:31.037203074 CEST	443	49810	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:31.037797928 CEST	49810	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:31.037820101 CEST	443	49810	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:31.038292885 CEST	443	49810	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:31.038949013 CEST	49810	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:31.039038897 CEST	443	49810	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:31.039171934 CEST	49810	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:31.039930105 CEST	443	49809	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:31.040323973 CEST	49809	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:31.040335894 CEST	443	49809	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:31.041434050 CEST	443	49809	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:31.041908026 CEST	49809	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:31.042110920 CEST	443	49809	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:31.042129993 CEST	49809	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:31.049031973 CEST	443	49811	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:31.049226046 CEST	49811	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:31.049269915 CEST	443	49811	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:31.049596071 CEST	443	49811	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:31.050471067 CEST	49811	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:31.050539970 CEST	443	49811	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:31.050703049 CEST	49811	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:31.084120989 CEST	443	49810	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:31.084136963 CEST	443	49809	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:31.092118979 CEST	443	49811	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:31.107058048 CEST	443	49808	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:31.107584000 CEST	49808	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:31.107623100 CEST	443	49808	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:31.108155012 CEST	443	49808	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:31.108683109 CEST	49808	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:31.108768940 CEST	443	49808	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:31.109338045 CEST	49808	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:31.156116009 CEST	443	49808	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:31.171996117 CEST	49810	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:31.172113895 CEST	49809	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:31.210608006 CEST	49811	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:31.245214939 CEST	443	49813	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:31.245599985 CEST	49813	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:31.245609999 CEST	443	49813	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:31.245925903 CEST	443	49813	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:31.247787952 CEST	49813	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:31.247849941 CEST	443	49813	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:31.249001026 CEST	49813	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:31.289537907 CEST	443	49810	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:31.289614916 CEST	443	49810	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:31.289675951 CEST	49810	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:31.292157888 CEST	443	49813	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:31.297554970 CEST	49810	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:31.297565937 CEST	443	49810	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:31.318679094 CEST	49814	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:31.318691969 CEST	443	49814	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:31.318845034 CEST	49814	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:31.319305897 CEST	49814	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:31.319318056 CEST	443	49814	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:31.326082945 CEST	443	49809	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:31.326215029 CEST	443	49809	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:31.326292992 CEST	49809	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:31.326302052 CEST	443	49809	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:31.326469898 CEST	443	49809	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:31.326569080 CEST	49809	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:31.326576948 CEST	443	49809	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:31.326689005 CEST	443	49809	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:31.327434063 CEST	49809	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:31.328561068 CEST	49809	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:31.328568935 CEST	443	49809	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:31.328597069 CEST	49809	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:31.328622103 CEST	49809	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:31.334968090 CEST	49815	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:31.334985018 CEST	443	49815	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:31.335665941 CEST	49815	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:31.335961103 CEST	49815	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:31.335973978 CEST	443	49815	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:31.350832939 CEST	443	49811	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:31.350877047 CEST	443	49811	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:31.350927114 CEST	49811	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:31.350970030 CEST	443	49811	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:31.350996017 CEST	443	49811	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:31.351036072 CEST	49811	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:31.367486000 CEST	49811	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:31.367542982 CEST	443	49811	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:31.436065912 CEST	443	49808	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:31.436269999 CEST	443	49808	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:31.436347961 CEST	49808	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:31.436950922 CEST	49808	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:31.436978102 CEST	443	49808	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:31.471812963 CEST	443	49804	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:31.472048998 CEST	49804	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:31.472086906 CEST	443	49804	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:31.472424030 CEST	443	49804	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:31.474256039 CEST	49804	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:31.474323988 CEST	443	49804	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:31.474476099 CEST	49804	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:31.516143084 CEST	443	49804	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:31.591459036 CEST	443	49813	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:31.591536045 CEST	443	49813	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:31.591631889 CEST	49813	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:31.664427996 CEST	49804	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:31.674624920 CEST	443	49814	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:31.679634094 CEST	49813	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:31.679645061 CEST	443	49813	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:31.680984020 CEST	49814	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:31.680991888 CEST	443	49814	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:31.681634903 CEST	443	49814	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:31.682360888 CEST	49814	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:31.682451963 CEST	443	49814	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:31.683135033 CEST	49814	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:31.689564943 CEST	443	49815	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:31.690231085 CEST	49815	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:31.690238953 CEST	443	49815	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:31.691375017 CEST	443	49815	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:31.691776037 CEST	49815	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:31.691953897 CEST	443	49815	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:31.692230940 CEST	49815	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:31.724117994 CEST	443	49814	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:31.740113974 CEST	443	49815	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:31.845546961 CEST	443	49804	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:31.846848965 CEST	443	49804	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:31.850192070 CEST	49804	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:32.022635937 CEST	443	49814	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:32.022802114 CEST	443	49814	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:32.022852898 CEST	49814	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:32.058984995 CEST	443	49815	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:32.059113979 CEST	443	49815	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:32.059164047 CEST	49815	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:32.059174061 CEST	443	49815	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:32.059339046 CEST	443	49815	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:32.059381008 CEST	49815	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:32.059386969 CEST	443	49815	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:32.059523106 CEST	443	49815	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:32.059573889 CEST	49815	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:33.823942900 CEST	49815	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:33.823967934 CEST	443	49815	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:33.878803968 CEST	49814	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:33.878808975 CEST	443	49814	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:33.880623102 CEST	49804	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:33.880695105 CEST	443	49804	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:34.358112097 CEST	49816	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:34.358144045 CEST	443	49816	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:34.358272076 CEST	49816	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:34.364073992 CEST	49816	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:34.364088058 CEST	443	49816	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:34.376022100 CEST	49817	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:34.376030922 CEST	443	49817	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:34.376095057 CEST	49817	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:34.376507044 CEST	49817	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:34.376519918 CEST	443	49817	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:34.625771046 CEST	443	49816	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:34.626283884 CEST	49816	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:34.626305103 CEST	443	49816	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:34.626774073 CEST	443	49816	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:34.627532005 CEST	49816	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:34.627608061 CEST	443	49816	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:34.627751112 CEST	49816	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:34.627811909 CEST	49816	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:34.627834082 CEST	443	49816	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:34.703471899 CEST	443	49817	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:34.716716051 CEST	49817	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:34.716727018 CEST	443	49817	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:34.717057943 CEST	443	49817	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:34.723556995 CEST	49817	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:34.723622084 CEST	443	49817	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:34.723995924 CEST	49817	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:34.768116951 CEST	443	49817	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:34.878509045 CEST	443	49816	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:34.878582001 CEST	443	49816	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:34.878689051 CEST	49816	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:34.879224062 CEST	49816	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:34.879234076 CEST	443	49816	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:35.039387941 CEST	443	49817	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:35.039478064 CEST	443	49817	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:35.039586067 CEST	49817	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:35.040903091 CEST	49817	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:35.040909052 CEST	443	49817	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:35.661703110 CEST	49818	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:35.661791086 CEST	443	49818	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:35.661883116 CEST	49818	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:35.662098885 CEST	49818	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:35.662148952 CEST	443	49818	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:35.991740942 CEST	443	49818	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:36.061871052 CEST	49818	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:38.339309931 CEST	49818	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:38.339410067 CEST	443	49818	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:38.339955091 CEST	443	49818	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:38.341054916 CEST	49818	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:38.341146946 CEST	443	49818	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:38.341226101 CEST	49818	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:38.384157896 CEST	443	49818	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:38.531230927 CEST	49819	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:38.531260014 CEST	443	49819	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:38.531318903 CEST	49819	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:38.531629086 CEST	49820	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:38.531662941 CEST	443	49820	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:38.531706095 CEST	49820	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:38.533075094 CEST	49820	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:38.533087969 CEST	443	49820	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:38.533242941 CEST	49819	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:38.533257961 CEST	443	49819	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:38.665747881 CEST	443	49818	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:38.665828943 CEST	443	49818	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:38.665889025 CEST	49818	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:38.793095112 CEST	443	49819	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:38.794442892 CEST	443	49820	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:38.854562998 CEST	49820	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:38.854577065 CEST	443	49820	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:38.854849100 CEST	49819	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:38.854873896 CEST	443	49819	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:38.855328083 CEST	443	49819	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:38.855345964 CEST	443	49820	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:38.855472088 CEST	49818	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:38.855525970 CEST	443	49818	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:38.856801987 CEST	49819	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:38.856869936 CEST	443	49819	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:38.857461929 CEST	49820	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:38.857561111 CEST	443	49820	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:38.857702017 CEST	49819	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:38.869453907 CEST	49820	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:38.869611979 CEST	49820	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:38.869621992 CEST	443	49820	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:38.900120020 CEST	443	49819	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:39.087245941 CEST	443	49820	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:39.087321997 CEST	443	49820	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:39.087373018 CEST	49820	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:39.087928057 CEST	49820	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:39.087943077 CEST	443	49820	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:39.182873011 CEST	443	49819	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:39.182909012 CEST	443	49819	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:39.182960987 CEST	49819	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:39.182987928 CEST	443	49819	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:39.183193922 CEST	443	49819	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:39.183267117 CEST	49819	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:39.183274984 CEST	443	49819	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:39.183290005 CEST	443	49819	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:39.183326960 CEST	49819	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:39.183372021 CEST	443	49819	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:39.183454037 CEST	443	49819	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:39.183505058 CEST	49819	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:39.183990002 CEST	49819	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:39.184005022 CEST	443	49819	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:39.393563032 CEST	49822	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:39.393610001 CEST	443	49822	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:39.393908024 CEST	49822	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:39.394346952 CEST	49823	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:39.394393921 CEST	443	49823	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:39.394459009 CEST	49823	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:39.394735098 CEST	49822	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:39.394758940 CEST	443	49822	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:39.394952059 CEST	49823	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:39.394970894 CEST	443	49823	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:39.401865959 CEST	49824	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:39.401906013 CEST	443	49824	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:39.401989937 CEST	49824	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:39.402215958 CEST	49824	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:39.402225971 CEST	443	49824	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:39.402734995 CEST	49825	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:39.402757883 CEST	443	49825	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:39.403558016 CEST	49825	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:39.404053926 CEST	49825	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:39.404064894 CEST	443	49825	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:39.447362900 CEST	49827	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:39.447401047 CEST	443	49827	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:39.447526932 CEST	49827	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:39.449136972 CEST	49827	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:39.449151039 CEST	443	49827	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:39.658940077 CEST	443	49825	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:39.659220934 CEST	443	49824	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:39.659348011 CEST	49825	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:39.659356117 CEST	443	49825	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:39.659528971 CEST	49824	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:39.659575939 CEST	443	49824	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:39.659715891 CEST	443	49825	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:39.659950018 CEST	443	49824	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:39.660305023 CEST	49825	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:39.660356045 CEST	443	49825	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:39.660756111 CEST	49824	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:39.660835028 CEST	443	49824	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:39.660964012 CEST	49825	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:39.661073923 CEST	49824	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:39.704142094 CEST	443	49824	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:39.708122969 CEST	443	49825	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:39.725771904 CEST	443	49822	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:39.726280928 CEST	49822	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:39.726308107 CEST	443	49822	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:39.726630926 CEST	443	49822	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:39.727226019 CEST	49822	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:39.727288961 CEST	443	49822	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:39.727682114 CEST	49822	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:39.733644009 CEST	443	49823	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:39.734833956 CEST	49823	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:39.734853983 CEST	443	49823	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:39.735311031 CEST	443	49823	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:39.736366987 CEST	49823	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:39.736443996 CEST	443	49823	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:39.736737967 CEST	49823	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:39.772124052 CEST	443	49822	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:39.780142069 CEST	443	49823	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:39.844841003 CEST	443	49827	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:39.846182108 CEST	49827	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:39.846201897 CEST	443	49827	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:39.846709967 CEST	443	49827	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:39.847536087 CEST	49827	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:39.847616911 CEST	443	49827	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:39.847882032 CEST	49827	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:39.888125896 CEST	443	49827	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:39.921777964 CEST	443	49825	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:39.921853065 CEST	443	49825	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:39.921904087 CEST	49825	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:39.923075914 CEST	49825	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:39.923089981 CEST	443	49825	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:39.930387020 CEST	49828	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:39.930428982 CEST	443	49828	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:39.930511951 CEST	49828	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:39.930866957 CEST	49828	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:39.930883884 CEST	443	49828	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:39.964596987 CEST	443	49824	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:39.964654922 CEST	443	49824	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:39.964757919 CEST	443	49824	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:39.964828014 CEST	49824	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:39.964844942 CEST	443	49824	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:39.964900970 CEST	49824	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:39.972454071 CEST	49824	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:39.972490072 CEST	443	49824	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:39.980999947 CEST	49829	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:39.981015921 CEST	443	49829	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:39.981128931 CEST	49829	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:39.981734037 CEST	49829	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:39.981744051 CEST	443	49829	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:40.069502115 CEST	443	49822	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:40.069561005 CEST	443	49822	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:40.069663048 CEST	49822	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:40.069696903 CEST	443	49822	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:40.069925070 CEST	443	49822	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:40.070039034 CEST	49822	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:40.072674036 CEST	49822	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:40.072691917 CEST	443	49822	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:40.080622911 CEST	443	49823	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:40.081769943 CEST	443	49823	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:40.081873894 CEST	49823	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:40.085639000 CEST	49830	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:40.085674047 CEST	443	49830	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:40.085844994 CEST	49830	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:40.206895113 CEST	443	49827	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:40.207165003 CEST	443	49827	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:40.207252979 CEST	49827	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:40.212358952 CEST	49830	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:40.212373018 CEST	443	49830	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:40.212965012 CEST	49823	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:40.212990999 CEST	443	49823	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:40.213530064 CEST	49827	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:40.213548899 CEST	443	49827	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:40.277806997 CEST	443	49828	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:40.278449059 CEST	49828	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:40.278471947 CEST	443	49828	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:40.278793097 CEST	443	49828	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:40.279192924 CEST	49828	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:40.279262066 CEST	443	49828	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:40.279650927 CEST	49828	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:40.320115089 CEST	443	49828	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:40.328823090 CEST	443	49829	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:40.350584030 CEST	49829	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:40.350605011 CEST	443	49829	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:40.350990057 CEST	443	49829	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:40.351699114 CEST	49829	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:40.351766109 CEST	443	49829	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:40.352185011 CEST	49829	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:40.400156975 CEST	443	49829	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:40.540688992 CEST	443	49830	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:40.541718006 CEST	49830	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:40.541744947 CEST	443	49830	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:40.542083025 CEST	443	49830	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:40.543461084 CEST	49830	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:40.543530941 CEST	443	49830	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:40.543872118 CEST	49830	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:40.584158897 CEST	443	49830	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:40.621009111 CEST	443	49828	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:40.621133089 CEST	443	49828	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:40.621217966 CEST	49828	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:40.689944983 CEST	49828	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:40.690009117 CEST	443	49828	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:40.700608969 CEST	443	49829	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:40.700678110 CEST	443	49829	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:40.700803995 CEST	443	49829	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:40.700834990 CEST	49829	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:40.700853109 CEST	443	49829	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:40.700921059 CEST	443	49829	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:40.700978041 CEST	49829	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:40.701003075 CEST	49829	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:40.702104092 CEST	49829	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:40.702120066 CEST	443	49829	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:40.875844002 CEST	443	49830	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:40.876122952 CEST	443	49830	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:40.878079891 CEST	49830	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:40.958029985 CEST	49830	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:40.958070993 CEST	443	49830	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:41.089912891 CEST	49831	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:41.089958906 CEST	443	49831	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:41.090046883 CEST	49831	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:41.090318918 CEST	49831	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:41.090337038 CEST	443	49831	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:41.475191116 CEST	443	49831	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:41.583425045 CEST	49831	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:42.948147058 CEST	49831	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:42.948179007 CEST	443	49831	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:42.948874950 CEST	443	49831	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:42.950526953 CEST	49831	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:42.950612068 CEST	443	49831	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:42.951376915 CEST	49831	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:42.989151001 CEST	49832	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:42.989203930 CEST	443	49832	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:42.989262104 CEST	49832	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:42.989927053 CEST	49832	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:42.989943027 CEST	443	49832	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:42.996117115 CEST	443	49831	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:43.253052950 CEST	443	49832	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:43.258100033 CEST	49832	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:43.258116007 CEST	443	49832	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:43.258647919 CEST	443	49832	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:43.259222984 CEST	49832	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:43.259295940 CEST	443	49832	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:43.259473085 CEST	49832	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:43.259566069 CEST	49832	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:43.259586096 CEST	443	49832	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:43.359209061 CEST	443	49831	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:43.359333992 CEST	443	49831	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:43.359388113 CEST	49831	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:43.512386084 CEST	443	49832	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:43.512473106 CEST	443	49832	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:43.512531042 CEST	49832	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:43.536559105 CEST	49832	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:43.536590099 CEST	443	49832	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:43.707578897 CEST	49831	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:43.707608938 CEST	443	49831	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:44.453949928 CEST	49834	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:44.453989983 CEST	443	49834	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:44.454094887 CEST	49834	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:44.454581022 CEST	49834	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:44.454592943 CEST	443	49834	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:44.843023062 CEST	443	49834	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:44.843384027 CEST	49834	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:44.843399048 CEST	443	49834	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:44.843903065 CEST	443	49834	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:44.844508886 CEST	49834	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:44.844588995 CEST	443	49834	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:44.844835997 CEST	49834	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:44.888153076 CEST	443	49834	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:45.204705954 CEST	443	49834	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:45.204796076 CEST	443	49834	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:45.205194950 CEST	49834	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:45.205219030 CEST	443	49834	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:45.205245972 CEST	49834	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:45.205245972 CEST	49834	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:45.205468893 CEST	49834	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:47.737035036 CEST	49835	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:47.737092972 CEST	443	49835	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:47.737166882 CEST	49835	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:47.737268925 CEST	49836	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:47.737320900 CEST	443	49836	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:47.737363100 CEST	49836	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:47.863574982 CEST	49836	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:47.863621950 CEST	443	49836	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:47.863776922 CEST	49835	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:47.863817930 CEST	443	49835	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:48.125628948 CEST	443	49835	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:48.126797915 CEST	443	49836	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:48.173031092 CEST	49836	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:48.173656940 CEST	49835	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:48.262221098 CEST	49836	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:48.262243032 CEST	443	49836	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:48.262414932 CEST	49835	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:48.262482882 CEST	443	49835	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:48.262711048 CEST	443	49836	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:48.263214111 CEST	49836	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:48.263286114 CEST	443	49836	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:48.263425112 CEST	49836	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:48.263927937 CEST	443	49835	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:48.265630960 CEST	49835	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:48.265816927 CEST	443	49835	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:48.290621042 CEST	49835	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:48.290998936 CEST	49835	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:48.291013956 CEST	443	49835	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:48.308111906 CEST	443	49836	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:48.423805952 CEST	443	49835	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:48.423878908 CEST	443	49835	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:48.423938036 CEST	49835	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:48.424714088 CEST	49835	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:48.424752951 CEST	443	49835	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:48.634955883 CEST	443	49836	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:48.635001898 CEST	443	49836	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:48.635023117 CEST	443	49836	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:48.635040045 CEST	49836	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:48.635062933 CEST	443	49836	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:48.635098934 CEST	49836	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:48.635246038 CEST	443	49836	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:48.635345936 CEST	443	49836	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:48.635382891 CEST	49836	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:48.636459112 CEST	49836	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:48.636471987 CEST	443	49836	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:48.800267935 CEST	49838	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:48.800299883 CEST	443	49838	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:48.800350904 CEST	49838	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:48.801146984 CEST	49838	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:48.801156044 CEST	443	49838	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:48.896224976 CEST	49839	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:48.896269083 CEST	443	49839	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:48.896330118 CEST	49839	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:48.896826982 CEST	49839	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:48.896838903 CEST	443	49839	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:48.990758896 CEST	49840	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:48.990881920 CEST	443	49840	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:48.990967035 CEST	49840	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:48.991605997 CEST	49840	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:48.991641045 CEST	443	49840	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:48.992295027 CEST	49842	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:48.992352962 CEST	443	49842	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:48.992413998 CEST	49842	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:48.992696047 CEST	49842	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:48.992713928 CEST	443	49842	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:48.993225098 CEST	49843	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:48.993280888 CEST	443	49843	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:48.993340969 CEST	49843	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:48.993597984 CEST	49843	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:48.993617058 CEST	443	49843	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:49.129148960 CEST	443	49838	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:49.129395008 CEST	49838	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:49.129406929 CEST	443	49838	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:49.129785061 CEST	443	49838	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:49.130100012 CEST	49838	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:49.130167961 CEST	443	49838	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:49.130233049 CEST	49838	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:49.176120996 CEST	443	49838	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:49.228621960 CEST	443	49839	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:49.228894949 CEST	49839	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:49.228908062 CEST	443	49839	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:49.229422092 CEST	443	49839	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:49.229922056 CEST	49839	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:49.229998112 CEST	443	49839	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:49.230247021 CEST	49839	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:49.254501104 CEST	443	49843	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:49.254744053 CEST	49843	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:49.254776955 CEST	443	49843	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:49.254945040 CEST	443	49842	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:49.255217075 CEST	49842	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:49.255234003 CEST	443	49842	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:49.255985975 CEST	443	49843	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:49.256331921 CEST	49843	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:49.256443024 CEST	443	49843	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:49.256458044 CEST	49843	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:49.256489992 CEST	443	49842	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:49.256877899 CEST	49842	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:49.257019043 CEST	49842	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:49.257024050 CEST	443	49842	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:49.257045984 CEST	443	49842	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:49.276113033 CEST	443	49839	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:49.297286987 CEST	49842	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:49.297290087 CEST	49843	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:49.297302008 CEST	443	49843	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:49.379229069 CEST	443	49840	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:49.379476070 CEST	49840	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:49.379527092 CEST	443	49840	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:49.379874945 CEST	443	49840	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:49.380244017 CEST	49840	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:49.380346060 CEST	443	49840	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:49.380378962 CEST	49840	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:49.422512054 CEST	49840	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:49.422533035 CEST	443	49840	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:49.464164019 CEST	443	49838	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:49.464234114 CEST	443	49838	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:49.464284897 CEST	49838	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:49.464298010 CEST	443	49838	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:49.464982986 CEST	443	49838	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:49.465046883 CEST	49838	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:49.465167999 CEST	49838	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:49.465183973 CEST	443	49838	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:49.470454931 CEST	49844	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:49.470499992 CEST	443	49844	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:49.470558882 CEST	49844	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:49.470989943 CEST	49844	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:49.471005917 CEST	443	49844	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:49.505808115 CEST	443	49843	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:49.505983114 CEST	443	49843	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:49.506145000 CEST	49843	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:49.506325960 CEST	49843	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:49.506345987 CEST	443	49843	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:49.506360054 CEST	49843	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:49.506398916 CEST	49843	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:49.509510994 CEST	49845	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:49.509545088 CEST	443	49845	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:49.509629011 CEST	49845	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:49.509867907 CEST	49845	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:49.509881973 CEST	443	49845	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:49.542705059 CEST	443	49842	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:49.542789936 CEST	443	49842	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:49.542876959 CEST	49842	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:49.542882919 CEST	443	49842	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:49.542896986 CEST	443	49842	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:49.542947054 CEST	49842	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:49.542957067 CEST	443	49842	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:49.543076992 CEST	443	49842	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:49.543122053 CEST	49842	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:49.547080994 CEST	49842	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:49.547092915 CEST	443	49842	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:49.549652100 CEST	49846	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:49.549669027 CEST	443	49846	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:49.549783945 CEST	49846	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:49.550036907 CEST	49846	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:49.550048113 CEST	443	49846	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:49.557363987 CEST	443	49839	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:49.557552099 CEST	443	49839	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:49.557646036 CEST	49839	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:49.557646036 CEST	49839	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:49.557646036 CEST	49839	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:49.557661057 CEST	443	49839	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:49.557770967 CEST	49839	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:49.748246908 CEST	443	49840	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:49.748403072 CEST	443	49840	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:49.748486996 CEST	49840	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:49.749329090 CEST	49840	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:49.749362946 CEST	443	49840	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:49.806703091 CEST	443	49844	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:49.806948900 CEST	49844	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:49.806983948 CEST	443	49844	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:49.807461023 CEST	443	49844	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:49.807877064 CEST	49844	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:49.807960987 CEST	443	49844	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:49.808012009 CEST	49844	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:49.852124929 CEST	443	49844	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:49.860802889 CEST	443	49845	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:49.861042976 CEST	49845	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:49.861059904 CEST	443	49845	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:49.862159014 CEST	443	49845	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:49.862538099 CEST	49845	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:49.862700939 CEST	49845	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:49.862708092 CEST	443	49845	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:49.862817049 CEST	49844	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:49.904002905 CEST	443	49846	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:49.904227018 CEST	49846	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:49.904246092 CEST	443	49846	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:49.905417919 CEST	443	49846	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:49.905740023 CEST	49846	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:49.905894041 CEST	49846	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:49.905903101 CEST	443	49846	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:49.905914068 CEST	443	49846	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:49.908117056 CEST	443	49845	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:49.910130024 CEST	49845	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:49.956057072 CEST	49846	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:50.141675949 CEST	443	49844	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:50.142874002 CEST	443	49844	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:50.142944098 CEST	49844	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:50.143168926 CEST	49844	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:50.143184900 CEST	443	49844	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:50.148935080 CEST	49848	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:50.148958921 CEST	443	49848	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:50.149100065 CEST	49848	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:50.149859905 CEST	49849	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:50.149868011 CEST	443	49849	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:50.150013924 CEST	49849	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:50.150289059 CEST	49848	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:50.150289059 CEST	49849	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:50.150305986 CEST	443	49848	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:50.150320053 CEST	443	49849	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:50.204256058 CEST	443	49845	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:50.204351902 CEST	443	49845	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:50.204546928 CEST	49845	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:50.204895020 CEST	49845	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:50.204916000 CEST	443	49845	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:50.279777050 CEST	443	49846	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:50.279846907 CEST	443	49846	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:50.279934883 CEST	49846	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:50.279958963 CEST	443	49846	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:50.279975891 CEST	443	49846	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:50.280014992 CEST	49846	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:50.280019999 CEST	443	49846	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:50.280069113 CEST	443	49846	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:50.280152082 CEST	49846	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:50.281332016 CEST	49846	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:50.281343937 CEST	443	49846	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:50.408329964 CEST	443	49849	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:50.447319031 CEST	49849	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:50.447343111 CEST	443	49849	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:50.447973013 CEST	443	49849	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:50.498274088 CEST	49849	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:50.502871037 CEST	49849	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:50.503021955 CEST	443	49849	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:50.504512072 CEST	49849	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:50.504703999 CEST	49849	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:50.504734039 CEST	443	49849	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:50.542496920 CEST	443	49848	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:50.592806101 CEST	49848	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:50.698729992 CEST	443	49849	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:50.698811054 CEST	443	49849	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:50.698882103 CEST	49849	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:51.969541073 CEST	49848	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:51.969588995 CEST	443	49848	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:51.971067905 CEST	49849	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:51.971075058 CEST	443	49848	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:51.971091032 CEST	443	49849	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:51.973073006 CEST	49848	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:51.973272085 CEST	443	49848	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:51.974436045 CEST	49848	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:52.020121098 CEST	443	49848	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:52.413404942 CEST	443	49848	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:52.413515091 CEST	443	49848	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:52.413563967 CEST	49848	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:52.602969885 CEST	49848	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:52.603001118 CEST	443	49848	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:52.794435024 CEST	49850	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:52.794488907 CEST	443	49850	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:52.794555902 CEST	49850	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:52.794872999 CEST	49851	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:52.794900894 CEST	443	49851	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:52.794949055 CEST	49851	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:52.795064926 CEST	49850	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:52.795089006 CEST	443	49850	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:52.795432091 CEST	49851	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:52.795448065 CEST	443	49851	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:53.054687023 CEST	443	49850	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:53.055006981 CEST	49850	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:53.055042028 CEST	443	49850	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:53.055422068 CEST	443	49850	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:53.055737972 CEST	49850	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:53.055852890 CEST	443	49850	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:53.055968046 CEST	49850	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:53.057416916 CEST	443	49851	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:53.057605028 CEST	49851	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:53.057630062 CEST	443	49851	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:53.058099985 CEST	443	49851	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:53.058429003 CEST	49851	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:53.058511019 CEST	443	49851	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:53.058774948 CEST	49851	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:53.058832884 CEST	49851	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:53.058840990 CEST	443	49851	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:53.096122980 CEST	443	49850	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:53.310668945 CEST	443	49851	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:53.310758114 CEST	443	49851	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:53.310808897 CEST	49851	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:53.311954021 CEST	49851	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:53.311980963 CEST	443	49851	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:53.456937075 CEST	443	49850	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:53.456984997 CEST	443	49850	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:53.457022905 CEST	443	49850	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:53.457053900 CEST	443	49850	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:53.457078934 CEST	49850	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:53.457108021 CEST	443	49850	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:53.457123995 CEST	49850	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:53.457181931 CEST	443	49850	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:53.457324982 CEST	49850	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:53.458142996 CEST	49850	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:53.458158016 CEST	443	49850	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:53.591805935 CEST	49852	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:53.591844082 CEST	443	49852	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:53.591914892 CEST	49852	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:53.594245911 CEST	49852	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:53.594260931 CEST	443	49852	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:53.606240988 CEST	49853	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:53.606273890 CEST	443	49853	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:53.606340885 CEST	49853	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:53.606523991 CEST	49853	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:53.606539965 CEST	443	49853	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:53.634239912 CEST	49855	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:53.634268999 CEST	443	49855	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:53.634443045 CEST	49855	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:53.634495020 CEST	49855	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:53.634502888 CEST	443	49855	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:53.635080099 CEST	49856	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:53.635106087 CEST	443	49856	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:53.635446072 CEST	49856	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:53.635840893 CEST	49856	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:53.635854006 CEST	443	49856	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:53.665919065 CEST	49857	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:53.665932894 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:53.666008949 CEST	49857	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:53.666306019 CEST	49857	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:53.666317940 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:53.888309956 CEST	443	49855	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:53.888570070 CEST	49855	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:53.888633013 CEST	443	49855	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:53.889017105 CEST	443	49855	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:53.890681982 CEST	443	49856	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:53.890851974 CEST	49855	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:53.890939951 CEST	443	49855	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:53.891099930 CEST	49856	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:53.891122103 CEST	443	49856	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:53.891271114 CEST	49855	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:53.891494036 CEST	443	49856	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:53.891802073 CEST	49856	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:53.891859055 CEST	443	49856	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:53.891906977 CEST	49856	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:53.932141066 CEST	443	49855	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:53.932156086 CEST	443	49856	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:53.936388969 CEST	49856	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:53.997596025 CEST	443	49853	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:53.997905016 CEST	49853	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:53.997927904 CEST	443	49853	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:53.998389006 CEST	443	49853	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:53.999686003 CEST	49853	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:53.999767065 CEST	443	49853	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:53.999849081 CEST	49853	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:54.044115067 CEST	443	49853	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:54.072599888 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:54.072813988 CEST	49857	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:54.072838068 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:54.074125051 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:54.074776888 CEST	49857	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:54.074996948 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:54.075074911 CEST	49857	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:54.120127916 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:54.140405893 CEST	443	49855	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:54.140480995 CEST	443	49855	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:54.140543938 CEST	49855	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:54.141011000 CEST	49855	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:54.141057968 CEST	443	49855	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:54.144548893 CEST	49859	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:54.144598961 CEST	443	49859	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:54.144714117 CEST	49859	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:54.144927025 CEST	49859	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:54.144951105 CEST	443	49859	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:54.182715893 CEST	443	49856	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:54.182760954 CEST	443	49856	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:54.182830095 CEST	49856	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:54.182862043 CEST	443	49856	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:54.182888031 CEST	443	49856	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:54.182944059 CEST	49856	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:54.182961941 CEST	443	49856	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:54.182992935 CEST	443	49856	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:54.183039904 CEST	49856	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:54.183880091 CEST	49856	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:22:54.183902979 CEST	443	49856	157.240.14.35	192.168.2.4
Apr 26, 2024 20:22:54.186608076 CEST	49860	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:54.186652899 CEST	443	49860	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:54.186811924 CEST	49860	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:54.186985016 CEST	49860	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:54.187025070 CEST	443	49860	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:54.374779940 CEST	443	49853	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:54.374936104 CEST	443	49853	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:54.375322104 CEST	49853	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:54.375754118 CEST	49853	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:54.375792980 CEST	443	49853	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:54.431597948 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:54.431806087 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:54.431878090 CEST	49857	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:54.432085037 CEST	49857	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:54.432132959 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:54.491157055 CEST	443	49859	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:54.491482973 CEST	49859	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:54.491528988 CEST	443	49859	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:54.491944075 CEST	443	49859	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:54.492275000 CEST	49859	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:54.492353916 CEST	443	49859	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:54.492485046 CEST	49859	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:54.535557985 CEST	443	49860	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:54.535815954 CEST	49860	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:54.535828114 CEST	443	49860	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:54.536139965 CEST	443	49859	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:54.536180973 CEST	443	49860	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:54.536463976 CEST	49860	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:54.536520004 CEST	443	49860	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:54.536566973 CEST	49860	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:54.578557014 CEST	49860	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:54.578577995 CEST	443	49860	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:54.835161924 CEST	443	49859	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:54.835376978 CEST	443	49859	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:54.835433960 CEST	49859	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:54.883869886 CEST	49859	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:54.883900881 CEST	443	49859	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:54.883913040 CEST	49859	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:54.884061098 CEST	49859	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:54.891967058 CEST	49862	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:54.892009020 CEST	443	49862	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:54.892142057 CEST	49862	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:54.892714977 CEST	49862	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:54.892730951 CEST	443	49862	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:54.913207054 CEST	443	49860	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:54.913264990 CEST	443	49860	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:54.913357973 CEST	443	49860	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:54.913409948 CEST	49860	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:54.913445950 CEST	443	49860	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:54.913470030 CEST	443	49860	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:54.913500071 CEST	49860	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:54.913538933 CEST	49860	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:54.918020964 CEST	49860	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:22:54.918055058 CEST	443	49860	31.13.80.36	192.168.2.4
Apr 26, 2024 20:22:54.930252075 CEST	443	49852	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:54.986152887 CEST	49852	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:55.018311977 CEST	49852	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:55.018332958 CEST	443	49852	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:55.019503117 CEST	443	49852	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:55.020348072 CEST	49852	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:55.020493984 CEST	49852	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:55.020523071 CEST	443	49852	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:55.020545959 CEST	443	49852	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:55.067121983 CEST	49852	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:55.263922930 CEST	443	49852	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:55.263957977 CEST	443	49852	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:55.264022112 CEST	49852	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:55.264050007 CEST	443	49852	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:55.264794111 CEST	443	49852	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:55.264859915 CEST	49852	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:55.281425953 CEST	443	49862	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:55.331649065 CEST	49862	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:57.393913984 CEST	49862	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:57.393934965 CEST	443	49862	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:57.394598961 CEST	443	49862	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:57.396162033 CEST	49862	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:57.396236897 CEST	443	49862	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:57.397914886 CEST	49862	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:57.440152884 CEST	443	49862	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:57.731873035 CEST	49852	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:22:57.731923103 CEST	443	49852	142.250.189.130	192.168.2.4
Apr 26, 2024 20:22:57.737703085 CEST	49863	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:57.737730026 CEST	443	49863	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:57.737799883 CEST	49863	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:57.737987995 CEST	49863	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:57.738003016 CEST	443	49863	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:57.754678011 CEST	443	49862	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:57.755634069 CEST	443	49862	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:57.755686045 CEST	49862	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:57.763081074 CEST	49862	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:57.763098001 CEST	443	49862	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:58.072431087 CEST	443	49863	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:58.089380026 CEST	49863	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:58.089422941 CEST	443	49863	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:58.090706110 CEST	443	49863	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:58.091182947 CEST	49863	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:58.091377974 CEST	443	49863	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:58.091514111 CEST	49863	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:58.136148930 CEST	443	49863	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:58.409167051 CEST	443	49863	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:58.409441948 CEST	443	49863	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:58.409509897 CEST	49863	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:58.409934998 CEST	49863	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:22:58.409966946 CEST	443	49863	142.251.35.228	192.168.2.4
Apr 26, 2024 20:22:58.418725967 CEST	49867	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:58.418751001 CEST	443	49867	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:58.418904066 CEST	49867	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:58.419358015 CEST	49867	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:58.419370890 CEST	443	49867	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:58.419853926 CEST	49868	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:58.419931889 CEST	443	49868	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:58.420013905 CEST	49868	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:58.420195103 CEST	49868	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:58.420229912 CEST	443	49868	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:58.679080963 CEST	49869	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:58.679157972 CEST	443	49869	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:58.679290056 CEST	49869	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:58.679526091 CEST	49869	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:58.679557085 CEST	443	49869	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:58.684767008 CEST	443	49867	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:58.685018063 CEST	49867	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:58.685029030 CEST	443	49867	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:58.686219931 CEST	443	49867	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:58.686544895 CEST	49867	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:58.686625004 CEST	443	49867	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:58.686825037 CEST	49867	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:58.686901093 CEST	49867	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:58.686913967 CEST	443	49867	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:58.811338902 CEST	443	49868	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:58.811564922 CEST	49868	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:58.811606884 CEST	443	49868	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:58.811996937 CEST	443	49868	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:58.812402964 CEST	49868	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:58.812474012 CEST	443	49868	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:58.812542915 CEST	49868	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:58.860114098 CEST	443	49868	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:58.939471960 CEST	443	49867	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:58.939623117 CEST	443	49867	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:58.939692020 CEST	49867	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:58.939845085 CEST	49867	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:58.939845085 CEST	49867	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:58.939860106 CEST	443	49867	104.26.1.66	192.168.2.4
Apr 26, 2024 20:22:58.939941883 CEST	49867	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:22:59.008830070 CEST	443	49869	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:59.009037971 CEST	49869	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:59.009064913 CEST	443	49869	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:59.009464979 CEST	443	49869	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:59.009902000 CEST	49869	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:59.009964943 CEST	443	49869	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:59.010044098 CEST	49869	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:59.052124023 CEST	443	49869	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:59.204538107 CEST	443	49868	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:59.204606056 CEST	443	49868	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:59.205727100 CEST	49868	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:59.208470106 CEST	49868	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:22:59.208499908 CEST	443	49868	142.250.217.196	192.168.2.4
Apr 26, 2024 20:22:59.337517023 CEST	443	49869	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:59.337709904 CEST	443	49869	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:59.341710091 CEST	49869	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:59.341746092 CEST	443	49869	172.217.165.206	192.168.2.4
Apr 26, 2024 20:22:59.341764927 CEST	49869	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:22:59.341881990 CEST	49869	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:01.743057966 CEST	49870	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:01.743108034 CEST	443	49870	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:01.743168116 CEST	49870	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:01.743495941 CEST	49871	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:01.743544102 CEST	443	49871	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:01.743613958 CEST	49871	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:01.744762897 CEST	49871	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:01.744785070 CEST	443	49871	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:01.744930029 CEST	49870	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:01.744949102 CEST	443	49870	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:02.009763002 CEST	443	49870	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:02.010186911 CEST	49870	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:02.010207891 CEST	443	49870	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:02.011415005 CEST	443	49870	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:02.011760950 CEST	49870	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:02.011814117 CEST	443	49871	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:02.011917114 CEST	49870	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:02.011923075 CEST	443	49870	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:02.011935949 CEST	443	49870	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:02.012072086 CEST	49871	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:02.012092113 CEST	443	49871	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:02.013228893 CEST	443	49871	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:02.013653040 CEST	49871	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:02.013824940 CEST	443	49871	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:02.013981104 CEST	49871	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:02.014090061 CEST	49871	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:02.014095068 CEST	443	49871	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:02.063893080 CEST	49870	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:02.266031981 CEST	443	49871	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:02.266278982 CEST	443	49871	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:02.266396999 CEST	49871	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:02.267024040 CEST	49871	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:02.267040014 CEST	443	49871	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:02.269085884 CEST	49872	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:23:02.269177914 CEST	443	49872	142.250.217.228	192.168.2.4
Apr 26, 2024 20:23:02.269268990 CEST	49872	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:23:02.269563913 CEST	49872	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:23:02.269601107 CEST	443	49872	142.250.217.228	192.168.2.4
Apr 26, 2024 20:23:02.395452023 CEST	443	49870	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:02.395581961 CEST	443	49870	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:02.395637989 CEST	49870	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:02.395663023 CEST	443	49870	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:02.395752907 CEST	443	49870	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:02.395816088 CEST	49870	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:02.395823956 CEST	443	49870	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:02.396089077 CEST	443	49870	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:02.396145105 CEST	49870	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:02.396855116 CEST	49870	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:02.396871090 CEST	443	49870	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:02.557991982 CEST	49874	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:02.558027029 CEST	443	49874	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:02.558233023 CEST	49874	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:02.559130907 CEST	49874	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:02.559144020 CEST	443	49874	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:02.569420099 CEST	49875	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:02.569508076 CEST	443	49875	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:02.569974899 CEST	49875	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:02.570166111 CEST	49875	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:02.570200920 CEST	443	49875	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:02.606609106 CEST	443	49872	142.250.217.228	192.168.2.4
Apr 26, 2024 20:23:02.607125044 CEST	49872	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:23:02.607145071 CEST	443	49872	142.250.217.228	192.168.2.4
Apr 26, 2024 20:23:02.608047962 CEST	443	49872	142.250.217.228	192.168.2.4
Apr 26, 2024 20:23:02.611037016 CEST	49872	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:23:02.611128092 CEST	443	49872	142.250.217.228	192.168.2.4
Apr 26, 2024 20:23:02.611759901 CEST	49877	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:02.611783981 CEST	443	49877	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:02.611850023 CEST	49877	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:02.612272978 CEST	49877	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:02.612287998 CEST	443	49877	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:02.621167898 CEST	49878	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:02.621210098 CEST	443	49878	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:02.621273041 CEST	49878	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:02.621516943 CEST	49878	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:02.621545076 CEST	443	49878	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:02.623220921 CEST	49879	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:02.623239994 CEST	443	49879	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:02.623564959 CEST	49879	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:02.623729944 CEST	49879	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:02.623740911 CEST	443	49879	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:02.652585983 CEST	49872	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:23:02.881561041 CEST	443	49878	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:02.881803989 CEST	49878	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:02.881855965 CEST	443	49878	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:02.882332087 CEST	443	49879	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:02.882349014 CEST	443	49878	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:02.882668972 CEST	49878	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:02.882756948 CEST	443	49878	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:02.882795095 CEST	49879	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:02.882806063 CEST	443	49879	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:02.882926941 CEST	49878	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:02.883138895 CEST	443	49879	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:02.883419037 CEST	49879	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:02.883475065 CEST	443	49879	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:02.883512020 CEST	49879	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:02.902151108 CEST	443	49875	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:02.902355909 CEST	49875	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:02.902368069 CEST	443	49875	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:02.902848959 CEST	443	49875	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:02.903141975 CEST	49875	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:02.903239012 CEST	443	49875	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:02.903253078 CEST	49875	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:02.924118042 CEST	443	49879	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:02.924118996 CEST	443	49878	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:02.936808109 CEST	49879	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:02.948116064 CEST	443	49875	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:02.951723099 CEST	443	49874	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:02.951915979 CEST	49874	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:02.951929092 CEST	443	49874	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:02.952392101 CEST	443	49874	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:02.952522993 CEST	49875	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:02.952893972 CEST	49874	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:02.952970028 CEST	443	49874	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:02.953027010 CEST	49874	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:02.996114969 CEST	443	49874	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:02.997982979 CEST	49874	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:03.012851000 CEST	443	49877	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:03.013084888 CEST	49877	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:03.013132095 CEST	443	49877	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:03.014420986 CEST	443	49877	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:03.014786959 CEST	49877	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:03.014974117 CEST	443	49877	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:03.014982939 CEST	49877	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:03.056144953 CEST	443	49877	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:03.060492992 CEST	49877	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:03.135485888 CEST	443	49878	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:03.135649920 CEST	443	49878	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:03.135792017 CEST	49878	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:03.136297941 CEST	49878	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:03.136334896 CEST	443	49878	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:03.136359930 CEST	49878	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:03.136382103 CEST	49878	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:03.141155958 CEST	49880	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:03.141201019 CEST	443	49880	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:03.141290903 CEST	49880	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:03.141489029 CEST	49880	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:03.141511917 CEST	443	49880	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:03.179454088 CEST	443	49879	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:03.179668903 CEST	443	49879	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:03.179745913 CEST	49879	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:03.179755926 CEST	443	49879	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:03.179841042 CEST	443	49879	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:03.179888964 CEST	49879	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:03.179893970 CEST	443	49879	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:03.179946899 CEST	443	49879	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:03.179989100 CEST	49879	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:03.180720091 CEST	49879	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:03.180732965 CEST	443	49879	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:03.183728933 CEST	49881	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:03.183746099 CEST	443	49881	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:03.183795929 CEST	49881	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:03.183990002 CEST	49881	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:03.184000969 CEST	443	49881	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:03.319482088 CEST	443	49874	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:03.319526911 CEST	443	49874	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:03.319576025 CEST	49874	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:03.319585085 CEST	443	49874	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:03.319652081 CEST	443	49874	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:03.319899082 CEST	49874	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:03.320194006 CEST	49874	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:03.320204020 CEST	443	49874	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:03.324357033 CEST	49883	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:03.324383974 CEST	443	49883	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:03.324513912 CEST	49883	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:03.324738026 CEST	49883	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:03.324745893 CEST	443	49883	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:03.372766972 CEST	443	49877	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:03.372986078 CEST	443	49877	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:03.373063087 CEST	49877	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:03.373112917 CEST	443	49877	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:03.373152018 CEST	49877	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:03.373179913 CEST	49877	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:03.494793892 CEST	443	49880	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:03.495192051 CEST	49880	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:03.495244026 CEST	443	49880	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:03.496440887 CEST	443	49880	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:03.496823072 CEST	49880	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:03.496975899 CEST	49880	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:03.497004032 CEST	443	49880	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:03.497020960 CEST	443	49880	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:03.531825066 CEST	443	49881	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:03.532027960 CEST	49881	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:03.532042980 CEST	443	49881	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:03.532536030 CEST	443	49881	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:03.532850981 CEST	49881	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:03.532929897 CEST	443	49881	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:03.532952070 CEST	49881	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:03.550600052 CEST	49880	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:03.576147079 CEST	443	49881	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:03.580889940 CEST	49881	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:03.657397032 CEST	443	49883	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:03.657619953 CEST	49883	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:03.657636881 CEST	443	49883	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:03.658073902 CEST	443	49883	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:03.658370018 CEST	49883	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:03.658437967 CEST	443	49883	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:03.658468962 CEST	49883	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:03.700139999 CEST	443	49883	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:03.705910921 CEST	49883	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:03.715368986 CEST	443	49875	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:03.715564966 CEST	443	49875	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:03.715630054 CEST	49875	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:03.716706991 CEST	49875	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:03.716743946 CEST	443	49875	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:03.841090918 CEST	443	49880	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:03.841294050 CEST	443	49880	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:03.841372013 CEST	49880	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:03.842036009 CEST	49880	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:03.842077971 CEST	443	49880	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:03.842118979 CEST	49880	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:03.842144012 CEST	49880	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:03.913541079 CEST	443	49881	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:03.913606882 CEST	443	49881	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:03.913747072 CEST	443	49881	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:03.913846970 CEST	443	49881	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:03.913850069 CEST	49881	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:03.913933039 CEST	49881	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:03.989696026 CEST	443	49883	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:03.989964962 CEST	443	49883	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:03.990111113 CEST	49883	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:05.342552900 CEST	49881	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:05.342582941 CEST	443	49881	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:05.343168020 CEST	49883	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:05.343193054 CEST	443	49883	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:05.388390064 CEST	49884	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:05.388422966 CEST	443	49884	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:05.388478041 CEST	49884	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:05.389689922 CEST	49884	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:05.389707088 CEST	443	49884	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:05.648538113 CEST	443	49884	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:05.702567101 CEST	49884	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:05.821742058 CEST	49884	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:05.821759939 CEST	443	49884	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:05.823246956 CEST	443	49884	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:05.823942900 CEST	49884	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:05.824168921 CEST	443	49884	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:05.824743032 CEST	49884	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:05.824775934 CEST	49884	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:05.824807882 CEST	443	49884	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:06.085061073 CEST	443	49884	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:06.085246086 CEST	443	49884	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:06.085300922 CEST	49884	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:06.112251997 CEST	49884	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:06.112278938 CEST	443	49884	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:06.244939089 CEST	49885	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:06.244997025 CEST	443	49885	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:06.245048046 CEST	49885	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:06.245276928 CEST	49885	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:06.245292902 CEST	443	49885	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:06.813431025 CEST	49886	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:06.813474894 CEST	443	49886	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:06.813539028 CEST	49886	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:06.813596010 CEST	49887	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:06.813684940 CEST	443	49887	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:06.813751936 CEST	49887	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:06.814548016 CEST	49887	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:06.814584017 CEST	443	49887	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:06.814682007 CEST	49886	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:06.814692974 CEST	443	49886	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:06.857678890 CEST	49723	80	192.168.2.4	23.56.6.27
Apr 26, 2024 20:23:06.857739925 CEST	49724	80	192.168.2.4	199.232.214.172
Apr 26, 2024 20:23:06.982786894 CEST	80	49723	23.56.6.27	192.168.2.4
Apr 26, 2024 20:23:06.982853889 CEST	49723	80	192.168.2.4	23.56.6.27
Apr 26, 2024 20:23:06.989705086 CEST	80	49724	199.232.214.172	192.168.2.4
Apr 26, 2024 20:23:06.989753008 CEST	80	49724	199.232.214.172	192.168.2.4
Apr 26, 2024 20:23:06.989805937 CEST	49724	80	192.168.2.4	199.232.214.172
Apr 26, 2024 20:23:07.075589895 CEST	443	49887	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:07.075895071 CEST	49887	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:07.075958014 CEST	443	49887	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:07.076328039 CEST	443	49886	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:07.076348066 CEST	443	49887	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:07.076678038 CEST	49886	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:07.076699972 CEST	443	49886	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:07.076950073 CEST	49887	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:07.077019930 CEST	443	49887	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:07.077043056 CEST	443	49886	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:07.077142954 CEST	49887	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:07.077815056 CEST	49886	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:07.077815056 CEST	49886	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:07.077832937 CEST	443	49886	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:07.077879906 CEST	443	49886	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:07.077996969 CEST	49886	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:07.120161057 CEST	443	49887	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:07.124124050 CEST	443	49886	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:07.125623941 CEST	49887	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:07.141782999 CEST	49886	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:07.338470936 CEST	443	49886	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:07.338551044 CEST	443	49886	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:07.338723898 CEST	49886	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:07.339072943 CEST	49886	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:07.339098930 CEST	443	49886	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:07.339123011 CEST	49886	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:07.339334965 CEST	49886	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:07.465353012 CEST	443	49887	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:07.465468884 CEST	443	49887	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:07.465706110 CEST	443	49887	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:07.465730906 CEST	443	49887	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:07.465775967 CEST	49887	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:07.465853930 CEST	443	49887	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:07.465897083 CEST	49887	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:07.465991020 CEST	443	49887	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:07.466089010 CEST	49887	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:07.466401100 CEST	49887	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:07.466434002 CEST	443	49887	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:07.573565006 CEST	49888	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:07.573664904 CEST	443	49888	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:07.573868990 CEST	49888	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:07.575275898 CEST	49888	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:07.575314999 CEST	443	49888	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:07.583543062 CEST	49889	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:07.583589077 CEST	443	49889	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:07.583846092 CEST	49889	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:07.583846092 CEST	49889	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:07.583883047 CEST	443	49889	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:07.622925043 CEST	49891	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:07.622966051 CEST	443	49891	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:07.623074055 CEST	49891	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:07.623384953 CEST	49891	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:07.623404980 CEST	443	49891	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:07.624720097 CEST	49892	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:07.624749899 CEST	443	49892	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:07.624964952 CEST	49892	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:07.624964952 CEST	49892	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:07.624994040 CEST	443	49892	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:07.647658110 CEST	49893	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:07.647691011 CEST	443	49893	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:07.647877932 CEST	49893	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:07.651063919 CEST	49893	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:07.651074886 CEST	443	49893	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:07.670067072 CEST	443	49885	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:07.670283079 CEST	49885	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:07.670293093 CEST	443	49885	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:07.670756102 CEST	443	49885	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:07.671432972 CEST	49885	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:07.671520948 CEST	443	49885	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:07.671593904 CEST	49885	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:07.712162971 CEST	443	49885	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:07.721175909 CEST	49885	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:07.830168962 CEST	49895	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:07.830212116 CEST	443	49895	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:07.830488920 CEST	49895	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:07.830724955 CEST	49895	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:07.830739975 CEST	443	49895	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:07.880292892 CEST	443	49891	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:07.880583048 CEST	49891	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:07.880595922 CEST	443	49891	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:07.881061077 CEST	443	49891	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:07.881396055 CEST	49891	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:07.881490946 CEST	443	49891	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:07.881545067 CEST	49891	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:07.885932922 CEST	443	49892	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:07.886142969 CEST	49892	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:07.886176109 CEST	443	49892	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:07.886661053 CEST	443	49892	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:07.886987925 CEST	49892	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:07.887080908 CEST	49892	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:07.887088060 CEST	443	49892	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:07.887104988 CEST	443	49892	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:07.907804966 CEST	443	49888	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:07.908761024 CEST	49888	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:07.908799887 CEST	443	49888	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:07.909131050 CEST	443	49888	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:07.909627914 CEST	49888	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:07.909627914 CEST	49888	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:07.909662962 CEST	443	49888	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:07.909709930 CEST	443	49888	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:07.921988010 CEST	49891	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:07.921999931 CEST	443	49891	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:07.937596083 CEST	49892	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:07.952977896 CEST	49888	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:07.994123936 CEST	443	49889	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:07.994647026 CEST	49889	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:07.994663000 CEST	443	49889	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:07.994992018 CEST	443	49889	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:07.995450974 CEST	49889	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:07.995450974 CEST	49889	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:07.995469093 CEST	443	49889	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:07.995512009 CEST	443	49889	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:08.046138048 CEST	49889	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:08.073071003 CEST	443	49885	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:08.073184013 CEST	443	49885	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:08.073358059 CEST	49885	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:08.073719025 CEST	49885	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:08.073740005 CEST	443	49885	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:08.088871002 CEST	443	49888	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:08.088905096 CEST	443	49888	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:08.088959932 CEST	49888	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:08.088984966 CEST	443	49888	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:08.089526892 CEST	443	49888	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:08.089581966 CEST	49888	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:08.089939117 CEST	49888	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:08.089953899 CEST	443	49888	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:08.094583035 CEST	49896	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:08.094626904 CEST	443	49896	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:08.094873905 CEST	49896	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:08.095081091 CEST	49896	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:08.095098019 CEST	443	49896	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:08.132280111 CEST	443	49891	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:08.132363081 CEST	443	49891	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:08.132458925 CEST	49891	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:08.132836103 CEST	49891	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:08.132853031 CEST	443	49891	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:08.135636091 CEST	49897	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:08.135670900 CEST	443	49897	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:08.135744095 CEST	49897	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:08.135941982 CEST	49897	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:08.135958910 CEST	443	49897	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:08.170195103 CEST	443	49895	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:08.170473099 CEST	49895	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:08.170483112 CEST	443	49895	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:08.171793938 CEST	443	49895	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:08.172133923 CEST	49895	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:08.172302961 CEST	443	49895	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:08.172327042 CEST	49895	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:08.176192045 CEST	443	49892	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:08.176331043 CEST	443	49892	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:08.176386118 CEST	49892	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:08.176412106 CEST	443	49892	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:08.176615000 CEST	443	49892	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:08.176748037 CEST	49892	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:08.176757097 CEST	443	49892	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:08.176808119 CEST	443	49892	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:08.176867962 CEST	49892	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:08.177472115 CEST	49892	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:08.177485943 CEST	443	49892	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:08.180145979 CEST	49898	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:08.180166960 CEST	443	49898	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:08.180244923 CEST	49898	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:08.180422068 CEST	49898	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:08.180438042 CEST	443	49898	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:08.216176033 CEST	443	49895	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:08.218581915 CEST	49895	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:08.364944935 CEST	443	49889	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:08.365057945 CEST	443	49889	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:08.365282059 CEST	49889	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:08.482902050 CEST	443	49897	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:08.490180969 CEST	443	49896	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:08.499116898 CEST	443	49895	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:08.500560045 CEST	443	49895	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:08.500679016 CEST	49895	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:08.529093981 CEST	443	49898	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:08.538811922 CEST	49896	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:08.539726973 CEST	49897	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:08.576932907 CEST	49898	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:09.008877039 CEST	443	49893	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:09.069993019 CEST	49893	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:09.736689091 CEST	49893	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:09.736711979 CEST	443	49893	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:09.736855984 CEST	49898	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:09.736893892 CEST	443	49898	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:09.737284899 CEST	49895	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:09.737304926 CEST	443	49895	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:09.738265038 CEST	443	49893	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:09.738459110 CEST	443	49898	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:09.738868952 CEST	49896	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:09.738890886 CEST	443	49896	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:09.739605904 CEST	49897	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:09.739646912 CEST	443	49897	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:09.740117073 CEST	443	49897	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:09.740397930 CEST	443	49896	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:09.742389917 CEST	49893	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:09.742587090 CEST	443	49893	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:09.743993044 CEST	49898	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:09.744225025 CEST	443	49898	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:09.744565964 CEST	49897	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:09.744649887 CEST	443	49897	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:09.745271921 CEST	49896	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:09.745470047 CEST	443	49896	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:09.747663975 CEST	49893	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:09.747759104 CEST	49898	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:09.747838020 CEST	49897	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:09.747885942 CEST	49896	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:09.788149118 CEST	443	49893	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:09.788176060 CEST	443	49896	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:09.792124033 CEST	443	49898	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:09.792124987 CEST	443	49897	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:09.855220079 CEST	49889	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:09.855243921 CEST	443	49889	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:09.937230110 CEST	443	49898	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:09.937427998 CEST	443	49898	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:09.937482119 CEST	49898	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:09.948388100 CEST	443	49897	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:09.948436975 CEST	443	49897	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:09.948482037 CEST	49897	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:09.948513031 CEST	443	49897	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:09.948550940 CEST	443	49897	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:09.948590040 CEST	49897	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:09.948601007 CEST	443	49897	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:09.948664904 CEST	443	49897	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:09.948707104 CEST	49897	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:09.969995975 CEST	49897	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:09.970021963 CEST	443	49897	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:09.971200943 CEST	49898	443	192.168.2.4	31.13.80.36
Apr 26, 2024 20:23:09.971210957 CEST	443	49898	31.13.80.36	192.168.2.4
Apr 26, 2024 20:23:10.101013899 CEST	443	49893	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:10.101196051 CEST	443	49893	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:10.101257086 CEST	49893	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:10.155881882 CEST	443	49896	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:10.155988932 CEST	443	49896	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:10.156043053 CEST	49896	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:10.218009949 CEST	49893	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:10.218034983 CEST	443	49893	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:10.219890118 CEST	49896	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:10.219908953 CEST	443	49896	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:10.544562101 CEST	49899	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:10.544598103 CEST	443	49899	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:10.544647932 CEST	49899	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:10.545044899 CEST	49899	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:10.545059919 CEST	443	49899	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:10.558753967 CEST	49901	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:10.558793068 CEST	443	49901	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:10.558854103 CEST	49901	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:10.559580088 CEST	49901	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:10.559597969 CEST	443	49901	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:10.811678886 CEST	443	49899	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:10.813057899 CEST	49899	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:10.813071966 CEST	443	49899	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:10.814312935 CEST	443	49899	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:10.814857960 CEST	49899	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:10.815001011 CEST	49899	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:10.815006971 CEST	443	49899	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:10.815032005 CEST	49899	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:10.815042019 CEST	443	49899	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:10.815174103 CEST	443	49899	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:10.873774052 CEST	49899	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:10.947355032 CEST	443	49901	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:10.947539091 CEST	49901	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:10.947609901 CEST	443	49901	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:10.948173046 CEST	443	49901	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:10.948441982 CEST	49901	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:10.948532104 CEST	443	49901	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:10.948534012 CEST	49901	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:10.992130041 CEST	443	49901	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:10.998796940 CEST	49901	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:11.066097975 CEST	443	49899	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:11.066224098 CEST	443	49899	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:11.066281080 CEST	49899	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:11.066502094 CEST	49899	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:11.066519022 CEST	443	49899	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:11.344369888 CEST	443	49901	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:11.344470024 CEST	443	49901	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:11.344762087 CEST	49901	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:11.345041990 CEST	49901	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:11.345058918 CEST	443	49901	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:12.591536999 CEST	443	49872	142.250.217.228	192.168.2.4
Apr 26, 2024 20:23:12.591701984 CEST	443	49872	142.250.217.228	192.168.2.4
Apr 26, 2024 20:23:12.591932058 CEST	49872	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:23:12.664129972 CEST	49872	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:23:12.664156914 CEST	49902	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:12.664171934 CEST	443	49872	142.250.217.228	192.168.2.4
Apr 26, 2024 20:23:12.664242029 CEST	443	49902	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:12.665965080 CEST	49902	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:12.665965080 CEST	49902	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:12.666007042 CEST	443	49902	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:13.012849092 CEST	443	49902	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:13.062392950 CEST	49902	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:15.553407907 CEST	49902	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:15.553479910 CEST	443	49902	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:15.554095984 CEST	443	49902	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:15.560261011 CEST	49902	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:15.560399055 CEST	443	49902	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:15.560420036 CEST	49902	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:15.608073950 CEST	49902	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:15.608113050 CEST	443	49902	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:15.793601036 CEST	49903	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:15.793648005 CEST	443	49903	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:15.793721914 CEST	49903	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:15.793791056 CEST	49904	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:15.793798923 CEST	443	49904	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:15.793864012 CEST	49904	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:15.794868946 CEST	49904	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:15.794879913 CEST	443	49904	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:15.795001984 CEST	49903	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:15.795011997 CEST	443	49903	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:15.885584116 CEST	443	49902	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:15.885799885 CEST	443	49902	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:15.885864973 CEST	49902	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:15.887139082 CEST	49902	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:15.887161016 CEST	443	49902	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:16.055706978 CEST	443	49904	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:16.062501907 CEST	443	49903	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:16.066734076 CEST	49903	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:16.066766977 CEST	443	49903	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:16.066962004 CEST	49904	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:16.066972971 CEST	443	49904	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:16.067583084 CEST	443	49904	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:16.067981005 CEST	49904	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:16.068065882 CEST	443	49904	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:16.068120956 CEST	443	49903	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:16.068202972 CEST	49904	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:16.068466902 CEST	49903	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:16.068634987 CEST	443	49903	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:16.069005966 CEST	49903	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:16.069137096 CEST	49903	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:16.069142103 CEST	443	49903	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:16.116117001 CEST	443	49904	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:16.328269958 CEST	443	49903	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:16.328346014 CEST	443	49903	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:16.328389883 CEST	49903	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:16.328906059 CEST	49903	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:16.328924894 CEST	443	49903	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:16.437537909 CEST	443	49904	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:16.437603951 CEST	443	49904	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:16.437639952 CEST	49904	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:16.437649965 CEST	443	49904	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:16.437665939 CEST	443	49904	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:16.437704086 CEST	49904	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:16.437715054 CEST	443	49904	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:16.437906027 CEST	443	49904	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:16.437938929 CEST	49904	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:16.438551903 CEST	49904	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:16.438575983 CEST	443	49904	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:16.624885082 CEST	49905	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:16.624922037 CEST	443	49905	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:16.624990940 CEST	49905	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:16.625170946 CEST	49905	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:16.625180960 CEST	443	49905	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:16.690056086 CEST	49907	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:16.690115929 CEST	443	49907	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:16.690213919 CEST	49907	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:16.690692902 CEST	49907	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:16.690723896 CEST	443	49907	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:16.757900953 CEST	49908	443	192.168.2.4	172.217.165.194
Apr 26, 2024 20:23:16.757950068 CEST	443	49908	172.217.165.194	192.168.2.4
Apr 26, 2024 20:23:16.758006096 CEST	49908	443	192.168.2.4	172.217.165.194
Apr 26, 2024 20:23:16.758243084 CEST	49908	443	192.168.2.4	172.217.165.194
Apr 26, 2024 20:23:16.758256912 CEST	443	49908	172.217.165.194	192.168.2.4
Apr 26, 2024 20:23:17.029566050 CEST	443	49905	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:17.029808998 CEST	49905	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:17.029830933 CEST	443	49905	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:17.030163050 CEST	443	49905	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:17.030582905 CEST	49905	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:17.030646086 CEST	443	49905	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:17.030723095 CEST	49905	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:17.076114893 CEST	443	49905	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:17.089799881 CEST	443	49907	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:17.090075016 CEST	49907	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:17.090114117 CEST	443	49907	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:17.090548992 CEST	443	49907	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:17.090872049 CEST	49907	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:17.090945005 CEST	443	49907	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:17.091073990 CEST	49907	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:17.136111975 CEST	443	49907	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:17.145926952 CEST	443	49908	172.217.165.194	192.168.2.4
Apr 26, 2024 20:23:17.146158934 CEST	49908	443	192.168.2.4	172.217.165.194
Apr 26, 2024 20:23:17.146167040 CEST	443	49908	172.217.165.194	192.168.2.4
Apr 26, 2024 20:23:17.146475077 CEST	443	49908	172.217.165.194	192.168.2.4
Apr 26, 2024 20:23:17.146822929 CEST	49908	443	192.168.2.4	172.217.165.194
Apr 26, 2024 20:23:17.146822929 CEST	49908	443	192.168.2.4	172.217.165.194
Apr 26, 2024 20:23:17.146835089 CEST	443	49908	172.217.165.194	192.168.2.4
Apr 26, 2024 20:23:17.146900892 CEST	443	49908	172.217.165.194	192.168.2.4
Apr 26, 2024 20:23:17.189824104 CEST	49908	443	192.168.2.4	172.217.165.194
Apr 26, 2024 20:23:17.396725893 CEST	443	49905	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:17.396785975 CEST	443	49905	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:17.397136927 CEST	443	49905	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:17.397376060 CEST	49905	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:17.397672892 CEST	49905	443	192.168.2.4	142.250.189.130
Apr 26, 2024 20:23:17.397696018 CEST	443	49905	142.250.189.130	192.168.2.4
Apr 26, 2024 20:23:17.400825024 CEST	49910	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:17.400862932 CEST	443	49910	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:17.401247978 CEST	49910	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:17.401494980 CEST	49910	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:17.401506901 CEST	443	49910	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:17.448220968 CEST	443	49907	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:17.448338985 CEST	443	49907	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:17.448519945 CEST	49907	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:17.448648930 CEST	49907	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:17.448697090 CEST	443	49907	172.217.165.206	192.168.2.4
Apr 26, 2024 20:23:17.448729992 CEST	49907	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:17.448808908 CEST	49907	443	192.168.2.4	172.217.165.206
Apr 26, 2024 20:23:17.521358013 CEST	443	49908	172.217.165.194	192.168.2.4
Apr 26, 2024 20:23:17.521472931 CEST	443	49908	172.217.165.194	192.168.2.4
Apr 26, 2024 20:23:17.521800995 CEST	49908	443	192.168.2.4	172.217.165.194
Apr 26, 2024 20:23:17.522087097 CEST	49908	443	192.168.2.4	172.217.165.194
Apr 26, 2024 20:23:17.522092104 CEST	443	49908	172.217.165.194	192.168.2.4
Apr 26, 2024 20:23:17.731658936 CEST	443	49910	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:17.751041889 CEST	49910	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:17.751061916 CEST	443	49910	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:17.751697063 CEST	443	49910	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:17.752147913 CEST	49910	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:17.752230883 CEST	443	49910	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:17.752360106 CEST	49910	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:17.800122976 CEST	443	49910	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:17.800208092 CEST	49910	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:18.069134951 CEST	443	49910	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:18.069256067 CEST	443	49910	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:18.075870037 CEST	49910	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:19.134057999 CEST	49910	443	192.168.2.4	142.251.35.228
Apr 26, 2024 20:23:19.134077072 CEST	443	49910	142.251.35.228	192.168.2.4
Apr 26, 2024 20:23:19.136885881 CEST	49912	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:19.136909962 CEST	443	49912	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:19.136959076 CEST	49912	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:19.137326002 CEST	49913	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:19.137366056 CEST	443	49913	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:19.137411118 CEST	49913	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:19.138159037 CEST	49913	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:19.138170958 CEST	443	49913	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:19.138314009 CEST	49912	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:19.138329983 CEST	443	49912	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:19.399463892 CEST	443	49913	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:19.405028105 CEST	443	49912	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:19.406804085 CEST	49913	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:19.406821966 CEST	443	49913	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:19.407133102 CEST	49912	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:19.407144070 CEST	443	49912	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:19.407669067 CEST	443	49912	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:19.407978058 CEST	443	49913	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:19.414529085 CEST	49912	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:19.414613008 CEST	443	49912	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:19.415111065 CEST	49913	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:19.415288925 CEST	443	49913	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:19.415561914 CEST	49912	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:19.415901899 CEST	49913	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:19.460115910 CEST	443	49913	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:19.460119009 CEST	443	49912	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:19.664211988 CEST	443	49912	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:19.665188074 CEST	443	49912	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:19.665254116 CEST	49912	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:19.692609072 CEST	443	49913	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:19.692770004 CEST	443	49913	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:19.692850113 CEST	49913	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:19.692863941 CEST	443	49913	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:19.693025112 CEST	443	49913	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:19.693062067 CEST	49913	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:19.693068027 CEST	443	49913	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:19.693226099 CEST	443	49913	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:19.693312883 CEST	49913	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:19.849195004 CEST	49913	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:19.849214077 CEST	443	49913	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:19.916325092 CEST	49912	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:19.916344881 CEST	443	49912	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:19.949832916 CEST	49914	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:19.949867010 CEST	443	49914	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:19.949934006 CEST	49914	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:19.950653076 CEST	49914	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:19.950664997 CEST	443	49914	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:20.110399961 CEST	49915	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:20.110430956 CEST	443	49915	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:20.110580921 CEST	49915	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:20.110930920 CEST	49915	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:20.110940933 CEST	443	49915	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:20.211142063 CEST	443	49914	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:20.211430073 CEST	49914	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:20.211442947 CEST	443	49914	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:20.211916924 CEST	443	49914	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:20.212413073 CEST	49914	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:20.212491989 CEST	443	49914	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:20.212613106 CEST	49914	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:20.212796926 CEST	49914	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:20.212825060 CEST	443	49914	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:20.240073919 CEST	49916	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:20.240124941 CEST	443	49916	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:20.240192890 CEST	49916	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:20.240340948 CEST	49917	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:20.240411997 CEST	443	49917	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:20.240488052 CEST	49917	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:20.240595102 CEST	49916	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:20.240608931 CEST	443	49916	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:20.240832090 CEST	49917	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:20.240866899 CEST	443	49917	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:20.470822096 CEST	443	49914	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:20.470911026 CEST	443	49914	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:20.471137047 CEST	49914	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:20.471236944 CEST	49914	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:20.471256018 CEST	443	49914	104.26.1.66	192.168.2.4
Apr 26, 2024 20:23:20.471282005 CEST	49914	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:20.471302986 CEST	49914	443	192.168.2.4	104.26.1.66
Apr 26, 2024 20:23:20.506885052 CEST	443	49916	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:20.507149935 CEST	49916	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:20.507164001 CEST	443	49916	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:20.507520914 CEST	443	49916	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:20.507683039 CEST	443	49917	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:20.507931948 CEST	49916	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:20.507997036 CEST	443	49916	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:20.508085012 CEST	49917	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:20.508145094 CEST	443	49917	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:20.508186102 CEST	49916	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:20.508471966 CEST	443	49917	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:20.508899927 CEST	49917	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:20.508965015 CEST	49917	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:20.508968115 CEST	443	49917	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:20.552144051 CEST	443	49916	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:20.556117058 CEST	443	49917	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:20.627152920 CEST	49917	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:20.760324955 CEST	443	49917	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:20.760381937 CEST	443	49917	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:20.760756969 CEST	49917	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:20.761181116 CEST	49917	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:20.761229038 CEST	443	49917	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:20.761256933 CEST	49917	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:20.761279106 CEST	49917	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:20.794219017 CEST	443	49916	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:20.794267893 CEST	443	49916	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:20.794336081 CEST	49916	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:20.794346094 CEST	443	49916	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:20.794359922 CEST	443	49916	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:20.794409990 CEST	49916	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:20.794415951 CEST	443	49916	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:20.794437885 CEST	443	49916	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:20.794476032 CEST	49916	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:20.795109034 CEST	49916	443	192.168.2.4	157.240.14.35
Apr 26, 2024 20:23:20.795123100 CEST	443	49916	157.240.14.35	192.168.2.4
Apr 26, 2024 20:23:21.459858894 CEST	443	49915	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:21.460220098 CEST	49915	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:21.460233927 CEST	443	49915	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:21.461529970 CEST	443	49915	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:21.462166071 CEST	49915	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:21.462398052 CEST	49915	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:21.462403059 CEST	443	49915	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:21.462455034 CEST	443	49915	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:21.514607906 CEST	49915	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:21.795360088 CEST	443	49915	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:21.795607090 CEST	443	49915	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:21.796621084 CEST	49915	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:21.796700001 CEST	49915	443	192.168.2.4	142.250.217.196
Apr 26, 2024 20:23:21.796715021 CEST	443	49915	142.250.217.196	192.168.2.4
Apr 26, 2024 20:23:21.831095934 CEST	49918	443	192.168.2.4	216.239.34.181
Apr 26, 2024 20:23:21.831130981 CEST	443	49918	216.239.34.181	192.168.2.4
Apr 26, 2024 20:23:21.831321001 CEST	49918	443	192.168.2.4	216.239.34.181
Apr 26, 2024 20:23:21.831432104 CEST	49918	443	192.168.2.4	216.239.34.181
Apr 26, 2024 20:23:21.831440926 CEST	443	49918	216.239.34.181	192.168.2.4
Apr 26, 2024 20:23:22.155241013 CEST	443	49918	216.239.34.181	192.168.2.4
Apr 26, 2024 20:23:22.155505896 CEST	49918	443	192.168.2.4	216.239.34.181
Apr 26, 2024 20:23:22.155528069 CEST	443	49918	216.239.34.181	192.168.2.4
Apr 26, 2024 20:23:22.156055927 CEST	443	49918	216.239.34.181	192.168.2.4
Apr 26, 2024 20:23:22.156378984 CEST	49918	443	192.168.2.4	216.239.34.181
Apr 26, 2024 20:23:22.156461000 CEST	443	49918	216.239.34.181	192.168.2.4
Apr 26, 2024 20:23:22.156528950 CEST	49918	443	192.168.2.4	216.239.34.181
Apr 26, 2024 20:23:22.204116106 CEST	443	49918	216.239.34.181	192.168.2.4
Apr 26, 2024 20:23:22.489265919 CEST	443	49918	216.239.34.181	192.168.2.4
Apr 26, 2024 20:23:22.489356995 CEST	443	49918	216.239.34.181	192.168.2.4
Apr 26, 2024 20:23:22.489682913 CEST	49918	443	192.168.2.4	216.239.34.181
Apr 26, 2024 20:23:22.489700079 CEST	443	49918	216.239.34.181	192.168.2.4
Apr 26, 2024 20:23:22.489712954 CEST	49918	443	192.168.2.4	216.239.34.181
Apr 26, 2024 20:23:22.489748001 CEST	49918	443	192.168.2.4	216.239.34.181

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 20:21:58.427051067 CEST	53	61324	1.1.1.1	192.168.2.4
Apr 26, 2024 20:21:58.541551113 CEST	53	56961	1.1.1.1	192.168.2.4
Apr 26, 2024 20:21:59.384840965 CEST	53	55983	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:00.654155970 CEST	59849	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:00.654433012 CEST	54429	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:00.784488916 CEST	53	54429	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:00.811139107 CEST	53	59849	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:02.140563965 CEST	59566	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:02.140995026 CEST	63200	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:02.219086885 CEST	49286	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:02.219574928 CEST	54761	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:02.269354105 CEST	53	59566	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:02.273122072 CEST	53	63200	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:02.344496012 CEST	53	49286	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:02.344924927 CEST	53	54761	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:05.624480963 CEST	62426	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:05.624969006 CEST	56834	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:05.752847910 CEST	53	56834	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:05.753179073 CEST	53	62426	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:05.759151936 CEST	53541	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:05.759816885 CEST	58274	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:05.887447119 CEST	53	58274	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:05.892380953 CEST	53	53541	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:11.364567041 CEST	53	49899	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:13.170054913 CEST	59036	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:13.170283079 CEST	63703	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:13.172864914 CEST	50666	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:13.173007011 CEST	53639	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:13.209588051 CEST	65311	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:13.209588051 CEST	55930	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:13.289781094 CEST	53	52415	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:13.295028925 CEST	53	59036	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:13.296039104 CEST	53	63703	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:13.298691988 CEST	53	50666	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:13.298754930 CEST	53	53639	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:13.336384058 CEST	53	55930	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:13.339392900 CEST	53	65311	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:15.356137991 CEST	62654	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:15.356461048 CEST	51536	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:15.356756926 CEST	51515	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:15.357084990 CEST	63835	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:15.393080950 CEST	62286	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:15.393239021 CEST	51801	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:15.481806040 CEST	53	62654	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:15.481998920 CEST	53	51536	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:15.482604027 CEST	53	51515	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:15.483186960 CEST	53	63835	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:15.491302967 CEST	53	53509	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:15.518910885 CEST	53	51801	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:15.519031048 CEST	53	62286	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:18.313293934 CEST	57865	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:18.313555956 CEST	59103	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:18.438560009 CEST	53	59103	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:18.439403057 CEST	53	57865	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:18.543158054 CEST	59076	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:18.543667078 CEST	56837	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:18.545170069 CEST	53487	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:18.545321941 CEST	50575	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:18.590748072 CEST	138	138	192.168.2.4	192.168.2.255
Apr 26, 2024 20:22:18.603949070 CEST	55477	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:18.604387999 CEST	52604	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:18.668335915 CEST	53	59076	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:18.669133902 CEST	53	56837	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:18.670543909 CEST	53	50575	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:18.670644999 CEST	53	53487	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:18.730072021 CEST	53	52604	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:18.730202913 CEST	53	55477	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:19.716698885 CEST	51027	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:19.717020988 CEST	56486	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:19.842627048 CEST	53	56486	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:19.842778921 CEST	53	51027	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:19.849708080 CEST	53	50474	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:19.982743979 CEST	54290	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:19.983022928 CEST	58734	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:22:20.108078003 CEST	53	54290	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:20.108458996 CEST	53	58734	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:20.287808895 CEST	53	61418	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:22.048321009 CEST	53	64514	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:43.075628042 CEST	53	50906	1.1.1.1	192.168.2.4
Apr 26, 2024 20:22:58.163961887 CEST	53	60236	1.1.1.1	192.168.2.4
Apr 26, 2024 20:23:05.488517046 CEST	53	61654	1.1.1.1	192.168.2.4
Apr 26, 2024 20:23:16.625580072 CEST	53767	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:23:16.625799894 CEST	60371	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:23:16.666691065 CEST	53	55180	1.1.1.1	192.168.2.4
Apr 26, 2024 20:23:16.701159954 CEST	49314	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:23:16.701301098 CEST	62382	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:23:16.757201910 CEST	53	60371	1.1.1.1	192.168.2.4
Apr 26, 2024 20:23:16.757231951 CEST	53	53767	1.1.1.1	192.168.2.4
Apr 26, 2024 20:23:16.796627045 CEST	53	65211	1.1.1.1	192.168.2.4
Apr 26, 2024 20:23:16.860238075 CEST	53	62382	1.1.1.1	192.168.2.4
Apr 26, 2024 20:23:17.751029968 CEST	54254	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:23:17.876410961 CEST	53	54254	1.1.1.1	192.168.2.4
Apr 26, 2024 20:23:20.114258051 CEST	62516	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:23:20.114445925 CEST	63902	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:23:20.239300966 CEST	53	62516	1.1.1.1	192.168.2.4
Apr 26, 2024 20:23:20.239635944 CEST	53	63902	1.1.1.1	192.168.2.4
Apr 26, 2024 20:23:21.703697920 CEST	60888	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:23:21.703699112 CEST	56067	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:23:21.829282045 CEST	53	60888	1.1.1.1	192.168.2.4
Apr 26, 2024 20:23:21.830627918 CEST	53	56067	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 26, 2024 20:22:22.048399925 CEST	192.168.2.4	1.1.1.1	c221	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2024 20:22:00.654155970 CEST	192.168.2.4	1.1.1.1	0xc4ee	Standard query (0)	globalgrimmer.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:00.654433012 CEST	192.168.2.4	1.1.1.1	0xc8d7	Standard query (0)	globalgrimmer.com	65	IN (0x0001)	false
Apr 26, 2024 20:22:02.140563965 CEST	192.168.2.4	1.1.1.1	0xcfa8	Standard query (0)	0bef7y10siuwczdssj39pr-fbx.hop.clickbank.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:02.140995026 CEST	192.168.2.4	1.1.1.1	0xc5ff	Standard query (0)	0bef7y10siuwczdssj39pr-fbx.hop.clickbank.net	65	IN (0x0001)	false
Apr 26, 2024 20:22:02.219086885 CEST	192.168.2.4	1.1.1.1	0x5173	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:02.219574928 CEST	192.168.2.4	1.1.1.1	0xa948	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 20:22:05.624480963 CEST	192.168.2.4	1.1.1.1	0x58bf	Standard query (0)	www.moonreading.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:05.624969006 CEST	192.168.2.4	1.1.1.1	0x4b4d	Standard query (0)	www.moonreading.com	65	IN (0x0001)	false
Apr 26, 2024 20:22:05.759151936 CEST	192.168.2.4	1.1.1.1	0x9921	Standard query (0)	www.moonreading.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:05.759816885 CEST	192.168.2.4	1.1.1.1	0xa6a4	Standard query (0)	www.moonreading.com	65	IN (0x0001)	false
Apr 26, 2024 20:22:13.170054913 CEST	192.168.2.4	1.1.1.1	0x7069	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:13.170283079 CEST	192.168.2.4	1.1.1.1	0xe33a	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Apr 26, 2024 20:22:13.172864914 CEST	192.168.2.4	1.1.1.1	0x5b82	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:13.173007011 CEST	192.168.2.4	1.1.1.1	0xf024	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 26, 2024 20:22:13.209588051 CEST	192.168.2.4	1.1.1.1	0xef24	Standard query (0)	www.moonreading.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:13.209588051 CEST	192.168.2.4	1.1.1.1	0xc023	Standard query (0)	www.moonreading.com	65	IN (0x0001)	false
Apr 26, 2024 20:22:15.356137991 CEST	192.168.2.4	1.1.1.1	0xc4f9	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:15.356461048 CEST	192.168.2.4	1.1.1.1	0x24fa	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 26, 2024 20:22:15.356756926 CEST	192.168.2.4	1.1.1.1	0x3293	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:15.357084990 CEST	192.168.2.4	1.1.1.1	0x6bab	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Apr 26, 2024 20:22:15.393080950 CEST	192.168.2.4	1.1.1.1	0xdeb7	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:15.393239021 CEST	192.168.2.4	1.1.1.1	0xa2b5	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 26, 2024 20:22:18.313293934 CEST	192.168.2.4	1.1.1.1	0x1baf	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:18.313555956 CEST	192.168.2.4	1.1.1.1	0xcf17	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 20:22:18.543158054 CEST	192.168.2.4	1.1.1.1	0x3dc1	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:18.543667078 CEST	192.168.2.4	1.1.1.1	0xe075	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Apr 26, 2024 20:22:18.545170069 CEST	192.168.2.4	1.1.1.1	0x7a5a	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:18.545321941 CEST	192.168.2.4	1.1.1.1	0x302f	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 26, 2024 20:22:18.603949070 CEST	192.168.2.4	1.1.1.1	0x1263	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:18.604387999 CEST	192.168.2.4	1.1.1.1	0xec99	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 26, 2024 20:22:19.716698885 CEST	192.168.2.4	1.1.1.1	0xd64c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:19.717020988 CEST	192.168.2.4	1.1.1.1	0x64cc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 20:22:19.982743979 CEST	192.168.2.4	1.1.1.1	0x141b	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:19.983022928 CEST	192.168.2.4	1.1.1.1	0x1ed3	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 26, 2024 20:23:16.625580072 CEST	192.168.2.4	1.1.1.1	0x9db3	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:23:16.625799894 CEST	192.168.2.4	1.1.1.1	0xf0c1	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Apr 26, 2024 20:23:16.701159954 CEST	192.168.2.4	1.1.1.1	0x970f	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:23:16.701301098 CEST	192.168.2.4	1.1.1.1	0x579f	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 26, 2024 20:23:17.751029968 CEST	192.168.2.4	1.1.1.1	0x530c	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:23:20.114258051 CEST	192.168.2.4	1.1.1.1	0xa11b	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:23:20.114445925 CEST	192.168.2.4	1.1.1.1	0x7f0e	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 26, 2024 20:23:21.703697920 CEST	192.168.2.4	1.1.1.1	0x8ca0	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:23:21.703699112 CEST	192.168.2.4	1.1.1.1	0xd42d	Standard query (0)	analytics.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 26, 2024 20:22:00.811139107 CEST	1.1.1.1	192.168.2.4	0xc4ee	No error (0)	globalgrimmer.com		63.250.47.116	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:02.269354105 CEST	1.1.1.1	192.168.2.4	0xcfa8	No error (0)	0bef7y10siuwczdssj39pr-fbx.hop.clickbank.net		35.80.252.204	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:02.269354105 CEST	1.1.1.1	192.168.2.4	0xcfa8	No error (0)	0bef7y10siuwczdssj39pr-fbx.hop.clickbank.net		54.185.206.10	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:02.269354105 CEST	1.1.1.1	192.168.2.4	0xcfa8	No error (0)	0bef7y10siuwczdssj39pr-fbx.hop.clickbank.net		44.229.7.140	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:02.344496012 CEST	1.1.1.1	192.168.2.4	0x5173	No error (0)	www.google.com		142.250.217.228	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:02.344924927 CEST	1.1.1.1	192.168.2.4	0xa948	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 20:22:05.752847910 CEST	1.1.1.1	192.168.2.4	0x4b4d	No error (0)	www.moonreading.com			65	IN (0x0001)	false
Apr 26, 2024 20:22:05.753179073 CEST	1.1.1.1	192.168.2.4	0x58bf	No error (0)	www.moonreading.com		172.67.73.212	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:05.753179073 CEST	1.1.1.1	192.168.2.4	0x58bf	No error (0)	www.moonreading.com		104.26.1.66	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:05.753179073 CEST	1.1.1.1	192.168.2.4	0x58bf	No error (0)	www.moonreading.com		104.26.0.66	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:05.887447119 CEST	1.1.1.1	192.168.2.4	0xa6a4	No error (0)	www.moonreading.com			65	IN (0x0001)	false
Apr 26, 2024 20:22:05.892380953 CEST	1.1.1.1	192.168.2.4	0x9921	No error (0)	www.moonreading.com		104.26.1.66	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:05.892380953 CEST	1.1.1.1	192.168.2.4	0x9921	No error (0)	www.moonreading.com		172.67.73.212	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:05.892380953 CEST	1.1.1.1	192.168.2.4	0x9921	No error (0)	www.moonreading.com		104.26.0.66	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:13.295028925 CEST	1.1.1.1	192.168.2.4	0x7069	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:13.295028925 CEST	1.1.1.1	192.168.2.4	0x7069	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:13.296039104 CEST	1.1.1.1	192.168.2.4	0xe33a	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Apr 26, 2024 20:22:13.298691988 CEST	1.1.1.1	192.168.2.4	0x5b82	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:22:13.298691988 CEST	1.1.1.1	192.168.2.4	0x5b82	No error (0)	scontent.xx.fbcdn.net		31.13.67.20	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:13.298754930 CEST	1.1.1.1	192.168.2.4	0xf024	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:22:13.336384058 CEST	1.1.1.1	192.168.2.4	0xc023	No error (0)	www.moonreading.com			65	IN (0x0001)	false
Apr 26, 2024 20:22:13.339392900 CEST	1.1.1.1	192.168.2.4	0xef24	No error (0)	www.moonreading.com		104.26.1.66	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:13.339392900 CEST	1.1.1.1	192.168.2.4	0xef24	No error (0)	www.moonreading.com		172.67.73.212	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:13.339392900 CEST	1.1.1.1	192.168.2.4	0xef24	No error (0)	www.moonreading.com		104.26.0.66	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:13.904021978 CEST	1.1.1.1	192.168.2.4	0x47ba	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:22:13.904021978 CEST	1.1.1.1	192.168.2.4	0x47ba	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:15.481806040 CEST	1.1.1.1	192.168.2.4	0xc4f9	No error (0)	googleads.g.doubleclick.net		142.250.189.130	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:15.481998920 CEST	1.1.1.1	192.168.2.4	0x24fa	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 26, 2024 20:22:15.482604027 CEST	1.1.1.1	192.168.2.4	0x3293	No error (0)	td.doubleclick.net		142.250.189.130	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:15.518910885 CEST	1.1.1.1	192.168.2.4	0xa2b5	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:22:15.519031048 CEST	1.1.1.1	192.168.2.4	0xdeb7	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:22:15.519031048 CEST	1.1.1.1	192.168.2.4	0xdeb7	No error (0)	star-mini.c10r.facebook.com		157.240.14.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:18.438560009 CEST	1.1.1.1	192.168.2.4	0xcf17	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 20:22:18.439403057 CEST	1.1.1.1	192.168.2.4	0x1baf	No error (0)	www.google.com		142.251.35.228	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:18.668335915 CEST	1.1.1.1	192.168.2.4	0x3dc1	No error (0)	analytics.google.com		172.217.165.206	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:18.670644999 CEST	1.1.1.1	192.168.2.4	0x7a5a	No error (0)	stats.g.doubleclick.net		172.217.193.155	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:18.670644999 CEST	1.1.1.1	192.168.2.4	0x7a5a	No error (0)	stats.g.doubleclick.net		172.217.193.156	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:18.670644999 CEST	1.1.1.1	192.168.2.4	0x7a5a	No error (0)	stats.g.doubleclick.net		172.217.193.157	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:18.670644999 CEST	1.1.1.1	192.168.2.4	0x7a5a	No error (0)	stats.g.doubleclick.net		172.217.193.154	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:18.730072021 CEST	1.1.1.1	192.168.2.4	0xec99	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:22:18.730202913 CEST	1.1.1.1	192.168.2.4	0x1263	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:22:18.730202913 CEST	1.1.1.1	192.168.2.4	0x1263	No error (0)	star-mini.c10r.facebook.com		31.13.80.36	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:19.842627048 CEST	1.1.1.1	192.168.2.4	0x64cc	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 20:22:19.842778921 CEST	1.1.1.1	192.168.2.4	0xd64c	No error (0)	www.google.com		142.250.217.196	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:20.108078003 CEST	1.1.1.1	192.168.2.4	0x141b	No error (0)	stats.g.doubleclick.net		173.194.212.157	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:20.108078003 CEST	1.1.1.1	192.168.2.4	0x141b	No error (0)	stats.g.doubleclick.net		173.194.212.156	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:20.108078003 CEST	1.1.1.1	192.168.2.4	0x141b	No error (0)	stats.g.doubleclick.net		173.194.212.154	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:20.108078003 CEST	1.1.1.1	192.168.2.4	0x141b	No error (0)	stats.g.doubleclick.net		173.194.212.155	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:30.411623955 CEST	1.1.1.1	192.168.2.4	0x2aea	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:22:30.411623955 CEST	1.1.1.1	192.168.2.4	0x2aea	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:22:58.266493082 CEST	1.1.1.1	192.168.2.4	0x14ee	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:22:58.266493082 CEST	1.1.1.1	192.168.2.4	0x14ee	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:23:11.234232903 CEST	1.1.1.1	192.168.2.4	0xdb3c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:23:11.234232903 CEST	1.1.1.1	192.168.2.4	0xdb3c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:23:16.757231951 CEST	1.1.1.1	192.168.2.4	0x9db3	No error (0)	td.doubleclick.net		172.217.165.194	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:23:16.860238075 CEST	1.1.1.1	192.168.2.4	0x579f	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:23:17.876410961 CEST	1.1.1.1	192.168.2.4	0x530c	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:23:17.876410961 CEST	1.1.1.1	192.168.2.4	0x530c	No error (0)	star-mini.c10r.facebook.com		157.240.14.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:23:20.239300966 CEST	1.1.1.1	192.168.2.4	0xa11b	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:23:20.239300966 CEST	1.1.1.1	192.168.2.4	0xa11b	No error (0)	star-mini.c10r.facebook.com		157.240.14.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:23:20.239635944 CEST	1.1.1.1	192.168.2.4	0x7f0e	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:23:21.829282045 CEST	1.1.1.1	192.168.2.4	0x8ca0	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:23:21.829282045 CEST	1.1.1.1	192.168.2.4	0x8ca0	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:23:21.829282045 CEST	1.1.1.1	192.168.2.4	0x8ca0	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:23:21.829282045 CEST	1.1.1.1	192.168.2.4	0x8ca0	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:23:21.829282045 CEST	1.1.1.1	192.168.2.4	0x8ca0	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:23:21.830627918 CEST	1.1.1.1	192.168.2.4	0xd42d	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

globalgrimmer.com

0bef7y10siuwczdssj39pr-fbx.hop.clickbank.net

www.moonreading.com

fs.microsoft.com

https:

connect.facebook.net

static.cloudflareinsights.com

www.facebook.com

googleads.g.doubleclick.net

td.doubleclick.net

www.google.com

analytics.google.com

stats.g.doubleclick.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	63.250.47.116	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:01 UTC	664	OUT	GET /xxxj HTTP/1.1 Host: globalgrimmer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:01 UTC	215	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 26 Apr 2024 18:22:01 GMT Server: Apache Location: https://globalgrimmer.com/xxxj/ Content-Length: 239 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-04-26 18:22:01 UTC	239	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6c 6f 62 61 6c 67 72 69 6d 6d 65 72 2e 63 6f 6d 2f 78 78 78 6a 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://globalgrimmer.com/xxxj/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	63.250.47.116	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:01 UTC	665	OUT	GET /xxxj/ HTTP/1.1 Host: globalgrimmer.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:02 UTC	324	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 26 Apr 2024 18:22:01 GMT Server: Apache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 location: https://0bef7y10siuwczdssj39pr-fbx.hop.clickbank.net Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	35.80.252.204	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:05 UTC	687	OUT	GET / HTTP/1.1 Host: 0bef7y10siuwczdssj39pr-fbx.hop.clickbank.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:05 UTC	937	IN	HTTP/1.1 307 Temporary Redirect Date: Fri, 26 Apr 2024 18:22:05 GMT Content-Length: 0 Connection: close Accept-CH: Sec-Ch-Ua-Model, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Bitness, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List Location: http://www.moonreading.com/start?hop=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-XSS-Protection: 1 ; mode=block Referrer-Policy: no-referrer Set-Cookie: q=01.8B80029F8EEF642168FD20B396D64A7AA494EFB93803AB00A0A83CA0C659296AD6A27743D4870A870B89EA3823B6D20BA5288FE0; Path=/; Domain=.clickbank.net; Max-Age=31536000; Expires=Sat, 26 Apr 2025 18:22:05 GMT Server-Timing: traceparent;desc="00-ee4a393008a0188e5571894ac2c388a2-02d7a2ed0c43adbd-01" Access-Control-Expose-Headers: Server-Timing

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:07 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 18:22:07 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=45698 Date: Fri, 26 Apr 2024 18:22:07 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49741	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:07 UTC	724	OUT	GET /start?hop=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1 HTTP/1.1 Host: www.moonreading.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:07 UTC	796	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 26 Apr 2024 18:22:07 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Location: http://www.moonreading.com/start/?hop=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ub%2BiPLFRUTVTqKuG%2Ft5xqvqKrpUIPSnrEdGMbh7g77aXdsYQRTPpTvcE1DbcULeT9KTPkDHJntpC%2BJhUFa0nszYMbRh1EqqzpBN3LQhY5G%2BKLhfxrMxuvPPs9rmgGTA6fLyo1ng%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; SameSite=None; Secure; path=/; expires=Sat, 27-Apr-24 17:22:07 GMT; HttpOnly Server: cloudflare CF-RAY: 87a898b0dc096db3-MIA
2024-04-26 18:22:07 UTC	573	IN	Data Raw: 32 33 62 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 73 63 72 69 70 74 20 64 65 66 65 72 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 6c 6f 75 64 66 6c 61 72 65 69 6e 73 69 67 68 74 73 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2e 6d 69 6e 2e 6a 73 2f 76 35 35 Data Ascii: 23b<html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center><script defer src="https://static.cloudflareinsights.com/beacon.min.js/v55
2024-04-26 18:22:07 UTC	5	IN	Data Raw: 3e 0d 0a 0d 0a Data Ascii: >
2024-04-26 18:22:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:08 UTC	787	OUT	GET /start/?hop=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1 HTTP/1.1 Host: www.moonreading.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa
2024-04-26 18:22:09 UTC	928	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:22:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; path=/ set-cookie: moon_id=drag0_bt6u35bplm6i; expires=Wed, 23-Oct-2024 18:22:09 GMT; Max-Age=15552000; path=/; domain=.moonreading.com Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Location: /start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TTievyk62dDmoZK%2FNoCiipnacIuYDZQhJaIMUKaGehNE7MMwB3p81QUdc926Izkjz4N2JjZUO0OGH0rKX55KD9QARqgGyuOwiZBJUhvGx37c6z1GIfpa%2Bz6b3ZVi4zECjvQjRFc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a898ba3c422589-MIA
2024-04-26 18:22:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49744	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:08 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 18:22:09 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DZ+oYgAAAABSxwJpMgMuSLkfS640ajfFQVRBRURHRTEyMTkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=45691 Date: Fri, 26 Apr 2024 18:22:08 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-26 18:22:09 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49745	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:09 UTC	858	OUT	GET /start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1 HTTP/1.1 Host: www.moonreading.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
2024-04-26 18:22:10 UTC	652	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dz0L8QJiTPbkfHBX9lEuSSHqwnwAi6PEf2bfsZQMGYaoqe62b9K4WvVVq8CegruV52BqUAQ8GrgUELCOQLw0vBexNDd5T7EuwweTiBeTa4JhaVCKvF2XJXkq3Y4ebkA9ly7slG8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a898c048158da0-MIA
2024-04-26 18:22:10 UTC	717	IN	Data Raw: 31 35 61 35 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 69 6d 67 2f 6d 6f Data Ascii: 15a5<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><meta name="description" content=""><meta name="author" content=""><link rel="icon" href="/img/mo
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 66 6f 6e 74 73 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 3c 74 69 74 6c 65 3e 52 65 71 75 65 73 74 20 59 6f 75 72 20 46 52 45 45 20 4d 6f 6f 6e 20 52 65 61 64 69 6e 67 21 3c 2f 74 69 74 6c 65 3e 0a 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2d 72 65 62 6f 6f 74 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 69 63 6f 6e 73 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 63 6c 65 61 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 Data Ascii: " crossorigin><link href="/css/fonts.css" rel="stylesheet"><title>Request Your FREE Moon Reading!</title><link href="/css/bootstrap-reboot.min.css" rel="stylesheet"><link href="/css/icons.css" rel="stylesheet"><link href="/css/clean.css" rel="styles
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 31 31 39 32 26 65 76 3d 50 61 67 65 56 69 65 77 26 6e 6f 73 63 72 69 70 74 3d 31 22 0a 2f 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 20 45 6e 64 20 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 43 6f 64 65 20 2d 2d 3e 0a 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 74 61 67 20 28 67 74 61 67 2e 6a 73 29 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 41 57 2d 35 39 30 38 39 37 33 32 37 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0a 20 20 66 75 6e 63 74 69 Data Ascii: 1192&ev=PageView&noscript=1"/></noscript>... End Facebook Pixel Code -->... Google tag (gtag.js) --><script async src="https://www.googletagmanager.com/gtag/js?id=AW-590897327"></script><script> window.dataLayer = window.dataLayer \|\| []; functi
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 6e 3d 6c 65 6f 22 3e 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 74 6e 2d 73 70 6c 61 73 68 20 69 63 6f 2d 6c 65 6f 22 3e 3c 2f 62 75 74 74 6f 6e 3e 4c 65 6f 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 74 6e 2d 73 69 67 6e 22 3e 3c 61 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 32 2f 3f 73 69 67 6e 3d 76 69 72 67 6f 22 3e 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 74 6e 2d 73 70 6c 61 73 68 20 69 63 6f 2d 76 69 72 67 6f 22 3e 3c 2f 62 75 74 74 6f 6e 3e 56 69 72 67 6f 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 74 6e 2d 73 69 67 6e 22 3e 3c 61 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 32 2f 3f 73 69 67 6e 3d 6c 69 62 72 61 22 3e 3c 62 75 74 74 6f Data Ascii: n=leo"><button class="btn btn-splash ico-leo"></button>Leo</a></div> <div class="btn-sign"><a href="/start/2/?sign=virgo"><button class="btn btn-splash ico-virgo"></button>Virgo</a></div> <div class="btn-sign"><a href="/start/2/?sign=libra"><butto
2024-04-26 18:22:10 UTC	725	IN	Data Raw: 74 74 70 73 3a 2f 2f 61 6a 61 78 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 31 2e 31 32 2e 34 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 73 74 7a 2d 31 2e 30 2e 34 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 76 61 72 20 74 7a 20 3d 20 6a 73 74 7a 2e 64 65 74 65 72 6d 69 6e 65 28 29 3b 0a 76 61 72 20 74 69 6d 65 7a 6f 6e 65 20 3d 20 74 7a 2e 6e 61 6d 65 28 29 3b 0a 24 2e 61 6a 61 78 28 7b 0a 20 20 75 72 6c 3a 22 2f 5f 61 70 69 2f 74 69 6d 65 7a 6f 6e 65 2e 70 68 70 3f 74 69 6d 65 7a 6f 6e 65 3d 22 20 2b 20 74 69 6d 65 7a 6f 6e 65 2c 20 20 0a 20 20 73 75 63 63 65 73 73 3a Data Ascii: ttps://ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js"></script><script src="/js/jstz-1.0.4.min.js"></script><script>var tz = jstz.determine();var timezone = tz.name();$.ajax({ url:"/_api/timezone.php?timezone=" + timezone, success:
2024-04-26 18:22:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49747	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:10 UTC	746	OUT	GET /css/fonts.css HTTP/1.1 Host: www.moonreading.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
2024-04-26 18:22:10 UTC	659	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:10 GMT Content-Type: text/css Content-Length: 1846 Connection: close Last-Modified: Sun, 27 Nov 2022 19:36:24 GMT ETag: "6383bc38-736" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6477 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zHwkBJHxo6oZn6b3fCDUTrn1bnrWA1cxfyEoMW%2FGL%2BwCtNzt%2FUKQrApdu%2BZoY%2F9luSxdVcy4ylTlP1PvSFt1c8O0vBh%2Fddv0QwokjwRyJFaKGWb6BVTWHTFotyP3mqCLrSFqRPA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a898c529e56daa-MIA
2024-04-26 18:22:10 UTC	710	IN	Data Raw: 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4c 69 62 72 65 20 42 61 73 6b 65 72 76 69 6c 6c 65 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 63 73 73 2f 6b 6d 4b 69 5a 72 63 33 48 67 62 62 63 6a 71 37 35 55 34 75 73 6c 79 75 79 34 6b 6e 30 71 76 69 54 67 59 33 4b 63 43 2d 77 4c 4f 6a 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d Data Ascii: /* latin */@font-face { font-family: 'Libre Baskerville'; font-style: normal; font-weight: 700; font-display: swap; src: url(/css/kmKiZrc3Hgbbcjq75U4uslyuy4kn0qviTgY3KcC-wLOj.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-
2024-04-26 18:22:10 UTC	1136	IN	Data Raw: 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4e 6f 74 6f 20 53 61 6e 73 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 63 73 73 2f 6f 2d 30 49 49 70 51 6c 78 33 51 55 6c 43 35 41 34 50 4e 72 35 54 52 41 53 66 36 4d 37 51 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 Data Ascii: 2193, U+2212, U+2215, U+FEFF, U+FFFD;}/* latin */@font-face { font-family: 'Noto Sans'; font-style: normal; font-weight: 400; font-display: swap; src: url(/css/o-0IIpQlx3QUlC5A4PNr5TRASf6M7Q.woff2) format('woff2'); unicode-range: U+0000-00F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49748	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:10 UTC	761	OUT	GET /css/bootstrap-reboot.min.css HTTP/1.1 Host: www.moonreading.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
2024-04-26 18:22:10 UTC	653	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:10 GMT Content-Type: text/css Content-Length: 4021 Connection: close Last-Modified: Fri, 06 Sep 2019 11:00:32 GMT ETag: "5d723c50-fb5" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1647 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0IUQPJkYtQphgE1ImDJhbQ%2FFIYeVYv45TaioUSm0WHSqrHt5d8GjjzdJi4AxhJxVOhm%2BgIt4dy9WU5vTTTVTg2KsEBVUvogedXSKplFUCyKLh8ZMI8sbViYuVQKoqW5y0Src%2BKw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a898c52a073dd3-MIA
2024-04-26 18:22:10 UTC	716	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 52 65 62 6f 6f 74 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 20 46 6f 72 6b 65 64 20 66 72 6f 6d 20 4e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 2c 20 6c 69 63 65 6e 73 Data Ascii: /! Bootstrap Reboot v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) * Forked from Normalize.css, licens
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 22 2c 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 22 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 5b 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 5d 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 68 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 68 31 2c 68 32 2c 68 33 2c 68 Data Ascii: egoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-size:1rem;font-weight:400;line-height:1.5;color:#212529;text-align:left;background-color:#fff}[tabindex="-1"]:focus{outline:0!important}hr{box-sizing:content-box;height:0;overflow:visible}h1,h2,h3,h
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 43 6f 75 72 69 65 72 20 4e 65 77 22 2c 6d 6f 6e 6f 73 70 61 63 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 70 72 65 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 66 69 67 75 72 65 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 72 65 6d 7d 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 73 76 67 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 7d 63 61 70 74 69 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 37 35 72 65 6d 3b 70 Data Ascii: Courier New",monospace;font-size:1em}pre{margin-top:0;margin-bottom:1rem;overflow:auto}figure{margin:0 0 1rem}img{vertical-align:middle;border-style:none}svg{overflow:hidden;vertical-align:middle}table{border-collapse:collapse}caption{padding-top:.75rem;p
2024-04-26 18:22:10 UTC	567	IN	Data Raw: 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 7d 70 72 6f 67 72 65 73 73 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 2d 32 70 78 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f Data Ascii: em;font-size:1.5rem;line-height:inherit;color:inherit;white-space:normal}progress{vertical-align:baseline}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{outline-offset:-2px;-webkit-appearance:no

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49750	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:10 UTC	746	OUT	GET /css/icons.css HTTP/1.1 Host: www.moonreading.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
2024-04-26 18:22:10 UTC	659	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:10 GMT Content-Type: text/css Content-Length: 501412 Connection: close Last-Modified: Mon, 28 Mar 2022 20:04:07 GMT ETag: "624214b7-7a6a4" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6477 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tIz%2FW8B%2B%2FKi52omu1upBoJ4IadaP1JdyY%2B2RSSJGf0KAtr3BfpNhfuhM184CDe9nl9BkJdwRiCdjSmwujAAB8abWx5noupm9eJLnSYyWGWjcO7LGDWHJCZtpyqmKUQMBt3tvXE8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a898c52b0fdaf5-MIA
2024-04-26 18:22:10 UTC	710	IN	Data Raw: 2e 69 63 6f 2d 61 71 75 61 72 69 75 73 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 27 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 47 51 41 41 41 42 6b 43 41 4d 41 41 41 42 48 50 47 56 6d 41 41 41 41 47 58 52 46 57 48 52 54 62 32 5a 30 64 32 46 79 5a 51 42 42 5a 47 39 69 5a 53 42 4a 62 57 46 6e 5a 56 4a 6c 59 57 52 35 63 63 6c 6c 50 41 41 41 41 34 4e 70 56 46 68 30 57 45 31 4d 4f 6d 4e 76 62 53 35 68 5a 47 39 69 5a 53 35 34 62 58 41 41 41 41 41 41 41 44 77 2f 65 48 42 68 59 32 74 6c 64 43 42 69 5a 57 64 70 62 6a 30 69 37 37 75 2f 49 69 42 70 5a 44 30 69 56 7a 56 4e 4d 45 31 77 51 32 56 6f 61 55 68 36 63 6d 56 54 65 6b 35 55 59 33 Data Ascii: .ico-aquarius {background-image: url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAGQAAABkCAMAAABHPGVmAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAA4NpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 79 35 68 5a 47 39 69 5a 53 35 6a 62 32 30 76 65 47 46 77 4c 7a 45 75 4d 43 38 69 49 48 68 74 63 45 31 4e 4f 6b 39 79 61 57 64 70 62 6d 46 73 52 47 39 6a 64 57 31 6c 62 6e 52 4a 52 44 30 69 65 47 31 77 4c 6d 52 70 5a 44 6f 7a 4e 6d 46 6a 4d 47 4e 6d 59 79 31 6a 5a 6d 49 7a 4c 54 51 79 59 54 67 74 4f 54 59 7a 4e 79 31 6c 4d 54 5a 6d 5a 44 56 6c 5a 6a 55 79 4e 6d 59 69 49 48 68 74 63 45 31 4e 4f 6b 52 76 59 33 56 74 5a 57 35 30 53 55 51 39 49 6e 68 74 63 43 35 6b 61 57 51 36 4d 6a 41 77 4d 45 55 31 52 55 46 42 4d 30 52 42 4d 54 46 46 51 30 4a 42 52 55 4a 42 51 6a 55 78 51 54 4a 44 4f 44 67 34 52 44 63 69 49 48 68 74 63 45 31 4e 4f 6b 6c 75 63 33 52 68 62 6d 4e 6c 53 55 51 39 49 6e 68 74 63 43 35 70 61 57 51 36 4d 6a 41 77 4d 45 55 31 52 54 6c 42 4d 30 52 42 Data Ascii: y5hZG9iZS5jb20veGFwLzEuMC8iIHhtcE1NOk9yaWdpbmFsRG9jdW1lbnRJRD0ieG1wLmRpZDozNmFjMGNmYy1jZmIzLTQyYTgtOTYzNy1lMTZmZDVlZjUyNmYiIHhtcE1NOkRvY3VtZW50SUQ9InhtcC5kaWQ6MjAwMEU1RUFBM0RBMTFFQ0JBRUJBQjUxQTJDODg4RDciIHhtcE1NOkluc3RhbmNlSUQ9InhtcC5paWQ6MjAwMEU1RTlBM0RB
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 46 51 6f 64 69 6f 30 4c 58 7a 72 4a 4e 77 63 6d 38 73 4b 43 4a 58 62 58 4a 2f 65 6c 59 6c 56 49 73 51 45 51 2f 7a 31 31 6a 7a 31 63 62 68 33 72 4e 74 63 56 58 4a 76 72 43 49 77 73 55 49 55 4b 44 75 79 79 6d 32 7a 61 48 68 6f 49 6e 37 34 32 43 47 79 4e 32 37 75 4a 2f 30 32 63 76 6e 77 61 7a 39 33 39 42 44 54 55 34 72 6e 4b 2f 41 31 2b 39 46 62 58 50 59 31 74 4a 7a 6f 34 31 49 76 63 7a 77 79 37 76 72 37 75 2f 49 32 4d 64 2b 6b 34 54 42 79 34 2f 61 33 6f 78 70 62 58 44 75 37 64 54 2b 36 75 47 66 75 37 30 37 6f 62 49 69 54 6d 50 34 31 63 55 6a 4c 53 2b 38 32 64 7a 53 31 70 54 71 78 67 39 6b 54 6b 54 6c 33 4b 4c 34 30 4c 2f 77 7a 55 50 79 77 72 46 35 51 7a 34 44 63 6f 50 78 7a 38 67 39 77 64 50 39 32 4d 6d 75 73 4b 77 2b 50 54 72 4d 30 34 37 75 38 39 2f 5a 72 Data Ascii: FQodio0LXzrJNwcm8sKCJXbXJ/elYlVIsQEQ/z11jz1cbh3rNtcVXJvrCIwsUIUKDuyym2zaHhoIn742CGyN27uJ/02cvnwaz939BDTU4rnK/A1+9FbXPY1tJzo41Ivczwy7vr7u/I2Md+k4TBy4/a3oxpbXDu7dT+6uGfu707obIiTmP41cUjLS+82dzS1pTqxg9kTkTl3KL40L/wzUPywrF5Qz4DcoPxz8g9wdP92MmusKw+PTrM047u89/Zr
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 69 30 33 62 61 76 5a 6b 38 2f 45 4e 31 72 78 67 6b 69 65 78 57 54 61 57 6e 70 71 5a 43 65 6d 7a 39 70 72 75 31 6f 5a 7a 59 64 6f 4b 78 65 45 52 39 35 58 4c 76 5a 4e 31 33 32 2f 4b 4b 78 48 67 77 67 79 43 6f 45 6a 6b 37 4f 30 2f 6c 32 48 72 77 30 72 42 59 37 42 31 54 55 39 75 65 6d 63 55 69 74 78 67 2f 62 6e 4f 50 42 4e 38 4e 79 6b 34 52 4b 34 52 4e 5a 43 6e 44 4e 64 30 35 76 53 6e 2b 73 78 34 6f 31 41 69 4c 39 51 77 79 44 51 2b 53 4c 68 5a 52 4e 2b 38 4b 70 68 65 4b 56 77 65 56 44 55 44 77 4d 70 62 77 4a 75 35 6d 4f 71 70 4a 6e 58 47 77 64 30 52 56 5a 49 36 74 38 62 41 4e 50 38 5a 59 4a 49 4c 6f 2b 75 70 75 5a 79 53 41 37 4b 53 73 46 47 2f 36 57 69 67 69 50 68 65 68 55 42 73 67 47 53 61 4e 36 4e 41 4d 49 46 2f 55 64 65 47 66 59 42 61 4a 4e 4d 65 66 74 73 Data Ascii: i03bavZk8/EN1rxgkiexWTaWnpqZCemz9pru1oZzYdoKxeER95XLvZN132/KKxHgwgyCoEjk7O0/l2Hrw0rBY7B1TU9uemcUitxg/bnOPBN8Nyk4RK4RNZCnDNd05vSn+sx4o1AiL9QwyDQ+SLhZRN+8KpheKVweVDUDwMpbwJu5mOqpJnXGwd0RVZI6t8bANP8ZYJILo+upuZySA7KSsFG/6WigiPhehUBsgGSaN6NAMIF/UdeGfYBaJNMefts
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 2b 68 35 4f 38 31 79 47 53 33 50 36 4f 67 4e 6a 39 66 49 76 78 57 43 38 4e 6b 4e 66 66 2f 33 31 70 69 77 63 6d 43 31 45 6f 57 36 48 58 70 68 4b 57 33 4c 71 61 75 2b 68 64 34 61 48 64 37 54 42 4a 48 6f 56 33 44 59 6a 58 53 72 65 65 43 4f 61 59 78 59 61 69 75 36 36 4f 54 57 46 68 2b 42 6b 54 6d 4b 49 72 39 49 4b 38 39 4e 66 78 6d 2b 77 69 4a 72 6e 51 71 45 43 37 39 51 45 75 53 6c 4b 54 2b 2f 77 4e 59 37 37 72 2f 4f 35 7a 32 71 2f 32 6a 62 38 51 32 46 2f 36 65 39 58 71 62 2b 7a 43 6a 64 44 6c 65 69 2b 50 6c 2b 67 6a 59 63 61 32 79 73 71 78 65 4a 61 56 2f 52 34 58 37 7a 2f 79 38 64 64 56 52 33 7a 59 31 43 6b 65 59 68 4b 54 30 2b 2f 30 67 69 79 79 63 33 33 72 6a 76 39 41 34 44 6b 65 65 66 32 7a 2b 68 64 51 64 71 51 6f 65 4f 68 47 78 37 5a 54 34 48 33 4f 47 63 Data Ascii: +h5O81yGS3P6OgNj9fIvxWC8NkNff/31piwcmC1EoW6HXphKW3Lqau+hd4aHd7TBJHoV3DYjXSreeCOaYxYaiu66OTWFh+BkTmKIr9IK89Nfxm+wiJrnQqEC79QEuSlKT+/wNY77r/O5z2q/2jb8Q2F/6e9Xqb+zCjdDlei+Pl+gjYca2ysqxeJaV/R4X7z/y8ddVR3zY1CkeYhKT0+/0giyyc33rjv9A4Dkeef2z+hdQdqQoeOhGx7ZT4H3OGc
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 56 37 67 76 72 39 5a 6e 51 77 4a 72 45 36 49 6a 6f 35 2b 61 70 48 74 4f 6f 65 67 78 50 71 64 66 6d 30 49 70 61 55 7a 72 51 6b 4a 61 39 61 55 49 38 73 45 46 67 4f 6a 4f 6d 4f 70 72 74 33 72 6a 70 70 58 59 46 61 42 4e 4b 42 77 53 52 34 45 78 74 37 51 30 4e 4e 75 56 34 31 75 2f 55 65 42 34 48 6f 68 6c 50 4c 53 74 57 75 52 64 6f 4e 72 37 4a 44 4d 4d 6b 63 48 62 61 72 57 36 34 77 6e 45 65 74 58 42 70 77 39 74 30 71 48 6d 4c 4d 50 2b 78 38 4f 43 66 52 33 69 49 36 78 69 4c 47 49 37 6e 62 56 42 65 4b 4d 41 69 50 30 51 69 36 35 66 43 42 66 6b 31 41 7a 61 4a 66 43 74 47 41 4b 56 72 35 4f 31 5a 4d 41 4f 38 2b 45 42 4b 35 6b 2b 66 62 74 35 31 59 41 69 6b 75 73 50 31 43 42 39 61 39 63 43 51 51 36 4d 50 41 72 6b 71 59 58 51 69 4c 41 31 6d 4b 66 31 69 53 6b 4d 4b 4f 5a Data Ascii: V7gvr9ZnQwJrE6Ijo5+apHtOoegxPqdfm0IpaUzrQkJa9aUI8sEFgOjOmOprt3rjppXYFaBNKBwSR4Ext7Q0NNuV41u/UeB4HohlPLStWuRdoNr7JDMMkcHbarW64wnEetXBpw9t0qHmLMP+x8OCfR3iI6xiLGI7nbVBeKMAiP0Qi65fCBfk1AzaJfCtGAKVr5O1ZMAO8+EBK5k+fbt51YAikusP1CB9a9cCQQ6MPArkqYXQiLA1mKf1iSkMKOZ
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 72 48 70 34 73 74 41 61 53 4b 35 58 70 54 42 73 54 31 7a 32 77 42 52 6c 2f 66 48 31 31 37 36 42 55 50 4c 39 6e 4b 48 78 68 63 57 79 4f 6d 4c 37 7a 61 55 37 2f 68 30 57 32 52 36 4b 48 32 37 67 4c 6c 62 4c 2b 6e 6a 33 4e 68 4f 74 49 51 72 33 4f 59 62 30 31 4d 4a 4e 59 72 74 6c 36 45 6a 71 4e 44 66 66 73 53 58 31 32 6f 72 39 38 44 34 55 78 50 54 33 4d 34 78 64 4e 39 55 49 4d 38 5a 72 49 44 41 35 50 48 76 6f 7a 61 53 71 42 5a 51 53 2b 70 75 71 43 38 38 66 46 32 37 66 56 46 6e 79 39 36 50 4c 52 65 4f 57 4d 51 68 50 70 74 53 50 4b 59 39 62 6b 7a 6d 4f 54 4e 6e 5a 66 6b 63 4e 4b 49 79 71 6f 36 74 6b 75 71 56 68 5a 50 6d 36 47 56 6b 34 5a 35 2b 34 31 4d 44 76 77 57 75 6e 31 72 41 43 30 73 4c 46 69 6c 65 36 43 4e 33 52 7a 57 43 2f 53 45 46 35 56 43 6c 78 76 6f 67 Data Ascii: rHp4stAaSK5XpTBsT1z2wBRl/fH1176BUPL9nKHxhcWyOmL7zaU7/h0W2R6KH27gLlbL+nj3NhOtIQr3OYb01MJNYrtl6EjqNDffsSX12or98D4UxPT3M4xdN9UIM8ZrIDA5PHvozaSqBZQS+puqC88fF27fVFny96PLReOWMQhPptSPKY9bkzmOTNnZfkcNKIyqo6tkuqVhZPm6GVk4Z5+41MDvwWun1rAC0sLFile6CN3RzWC/SEF5VClxvog
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 58 51 39 49 69 49 67 65 47 31 73 62 6e 4d 36 65 47 31 77 54 55 30 39 49 6d 68 30 64 48 41 36 4c 79 39 75 63 79 35 68 5a 47 39 69 5a 53 35 6a 62 32 30 76 65 47 46 77 4c 7a 45 75 4d 43 39 74 62 53 38 69 49 48 68 74 62 47 35 7a 4f 6e 4e 30 55 6d 56 6d 50 53 4a 6f 64 48 52 77 4f 69 38 76 62 6e 4d 75 59 57 52 76 59 6d 55 75 59 32 39 74 4c 33 68 68 63 43 38 78 4c 6a 41 76 63 31 52 35 63 47 55 76 55 6d 56 7a 62 33 56 79 59 32 56 53 5a 57 59 6a 49 69 42 34 62 57 78 75 63 7a 70 34 62 58 41 39 49 6d 68 30 64 48 41 36 4c 79 39 75 63 79 35 68 5a 47 39 69 5a 53 35 6a 62 32 30 76 65 47 46 77 4c 7a 45 75 4d 43 38 69 49 48 68 74 63 45 31 4e 4f 6b 39 79 61 57 64 70 62 6d 46 73 52 47 39 6a 64 57 31 6c 62 6e 52 4a 52 44 30 69 65 47 31 77 4c 6d 52 70 5a 44 6f 7a 4e 6d 46 6a Data Ascii: XQ9IiIgeG1sbnM6eG1wTU09Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC9tbS8iIHhtbG5zOnN0UmVmPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvc1R5cGUvUmVzb3VyY2VSZWYjIiB4bWxuczp4bXA9Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC8iIHhtcE1NOk9yaWdpbmFsRG9jdW1lbnRJRD0ieG1wLmRpZDozNmFj
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 69 32 6a 37 39 35 6c 37 39 54 4f 6c 31 77 52 49 46 64 50 47 65 53 62 4a 72 75 6b 62 79 6a 67 62 75 55 6f 63 6e 41 56 49 6d 4c 63 37 4b 2b 64 36 46 30 55 32 65 6d 67 4c 50 6b 32 4d 55 65 47 69 47 58 5a 34 61 77 6a 4a 32 54 63 6f 58 73 39 50 79 65 65 4a 45 30 49 53 36 6a 71 74 4b 70 66 37 6e 54 67 4b 37 4a 77 4e 76 38 39 50 6e 4b 57 5a 6d 6f 64 37 53 39 62 61 57 57 63 4b 78 36 5a 33 37 47 54 59 69 32 6d 72 43 6b 6c 73 46 39 6b 61 46 41 56 56 6f 67 4e 7a 63 2b 4b 30 59 45 45 78 46 68 6c 36 74 7a 52 59 69 65 69 71 73 67 45 68 31 69 61 48 6d 64 66 4c 68 76 76 39 56 32 52 56 30 52 44 68 4a 53 51 6b 35 7a 53 49 66 4c 66 61 52 54 65 34 57 61 6e 70 75 4d 71 39 6d 76 68 37 70 39 72 73 31 73 64 33 46 61 71 4c 64 32 72 73 6a 62 6b 62 37 61 55 70 4f 54 6b 4c 2b 49 65 Data Ascii: i2j795l79TOl1wRIFdPGeSbJrukbyjgbuUocnAVImLc7K+d6F0U2emgLPk2MUeGiGXZ4awjJ2TcoXs9PyeeJE0IS6jqtKpf7nTgK7JwNv89PnKWZmod7S9baWWcKx6Z37GTYi2mrCklsF9kaFAVVogNzc+K0YEExFhl6tzRYieiqsgEh1iaHmdfLhvv9V2RV0RDhJSQk5zSIfLfaRTe4WanpuMq9mvh7p9rs1sd3FaqLd2rsjbkb7aUpOTkL+Ie
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 34 68 6a 63 72 68 43 36 69 44 41 6a 56 4d 69 56 41 62 76 59 44 6d 54 51 68 35 50 76 71 43 53 42 2b 63 54 51 58 47 74 75 59 72 67 30 32 54 37 75 6f 71 56 35 56 53 58 2f 6e 48 54 71 6e 30 77 39 71 74 6c 45 70 6b 6c 42 5a 68 5a 43 53 42 73 4c 78 35 64 57 42 4b 74 38 4d 57 64 44 30 64 4d 67 51 33 38 57 6c 6e 62 59 6d 46 4b 37 59 49 52 33 76 4b 52 66 31 6c 37 2b 2f 2b 6a 73 48 68 7a 66 6d 7a 48 6d 7a 45 72 4d 64 36 56 73 51 51 6b 66 55 2f 6c 59 43 7a 50 53 70 68 72 55 31 69 6c 52 36 31 39 4d 68 66 59 32 30 39 6d 55 75 74 4d 62 4f 67 47 61 55 48 66 44 62 31 7a 51 33 66 73 65 61 6b 37 54 54 4c 6d 70 6e 55 71 72 69 69 43 51 67 58 4b 46 51 53 51 73 6f 49 73 79 63 5a 46 76 51 47 2f 4a 6d 2f 51 53 4c 6b 52 64 48 57 37 61 73 6e 55 5a 4c 55 43 57 63 45 69 4e 33 52 30 Data Ascii: 4hjcrhC6iDAjVMiVAbvYDmTQh5PvqCSB+cTQXGtuYrg02T7uoqV5VSX/nHTqn0w9qtlEpklBZhZCSBsLx5dWBKt8MWdD0dMgQ38WlnbYmFK7YIR3vKRf1l7+/+jsHhzfmzHmzErMd6VsQQkfU/lYCzPSphrU1ilR619MhfY209mUutMbOgGaUHfDb1zQ3fseak7TTLmpnUqriiCQgXKFQSQsoIsycZFvQG/Jm/QSLkRdHW7asnUZLUCWcEiN3R0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49746	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:10 UTC	746	OUT	GET /css/clean.css HTTP/1.1 Host: www.moonreading.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
2024-04-26 18:22:10 UTC	661	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:10 GMT Content-Type: text/css Content-Length: 10860 Connection: close Last-Modified: Sun, 27 Nov 2022 20:42:19 GMT ETag: "6383cbab-2a6c" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6477 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TIKk5PiDhgdNScUNYVQP%2BUkgUdya%2F7wlIgdHQ32wxcT%2FmedD%2BPZoYbVWokA4NfUracwYaczYWzZuGByKEMLv5d3Tw61jB0XOOJ1K6MEawikFiD13Pi%2BpPmp%2FzRkplX6iVIFDOl4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a898c52eac74be-MIA
2024-04-26 18:22:10 UTC	708	IN	Data Raw: 2e 62 67 2d 67 72 65 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 32 66 32 66 37 3b 0a 7d 0a 0a 2e 62 67 2d 73 6b 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 30 65 36 66 34 3b 0a 7d 0a 0a 2e 74 6f 70 20 2e 74 69 74 6c 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4c 69 62 72 65 20 42 61 73 6b 65 72 76 69 6c 6c 65 27 2c 20 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 32 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 33 38 70 78 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 68 31 20 7b 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4c 69 62 72 65 20 42 61 73 6b 65 72 76 69 6c 6c 65 27 2c 20 73 65 72 69 66 3b 0a 7d 0a Data Ascii: .bg-grey { background-color: #f2f2f7;}.bg-sky { background-color: #e0e6f4;}.top .title { font-family: 'Libre Baskerville', serif; font-size: 22px; margin-top: -38px; text-align: center;}h1 {font-family: 'Libre Baskerville', serif;}
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 36 70 78 3b 0a 7d 0a 0a 2e 73 70 6c 61 73 68 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 30 65 36 66 34 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 27 2f 69 6d 67 2f 62 67 2d 77 61 76 65 77 68 69 74 65 2e 70 6e 67 27 29 3b 20 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 31 30 30 25 3b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 30 25 3b 0a 7d 0a 0a 2e 73 70 6c 61 73 68 20 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 77 65 69 Data Ascii: padding: 16px;}.splash { background-color: #e0e6f4; background-repeat: no-repeat; background-position: bottom center; background-image: url('/img/bg-wavewhite.png'); background-size: 100%; padding-bottom: 10%;}.splash h1 { font-wei
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 36 6c 32 2e 30 39 34 20 32 2e 30 39 33 20 33 2e 34 37 33 2d 34 2e 34 32 35 61 2e 32 36 37 2e 32 36 37 20 30 20 30 20 31 20 2e 30 32 2d 2e 30 32 32 7a 27 2f 25 33 45 25 33 43 2f 73 76 67 25 33 45 22 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 20 2f 20 31 30 30 25 20 61 75 74 6f 3b 0a 7d 0a 0a 2e 63 74 61 2c 20 2e 63 74 61 2d 63 6c 65 61 72 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 20 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 31 36 30 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 20 34 30 70 78 3b 0a 7d 0a Data Ascii: 6l2.094 2.093 3.473-4.425a.267.267 0 0 1 .02-.022z'/%3E%3C/svg%3E") no-repeat center center / 100% auto;}.cta, .cta-clear { cursor: pointer; position: relative; font-size: 18px; min-width: 160px; border-radius: 15px; padding: 20px 40px;}
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 69 6e 3a 20 35 70 78 20 32 70 78 3b 0a 7d 0a 0a 2e 62 74 6e 2d 73 70 6c 61 73 68 20 7b 0a 20 20 77 69 64 74 68 3a 20 37 35 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 37 35 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 35 35 70 78 20 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 38 70 78 20 34 70 78 20 31 70 78 20 34 70 78 3b 0a 7d 0a 0a 62 75 74 74 6f 6e 3a 66 6f 63 75 73 20 7b 20 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 62 74 6e 3a 68 6f 76 65 72 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 Data Ascii: in: 5px 2px;}.btn-splash { width: 75px; height: 75px; background-color: #ffffff; background-position: center center; background-size: 55px 55px; margin: 8px 4px 1px 4px;}button:focus { outline: 0 !important;}.btn:hover { border-c
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 20 70 6f 69 6e 74 65 72 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 39 65 39 65 39 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 38 70 78 20 31 32 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 72 65 6d 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 31 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 74 6f 70 2c 20 23 66 39 66 39 66 39 2c 20 23 66 66 66 20 33 33 25 29 3b 0a 7d 0a 0a 2e 63 68 65 63 6b 62 6f 78 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 31 35 70 78 20 61 75 74 6f 3b 0a 20 20 Data Ascii: pointer; font-size: 16px; background-color: #e9e9e9; padding: 18px 12px; font-size: 1rem; cursor: pointer; line-height: 1.1; background-image: linear-gradient(to top, #f9f9f9, #fff 33%);}.checkbox { width: 100%; margin: 15px auto;
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 6f 78 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 3a 66 6f 63 75 73 20 2b 20 6c 61 62 65 6c 3a 3a 62 65 66 6f 72 65 20 7b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 7d 0a 0a 2e 68 69 64 64 65 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 62 69 72 74 68 64 61 79 2d 70 61 6e 65 6c 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 34 35 30 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 7d 0a 20 Data Ascii: ox input[type=checkbox]:focus + label::before { outline: 0;}.hidden { display: none;}.birthday-panel { display: flex; flex-wrap: wrap; justify-content: center; text-align: center; width: 100%; max-width: 450px; margin: 0 auto; }
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 6e 67 3a 20 31 32 70 78 20 31 38 70 78 3b 0a 20 77 69 64 74 68 3a 20 31 32 25 3b 0a 20 6d 61 72 67 69 6e 3a 20 31 25 3b 0a 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 7d 0a 0a 2e 62 70 61 6e 2d 64 61 79 20 7b 0a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 63 6f 6c 6f 72 3a 20 23 32 32 32 32 32 32 3b 0a 7d 0a 0a 2e 62 70 61 6e 2d 64 61 79 2c 20 2e 62 70 61 6e 2d 62 6c 61 6e 6b 20 7b 0a 20 77 69 64 74 68 3a 20 31 32 25 3b 0a 20 6d 61 72 67 69 6e 3a 20 31 25 3b 0a 7d 0a 0a 2e 62 70 61 6e 2d 64 61 79 2c 20 2e 62 70 61 6e 2d 64 65 63 61 64 65 2c 20 2e 62 70 61 6e 2d 79 65 61 72 20 7b 0a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a Data Ascii: ng: 12px 18px; width: 12%; margin: 1%; justify-content: center; font-size: 18px;}.bpan-day { background-color: #fff; color: #222222;}.bpan-day, .bpan-blank { width: 12%; margin: 1%;}.bpan-day, .bpan-decade, .bpan-year { background-color:
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 30 65 36 66 34 3b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 6d 6f 6f 6e 2d 66 6c 69 70 20 32 73 20 31 73 20 73 74 65 70 73 28 32 29 20 69 6e 66 69 6e 69 74 65 20 61 6c 74 65 72 6e 61 74 65 3b 0a 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 6d 6f 6f 6e 2d 66 6c 69 70 20 32 73 20 31 73 20 73 74 65 70 73 28 32 29 20 69 6e 66 69 6e 69 74 65 20 61 6c 74 65 72 6e 61 74 65 3b 0a 7d 0a 0a 2e 64 69 73 63 20 7b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 2d 73 74 79 6c 65 3a 20 70 72 65 73 65 72 76 65 2d 33 64 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 Data Ascii: 0; background-color: #e0e6f4; width: 50%; height: 100%; -webkit-animation: moon-flip 2s 1s steps(2) infinite alternate; animation: moon-flip 2s 1s steps(2) infinite alternate;}.disc { transform-style: preserve-3d; width: 100%; h
2024-04-26 18:22:10 UTC	569	IN	Data Raw: 65 79 66 72 61 6d 65 73 20 6d 6f 6f 6e 70 72 6f 67 72 65 73 73 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 30 25 3b 0a 20 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 7d 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 30 30 70 78 29 20 7b 0a 20 20 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 38 65 6d 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 65 6d 3b 0a 20 20 7d 0a 0a 20 20 68 32 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 34 65 6d 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 65 6d 3b 0a 20 20 7d 0a 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 33 37 30 70 78 29 Data Ascii: eyframes moonprogress { 0% { width: 0%; } 100% { width: 100%; }}@media (max-width: 600px) { h1 { font-size: 1.8em; line-height: 1.4em; } h2 { font-size: 1.4em; line-height: 1.4em; }}@media (max-width: 370px)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49751	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:10 UTC	805	OUT	GET /css/kmKiZrc3Hgbbcjq75U4uslyuy4kn0qviTgY3KcC-wLOj.woff2 HTTP/1.1 Host: www.moonreading.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.moonreading.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
2024-04-26 18:22:10 UTC	677	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:10 GMT Content-Type: application/octet-stream Content-Length: 17920 Connection: close Last-Modified: Fri, 11 Nov 2022 12:54:13 GMT ETag: "636e45f5-4600" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6477 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PsIJVaoNHZyChw9fTC5H0ewT%2FL8%2FCNFPv%2BXilpW3yLbwe2jfMOGQsvRRGxccwjlcW4ePDq0Z7Nk2jKbX%2FJ6KZncNs70DQV2RGuxKOl2wBIyu6znJVDCC1H%2F%2FO5EkhKNpQcSPoGI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a898c53ee95c5f-MIA
2024-04-26 18:22:10 UTC	692	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 46 00 00 0d 00 00 00 00 ca 3c 00 00 45 a9 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b ef 00 1c 83 42 06 60 00 84 5a 11 08 0a 82 81 3c 81 cd 33 0b 83 62 00 01 36 02 24 03 87 40 04 20 05 87 2e 07 85 49 1b 67 ad 25 d3 6d 46 07 dd 01 7e 42 55 4b ce 28 ca 16 eb 06 47 51 31 7a 4d f2 ff 1f 93 1b 63 60 8e 78 6f 4f e2 42 c1 36 bb 7d 07 ae 85 9d fd d0 16 1e bc eb 1d 2b 6f 62 c7 95 66 85 52 a8 15 87 d3 d1 99 a2 12 7d 10 86 db 87 7e 94 c5 b7 a7 1b 4d 42 69 f0 aa f0 7f de a2 5e 38 d7 dd f9 7b 45 ca ba b3 a4 44 2b 3a 10 5c 74 84 c6 3e c9 e5 89 b8 c4 7f bb 77 69 75 3c e3 e9 c4 19 0f 57 6e 60 01 aa 18 e0 8c 87 03 52 da ff 64 77 9f 5e 7f 52 53 cc bb 4a f8 30 da 8b 56 d1 6c 84 45 9d 92 56 07 14 56 d8 49 81 dc 14 Data Ascii: wOF2F<EB`Z<3b6$@ .Ig%mF~BUK(GQ1zMc`xoOB6}+obfR}~MBi^8{ED+:\t>wiu<Wn`Rdw^RSJ0VlEVVI
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: df 3d aa a0 93 b4 d7 ea 48 f8 6d 57 e3 fe 20 73 2a 65 ed 27 82 44 93 18 89 41 c3 d6 7a da 52 f5 2d 09 de 19 91 ea fb 0f 40 fd b7 4d 19 cd bb a2 c5 38 38 d6 a6 d3 30 02 5f 49 50 e6 b5 56 b5 43 c9 84 e8 8f 0d 00 72 31 66 3c ec b3 a1 22 e6 23 94 74 00 ca ba ae 55 26 a0 18 61 a2 00 ca ce 6b 57 74 99 aa 37 cb 06 3a 05 08 ae d9 4b a8 22 44 2a bb da b8 e1 e2 39 ff fb 43 fe ea df ff fc af 82 64 3d 38 b3 f7 8f f6 44 fd 1b 06 06 d7 d0 36 95 15 87 af 2f 5c 1a 87 76 e8 c2 c4 86 18 b8 3c d7 93 f3 08 0d 88 f1 dc 3d 83 3c 4b 92 c4 49 d8 44 ea 33 a1 a6 8a 7e 8f ed 0d c9 24 e0 1c 71 4d 4e 13 96 41 13 77 0c ee 22 cb 92 4d 40 16 b8 9c ec 8e 01 09 c6 02 bb 48 6d 55 b5 b5 81 8d 0b d9 0e 13 bd a4 df f2 87 c4 06 70 f7 e9 1d ce cb 2d 35 a8 68 a9 0f 09 70 9a 03 48 9c c9 52 4b de Data Ascii: =HmW se'DAzR-@M880_IPVCr1f<"#tU&akWt7:K"D9Cd=8D6/\v<=<KID3~$qMNAw"M@HmUp-5hpHRK
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 13 09 12 9c 61 f8 fd 0a cf a1 20 ac 38 b9 6f a1 39 43 3b 84 19 57 fe 52 db d5 a8 06 34 d9 a1 b2 95 85 74 74 1a 71 58 28 71 ca 4d 32 86 6e 8d 56 aa 58 59 ea 8d b7 4f b4 0f 4c 90 75 bc f2 8a 85 1d f2 df 91 07 f2 40 5d ab 53 58 35 89 08 88 05 cd 33 74 e1 31 20 75 06 f2 16 97 5e c2 be 8b d6 7a c8 5b 13 fe a0 41 ad 2c ec 9a e5 12 f5 04 9d 06 69 a1 68 2d d3 3f ab f8 a3 54 c7 23 b7 c2 ae 13 ee 2c d4 9c f9 a1 a3 7d 3e 4c 15 2a 42 77 2e e5 09 21 cf be c7 c2 87 ec 0e 19 9e 2d 33 ff 21 8a 6e 71 91 e3 a8 bd ad 6f 53 61 34 34 d2 f2 f9 84 ab 89 e7 7d 61 5b 46 4d d8 fa 87 04 53 80 cf a7 b4 7b 1f 2e 05 d4 ca 18 41 b6 97 09 5b a1 26 f3 70 ff 6a 24 ab f8 e6 ce de ee ea 0d 9f d1 cc a5 45 c1 e1 91 a6 98 f7 79 dd 4a ba 33 50 c6 37 73 82 49 a7 30 0d 40 7a c0 46 a3 d0 cc 1b ea Data Ascii: a 8o9C;WR4ttqX(qM2nVXYOLu@]SX53t1 u^z[A,ih-?T#,}>L*Bw.!-3!nqoSa44}a[FMS{.A[&pj$EyJ3P7sI0@zF
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: a2 3d b2 a8 7d 49 a9 f8 e5 44 bc e1 64 53 b2 bd dc 77 70 bc 3e 55 9f 8e cf 8c 9f 84 70 43 f9 70 be 38 45 c1 cc a9 2d 7a 4f 32 57 c4 fa 64 22 d9 50 6e aa 22 51 73 7a ac e8 e8 db 13 a3 0d f1 a6 0c 85 de 8a fa 89 b9 a1 1a 40 00 01 59 9c e9 3f 3f 9e 34 61 46 8f c7 42 18 c5 51 18 45 a2 ef 61 a0 c0 e0 c8 c5 e3 b0 aa e3 06 e3 15 c5 0f 2f a0 4f 36 8f 22 2c 6f 71 c0 51 23 c5 a6 1e 49 04 05 2d 3d a4 d1 f1 58 ba f7 bb 8b a8 e0 a8 d0 14 a2 e9 1b 98 89 12 39 8a 43 92 9e a2 70 ef 15 a3 f5 f8 88 d6 91 8b 08 c1 5a eb 80 3e 96 b0 aa 60 a2 87 41 90 09 14 50 7f 08 32 3e ab 8b b2 25 cd 08 25 78 e0 26 0a d9 d0 95 4d f5 5d 08 20 85 42 99 e1 bd 91 8c 84 64 94 13 63 c5 78 99 b5 28 bf 47 de 58 b2 33 46 18 62 2d 8c 40 8e d7 d6 b2 e9 5f 8f e4 76 86 50 8c c6 63 f9 04 b4 0d 24 f6 0e Data Ascii: =}IDdSwp>UpCp8E-zO2Wd"Pn"Qsz@Y??4aFBQEa/O6",oqQ#I-=X9CpZ>`AP2>%%x&M] Bdcx(GX3Fb-@_vPc$
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: c5 27 fc 25 00 ef 92 ba 16 4a 06 c1 f3 1f fc d2 01 e4 df 46 86 4f 8f 83 be 46 7b 63 15 cc 0b d2 8a c8 e2 0a fd ad 81 70 93 8b 13 78 f3 37 f3 58 73 2f fd c7 0f 8a af 19 8a 02 d8 b4 16 7e cb 27 12 66 cd b1 52 ab 18 63 9d 2b ed 47 1c 0d fc 92 58 f4 3d be 2a 8d 3b c5 f5 a8 00 44 07 aa 76 42 23 8f 5a 29 4b d4 9a 3a 13 d3 e1 be 47 b8 f9 32 f6 b5 76 bc 12 ba b5 73 85 e9 87 7c bc a6 4e 39 69 29 dc d0 fe 1d 5f e4 56 86 39 58 8b 31 6c 13 cc 67 33 1d 51 90 d2 b7 d2 40 1c e9 26 9d 9f 16 00 c7 8f 43 1d 32 bd c6 05 f8 0e f5 98 d4 ed c3 2d 20 37 c1 87 3f ab d9 cc c6 8c 43 87 a6 ac 98 3b 92 7d 8d a5 a7 83 b3 4d b3 1d 87 6d 5b 3e 07 5a 29 1e 3c 15 61 d5 d2 da 5d 34 8c a2 09 e0 22 e2 04 f8 36 6d 5b 92 5a 2d 70 e5 20 b7 5d 0e 3f a4 bf 88 c3 17 f9 2c 6f c6 9f f2 ad bc 9e 30 Data Ascii: '%JFOF{cpx7Xs/~'fRc+GX=*;DvB#Z)K:G2vs\|N9i)_V9X1lg3Q@&C2- 7?C;}Mm[>Z)<a]4"6m[Z-p ]?,o0
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 67 02 c9 11 80 36 13 33 b4 9b 29 9e 5d b6 af ee 42 75 cb 0f d5 80 bf d9 61 ff 52 5d 20 89 fc 42 d5 1b fc 2d c5 13 6f 21 71 30 1a 05 d7 ec 12 14 26 fa 96 05 98 db 95 8d d9 f2 71 60 13 13 2e 9f cf 38 ff 5f 1e 74 09 0a 41 a0 0d df ac d1 ec 94 c4 7a 2c e2 f6 0b 36 5d f6 ab 55 ce 5f 90 42 32 2b 1e 09 b2 6b bb af ee 20 7a cc 53 93 11 b8 0b 98 76 d4 90 09 ed 15 97 e3 26 64 9c 71 28 67 09 dd 6e a2 aa de 94 f0 f3 e2 08 02 fa 0c 8b f4 5c 51 41 a3 5a 51 a5 61 ca b5 7a 43 df 4b e1 69 ce ea c8 0a 5f eb 2e 93 38 37 15 31 85 84 d0 6d 6c 38 4b 2c 63 93 44 fa 31 02 c0 c3 3a 96 ef 89 b7 b0 69 23 5c 3f 29 8c 45 77 64 01 4d 73 91 8a 99 84 31 c5 4d 31 d4 0e 13 e6 67 43 00 e6 ce 15 86 78 31 e2 84 15 e3 57 29 e6 cd a1 7b 7d 3b c9 76 6e 86 aa 54 ff 30 0d a1 35 9d 59 73 c7 44 3f Data Ascii: g63)]BuaR] B-o!q0&q`.8_tAz,6]U_B2+k zSv&dq(gn\QAZQazCKi_.871ml8K,cD1:i#\?)EwdMs1M1gCx1W){};vnT05YsD?
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 18 36 0e 32 a0 16 21 10 de d1 ee 60 55 7d 7c ed 92 d7 bb f4 a2 59 d1 f1 90 aa 6d 5b 9c 36 5e ce 0b cc 17 d6 87 c2 a9 fa 85 e1 e5 12 6b 8b d3 05 02 70 16 ce 4c 57 ac 69 6e 04 22 ab 28 61 9c a7 23 4a ac fd 6d af 1a 05 c4 88 e8 9b d5 e8 6f 58 4a e0 54 91 f5 28 92 4c cd 87 7a bd 1e 8b 98 bb 50 d9 34 0e bb ca 52 b2 a9 8c ac 66 03 7e 91 3e eb 0e df 94 fa 45 4a 0c 57 a9 a2 39 3a 3c b8 70 5d a3 83 27 c7 25 8f 02 10 66 6c e9 8d 7a 32 8e 52 e5 c9 8c 42 aa e8 f9 be 14 3b c0 e1 35 24 1c 7e e5 50 9d ca 77 2c 33 39 8d fc 48 25 d9 d7 0b ec be d2 49 3f 20 6b da 20 60 b4 ec 5d e5 5f d5 8e 82 ea ff 21 6d 1e 81 ce bc 42 41 39 14 e3 3f 5d 2b 01 c6 50 fb 17 28 02 ab 0d 5a 8c af 90 0c 27 05 0c 2b d7 f1 bb 80 62 86 87 e9 57 ad ed be e2 25 46 3f 99 d9 47 3f a1 a7 76 38 a6 7f c5 Data Ascii: 62!`U}\|Ym[6^kpLWin"(a#JmoXJT(LzP4Rf~>EJW9:<p]'%flz2RB;5$~Pw,39H%I? k `]_!mBA9?]+P(Z'+bW%F?G?v8
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: a5 37 20 0b 74 4a 2a 2d 96 f4 5b e0 5e a5 72 49 c2 4d aa e0 a4 38 aa 00 81 2a 52 19 ed e9 82 17 11 74 af 7d 1c 7e fd a3 9e 82 4c d0 24 44 2d 11 0f e9 31 ae 1d 07 f8 bc 5b b8 c1 8b 5c 30 39 0d 4a a4 41 37 a1 a7 1a 5b 58 8a 56 39 9b f6 94 2e 3d 8f 41 17 22 d6 96 aa cc a1 78 ff f6 d0 7b b2 c4 48 da 4d e8 31 b3 36 36 18 6f f9 ed 97 5a f0 cb 36 59 3a aa f9 25 6f c4 53 03 92 09 6b 9a 89 3d 7b c8 d3 14 f1 94 b8 15 f1 22 20 36 56 15 6f 60 e7 aa 27 e4 89 6f b6 1b af 08 69 40 d2 db a4 2a 48 b0 2a 22 88 c9 72 f0 fb 36 a8 9c 4e 3b 09 59 a0 7d 72 a8 59 b8 c1 0c 4f 55 79 35 6a c1 73 31 80 ad 93 36 17 ac 12 42 e9 0d 7c 63 e8 49 0c f7 c5 07 38 c2 0b 22 5c 1b e2 fd 02 5b ac e4 37 36 cf cf c3 f5 aa 95 e8 18 c2 f6 7e 54 aa 18 00 c0 7b ed fd 5b 89 87 69 6d 82 32 3d ea 2a 8b Data Ascii: 7 tJ-[^rIM8Rt}~L$D-1[\09JA7[XV9.=A"x{HM166oZ6Y:%oSk={" 6Vo`'oi@H"r6N;Y}rYOUy5js16B\|cI8"\[76~T{[im2=*
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 0c ad 8c a3 34 c0 d9 2c d9 f8 62 f8 47 68 d1 cb 25 ae c1 dc 94 07 9b 56 38 70 da 11 22 81 6f 0b a0 1e c6 26 88 4d e2 a2 ec cb 7e 94 05 0c d6 df 42 87 2f c9 e3 22 53 a9 a4 7a f6 c0 bc 81 e2 2a 9b 96 9d ce a4 7e a4 d5 fe 46 55 a8 4a f3 c0 ef 68 9a c9 f7 18 2a 9e 27 08 c5 fb 9e de 60 a6 c2 c8 0d 04 cc 15 29 44 90 66 86 c3 e7 4f ed ff 4c 5c eb 93 b6 42 6d d0 1c 0b 36 1c 6a be 79 6c df 57 31 20 e5 f3 ef dc 22 88 3f 96 d5 a4 9a af eb 1e b8 64 87 ba 20 fb e5 f1 0e cd ed f0 a8 95 a9 e4 95 88 6b 07 98 38 74 ff 35 70 99 bc 33 73 4c 00 69 5e b8 c1 af 2f 98 ea 46 19 e7 7f 2a 88 08 b5 c9 b6 58 e7 47 2c 4b 7d eb 71 5e c2 ee 24 ca 7a 64 3f 6d a2 61 1f 9c 60 74 be 6d 53 23 00 7b 5e 54 70 c2 d6 16 72 2c cd cb 72 8e b7 35 4c 58 8b 8a 26 ac ed 0d 8e f1 ac 3c 65 2b 1b 9f dd Data Ascii: 4,bGh%V8p"o&M~B/"Sz~FUJh'`)DfOL\Bm6jylW1 "?d k8t5p3sLi^/F*XG,K}q^$zd?ma`tmS#{^Tpr,r5LX&<e+
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: b3 48 92 6b 89 fc 6d 3e 19 90 61 c8 c1 8f 89 91 eb 83 e4 48 ae 21 26 20 7f f3 90 32 55 bc c5 f6 e9 d8 67 e9 fd 91 05 96 ff 7c 04 f2 5d 3a 69 5e c7 ec 0e 15 c9 be 59 24 c9 91 2c 9a 4f 06 84 a4 ea 63 62 e4 48 f6 48 ae 4d 65 6b 01 4d c7 4e c1 e5 f0 3a 57 c4 75 26 b7 70 dc 08 95 2c eb 46 c3 91 bf b1 52 3a 04 e8 8d 91 6c 40 e4 6f ec 83 2f ae 4d df 38 01 7e ec a7 10 37 59 2a 6e d6 7a 76 78 67 7f 51 eb 70 3a 53 ed 26 3a ba ee 9b d3 4b 6d 72 d3 2c 39 36 0e 7b af ed d8 5f 74 f6 8f 6c 43 9d a1 66 e4 af 7f ca d8 f1 a1 f6 f6 50 d4 7c aa 2f 81 5b 93 dd 90 a1 f0 f3 fe b8 b7 e1 bb 5f 5b b9 04 66 12 87 62 3f fe 27 4d bf 91 dc 7a ce 8c 56 92 64 4a 87 f3 3e b0 13 2c d6 21 25 81 d2 60 dd 90 af cd 90 b4 b8 c3 e0 12 ce 46 2c 9e ee f8 a5 59 b3 e2 53 bb aa 19 ad 14 1c 3b df 2f Data Ascii: Hkm>aH!& 2Ug\|]:i^Y$,OcbHHMekMN:Wu&p,FR:l@o/M8~7Y*nzvxgQp:S&:Kmr,96{_tlCfP\|/[_[fb?'MzVdJ>,!%`F,YS;/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49749	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:10 UTC	793	OUT	GET /css/o-0OIpQlx3QUlC5A4PNr4ARCQ_mu72Bi.woff2 HTTP/1.1 Host: www.moonreading.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.moonreading.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
2024-04-26 18:22:10 UTC	671	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:10 GMT Content-Type: application/octet-stream Content-Length: 11608 Connection: close Last-Modified: Fri, 11 Nov 2022 12:54:13 GMT ETag: "636e45f5-2d58" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6477 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FIcMAgTXXdoKwvmEJGAUs2L62itO1JckHYlW7NxbTIWnqwvcZR1RhorFFjcnamwYY0WF5nFQB2UJoOddsNIOK8C%2BLJ2HN%2FSfOYEBgL9UrhrX%2BZKTxF3C8FKux7iWp3hzxoH1JPw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a898c538ed74a0-MIA
2024-04-26 18:22:10 UTC	698	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 2d 58 00 0e 00 00 00 00 5f 40 00 00 2c fc 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 32 1b 95 22 1c 85 4e 06 60 00 82 18 11 08 0a 81 83 18 e8 3d 0b 84 28 00 01 36 02 24 03 88 4c 04 20 05 83 2c 07 88 77 1b c7 4e 07 64 5e 4b 87 83 ee 00 bb 2a 51 ae 36 51 d4 48 ad ca 1c 89 30 a1 9a b6 ec ff ff 3a 81 1b 43 d0 1a da 2f aa 44 29 26 9e cc d8 88 c6 52 3d e1 b3 bb da 75 10 d5 e3 c6 74 46 e0 c9 87 73 3e fd 94 d0 7e 94 8f 63 43 8a 28 86 d0 a6 b3 36 96 02 51 8d b0 f7 36 4c 85 10 0a a0 74 11 97 ac d3 de d6 5f 21 2e e1 ff 18 e7 5c fc 7f 96 20 4e ff b7 9e 01 ee b0 22 a6 4e 9e 8f 97 7b f9 5f 7b ce 4d 1e 44 55 aa a1 a2 82 2a 90 2d 8c cf cc 10 cc ad 5b 10 03 b6 86 8d 8d c1 18 b5 68 16 d5 d4 60 c4 e8 10 23 fa Data Ascii: wOF2-X_@,2"N`=(6$L ,wNd^KQ6QH0:C/D)&R=utFs>~cC(6Q6Lt_!.\ N"N{_{MDU-[h`#
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: c7 d0 59 af 10 07 3a f9 1d 1c 98 65 c3 a9 63 92 25 73 b7 85 f4 b3 37 f7 cd eb 04 24 a9 ae 9f b5 b3 7f b0 b6 70 33 73 76 c5 2c 52 69 aa 4b 7d cf 68 8e 57 46 2d fc de 8d 5e b5 5a a7 dc 2a 73 c9 22 67 f6 cd 7e 66 8d 72 ad 1f 2a 31 b6 85 8b 92 a8 10 1f 70 24 a3 f4 c3 d2 24 42 b3 0f b1 52 5a 6f d0 82 7c b0 47 b8 48 b4 62 6c ae fb a6 26 75 6f 5b a3 b3 8b ce 45 f8 31 27 5c 09 44 56 a6 26 b5 e0 c2 31 b9 67 e3 99 7d b3 8f b1 43 41 46 0c 51 ae 26 7e cf 80 19 35 15 cb e3 07 6c 58 f2 95 55 2b bb d8 41 75 5c 44 bd 69 40 b3 b2 8d 8b 1c 7e 57 d5 ec cb d7 57 ed de 1e 7d dd 9f e3 8e 1c 52 97 c6 8b 5b 9e b6 87 0f ec 9b 59 7c f6 fd bf 93 dc 82 32 51 e2 c4 43 c3 c0 ca 94 2d 07 0f 9f 48 2e 31 19 39 05 25 15 35 0d 2d 33 0b 3b 07 af a0 3c 05 8a 14 2b 11 56 aa 5c ab 19 e6 9a 67 Data Ascii: Y:ec%s7$p3sv,RiK}hWF-^Zs"g~fr1p$$BRZo\|GHbl&uo[E1'\DV&1g}CAFQ&~5lXU+Au\Di@~WW}R[Y\|2QC-H.19%5-3;<+V\g
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 76 84 28 55 93 d3 3e 4c 19 92 2e 0f a5 0d 65 07 bc c4 a8 23 a2 8e 6e cc 54 32 9f 83 6b 64 04 d7 95 3a e4 db ce dd 26 12 72 94 89 6a 67 fb ba 41 fd 64 5e 0c 99 3f 91 b8 71 c3 7a 24 c3 16 8b f8 91 94 d3 80 9c 25 29 99 17 5b 4e 66 4b 12 52 23 ab b4 ac 62 d7 2b 26 c3 95 b8 b1 11 5b ad 73 64 79 b6 a6 20 62 90 76 6f e3 79 ee c7 ab 70 b5 c8 f5 c4 b0 8c 82 2f 94 d5 80 9e e4 2b 18 97 39 3b 77 8e 6e 4d 46 af 9a 22 25 b1 55 f2 f6 62 ba b0 a6 75 06 46 43 aa bc 8b 53 6b 37 29 bb 6d 5c 08 24 24 bc c6 14 5b 37 5d e5 61 1a d3 86 93 bb e1 de 0a 56 ab 0d 1b e0 43 b2 2c ba 32 6a ad ca 22 58 2c 2f 89 fe c8 bc f4 21 6c cf 94 29 41 3e 79 f6 42 6f bf 5e e5 9b 44 b0 73 32 a4 d6 9f 24 e4 42 d6 80 75 5f 64 42 6b 5c 2b 23 6e a1 1b 12 23 63 1c fc 28 e8 fe fe c2 1f ee 0b 99 79 fc fb Data Ascii: v(U>L.e#nT2kd:&rjgAd^?qz$%)[NfKR#b+&[sdy bvoyp/+9;wnMF"%UbuFCSk7)m\$$[7]aVC,2j"X,/!l)A>yBo^Ds2$Bu_dBk\+#n#c(y
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 23 8b 4d ea 67 36 65 52 5a 73 26 28 43 65 39 62 3d d2 47 3f 33 fe a8 89 fc 0c 59 3e 40 3c 24 c5 e3 59 cc 8b ca 60 a2 8f a2 c7 d4 87 9c ab 1e 30 d0 0d 8d b7 3f bf d7 56 23 d9 c1 dd 2f ee 0c 8f 1c c8 ba ef 7d 76 bb b5 0a 2a 92 3b 9f 46 de a2 e1 d2 06 58 a6 e1 b0 0f 51 7a 9e ce c5 ec 88 b5 0d 87 62 43 25 e1 f6 7e b0 a4 95 94 03 22 1d 6f 30 32 58 2c 6b 2e 8d 3b 24 9b 8e 0d 98 60 32 3d 22 64 df 6e 99 c1 2f 74 78 35 64 1c 13 3d d0 76 19 f3 5a 7c 02 0c af 3e 38 6b ab 9c 46 c6 a8 84 52 72 76 68 d4 95 d2 fb 34 8d c5 08 e3 f5 fc 35 3c 23 a1 eb 8a 59 1e 05 f2 19 6b fd fa 4e f1 fb 39 04 b9 a0 ce 72 ee 3c 07 57 23 e8 35 22 28 f1 3c 57 c7 40 25 12 32 7a 94 3b 63 48 c9 5a f1 12 02 10 11 da 25 eb 83 50 d9 52 b9 8f 0a cb 55 76 df 1b 77 e0 6b 38 a5 f2 13 67 2a b2 18 44 0d Data Ascii: #Mg6eRZs&(Ce9b=G?3Y>@<$Y`0?V#/}v;FXQzbC%~"o02X,k.;$`2="dn/tx5d=vZ\|>8kFRrvh45<#YkN9r<W#5"(<W@%2z;cHZ%PRUvwk8gD
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 61 fd c0 86 14 8b d3 0d 8c a4 43 e4 34 11 e0 ad 18 2c 59 3e 08 9e 22 42 25 33 27 a9 f0 0b 59 73 2c 8d 55 3a 43 69 51 6f bb 3d 71 35 67 ae a5 a6 52 21 76 32 7e e4 85 d2 da d1 53 94 4e 9e 57 90 fd 4a 50 98 de 8c ed 91 06 f8 85 80 71 66 67 52 c5 8a b1 09 75 91 94 61 78 bc d2 b3 79 b0 18 c0 d0 ce 1f ae 1b 54 79 79 39 2e 3e b7 21 97 e3 c8 60 6e 9b 53 cd d6 87 23 25 76 25 bb bc aa 31 68 fb 70 2d dc 8a f2 81 af 11 ca 12 42 65 01 bd 36 55 ec 2f 70 1b b4 4e 9d 45 8f b2 1b 44 f9 74 91 89 cf 9b c3 e5 b9 d2 8a 57 ae ac c9 31 95 94 15 da dc 95 8d 85 68 f8 52 bb d7 20 97 d4 74 6a 01 8d be 47 83 f2 bd 77 b7 b6 ea 7e 1b c6 d3 4e df 13 35 f6 73 c6 a1 1e 82 9f 60 2b 84 cf 58 37 77 29 b8 8c a8 34 64 17 48 82 14 8e b5 80 9f ed e5 69 6d 26 6d aa 62 c2 1d f1 39 30 be b7 aa 9b Data Ascii: aC4,Y>"B%3'Ys,U:CiQo=q5gR!v2~SNWJPqfgRuaxyTyy9.>!`nS#%v%1hp-Be6U/pNEDtW1hR tjGw~N5s`+X7w)4dHim&mb90
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 9d e5 2b 89 60 86 31 55 c8 bc 45 93 ca 6b c5 bf 8a c1 46 45 7c f7 85 e2 fc da df 6b 6b 85 9f 49 63 41 1c d2 72 3e 57 85 f1 ed 4f b0 9e 17 f9 d0 3e 10 bb 23 fe fd 86 cf d1 b6 b6 2d 77 db ca 32 70 a7 71 d0 9f 16 03 db 0e d4 1f fa fc 68 63 20 2b 6e f8 4b d1 ef 5f 7a 07 ea 76 d5 81 70 2a 9a 56 da 3f a1 e0 5d d9 fa 83 a2 f5 71 e5 fb b2 dd c2 04 f0 19 42 ef 2f 2d 71 65 2f b2 d4 55 a8 94 12 83 6c 3c 2a 2d 68 ea 24 5a 13 aa e0 94 b0 9e 6c cf b2 4a 14 e1 df 66 e8 13 f9 2a 4e 8e 41 20 cc 27 37 ab a4 27 40 02 42 6a 94 8e 47 d1 02 c6 dd 13 a1 ac 81 4a 8c fe 2c 04 ae ca d7 cb 8d fe 70 89 23 63 a1 a9 a1 42 6d b2 33 0c 22 5e 01 a9 59 de 52 90 6e 16 28 f2 e9 cd 2a 01 05 bc 41 14 b7 56 d7 d8 b3 e7 d8 2b eb e5 fa 0c 0b f2 1c c9 2e 6f a7 29 0a dc fc d9 6e 8d d6 28 cb f8 f1 Data Ascii: +`1UEkFE\|kkIcAr>WO>#-w2pqhc +nK_zvpV?]qB/-qe/Ul<-h$ZlJfNA '7'@BjGJ,p#cBm3"^YRn(AV+.o)n(
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: 55 bd 85 79 b5 4f 6a 23 90 de 76 a4 71 f5 d6 5d 8d 46 ab 28 b3 01 6c da 4c fb 4c 5b b3 fb b6 06 7d 70 91 1d d7 ec da e1 25 31 75 46 16 83 b8 2f d4 60 d4 cb 15 26 eb ed d5 ef 36 b1 ca 40 98 ef c3 8e 1d 41 be 5b 4b 91 2f c8 e4 7e a9 cd ac 95 e6 6a bd b1 6d ff d2 ad 4d 21 48 f2 4b 72 56 1a e7 ca ef 1b 98 74 0e 38 d3 8b 9b 44 20 7e 9c 4c 90 e0 52 fe ff 0a ff d5 9e 98 35 f1 0b b0 0b e1 5f 28 a9 aa 92 2c f4 fb 27 5d 74 ba b8 df bd 40 52 53 25 ff f9 3e fb c4 fa 76 6e 41 3e bf d3 62 e0 76 06 0b 3a 04 e6 92 15 7e df 8a d2 cd 25 3a 05 c1 e2 ea ca 69 b5 ee 77 7f 6b 8a e5 06 c3 8e eb c9 6c 95 3e cf e9 96 07 8d c4 15 4b f5 53 a9 e0 e0 ac 2c 86 4c 91 59 6f 33 88 69 dc 6e 38 85 6b b6 f2 eb 61 cc 3f e1 29 f3 8e 3f 20 51 f7 a4 d0 be 27 b9 99 f4 5d 60 8b a4 fd 1e f2 d3 b3 Data Ascii: UyOj#vq]F(lLL[}p%1uF/`&6@A[K/~jmM!HKrVt8D ~LR5_(,']t@RS%>vnA>bv:~%:iwkl>KS,LYo3in8ka?)? Q']`
2024-04-26 18:22:10 UTC	1369	IN	Data Raw: fe a7 20 5b 48 d2 be 82 32 48 ff 5b ca d4 86 5e f2 ff 36 9a 27 f8 fc 09 b3 f1 6f 60 ba 3c 0b 12 d9 0f b1 d0 db 8d a0 3e 3d 1f ef 0d 9c 06 96 d7 7f bc 06 db 46 90 e0 25 76 d0 87 1d 04 76 44 e5 e4 e9 f3 83 09 06 27 7e b9 c6 81 34 7a d8 53 b7 ae 69 16 99 49 c3 0c 6b 79 5d 86 b1 a5 9c 5e 76 3d c1 78 5b bf 04 7f 0a 65 e8 2b b3 07 4d 19 2f ae 79 3e b2 61 80 b9 31 52 5e 86 8a a0 c2 11 fd f5 d8 d4 78 78 0d 4a 52 81 82 a3 89 d1 5f c7 b3 6a a5 71 d2 3a 16 f8 6d 17 3e d2 ff fe 93 64 9b 12 a7 39 a4 c3 47 56 6e 6b c1 87 8b 77 d6 4b 59 e1 29 e0 d2 66 d5 69 d3 ae 40 8a 28 c8 a2 7f 9d 8e 19 8f da af ba 7e fb c2 b6 d4 86 b9 d5 48 f9 73 59 56 ba dd cd 07 1d bb 7f ec f8 ec 6a c2 ae 1f a7 83 3b 9b e5 56 b9 28 d4 ca e8 bc 92 21 72 e9 4c ca 2d 0c 86 e3 f1 37 ba 2c 59 be 9d 0c Data Ascii: [H2H[^6'o`<>=F%vvD'~4zSiIky]^v=x[e+M/y>a1R^xxJR_jq:m>d9GVnkwKY)fi@(~HsYVj;V(!rL-7,Y
2024-04-26 18:22:10 UTC	1327	IN	Data Raw: 4b 34 ab ae cb c3 a5 17 d5 37 c2 a1 65 33 40 45 93 7b c1 41 d3 5b 5f 39 08 a0 f2 c6 43 a5 df 9e 4f d0 ea bf 62 61 e3 5b 80 8f ae f8 88 01 e0 e3 55 b4 f5 ff e9 cc ff b3 0f 4d d4 a0 a2 41 01 04 b8 5e ab 38 fb af 8a 1e 75 18 03 d7 1e 39 16 e3 05 2a a4 7c ed 4f 66 d3 31 85 90 25 5a 6b 91 d4 ca 41 1f 69 fc b5 07 cd 23 ad a1 63 84 de 03 ad c9 d5 97 9a 35 e0 dd 48 14 c8 01 60 c1 d4 f4 37 86 14 80 d5 00 83 24 88 86 2c d0 41 00 b8 8a af ad 80 77 43 76 83 94 3b cf e4 8e f0 0c 3f 49 89 fa 72 85 30 cb c5 5e db 24 07 c5 cc 28 ed 5f 36 3e 80 15 73 3f 0b b6 6b 4a d4 62 df 0e 1b 0e 8c fa 92 e9 6b 2d 94 61 7a a6 99 b6 fc 0d 9f d7 4a ea 03 be 62 28 1d 21 cd 85 ee eb 79 ab b4 f0 fd 26 f4 9e 48 8d 16 99 ea e9 52 cb ce f2 be 2d 49 de 2b 39 41 99 a4 e4 92 d7 b9 23 7f 06 da 5e Data Ascii: K47e3@E{A[_9COba[UMA^8u9*\|Of1%ZkAi#c5H`7$,AwCv;?Ir0^$(_6>s?kJbk-azJb(!y&HR-I+9A#^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49752	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:11 UTC	791	OUT	GET /css/o-0IIpQlx3QUlC5A4PNr5TRASf6M7Q.woff2 HTTP/1.1 Host: www.moonreading.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.moonreading.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
2024-04-26 18:22:11 UTC	671	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:11 GMT Content-Type: application/octet-stream Content-Length: 12852 Connection: close Last-Modified: Fri, 11 Nov 2022 12:54:13 GMT ETag: "636e45f5-3234" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6478 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VnS9dEBTMcboxLKIWt%2F%2F45pQl8OsLnx5dfTt5DGKyvUFyXdYkBxuo6MUmkx%2Bgj1ksyhb49cAIOoxHF2uuGGRIQssrkM0AZhXzKoSf7WdCmAWWGTfnycwFDNSzLNAE7L6z2L7u9U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a898c8adaa2215-MIA
2024-04-26 18:22:11 UTC	698	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 32 34 00 0e 00 00 00 00 6d 74 00 00 31 db 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 0e 1b 95 2a 1c 86 2c 06 60 00 82 08 11 08 0a 81 97 38 f5 28 0b 85 06 00 01 36 02 24 03 8a 04 04 20 05 83 34 07 8e 3b 1b e8 58 45 46 ee fa e0 6d a9 88 ca d5 68 8d 44 98 12 ba b1 e4 ff 63 82 8c 63 bf e1 46 51 55 38 04 47 62 08 31 a4 22 33 93 5a eb 22 53 62 d6 ad a1 56 c3 3e c3 6e 8d a2 8f d2 fe 2a 8f 10 a1 cf 71 29 06 fa b0 9b 0e b1 e0 fe 64 90 33 c0 1d 56 34 c5 c9 f3 f1 e3 e0 3b 77 de 87 b8 00 9d 7e dc 75 82 a3 4a 51 b6 12 39 c3 f3 db fc 3f 20 38 51 0c 30 08 0b 51 11 8b 12 04 03 89 ba 64 4b 09 66 cc 39 97 fd 36 dd de c2 85 cb ff 16 d5 6f ba b5 2e ea 6d af 16 f5 e2 ef 45 6d 54 d8 60 ee 1c 20 08 12 a4 c1 54 b9 Data Ascii: wOF224mt1,`8(6$ 4;XEFmhDccFQU8Gb1"3Z"SbV>nq)d3V4;w~uJQ9? 8Q0QdKf96o.mEmT` T
2024-04-26 18:22:11 UTC	1369	IN	Data Raw: 02 98 bc db 6d 2f 02 36 01 8f bc a5 cb 74 13 2e cd d0 50 96 2c 21 39 26 6f 5b 43 63 a2 41 3d d9 2e d8 09 42 79 e3 2f e9 ad 59 ee 52 d9 a4 46 a1 f9 42 1b dc ed a4 92 53 cf 34 52 cb 42 95 a0 6b 4b 19 49 db b1 47 c4 2e 98 02 d3 d4 02 5a 61 e4 0f fa 1a 97 e1 ce 1a d4 02 20 12 ad 26 b2 35 fa 27 ca cb 60 a6 85 f4 2c 99 32 fb ec 7a f5 a0 d7 86 a6 76 b8 56 46 98 62 84 f9 8b 12 6a e4 a3 b0 c3 2e 8a 35 da ea 54 bf 14 37 69 95 fa d0 26 57 7a 14 28 74 37 da 54 87 6e d7 2c 1b 7c 61 b7 a8 d9 3c 01 b4 f9 50 b3 82 58 5d 22 7f 36 ab 75 f7 70 a6 be cd fe d0 c2 b0 94 2f a6 32 70 e9 90 83 01 d3 a2 61 62 61 c0 65 f1 13 f8 3b 82 2a 1c 0d 1d 0a 0b 5b 14 2e be 18 52 32 89 20 4a 38 6a 44 13 18 98 11 59 59 1a 7b 74 3a a7 4a 24 cd 2c cb a4 e8 6c d3 2d 42 d1 ff 89 c1 b2 cc 4a 45 06 Data Ascii: m/6t.P,!9&o[CcA=.By/YRFBS4RBkKIG.Za &5'`,2zvVFbj.5T7i&Wz(t7Tn,\|a<PX]"6up/2pabae;*[.R2 J8jDYY{t:J$,l-BJE
2024-04-26 18:22:11 UTC	1369	IN	Data Raw: b8 ea 8a 8b ce 39 6c 9f ad c2 e7 85 cf f6 91 4f 83 7d ef a2 ef f5 1e b6 95 8f c4 d7 7e 00 03 6b 36 1b 20 fb 05 a8 07 80 9c 12 58 b0 17 00 cb 8f 00 60 c2 66 81 fa 15 40 01 53 07 7e 2a d2 ad 35 ec da 85 0f 32 a8 b0 0c 93 30 f3 05 ea 3f c9 b7 bb 17 26 39 7e 59 13 87 26 00 a0 15 4c 0f 81 0b 23 5a 4c 90 13 b4 16 44 64 09 22 d8 af 26 d1 e0 c0 0d f0 a5 1f 10 ec 46 a0 71 09 6d f8 11 b7 d0 7f 23 12 08 57 27 a3 df 2e e1 84 f9 2a 44 45 a8 2d d7 80 77 97 46 bf 52 a6 f0 43 19 b2 31 ea 65 35 83 47 15 16 ff e1 ff 3e 60 d6 1d 20 30 e3 12 21 8c b6 d3 90 52 41 05 91 e8 f3 53 b4 6d 4b 32 bb 6f 89 a4 09 20 3b ff 53 b0 bb ea 64 81 76 90 f7 e2 d6 56 99 d4 86 85 3e 86 ca 77 aa 05 04 01 e7 d8 72 6a bd 97 7e f3 96 60 ae 71 d6 89 6d 6a bd 7e 1c ea 7c 71 b2 15 6b 4f 9c c7 99 3b e0 Data Ascii: 9lO}~k6 X`f@S~520?&9~Y&L#ZLDd"&Fqm#W'.DE-wFRC1e5G>` 0!RASmK2o ;SdvV>wrj~`qmj~\|qkO;
2024-04-26 18:22:11 UTC	1369	IN	Data Raw: 5d a3 43 9d 65 4f e5 4a 57 2b 75 e1 7e d2 05 3b 57 1c 06 47 e4 33 57 66 ab 4e 83 57 68 53 91 83 af 10 40 b5 ee dc 3a e2 bc af 3c f4 34 9e cb a1 62 93 0d dd 6a 84 55 b2 a0 67 36 b7 7a df f1 f8 35 15 fb 29 79 98 69 ce 0f a4 19 34 34 17 62 dc c2 02 4e 40 1c 14 01 5f a3 6b dc 7b 10 3f f2 55 9c 5c 9d 51 95 3d 94 de 03 c9 fa 5f c5 be b8 42 49 0e 51 55 89 05 1f cd dd 4e c2 38 02 3f d5 ca ec 42 d6 3c 35 19 2b eb 10 5f ae 89 62 a6 9f 47 2e 5f 3b b0 c0 72 fa 20 d8 d2 a4 ab bf 52 9f d1 a5 ea 60 33 5d ed 1a 91 37 3d cd 3f aa 80 17 35 c3 ec 1e 9b 98 7d 23 b5 1f 71 b8 b7 c0 b8 6f c8 bc b8 44 5c e7 b7 53 e6 25 10 07 74 ae 2d f1 03 6f ca 8a 8e 27 4a ce d4 be fc 49 0e ba c1 92 64 2b 4d ec ea fe 27 90 4f 7a 84 25 47 b7 ba 1d 34 af dc 74 13 51 44 46 79 6e 9d aa 29 de 98 0b Data Ascii: ]CeOJW+u~;WG3WfNWhS@:<4bjUg6z5)yi44bN@_k{?U\Q=_BIQUN8?B<5+_bG._;r R`3]7=?5}#qoD\S%t-o'JId+M'Oz%G4tQDFyn)
2024-04-26 18:22:11 UTC	1369	IN	Data Raw: 03 d2 6e cb 56 51 6c 4d ad ac d7 26 32 d8 2b e8 99 f9 31 25 4f a9 e8 7b 0a 20 58 64 49 d0 7d ed ed d9 61 ca 60 99 f4 21 18 c2 78 e7 82 1a 16 05 f6 ed 51 ff 32 f3 66 e8 69 c4 e2 84 38 60 e3 95 12 3c 68 ec 5c 9a cd 27 12 b4 d9 59 7a 02 51 00 06 87 e2 61 dc 5d 25 dd b5 03 cf 0e a4 0d ce 93 2c a7 de 52 e0 ea 17 53 6e c9 b3 6f 4d 96 2c 48 1f 9c 2d ee cf 19 81 36 b2 84 c8 4e 36 45 3c 75 70 71 da c7 1d f8 97 e1 af 8d fb 64 4d af c7 91 86 ab 88 6e a3 42 55 63 b6 23 1c 42 bb d0 96 50 41 54 fe ab c1 76 0c 89 b0 f6 bc 1b 2c 79 ad cd 8b 6a 15 2e 34 e7 66 50 87 4f 0b 52 b7 b8 c8 94 df 85 b1 e0 fc 88 4a dd d5 d0 00 75 6b 15 aa ee e7 05 65 5d 09 a8 05 43 5a ec 98 50 44 21 1b da 37 48 36 52 b4 1b 37 d4 3e 53 6a be 98 56 57 24 22 7a 83 91 6c f8 6c 5a 0f e8 a3 86 4a 83 52 Data Ascii: nVQlM&2+1%O{ XdI}a`!xQ2fi8`<h\'YzQa]%,RSnoM,H-6N6E<upqdMnBUc#BPATv,yj.4fPORJuke]CZPD!7H6R7>SjVW$"zllZJR
2024-04-26 18:22:11 UTC	1369	IN	Data Raw: 87 9d 47 d8 88 ea 74 c4 fb 36 b0 a2 7e 92 01 81 45 d6 72 17 9b 87 eb 26 ea 10 b1 74 b8 9a b4 d4 02 6e 56 b7 aa 36 f7 b9 9b 5a fb dd 8a 2d ad 2d 8a 4d fd ee b6 c6 3e 97 6a 73 51 cb 9c f6 81 f1 bd ad 03 73 e6 b4 ae 1c 3f be 63 25 48 1d 5a 38 a5 39 54 c6 ae 99 28 68 34 25 b9 86 0f 6a dc 44 a8 26 28 d2 cb ec 12 70 b3 7a 46 dd 91 1a f2 f6 7d d3 e6 ad 0f 3f 1b be cb 5f bf b2 87 66 4d 0e d5 94 e4 aa 85 05 e5 17 04 f5 3b 29 5f e4 b8 86 cf 68 6b 50 8d 76 bd 54 22 37 97 82 df 4e fb e6 d5 8f 2d af c6 a4 db 04 0d 84 12 83 81 cf c9 7c 06 51 85 49 2e 52 a5 cf 5c 52 62 a8 c9 97 94 05 12 db 93 35 7a 5b 22 5d 22 e1 d1 b3 9e 49 b2 bf 7c 61 63 17 28 81 c4 35 e1 99 1e a7 ff 06 4c f9 47 55 d6 dd 2b f5 cd 9a bf 64 dc 35 d7 4d 7b a5 cf 1b b0 d5 18 6f 38 81 7d e8 d3 90 eb d3 90 Data Ascii: Gt6~Er&tnV6Z--M>jsQs?c%HZ89T(h4%jD&(pzF}?_fM;)_hkPvT"7N-\|QI.R\Rb5z["]"I\|ac(5LGU+d5M{o8}
2024-04-26 18:22:11 UTC	1369	IN	Data Raw: 48 e3 e6 13 a0 55 a2 d8 64 93 26 54 57 a7 f3 6a 0a 84 71 ef b4 3b d7 05 02 92 d0 56 5b 19 bd dd e9 a6 77 da f9 2b 2d 52 a0 bd c3 b5 e3 e2 d2 64 4f 21 5c 6e c9 71 f1 82 6b e2 6b 75 fc 81 c1 a9 86 3f 54 db a7 88 eb fd 62 ff 32 67 4b 10 38 fd 69 d4 df 45 92 18 91 c0 df 97 9e 1e 68 13 0b 3e 09 c4 2f 78 e9 02 52 85 e8 83 58 d0 da 9e 2e fc 55 e4 b7 17 8a 7e a7 8a d3 b2 08 1b b3 b2 fb 73 6d 3e 79 fd d9 59 1b 89 20 a5 69 7f 65 e5 95 ee 89 c2 15 a6 15 e6 4d b3 4d eb c6 54 ec bd dc ed 39 14 de 24 e5 4f fa 71 0e c4 f3 59 ff 7e 28 ea a6 96 57 4b 7d 3c 2d 56 47 14 a7 4a b0 8c f2 98 94 94 6e 75 b2 26 d9 aa 28 2f 2a 14 9e 25 87 28 b2 0e 75 2d d7 18 f7 59 fd c9 43 a0 ab 7a 53 e2 f3 5b 82 45 aa dc 7a 15 27 fb 3b 7d aa bd 79 3e 99 f0 95 24 eb ce e1 53 60 d9 56 e2 e1 f8 f8 Data Ascii: HUd&TWjq;V[w+-RdO!\nqkku?Tb2gK8iEh>/xRX.U~sm>yY ieMMT9$OqY~(WK}<-VGJnu&(/*%(u-YCzS[Ez';}y>$S`V
2024-04-26 18:22:11 UTC	1369	IN	Data Raw: 6d d7 b6 6b e3 38 d2 5a ee ef 2f aa b9 62 79 93 b0 62 a2 73 e6 f4 c5 1d 82 20 f7 ee 45 2f af 4c 51 2e d3 22 95 48 59 99 e9 14 d0 cb aa ab ab 15 75 7a 9d a2 3a 54 07 d5 80 7f ff 3b 74 19 41 8e aa 18 9c bc 7d bb 67 49 79 54 e6 f7 87 2f 01 77 5f f6 41 01 cb 3c cc 23 2c d6 61 26 fd 77 66 d1 cb 5f 08 ef 89 c4 ff f0 f8 ff 88 c4 eb 20 c7 e3 e2 49 e9 69 9a 7f 12 71 0b 9b 58 4e ae 8c 9e a2 46 27 e1 27 36 fd 15 84 6c 36 88 ac bc f6 a8 67 a3 f4 29 5d a2 59 f1 b6 58 8b d8 07 36 9e 3e 4f 06 51 28 b6 bb 6b e8 61 f2 ec 4e 5f c3 28 7d f2 ac 9e 8f b7 f1 ba 46 69 7b 00 d7 e9 8b 8c 29 7f 4c 67 f7 45 12 c3 c2 2f 31 5b b6 d1 34 49 ff a0 d3 ff 90 8a ff a2 57 f8 17 68 0c b9 d6 c3 4a 8f f4 bb 80 d0 bd ad 57 a2 8f 2b 05 20 18 ba fe aa 01 13 ee b0 ec 89 73 b2 14 a7 55 84 9c 95 59 Data Ascii: mk8Z/bybs E/LQ."HYuz:T;tA}gIyT/w_A<#,a&wf_ IiqXNF''6l6g)]YX6>OQ(kaN_(}Fi{)LgE/1[4IWhJW+ sUY
2024-04-26 18:22:11 UTC	1369	IN	Data Raw: 4f c9 12 10 76 6c 38 c8 e7 b9 b8 dc 46 b0 24 3f 15 0b 01 cc 64 e6 f9 37 ba 9a bd 35 6b 75 80 39 7c 41 79 61 8a 0d 01 e6 80 a7 fb 49 5d a8 5f df 7b 37 c0 a9 21 2c e5 9e e8 ef 37 f5 e9 64 fa bc 62 aa 12 1f 97 26 ef 74 a7 d0 dd 75 3e 5b 7e eb 8f 34 34 ef 7e 2a ca b5 74 1f 3a 7d 31 08 40 f8 05 e1 79 79 87 ab 43 7e 1e c0 37 09 4d 71 9d 2f 4c 80 e3 6b 77 b5 cb cf bf 38 0f fe bd c1 7a 78 5e b7 b9 66 5b 8d 1e c0 9c 83 d2 41 90 df 5e fe 8a f9 52 ed 17 42 00 9a fa 0f ed 45 55 7d 22 b2 c4 59 f4 23 ed 9f 69 10 04 f3 0b d4 2f 99 af ca 41 cc 26 21 f4 02 02 ae 9c f2 07 5b 2c 58 a0 84 41 7d 6f 69 3f 06 eb e3 91 f5 09 c1 17 b4 b7 4b 20 25 f0 0b 37 f2 60 e9 4c 1d 02 4a 7c cf 8f 13 9f e8 7b 13 53 f6 d5 e9 3f 2a e3 3f 36 bd 13 34 e0 92 f7 f5 80 9c 93 36 9b 36 e3 48 56 9a 56 Data Ascii: Ovl8F$?d75ku9\|AyaI]_{7!,7db&tu>[~44~t:}1@yyC~7Mq/Lkw8zx^f[A^RBEU}"Y#i/A&![,XA}oi?K %7`LJ\|{S??6466HVV
2024-04-26 18:22:11 UTC	1202	IN	Data Raw: df 8a 35 2e ab f5 75 87 15 c3 2f 86 16 6c 4c 04 de 0c d0 20 40 1d 1e 98 5e f8 83 b4 26 ce 69 d2 07 ee 07 f7 4d 4c 17 3b 43 20 68 d6 b1 1e 7f ec 57 9c 8d a8 8e a0 b6 3d 9e 01 f9 b8 62 bc 9a b4 07 7a 3c ed df d2 53 1b 1a 9f 9a 3b f7 a4 1d b8 20 af e4 64 25 58 71 d4 6b ce 31 bd 45 2b 0f 37 90 30 f1 16 69 90 06 29 a7 24 e4 23 e0 85 b0 6d e3 3b b9 25 8c 0c c6 0b 24 9c 1e 53 7b c5 d6 69 3d e3 55 bc fd be a9 05 c5 cd 31 84 ca 8f b2 e4 36 ca 67 65 4a 1d 59 a9 94 b3 b3 db c3 af c5 4d d0 23 53 87 ce f5 9f 32 96 b2 4b c6 4c 69 69 7e d7 59 8b 90 47 79 25 91 d7 99 aa a4 b6 a3 ac 7c 29 21 96 fd 34 2d 96 98 cb df db 25 cf 47 86 81 1d e8 40 85 28 10 02 17 0a 42 ec db 84 92 55 50 2e 0b 95 e1 14 09 d5 24 65 30 16 a3 3c 35 ab fb 93 39 d9 e9 94 de a4 87 16 cb ca f4 ae 18 5e Data Ascii: 5.u/lL @^&iML;C hW=bz<S; d%Xqk1E+70i)$#m;%$S{i=U16geJYM#S2KLii~YGy%\|)!4-%G@(BUP.$e0<59^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49753	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:11 UTC	795	OUT	GET /css/o-0NIpQlx3QUlC5A4PNjOhBVZNyBx2pqPA.woff2 HTTP/1.1 Host: www.moonreading.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.moonreading.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
2024-04-26 18:22:11 UTC	669	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:11 GMT Content-Type: application/octet-stream Content-Length: 13020 Connection: close Last-Modified: Sat, 12 Nov 2022 08:19:55 GMT ETag: "636f572b-32dc" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6478 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DUTIvBBdblHAeGP%2B29Xs5UGAkyaMsX7OgIBY2ZXylhFi3PAvQ6Xwk1azbjZfvJbP4QTvvnaFTr7yJDA40qcVBZ6dFTes02CjsmdKJi%2FDRD78Jbo5VweqlBLpVSuQC6rBePwvVPI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a898c8bbe021f9-MIA
2024-04-26 18:22:11 UTC	700	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 32 dc 00 0e 00 00 00 00 6d 08 00 00 32 80 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 0e 1b 95 2a 1c 86 2c 06 60 00 82 08 11 08 0a 81 96 58 f4 4c 0b 85 06 00 01 36 02 24 03 8a 04 04 20 05 83 28 07 8e 3b 1b 80 58 35 ca ed 13 c5 ed 20 48 ea 59 3e ce 88 aa d5 1d 8e 44 d8 0c ca 49 35 fb ff 3f 24 d0 71 3d ec 15 82 cc 0e 67 24 15 88 c3 1d 25 48 4d 69 0b 5a 17 71 8b 11 cf bc 49 fa 59 4a 70 4a 07 99 d3 66 9b 67 3a ea fa c7 8c 38 aa 62 40 bf c5 51 62 69 b1 2f 7f 6a 08 84 20 10 bf ba 0b f7 dc ab 4f d9 37 ca 15 2c ec 99 5a 1d 52 48 61 19 f2 17 6c ff 07 b2 50 19 c7 1c a1 c9 29 62 5a 89 e0 fd 83 9c dd 7f 0a 28 54 10 ab b4 50 ed 5a ac 72 69 c5 37 3c b8 ad 7f 20 a2 b8 11 54 c0 45 2a 73 a8 88 82 ac a5 0c 41 Data Ascii: wOF22m2,`XL6$ (;X5 HY>DI5?$q=g$%HMiZqIYJpJfg:8b@Qbi/j O7,ZRHalP)bZ(TPZri7< TEsA
2024-04-26 18:22:11 UTC	1369	IN	Data Raw: 43 53 e8 46 04 ea 32 96 ae a5 4e b6 06 ad a4 c1 8a a8 59 54 b2 a0 c9 c1 ae da df cd 79 d6 cf 1d b3 76 6c 32 d4 5b 6a d2 b5 a9 0b 13 43 f7 e0 d4 10 82 91 c3 5a 1f ba c2 0e 78 91 7d 17 b1 01 f3 aa c5 87 8a 57 51 e2 7a 61 2f 12 aa a7 06 04 a9 68 84 83 c6 9c 36 e9 37 47 52 2d 5d 4e 18 1b 13 6f 34 76 1c 58 f9 02 8e 20 d7 da 4b 36 74 b1 08 d0 b1 89 56 f2 60 83 97 7a 73 9c 3a 77 f0 da 39 32 36 34 34 3c 29 68 73 e1 d6 9b 4d 3b ce d3 04 33 7b 4b e7 66 36 6b 62 cc ef 8e 1a c7 39 aa 9c dd 44 46 69 6f 9f 90 ba f8 8d 52 03 97 4b b1 17 55 81 ca 16 19 19 30 6f 08 91 08 59 b3 3c 79 1f 18 22 32 38 26 16 04 2e be 58 85 44 12 28 28 a5 d0 d0 4a a3 47 2a 96 49 05 1c 1b cb 62 4f cd 56 cd 09 af 8d e5 59 94 4a 30 64 05 a2 35 5f 5a 5c eb 6c c2 b3 c5 2e 02 7b bc ad d4 01 ef 52 39 Data Ascii: CSF2NYTyvl2[jCZx}WQza/h67GR-]No4vX K6tV`zs:w92644<)hsM;3{Kf6kb9DFioRKU0oY<y"28&.XD((JG*IbOVYJ0d5_Z\l.{R9
2024-04-26 18:22:11 UTC	1369	IN	Data Raw: 31 7d 26 fe ef 8b 48 20 20 e3 73 00 d9 15 a0 b7 03 39 1a 58 7c 15 60 b9 45 80 19 6b 02 fd 15 40 81 ce 86 1e 83 74 6e 0c 99 c7 a0 13 49 2a c2 30 2b 65 ed 24 c6 17 c6 cd 35 85 18 ba a8 bb 2c 76 cc 12 40 23 48 18 04 2a 19 68 50 6e e4 50 83 30 0d 81 c5 c7 75 56 aa 73 22 22 af 21 21 a2 1a 39 af df 56 cb 28 32 dc 45 17 52 81 50 e3 68 a3 3c c9 04 64 af a5 33 49 b5 7e ea 48 d9 1d 31 ae a9 ac c3 47 b1 c8 8c 18 cf d8 05 c8 66 8b 68 8f bf 78 22 42 79 a4 1d ad 73 53 0b 2b f0 14 63 02 d7 95 7b fb 8a e0 e9 38 78 99 a3 99 c0 cb d6 04 66 63 88 cc 82 e7 68 43 e6 dc e8 2d fc 0a c8 12 dd e6 69 63 68 85 c4 1d d8 22 d9 5d 66 e9 2d 59 43 18 43 cd 7d cd b5 69 25 34 20 a4 05 6d ca 88 6a 15 97 87 dd e5 1d 3b c2 e0 67 9a 5b 90 ac 57 68 88 6e 18 28 f3 6e 08 c6 68 df 3c 3a 62 80 fa Data Ascii: 1}&H s9X\|`Ek@tnI0+e$5,v@#HhPnP0uVs""!!9V(2ERPh<d3I~H1Gfhx"BysS+c{8xfchC-ich"]f-YCC}i%4 mj;g[Whn(nh<:b
2024-04-26 18:22:11 UTC	1369	IN	Data Raw: 42 ea 2d 34 03 03 59 21 b9 7d da 72 e8 35 98 38 6f 02 6b f8 18 4e 1a ae 5b e6 b9 43 22 ee 12 02 cf c8 c5 c6 b9 aa 2b 52 0b f8 50 a3 90 d8 27 a5 2e a4 49 5d a0 54 32 91 aa ff 3a 24 15 90 d6 ce fd 0e 1d 5c 07 7d 42 17 96 bb 3a 24 34 b3 84 b1 8d 1c 0f 87 fb 06 14 46 a1 98 46 98 ec 71 19 4d 7a 94 ba 34 81 65 8c ad 07 ef b7 ef 0a 20 ff a1 44 79 a3 27 fe 0b c5 e2 a8 07 22 c7 76 1f f8 4d 79 c9 58 60 85 d6 78 80 e0 34 05 0f d0 9b b5 86 db 9d 17 86 02 e1 59 69 06 72 70 a1 2e 1a b6 90 49 2b 08 99 ae 2e 38 f8 c8 47 7f ac 77 4c 6b a2 46 52 2d 59 74 49 e6 f8 7e 1c 29 8e d4 40 78 d1 c2 c5 60 9a 0f e8 5b 72 b4 ae bd 92 f4 b6 96 63 ba a2 89 9c 47 17 4f 17 cc b0 c7 16 c1 73 9b 88 ef 71 55 41 1b b6 c0 9c e5 f7 9e 93 e9 79 85 05 75 12 9a e5 9f 8e 36 f5 63 95 ac b8 34 71 4f Data Ascii: B-4Y!}r58okN[C"+RP'.I]T2:$\}B:$4FFqMz4e Dy'"vMyX`x4Yirp.I+.8GwLkFR-YtI~)@x`[rcGOsqUAyu6c4qO
2024-04-26 18:22:11 UTC	1369	IN	Data Raw: f7 2a 72 7f 5c 7e 77 83 ff 5d da c6 73 92 88 3b 5f 57 4c d8 7e 5c 20 75 56 f9 ce c5 88 61 85 48 71 f9 13 cc fb a3 fe 6b 61 d6 f7 d7 c4 cd 6f ca 07 ff 79 5a 87 f9 6a cd fa 71 ea f4 bc ac db 54 ca 9d ac 79 47 c0 07 33 28 88 79 50 e2 8b e9 c0 17 fb b0 43 43 55 6b 89 33 2e 0c 9d 4f 98 71 e6 cd f4 56 8d 7f 1f ba b8 6a 25 f1 aa 8b 70 b5 93 88 83 a3 30 7f a8 33 7c 43 75 82 7f a8 b7 3c 28 53 87 39 98 c9 39 a0 c1 56 f1 c9 0a b6 3e 58 59 03 37 c9 ca eb 5d 29 bb 89 0d e5 e5 c9 b2 37 d7 b8 18 85 8a 42 4d ab ab 19 d1 2a eb 2b 8f ce cf e0 bc 27 cd ae 88 11 a4 d7 5d 07 97 ee 98 2d 61 9f af bc db 56 6e ea f6 f9 f4 e1 62 c4 e4 4c f3 e4 cc 12 83 60 7c 5c 20 1c 1f df 7d d9 58 d1 e5 fd d8 61 35 7e 75 7a 0d 5d 16 bb 60 6c 42 50 3c 31 06 78 77 ac 5e 93 56 6e 76 5c d8 b1 b9 36 Data Ascii: r\~w]s;_WL~\ uVaHqkaoyZjqTyG3(yPCCUk3.OqVj%p03\|Cu<(S99V>XY7])7BM+']-aVnbL`\|\ }Xa5~uz]`lBP<1xw^Vnv\6
2024-04-26 18:22:11 UTC	1369	IN	Data Raw: 74 58 73 44 6b 68 76 87 89 16 91 16 d1 02 fc 61 f0 c8 13 d4 ec 5b ef 98 df b9 ce a1 79 23 d8 ae d9 b7 ae 26 34 9f 39 fd 8c 8b 69 ef ab 1d f7 fa dc e3 7d 7d ae 71 9f b7 6e 1c 70 66 26 07 42 cd 22 9e af 5f e2 55 47 0d ce ce 79 cb be 17 96 5b 05 d2 62 65 11 78 e4 59 e8 9c 76 13 de f9 f0 c0 c8 4e 18 02 d6 d4 df 8d a4 99 15 4b 5b 7c 7c a2 f6 a6 78 ae 68 d5 01 6c 2b 6e 70 f6 82 4f fe 44 6d 54 09 04 42 1d 1b fc 7d a1 76 bc ad bf db 4c ea bd e8 c7 0b 24 87 29 0c 3d 4f 93 35 6d e4 f1 8c 62 e7 60 73 a0 a8 21 2d 85 dc 7c c1 94 42 e3 bb 09 59 0f 3e 4d 19 33 e7 53 f5 c0 35 e8 be 16 c0 05 ae 81 35 7f eb c4 dd 8b 15 0d 93 2b 57 f5 cc 0d 9e ad 32 1a 8d 15 ba 4a cb 99 c5 a0 7b e6 b7 99 f1 df 66 86 57 1e 35 ff f1 75 3e e1 f1 1f f5 2b 8f 82 62 d9 ec c9 99 15 1d 9b 2b 9e fe Data Ascii: tXsDkhva[y#&49i}}qnpf&B"_UGy[bexYvNK[\|\|xhl+npODmTB}vL$)=O5mb`s!-\|BY>M3S55+W2J{fW5u>+b+
2024-04-26 18:22:11 UTC	1369	IN	Data Raw: 5b 32 ec e2 84 ab 4b 3e b2 98 80 e5 4e 81 2b 4d 42 aa 7d a5 44 e5 52 44 05 c1 b3 8e b3 15 82 07 3b 02 6d af 5a 76 60 4a ac 35 8e 9a 90 b2 a0 d2 4d 05 35 75 19 3f dd 2b 95 7c fb 9d cb 98 5e f0 ea f5 37 62 c9 a5 5f 32 04 d7 af cf bd 72 96 66 08 4f 7d f3 e4 bb fb 3f d9 d3 e9 1f d3 19 df 0e 26 63 9a 1e 64 4c ad 15 0e 9d ed f0 95 8f 68 47 b8 2f dc 1b 1e b9 2a b5 9e ee 18 16 d9 5f 56 7b 93 7e e9 03 d1 18 63 db d9 9f d5 44 b1 57 eb e4 5b d0 1d b9 15 09 8a 54 0a 7b 0c 8b e3 3d 57 a7 db f4 c5 dc c0 e1 9f 50 04 75 a7 d9 53 60 4e 86 38 38 ae 74 8a f8 2e 0e f9 e7 5f 3f e5 aa a8 35 b5 05 f8 55 32 ec 51 dc bd cc 79 12 03 56 95 0a 96 bf 83 a7 61 31 7a 7c 96 01 83 a5 9f cf fc 76 d7 c1 4e 84 69 34 bf a1 21 7f d4 54 5e 30 d2 d0 38 5a 68 34 8c e4 37 35 08 ce a6 a9 e6 12 97 Data Ascii: [2K>N+MB}DRD;mZv`J5M5u?+\|^7b_2rfO}?&cdLhG/*_V{~cDW[T{=WPuS`N88t._?5U2QyVa1z\|vNi4!T^08Zh475
2024-04-26 18:22:11 UTC	1369	IN	Data Raw: 2e 09 4b bc 10 83 a1 4c 59 60 43 1f f1 0c d9 90 22 49 2b 8d 1e db 48 17 e9 c3 94 77 74 e9 b2 d5 7d c2 06 fa df b2 aa 5e 27 ef 5f d8 f3 d7 45 85 ea a3 d1 72 61 75 55 75 71 8d 5c a6 0a eb f9 5d ad 06 dc 57 97 af fc 9c 13 67 7b ff d4 96 2d 93 bb ac 71 39 9f 5f b9 0c da be cb d8 46 20 6c cf 78 15 f6 fe 07 5b 9d fc bf f3 f9 7f f1 79 0a 21 af 40 51 cc 48 9d c5 a4 cd a6 a6 cc a6 61 b6 00 92 33 52 25 57 73 33 84 31 a9 c4 2b d2 48 a5 42 c3 49 5f 47 a6 91 8e 03 d2 a3 c6 7d 8d 77 64 d3 d4 d8 67 1f 7e 14 4e 9d b9 b4 d1 46 47 ac 9a f9 0a 37 1a ea f3 e9 0a bd 8f d2 6f a4 d7 64 de b8 14 3b f3 6e 79 ea 5c 8c e5 8f 9c 30 50 ae 95 14 16 e8 24 e5 06 9d ac a0 50 2b 03 ef cc f4 bc 01 b1 1c e8 0b 60 c9 4b e7 c6 1f 52 02 20 99 39 44 7c 53 81 a1 9b 5c 6b 4a 98 56 f7 9d 04 95 2b Data Ascii: .KLY`C"I+Hwt}^'_ErauUuq\]Wg{-q9_F lx[y!@QHa3R%Ws31+HBI_G}wdg~NFG7od;ny\0P$P+`KR 9D\|S\kJV+
2024-04-26 18:22:11 UTC	1369	IN	Data Raw: e3 28 64 1c 99 55 9e eb 13 6e 60 90 26 a5 b9 d1 2b 99 f4 1e 30 8d 40 f1 50 ad 35 b4 6a b7 24 ef 3f 93 9c f3 0b 9d fe 90 bf b3 6f ac 87 e8 45 f8 1f 40 39 0f ab 66 10 db bb 96 69 85 3c 19 d8 3a 85 bf 48 a1 5d 18 c7 f5 b2 b6 ae 91 f3 70 6b 8c bf 8f c8 8e f1 3f 60 2d e9 75 3e fe 77 1d f0 d2 c5 57 bf 6b d6 ed d1 ad 6a 06 bc 5b 73 ae b9 a6 39 f7 1c e0 bd 57 f2 da 6c 16 f9 f9 c3 7c 1b 1c 7f 96 c9 27 2a bf bc 92 fb 5b 46 ee 1c 23 4f 8f 6b a4 ba 37 34 e3 79 75 ed 6e 2b 35 f0 0b fd c1 a7 87 30 29 0b 76 d2 0e e3 f1 e7 c7 89 bf 15 00 7c af e4 89 23 c8 0e 3a 9e 00 68 a3 b4 3d e9 f3 e7 41 c0 d5 b5 b3 db 1d 4f be 7c 02 7e bc 56 fa 62 b6 79 a7 6e bd ce 03 20 d5 3b 15 3b 01 69 40 f4 77 fe 47 a6 2a 95 1f d4 75 bc 62 5f 6a 6d 43 c3 db 50 de 8b ec d7 1d 75 7e 50 a5 32 fd 37 Data Ascii: (dUn`&+0@P5j$?oE@9fi<:H]pk?`-u>wWkj[s9Wl\|'[F#Ok74yun+50)v\|#:h=AO\|~Vbyn ;;i@wGub_jmCPu~P27
2024-04-26 18:22:11 UTC	1368	IN	Data Raw: 5d 5f b1 9c 81 00 45 2a 4a 7f f0 1f 14 d6 66 c5 24 c1 49 17 5c 4b 39 b4 98 bc cb e1 45 7f 19 4f 0e 62 f8 1d b0 ac 30 71 f4 5f ca dc 95 0a b9 5e ed de 38 a5 0d d4 2c 96 65 7b c0 29 4b fa 24 97 3a e5 9b 97 6b 70 9c 8f db 26 a7 a7 65 1a 34 a6 84 4c 81 c2 90 df 39 7e cb 5b 32 fa 09 1c 8d d9 96 5a a2 94 64 1a 6a 49 40 a4 ab d4 fd cc 9c 8f 3b 49 4e 4b e4 a4 81 12 ab 93 3d 06 80 09 1b a8 95 fb 6c 0a c6 22 99 63 86 6e 72 19 15 73 81 74 c9 ee ae ad c9 15 35 f3 74 4a f1 74 05 3b 0f 91 3d a1 8e 94 c0 03 f2 4b 72 7a 71 a2 19 71 4b 64 61 d9 d9 2e 0e bf 5e b1 f7 c8 f0 52 a5 41 a3 e5 13 5a 5c 83 5c 32 34 ec dc 1a 36 45 42 a6 43 34 80 00 99 17 4c cb 2f 80 57 12 d6 4f 73 51 5c fb 17 43 03 d2 2e 8e ea 97 92 bb 66 de 8c 48 91 77 2d 6b 53 90 17 90 65 c8 db d7 a8 ac 79 61 8d Data Ascii: ]_E*Jf$I\K9EOb0q_^8,e{)K$:kp&e4L9~[2ZdjI@;INK=l"cnrst5tJt;=KrzqqKda.^RAZ\\246EBC4L/WOsQ\C.fHw-kSeya

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49754	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:12 UTC	744	OUT	GET /img/bg-wavewhite.png HTTP/1.1 Host: www.moonreading.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.moonreading.com/css/clean.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
2024-04-26 18:22:13 UTC	659	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:12 GMT Content-Type: image/png Content-Length: 5510 Connection: close Last-Modified: Mon, 10 Jan 2022 05:20:37 GMT ETag: "61dbc225-1586" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6479 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6Z8Wg5HCcAUsMrclDzBEdSIKfc2Q16oBRSPR0vD0ZmF5wKpY4wqr7tNI8qd6ymacwoQ5%2B3TSzdQNrUj8%2FjW4F2WG7ZaaYLLS2T8ILYoQkLExKHkyBAgBaA%2FSURM2%2FSa%2FNRSMcHE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a898d2ebfb743d-MIA
2024-04-26 18:22:13 UTC	710	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 70 00 00 00 af 08 02 00 00 00 10 29 2c a3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 Data Ascii: PNGIHDRp),tEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 43 46 37 33 38 30 37 46 36 39 46 35 31 31 45 43 41 35 42 45 39 39 46 44 46 38 31 38 32 43 46 35 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 46 37 33 38 30 38 30 36 39 46 35 31 31 45 43 41 35 42 45 39 39 46 44 46 38 31 38 32 43 46 35 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e c5 fd 37 8b 00 00 11 f7 49 44 41 54 78 da ec dd 69 72 db c8 96 80 51 62 24 9e f7 bf c0 f7 ab 57 d0 6d 93 20 86 06 98 32 04 93 94 28 51 1c 30 9c 13 2e 05 4a 76 0d 91 d6 64 7f be 79 a3 ff fe cf ff 6e 00 00 00 00 00 00 f8 58 ec 08 00 00 00 00 00 00 Data Ascii: nceID="xmp.iid:CF73807F69F511ECA5BE99FDF8182CF5" stRef:documentID="xmp.did:CF73808069F511ECA5BE99FDF8182CF5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>7IDATxirQb$Wm 2(Q0.JvdynX
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: c2 d6 16 27 b6 84 9f 74 47 00 00 00 00 cb 33 0c a0 84 8e 62 00 05 00 9e 23 84 96 f3 cf bc 21 ab 8c 43 cb ae ac 1d d7 cc 7e 72 1d 01 00 00 00 2c e1 57 f8 c7 9b bb 0c a0 00 c0 34 85 e5 64 e7 a1 25 64 95 dd be 7f b9 2f df a2 8b e3 9a e8 97 5b 8e 00 00 00 00 e6 28 cf e2 3c 7d 9b 41 31 80 02 00 33 15 3e 89 9f 7c 2a 6f 9a b6 7c bb 2e ac 6e da cd e1 d0 58 d0 32 05 82 0a 00 00 00 cc 43 91 27 21 9f e4 69 1c fe 94 2b 00 b0 48 71 fc 76 5d e7 af e2 9f d0 12 16 b4 f4 2f ab a6 ee 9f 5b 0b 5a 9e 49 50 01 00 00 80 29 0a 4b 50 b6 79 9c 67 49 b8 ce cb 99 00 c0 ca 85 05 2d e7 af 0f 59 c5 bd 61 0f 3f 7f 47 00 00 00 00 53 30 2e 28 61 93 bc 33 01 00 be e2 e2 82 96 70 6f 98 71 96 3b 12 54 00 00 00 e0 35 14 14 00 e0 81 5f 69 fc bd 37 ec 84 71 96 9b 09 2a 00 00 00 f0 24 0a 0a 00 Data Ascii: 'tG3b#!C~r,W4d%d/[(<}A13>\|o\|.nX2C'!i+Hqv]/[ZIP)KPygI-Ya?GS0.(a3poq;T5_i7q$
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 00 a6 46 44 01 00 00 06 82 ca 54 94 87 e6 18 57 fa b5 2b 4e 03 00 00 5e 45 44 01 00 00 2e 12 54 26 27 dc 09 16 b6 d9 5b b8 02 00 00 4f 20 a2 00 00 00 57 09 2a 93 56 d5 6d 5f 56 f6 b5 85 2b 00 00 70 5f 22 0a 00 00 f0 2d 82 ca 6c 94 87 b7 b1 15 0b 57 00 00 e0 36 22 0a 00 00 70 33 41 65 96 76 7d 56 a9 2d 5c 01 00 80 ab 44 14 00 00 e0 2e 04 95 79 b3 70 05 00 00 ce 89 28 00 00 c0 dd 09 2a cb 61 e1 0a 00 00 6b 96 67 f1 7f b6 89 88 02 00 00 3c 88 a0 b2 4c 55 dd fe de 55 16 ae 00 00 b0 6c 79 16 6f f3 be a0 14 79 1c c7 91 03 01 00 00 1e 47 50 59 be b0 cd fe cf ae b6 70 05 00 80 05 10 51 00 00 80 97 10 54 d6 c5 36 7b 00 00 e6 48 44 01 00 00 5e 4e 50 59 29 db ec 01 00 98 38 11 05 00 00 98 14 41 85 f7 b8 f2 67 57 d9 66 0f 00 c0 0b 89 28 00 00 c0 64 09 2a fc a3 aa db Data Ascii: FDTW+N^ED.T&'[O WVm_V+p_"-lW6"p3Aev}V-\D.yp(akg<LUUlyoyGPYpQT6{HD^NPY)8AgWf(d*
2024-04-26 18:22:13 UTC	693	IN	Data Raw: 00 00 00 58 39 41 05 98 87 70 4b 58 79 a8 eb ba ed 1e 76 65 ed 4c 00 ee 25 8e 8e f9 c4 06 14 00 00 00 f8 98 a0 02 cc 95 bb c2 00 6e 16 16 c8 87 d1 13 f7 77 01 00 00 c0 57 08 2a c0 a2 84 2d f7 bb fd db 20 8b a5 f7 00 9b bf eb 4f 92 24 2a b6 dd 83 05 f2 00 00 00 70 0b 41 05 58 be 5d 59 37 cd 66 b8 2e 4c 65 01 16 2c 5c de 25 9f 00 00 00 c0 dd 09 2a c0 4a a9 2c c0 02 a4 49 94 26 b1 cb bb 00 00 00 e0 09 04 15 80 77 27 95 c5 5e 16 60 52 c2 e8 49 96 c6 69 6a 75 3c 00 00 00 3c 9b a0 02 70 45 18 5e e9 5f 36 ed be 6c 36 c7 ee e2 58 80 87 1a 46 4f e2 68 e3 e6 2e 00 00 00 98 02 41 05 e0 16 4d d3 96 55 13 c6 59 9a 76 73 38 34 c6 59 80 db 8c b7 9e e4 59 12 c7 1b a3 27 00 00 00 30 41 82 0a c0 3d 0d 17 85 55 55 e3 de 30 e0 84 76 02 00 00 00 f3 25 a8 00 3c c3 f9 44 cb c6 Data Ascii: X9ApKXyveL%nwW- O$pAX]Y7f.Le,\%*J,I&w'^`RIiju<<pE^_6l6XFOh.AMUYvs84YY'0A=UU0v%<D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49755	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:12 UTC	809	OUT	GET /img/moon-reading-text-logo.png HTTP/1.1 Host: www.moonreading.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
2024-04-26 18:22:13 UTC	658	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:12 GMT Content-Type: image/png Content-Length: 37864 Connection: close Last-Modified: Fri, 04 Jun 2021 20:11:09 GMT ETag: "60ba88dd-93e8" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6479 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yl0BOmJT91hvtI4fMiGkY1Oa53eF5LYbt08nbAF0y8Iz9au75YWBu7URtbLo1OI%2BKcZsOEZgYniNRtFUcF7caVq0PekwWpbKNpeK1dZVkIo%2FeizdTU2P07CVjcVI%2BZ6g0Kh1%2FQU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a898d2ee06a674-MIA
2024-04-26 18:22:13 UTC	711	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 5c 00 00 00 82 08 06 00 00 00 52 39 c9 06 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 64 61 62 61 63 62 62 2c 20 32 30 32 31 2f 30 34 2f 31 34 2d 30 30 3a 33 39 3a 34 34 20 Data Ascii: PNGIHDR\R9tEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.dabacbb, 2021/04/14-00:39:44
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 31 41 31 30 38 38 38 35 42 44 39 35 31 31 45 42 39 41 36 41 46 39 34 37 37 46 36 44 36 41 46 31 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 41 31 30 38 38 38 36 42 44 39 35 31 31 45 42 39 41 36 41 46 39 34 37 37 46 36 44 36 41 46 31 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 9e 94 97 f8 00 00 90 58 49 44 41 54 78 da ec 9d 07 60 14 c5 f7 c7 e7 7a c9 a5 f7 46 12 4a e8 24 f4 0e 91 2a 2a 10 54 44 45 05 c1 3f 2a f0 13 14 b1 21 12 50 51 6c 80 08 8a 8d a6 f4 12 94 5e 13 e9 35 09 bd a7 27 40 7a bb 92 5c ee fe f3 f6 76 2f 9b Data Ascii: nceID="xmp.iid:1A108885BD9511EB9A6AF9477F6D6AF1" stRef:documentID="xmp.did:1A108886BD9511EB9A6AF9477F6D6AF1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>XIDATx`zFJ$*TDE?!PQl^5'@z\v/
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 9b 88 88 88 88 88 88 88 88 88 a8 11 00 17 05 0f 0e 0e e8 c4 c9 d3 43 bf fa e6 db 6f 4e 9f 39 17 ee e8 a4 c0 83 7e 11 8d 4f a8 12 18 30 3f 33 f0 c0 fc 5e 01 11 15 40 01 10 01 af 00 12 f0 1e ac c5 d2 e9 75 e8 f8 a9 93 fd 0e c7 c4 f4 6b d9 b2 79 66 cf ee dd 62 22 06 0c 38 d8 b1 63 c7 9d 32 99 38 b7 b0 b0 c8 6e 1b 14 ce 07 e0 c9 d3 d3 53 71 e6 dc b9 11 f1 09 97 47 e3 76 eb 73 ed c6 f5 10 b1 48 84 24 12 09 2e 52 76 eb e2 b3 36 58 02 a9 f6 d0 f3 a8 16 aa 68 27 c3 ff 2b bf c7 a3 7f 32 00 19 1c 13 d6 af f1 05 7c b4 6f ff a1 21 97 ae 5c ed f8 c9 87 b3 e7 8e 7d 76 cc 6f 60 69 d4 e9 74 e4 4e 27 22 22 22 22 22 22 22 22 22 b2 57 e0 92 cb e5 68 f7 9e 7d 63 3f ff f2 ab 1f ef 25 25 f9 38 3b 3b 52 6e 6e cc a0 9f 8d 06 95 2c 32 b0 8d 5e 6f fc 93 be 0a 74 21 13 10 c1 a3 a1 Data Ascii: CoN9~O0?3^@ukyfb"8c28nSqGvsH$.Rv6Xh'+2\|o!\}vo`itN'"""""""""Wh}c?%%8;;Rnn,2^ot!
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 77 df 81 67 ff 3b 76 6c ca a1 a3 b1 03 4a cb 4a 91 a3 a3 82 05 5a 55 5d 06 0d 75 05 77 41 ad 16 a2 3a 0a 90 af af f7 c3 1e dd ba 5d 71 70 70 d8 52 58 54 74 ed b9 31 a3 ee b9 bb bb a7 7d be f0 6b 04 11 0c 01 62 a1 0d 75 5a 08 a5 6f 68 43 f8 5d c0 e7 43 1b 66 ab 35 9a 6c ad b6 ec e4 d8 97 5f 5a ed e7 eb 33 e0 ee bd c4 59 bb f7 ee 1f 46 71 2a 9f 5f 09 53 85 b8 0d 4f 9d 3a dd 77 df 81 83 63 27 bc 3a 7e 45 7e 7e 01 b9 eb 89 88 88 88 88 88 88 88 88 88 1a 12 b8 c0 75 0f b4 65 db f6 d7 4b 4a 4a a4 52 a9 84 05 12 86 57 58 93 d5 bf 6f df 23 5d bb 74 79 bd 73 e7 f0 94 87 0f b3 8c 80 c5 05 5c c0 95 b0 a0 a0 00 e1 fd a7 68 4a 35 29 4f 0c 1c 18 ab 56 a9 36 84 84 04 b5 74 75 71 79 66 ef fe 83 43 6f dc ba d9 b9 a4 44 25 01 17 39 70 3b 84 c0 11 55 a1 0b 60 0e 72 83 81 1b Data Ascii: wg;vlJJZU]uwA:]qppRXTt1}kbuZohC]Cf5l_Z3YFq*_SO:wc':~E~~ueKJJRWXo#]tys\hJ5)OV6tuqyfCoD%9p;U`r
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 52 75 d2 a8 35 14 0c 07 35 0b 44 6e ae 2e 7f 6c de ba 6d 32 fc 5e d1 26 00 a0 42 0c 66 79 ae fd fb f6 25 c0 45 44 44 44 44 44 44 44 44 44 d4 90 c0 75 eb ce 9d d6 2a b5 c6 91 47 87 19 37 88 b2 36 a1 40 ff 80 4c 67 67 c7 f8 3d fb f6 57 b2 d8 00 58 f8 f8 78 23 1e 5f 40 59 c1 6c 21 38 7e 6e 6e 9e 1e c3 cd 49 2f 2f af 73 61 61 61 6b 0f 1c 38 fc d6 be 83 07 c7 15 15 16 49 c0 8a 03 ae 80 95 0d 49 7a 2a 72 1f 58 ad 12 93 92 7d d7 6f d8 b8 e8 c1 83 07 03 31 78 2c 14 8b 9d 4f f1 e9 a8 7e 00 6d 02 be 20 14 43 e3 97 c7 8e 9f 1c 85 81 53 0c b9 b4 10 ed 26 c9 76 21 64 da 02 42 ac 3b 2a 1c cb fb f6 ee 79 f8 cd 37 26 2f d5 68 cb 8e b4 6a d9 52 1d fb df 71 9b e5 bb d2 94 6a d0 80 fe fd 50 c7 f6 ed a8 3a b0 af 01 9c bb b6 4c 9b d2 be 5d bb cb 09 97 2e 75 04 eb a4 d1 f9 91 Data Ascii: Ru55Dn.lm2^&Bfy%EDDDDDDDDDuG76@Lgg=WXx#_@Yl!8~nnI//saaak8IIzrX}o1x,O~m CS&v!dB;*y7&/hjRqjP:L].u
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 08 63 9c 09 3d fe 91 47 7b d9 81 97 5a 71 71 91 73 4e 4e 8e 5c a9 54 71 27 28 58 12 85 07 fb 60 5c a9 0b 9c c0 67 01 aa 00 72 ca e9 90 e8 03 fb f7 45 9e 1e 1e 08 d6 53 41 f8 f7 76 6d db a0 8b 17 13 10 24 2a 96 3b 50 6b 9e ca 87 0d 1d b2 3d 33 f3 41 c0 f9 8b f1 3d 29 6b 0f 8f 89 de a7 37 5a b4 78 15 59 bc 8c ee 92 03 fa f7 8b ed d0 be dd a6 bf d7 6f 44 1d da b5 43 5e 5e 9e 54 a4 c0 cc fb 0f a8 63 07 04 f8 53 a1 f0 73 73 f3 90 42 e1 60 b5 f5 6a 00 72 1e ee ee 94 bb a3 4c e6 8b fc fc 2c 5a 76 25 54 ab 21 e0 09 0b 4c 19 88 c4 f5 73 90 3b 14 93 db 9e 88 88 88 88 88 88 88 88 88 a8 01 81 4b 2a 15 6b f8 7c 5e 39 1e a8 0b 0c 4b 9a 68 d7 3b fc 72 ff fe 83 e0 f8 84 cb 21 6a b5 ea aa 45 b0 04 1f c6 14 a0 2b d7 71 86 2e 06 60 18 0b 16 b8 31 fa f9 f9 a1 00 3f 7f fc 37 Data Ascii: c=G{ZqqsNN\Tq'(X`\grESAvm$;Pk=3A=)k7ZxYoDC^^TcSssB`jrL,Zv%T!Ls;Kk\|^9Kh;r!jE+q.`1?7
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: d0 cc f0 2a 12 8b 51 4a 4a 9a f7 57 8b be fb e5 ff 26 bf ee 2d 97 cb bf ab 6d 3d 29 30 c3 6d 39 7a e4 d3 d4 cf e9 19 19 54 fe 2c 70 9f 64 bb 4a 5a d6 9a 08 02 89 88 ce 9d bf d0 df 10 d1 90 75 e6 7a 43 bb b6 6a d9 e2 d6 e5 2b 57 4b fa f5 ed 53 1f f7 16 33 33 3c 01 0f 1e a2 1a f9 8c 6d 14 1b be f0 b9 c4 90 ae 83 88 a8 69 0b 7f cf 67 b2 be f7 00 5d 60 e5 1e 5d 8f 55 08 a3 0b 78 0a 14 e0 57 80 ae 28 62 fd 22 22 22 22 6a 22 c0 e5 ec e4 94 d7 a3 47 d7 d8 7f 77 ef 7d 01 0f d4 f9 c8 68 e5 32 60 4b 7c 42 42 e7 67 23 47 b5 0a eb d4 f1 9c f9 7c 5c d5 83 07 40 47 50 b3 40 0a b6 6a 0b 5a 0c bc 38 39 39 0a 7e fd 7d d5 7b 3f 2e 5f 31 37 2f 37 cf 11 60 ab b2 8b a0 a1 fe 10 b4 03 7e 7f 7e 4c e4 b6 19 ff 9b 3a 33 25 35 2d cd cf d7 17 7d ff ed d7 13 02 03 03 3e 5b f7 f7 86 Data Ascii: *QJJW&-m=)0m9zT,pdJZuzCj+WKS33<mig]`]UxW(b""""j"Gw}h2`K\|BBg#G\|\@GP@jZ899~}{?._17/7`~~L:3%5-}>[
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 10 08 03 40 2b 24 a8 d9 ed 2e 9d c3 cf 9f 3b 7f a1 1b 80 85 81 8f 0c a0 a1 d3 eb 79 c7 8f 9f 1c 36 65 f2 eb df 8b c5 e2 12 4b 5d 03 01 ba 2c 05 2e 60 2a b0 6c dd ba 73 a7 c3 fb 1f ce 59 75 fa ec b9 ce 0a 85 83 d1 1d af 62 7f 18 9a ca b5 54 a0 88 11 c3 87 6d f9 ec d3 8f 67 0a 85 a2 8c 7b f7 12 91 9f af cf 23 a0 43 7d 8e 57 39 90 05 e4 e7 c2 30 93 3e f3 9d e9 af fb f9 fa 26 af fc ed 8f f7 54 6a 95 50 24 62 03 15 8f aa 13 e4 07 bb 7a f5 5a f3 85 5f 7f bb ee d3 8f 3f 78 d5 c9 d9 31 a6 36 17 03 f6 13 e0 ef 67 36 f4 fd 23 4f 5c 67 67 f4 eb 1f 7f 8c ca 7a 98 25 87 d0 f6 4c dd 40 5a 5d 39 ea d0 a6 f5 5d 67 27 e7 8b 07 0f 1d a5 02 68 0c 1b 3a b8 a1 ee b7 c6 64 e5 aa 0e 0e 1b 0d 84 b1 d6 87 44 70 d8 3c 86 1e e8 c5 34 f5 4e 8f d5 2e 5c f2 2c c1 c0 37 df de da 05 d6 Data Ascii: @+$.;y6eK],.`*lsYubTmg{#C}W90>&TjP$bzZ_?x16g6#O\ggz%L@Z]9]g'h:dDp<4N.\,7
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: e2 b3 e2 97 df f6 9c 3c 73 ba b3 5c 2a af b4 ce 0c 40 b3 53 a7 8e 71 4b 7e f8 a6 2f 86 38 15 03 7e 70 fe 56 bb 81 4c c0 24 be 79 cd 11 75 2c be a9 23 ec 78 a0 7e d4 cc 66 4f 34 24 70 d1 eb 35 26 d2 1d 1d d7 0e 93 79 78 20 7a 50 16 51 a5 f3 e1 da c9 c2 e0 6f 89 bd 82 17 9d 27 29 ca 82 76 81 8e 36 89 05 31 c1 ac d9 3f 4b da a5 5e 93 d2 c2 40 0f 55 b6 7a ac b1 37 4b 17 eb 5e 9d c9 11 18 98 b6 8c a2 1f 7c 76 0b f7 b4 cb 50 8d f7 07 97 b0 f0 16 1c 6f 35 c7 49 15 57 6b b4 1b eb ba cd b3 83 e6 b6 9b e7 05 6d 51 4a 64 bd 35 1f d7 2d ca 8e 9e 5d 51 c8 3e bd 33 ea 75 d2 8e be 4e 70 ff ce a8 05 48 cc ac 6b 3d 4d f4 0f af db a3 fb 77 2d 12 ba c3 f3 72 a2 2d c7 3f f4 33 7c a6 85 93 3e ec f1 4d 3c aa 48 b5 61 e9 18 87 39 c7 d5 f4 33 a8 c6 e7 b9 a5 c6 23 93 16 2e 58 bf Data Ascii: <s\*@SqK~/8~pVL$yu,#x~fO4$p5&yx zPQo')v61?K^@Uz7K^\|vPo5IWkmQJd5-]Q>3uNpHk=Mw-r-?3\|>M<Ha93#.X
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 2a 07 0d a1 42 1e 52 eb c5 b2 b2 b2 15 df 2d 5e f2 73 7e 7e 41 1f 2e c9 91 01 a4 28 20 e3 f1 6b 2c 00 ac 89 89 49 43 4f 9f 39 db bf 22 72 62 45 ca 63 58 7f f6 e4 b0 61 3b 1c 15 0e 69 70 4d 00 22 99 62 27 1a 68 01 9c d5 97 b8 ce 54 d6 6b bd 69 f7 b1 38 33 b0 95 4c 3f 40 eb 6c 39 84 ce 8c 7e 28 84 a0 9a 17 ac 43 27 b5 03 66 54 1b 22 2c 35 6d d5 8a 37 f3 90 80 76 19 43 b7 4b b4 15 da 05 3a 67 e8 a8 77 9a 69 97 c5 30 bb da 00 ed c2 40 57 b0 1d 42 83 b9 07 56 a3 4b 8e 5e 8f 03 a2 7c fa 5e ae 57 e0 e2 78 dd ac 0a e6 b4 8b 5e 04 32 1f 12 bf be 55 1d 48 44 d9 e1 bd 52 9f d7 2c 9f 4e de 0d 03 61 18 94 43 9f 37 06 99 0f 76 02 83 d9 78 da ba d2 90 fd 0e 28 b6 9e 26 7b 26 d0 16 48 7b 54 4d cf c7 04 5b b4 0f 3d c1 12 c3 01 b6 e0 79 4b 59 08 ad 05 c5 f4 f3 3c 0a 71 4b Data Ascii: *BR-^s~~A.( k,ICO9"rbEcXa;ipM"b'hTki83L?@l9~(C'fT",5m7vCK:gwi0@WBVK^\|^Wx^2UHDR,NaC7vx(&{&H{TM[=yKY<qK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49759	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:13 UTC	739	OUT	GET /js/jstz-1.0.4.min.js HTTP/1.1 Host: www.moonreading.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
2024-04-26 18:22:13 UTC	668	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:13 GMT Content-Type: application/javascript Content-Length: 5434 Connection: close Last-Modified: Mon, 27 Sep 2021 16:47:10 GMT ETag: "6151f58e-153a" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6480 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=srRXCqX%2BAOZzhiGN8q4ETbXfzskvmXTl%2BlkGq0q0qkx8lxtedoMvF70vJa5dk1mazVdGb7nHkaDZ3AdAMBos6YUOsp3FBK0Cp7ft%2FNRMWRgxjffy5ZW38DuLRojrsnCCh7DMuwo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a898d74938a4ee-MIA
2024-04-26 18:22:13 UTC	701	IN	Data Raw: 2f 2a 21 20 6a 73 74 7a 20 2d 20 76 31 2e 30 2e 34 20 2d 20 32 30 31 32 2d 31 32 2d 31 32 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 22 73 22 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 2d 65 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 3b 72 65 74 75 72 6e 20 74 21 3d 3d 6e 75 6c 6c 3f 74 3a 30 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 65 77 20 44 61 74 65 3b 72 65 74 75 72 6e 20 65 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 72 2e 73 65 74 46 75 6c 6c 59 65 61 72 28 65 29 2c 72 2e 73 65 74 44 61 74 65 28 6e 29 2c 72 2e 73 65 74 4d 6f 6e 74 68 28 74 29 2c 72 7d 2c 69 3d Data Ascii: /! jstz - v1.0.4 - 2012-12-12 /(function(e){var t=function(){"use strict";var e="s",n=function(e){var t=-e.getTimezoneOffset();return t!==null?t:0},r=function(e,t,n){var r=new Date;return e!==undefined&&r.setFullYear(e),r.setDate(n),r.setMonth(t),r},i=
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 69 67 75 69 74 79 5f 6c 69 73 74 5b 6e 5d 2c 72 3d 65 2e 6c 65 6e 67 74 68 2c 69 3d 30 2c 73 3d 65 5b 30 5d 3b 66 6f 72 28 3b 69 3c 72 3b 69 2b 3d 31 29 7b 73 3d 65 5b 69 5d 3b 69 66 28 74 2e 64 61 74 65 5f 69 73 5f 64 73 74 28 74 2e 6f 6c 73 6f 6e 2e 64 73 74 5f 73 74 61 72 74 5f 64 61 74 65 73 5b 73 5d 29 29 7b 6e 3d 73 3b 72 65 74 75 72 6e 7d 7d 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 2e 6f 6c 73 6f 6e 2e 61 6d 62 69 67 75 69 74 79 5f 6c 69 73 74 5b 6e 5d 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 7d 3b 72 65 74 75 72 6e 20 6e 3d 65 2c 73 28 29 26 26 69 28 29 2c 7b 6e 61 6d 65 3a 72 7d 7d 2c 74 2e 6f 6c 73 6f 6e 3d 7b 7d 2c 74 2e 6f 6c 73 6f 6e 2e 74 69 6d 65 7a 6f 6e 65 73 3d 7b 22 2d 37 32 30 2c 30 22 3a Data Ascii: iguity_list[n],r=e.length,i=0,s=e[0];for(;i<r;i+=1){s=e[i];if(t.date_is_dst(t.olson.dst_start_dates[s])){n=s;return}}},s=function(){return typeof t.olson.ambiguity_list[n]!="undefined"};return n=e,s()&&i(),{name:r}},t.olson={},t.olson.timezones={"-720,0":
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 68 69 22 2c 22 33 33 30 2c 30 22 3a 22 41 73 69 61 2f 4b 6f 6c 6b 61 74 61 22 2c 22 33 34 35 2c 30 22 3a 22 41 73 69 61 2f 4b 61 74 68 6d 61 6e 64 75 22 2c 22 33 36 30 2c 30 22 3a 22 41 73 69 61 2f 44 68 61 6b 61 22 2c 22 33 36 30 2c 31 22 3a 22 41 73 69 61 2f 4f 6d 73 6b 22 2c 22 33 39 30 2c 30 22 3a 22 41 73 69 61 2f 52 61 6e 67 6f 6f 6e 22 2c 22 34 32 30 2c 31 22 3a 22 41 73 69 61 2f 4b 72 61 73 6e 6f 79 61 72 73 6b 22 2c 22 34 32 30 2c 30 22 3a 22 41 73 69 61 2f 4a 61 6b 61 72 74 61 22 2c 22 34 38 30 2c 30 22 3a 22 41 73 69 61 2f 53 68 61 6e 67 68 61 69 22 2c 22 34 38 30 2c 31 22 3a 22 41 73 69 61 2f 49 72 6b 75 74 73 6b 22 2c 22 35 32 35 2c 30 22 3a 22 41 75 73 74 72 61 6c 69 61 2f 45 75 63 6c 61 22 2c 22 35 32 35 2c 31 2c 73 22 3a 22 41 75 73 74 72 Data Ascii: hi","330,0":"Asia/Kolkata","345,0":"Asia/Kathmandu","360,0":"Asia/Dhaka","360,1":"Asia/Omsk","390,0":"Asia/Rangoon","420,1":"Asia/Krasnoyarsk","420,0":"Asia/Jakarta","480,0":"Asia/Shanghai","480,1":"Asia/Irkutsk","525,0":"Australia/Eucla","525,1,s":"Austr
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 31 32 2c 32 2c 31 30 2c 32 2c 30 2c 30 2c 30 29 2c 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 3a 6e 65 77 20 44 61 74 65 28 32 30 31 32 2c 32 2c 31 30 2c 37 2c 30 2c 30 2c 30 29 2c 22 41 73 69 61 2f 42 65 69 72 75 74 22 3a 6e 65 77 20 44 61 74 65 28 32 30 31 31 2c 32 2c 32 37 2c 31 2c 30 2c 30 2c 30 29 2c 22 45 75 72 6f 70 65 2f 48 65 6c 73 69 6e 6b 69 22 3a 6e 65 77 20 44 61 74 65 28 32 30 31 31 2c 32 2c 32 37 2c 34 2c 30 2c 30 2c 30 29 2c 22 45 75 72 6f 70 65 2f 49 73 74 61 6e 62 75 6c 22 3a 6e 65 77 20 44 61 74 65 28 32 30 31 31 2c 32 2c 32 38 2c 35 2c 30 2c 30 2c 30 29 2c 22 41 73 69 61 2f 44 61 6d 61 73 63 75 73 22 3a 6e 65 77 20 44 61 74 65 28 32 30 31 31 2c 33 2c 31 2c 32 2c 30 2c 30 2c 30 29 2c 22 41 73 69 61 2f 4a 65 72 75 73 61 6c 65 Data Ascii: 12,2,10,2,0,0,0),"America/New_York":new Date(2012,2,10,7,0,0,0),"Asia/Beirut":new Date(2011,2,27,1,0,0,0),"Europe/Helsinki":new Date(2011,2,27,4,0,0,0),"Europe/Istanbul":new Date(2011,2,28,5,0,0,0),"Asia/Damascus":new Date(2011,3,1,2,0,0,0),"Asia/Jerusale
2024-04-26 18:22:13 UTC	626	IN	Data Raw: 61 2f 53 61 6e 74 61 5f 49 73 61 62 65 6c 22 5d 2c 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 3a 5b 22 41 6d 65 72 69 63 61 2f 48 61 76 61 6e 61 22 2c 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 5d 2c 22 41 6d 65 72 69 63 61 2f 48 61 6c 69 66 61 78 22 3a 5b 22 41 6d 65 72 69 63 61 2f 47 6f 6f 73 65 5f 42 61 79 22 2c 22 41 6d 65 72 69 63 61 2f 48 61 6c 69 66 61 78 22 5d 2c 22 41 6d 65 72 69 63 61 2f 47 6f 64 74 68 61 62 22 3a 5b 22 41 6d 65 72 69 63 61 2f 4d 69 71 75 65 6c 6f 6e 22 2c 22 41 6d 65 72 69 63 61 2f 47 6f 64 74 68 61 62 22 5d 2c 22 41 73 69 61 2f 44 75 62 61 69 22 3a 5b 22 45 75 72 6f 70 65 2f 4d 6f 73 63 6f 77 22 5d 2c 22 41 73 69 61 2f 44 68 61 6b 61 22 3a 5b 22 41 73 69 61 2f 59 65 6b 61 74 65 72 69 6e 62 75 72 67 22 5d Data Ascii: a/Santa_Isabel"],"America/New_York":["America/Havana","America/New_York"],"America/Halifax":["America/Goose_Bay","America/Halifax"],"America/Godthab":["America/Miquelon","America/Godthab"],"Asia/Dubai":["Europe/Moscow"],"Asia/Dhaka":["Asia/Yekaterinburg"]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49763	31.13.67.20	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:13 UTC	540	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:13 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-26 18:22:13 UTC	1522	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-26 18:22:13 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-04-26 18:22:13 UTC	14816	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-04-26 18:22:13 UTC	16384	IN	Data Raw: 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 78 74 2c 63 3d 61 2e 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3b 61 3d 61 2e 76 61 6c 75 65 3b 62 3d 62 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 62 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 62 21 3d 3d 22 22 3f 62 3a 6e 75 6c 6c 3b 63 3d 64 28 63 29 3b 61 3d 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 Data Ascii: i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;var b=a.context,c=a.parameter_type;a=a.value;b=b!=null&&typeof b==="string"&&b!==""?b:null;c=d(c);a=a!=null&&typeof a==="string"
2024-04-26 18:22:14 UTC	16384	IN	Data Raw: 65 55 74 69 6c 73 22 29 3b 76 61 72 20 77 3d 73 2e 43 4c 49 43 4b 5f 49 44 5f 50 41 52 41 4d 45 54 45 52 2c 78 3d 73 2e 72 65 61 64 50 61 63 6b 65 64 43 6f 6f 6b 69 65 2c 79 3d 73 2e 43 4c 49 43 4b 54 48 52 4f 55 47 48 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 3b 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 73 22 29 3b 76 61 72 20 7a 3d 73 2e 55 53 45 5f 46 42 43 5f 41 53 5f 43 41 43 48 45 5f 4b 45 59 5f 45 58 50 45 52 49 4d 45 4e 54 2c 41 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 51 45 22 29 2c 42 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e Data Ascii: eUtils");var w=s.CLICK_ID_PARAMETER,x=s.readPackedCookie,y=s.CLICKTHROUGH_COOKIE_NAME;s=f.getFbeventsModules("SignalsFBEventsExperimentNames");var z=s.USE_FBC_AS_CACHE_KEY_EXPERIMENT,A=f.getFbeventsModules("SignalsFBEventsQE"),B=f.getFbeventsModules("Sign
2024-04-26 18:22:14 UTC	16384	IN	Data Raw: 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 75 61 72 64 72 61 69 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 69 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 Data Ascii: (a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsGuardrail",function(){return function(g,i,j,k){var l={exports:{}};l.exports;(function(){"use strict";var a=Object.assign\|\|function(a){for(var b=1;b<arguments.length;b++){var c=arguments[b];for(var d in
2024-04-26 18:22:14 UTC	1567	IN	Data Raw: 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 65 76 65 6e 74 4e 61 6d 65 73 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 61 72 72 61 79 4f 66 28 62 2e 73 74 72 69 6e 67 28 29 29 29 7d 29 29 2c 61 64 64 69 74 69 6f 6e 61 6c 55 73 65 72 44 61 74 61 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 73 65 6e 64 46 42 4c 6f 67 69 6e 49 44 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 7d 29 29 7d 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4f 70 74 49 6e Data Ascii: Null(b.string()),eventNames:b.allowNull(b.arrayOf(b.string()))})),additionalUserData:b.allowNull(b.objectWithFields({sendFBLoginID:b.allowNull(b["boolean"]())}))});k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsOptIn
2024-04-26 18:22:14 UTC	14817	IN	Data Raw: 6c 3f 63 28 64 28 62 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 5b 61 5d 3d 3d 3d 21 30 7d 29 3a 5b 5d 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 61 72 61 6c 6c 65 6c 46 69 72 65 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 Data Ascii: l?c(d(b),function(a){return b[a]===!0}):[]}}]);return a}();l.exports=a})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsParallelFireConfigTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use s
2024-04-26 18:22:14 UTC	16384	IN	Data Raw: 66 3d 68 2e 74 72 69 67 67 65 72 28 62 29 3b 69 66 28 6c 28 66 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 72 65 74 75 72 6e 3b 66 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 22 63 75 73 74 6f 6d 44 61 74 61 22 29 26 26 74 79 70 65 6f 66 20 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 6e 75 6c 6c 3b 66 7c 7c 28 62 2e 63 75 73 74 6f 6d 44 61 74 61 3d 7b 7d 29 3b 71 28 62 29 7d 6b 2e 65 78 70 6f 72 74 73 3d 72 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 Data Ascii: f=h.trigger(b);if(l(f,function(a){return a}))return;f=Object.prototype.hasOwnProperty.call(b,"customData")&&typeof b.customData!=="undefined"&&b.customData!==null;f\|\|(b.customData={});q(b)}k.exports=r})();return k.exports}(a,b,c,d)});f.ensureModuleRegiste
2024-04-26 18:22:14 UTC	16384	IN	Data Raw: 3d 30 3b 63 3c 74 3b 63 2b 2b 29 71 2e 63 61 6c 6c 28 61 2c 73 5b 63 5d 29 26 26 62 2e 70 75 73 68 28 73 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 20 61 72 72 61 79 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 61 3d 4f 62 6a 65 63 74 28 61 29 3b 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 3e 3e 3e 30 3b 69 66 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 62 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 76 61 72 20 64 3d 6e 65 77 20 41 72 72 61 79 28 63 29 2c 65 3d 30 3b 77 68 69 Data Ascii: =0;c<t;c++)q.call(a,s[c])&&b.push(s[c]);return b}function v(a,b){if(a==null)throw new TypeError(" array is null or not defined");a=Object(a);var c=a.length>>>0;if(typeof b!=="function")throw new TypeError(b+" is not a function");var d=new Array(c),e=0;whi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49762	104.16.80.73	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:13 UTC	626	OUT	GET /beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.moonreading.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:13 UTC	373	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:13 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19261 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.4.0" Last-Modified: Tue, 23 Apr 2024 12:12:17 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 87a898d828a4228a-MIA
2024-04-26 18:22:13 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 69 3d 6e 7c 7c 30 2c 72 3d 74 3b 72 65 74 75 72 6e 5b 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 22 2d 22 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 22 2d 22 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 22 2d 22 2c 72 5b 65 5b 69 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var i=n\|\|0,r=t;return[r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i+
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 72 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 69 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|r(a)}},168:function(e,t,n){"use strict";var i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(e){for(var t,n=1,i=arguments.length;n<i;n++)for(var r in t=arg
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3b 69 66 28 67 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d Data Ascii: .getAttribute("src");if(g&&"function"==typeof URLSearchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6d 29 26 26 6d 2e 6c 65 6e 67 74 68 3e 30 26 26 28 6c 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 6c 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 6c 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 6c 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 6c 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 6c 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 6c 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 6c 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 6c 29 3b 72 65 74 75 72 6e 20 6c 2e 66 69 72 73 74 50 61 69 6e 74 3d 5f 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 6c 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 5f 28 Data Ascii: &&Array.isArray(m)&&m.length>0&&(l.timingsV2={},l.versions.timings=2,l.dt=m[0].deliveryType,delete l.timings,t(m[0],l.timingsV2))}1===l.versions.timings&&t(c,l.timings),t(u,l.memory)}else O(l);return l.firstPaint=_("first-paint"),l.firstContentfulPaint=_(
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 50 29 3a 50 28 29 2c 77 3d 7b 69 64 3a 64 2c 75 72 6c 3a 65 28 29 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 74 72 69 67 67 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 41 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 41 29 7d 29 29 3b 76 61 72 20 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 64 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 78 3d Data Ascii: P):P(),w={id:d,url:e(),ts:(new Date).getTime(),triggered:!0}};"complete"===window.document.readyState?A():window.addEventListener("load",(function(){window.setTimeout(A)}));var R=function(){return L&&0===v.filter((function(e){return e.id===d})).length},x=
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 2e 75 72 6c 2c 45 2e 6c 63 70 2e 72 6c 64 3d 63 2e 72 65 73 6f 75 72 63 65 4c 6f 61 64 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 72 6c 74 3d 63 2e 72 65 73 6f 75 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 72 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 Data Ascii: .url,E.lcp.rld=c.resourceLoadDelay,E.lcp.rlt=c.resourceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(r=c.lcpResourceEntry)\|\|void 0===r?void 0:r.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?voi
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 67 65 6e 74 29 74 72 79 7b 76 61 72 20 63 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 43 68 72 6f 6d 65 5c 2f 28 5b 30 2d 39 5d 2b 29 2f 29 3b 63 26 26 63 5b 30 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 63 68 72 6f 6d 65 22 29 3e 2d 31 26 26 70 61 72 73 65 49 6e 74 28 63 5b 31 5d 29 3c 38 31 26 26 28 61 3d 21 31 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 6e 61 76 69 67 61 74 6f 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 26 26 61 26 26 69 29 7b 74 2e 73 74 3d 31 3b 76 61 72 20 75 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 2c 73 3d 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e Data Ascii: gent)try{var c=navigator.userAgent.match(/Chrome\/([0-9]+)/);c&&c[0].toLowerCase().indexOf("chrome")>-1&&parseInt(c[1])<81&&(a=!1)}catch(e){}if(navigator&&"function"==typeof navigator.sendBeacon&&a&&i){t.st=1;var u=JSON.stringify(t),s=navigator.sendBeacon
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 65 2e 6e 6f 64 65 54 79 70 65 3f 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2e 72 65 70 6c 61 63 65 28 2f 5e 23 2f 2c 22 22 29 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 22 3b 74 72 79 7b 66 6f 72 28 3b 65 26 26 39 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 29 7b 76 61 72 20 69 3d 65 2c 72 3d 69 2e 69 64 3f 22 23 22 2b 69 2e 69 64 3a 75 28 69 29 2b 28 69 2e 63 6c 61 73 73 4c 69 73 74 26 26 69 2e 63 6c 61 73 73 4c 69 73 74 2e 76 61 6c 75 65 26 26 69 2e 63 6c 61 73 73 4c 69 73 74 2e 76 61 6c 75 65 2e 74 72 69 6d 28 29 26 26 69 2e 63 6c 61 73 73 4c 69 73 74 2e 76 61 6c 75 65 2e 74 72 69 6d 28 29 2e 6c 65 6e 67 74 68 3f 22 2e 22 2b 69 2e 63 6c 61 73 73 4c 69 73 74 2e 76 61 6c 75 Data Ascii: e.nodeType?t.toLowerCase():t.toUpperCase().replace(/^#/,"")},s=function(e,t){var n="";try{for(;e&&9!==e.nodeType;){var i=e,r=i.id?"#"+i.id:u(i)+(i.classList&&i.classList.value&&i.classList.value.trim()&&i.classList.value.trim().length?"."+i.classList.valu
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 64 73 2d 69 6d 70 72 6f 76 65 6d 65 6e 74 22 3a 22 67 6f 6f 64 22 7d 28 74 2e 76 61 6c 75 65 2c 6e 29 2c 65 28 74 29 29 7d 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 29 7d 29 29 7d 29 29 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 70 61 67 65 68 69 64 65 22 21 3d 3d 74 2e 74 79 70 65 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 65 28 74 29 7d 3b 61 64 64 45 76 65 6e 74 4c Data Ascii: ds-improvement":"good"}(t.value,n),e(t))}},y=function(e){requestAnimationFrame((function(){return requestAnimationFrame((function(){return e()}))}))},h=function(e){var t=function(t){"pagehide"!==t.type&&"hidden"!==document.visibilityState\|\|e(t)};addEventL
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 2c 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 76 61 6c 75 65 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2d 69 2e 74 69 6d 65 53 74 61 6d 70 2c 6e 28 21 30 29 7d 29 29 7d 29 29 29 7d 29 29 7d 2c 52 3d 5b 2e 31 2c 2e 32 35 5d 2c 78 3d 7b 70 61 73 73 69 76 65 3a 21 30 2c 63 61 70 74 75 72 65 3a 21 30 7d 2c 46 3d 6e 65 77 20 44 61 74 65 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 74 7c 7c 28 74 3d 72 2c 6e 3d 65 2c 69 3d 6e 65 77 20 44 61 74 65 2c 4d 28 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 2c 4f 28 29 29 7d 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 3e 3d 30 26 26 6e 3c 69 2d 46 29 7b 76 61 72 20 65 3d 7b 65 6e 74 72 79 54 79 70 65 3a 22 66 69 72 73 74 2d 69 6e Data Ascii: ortAllChanges),y((function(){r.value=performance.now()-i.timeStamp,n(!0)}))})))}))},R=[.1,.25],x={passive:!0,capture:!0},F=new Date,I=function(e,r){t\|\|(t=r,n=e,i=new Date,M(removeEventListener),O())},O=function(){if(n>=0&&n<i-F){var e={entryType:"first-in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49764	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:13 UTC	491	OUT	GET /img/bg-wavewhite.png HTTP/1.1 Host: www.moonreading.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
2024-04-26 18:22:13 UTC	661	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:13 GMT Content-Type: image/png Content-Length: 5510 Connection: close Last-Modified: Mon, 10 Jan 2022 05:20:37 GMT ETag: "61dbc225-1586" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6480 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CsgR99Tovo63I4vsoRs7DIViAJPM9UbXXSkI%2BucCh%2FhSeML4trLFFiqZS38CfKn2OuRq4Jtyg4y%2FajnZZ8eqnJdTCvAKicWph4TiEZnQrS%2FG2Bf%2FErNH80zkqgfrmADhUAqL7%2BY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a898d86b72b3cd-MIA
2024-04-26 18:22:13 UTC	708	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 70 00 00 00 af 08 02 00 00 00 10 29 2c a3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 Data Ascii: PNGIHDRp),tEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 43 46 37 33 38 30 37 46 36 39 46 35 31 31 45 43 41 35 42 45 39 39 46 44 46 38 31 38 32 43 46 35 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 46 37 33 38 30 38 30 36 39 46 35 31 31 45 43 41 35 42 45 39 39 46 44 46 38 31 38 32 43 46 35 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e c5 fd 37 8b 00 00 11 f7 49 44 41 54 78 da ec dd 69 72 db c8 96 80 51 62 24 9e f7 bf c0 f7 ab 57 d0 6d 93 20 86 06 98 32 04 93 94 28 51 1c 30 9c 13 2e 05 4a 76 0d 91 d6 64 7f be 79 a3 ff fe cf ff 6e 00 00 00 00 00 00 f8 58 ec 08 00 00 00 00 Data Ascii: tanceID="xmp.iid:CF73807F69F511ECA5BE99FDF8182CF5" stRef:documentID="xmp.did:CF73808069F511ECA5BE99FDF8182CF5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>7IDATxirQb$Wm 2(Q0.JvdynX
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 3b 5a c2 d6 16 27 b6 84 9f 74 47 00 00 00 00 cb 33 0c a0 84 8e 62 00 05 00 9e 23 84 96 f3 cf bc 21 ab 8c 43 cb ae ac 1d d7 cc 7e 72 1d 01 00 00 00 2c e1 57 f8 c7 9b bb 0c a0 00 c0 34 85 e5 64 e7 a1 25 64 95 dd be 7f b9 2f df a2 8b e3 9a e8 97 5b 8e 00 00 00 00 e6 28 cf e2 3c 7d 9b 41 31 80 02 00 33 15 3e 89 9f 7c 2a 6f 9a b6 7c bb 2e ac 6e da cd e1 d0 58 d0 32 05 82 0a 00 00 00 cc 43 91 27 21 9f e4 69 1c fe 94 2b 00 b0 48 71 fc 76 5d e7 af e2 9f d0 12 16 b4 f4 2f ab a6 ee 9f 5b 0b 5a 9e 49 50 01 00 00 80 29 0a 4b 50 b6 79 9c 67 49 b8 ce cb 99 00 c0 ca 85 05 2d e7 af 0f 59 c5 bd 61 0f 3f 7f 47 00 00 00 00 53 30 2e 28 61 93 bc 33 01 00 be e2 e2 82 96 70 6f 98 71 96 3b 12 54 00 00 00 e0 35 14 14 00 e0 81 5f 69 fc bd 37 ec 84 71 96 9b 09 2a 00 00 00 f0 24 0a Data Ascii: ;Z'tG3b#!C~r,W4d%d/[(<}A13>\|o\|.nX2C'!i+Hqv]/[ZIP)KPygI-Ya?GS0.(a3poq;T5_i7q$
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 05 00 00 a6 46 44 01 00 00 06 82 ca 54 94 87 e6 18 57 fa b5 2b 4e 03 00 00 5e 45 44 01 00 00 2e 12 54 26 27 dc 09 16 b6 d9 5b b8 02 00 00 4f 20 a2 00 00 00 57 09 2a 93 56 d5 6d 5f 56 f6 b5 85 2b 00 00 70 5f 22 0a 00 00 f0 2d 82 ca 6c 94 87 b7 b1 15 0b 57 00 00 e0 36 22 0a 00 00 70 33 41 65 96 76 7d 56 a9 2d 5c 01 00 80 ab 44 14 00 00 e0 2e 04 95 79 b3 70 05 00 00 ce 89 28 00 00 c0 dd 09 2a cb 61 e1 0a 00 00 6b 96 67 f1 7f b6 89 88 02 00 00 3c 88 a0 b2 4c 55 dd fe de 55 16 ae 00 00 b0 6c 79 16 6f f3 be a0 14 79 1c c7 91 03 01 00 00 1e 47 50 59 be b0 cd fe cf ae b6 70 05 00 80 05 10 51 00 00 80 97 10 54 d6 c5 36 7b 00 00 e6 48 44 01 00 00 5e 4e 50 59 29 db ec 01 00 98 38 11 05 00 00 98 14 41 85 f7 b8 f2 67 57 d9 66 0f 00 c0 0b 89 28 00 00 c0 64 09 2a fc a3 Data Ascii: FDTW+N^ED.T&'[O WVm_V+p_"-lW6"p3Aev}V-\D.yp(akg<LUUlyoyGPYpQT6{HD^NPY)8AgWf(d*
2024-04-26 18:22:13 UTC	695	IN	Data Raw: ec 4c 00 00 00 58 39 41 05 98 87 70 4b 58 79 a8 eb ba ed 1e 76 65 ed 4c 00 ee 25 8e 8e f9 c4 06 14 00 00 00 f8 98 a0 02 cc 95 bb c2 00 6e 16 16 c8 87 d1 13 f7 77 01 00 00 c0 57 08 2a c0 a2 84 2d f7 bb fd db 20 8b a5 f7 00 9b bf eb 4f 92 24 2a b6 dd 83 05 f2 00 00 00 70 0b 41 05 58 be 5d 59 37 cd 66 b8 2e 4c 65 01 16 2c 5c de 25 9f 00 00 00 c0 dd 09 2a c0 4a a9 2c c0 02 a4 49 94 26 b1 cb bb 00 00 00 e0 09 04 15 80 77 27 95 c5 5e 16 60 52 c2 e8 49 96 c6 69 6a 75 3c 00 00 00 3c 9b a0 02 70 45 18 5e e9 5f 36 ed be 6c 36 c7 ee e2 58 80 87 1a 46 4f e2 68 e3 e6 2e 00 00 00 98 02 41 05 e0 16 4d d3 96 55 13 c6 59 9a 76 73 38 34 c6 59 80 db 8c b7 9e e4 59 12 c7 1b a3 27 00 00 00 30 41 82 0a c0 3d 0d 17 85 55 55 e3 de 30 e0 84 76 02 00 00 00 f3 25 a8 00 3c c3 f9 44 Data Ascii: LX9ApKXyveL%nwW- O$pAX]Y7f.Le,\%*J,I&w'^`RIiju<<pE^_6l6XFOh.AMUYvs84YY'0A=UU0v%<D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49765	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:13 UTC	501	OUT	GET /img/moon-reading-text-logo.png HTTP/1.1 Host: www.moonreading.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
2024-04-26 18:22:13 UTC	662	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:13 GMT Content-Type: image/png Content-Length: 37864 Connection: close Last-Modified: Fri, 04 Jun 2021 20:11:09 GMT ETag: "60ba88dd-93e8" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6480 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HvsHL6VKHvGtiHie8gMpJmTJtpzLkd%2B7nserRUw8w7cVS7T%2FP4240wG6mTF69y2jxP0HFHR6z1NbAqNr%2BKW7y6C%2Fvh78bY019Z%2F8QjzoVaLKfZtF1RS3ZF8DYjN%2FtV4IZ7Htwj0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a898d86e612203-MIA
2024-04-26 18:22:13 UTC	707	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 5c 00 00 00 82 08 06 00 00 00 52 39 c9 06 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 64 61 62 61 63 62 62 2c 20 32 30 32 31 2f 30 34 2f 31 34 2d 30 30 3a 33 39 3a 34 34 20 Data Ascii: PNGIHDR\R9tEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.dabacbb, 2021/04/14-00:39:44
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 31 41 31 30 38 38 38 35 42 44 39 35 31 31 45 42 39 41 36 41 46 39 34 37 37 46 36 44 36 41 46 31 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 41 31 30 38 38 38 36 42 44 39 35 31 31 45 42 39 41 36 41 46 39 34 37 37 46 36 44 36 41 46 31 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 9e 94 97 f8 00 00 90 58 49 44 41 54 78 da ec 9d 07 60 14 c5 f7 c7 e7 7a c9 a5 f7 46 12 4a e8 24 f4 0e 91 2a 2a 10 54 44 45 05 c1 3f 2a f0 13 14 b1 21 12 50 51 6c 80 08 8a 8d a6 f4 12 94 5e 13 e9 35 09 bd a7 27 40 7a bb 92 5c ee fe f3 Data Ascii: nstanceID="xmp.iid:1A108885BD9511EB9A6AF9477F6D6AF1" stRef:documentID="xmp.did:1A108886BD9511EB9A6AF9477F6D6AF1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>XIDATx`zFJ$*TDE?!PQl^5'@z\
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 5d 8e 91 db 9b 88 88 88 88 88 88 88 88 88 a8 11 00 17 05 0f 0e 0e e8 c4 c9 d3 43 bf fa e6 db 6f 4e 9f 39 17 ee e8 a4 c0 83 7e 11 8d 4f a8 12 18 30 3f 33 f0 c0 fc 5e 01 11 15 40 01 10 01 af 00 12 f0 1e ac c5 d2 e9 75 e8 f8 a9 93 fd 0e c7 c4 f4 6b d9 b2 79 66 cf ee dd 62 22 06 0c 38 d8 b1 63 c7 9d 32 99 38 b7 b0 b0 c8 6e 1b 14 ce 07 e0 c9 d3 d3 53 71 e6 dc b9 11 f1 09 97 47 e3 76 eb 73 ed c6 f5 10 b1 48 84 24 12 09 2e 52 76 eb e2 b3 36 58 02 a9 f6 d0 f3 a8 16 aa 68 27 c3 ff 2b bf c7 a3 7f 32 00 19 1c 13 d6 af f1 05 7c b4 6f ff a1 21 97 ae 5c ed f8 c9 87 b3 e7 8e 7d 76 cc 6f 60 69 d4 e9 74 e4 4e 27 22 22 22 22 22 22 22 22 22 b2 57 e0 92 cb e5 68 f7 9e 7d 63 3f ff f2 ab 1f ef 25 25 f9 38 3b 3b 52 6e 6e cc a0 9f 8d 06 95 2c 32 b0 8d 5e 6f fc 93 be 0a 74 21 13 Data Ascii: ]CoN9~O0?3^@ukyfb"8c28nSqGvsH$.Rv6Xh'+2\|o!\}vo`itN'"""""""""Wh}c?%%8;;Rnn,2^ot!
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: c3 dd 4d b6 77 df 81 67 ff 3b 76 6c ca a1 a3 b1 03 4a cb 4a 91 a3 a3 82 05 5a 55 5d 06 0d 75 05 77 41 ad 16 a2 3a 0a 90 af af f7 c3 1e dd ba 5d 71 70 70 d8 52 58 54 74 ed b9 31 a3 ee b9 bb bb a7 7d be f0 6b 04 11 0c 01 62 a1 0d 75 5a 08 a5 6f 68 43 f8 5d c0 e7 43 1b 66 ab 35 9a 6c ad b6 ec e4 d8 97 5f 5a ed e7 eb 33 e0 ee bd c4 59 bb f7 ee 1f 46 71 2a 9f 5f 09 53 85 b8 0d 4f 9d 3a dd 77 df 81 83 63 27 bc 3a 7e 45 7e 7e 01 b9 eb 89 88 88 88 88 88 88 88 88 88 1a 12 b8 c0 75 0f b4 65 db f6 d7 4b 4a 4a a4 52 a9 84 05 12 86 57 58 93 d5 bf 6f df 23 5d bb 74 79 bd 73 e7 f0 94 87 0f b3 8c 80 c5 05 5c c0 95 b0 a0 a0 00 e1 fd a7 68 4a 35 29 4f 0c 1c 18 ab 56 a9 36 84 84 04 b5 74 75 71 79 66 ef fe 83 43 6f dc ba d9 b9 a4 44 25 01 17 39 70 3b 84 c0 11 55 a1 0b 60 0e Data Ascii: Mwg;vlJJZU]uwA:]qppRXTt1}kbuZohC]Cf5l_Z3YFq*_SO:wc':~E~~ueKJJRWXo#]tys\hJ5)OV6tuqyfCoD%9p;U`
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: a0 ee 5d bb 52 75 d2 a8 35 14 0c 07 35 0b 44 6e ae 2e 7f 6c de ba 6d 32 fc 5e d1 26 00 a0 42 0c 66 79 ae fd fb f6 25 c0 45 44 44 44 44 44 44 44 44 44 d4 90 c0 75 eb ce 9d d6 2a b5 c6 91 47 87 19 37 88 b2 36 a1 40 ff 80 4c 67 67 c7 f8 3d fb f6 57 b2 d8 00 58 f8 f8 78 23 1e 5f 40 59 c1 6c 21 38 7e 6e 6e 9e 1e c3 cd 49 2f 2f af 73 61 61 61 6b 0f 1c 38 fc d6 be 83 07 c7 15 15 16 49 c0 8a 03 ae 80 95 0d 49 7a 2a 72 1f 58 ad 12 93 92 7d d7 6f d8 b8 e8 c1 83 07 03 31 78 2c 14 8b 9d 4f f1 e9 a8 7e 00 6d 02 be 20 14 43 e3 97 c7 8e 9f 1c 85 81 53 0c b9 b4 10 ed 26 c9 76 21 64 da 02 42 ac 3b 2a 1c cb fb f6 ee 79 f8 cd 37 26 2f d5 68 cb 8e b4 6a d9 52 1d fb df 71 9b e5 bb d2 94 6a d0 80 fe fd 50 c7 f6 ed a8 3a b0 af 01 9c bb b6 4c 9b d2 be 5d bb cb 09 97 2e 75 04 eb Data Ascii: ]Ru55Dn.lm2^&Bfy%EDDDDDDDDDuG76@Lgg=WXx#_@Yl!8~nnI//saaak8IIzrX}o1x,O~m CS&v!dB;*y7&/hjRqjP:L].u
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 03 02 17 06 08 63 9c 09 3d fe 91 47 7b d9 81 97 5a 71 71 91 73 4e 4e 8e 5c a9 54 71 27 28 58 12 85 07 fb 60 5c a9 0b 9c c0 67 01 aa 00 72 ca e9 90 e8 03 fb f7 45 9e 1e 1e 08 d6 53 41 f8 f7 76 6d db a0 8b 17 13 10 24 2a 96 3b 50 6b 9e ca 87 0d 1d b2 3d 33 f3 41 c0 f9 8b f1 3d 29 6b 0f 8f 89 de a7 37 5a b4 78 15 59 bc 8c ee 92 03 fa f7 8b ed d0 be dd a6 bf d7 6f 44 1d da b5 43 5e 5e 9e 54 a4 c0 cc fb 0f a8 63 07 04 f8 53 a1 f0 73 73 f3 90 42 e1 60 b5 f5 6a 00 72 1e ee ee 94 bb a3 4c e6 8b fc fc 2c 5a 76 25 54 ab 21 e0 09 0b 4c 19 88 c4 f5 73 90 3b 14 93 db 9e 88 88 88 88 88 88 88 88 88 a8 01 81 4b 2a 15 6b f8 7c 5e 39 1e a8 0b 0c 4b 9a 68 d7 3b fc 72 ff fe 83 e0 f8 84 cb 21 6a b5 ea aa 45 b0 04 1f c6 14 a0 2b d7 71 86 2e 06 60 18 0b 16 b8 31 fa f9 f9 a1 00 Data Ascii: c=G{ZqqsNN\Tq'(X`\grESAvm$;Pk=3A=)k7ZxYoDC^^TcSssB`jrL,Zv%T!Ls;Kk\|^9Kh;r!jE+q.`1
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 48 19 40 63 d0 cc f0 2a 12 8b 51 4a 4a 9a f7 57 8b be fb e5 ff 26 bf ee 2d 97 cb bf ab 6d 3d 29 30 c3 6d 39 7a e4 d3 d4 cf e9 19 19 54 fe 2c 70 9f 64 bb 4a 5a d6 9a 08 02 89 88 ce 9d bf d0 df 10 d1 90 75 e6 7a 43 bb b6 6a d9 e2 d6 e5 2b 57 4b fa f5 ed 53 1f f7 16 33 33 3c 01 0f 1e a2 1a f9 8c 6d 14 1b be f0 b9 c4 90 ae 83 88 a8 69 0b 7f cf 67 b2 be f7 00 5d 60 e5 1e 5d 8f 55 08 a3 0b 78 0a 14 e0 57 80 ae 28 62 fd 22 22 22 22 6a 22 c0 e5 ec e4 94 d7 a3 47 d7 d8 7f 77 ef 7d 01 0f d4 f9 c8 68 e5 32 60 4b 7c 42 42 e7 67 23 47 b5 0a eb d4 f1 9c f9 7c 5c d5 83 07 40 47 50 b3 40 0a b6 6a 0b 5a 0c bc 38 39 39 0a 7e fd 7d d5 7b 3f 2e 5f 31 37 2f 37 cf 11 60 ab b2 8b a0 a1 fe 10 b4 03 7e 7f 7e 4c e4 b6 19 ff 9b 3a 33 25 35 2d cd cf d7 17 7d ff ed d7 13 02 03 03 3e Data Ascii: H@c*QJJW&-m=)0m9zT,pdJZuzCj+WKS33<mig]`]UxW(b""""j"Gw}h2`K\|BBg#G\|\@GP@jZ899~}{?._17/7`~~L:3%5-}>
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 48 26 2d 5c 10 08 03 40 2b 24 a8 d9 ed 2e 9d c3 cf 9f 3b 7f a1 1b 80 85 81 8f 0c a0 a1 d3 eb 79 c7 8f 9f 1c 36 65 f2 eb df 8b c5 e2 12 4b 5d 03 01 ba 2c 05 2e 60 2a b0 6c dd ba 73 a7 c3 fb 1f ce 59 75 fa ec b9 ce 0a 85 83 d1 1d af 62 7f 18 9a ca b5 54 a0 88 11 c3 87 6d f9 ec d3 8f 67 0a 85 a2 8c 7b f7 12 91 9f af cf 23 a0 43 7d 8e 57 39 90 05 e4 e7 c2 30 93 3e f3 9d e9 af fb f9 fa 26 af fc ed 8f f7 54 6a 95 50 24 62 03 15 8f aa 13 e4 07 bb 7a f5 5a f3 85 5f 7f bb ee d3 8f 3f 78 d5 c9 d9 31 a6 36 17 03 f6 13 e0 ef 67 36 f4 fd 23 4f 5c 67 67 f4 eb 1f 7f 8c ca 7a 98 25 87 d0 f6 4c dd 40 5a 5d 39 ea d0 a6 f5 5d 67 27 e7 8b 07 0f 1d a5 02 68 0c 1b 3a b8 a1 ee b7 c6 64 e5 aa 0e 0e 1b 0d 84 b1 d6 87 44 70 d8 3c 86 1e e8 c5 34 f5 4e 8f d5 2e 5c f2 2c c1 c0 37 df Data Ascii: H&-\@+$.;y6eK],.`*lsYubTmg{#C}W90>&TjP$bzZ_?x16g6#O\ggz%L@Z]9]g'h:dDp<4N.\,7
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 96 59 52 52 e2 b3 e2 97 df f6 9c 3c 73 ba b3 5c 2a af b4 ce 0c 40 b3 53 a7 8e 71 4b 7e f8 a6 2f 86 38 15 03 7e 70 fe 56 bb 81 4c c0 24 be 79 cd 11 75 2c be a9 23 ec 78 a0 7e d4 cc 66 4f 34 24 70 d1 eb 35 26 d2 1d 1d d7 0e 93 79 78 20 7a 50 16 51 a5 f3 e1 da c9 c2 e0 6f 89 bd 82 17 9d 27 29 ca 82 76 81 8e 36 89 05 31 c1 ac d9 3f 4b da a5 5e 93 d2 c2 40 0f 55 b6 7a ac b1 37 4b 17 eb 5e 9d c9 11 18 98 b6 8c a2 1f 7c 76 0b f7 b4 cb 50 8d f7 07 97 b0 f0 16 1c 6f 35 c7 49 15 57 6b b4 1b eb ba cd b3 83 e6 b6 9b e7 05 6d 51 4a 64 bd 35 1f d7 2d ca 8e 9e 5d 51 c8 3e bd 33 ea 75 d2 8e be 4e 70 ff ce a8 05 48 cc ac 6b 3d 4d f4 0f af db a3 fb 77 2d 12 ba c3 f3 72 a2 2d c7 3f f4 33 7c a6 85 93 3e ec f1 4d 3c aa 48 b5 61 e9 18 87 39 c7 d5 f4 33 a8 c6 e7 b9 a5 c6 23 93 Data Ascii: YRR<s\*@SqK~/8~pVL$yu,#x~fO4$p5&yx zPQo')v61?K^@Uz7K^\|vPo5IWkmQJd5-]Q>3uNpHk=Mw-r-?3\|>M<Ha93#
2024-04-26 18:22:13 UTC	1369	IN	Data Raw: 11 47 01 c2 2a 07 0d a1 42 1e 52 eb c5 b2 b2 b2 15 df 2d 5e f2 73 7e 7e 41 1f 2e c9 91 01 a4 28 20 e3 f1 6b 2c 00 ac 89 89 49 43 4f 9f 39 db bf 22 72 62 45 ca 63 58 7f f6 e4 b0 61 3b 1c 15 0e 69 70 4d 00 22 99 62 27 1a 68 01 9c d5 97 b8 ce 54 d6 6b bd 69 f7 b1 38 33 b0 95 4c 3f 40 eb 6c 39 84 ce 8c 7e 28 84 a0 9a 17 ac 43 27 b5 03 66 54 1b 22 2c 35 6d d5 8a 37 f3 90 80 76 19 43 b7 4b b4 15 da 05 3a 67 e8 a8 77 9a 69 97 c5 30 bb da 00 ed c2 40 57 b0 1d 42 83 b9 07 56 a3 4b 8e 5e 8f 03 a2 7c fa 5e ae 57 e0 e2 78 dd ac 0a e6 b4 8b 5e 04 32 1f 12 bf be 55 1d 48 44 d9 e1 bd 52 9f d7 2c 9f 4e de 0d 03 61 18 94 43 9f 37 06 99 0f 76 02 83 d9 78 da ba d2 90 fd 0e 28 b6 9e 26 7b 26 d0 16 48 7b 54 4d cf c7 04 5b b4 0f 3d c1 12 c3 01 b6 e0 79 4b 59 08 ad 05 c5 f4 f3 Data Ascii: G*BR-^s~~A.( k,ICO9"rbEcXa;ipM"b'hTki83L?@l9~(C'fT",5m7vCK:gwi0@WBVK^\|^Wx^2UHDR,NaC7vx(&{&H{TM[=yKY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49766	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:14 UTC	789	OUT	GET /_api/timezone.php?timezone=Europe/Berlin HTTP/1.1 Host: www.moonreading.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
2024-04-26 18:22:14 UTC	783	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: timezone=Europe%2FBerlin; expires=Fri, 26-Jul-2024 18:22:14 GMT; Max-Age=7862400; path=/; domain=.moonreading.com CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aknI3fZgrWH6h4YkKoV0GKwexVR%2BbQNDSJYes6ckkgWGCgrsAzHJdfXooDCvvXKSEzE9LjmRoaZt851lir4HEA0QasqcCPmeEEuw9uJ6v%2FzWv1lEHoKpK6J4wWZo1KJfCA9u0s4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a898db2a9d31ec-MIA
2024-04-26 18:22:14 UTC	18	IN	Data Raw: 64 0d 0a 45 75 72 6f 70 65 2f 42 65 72 6c 69 6e 0d 0a Data Ascii: dEurope/Berlin
2024-04-26 18:22:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49770	31.13.67.20	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:14 UTC	1318	OUT	GET /signals/config/2523922164511192?v=2.9.154&r=stable&domain=www.moonreading.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:14 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-26 18:22:14 UTC	1524	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-26 18:22:14 UTC	11	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 Data Ascii: /*** Copyr
2024-04-26 18:22:14 UTC	1500	IN	Data Raw: 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 77 65 62 20 Data Ascii: ight (c) 2017-present, Facebook, Inc. All rights reserved.** You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection with the web
2024-04-26 18:22:14 UTC	1500	IN	Data Raw: 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f Data Ascii: turn;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="function"?Symbo
2024-04-26 18:22:14 UTC	1500	IN	Data Raw: 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: rototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a)
2024-04-26 18:22:15 UTC	336	IN	Data Raw: 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a 6a 2c 74 61 72 67 65 74 3a 65 7d Data Ascii: .shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:j,target:e}
2024-04-26 18:22:15 UTC	1381	IN	Data Raw: 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 46 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 69 78 65 6c 50 49 49 55 74 69 6c 73 22 29 2c 62 3d 61 2e 65 78 74 72 61 63 74 50 49 49 46 69 65 6c 64 73 3b 66 75 6e 63 74 69 6f 6e 20 63 28 61 2c 63 29 7b 76 61 72 20 64 3d 7b 69 64 3a 61 2e 69 64 2c 6e 61 6d 65 3a 61 2e 6e 61 6d 65 Data Ascii: istered("signalsFBEventsExtractFormFieldFeatures",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsPixelPIIUtils"),b=a.extractPIIFields;function c(a,c){var d={id:a.id,name:a.name
2024-04-26 18:22:15 UTC	1500	IN	Data Raw: 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 6f 3d 22 22 2b 6e 2e 74 61 67 4e 61 6d 65 2b 28 6e 2e 74 79 70 65 3d 3d 3d 76 6f 69 64 20 30 3f 22 22 3a 6e 2e 74 79 70 65 29 3b 6f 3d 6a 2e 69 6e 63 72 65 6d 65 6e 74 41 6e 64 47 65 74 28 6f 29 3b 69 66 28 6f 3e 64 7c 7c 6e 3d 3d 3d 67 29 63 6f 6e 74 69 6e 75 65 3b 6f 3d 63 28 6e 2c 66 26 26 6c 21 3d 6e 75 6c 6c 29 3b 6e 3d 69 28 6f 2c 32 29 3b 6f 3d 6e 5b 30 5d 3b 6e 3d 6e 5b 31 5d 3b 6f 21 3d 6e 75 6c 6c 26 26 6b 2e 70 75 73 68 28 6f 29 3b 6c 3d 62 28 6c 2c 6e 29 7d 7d 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 7d 6c 2e 65 78 70 6f 72 74 73 3d 67 7d 29 28 29 3b 72 65 74 75 72 6e Data Ascii: instanceof HTMLButtonElement){var o=""+n.tagName+(n.type===void 0?"":n.type);o=j.incrementAndGet(o);if(o>d\|\|n===g)continue;o=c(n,f&&l!=null);n=i(o,2);o=n[0];n=n[1];o!=null&&k.push(o);l=b(l,n)}}return{formFieldFeatures:k,userData:l}}l.exports=g})();return
2024-04-26 18:22:15 UTC	1500	IN	Data Raw: 7b 73 74 61 72 74 3a 62 2c 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 75 73 65 72 22 7d 3a 6e 75 6c 6c 3b 69 66 28 63 3d 3d 3d 22 40 22 29 72 65 74 75 72 6e 20 66 2e 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3d 3d 3d 22 64 6f 6d 61 69 6e 22 3f 6e 75 6c 6c 3a 61 28 7b 7d 2c 66 2c 7b 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 64 6f 6d 61 69 6e 22 7d 29 3b 69 66 28 63 3d 3d 3d 22 2e 22 29 72 65 74 75 72 6e 20 66 2e 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3d 3d 3d 22 64 6f 6d 61 69 6e 22 26 26 66 2e 6c 61 73 74 44 6f 74 49 6e 64 65 78 3d 3d 3d 62 2d 31 3f 6e 75 6c 6c 3a 61 28 7b 7d 2c 66 2c 7b 6c 61 73 74 44 6f 74 49 6e 64 65 78 3a 62 7d 29 3b 72 65 74 75 72 6e 20 66 2e 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3d 3d 3d 22 64 6f 6d 61 69 6e 22 26 26 65 2e 74 65 73 74 28 63 29 Data Ascii: {start:b,userOrDomain:"user"}:null;if(c==="@")return f.userOrDomain==="domain"?null:a({},f,{userOrDomain:"domain"});if(c===".")return f.userOrDomain==="domain"&&f.lastDotIndex===b-1?null:a({},f,{lastDotIndex:b});return f.userOrDomain==="domain"&&e.test(c)
2024-04-26 18:22:15 UTC	1500	IN	Data Raw: 73 5b 66 5d 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 65 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 69 66 28 65 5b 67 5d 21 3d 3d 61 5b 67 5d 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 7d 2c 7b 6b 65 79 3a 22 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 62 3d 41 72 72 61 79 28 61 29 2c 63 3d 30 3b 63 3c 61 3b 63 2b 2b 29 62 5b 63 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 76 61 72 20 64 3d 74 68 69 73 2e 5f 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 49 6d 70 6c 2e 61 70 70 6c 79 28 74 68 69 73 2c 62 29 3b 74 68 69 73 Data Ascii: s[f];if(a.length!==e.length)return!0;for(var g=0;g<e.length;g++)if(e[g]!==a[g])return!0;return!1}},{key:"passesThrottle",value:function(){for(var a=arguments.length,b=Array(a),c=0;c<a;c++)b[c]=arguments[c];var d=this._passesThrottleImpl.apply(this,b);this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49771	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:14 UTC	537	OUT	GET /_api/timezone.php?timezone=Europe/Berlin HTTP/1.1 Host: www.moonreading.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin
2024-04-26 18:22:15 UTC	783	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: timezone=Europe%2FBerlin; expires=Fri, 26-Jul-2024 18:22:14 GMT; Max-Age=7862400; path=/; domain=.moonreading.com CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LWYbCIlUk7ZRY5wbO7W7URzUvG7wpNu4%2FQnJe6icXSiuUrLEStwBO69UUrucafp19kXQ2Vd%2BthBqIBxj17KHbUeurWObjfl3thKw0uCW9edodaV9k604EdXAxWMyWmmqRhVaxvo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a898df4b29a546-MIA
2024-04-26 18:22:15 UTC	18	IN	Data Raw: 64 0d 0a 45 75 72 6f 70 65 2f 42 65 72 6c 69 6e 0d 0a Data Ascii: dEurope/Berlin
2024-04-26 18:22:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49781	157.240.14.35	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:15 UTC	990	OUT	GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&rl=&if=false&ts=1714155734545&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155733570&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:16 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=125, rtx=0, c=10, mss=1277, tbw=3401, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 18:22:15 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49780	157.240.14.35	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:15 UTC	1100	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&rl=&if=false&ts=1714155734545&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155733570&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger=navigation-source Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:17 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 18:22:17 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 18:22:17 UTC	1578	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-26 18:22:17 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49777	142.250.189.130	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:15 UTC	1253	OUT	GET /pagead/viewthroughconversion/590897327/?random=1714155734435&cv=11&fst=1714155734435&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&hn=www.googleadservices.com&frm=0&tiba=Request%20Your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:16 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:22:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 26-Apr-2024 18:37:16 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 18:22:16 UTC	413	IN	Data Raw: 61 35 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a5e(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-26 18:22:16 UTC	1255	IN	Data Raw: 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 61 3d 22 22 7d 72 65 74 75 72 6e 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 72 65 74 75 72 6e 20 67 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b Data Ascii: a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk
2024-04-26 18:22:16 UTC	993	IN	Data Raw: 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 51 78 4e 54 55 33 4d 7a 51 30 4d 7a 55 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 74 2f 35 39 30 38 39 37 33 32 37 2f 3f 72 61 6e 64 6f 6d 5c 78 33 64 31 37 31 34 31 35 35 37 33 34 34 33 35 5c 78 32 36 63 76 5c 78 33 64 31 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 34 31 35 34 34 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 6f 30 76 38 39 35 32 30 33 37 33 38 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 Data Ascii: (this);;s.ss_(window,'OjE3MTQxNTU3MzQ0MzU',['https://www.google.com/pagead/1p-user-list/590897327/?random\x3d1714155734435\x26cv\x3d11\x26fst\x3d1714154400000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44o0v895203738za200\x26gcd\x3d13l3l3l3
2024-04-26 18:22:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49778	142.250.189.130	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:15 UTC	1377	OUT	GET /td/rul/590897327?random=1714155734435&cv=11&fst=1714155734435&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&hn=www.googleadservices.com&frm=0&tiba=Request%20Your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:16 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:22:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 26-Apr-2024 18:37:16 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 18:22:16 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-26 18:22:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49783	142.251.35.228	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:18 UTC	1381	OUT	GET /pagead/1p-user-list/590897327/?random=1714155734435&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&hn=www.googleadservices.com&frm=0&tiba=Request%20Your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqYieZhwhfJMdq7A3besK6pwMT0Niihg&random=3721187132&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:19 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:22:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:22:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49785	172.217.165.206	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:19 UTC	1262	OUT	POST /g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155730387&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&sid=1714155737&sct=1&seg=0&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&dt=Request%20Your%20FREE%20Moon%20Reading!&en=page_view&_fv=1&_ss=1&_ee=1&tfd=17951 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.moonreading.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:19 UTC	453	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.moonreading.com Date: Fri, 26 Apr 2024 18:22:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49784	172.217.193.155	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:19 UTC	835	OUT	POST /g/collect?v=2&tid=G-H802VRJEV8&cid=630221053.1714155737&gtm=45je44o0v895586847za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.moonreading.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-26 18:22:19 UTC	453	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.moonreading.com Date: Fri, 26 Apr 2024 18:22:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49787	31.13.80.36	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:19 UTC	751	OUT	GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&rl=&if=false&ts=1714155734545&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155733570&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:19 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=171, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 18:22:19 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49786	31.13.80.36	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:19 UTC	788	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&rl=&if=false&ts=1714155734545&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155733570&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:19 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 18:22:19 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 18:22:19 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49789	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:19 UTC	1062	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.moonreading.com Connection: keep-alive Content-Length: 1587 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.moonreading.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.0.1714155737.60.0.0
2024-04-26 18:22:19 UTC	1587	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 31 33 38 30 33 37 39 38 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 39 31 39 38 39 39 30 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 5d 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 31 2c 22 66 69 72 73 74 50 61 69 6e 74 22 3a 31 30 37 32 30 2e 38 30 30 30 30 30 30 30 30 30 31 37 2c 22 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 22 3a 31 30 37 32 30 2e 38 30 30 30 30 30 30 30 30 30 31 37 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 31 34 31 35 35 37 31 39 37 33 39 2e 39 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 66 6c 22 3a Data Ascii: {"memory":{"totalJSHeapSize":13803798,"usedJSHeapSize":9198990,"jsHeapSizeLimit":2172649472},"resources":[],"referrer":"","eventType":1,"firstPaint":10720.800000000017,"firstContentfulPaint":10720.800000000017,"startTime":1714155719739.9,"versions":{"fl":
2024-04-26 18:22:19 UTC	376	IN	HTTP/1.1 204 No Content Date: Fri, 26 Apr 2024 18:22:19 GMT Connection: close access-control-allow-origin: https://www.moonreading.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 87a898fbfca40325-MIA X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49791	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:19 UTC	1042	OUT	GET /img/moon-icon-16.png HTTP/1.1 Host: www.moonreading.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.0.1714155737.60.0.0
2024-04-26 18:22:19 UTC	656	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:19 GMT Content-Type: image/png Content-Length: 1190 Connection: close Last-Modified: Fri, 06 Sep 2019 11:00:37 GMT ETag: "5d723c55-4a6" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6762 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5CTeOwkA3LJnX6sHvvmHIxvzSk01dWfXAA1dfshORlkNt1qE4YQ2TDSZt6mYwadsN15QiDr7D3YL2ZpqD5mMbbzJU9PPvhnuzdGu%2FZ%2F3ZAOJJ2HJqpI1fLorbGyn%2BB1AE1X%2BH3Y%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a898fd4ce167e7-MIA
2024-04-26 18:22:19 UTC	713	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDRatEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21
2024-04-26 18:22:19 UTC	477	IN	Data Raw: 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 36 42 37 44 38 39 45 42 45 30 42 31 31 45 39 42 45 38 41 42 30 39 31 39 33 31 45 33 38 39 38 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 36 42 37 44 38 39 46 42 45 30 42 31 31 45 39 42 45 38 41 42 30 39 31 39 33 31 45 33 38 39 38 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 4e 2e 33 4b 00 00 01 14 49 44 41 54 78 da 62 7c be e1 14 03 1a 10 00 e2 6c 20 f6 05 62 73 20 3e 0a c4 36 0c 38 00 0b 1a 3f 06 88 17 23 f1 3f 00 71 20 03 1e c0 84 c4 ae 46 d3 0c 02 69 40 fc 9a 18 03 40 ce 6d 41 93 7b 0e c4 ab a1 6c 4e 20 66 c3 67 Data Ascii: nceID="xmp.iid:76B7D89EBE0B11E9BE8AB091931E3898" stRef:documentID="xmp.did:76B7D89FBE0B11E9BE8AB091931E3898"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>N.3KIDATxb\|l bs >68?#?q Fi@@mA{lN fg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49790	172.217.193.155	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:19 UTC	912	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-146859082-1&cid=630221053.1714155737&jid=892447600&gjid=466285172&_gid=337683595.1714155737&_u=YEBAAUAAAAAAACAAI~&z=133570130 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.moonreading.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-26 18:22:19 UTC	597	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.moonreading.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Fri, 26 Apr 2024 18:22:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:22:19 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49792	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:20 UTC	734	OUT	GET /img/moon-icon-16.png HTTP/1.1 Host: www.moonreading.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.0.1714155737.60.0.0
2024-04-26 18:22:20 UTC	660	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:20 GMT Content-Type: image/png Content-Length: 1190 Connection: close Last-Modified: Fri, 06 Sep 2019 11:00:37 GMT ETag: "5d723c55-4a6" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6763 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1EJAkU5j8KqVnSm0%2F4IVSlV%2BCXSvBAsC7G1EJedDjKxBgCe1NiaAUJFnx9r5VH%2BTFIC1xVVvxCayJMZPbu5Jqt%2FVmwPPmzgMY8MJ5GoXafikn8MClwllF5SIPgV%2BNdV%2FA7MlXuQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a89900e982a4ee-MIA
2024-04-26 18:22:20 UTC	709	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDRatEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21
2024-04-26 18:22:20 UTC	481	IN	Data Raw: 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 36 42 37 44 38 39 45 42 45 30 42 31 31 45 39 42 45 38 41 42 30 39 31 39 33 31 45 33 38 39 38 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 36 42 37 44 38 39 46 42 45 30 42 31 31 45 39 42 45 38 41 42 30 39 31 39 33 31 45 33 38 39 38 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 4e 2e 33 4b 00 00 01 14 49 44 41 54 78 da 62 7c be e1 14 03 1a 10 00 e2 6c 20 f6 05 62 73 20 3e 0a c4 36 0c 38 00 0b 1a 3f 06 88 17 23 f1 3f 00 71 20 03 1e c0 84 c4 ae 46 d3 0c 02 69 40 fc 9a 18 03 40 ce 6d 41 93 7b 0e c4 ab a1 6c 4e Data Ascii: nstanceID="xmp.iid:76B7D89EBE0B11E9BE8AB091931E3898" stRef:documentID="xmp.did:76B7D89FBE0B11E9BE8AB091931E3898"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>N.3KIDATxb\|l bs >68?#?q Fi@@mA{lN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49793	142.250.217.196	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:20 UTC	1142	OUT	GET /pagead/1p-user-list/590897327/?random=1714155734435&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&hn=www.googleadservices.com&frm=0&tiba=Request%20Your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqYieZhwhfJMdq7A3besK6pwMT0Niihg&random=3721187132&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:20 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:22:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:22:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49796	173.194.212.157	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:21 UTC	654	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-146859082-1&cid=630221053.1714155737&jid=892447600&gjid=466285172&_gid=337683595.1714155737&_u=YEBAAUAAAAAAACAAI~&z=133570130 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-26 18:22:22 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Fri, 26 Apr 2024 18:22:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:22:22 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49795	142.251.35.228	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:21 UTC	819	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-146859082-1&cid=630221053.1714155737&jid=892447600&_u=YEBAAUAAAAAAACAAI~&z=317188382 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:22 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:22:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:22:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49797	142.250.217.196	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:23 UTC	580	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-146859082-1&cid=630221053.1714155737&jid=892447600&_u=YEBAAUAAAAAAACAAI~&z=317188382 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:24 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:22:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:22:24 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49798	172.217.165.206	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:23 UTC	1266	OUT	POST /g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155730387&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EEA&_s=2&sid=1714155737&sct=1&seg=0&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&dt=Request%20Your%20FREE%20Moon%20Reading!&en=scroll&epn.percent_scrolled=90&_et=23&tfd=22992 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.moonreading.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:24 UTC	453	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.moonreading.com Date: Fri, 26 Apr 2024 18:22:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49800	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:27 UTC	1032	OUT	GET /start/2/?sign=aries HTTP/1.1 Host: www.moonreading.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.0.1714155737.60.0.0
2024-04-26 18:22:27 UTC	662	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3ZA1juVmOYV99ay%2Fs3ATfaj0sVFeSsy%2BAvmGLWmVN0ckQKeChYtRXHScol2Jw1N8YaSF8DDYt%2FaOW4CzTwiobZ2tCTUot%2Fl24nyOjhceeM8PfL1ni7ZwMz7YQKtnu%2Fu1kZU30n0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8992cfa6fa4e8-MIA
2024-04-26 18:22:27 UTC	707	IN	Data Raw: 31 34 33 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 69 6d 67 2f 6d 6f 6f 6e 2d 69 63 6f 6e 2d 31 36 2e 70 6e 67 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 6b 6d 4b 69 5a 72 63 33 48 67 62 62 63 6a 71 37 35 55 34 75 73 Data Ascii: 1434<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><link rel="icon" href="/img/moon-icon-16.png"><link rel="preload" href="/css/kmKiZrc3Hgbbcjq75U4us
2024-04-26 18:22:27 UTC	1369	IN	Data Raw: 3e 0a 3c 74 69 74 6c 65 3e 47 65 74 20 79 6f 75 72 20 46 52 45 45 20 4d 6f 6f 6e 20 52 65 61 64 69 6e 67 21 3c 2f 74 69 74 6c 65 3e 0a 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2d 72 65 62 6f 6f 74 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 63 6c 65 61 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 3c 21 2d 2d 20 47 6c 6f 62 61 6c 20 73 69 74 65 20 74 61 67 20 28 67 74 61 67 2e 6a 73 29 20 2d 20 47 6f 6f 67 6c 65 20 41 6e 61 6c 79 74 69 63 73 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e Data Ascii: ><title>Get your FREE Moon Reading!</title><link href="/css/bootstrap-reboot.min.css" rel="stylesheet"><link href="/css/clean.css" rel="stylesheet">... Global site tag (gtag.js) - Google Analytics --><script async src="https://www.googletagmanager.
2024-04-26 18:22:27 UTC	1369	IN	Data Raw: 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 41 57 2d 35 39 30 38 39 37 33 32 37 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 0a 20 20 67 74 61 67 28 27 6a 73 27 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 0a 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 20 27 41 57 2d 35 39 30 38 39 37 33 32 37 27 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a Data Ascii: ript async src="https://www.googletagmanager.com/gtag/js?id=AW-590897327"></script><script> window.dataLayer = window.dataLayer \|\| []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'AW-590897327');</script>
2024-04-26 18:22:27 UTC	1369	IN	Data Raw: 2d 62 6c 61 6e 6b 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 62 6c 61 6e 6b 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 74 6f 70 22 3e 0a 3c 68 34 3e 41 70 72 69 6c 3c 2f 68 34 3e 0a 3c 2f 64 69 76 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 34 26 64 3d 31 22 3e 31 3c 2f 61 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 34 26 64 3d 32 22 3e 32 3c 2f 61 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 34 26 64 3d 33 22 3e 33 3c 2f 61 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 Data Ascii: -blank"></div><div class="bpan-blank"></div><div class="bpan-top"><h4>April</h4></div><a class="bpan-day" href="/start/3/?m=4&d=1">1</a><a class="bpan-day" href="/start/3/?m=4&d=2">2</a><a class="bpan-day" href="/start/3/?m=4&d=3">3</a><a class="b
2024-04-26 18:22:27 UTC	366	IN	Data Raw: 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 6c 6f 75 64 66 6c 61 72 65 69 6e 73 69 67 68 74 73 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2e 6d 69 6e 2e 6a 73 2f 76 35 35 62 66 61 32 66 65 65 36 35 64 34 34 36 38 38 65 39 30 63 30 30 37 33 35 65 64 31 38 39 61 31 37 31 33 32 31 38 39 39 38 37 39 33 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 35 31 32 2d 46 49 4b 52 46 52 78 67 44 32 30 6d 6f 41 6f 39 36 68 6b 5a 51 79 2f 35 51 6f 6a 5a 44 41 62 79 78 30 6d 51 31 37 6a 45 47 48 43 4a 63 2f 76 69 30 47 32 48 58 4c 74 6f 66 77 44 37 51 33 4e 6d 69 76 76 50 39 61 74 35 45 56 67 62 52 71 4f 61 4f 51 62 2b 52 67 3d 3d 22 20 64 61 74 61 2d 63 66 2d 62 65 61 63 6f 6e 3d 27 7b 22 72 61 79 49 64 22 3a 22 38 37 61 38 39 39 32 63 66 61 36 66 61 34 65 38 22 2c 22 76 65 72 73 69 Data Ascii: ps://static.cloudflareinsights.com/beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793" integrity="sha512-FIKRFRxgD20moAo96hkZQy/5QojZDAbyx0mQ17jEGHCJc/vi0G2HXLtofwD7Q3NmivvP9at5EVgbRqOaOQb+Rg==" data-cf-beacon='{"rayId":"87a8992cfa6fa4e8","versi
2024-04-26 18:22:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49799	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:27 UTC	1062	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.moonreading.com Connection: keep-alive Content-Length: 1033 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.moonreading.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.0.1714155737.60.0.0
2024-04-26 18:22:27 UTC	1033	OUT	Data Raw: 7b 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 33 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 6a 73 22 3a 22 32 30 32 34 2e 34 2e 30 22 2c 22 66 6c 22 3a 22 32 30 32 34 2e 34 2e 30 22 7d 2c 22 70 61 67 65 6c 6f 61 64 49 64 22 3a 22 37 61 61 66 30 35 32 65 2d 66 33 32 61 2d 34 34 63 63 2d 61 33 34 39 2d 37 64 31 33 33 34 66 66 34 63 63 62 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 6f 6f 6e 72 65 61 64 69 6e 67 2e 63 6f 6d 2f 73 74 61 72 74 2f 31 2f 22 2c 22 6c 61 6e 64 69 6e 67 50 61 74 68 22 3a 22 2f 73 74 61 72 74 2f 31 2f 22 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 31 34 31 35 35 37 31 39 37 33 39 2e 39 2c 22 6e 74 22 3a 22 6e 61 76 69 67 61 74 65 22 2c 22 73 69 74 65 54 6f 6b 65 Data Ascii: {"referrer":"","eventType":3,"versions":{"js":"2024.4.0","fl":"2024.4.0"},"pageloadId":"7aaf052e-f32a-44cc-a349-7d1334ff4ccb","location":"https://www.moonreading.com/start/1/","landingPath":"/start/1/","startTime":1714155719739.9,"nt":"navigate","siteToke
2024-04-26 18:22:27 UTC	376	IN	HTTP/1.1 204 No Content Date: Fri, 26 Apr 2024 18:22:27 GMT Connection: close access-control-allow-origin: https://www.moonreading.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 87a8992c3db2b3e9-MIA X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49801	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:29 UTC	991	OUT	GET /img/white-back.png HTTP/1.1 Host: www.moonreading.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.moonreading.com/start/2/?sign=aries Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.0.1714155737.60.0.0
2024-04-26 18:22:29 UTC	658	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:29 GMT Content-Type: image/png Content-Length: 2156 Connection: close Last-Modified: Fri, 11 Nov 2022 15:01:42 GMT ETag: "636e63d6-86c" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6960 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z1yPKk0NSg4EWQUEOT6CwDnxUUww%2BUzTfDQMhhCvgXqk5f%2FqbxyyEvqCQ1hijoA8cnxrqJrH7Pl3rKG1%2FIYQb6j3BHeIiNDlQxX2hUmNZYpgu%2Fb8PRcxRe1LD2M%2F8bpbClNCvKk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8993acb733343-MIA
2024-04-26 18:22:29 UTC	711	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 64 08 06 00 00 00 70 e2 95 54 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 27 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 62 30 66 38 62 65 39 30 2c 20 32 30 32 31 2f 31 32 2f 31 35 2d 32 31 3a 32 35 3a 31 35 Data Ascii: PNGIHDRddpTtEXtSoftwareAdobe ImageReadyqe<'iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15
2024-04-26 18:22:29 UTC	1369	IN	Data Raw: 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 43 34 38 31 42 41 37 42 35 38 36 39 31 31 45 44 41 46 31 32 43 38 42 37 34 37 44 44 42 34 46 38 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 34 38 31 42 41 37 43 35 38 36 39 31 31 45 44 41 46 31 32 43 38 42 37 34 37 44 44 42 34 46 38 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e c7 26 49 f6 00 00 04 db 49 44 41 54 78 da ec 9d 8b 71 e2 30 10 86 15 cf 15 c0 55 80 d3 01 54 80 a9 00 d2 41 52 01 93 0a 02 15 64 52 41 d2 41 4c 05 38 15 c4 1d 60 2a 38 3a e0 d8 bb 15 23 88 c1 b2 ad c7 ca de 7f c6 e3 dc cc c5 b1 f4 79 5f 96 64 Data Ascii: anceID="xmp.iid:C481BA7B586911EDAF12C8B747DDB4F8" stRef:documentID="xmp.did:C481BA7C586911EDAF12C8B747DDB4F8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>&IIDATxq0UTARdRAAL8`*8:#y_d
2024-04-26 18:22:29 UTC	76	IN	Data Raw: fc 7b 84 b0 16 04 a6 3e 51 01 72 99 32 03 98 89 b0 b3 6b c3 1e 33 a4 2f 04 90 53 6a 3c 45 20 65 ae 6d 84 c7 50 71 6f 89 46 30 96 6e 68 87 1d 9f 0b e2 af 78 fe 0a 30 00 3b ba a3 10 44 d6 06 7f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: {>Qr2k3/Sj<E emPqoF0nhx0;DIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49806	142.250.189.130	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:30 UTC	1236	OUT	GET /pagead/viewthroughconversion/590897327/?random=1714155749002&cv=11&fst=1714155749002&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Daries&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-26 18:22:30 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:22:30 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUlp-h3ATKf7qsqJUsZFqsVZaPZhwEk6keAtAealujawFHfSXcP4woTSyTNj; expires=Sun, 26-Apr-2026 18:22:30 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 18:22:30 UTC	244	IN	Data Raw: 61 33 36 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b Data Ascii: a36(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break
2024-04-26 18:22:30 UTC	1255	IN	Data Raw: 20 61 7d 6b 3d 70 7d 76 61 72 20 72 3d 6b 26 26 6b 5b 36 31 30 34 30 31 33 30 31 5d 3b 67 3d 6e 75 6c 6c 21 3d 72 3f 72 3a 21 31 3b 76 61 72 20 74 2c 76 3d 66 2e 6e 61 76 69 67 61 74 6f 72 3b 74 3d 76 3f 76 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 77 28 64 29 7b 72 65 74 75 72 6e 20 67 3f 74 3f 74 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 62 72 61 6e 64 29 26 26 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b Data Ascii: a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;
2024-04-26 18:22:30 UTC	1122	IN	Data Raw: 3d 74 79 70 65 6f 66 20 47 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 47 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 46 5b 30 5d 29 3b 20 66 6f 72 28 76 61 72 20 48 3b 46 2e 6c 65 6e 67 74 68 26 26 28 48 3d 46 2e 73 68 69 66 74 28 29 29 3b 29 46 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 43 3f 47 5b 48 5d 26 26 47 5b 48 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 48 5d 3f 47 3d 47 5b 48 5d 3a 47 3d 47 5b 48 5d 3d 7b 7d 3a 47 5b 48 5d 3d 43 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 51 78 4e 54 55 33 4e 44 6b 77 4d 44 49 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 Data Ascii: =typeof G.execScript\|\|G.execScript("var "+F[0]); for(var H;F.length&&(H=F.shift());)F.length\|\|void 0===C?G[H]&&G[H]!==Object.prototype[H]?G=G[H]:G=G[H]={}:G[H]=C;}).call(this);;s.ss_(window,'OjE3MTQxNTU3NDkwMDI',['https://www.google.com/pagead/1p-user-lis
2024-04-26 18:22:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49810	157.240.14.35	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:31 UTC	937	OUT	GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Daries&rl=&if=false&ts=1714155749504&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155749144&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:31 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=125, rtx=0, c=10, mss=1277, tbw=3401, tp=-1, tpl=-1, uplat=1, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 18:22:31 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49809	157.240.14.35	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:31 UTC	1052	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Daries&rl=&if=false&ts=1714155749504&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155749144&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:31 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 18:22:31 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 18:22:31 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-26 18:22:31 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49811	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:31 UTC	732	OUT	GET /img/white-back.png HTTP/1.1 Host: www.moonreading.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155749.48.0.0
2024-04-26 18:22:31 UTC	654	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:31 GMT Content-Type: image/png Content-Length: 2156 Connection: close Last-Modified: Fri, 11 Nov 2022 15:01:42 GMT ETag: "636e63d6-86c" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6962 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kf%2BXMsCOAWh1DxNRpiqbypytrbjbUQd1sAgu06O5Ij0avHBq0Min6fVwPuj3ePj78f0ETnNl%2F1D2AcCHr3ABM0KDN3qPL5XvLmI5rbFU5hADuA%2BWoqWipfm1lZ4HTt0CPPaWUqc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a899457e378e06-MIA
2024-04-26 18:22:31 UTC	715	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 64 08 06 00 00 00 70 e2 95 54 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 27 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 62 30 66 38 62 65 39 30 2c 20 32 30 32 31 2f 31 32 2f 31 35 2d 32 31 3a 32 35 3a 31 35 Data Ascii: PNGIHDRddpTtEXtSoftwareAdobe ImageReadyqe<'iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15
2024-04-26 18:22:31 UTC	1369	IN	Data Raw: 49 44 3d 22 78 6d 70 2e 69 69 64 3a 43 34 38 31 42 41 37 42 35 38 36 39 31 31 45 44 41 46 31 32 43 38 42 37 34 37 44 44 42 34 46 38 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 34 38 31 42 41 37 43 35 38 36 39 31 31 45 44 41 46 31 32 43 38 42 37 34 37 44 44 42 34 46 38 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e c7 26 49 f6 00 00 04 db 49 44 41 54 78 da ec 9d 8b 71 e2 30 10 86 15 cf 15 c0 55 80 d3 01 54 80 a9 00 d2 41 52 01 93 0a 02 15 64 52 41 d2 41 4c 05 38 15 c4 1d 60 2a 38 3a e0 d8 bb 15 23 88 c1 b2 ad c7 ca de 7f c6 e3 dc cc c5 b1 f4 79 5f 96 64 dd 1d 0e 07 Data Ascii: ID="xmp.iid:C481BA7B586911EDAF12C8B747DDB4F8" stRef:documentID="xmp.did:C481BA7C586911EDAF12C8B747DDB4F8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>&IIDATxq0UTARdRAAL8`*8:#y_d
2024-04-26 18:22:31 UTC	72	IN	Data Raw: 16 04 a6 3e 51 01 72 99 32 03 98 89 b0 b3 6b c3 1e 33 a4 2f 04 90 53 6a 3c 45 20 65 ae 6d 84 c7 50 71 6f 89 46 30 96 6e 68 87 1d 9f 0b e2 af 78 fe 0a 30 00 3b ba a3 10 44 d6 06 7f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: >Qr2k3/Sj<E emPqoF0nhx0;DIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49808	172.217.165.206	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:31 UTC	1185	OUT	POST /g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155748297&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Daries&dt=Get%20your%20FREE%20Moon%20Reading!&en=page_view&_ee=1&tfd=3485 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.moonreading.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:31 UTC	453	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.moonreading.com Date: Fri, 26 Apr 2024 18:22:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49813	142.251.35.228	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:31 UTC	1341	OUT	GET /pagead/1p-user-list/590897327/?random=1714155749002&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Daries&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqNEK4AiQ59PqZMM9cIh8_uqxf27yIUzrMp0ZPfvrLnqIKp3P3&random=501203676&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:31 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:22:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:22:31 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49804	142.250.189.130	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:31 UTC	1360	OUT	GET /td/rul/590897327?random=1714155749002&cv=11&fst=1714155749002&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Daries&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-26 18:22:31 UTC	954	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:22:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R; expires=Sun, 26-Apr-2026 18:22:31 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 18:22:31 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-26 18:22:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49814	31.13.80.36	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:31 UTC	698	OUT	GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Daries&rl=&if=false&ts=1714155749504&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155749144&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:32 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=171, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 18:22:31 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49815	31.13.80.36	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:31 UTC	735	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Daries&rl=&if=false&ts=1714155749504&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155749144&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:32 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 18:22:32 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 18:22:32 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49816	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:34 UTC	1013	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.moonreading.com Connection: keep-alive Content-Length: 1518 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.moonreading.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/start/2/?sign=aries Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155749.48.0.0
2024-04-26 18:22:34 UTC	1518	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 31 32 36 35 33 39 35 37 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 39 30 31 38 35 35 37 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 5d 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 31 2c 22 66 69 72 73 74 50 61 69 6e 74 22 3a 32 36 31 34 2e 36 39 39 39 39 39 39 39 39 39 38 32 35 2c 22 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 22 3a 32 36 31 34 2e 36 39 39 39 39 39 39 39 39 39 38 32 35 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 31 34 31 35 35 37 34 35 39 37 34 2e 36 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 66 6c 22 3a Data Ascii: {"memory":{"totalJSHeapSize":12653957,"usedJSHeapSize":9018557,"jsHeapSizeLimit":2172649472},"resources":[],"referrer":"","eventType":1,"firstPaint":2614.6999999999825,"firstContentfulPaint":2614.6999999999825,"startTime":1714155745974.6,"versions":{"fl":
2024-04-26 18:22:34 UTC	376	IN	HTTP/1.1 204 No Content Date: Fri, 26 Apr 2024 18:22:34 GMT Connection: close access-control-allow-origin: https://www.moonreading.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 87a8995acd0367c6-MIA X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49817	142.250.217.196	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:34 UTC	1102	OUT	GET /pagead/1p-user-list/590897327/?random=1714155749002&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Daries&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqNEK4AiQ59PqZMM9cIh8_uqxf27yIUzrMp0ZPfvrLnqIKp3P3&random=501203676&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:35 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:22:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:22:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49818	172.217.165.206	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:38 UTC	1208	OUT	POST /g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155748297&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EEA&_s=2&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Daries&dt=Get%20your%20FREE%20Moon%20Reading!&en=scroll&epn.percent_scrolled=90&_et=16&tfd=8500 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.moonreading.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:38 UTC	453	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.moonreading.com Date: Fri, 26 Apr 2024 18:22:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49819	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:38 UTC	1033	OUT	GET /start/2/?sign=taurus HTTP/1.1 Host: www.moonreading.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155749.48.0.0
2024-04-26 18:22:39 UTC	658	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VnhZf1CtMd8yVaivxZ4keVl4Yjm3Rmazrs15qiaA%2BFgBM%2BSVcRDooFNSrUVXd7RUC%2Bhsin8kbS7nwJGpsHAzQhyvpDPk320QEGDPS6qN2LP8NHDhkBAzVd4wgJySChdInxKGS4A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a89975dff86db6-MIA
2024-04-26 18:22:39 UTC	711	IN	Data Raw: 31 34 31 64 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 69 6d 67 2f 6d 6f 6f 6e 2d 69 63 6f 6e 2d 31 36 2e 70 6e 67 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 6b 6d 4b 69 5a 72 63 33 48 67 62 62 63 6a 71 37 35 55 34 75 73 Data Ascii: 141d<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><link rel="icon" href="/img/moon-icon-16.png"><link rel="preload" href="/css/kmKiZrc3Hgbbcjq75U4us
2024-04-26 18:22:39 UTC	1369	IN	Data Raw: 69 74 6c 65 3e 47 65 74 20 79 6f 75 72 20 46 52 45 45 20 4d 6f 6f 6e 20 52 65 61 64 69 6e 67 21 3c 2f 74 69 74 6c 65 3e 0a 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2d 72 65 62 6f 6f 74 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 63 6c 65 61 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 3c 21 2d 2d 20 47 6c 6f 62 61 6c 20 73 69 74 65 20 74 61 67 20 28 67 74 61 67 2e 6a 73 29 20 2d 20 47 6f 6f 67 6c 65 20 41 6e 61 6c 79 74 69 63 73 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f Data Ascii: itle>Get your FREE Moon Reading!</title><link href="/css/bootstrap-reboot.min.css" rel="stylesheet"><link href="/css/clean.css" rel="stylesheet">... Global site tag (gtag.js) - Google Analytics --><script async src="https://www.googletagmanager.com/
2024-04-26 18:22:39 UTC	1369	IN	Data Raw: 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 41 57 2d 35 39 30 38 39 37 33 32 37 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 0a 20 20 67 74 61 67 28 27 6a 73 27 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 0a 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 20 27 41 57 2d 35 39 30 38 39 37 33 32 37 27 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d Data Ascii: async src="https://www.googletagmanager.com/gtag/js?id=AW-590897327"></script><script> window.dataLayer = window.dataLayer \|\| []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'AW-590897327');</script>...
2024-04-26 18:22:39 UTC	1369	IN	Data Raw: 3d 22 62 70 61 6e 2d 62 6c 61 6e 6b 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 74 6f 70 22 3e 0a 3c 68 34 3e 4d 61 79 3c 2f 68 34 3e 0a 3c 2f 64 69 76 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 35 26 64 3d 31 22 3e 31 3c 2f 61 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 35 26 64 3d 32 22 3e 32 3c 2f 61 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 35 26 64 3d 33 22 3e 33 3c 2f 61 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d Data Ascii: ="bpan-blank"></div><div class="bpan-top"><h4>May</h4></div><a class="bpan-day" href="/start/3/?m=5&d=1">1</a><a class="bpan-day" href="/start/3/?m=5&d=2">2</a><a class="bpan-day" href="/start/3/?m=5&d=3">3</a><a class="bpan-day" href="/start/3/?m=
2024-04-26 18:22:39 UTC	339	IN	Data Raw: 68 74 73 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2e 6d 69 6e 2e 6a 73 2f 76 35 35 62 66 61 32 66 65 65 36 35 64 34 34 36 38 38 65 39 30 63 30 30 37 33 35 65 64 31 38 39 61 31 37 31 33 32 31 38 39 39 38 37 39 33 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 35 31 32 2d 46 49 4b 52 46 52 78 67 44 32 30 6d 6f 41 6f 39 36 68 6b 5a 51 79 2f 35 51 6f 6a 5a 44 41 62 79 78 30 6d 51 31 37 6a 45 47 48 43 4a 63 2f 76 69 30 47 32 48 58 4c 74 6f 66 77 44 37 51 33 4e 6d 69 76 76 50 39 61 74 35 45 56 67 62 52 71 4f 61 4f 51 62 2b 52 67 3d 3d 22 20 64 61 74 61 2d 63 66 2d 62 65 61 63 6f 6e 3d 27 7b 22 72 61 79 49 64 22 3a 22 38 37 61 38 39 39 37 35 64 66 66 38 36 64 62 36 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 2e 34 2e 30 22 2c 22 74 6f 6b 65 6e 22 3a 22 38 64 66 Data Ascii: hts.com/beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793" integrity="sha512-FIKRFRxgD20moAo96hkZQy/5QojZDAbyx0mQ17jEGHCJc/vi0G2HXLtofwD7Q3NmivvP9at5EVgbRqOaOQb+Rg==" data-cf-beacon='{"rayId":"87a89975dff86db6","version":"2024.4.0","token":"8df
2024-04-26 18:22:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49820	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:38 UTC	1012	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.moonreading.com Connection: keep-alive Content-Length: 956 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.moonreading.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/start/2/?sign=aries Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155749.48.0.0
2024-04-26 18:22:38 UTC	956	OUT	Data Raw: 7b 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 33 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 6a 73 22 3a 22 32 30 32 34 2e 34 2e 30 22 2c 22 66 6c 22 3a 22 32 30 32 34 2e 34 2e 30 22 7d 2c 22 70 61 67 65 6c 6f 61 64 49 64 22 3a 22 31 38 65 61 65 62 34 65 2d 34 31 37 35 2d 34 36 38 38 2d 61 37 39 64 2d 33 62 62 61 35 33 31 30 31 65 63 66 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 6f 6f 6e 72 65 61 64 69 6e 67 2e 63 6f 6d 2f 73 74 61 72 74 2f 32 2f 22 2c 22 6c 61 6e 64 69 6e 67 50 61 74 68 22 3a 22 2f 73 74 61 72 74 2f 32 2f 22 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 31 34 31 35 35 37 34 35 39 37 34 2e 36 2c 22 6e 74 22 3a 22 6e 61 76 69 67 61 74 65 22 2c 22 73 69 74 65 54 6f 6b 65 Data Ascii: {"referrer":"","eventType":3,"versions":{"js":"2024.4.0","fl":"2024.4.0"},"pageloadId":"18eaeb4e-4175-4688-a79d-3bba53101ecf","location":"https://www.moonreading.com/start/2/","landingPath":"/start/2/","startTime":1714155745974.6,"nt":"navigate","siteToke
2024-04-26 18:22:39 UTC	376	IN	HTTP/1.1 204 No Content Date: Fri, 26 Apr 2024 18:22:39 GMT Connection: close access-control-allow-origin: https://www.moonreading.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 87a899754dac8ddc-MIA X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49825	157.240.14.35	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:39 UTC	938	OUT	GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus&rl=&if=false&ts=1714155758561&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155758448&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:39 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=125, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 18:22:39 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49824	157.240.14.35	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:39 UTC	1048	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus&rl=&if=false&ts=1714155758561&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155758448&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger=navigation-source, event-source Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:39 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 18:22:39 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 18:22:39 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-26 18:22:39 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49822	142.250.189.130	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:39 UTC	1275	OUT	GET /pagead/viewthroughconversion/590897327/?random=1714155758513&cv=11&fst=1714155758513&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R
2024-04-26 18:22:40 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:22:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 18:22:40 UTC	552	IN	Data Raw: 61 33 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a38(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-26 18:22:40 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-26 18:22:40 UTC	816	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 34 31 35 34 34 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 6f 30 76 38 39 35 32 30 33 37 33 38 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6d 6f 6f 6e 72 65 61 64 69 6e 67 2e 63 6f 6d 25 32 46 73 74 61 72 74 25 32 46 32 25 32 46 25 33 46 73 69 67 6e 25 33 44 74 61 75 72 75 73 5c 78 32 36 68 6e 5c 78 33 64 77 77 77 2e 67 6f 6f 67 6c 65 Data Ascii: st\x3d1714154400000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44o0v895203738za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus\x26hn\x3dwww.google
2024-04-26 18:22:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49823	142.250.189.130	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:39 UTC	1399	OUT	GET /td/rul/590897327?random=1714155758513&cv=11&fst=1714155758513&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R
2024-04-26 18:22:40 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:22:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 18:22:40 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-26 18:22:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49827	172.217.165.206	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:39 UTC	1185	OUT	POST /g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155758382&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus&dt=Get%20your%20FREE%20Moon%20Reading!&en=page_view&_ee=1&tfd=965 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.moonreading.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:40 UTC	453	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.moonreading.com Date: Fri, 26 Apr 2024 18:22:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49828	31.13.80.36	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:40 UTC	699	OUT	GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus&rl=&if=false&ts=1714155758561&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155758448&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:40 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=171, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 18:22:40 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49829	31.13.80.36	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:40 UTC	736	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus&rl=&if=false&ts=1714155758561&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155758448&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:40 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 18:22:40 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 18:22:40 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49830	142.251.35.228	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:40 UTC	1343	OUT	GET /pagead/1p-user-list/590897327/?random=1714155758513&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqzWsHOLhSVQriZ_5mI_OJrfjqBnIWbPw5uvMZSIJu0MDt_AQ0&random=1733060914&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:40 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:22:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:22:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49831	142.250.217.196	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:42 UTC	1104	OUT	GET /pagead/1p-user-list/590897327/?random=1714155758513&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqzWsHOLhSVQriZ_5mI_OJrfjqBnIWbPw5uvMZSIJu0MDt_AQ0&random=1733060914&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:43 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:22:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:22:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49832	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:43 UTC	1014	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.moonreading.com Connection: keep-alive Content-Length: 1556 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.moonreading.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/start/2/?sign=taurus Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155758.39.0.0
2024-04-26 18:22:43 UTC	1556	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 31 32 31 36 32 35 31 34 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 38 38 35 32 39 30 32 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 5d 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 31 2c 22 66 69 72 73 74 50 61 69 6e 74 22 3a 37 38 38 2e 36 30 30 30 30 30 30 30 30 30 30 35 38 2c 22 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 22 3a 37 38 38 2e 36 30 30 30 30 30 30 30 30 30 30 35 38 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 31 34 31 35 35 37 35 37 36 34 35 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 66 6c 22 3a 22 32 30 32 Data Ascii: {"memory":{"totalJSHeapSize":12162514,"usedJSHeapSize":8852902,"jsHeapSizeLimit":2172649472},"resources":[],"referrer":"","eventType":1,"firstPaint":788.6000000000058,"firstContentfulPaint":788.6000000000058,"startTime":1714155757645,"versions":{"fl":"202
2024-04-26 18:22:43 UTC	376	IN	HTTP/1.1 204 No Content Date: Fri, 26 Apr 2024 18:22:43 GMT Connection: close access-control-allow-origin: https://www.moonreading.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 87a89990cb7e0a2e-MIA X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49834	172.217.165.206	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:44 UTC	1208	OUT	POST /g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155758382&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EEA&_s=2&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus&dt=Get%20your%20FREE%20Moon%20Reading!&en=scroll&epn.percent_scrolled=90&_et=4&tfd=5971 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.moonreading.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:45 UTC	453	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.moonreading.com Date: Fri, 26 Apr 2024 18:22:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49836	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:48 UTC	1033	OUT	GET /start/2/?sign=gemini HTTP/1.1 Host: www.moonreading.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155758.39.0.0
2024-04-26 18:22:48 UTC	664	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lfLb%2BeXOTN8oA95p%2BbLKj%2F9EeBImk4cCQ1I6u0nGcCCicViP7fs5vyvWJmCvIklFbTM0Z0sD05bDl3ZnwxrX%2BbmJ13YSk%2B2VhDEmg2x5UBySIlch6C%2BUpnXRy8IxETDVoJychWY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a899b03a664c08-MIA
2024-04-26 18:22:48 UTC	705	IN	Data Raw: 31 34 33 33 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 69 6d 67 2f 6d 6f 6f 6e 2d 69 63 6f 6e 2d 31 36 2e 70 6e 67 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 6b 6d 4b 69 5a 72 63 33 48 67 62 62 63 6a 71 37 35 55 34 75 73 Data Ascii: 1433<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><link rel="icon" href="/img/moon-icon-16.png"><link rel="preload" href="/css/kmKiZrc3Hgbbcjq75U4us
2024-04-26 18:22:48 UTC	1369	IN	Data Raw: 74 22 3e 0a 3c 74 69 74 6c 65 3e 47 65 74 20 79 6f 75 72 20 46 52 45 45 20 4d 6f 6f 6e 20 52 65 61 64 69 6e 67 21 3c 2f 74 69 74 6c 65 3e 0a 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2d 72 65 62 6f 6f 74 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 63 6c 65 61 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 3c 21 2d 2d 20 47 6c 6f 62 61 6c 20 73 69 74 65 20 74 61 67 20 28 67 74 61 67 2e 6a 73 29 20 2d 20 47 6f 6f 67 6c 65 20 41 6e 61 6c 79 74 69 63 73 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 Data Ascii: t"><title>Get your FREE Moon Reading!</title><link href="/css/bootstrap-reboot.min.css" rel="stylesheet"><link href="/css/clean.css" rel="stylesheet">... Global site tag (gtag.js) - Google Analytics --><script async src="https://www.googletagmanage
2024-04-26 18:22:48 UTC	1369	IN	Data Raw: 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 41 57 2d 35 39 30 38 39 37 33 32 37 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 0a 20 20 67 74 61 67 28 27 6a 73 27 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 0a 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 20 27 41 57 2d 35 39 30 38 39 37 33 32 37 27 29 3b 0a 3c 2f 73 63 72 69 70 74 Data Ascii: script async src="https://www.googletagmanager.com/gtag/js?id=AW-590897327"></script><script> window.dataLayer = window.dataLayer \|\| []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'AW-590897327');</script
2024-04-26 18:22:48 UTC	1369	IN	Data Raw: 6e 2d 62 6c 61 6e 6b 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 62 6c 61 6e 6b 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 74 6f 70 22 3e 0a 3c 68 34 3e 4a 75 6e 65 3c 2f 68 34 3e 0a 3c 2f 64 69 76 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 36 26 64 3d 31 22 3e 31 3c 2f 61 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 36 26 64 3d 32 22 3e 32 3c 2f 61 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 36 26 64 3d 33 22 3e 33 3c 2f 61 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 Data Ascii: n-blank"></div><div class="bpan-blank"></div><div class="bpan-top"><h4>June</h4></div><a class="bpan-day" href="/start/3/?m=6&d=1">1</a><a class="bpan-day" href="/start/3/?m=6&d=2">2</a><a class="bpan-day" href="/start/3/?m=6&d=3">3</a><a class="b
2024-04-26 18:22:48 UTC	367	IN	Data Raw: 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 6c 6f 75 64 66 6c 61 72 65 69 6e 73 69 67 68 74 73 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2e 6d 69 6e 2e 6a 73 2f 76 35 35 62 66 61 32 66 65 65 36 35 64 34 34 36 38 38 65 39 30 63 30 30 37 33 35 65 64 31 38 39 61 31 37 31 33 32 31 38 39 39 38 37 39 33 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 35 31 32 2d 46 49 4b 52 46 52 78 67 44 32 30 6d 6f 41 6f 39 36 68 6b 5a 51 79 2f 35 51 6f 6a 5a 44 41 62 79 78 30 6d 51 31 37 6a 45 47 48 43 4a 63 2f 76 69 30 47 32 48 58 4c 74 6f 66 77 44 37 51 33 4e 6d 69 76 76 50 39 61 74 35 45 56 67 62 52 71 4f 61 4f 51 62 2b 52 67 3d 3d 22 20 64 61 74 61 2d 63 66 2d 62 65 61 63 6f 6e 3d 27 7b 22 72 61 79 49 64 22 3a 22 38 37 61 38 39 39 62 30 33 61 36 36 34 63 30 38 22 2c 22 76 65 72 73 Data Ascii: tps://static.cloudflareinsights.com/beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793" integrity="sha512-FIKRFRxgD20moAo96hkZQy/5QojZDAbyx0mQ17jEGHCJc/vi0G2HXLtofwD7Q3NmivvP9at5EVgbRqOaOQb+Rg==" data-cf-beacon='{"rayId":"87a899b03a664c08","vers
2024-04-26 18:22:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49835	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:48 UTC	1013	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.moonreading.com Connection: keep-alive Content-Length: 948 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.moonreading.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/start/2/?sign=taurus Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155758.39.0.0
2024-04-26 18:22:48 UTC	948	OUT	Data Raw: 7b 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 33 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 6a 73 22 3a 22 32 30 32 34 2e 34 2e 30 22 2c 22 66 6c 22 3a 22 32 30 32 34 2e 34 2e 30 22 7d 2c 22 70 61 67 65 6c 6f 61 64 49 64 22 3a 22 30 31 66 64 63 32 64 66 2d 35 35 35 38 2d 34 39 36 32 2d 39 38 66 64 2d 64 39 65 62 64 39 34 64 33 33 64 38 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 6f 6f 6e 72 65 61 64 69 6e 67 2e 63 6f 6d 2f 73 74 61 72 74 2f 32 2f 22 2c 22 6c 61 6e 64 69 6e 67 50 61 74 68 22 3a 22 2f 73 74 61 72 74 2f 32 2f 22 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 31 34 31 35 35 37 35 37 36 34 35 2c 22 6e 74 22 3a 22 6e 61 76 69 67 61 74 65 22 2c 22 73 69 74 65 54 6f 6b 65 6e 22 Data Ascii: {"referrer":"","eventType":3,"versions":{"js":"2024.4.0","fl":"2024.4.0"},"pageloadId":"01fdc2df-5558-4962-98fd-d9ebd94d33d8","location":"https://www.moonreading.com/start/2/","landingPath":"/start/2/","startTime":1714155757645,"nt":"navigate","siteToken"
2024-04-26 18:22:48 UTC	376	IN	HTTP/1.1 204 No Content Date: Fri, 26 Apr 2024 18:22:48 GMT Connection: close access-control-allow-origin: https://www.moonreading.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 87a899b03f908756-MIA X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49838	142.250.189.130	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:49 UTC	1275	OUT	GET /pagead/viewthroughconversion/590897327/?random=1714155767945&cv=11&fst=1714155767945&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R
2024-04-26 18:22:49 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:22:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 18:22:49 UTC	552	IN	Data Raw: 61 33 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a38(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-26 18:22:49 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-26 18:22:49 UTC	816	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 34 31 35 34 34 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 6f 30 76 38 39 35 32 30 33 37 33 38 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6d 6f 6f 6e 72 65 61 64 69 6e 67 2e 63 6f 6d 25 32 46 73 74 61 72 74 25 32 46 32 25 32 46 25 33 46 73 69 67 6e 25 33 44 67 65 6d 69 6e 69 5c 78 32 36 68 6e 5c 78 33 64 77 77 77 2e 67 6f 6f 67 6c 65 Data Ascii: st\x3d1714154400000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44o0v895203738za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini\x26hn\x3dwww.google
2024-04-26 18:22:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49839	172.217.165.206	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:49 UTC	1186	OUT	POST /g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155767833&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini&dt=Get%20your%20FREE%20Moon%20Reading!&en=page_view&_ee=1&tfd=1308 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.moonreading.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:49 UTC	453	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.moonreading.com Date: Fri, 26 Apr 2024 18:22:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49843	157.240.14.35	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:49 UTC	938	OUT	GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini&rl=&if=false&ts=1714155768081&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155767931&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:49 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=125, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 18:22:49 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49842	157.240.14.35	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:49 UTC	1030	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini&rl=&if=false&ts=1714155768081&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155767931&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:49 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 18:22:49 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 18:22:49 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-26 18:22:49 UTC	73	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-26 18:22:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49840	142.250.189.130	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:49 UTC	1399	OUT	GET /td/rul/590897327?random=1714155767945&cv=11&fst=1714155767945&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R
2024-04-26 18:22:49 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:22:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 18:22:49 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-26 18:22:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49844	142.251.35.228	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:49 UTC	1343	OUT	GET /pagead/1p-user-list/590897327/?random=1714155767945&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqTIVdXM9vQ6QaAwBnUb9eUtCrGYtaRBeKdoKN2dUIUzoi6aLA&random=1317763472&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:50 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:22:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:22:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49845	31.13.80.36	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:49 UTC	699	OUT	GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini&rl=&if=false&ts=1714155768081&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155767931&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:50 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=171, rtx=0, c=10, mss=1277, tbw=3401, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 18:22:50 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49846	31.13.80.36	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:49 UTC	736	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini&rl=&if=false&ts=1714155768081&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155767931&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:50 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 18:22:50 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 18:22:50 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49849	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:50 UTC	1014	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.moonreading.com Connection: keep-alive Content-Length: 1569 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.moonreading.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/start/2/?sign=gemini Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155768.29.0.0
2024-04-26 18:22:50 UTC	1569	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 31 32 36 33 37 30 38 39 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 39 33 33 34 30 34 39 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 5d 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 31 2c 22 66 69 72 73 74 50 61 69 6e 74 22 3a 31 31 35 31 2e 31 30 30 30 30 30 30 30 30 30 30 35 38 2c 22 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 22 3a 31 31 35 31 2e 31 30 30 30 30 30 30 30 30 30 30 35 38 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 31 34 31 35 35 37 36 36 37 35 30 2e 38 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 66 6c 22 3a Data Ascii: {"memory":{"totalJSHeapSize":12637089,"usedJSHeapSize":9334049,"jsHeapSizeLimit":2172649472},"resources":[],"referrer":"","eventType":1,"firstPaint":1151.1000000000058,"firstContentfulPaint":1151.1000000000058,"startTime":1714155766750.8,"versions":{"fl":
2024-04-26 18:22:50 UTC	376	IN	HTTP/1.1 204 No Content Date: Fri, 26 Apr 2024 18:22:50 GMT Connection: close access-control-allow-origin: https://www.moonreading.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 87a899be0ba567c8-MIA X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49848	142.250.217.196	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:51 UTC	1104	OUT	GET /pagead/1p-user-list/590897327/?random=1714155767945&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqTIVdXM9vQ6QaAwBnUb9eUtCrGYtaRBeKdoKN2dUIUzoi6aLA&random=1317763472&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:52 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:22:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:22:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49850	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:53 UTC	1033	OUT	GET /start/2/?sign=cancer HTTP/1.1 Host: www.moonreading.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155768.29.0.0
2024-04-26 18:22:53 UTC	670	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:22:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5lqnIGcSRqFgDlwTy%2B1b%2FWqUmVcFrH7aH7gdn7l6%2B%2BOVzvIpCzt%2BaGOeL9Wc7y7Y%2Ftv%2BxeJsPwgmUVTOclHE7CmpzWvIs31kp9d0%2Bzjc8XIJLVqykvhxZI74fCi%2BGvxVefPnZLA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a899cefbbd8ddf-MIA
2024-04-26 18:22:53 UTC	699	IN	Data Raw: 31 35 30 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 69 6d 67 2f 6d 6f 6f 6e 2d 69 63 6f 6e 2d 31 36 2e 70 6e 67 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 6b 6d 4b 69 5a 72 63 33 48 67 62 62 63 6a 71 37 35 55 34 75 73 Data Ascii: 150c<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><link rel="icon" href="/img/moon-icon-16.png"><link rel="preload" href="/css/kmKiZrc3Hgbbcjq75U4us
2024-04-26 18:22:53 UTC	1369	IN	Data Raw: 6c 65 73 68 65 65 74 22 3e 0a 3c 74 69 74 6c 65 3e 47 65 74 20 79 6f 75 72 20 46 52 45 45 20 4d 6f 6f 6e 20 52 65 61 64 69 6e 67 21 3c 2f 74 69 74 6c 65 3e 0a 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2d 72 65 62 6f 6f 74 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 63 6c 65 61 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 3c 21 2d 2d 20 47 6c 6f 62 61 6c 20 73 69 74 65 20 74 61 67 20 28 67 74 61 67 2e 6a 73 29 20 2d 20 47 6f 6f 67 6c 65 20 41 6e 61 6c 79 74 69 63 73 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 Data Ascii: lesheet"><title>Get your FREE Moon Reading!</title><link href="/css/bootstrap-reboot.min.css" rel="stylesheet"><link href="/css/clean.css" rel="stylesheet">... Global site tag (gtag.js) - Google Analytics --><script async src="https://www.googletag
2024-04-26 18:22:53 UTC	1369	IN	Data Raw: 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 41 57 2d 35 39 30 38 39 37 33 32 37 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 0a 20 20 67 74 61 67 28 27 6a 73 27 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 0a 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 20 27 41 57 2d 35 39 30 38 39 37 33 32 37 27 29 3b 0a 3c 2f Data Ascii: --><script async src="https://www.googletagmanager.com/gtag/js?id=AW-590897327"></script><script> window.dataLayer = window.dataLayer \|\| []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'AW-590897327');</
2024-04-26 18:22:53 UTC	1369	IN	Data Raw: 6b 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 74 6f 70 22 3e 0a 3c 68 34 3e 4a 75 6c 79 3c 2f 68 34 3e 0a 3c 2f 64 69 76 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 37 26 64 3d 31 22 3e 31 3c 2f 61 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 37 26 64 3d 32 22 3e 32 3c 2f 61 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 37 26 64 3d 33 22 3e 33 3c 2f 61 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 37 26 64 3d 34 22 3e 34 3c 2f Data Ascii: k"></div><div class="bpan-top"><h4>July</h4></div><a class="bpan-day" href="/start/3/?m=7&d=1">1</a><a class="bpan-day" href="/start/3/?m=7&d=2">2</a><a class="bpan-day" href="/start/3/?m=7&d=3">3</a><a class="bpan-day" href="/start/3/?m=7&d=4">4</
2024-04-26 18:22:53 UTC	590	IN	Data Raw: 6b 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 62 6c 61 6e 6b 22 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 6a 61 78 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 33 2e 36 2e 30 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 24 28 22 2e 70 72 6f 67 72 65 73 73 49 6e 22 29 2e 63 73 73 28 27 77 69 64 74 68 27 2c 20 22 31 32 2e 35 25 22 29 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 64 65 66 65 72 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 6c 6f 75 64 66 6c 61 72 65 69 6e 73 69 67 68 74 73 2e Data Ascii: k"></div><div class="bpan-blank"></div></div></div><script src="https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js"></script><script>$(".progressIn").css('width', "12.5%")</script><script defer src="https://static.cloudflareinsights.
2024-04-26 18:22:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49851	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:53 UTC	1013	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.moonreading.com Connection: keep-alive Content-Length: 708 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.moonreading.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/start/2/?sign=gemini Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155768.29.0.0
2024-04-26 18:22:53 UTC	708	OUT	Data Raw: 7b 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 33 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 6a 73 22 3a 22 32 30 32 34 2e 34 2e 30 22 2c 22 66 6c 22 3a 22 32 30 32 34 2e 34 2e 30 22 7d 2c 22 70 61 67 65 6c 6f 61 64 49 64 22 3a 22 39 39 63 31 30 35 38 37 2d 31 31 35 37 2d 34 65 30 33 2d 38 38 61 32 2d 66 31 31 35 64 33 31 36 34 30 34 31 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 6f 6f 6e 72 65 61 64 69 6e 67 2e 63 6f 6d 2f 73 74 61 72 74 2f 32 2f 22 2c 22 6c 61 6e 64 69 6e 67 50 61 74 68 22 3a 22 2f 73 74 61 72 74 2f 32 2f 22 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 31 34 31 35 35 37 36 36 37 35 30 2e 38 2c 22 6e 74 22 3a 22 6e 61 76 69 67 61 74 65 22 2c 22 73 69 74 65 54 6f 6b 65 Data Ascii: {"referrer":"","eventType":3,"versions":{"js":"2024.4.0","fl":"2024.4.0"},"pageloadId":"99c10587-1157-4e03-88a2-f115d3164041","location":"https://www.moonreading.com/start/2/","landingPath":"/start/2/","startTime":1714155766750.8,"nt":"navigate","siteToke
2024-04-26 18:22:53 UTC	376	IN	HTTP/1.1 204 No Content Date: Fri, 26 Apr 2024 18:22:53 GMT Connection: close access-control-allow-origin: https://www.moonreading.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 87a899cdfb899071-MIA X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49855	157.240.14.35	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:53 UTC	938	OUT	GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer&rl=&if=false&ts=1714155772792&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155772719&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:54 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=125, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 18:22:54 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49856	157.240.14.35	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:53 UTC	1048	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer&rl=&if=false&ts=1714155772792&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155772719&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger=navigation-source Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:54 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 18:22:54 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 18:22:54 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-26 18:22:54 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49853	142.250.189.130	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:53 UTC	1399	OUT	GET /td/rul/590897327?random=1714155772736&cv=11&fst=1714155772736&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R
2024-04-26 18:22:54 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:22:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 18:22:54 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-26 18:22:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49857	172.217.165.206	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:54 UTC	1185	OUT	POST /g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155772654&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer&dt=Get%20your%20FREE%20Moon%20Reading!&en=page_view&_ee=1&tfd=902 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.moonreading.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:54 UTC	453	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.moonreading.com Date: Fri, 26 Apr 2024 18:22:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49859	31.13.80.36	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:54 UTC	699	OUT	GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer&rl=&if=false&ts=1714155772792&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155772719&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:54 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=171, rtx=0, c=10, mss=1277, tbw=3401, tp=-1, tpl=-1, uplat=2, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 18:22:54 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49860	31.13.80.36	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:54 UTC	736	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer&rl=&if=false&ts=1714155772792&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155772719&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:54 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 18:22:54 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 18:22:54 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49852	142.250.189.130	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:55 UTC	1275	OUT	GET /pagead/viewthroughconversion/590897327/?random=1714155772736&cv=11&fst=1714155772736&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R
2024-04-26 18:22:55 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:22:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 18:22:55 UTC	552	IN	Data Raw: 61 33 37 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a37(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-26 18:22:55 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-26 18:22:55 UTC	815	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 34 31 35 34 34 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 6f 30 76 38 39 35 32 30 33 37 33 38 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6d 6f 6f 6e 72 65 61 64 69 6e 67 2e 63 6f 6d 25 32 46 73 74 61 72 74 25 32 46 32 25 32 46 25 33 46 73 69 67 6e 25 33 44 63 61 6e 63 65 72 5c 78 32 36 68 6e 5c 78 33 64 77 77 77 2e 67 6f 6f 67 6c 65 Data Ascii: st\x3d1714154400000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44o0v895203738za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer\x26hn\x3dwww.google
2024-04-26 18:22:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49862	172.217.165.206	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:57 UTC	1209	OUT	POST /g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155767833&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EEA&_s=2&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini&dt=Get%20your%20FREE%20Moon%20Reading!&en=scroll&epn.percent_scrolled=90&_et=15&tfd=7300 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.moonreading.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:57 UTC	453	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.moonreading.com Date: Fri, 26 Apr 2024 18:22:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49863	142.251.35.228	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:58 UTC	1342	OUT	GET /pagead/1p-user-list/590897327/?random=1714155772736&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqOW8fMWLylNgAqPfY1shkOexPoT-1wbi3cHW3_kl5buMCEFqZ&random=381502526&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:58 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:22:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:22:58 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49867	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:58 UTC	1014	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.moonreading.com Connection: keep-alive Content-Length: 1513 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.moonreading.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/start/2/?sign=cancer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155772.25.0.0; _ga=GA1.2.630221053.1714155737
2024-04-26 18:22:58 UTC	1513	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 31 32 38 38 36 33 32 35 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 39 36 30 30 39 30 35 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 5d 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 31 2c 22 66 69 72 73 74 50 61 69 6e 74 22 3a 37 38 37 2e 39 30 30 30 30 30 30 30 30 30 32 33 33 2c 22 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 22 3a 37 38 37 2e 39 30 30 30 30 30 30 30 30 30 32 33 33 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 31 34 31 35 35 37 37 31 39 32 36 2e 37 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 66 6c 22 3a 22 32 Data Ascii: {"memory":{"totalJSHeapSize":12886325,"usedJSHeapSize":9600905,"jsHeapSizeLimit":2172649472},"resources":[],"referrer":"","eventType":1,"firstPaint":787.9000000000233,"firstContentfulPaint":787.9000000000233,"startTime":1714155771926.7,"versions":{"fl":"2
2024-04-26 18:22:58 UTC	376	IN	HTTP/1.1 204 No Content Date: Fri, 26 Apr 2024 18:22:58 GMT Connection: close access-control-allow-origin: https://www.moonreading.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 87a899f12a89749f-MIA X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49868	142.250.217.196	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:58 UTC	1103	OUT	GET /pagead/1p-user-list/590897327/?random=1714155772736&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqOW8fMWLylNgAqPfY1shkOexPoT-1wbi3cHW3_kl5buMCEFqZ&random=381502526&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:59 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:22:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:22:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49869	172.217.165.206	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:22:59 UTC	1208	OUT	POST /g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155772654&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EEA&_s=2&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer&dt=Get%20your%20FREE%20Moon%20Reading!&en=scroll&epn.percent_scrolled=90&_et=4&tfd=5915 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.moonreading.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:22:59 UTC	453	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.moonreading.com Date: Fri, 26 Apr 2024 18:22:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49870	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:02 UTC	1030	OUT	GET /start/2/?sign=leo HTTP/1.1 Host: www.moonreading.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155772.25.0.0; _ga=GA1.2.630221053.1714155737
2024-04-26 18:23:02 UTC	658	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:23:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HisoTPnmoBXQm2wvamUEeDXYTprSJOaIi8cxngQS905TW7A7UE2fl0VSevbZEeN1RVgDoSkPDcrpsLQxec6I%2FNOR1XqrdVAV6dYmGte5h8Aji4LMuHcnOAlPeC7%2Bl%2BAF42CDE78%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a89a06f820258e-MIA
2024-04-26 18:23:02 UTC	711	IN	Data Raw: 31 35 30 62 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 69 6d 67 2f 6d 6f 6f 6e 2d 69 63 6f 6e 2d 31 36 2e 70 6e 67 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 6b 6d 4b 69 5a 72 63 33 48 67 62 62 63 6a 71 37 35 55 34 75 73 Data Ascii: 150b<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><link rel="icon" href="/img/moon-icon-16.png"><link rel="preload" href="/css/kmKiZrc3Hgbbcjq75U4us
2024-04-26 18:23:02 UTC	1369	IN	Data Raw: 69 74 6c 65 3e 47 65 74 20 79 6f 75 72 20 46 52 45 45 20 4d 6f 6f 6e 20 52 65 61 64 69 6e 67 21 3c 2f 74 69 74 6c 65 3e 0a 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2d 72 65 62 6f 6f 74 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 63 6c 65 61 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 3c 21 2d 2d 20 47 6c 6f 62 61 6c 20 73 69 74 65 20 74 61 67 20 28 67 74 61 67 2e 6a 73 29 20 2d 20 47 6f 6f 67 6c 65 20 41 6e 61 6c 79 74 69 63 73 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f Data Ascii: itle>Get your FREE Moon Reading!</title><link href="/css/bootstrap-reboot.min.css" rel="stylesheet"><link href="/css/clean.css" rel="stylesheet">... Global site tag (gtag.js) - Google Analytics --><script async src="https://www.googletagmanager.com/
2024-04-26 18:23:02 UTC	1369	IN	Data Raw: 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 41 57 2d 35 39 30 38 39 37 33 32 37 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 0a 20 20 67 74 61 67 28 27 6a 73 27 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 0a 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 20 27 41 57 2d 35 39 30 38 39 37 33 32 37 27 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d Data Ascii: async src="https://www.googletagmanager.com/gtag/js?id=AW-590897327"></script><script> window.dataLayer = window.dataLayer \|\| []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'AW-590897327');</script>...
2024-04-26 18:23:02 UTC	1369	IN	Data Raw: 63 6c 61 73 73 3d 22 62 70 61 6e 2d 74 6f 70 22 3e 0a 3c 68 34 3e 41 75 67 75 73 74 3c 2f 68 34 3e 0a 3c 2f 64 69 76 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 38 26 64 3d 31 22 3e 31 3c 2f 61 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 38 26 64 3d 32 22 3e 32 3c 2f 61 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 38 26 64 3d 33 22 3e 33 3c 2f 61 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 38 26 64 3d 34 22 3e 34 3c 2f 61 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 Data Ascii: class="bpan-top"><h4>August</h4></div><a class="bpan-day" href="/start/3/?m=8&d=1">1</a><a class="bpan-day" href="/start/3/?m=8&d=2">2</a><a class="bpan-day" href="/start/3/?m=8&d=3">3</a><a class="bpan-day" href="/start/3/?m=8&d=4">4</a><a class="
2024-04-26 18:23:02 UTC	577	IN	Data Raw: 76 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 62 6c 61 6e 6b 22 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 6a 61 78 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 33 2e 36 2e 30 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 24 28 22 2e 70 72 6f 67 72 65 73 73 49 6e 22 29 2e 63 73 73 28 27 77 69 64 74 68 27 2c 20 22 31 32 2e 35 25 22 29 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 64 65 66 65 72 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 6c 6f 75 64 66 6c 61 72 65 69 6e 73 69 67 68 74 73 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2e 6d 69 Data Ascii: v class="bpan-blank"></div></div></div><script src="https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js"></script><script>$(".progressIn").css('width', "12.5%")</script><script defer src="https://static.cloudflareinsights.com/beacon.mi
2024-04-26 18:23:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49871	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:02 UTC	1013	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.moonreading.com Connection: keep-alive Content-Length: 704 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.moonreading.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/start/2/?sign=cancer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155772.25.0.0; _ga=GA1.2.630221053.1714155737
2024-04-26 18:23:02 UTC	704	OUT	Data Raw: 7b 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 33 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 6a 73 22 3a 22 32 30 32 34 2e 34 2e 30 22 2c 22 66 6c 22 3a 22 32 30 32 34 2e 34 2e 30 22 7d 2c 22 70 61 67 65 6c 6f 61 64 49 64 22 3a 22 33 30 34 36 63 31 65 61 2d 38 35 38 65 2d 34 37 64 64 2d 61 63 34 33 2d 61 63 34 34 65 64 64 32 32 64 39 32 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 6f 6f 6e 72 65 61 64 69 6e 67 2e 63 6f 6d 2f 73 74 61 72 74 2f 32 2f 22 2c 22 6c 61 6e 64 69 6e 67 50 61 74 68 22 3a 22 2f 73 74 61 72 74 2f 32 2f 22 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 31 34 31 35 35 37 37 31 39 32 36 2e 37 2c 22 6e 74 22 3a 22 6e 61 76 69 67 61 74 65 22 2c 22 73 69 74 65 54 6f 6b 65 Data Ascii: {"referrer":"","eventType":3,"versions":{"js":"2024.4.0","fl":"2024.4.0"},"pageloadId":"3046c1ea-858e-47dd-ac43-ac44edd22d92","location":"https://www.moonreading.com/start/2/","landingPath":"/start/2/","startTime":1714155771926.7,"nt":"navigate","siteToke
2024-04-26 18:23:02 UTC	376	IN	HTTP/1.1 204 No Content Date: Fri, 26 Apr 2024 18:23:02 GMT Connection: close access-control-allow-origin: https://www.moonreading.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 87a89a05f9d1259a-MIA X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49878	157.240.14.35	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:02 UTC	935	OUT	GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo&rl=&if=false&ts=1714155781782&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155781689&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:23:03 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=128, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 18:23:03 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49879	157.240.14.35	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:02 UTC	1027	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo&rl=&if=false&ts=1714155781782&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155781689&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:23:03 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 18:23:03 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 18:23:03 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-26 18:23:03 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49875	142.250.189.130	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:02 UTC	1396	OUT	GET /td/rul/590897327?random=1714155781702&cv=11&fst=1714155781702&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R
2024-04-26 18:23:03 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:23:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 18:23:03 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-26 18:23:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49874	142.250.189.130	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:02 UTC	1272	OUT	GET /pagead/viewthroughconversion/590897327/?random=1714155781702&cv=11&fst=1714155781702&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R
2024-04-26 18:23:03 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:23:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 18:23:03 UTC	552	IN	Data Raw: 61 33 35 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a35(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-26 18:23:03 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-26 18:23:03 UTC	813	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 34 31 35 34 34 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 6f 30 76 38 39 35 32 30 33 37 33 38 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6d 6f 6f 6e 72 65 61 64 69 6e 67 2e 63 6f 6d 25 32 46 73 74 61 72 74 25 32 46 32 25 32 46 25 33 46 73 69 67 6e 25 33 44 6c 65 6f 5c 78 32 36 68 6e 5c 78 33 64 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 Data Ascii: st\x3d1714154400000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44o0v895203738za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo\x26hn\x3dwww.googleads
2024-04-26 18:23:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49877	172.217.165.206	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:03 UTC	1183	OUT	POST /g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155781594&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo&dt=Get%20your%20FREE%20Moon%20Reading!&en=page_view&_ee=1&tfd=1012 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.moonreading.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:23:03 UTC	453	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.moonreading.com Date: Fri, 26 Apr 2024 18:23:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49880	31.13.80.36	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:03 UTC	696	OUT	GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo&rl=&if=false&ts=1714155781782&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155781689&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:23:03 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=171, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=2, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 18:23:03 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49881	31.13.80.36	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:03 UTC	733	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo&rl=&if=false&ts=1714155781782&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155781689&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:23:03 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 18:23:03 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 18:23:03 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49883	142.251.35.228	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:03 UTC	1340	OUT	GET /pagead/1p-user-list/590897327/?random=1714155781702&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqMbrkWhNYs2cmY5Wzxa2bgQP1Khe0FtxnGUjvcQrYfdVYTtdZ&random=3797219326&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:23:03 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:23:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:23:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49884	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:05 UTC	1011	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.moonreading.com Connection: keep-alive Content-Length: 1492 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.moonreading.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/start/2/?sign=leo Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155781.16.0.0
2024-04-26 18:23:05 UTC	1492	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 31 32 36 35 31 39 35 39 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 39 35 38 31 36 34 33 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 5d 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 31 2c 22 66 69 72 73 74 50 61 69 6e 74 22 3a 38 39 31 2e 33 30 30 30 30 30 30 30 30 30 31 37 35 2c 22 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 22 3a 38 39 31 2e 33 30 30 30 30 30 30 30 30 30 31 37 35 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 31 34 31 35 35 37 38 30 37 36 30 2e 37 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 66 6c 22 3a 22 32 Data Ascii: {"memory":{"totalJSHeapSize":12651959,"usedJSHeapSize":9581643,"jsHeapSizeLimit":2172649472},"resources":[],"referrer":"","eventType":1,"firstPaint":891.3000000000175,"firstContentfulPaint":891.3000000000175,"startTime":1714155780760.7,"versions":{"fl":"2
2024-04-26 18:23:06 UTC	376	IN	HTTP/1.1 204 No Content Date: Fri, 26 Apr 2024 18:23:06 GMT Connection: close access-control-allow-origin: https://www.moonreading.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 87a89a1dcad37428-MIA X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49887	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:07 UTC	1032	OUT	GET /start/2/?sign=virgo HTTP/1.1 Host: www.moonreading.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155781.16.0.0
2024-04-26 18:23:07 UTC	658	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:23:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ajnrph7oIiaED%2Bdd6CMC9iRNWoRhp4gXz7FoLCLSUXL72dgfHAI5nmYttWyraQ26eKEG3xEY2BaC2YhoeDWKYHUYjnMMMTi9h%2BjykEFHmG5UZKFq0P%2BnuU6EUbFRTLtbSEcFzE4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a89a26ad6c097d-MIA
2024-04-26 18:23:07 UTC	711	IN	Data Raw: 31 35 31 32 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 69 6d 67 2f 6d 6f 6f 6e 2d 69 63 6f 6e 2d 31 36 2e 70 6e 67 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 6b 6d 4b 69 5a 72 63 33 48 67 62 62 63 6a 71 37 35 55 34 75 73 Data Ascii: 1512<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><link rel="icon" href="/img/moon-icon-16.png"><link rel="preload" href="/css/kmKiZrc3Hgbbcjq75U4us
2024-04-26 18:23:07 UTC	1369	IN	Data Raw: 69 74 6c 65 3e 47 65 74 20 79 6f 75 72 20 46 52 45 45 20 4d 6f 6f 6e 20 52 65 61 64 69 6e 67 21 3c 2f 74 69 74 6c 65 3e 0a 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2d 72 65 62 6f 6f 74 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 63 6c 65 61 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 3c 21 2d 2d 20 47 6c 6f 62 61 6c 20 73 69 74 65 20 74 61 67 20 28 67 74 61 67 2e 6a 73 29 20 2d 20 47 6f 6f 67 6c 65 20 41 6e 61 6c 79 74 69 63 73 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f Data Ascii: itle>Get your FREE Moon Reading!</title><link href="/css/bootstrap-reboot.min.css" rel="stylesheet"><link href="/css/clean.css" rel="stylesheet">... Global site tag (gtag.js) - Google Analytics --><script async src="https://www.googletagmanager.com/
2024-04-26 18:23:07 UTC	1369	IN	Data Raw: 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 41 57 2d 35 39 30 38 39 37 33 32 37 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 0a 20 20 67 74 61 67 28 27 6a 73 27 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 0a 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 20 27 41 57 2d 35 39 30 38 39 37 33 32 37 27 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d Data Ascii: async src="https://www.googletagmanager.com/gtag/js?id=AW-590897327"></script><script> window.dataLayer = window.dataLayer \|\| []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'AW-590897327');</script>...
2024-04-26 18:23:07 UTC	1369	IN	Data Raw: 64 69 76 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 74 6f 70 22 3e 0a 3c 68 34 3e 53 65 70 74 65 6d 62 65 72 3c 2f 68 34 3e 0a 3c 2f 64 69 76 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 39 26 64 3d 31 22 3e 31 3c 2f 61 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 39 26 64 3d 32 22 3e 32 3c 2f 61 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 39 26 64 3d 33 22 3e 33 3c 2f 61 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 39 26 64 3d 34 22 3e 34 3c 2f 61 3e 0a 3c 61 20 Data Ascii: div class="bpan-top"><h4>September</h4></div><a class="bpan-day" href="/start/3/?m=9&d=1">1</a><a class="bpan-day" href="/start/3/?m=9&d=2">2</a><a class="bpan-day" href="/start/3/?m=9&d=3">3</a><a class="bpan-day" href="/start/3/?m=9&d=4">4</a><a
2024-04-26 18:23:07 UTC	584	IN	Data Raw: 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 62 6c 61 6e 6b 22 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 6a 61 78 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 33 2e 36 2e 30 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 24 28 22 2e 70 72 6f 67 72 65 73 73 49 6e 22 29 2e 63 73 73 28 27 77 69 64 74 68 27 2c 20 22 31 32 2e 35 25 22 29 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 64 65 66 65 72 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 6c 6f 75 64 66 6c 61 72 65 69 6e 73 69 67 68 74 73 2e 63 6f 6d 2f 62 65 Data Ascii: iv><div class="bpan-blank"></div></div></div><script src="https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js"></script><script>$(".progressIn").css('width', "12.5%")</script><script defer src="https://static.cloudflareinsights.com/be
2024-04-26 18:23:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49886	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:07 UTC	1010	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.moonreading.com Connection: keep-alive Content-Length: 704 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.moonreading.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/start/2/?sign=leo Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155781.16.0.0
2024-04-26 18:23:07 UTC	704	OUT	Data Raw: 7b 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 33 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 6a 73 22 3a 22 32 30 32 34 2e 34 2e 30 22 2c 22 66 6c 22 3a 22 32 30 32 34 2e 34 2e 30 22 7d 2c 22 70 61 67 65 6c 6f 61 64 49 64 22 3a 22 64 35 31 36 33 37 66 62 2d 62 39 65 64 2d 34 38 31 63 2d 61 34 32 34 2d 65 37 62 31 31 65 38 65 30 36 64 36 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 6f 6f 6e 72 65 61 64 69 6e 67 2e 63 6f 6d 2f 73 74 61 72 74 2f 32 2f 22 2c 22 6c 61 6e 64 69 6e 67 50 61 74 68 22 3a 22 2f 73 74 61 72 74 2f 32 2f 22 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 31 34 31 35 35 37 38 30 37 36 30 2e 37 2c 22 6e 74 22 3a 22 6e 61 76 69 67 61 74 65 22 2c 22 73 69 74 65 54 6f 6b 65 Data Ascii: {"referrer":"","eventType":3,"versions":{"js":"2024.4.0","fl":"2024.4.0"},"pageloadId":"d51637fb-b9ed-481c-a424-e7b11e8e06d6","location":"https://www.moonreading.com/start/2/","landingPath":"/start/2/","startTime":1714155780760.7,"nt":"navigate","siteToke
2024-04-26 18:23:07 UTC	376	IN	HTTP/1.1 204 No Content Date: Fri, 26 Apr 2024 18:23:07 GMT Connection: close access-control-allow-origin: https://www.moonreading.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 87a89a259a689ab3-MIA X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49885	142.250.217.196	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:07 UTC	1101	OUT	GET /pagead/1p-user-list/590897327/?random=1714155781702&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqMbrkWhNYs2cmY5Wzxa2bgQP1Khe0FtxnGUjvcQrYfdVYTtdZ&random=3797219326&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:23:08 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:23:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:23:08 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49891	157.240.14.35	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:07 UTC	937	OUT	GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo&rl=&if=false&ts=1714155786766&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155786705&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:23:08 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=125, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=1, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 18:23:08 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49892	157.240.14.35	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:07 UTC	1047	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo&rl=&if=false&ts=1714155786766&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155786705&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source;navigation-source, trigger Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:23:08 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 18:23:08 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 18:23:08 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-26 18:23:08 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49888	142.250.189.130	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:07 UTC	1274	OUT	GET /pagead/viewthroughconversion/590897327/?random=1714155786721&cv=11&fst=1714155786721&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R
2024-04-26 18:23:08 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:23:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 18:23:08 UTC	552	IN	Data Raw: 61 33 36 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a36(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-26 18:23:08 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-26 18:23:08 UTC	814	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 34 31 35 34 34 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 6f 30 76 38 39 35 32 30 33 37 33 38 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6d 6f 6f 6e 72 65 61 64 69 6e 67 2e 63 6f 6d 25 32 46 73 74 61 72 74 25 32 46 32 25 32 46 25 33 46 73 69 67 6e 25 33 44 76 69 72 67 6f 5c 78 32 36 68 6e 5c 78 33 64 77 77 77 2e 67 6f 6f 67 6c 65 61 Data Ascii: st\x3d1714154400000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44o0v895203738za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo\x26hn\x3dwww.googlea
2024-04-26 18:23:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49889	142.250.189.130	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:07 UTC	1398	OUT	GET /td/rul/590897327?random=1714155786721&cv=11&fst=1714155786721&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R
2024-04-26 18:23:08 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:23:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 18:23:08 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-26 18:23:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49895	172.217.165.206	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:08 UTC	1184	OUT	POST /g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155786655&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo&dt=Get%20your%20FREE%20Moon%20Reading!&en=page_view&_ee=1&tfd=857 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.moonreading.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:23:08 UTC	453	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.moonreading.com Date: Fri, 26 Apr 2024 18:23:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49893	172.217.165.206	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:09 UTC	1205	OUT	POST /g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155781594&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EEA&_s=2&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo&dt=Get%20your%20FREE%20Moon%20Reading!&en=scroll&epn.percent_scrolled=90&_et=5&tfd=6232 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.moonreading.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:23:10 UTC	453	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.moonreading.com Date: Fri, 26 Apr 2024 18:23:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49898	31.13.80.36	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:09 UTC	698	OUT	GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo&rl=&if=false&ts=1714155786766&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155786705&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:23:09 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=177, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 18:23:09 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49897	31.13.80.36	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:09 UTC	735	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo&rl=&if=false&ts=1714155786766&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155786705&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:23:09 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 18:23:09 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 18:23:09 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49896	142.251.35.228	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:09 UTC	1341	OUT	GET /pagead/1p-user-list/590897327/?random=1714155786721&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqDdJfTiANYjvQzvkvxCo4fcWPlml0qDOhg_8I9fvGQVLReDhj&random=521127747&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:23:10 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:23:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:23:10 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49899	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:10 UTC	1013	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.moonreading.com Connection: keep-alive Content-Length: 1471 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.moonreading.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/start/2/?sign=virgo Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155786.11.0.0; _ga=GA1.2.630221053.1714155737
2024-04-26 18:23:10 UTC	1471	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 31 32 36 38 39 39 36 34 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 39 33 38 39 32 30 30 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 5d 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 31 2c 22 66 69 72 73 74 50 61 69 6e 74 22 3a 37 34 31 2e 38 30 30 30 30 30 30 30 30 30 31 37 35 2c 22 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 22 3a 37 34 31 2e 38 30 30 30 30 30 30 30 30 30 31 37 35 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 31 34 31 35 35 37 38 35 39 35 30 2e 35 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 66 6c 22 3a 22 32 Data Ascii: {"memory":{"totalJSHeapSize":12689964,"usedJSHeapSize":9389200,"jsHeapSizeLimit":2172649472},"resources":[],"referrer":"","eventType":1,"firstPaint":741.8000000000175,"firstContentfulPaint":741.8000000000175,"startTime":1714155785950.5,"versions":{"fl":"2
2024-04-26 18:23:11 UTC	376	IN	HTTP/1.1 204 No Content Date: Fri, 26 Apr 2024 18:23:11 GMT Connection: close access-control-allow-origin: https://www.moonreading.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 87a89a3cffc64986-MIA X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49901	142.250.217.196	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:10 UTC	1102	OUT	GET /pagead/1p-user-list/590897327/?random=1714155786721&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqDdJfTiANYjvQzvkvxCo4fcWPlml0qDOhg_8I9fvGQVLReDhj&random=521127747&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:23:11 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:23:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:23:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49902	172.217.165.206	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:15 UTC	1207	OUT	POST /g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155786655&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EEA&_s=2&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo&dt=Get%20your%20FREE%20Moon%20Reading!&en=scroll&epn.percent_scrolled=90&_et=4&tfd=5872 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.moonreading.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:23:15 UTC	453	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.moonreading.com Date: Fri, 26 Apr 2024 18:23:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49904	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:16 UTC	1032	OUT	GET /start/2/?sign=libra HTTP/1.1 Host: www.moonreading.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155786.11.0.0; _ga=GA1.2.630221053.1714155737
2024-04-26 18:23:16 UTC	654	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:23:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VEIBEOvblHeyTlBEeyMUW7fULnaaefEEAK155cuQPcmQi2HnKmSFx3DtZXhgoMMy8xBAhylY5T6eLxMQ80tG7Xvydv3Kuak2%2FFcpgfPkl7btpBT1347oxymlNeUlV8r76wTW7ho%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a89a5ebd678dac-MIA
2024-04-26 18:23:16 UTC	715	IN	Data Raw: 31 35 31 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 69 6d 67 2f 6d 6f 6f 6e 2d 69 63 6f 6e 2d 31 36 2e 70 6e 67 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 6b 6d 4b 69 5a 72 63 33 48 67 62 62 63 6a 71 37 35 55 34 75 73 Data Ascii: 1514<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><link rel="icon" href="/img/moon-icon-16.png"><link rel="preload" href="/css/kmKiZrc3Hgbbcjq75U4us
2024-04-26 18:23:16 UTC	1369	IN	Data Raw: 3e 47 65 74 20 79 6f 75 72 20 46 52 45 45 20 4d 6f 6f 6e 20 52 65 61 64 69 6e 67 21 3c 2f 74 69 74 6c 65 3e 0a 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2d 72 65 62 6f 6f 74 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 63 6c 65 61 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 3c 21 2d 2d 20 47 6c 6f 62 61 6c 20 73 69 74 65 20 74 61 67 20 28 67 74 61 67 2e 6a 73 29 20 2d 20 47 6f 6f 67 6c 65 20 41 6e 61 6c 79 74 69 63 73 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 Data Ascii: >Get your FREE Moon Reading!</title><link href="/css/bootstrap-reboot.min.css" rel="stylesheet"><link href="/css/clean.css" rel="stylesheet">... Global site tag (gtag.js) - Google Analytics --><script async src="https://www.googletagmanager.com/gtag
2024-04-26 18:23:16 UTC	1369	IN	Data Raw: 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 41 57 2d 35 39 30 38 39 37 33 32 37 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 0a 20 20 67 74 61 67 28 27 6a 73 27 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 0a 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 20 27 41 57 2d 35 39 30 38 39 37 33 32 37 27 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 20 45 6e 64 Data Ascii: nc src="https://www.googletagmanager.com/gtag/js?id=AW-590897327"></script><script> window.dataLayer = window.dataLayer \|\| []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'AW-590897327');</script>... End
2024-04-26 18:23:16 UTC	1369	IN	Data Raw: 68 34 3e 4f 63 74 6f 62 65 72 3c 2f 68 34 3e 0a 3c 2f 64 69 76 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 31 30 26 64 3d 31 22 3e 31 3c 2f 61 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 31 30 26 64 3d 32 22 3e 32 3c 2f 61 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 31 30 26 64 3d 33 22 3e 33 3c 2f 61 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 3d 22 2f 73 74 61 72 74 2f 33 2f 3f 6d 3d 31 30 26 64 3d 34 22 3e 34 3c 2f 61 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 64 61 79 22 20 68 72 65 66 Data Ascii: h4>October</h4></div><a class="bpan-day" href="/start/3/?m=10&d=1">1</a><a class="bpan-day" href="/start/3/?m=10&d=2">2</a><a class="bpan-day" href="/start/3/?m=10&d=3">3</a><a class="bpan-day" href="/start/3/?m=10&d=4">4</a><a class="bpan-day" href
2024-04-26 18:23:16 UTC	582	IN	Data Raw: 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 70 61 6e 2d 62 6c 61 6e 6b 22 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 6a 61 78 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 33 2e 36 2e 30 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 24 28 22 2e 70 72 6f 67 72 65 73 73 49 6e 22 29 2e 63 73 73 28 27 77 69 64 74 68 27 2c 20 22 31 32 2e 35 25 22 29 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 64 65 66 65 72 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 6c 6f 75 64 66 6c 61 72 65 69 6e 73 69 67 68 74 73 2e 63 6f 6d 2f 62 65 61 63 Data Ascii: ><div class="bpan-blank"></div></div></div><script src="https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js"></script><script>$(".progressIn").css('width', "12.5%")</script><script defer src="https://static.cloudflareinsights.com/beac
2024-04-26 18:23:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49903	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:16 UTC	1012	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.moonreading.com Connection: keep-alive Content-Length: 690 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.moonreading.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/start/2/?sign=virgo Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155786.11.0.0; _ga=GA1.2.630221053.1714155737
2024-04-26 18:23:16 UTC	690	OUT	Data Raw: 7b 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 33 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 6a 73 22 3a 22 32 30 32 34 2e 34 2e 30 22 2c 22 66 6c 22 3a 22 32 30 32 34 2e 34 2e 30 22 7d 2c 22 70 61 67 65 6c 6f 61 64 49 64 22 3a 22 65 63 32 62 33 31 37 39 2d 65 34 37 61 2d 34 38 63 33 2d 61 64 64 33 2d 66 33 61 34 30 61 62 35 64 30 33 39 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 6f 6f 6e 72 65 61 64 69 6e 67 2e 63 6f 6d 2f 73 74 61 72 74 2f 32 2f 22 2c 22 6c 61 6e 64 69 6e 67 50 61 74 68 22 3a 22 2f 73 74 61 72 74 2f 32 2f 22 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 31 34 31 35 35 37 38 35 39 35 30 2e 35 2c 22 6e 74 22 3a 22 6e 61 76 69 67 61 74 65 22 2c 22 73 69 74 65 54 6f 6b 65 Data Ascii: {"referrer":"","eventType":3,"versions":{"js":"2024.4.0","fl":"2024.4.0"},"pageloadId":"ec2b3179-e47a-48c3-add3-f3a40ab5d039","location":"https://www.moonreading.com/start/2/","landingPath":"/start/2/","startTime":1714155785950.5,"nt":"navigate","siteToke
2024-04-26 18:23:16 UTC	376	IN	HTTP/1.1 204 No Content Date: Fri, 26 Apr 2024 18:23:16 GMT Connection: close access-control-allow-origin: https://www.moonreading.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 87a89a5dc8cfa52e-MIA X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49905	142.250.189.130	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:17 UTC	1116	OUT	GET /pagead/viewthroughconversion/590897327/?random=1714155795718&cv=11&fst=1714155795718&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R
2024-04-26 18:23:17 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:23:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 18:23:17 UTC	552	IN	Data Raw: 39 36 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 969(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-26 18:23:17 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-26 18:23:17 UTC	609	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 34 31 35 34 34 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 6f 30 76 38 39 35 32 30 33 37 33 38 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6d 6f 6f 6e 72 65 61 64 69 6e 67 2e 63 6f 6d 25 32 46 73 74 61 72 74 25 32 46 32 25 32 46 25 33 46 73 69 67 6e 25 33 44 6c 69 62 72 61 5c 78 32 36 68 6e 5c 78 33 64 77 77 77 2e 67 6f 6f 67 6c 65 61 Data Ascii: st\x3d1714154400000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44o0v895203738za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra\x26hn\x3dwww.googlea
2024-04-26 18:23:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49907	172.217.165.206	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:17 UTC	1184	OUT	POST /g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155795632&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra&dt=Get%20your%20FREE%20Moon%20Reading!&en=page_view&_ee=1&tfd=974 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.moonreading.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:23:17 UTC	453	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.moonreading.com Date: Fri, 26 Apr 2024 18:23:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49908	172.217.165.194	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:17 UTC	1240	OUT	GET /td/rul/590897327?random=1714155795718&cv=11&fst=1714155795718&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R
2024-04-26 18:23:17 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:23:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 18:23:17 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-26 18:23:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49910	142.251.35.228	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:17 UTC	1184	OUT	GET /pagead/1p-user-list/590897327/?random=1714155795718&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq_cgLVyl6KTSBFnAoypB5cRJYLkTmBhaj_Bh2nTFHFvEOAc09&random=3426040040&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:23:18 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:23:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:23:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49912	157.240.14.35	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:19 UTC	937	OUT	GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra&rl=&if=false&ts=1714155795861&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155795752&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:23:19 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=127, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 18:23:19 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49913	157.240.14.35	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:19 UTC	1052	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra&rl=&if=false&ts=1714155795861&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155795752&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:23:19 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 18:23:19 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 18:23:19 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-26 18:23:19 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49914	104.26.1.66	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:20 UTC	984	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.moonreading.com Connection: keep-alive Content-Length: 1524 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.moonreading.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/start/2/?sign=libra Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155795.2.0.0
2024-04-26 18:23:20 UTC	1524	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 31 32 34 32 33 36 36 37 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 38 39 39 37 32 30 37 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 5d 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 31 2c 22 66 69 72 73 74 50 61 69 6e 74 22 3a 38 30 34 2e 38 39 39 39 39 39 39 39 39 39 39 34 32 2c 22 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 22 3a 38 30 34 2e 38 39 39 39 39 39 39 39 39 39 39 34 32 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 31 34 31 35 35 37 39 34 38 37 38 2e 33 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 66 6c 22 3a 22 32 Data Ascii: {"memory":{"totalJSHeapSize":12423667,"usedJSHeapSize":8997207,"jsHeapSizeLimit":2172649472},"resources":[],"referrer":"","eventType":1,"firstPaint":804.8999999999942,"firstContentfulPaint":804.8999999999942,"startTime":1714155794878.3,"versions":{"fl":"2
2024-04-26 18:23:20 UTC	376	IN	HTTP/1.1 204 No Content Date: Fri, 26 Apr 2024 18:23:20 GMT Connection: close access-control-allow-origin: https://www.moonreading.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 87a89a77bf308d9a-MIA X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49916	157.240.14.35	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:20 UTC	735	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra&rl=&if=false&ts=1714155795861&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155795752&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:23:20 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 18:23:20 UTC	1921	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 18:23:20 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49917	157.240.14.35	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:20 UTC	698	OUT	GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra&rl=&if=false&ts=1714155795861&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155795752&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:23:20 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=132, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=1, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 18:23:20 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49915	142.250.217.196	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:21 UTC	945	OUT	GET /pagead/1p-user-list/590897327/?random=1714155795718&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq_cgLVyl6KTSBFnAoypB5cRJYLkTmBhaj_Bh2nTFHFvEOAc09&random=3426040040&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:23:21 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:23:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:23:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49918	216.239.34.181	443	3428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:23:22 UTC	1207	OUT	POST /g/collect?v=2&tid=G-H802VRJEV8&gtm=45je44o0v895586847za200&_p=1714155795632&gcd=13l3l3l3l1&npa=0&dma=0&cid=630221053.1714155737&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EEA&_s=2&sid=1714155737&sct=1&seg=1&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra&dt=Get%20your%20FREE%20Moon%20Reading!&en=scroll&epn.percent_scrolled=90&_et=5&tfd=5988 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.moonreading.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.moonreading.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:23:22 UTC	453	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.moonreading.com Date: Fri, 26 Apr 2024 18:23:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	20:21:51
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	20:21:56
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 --field-trial-handle=2024,i,15679915342265595539,6128884579569338529,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	20:21:59
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://globalgrimmer.com/xxxj"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	HTTP traffic detected: GET /xxxj HTTP/1.1Host: globalgrimmer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xxxj/ HTTP/1.1Host: globalgrimmer.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 0bef7y10siuwczdssj39pr-fbx.hop.clickbank.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /start?hop=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1 HTTP/1.1Host: www.moonreading.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /start/?hop=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1 HTTP/1.1Host: www.moonreading.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1 HTTP/1.1Host: www.moonreading.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
Source: global traffic	HTTP traffic detected: GET /css/fonts.css HTTP/1.1Host: www.moonreading.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
Source: global traffic	HTTP traffic detected: GET /css/bootstrap-reboot.min.css HTTP/1.1Host: www.moonreading.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
Source: global traffic	HTTP traffic detected: GET /css/icons.css HTTP/1.1Host: www.moonreading.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
Source: global traffic	HTTP traffic detected: GET /css/clean.css HTTP/1.1Host: www.moonreading.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
Source: global traffic	HTTP traffic detected: GET /css/kmKiZrc3Hgbbcjq75U4uslyuy4kn0qviTgY3KcC-wLOj.woff2 HTTP/1.1Host: www.moonreading.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.moonreading.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
Source: global traffic	HTTP traffic detected: GET /css/o-0OIpQlx3QUlC5A4PNr4ARCQ_mu72Bi.woff2 HTTP/1.1Host: www.moonreading.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.moonreading.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
Source: global traffic	HTTP traffic detected: GET /css/o-0IIpQlx3QUlC5A4PNr5TRASf6M7Q.woff2 HTTP/1.1Host: www.moonreading.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.moonreading.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
Source: global traffic	HTTP traffic detected: GET /css/o-0NIpQlx3QUlC5A4PNjOhBVZNyBx2pqPA.woff2 HTTP/1.1Host: www.moonreading.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.moonreading.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
Source: global traffic	HTTP traffic detected: GET /img/bg-wavewhite.png HTTP/1.1Host: www.moonreading.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.moonreading.com/css/clean.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
Source: global traffic	HTTP traffic detected: GET /img/moon-reading-text-logo.png HTTP/1.1Host: www.moonreading.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
Source: global traffic	HTTP traffic detected: GET /js/jstz-1.0.4.min.js HTTP/1.1Host: www.moonreading.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.moonreading.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/bg-wavewhite.png HTTP/1.1Host: www.moonreading.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
Source: global traffic	HTTP traffic detected: GET /img/moon-reading-text-logo.png HTTP/1.1Host: www.moonreading.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
Source: global traffic	HTTP traffic detected: GET /_api/timezone.php?timezone=Europe/Berlin HTTP/1.1Host: www.moonreading.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i
Source: global traffic	HTTP traffic detected: GET /signals/config/2523922164511192?v=2.9.154&r=stable&domain=www.moonreading.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_api/timezone.php?timezone=Europe/Berlin HTTP/1.1Host: www.moonreading.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin
Source: global traffic	HTTP traffic detected: GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&rl=&if=false&ts=1714155734545&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155733570&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&rl=&if=false&ts=1714155734545&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155733570&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger=navigation-sourceReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/590897327/?random=1714155734435&cv=11&fst=1714155734435&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&hn=www.googleadservices.com&frm=0&tiba=Request%20Your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/590897327?random=1714155734435&cv=11&fst=1714155734435&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&hn=www.googleadservices.com&frm=0&tiba=Request%20Your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/590897327/?random=1714155734435&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&hn=www.googleadservices.com&frm=0&tiba=Request%20Your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqYieZhwhfJMdq7A3besK6pwMT0Niihg&random=3721187132&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&rl=&if=false&ts=1714155734545&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155733570&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&rl=&if=false&ts=1714155734545&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155733570&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/moon-icon-16.png HTTP/1.1Host: www.moonreading.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.moonreading.com/start/1/?source=dragon040&hopId=72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.0.1714155737.60.0.0
Source: global traffic	HTTP traffic detected: GET /img/moon-icon-16.png HTTP/1.1Host: www.moonreading.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.0.1714155737.60.0.0
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/590897327/?random=1714155734435&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F1%2F%3Fsource%3Ddragon040%26hopId%3D72ccc26d-dbd7-45a5-84ae-5891ca4cc0c1&hn=www.googleadservices.com&frm=0&tiba=Request%20Your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqYieZhwhfJMdq7A3besK6pwMT0Niihg&random=3721187132&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-146859082-1&cid=630221053.1714155737&jid=892447600&gjid=466285172&_gid=337683595.1714155737&_u=YEBAAUAAAAAAACAAI~&z=133570130 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-146859082-1&cid=630221053.1714155737&jid=892447600&_u=YEBAAUAAAAAAACAAI~&z=317188382 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-146859082-1&cid=630221053.1714155737&jid=892447600&_u=YEBAAUAAAAAAACAAI~&z=317188382 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /start/2/?sign=aries HTTP/1.1Host: www.moonreading.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.0.1714155737.60.0.0
Source: global traffic	HTTP traffic detected: GET /img/white-back.png HTTP/1.1Host: www.moonreading.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.moonreading.com/start/2/?sign=ariesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.0.1714155737.60.0.0
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/590897327/?random=1714155749002&cv=11&fst=1714155749002&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Daries&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Daries&rl=&if=false&ts=1714155749504&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155749144&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Daries&rl=&if=false&ts=1714155749504&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155749144&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/white-back.png HTTP/1.1Host: www.moonreading.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155749.48.0.0
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/590897327/?random=1714155749002&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Daries&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqNEK4AiQ59PqZMM9cIh8_uqxf27yIUzrMp0ZPfvrLnqIKp3P3&random=501203676&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/590897327?random=1714155749002&cv=11&fst=1714155749002&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Daries&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Daries&rl=&if=false&ts=1714155749504&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155749144&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Daries&rl=&if=false&ts=1714155749504&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155749144&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/590897327/?random=1714155749002&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Daries&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqNEK4AiQ59PqZMM9cIh8_uqxf27yIUzrMp0ZPfvrLnqIKp3P3&random=501203676&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /start/2/?sign=taurus HTTP/1.1Host: www.moonreading.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155749.48.0.0
Source: global traffic	HTTP traffic detected: GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus&rl=&if=false&ts=1714155758561&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155758448&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus&rl=&if=false&ts=1714155758561&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155758448&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger=navigation-source, event-sourceReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/590897327/?random=1714155758513&cv=11&fst=1714155758513&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R
Source: global traffic	HTTP traffic detected: GET /td/rul/590897327?random=1714155758513&cv=11&fst=1714155758513&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R
Source: global traffic	HTTP traffic detected: GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus&rl=&if=false&ts=1714155758561&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155758448&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus&rl=&if=false&ts=1714155758561&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155758448&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/590897327/?random=1714155758513&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqzWsHOLhSVQriZ_5mI_OJrfjqBnIWbPw5uvMZSIJu0MDt_AQ0&random=1733060914&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/590897327/?random=1714155758513&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dtaurus&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqzWsHOLhSVQriZ_5mI_OJrfjqBnIWbPw5uvMZSIJu0MDt_AQ0&random=1733060914&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /start/2/?sign=gemini HTTP/1.1Host: www.moonreading.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155758.39.0.0
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/590897327/?random=1714155767945&cv=11&fst=1714155767945&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R
Source: global traffic	HTTP traffic detected: GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini&rl=&if=false&ts=1714155768081&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155767931&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini&rl=&if=false&ts=1714155768081&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155767931&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/590897327?random=1714155767945&cv=11&fst=1714155767945&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/590897327/?random=1714155767945&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqTIVdXM9vQ6QaAwBnUb9eUtCrGYtaRBeKdoKN2dUIUzoi6aLA&random=1317763472&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini&rl=&if=false&ts=1714155768081&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155767931&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini&rl=&if=false&ts=1714155768081&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155767931&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/590897327/?random=1714155767945&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dgemini&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqTIVdXM9vQ6QaAwBnUb9eUtCrGYtaRBeKdoKN2dUIUzoi6aLA&random=1317763472&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /start/2/?sign=cancer HTTP/1.1Host: www.moonreading.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155768.29.0.0
Source: global traffic	HTTP traffic detected: GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer&rl=&if=false&ts=1714155772792&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155772719&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer&rl=&if=false&ts=1714155772792&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155772719&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger=navigation-sourceReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/590897327?random=1714155772736&cv=11&fst=1714155772736&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R
Source: global traffic	HTTP traffic detected: GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer&rl=&if=false&ts=1714155772792&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155772719&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer&rl=&if=false&ts=1714155772792&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155772719&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/590897327/?random=1714155772736&cv=11&fst=1714155772736&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/590897327/?random=1714155772736&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqOW8fMWLylNgAqPfY1shkOexPoT-1wbi3cHW3_kl5buMCEFqZ&random=381502526&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/590897327/?random=1714155772736&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dcancer&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqOW8fMWLylNgAqPfY1shkOexPoT-1wbi3cHW3_kl5buMCEFqZ&random=381502526&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /start/2/?sign=leo HTTP/1.1Host: www.moonreading.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155772.25.0.0; _ga=GA1.2.630221053.1714155737
Source: global traffic	HTTP traffic detected: GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo&rl=&if=false&ts=1714155781782&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155781689&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo&rl=&if=false&ts=1714155781782&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155781689&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/590897327?random=1714155781702&cv=11&fst=1714155781702&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/590897327/?random=1714155781702&cv=11&fst=1714155781702&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R
Source: global traffic	HTTP traffic detected: GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo&rl=&if=false&ts=1714155781782&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155781689&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo&rl=&if=false&ts=1714155781782&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155781689&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/590897327/?random=1714155781702&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqMbrkWhNYs2cmY5Wzxa2bgQP1Khe0FtxnGUjvcQrYfdVYTtdZ&random=3797219326&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /start/2/?sign=virgo HTTP/1.1Host: www.moonreading.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga=GA1.1.630221053.1714155737; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155781.16.0.0
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/590897327/?random=1714155781702&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dleo&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqMbrkWhNYs2cmY5Wzxa2bgQP1Khe0FtxnGUjvcQrYfdVYTtdZ&random=3797219326&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo&rl=&if=false&ts=1714155786766&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155786705&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo&rl=&if=false&ts=1714155786766&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155786705&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source;navigation-source, triggerReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/590897327/?random=1714155786721&cv=11&fst=1714155786721&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R
Source: global traffic	HTTP traffic detected: GET /td/rul/590897327?random=1714155786721&cv=11&fst=1714155786721&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R
Source: global traffic	HTTP traffic detected: GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo&rl=&if=false&ts=1714155786766&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155786705&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo&rl=&if=false&ts=1714155786766&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155786705&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/590897327/?random=1714155786721&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqDdJfTiANYjvQzvkvxCo4fcWPlml0qDOhg_8I9fvGQVLReDhj&random=521127747&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/590897327/?random=1714155786721&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dvirgo&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqDdJfTiANYjvQzvkvxCo4fcWPlml0qDOhg_8I9fvGQVLReDhj&random=521127747&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /start/2/?sign=libra HTTP/1.1Host: www.moonreading.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuGnYvcoJnk3PPA5MEV7FkyZpoCo2bdKwt39nHbcMa; PHPSESSID=c8k1i53c4jds5aj1q9k6j2c50l; moon_id=drag0_bt6u35bplm6i; timezone=Europe%2FBerlin; _gcl_au=1.1.492570948.1714155734; _fbp=fb.1.1714155734542.469568372; _gid=GA1.2.337683595.1714155737; _gat_gtag_UA_146859082_1=1; _ga_H802VRJEV8=GS1.1.1714155737.1.1.1714155786.11.0.0; _ga=GA1.2.630221053.1714155737
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/590897327/?random=1714155795718&cv=11&fst=1714155795718&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R
Source: global traffic	HTTP traffic detected: GET /td/rul/590897327?random=1714155795718&cv=11&fst=1714155795718&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlqvGQ6KO1bKLOeC3vvT-O096BHZ0mNWr5h97HgW0trR9uQzYoClAQMMC_R
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/590897327/?random=1714155795718&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq_cgLVyl6KTSBFnAoypB5cRJYLkTmBhaj_Bh2nTFHFvEOAc09&random=3426040040&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra&rl=&if=false&ts=1714155795861&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155795752&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra&rl=&if=false&ts=1714155795861&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155795752&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.moonreading.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra&rl=&if=false&ts=1714155795861&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155795752&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=2523922164511192&ev=PageView&dl=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra&rl=&if=false&ts=1714155795861&sw=1280&sh=1024&ud[external_id]=5b953279082baba2a37d72157a4b0ba9f81ae6b3da4f1771bc9936e70c06a8c4&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714155734542.469568372&ler=empty&cdl=API_unavailable&it=1714155795752&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/590897327/?random=1714155795718&cv=11&fst=1714154400000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v895203738za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.moonreading.com%2Fstart%2F2%2F%3Fsign%3Dlibra&hn=www.googleadservices.com&frm=0&tiba=Get%20your%20FREE%20Moon%20Reading!&npa=0&pscdl=noapi&auid=492570948.1714155734&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq_cgLVyl6KTSBFnAoypB5cRJYLkTmBhaj_Bh2nTFHFvEOAc09&random=3426040040&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_89.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_130.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Qj:function(){e=zb()},sd:function(){d()}}};var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: chromecache_130.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var h=iA(a,c,e);M(121);if("https://www.facebook.com/tr/"===h["gtm.elementUrl"])return M(122),!0;if(d&&f){for(var m=Jb(b,g.length),n=0;n<g.length;++n)g[n](h,m);return m.done}for(var p=0;p<g.length;++p)g[p](h,function(){});return!0},lA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_130.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Xg:d,Vg:e,Wg:f,Ih:g,Jh:h,ye:m,Ab:b},p=D.YT,q=function(){IC(n)};if(p)return p.ready&&p.ready(q),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(LC(w,"iframe_api")\|\|LC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!CC&&JC(x[A],n.ye))return tc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_126.2.dr, chromecache_98.2.dr, chromecache_96.2.dr, chromecache_100.2.dr	String found in binary or memory: return b}yC.J="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: chromecache_130.2.dr	String found in binary or memory: var NB=function(a,b,c,d,e){var f=Jz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Jz("fsl","nv.ids",[]):Jz("fsl","ids",[]);if(!g.length)return!0;var h=Fz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);M(121);if("https://www.facebook.com/tr/"===m)return M(122),!0;h["gtm.elementUrl"]=m;h["gtm.formCanceled"]=c;null!=a.getAttribute("name")&&(h["gtm.interactedFormName"]=a.getAttribute("name"));e&&(h["gtm.formSubmitElement"]=e,h["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!uy(h,vy(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: globalgrimmer.com
Source: global traffic	DNS traffic detected: DNS query: 0bef7y10siuwczdssj39pr-fbx.hop.clickbank.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.moonreading.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.6.27
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.6.27
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://globalgrimmer.com/xxxj

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Windows Analysis Report
https://globalgrimmer.com/xxxj