Edit tour

Windows Analysis Report
https://campaign-statistics.com/link_click/Q8JO54uLM8_NZifI/8b475f29b654ee993e9d9f2d814b5501

Overview

General Information

Sample URL:	https://campaign-statistics.com/link_click/Q8JO54uLM8_NZifI/8b475f29b654ee993e9d9f2d814b5501
Analysis ID:	1435394
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found iframes

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4948 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3544 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=2120,i,1019968667426500736,6603024413701182159,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://campaign-statistics.com/link_click/Q8JO54uLM8_NZifI/8b475f29b654ee993e9d9f2d814b5501" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /g/collect?v=2&tid=G-M1MYBR9H42&cid=382778281.1714660381&gtm=45je44t0v889670875za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://naturalearning.orgX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://naturalearning.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_239.2.dr	String found in binary or memory: http://bit.ly/magnific-popup#build=inline
Source: chromecache_476.2.dr	String found in binary or memory: http://css-tricks.com
Source: chromecache_302.2.dr	String found in binary or memory: http://daneden.me/animate
Source: chromecache_476.2.dr	String found in binary or memory: http://daverupert.com
Source: chromecache_239.2.dr	String found in binary or memory: http://dimsemenov.com
Source: chromecache_411.2.dr	String found in binary or memory: http://gmpg.org/xfn/11
Source: chromecache_312.2.dr	String found in binary or memory: http://gsgd.co.uk/sandbox/jquery/easing/
Source: chromecache_328.2.dr	String found in binary or memory: http://j.hn/)
Source: chromecache_226.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_411.2.dr	String found in binary or memory: http://ogp.me/ns#
Source: chromecache_302.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_473.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: http://qualtrics.com/experience-management/customer/customer-intent/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: http://qualtrics.com/experience-management/employee/one-on-one-meeting/
Source: chromecache_312.2.dr	String found in binary or memory: http://robert-fleischmann.de)
Source: chromecache_476.2.dr	String found in binary or memory: http://sam.zoy.org/wtfpl/
Source: chromecache_411.2.dr	String found in binary or memory: http://schema.org/Organization
Source: chromecache_411.2.dr	String found in binary or memory: http://schema.org/Webpage
Source: chromecache_411.2.dr	String found in binary or memory: http://schema.org/Website
Source: chromecache_375.2.dr	String found in binary or memory: http://swiperjs.com
Source: chromecache_355.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735b0c8
Source: chromecache_355.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735b0d5
Source: chromecache_355.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735b0d9
Source: chromecache_355.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735b0de
Source: chromecache_355.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735b0ef
Source: chromecache_355.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735b0f3
Source: chromecache_476.2.dr	String found in binary or memory: http://www.alistapart.com/articles/creating-intrinsic-ratios-for-video/
Source: chromecache_400.2.dr	String found in binary or memory: http://www.blogseye.com
Source: chromecache_302.2.dr	String found in binary or memory: http://www.elegantthemes.com
Source: chromecache_302.2.dr	String found in binary or memory: http://www.elegantthemes.com/gallery/divi/
Source: chromecache_302.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: chromecache_296.2.dr	String found in binary or memory: http://www.idangero.us/swiper/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: http://www.invespcro.com/blog/state-of-omnichannel-shopping/
Source: chromecache_328.2.dr	String found in binary or memory: http://www.mediaelementjs.com/
Source: chromecache_487.2.dr, chromecache_426.2.dr, chromecache_225.2.dr, chromecache_242.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_487.2.dr, chromecache_426.2.dr, chromecache_225.2.dr, chromecache_242.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_495.2.dr, chromecache_395.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_342.2.dr	String found in binary or memory: https://amzadvisers.com/creating-sales-funnel-amazon/
Source: chromecache_237.2.dr	String found in binary or memory: https://analytics.google.com/g/s/collect?dma=0&gtm=45j91e44u1v883492273z86526812z9848816901za200&_gs
Source: chromecache_302.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://baremetrics.com/academy/saas-churn
Source: chromecache_349.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=33654
Source: chromecache_487.2.dr, chromecache_266.2.dr, chromecache_426.2.dr, chromecache_307.2.dr, chromecache_225.2.dr, chromecache_273.2.dr, chromecache_242.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_411.2.dr	String found in binary or memory: https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Source: chromecache_302.2.dr	String found in binary or memory: https://cdn.ncsu.edu/brand-assets/utility-bar/ub.php?color=black&ver=6.5.2
Source: chromecache_302.2.dr	String found in binary or memory: https://cdn.sender.net/accounts_resources/universal.js
Source: chromecache_411.2.dr	String found in binary or memory: https://client-registry.mutinycdn.com/personalize/client/d7e93db96a7cb1fa.js
Source: chromecache_485.2.dr	String found in binary or memory: https://clients1.google.com/complete/search
Source: chromecache_487.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_286.2.dr, chromecache_438.2.dr	String found in binary or memory: https://cookiepedia.co.uk/giving-consent-to-cookies
Source: chromecache_487.2.dr	String found in binary or memory: https://ct.capterra.com/capterra_tracker.js?vid=
Source: chromecache_302.2.dr	String found in binary or memory: https://deq.nc.gov/
Source: chromecache_350.2.dr, chromecache_445.2.dr	String found in binary or memory: https://developers.marketo.com/MunchkinLicense.pdf
Source: chromecache_302.2.dr	String found in binary or memory: https://dshs.texas.gov/
Source: chromecache_302.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_389.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI
Source: chromecache_389.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4iaVI
Source: chromecache_389.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4jaVI
Source: chromecache_389.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4kaVI
Source: chromecache_389.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4saVI
Source: chromecache_389.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4taVI
Source: chromecache_389.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVI
Source: chromecache_389.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4vaVI
Source: chromecache_389.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5OaVI
Source: chromecache_389.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5caVI
Source: chromecache_366.2.dr	String found in binary or memory: https://g1-cmh.qualtrics.com/www-api/$
Source: chromecache_366.2.dr	String found in binary or memory: https://g1-cmh.qualtrics.com/www-api/geoip
Source: chromecache_277.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_302.2.dr	String found in binary or memory: https://getwpo.com
Source: chromecache_226.2.dr	String found in binary or memory: https://github.com/cssinjs/jss
Source: chromecache_487.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_501.2.dr	String found in binary or memory: https://github.com/rnmp/salvattore
Source: chromecache_476.2.dr	String found in binary or memory: https://github.com/toddmotto/fluidvids/blob/master/dist/fluidvids.js
Source: chromecache_277.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_277.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_505.2.dr	String found in binary or memory: https://github.com/vimeo/player.js
Source: chromecache_254.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_254.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.31.0/LICENSE
Source: chromecache_411.2.dr	String found in binary or memory: https://gitlab-app.eng.qops.net/web-eng/documentation/-/wikis/2-Web-Eng/2.4-Site-Components/2.4.4-Ma
Source: chromecache_302.2.dr	String found in binary or memory: https://giving.ncsu.edu/foundation/
Source: chromecache_487.2.dr	String found in binary or memory: https://google.com
Source: chromecache_487.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://hbr.org/2014/08/why-women-dont-apply-for-jobs-unless-theyre-100-qualified
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://images.production.cdn.mutinyhq.io/82c2f64a-2ad8-4c9d-819a-65a86ff93827/national-cancer-insti
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ipa.co.uk/knowledge/publications-reports/the-long-and-the-short-of-it-balancing-short-and-lo
Source: chromecache_280.2.dr	String found in binary or memory: https://knowledgebase.ajaxsearchlite.com/other/javascript-api
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://learning.linkedin.com/resources/workplace-learning-report-2018
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://medium.com/
Source: chromecache_302.2.dr	String found in binary or memory: https://naaee.org/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/about-nli/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/acknowledging-ancestral-lands
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/coleafs
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/comments/feed/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/covid-support/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/dcdee_2023/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/design-assistance/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/download/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/download/35495/?tmstv=1666124132
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/echo/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/feed/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/gardening-series
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/gosc
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/greendesk/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/grow-outdoors-south-carolina-launch/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/halifax-warren
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/healthy-starts-for-infants-and-toddlers
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/infosheetsleaflets/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/infosheetsleaflets/?active_filter=natural-learning-at-home
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/nc-dcdee/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/news/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/nli-clients/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/oletexas/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/our-team/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/pod/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/preschool-outdoor-environment-measurement-scale-poems/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/professional-development
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/professional-development/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/programs
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/programs-projects/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/researchevaluation
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/resources
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/resources/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/resources/media/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/resources/montessori/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/resources/plant-database
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/resources/publications/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/shape-nc
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/sign-up-for-our-newsletter/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/think-and-do/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/vft
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/et-cache/1/1/39/et-core-unified-39.min.css?ver=1714401402
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/et-cache/1/1/39/et-divi-dynamic-39-late.css?ver=1714400823
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/et-cache/1/1/39/et-divi-dynamic-39.css?ver=1714400823
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/ajax-search-lite/css/style-curvy-black.css?ver=4.11.5
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/ajax-search-lite/css/style.basic.css?ver=4.11.5
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-autocompl
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-core.js?v
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-load.js?v
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-prereq.js
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-results-v
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-settings.
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-wrapper.j
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/dg-blog-carousel/scripts/frontend-bundle.min.js?ver=1.
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/dg-blog-carousel/scripts/swiper.min.js?ver=5.2.1
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/dg-blog-carousel/styles/style.min.css?ver=1.0.12
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/dg-blog-carousel/styles/swiper.min.css?ver=6.5.2
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/dg-carousel/scripts/frontend-bundle.min.js?ver=2.0.26
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/dg-carousel/styles/light-box-styles.css?ver=2.0.26
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/dg-carousel/styles/style.min.css?ver=2.0.26
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/divi-booster/core/fixes/126-customizer-social-icons/ic
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/divi-booster/core/icons/divi-booster-icons/icomoon/sty
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/divi-booster/core/icons/socicon/fonts/Socicon.eot?87vi
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/divi-booster/core/icons/socicon/fonts/Socicon.svg?87vi
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/divi-booster/core/icons/socicon/fonts/Socicon.ttf?87vi
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/divi-booster/core/icons/socicon/fonts/Socicon.woff2?87
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/divi-booster/core/icons/socicon/fonts/Socicon.woff?87v
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/divi-booster/core/icons/socicon/style.css?ver=3.8.5
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/divi_cpt_layout_injector/style.css?ver=6.5.2
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/download-monitor/assets/js/dlm-xhr.min.js?ver=4.9.13
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/dp-portfolio-posts-pro/styles/style.min.css?ver=4.1.9
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/plugins/image-watermark/js/no-right-click.js?ver=1.7.4
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/themes/Divi-child/style.css?ver=4.25.0
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/themes/Divi/core/admin/js/common.js?ver=4.25.0
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/css
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/themes/Divi/js/scripts.min.js?ver=4.25.0
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2017/03/leafy-background-25.png
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2017/05/502px-us-fishandwildlifeservice-logosvg.png
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2017/09/BCBSNC-Foundation-Logo-800px-768x599.png
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2017/09/USDAlogo-e1508354968125.png
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2018/02/PlayCoreNewTag_FINAL.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2018/02/Storer.png
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2018/02/social-inovation-fund.png
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2018/06/DHEC-logo.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2018/06/Head-Start-Logo.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2018/06/NSF_Logo.png
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2018/06/NWF-Logo.png
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2018/06/US-Forest-Service.svg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2019/08/Home-Page-FULL-RES.jpg);
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2019/08/Home-Prof-Dev-1024x732.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2019/08/Home-Prof-Dev-1080x772.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2019/08/Home-Prof-Dev-150x107.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2019/08/Home-Prof-Dev-250x179.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2019/08/Home-Prof-Dev-270x192.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2019/08/Home-Prof-Dev-300x214.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2019/08/Home-Prof-Dev-350x250.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2019/08/Home-Prof-Dev-768x549.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2019/08/Home-Prof-Dev.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2019/08/Home-Resources-1024x731.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2019/08/Home-Resources-1080x771.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2019/08/Home-Resources-150x107.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2019/08/Home-Resources-250x179.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2019/08/Home-Resources-270x192.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2019/08/Home-Resources-300x214.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2019/08/Home-Resources-350x250.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2019/08/Home-Resources-768x549.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2019/08/Home-Resources.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2020/10/Give-VRT-W.png
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2020/11/John-Rex-Endowment_VT.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2020/11/NAAEE_Logo_VT.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2020/11/NC-State-Foundation-01.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2020/11/NCDENR.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2020/11/NCR-Logo-Vertical-Color-White-BG.png
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2020/11/RWJF-logo.png
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2020/11/Texas-HHS_Logo_VT.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2020/11/niehs.png
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2020/11/pnc_color.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2021/01/NLI_Logo_COD_F_GY.png
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2021/01/NLI_Logo_COD_F_WH.png
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2021/11/Home-Green-Desk-1280x914.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2021/11/Home-Green-Desk-480x343.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2021/11/Home-Green-Desk-980x700.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2021/11/Home-Green-Desk.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2021/11/Home-Prog-Proj-1280x914.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2021/11/Home-Prog-Proj-480x343.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2021/11/Home-Prog-Proj-980x700.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2021/11/Home-Prog-Proj.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2022/10/Map-Thumbnail-e1666124343834.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2023/10/DCDEE_newsletter_article_image-400x250.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2023/10/DCDEE_newsletter_article_image.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2023/12/Bugs-Inside_banner_image_reduced-scaled-e17029
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2023/12/FEELC_photos_for_newsletter_cover_image-400x25
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2023/12/FEELC_photos_for_newsletter_cover_image.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2024/01/NLI_logo_favicon-light-150x150.png
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2024/01/NLI_logo_favicon-light-250x250.png
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/2024/01/NLI_logo_favicon-light-350x350.png
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/wtfdivi/wp_footer.js?ver=1635256086
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-content/uploads/wtfdivi/wp_head.css?ver=1635256086
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-includes/images/spinner.gif
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.5.2
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.5.2
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.5.2
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-json/
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fnaturalearning.org%2F
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fnaturalearning.org%2F&for
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/wp-json/wp/v2/pages/39
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/xmlrpc.php
Source: chromecache_302.2.dr	String found in binary or memory: https://naturalearning.org/xmlrpc.php?rsd
Source: chromecache_355.2.dr	String found in binary or memory: https://p.typekit.net/p.css?s=1&k=igb0ftr&ht=tk&f=30546.30551.30552.30553.30556.30557&a=134336088&ap
Source: chromecache_242.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_487.2.dr, chromecache_266.2.dr, chromecache_426.2.dr, chromecache_307.2.dr, chromecache_225.2.dr, chromecache_273.2.dr, chromecache_242.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_411.2.dr	String found in binary or memory: https://play.vidyard.com/embed/v4.js
Source: chromecache_411.2.dr	String found in binary or memory: https://player.vimeo.com/video/205949760?autoplay=1
Source: chromecache_411.2.dr	String found in binary or memory: https://player.vimeo.com/video/272134961?autoplay=1
Source: chromecache_342.2.dr	String found in binary or memory: https://player.vimeo.com/video/350850727
Source: chromecache_487.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect?
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://resources.workable.com/tutorial/passive-talent-pipeline
Source: chromecache_416.2.dr	String found in binary or memory: https://s.qualtrics.com/spoke/all/jam
Source: chromecache_487.2.dr	String found in binary or memory: https://s.yimg.jp/images/listing/tool/cv/ytag.js
Source: chromecache_302.2.dr	String found in binary or memory: https://scdhec.gov/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_411.2.dr	String found in binary or memory: https://schema.org/ImageObject
Source: chromecache_302.2.dr	String found in binary or memory: https://securelb.imodules.com/s/1209/giving/plain.aspx?sid=1209&gid=214&pgid=3787&cid=63
Source: chromecache_411.2.dr	String found in binary or memory: https://sgtm.qualtrics.com/ns.html?id=GTM-W6F8HX
Source: chromecache_416.2.dr	String found in binary or memory: https://siteintercept.qualtrics.com
Source: chromecache_416.2.dr	String found in binary or memory: https://siteintercept.qualtrics.com/dxjsmodule/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://snacknation.com/blog/employee-recognition-ideas/
Source: chromecache_487.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_426.2.dr, chromecache_225.2.dr, chromecache_242.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_426.2.dr, chromecache_225.2.dr, chromecache_242.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_469.2.dr, chromecache_237.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&dma=0&tid=G-KREE1SMXRW&cid=1321622203.1714660406&gtm=4
Source: chromecache_469.2.dr, chromecache_237.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&dma=0&tid=G-Z0RM4JK167&cid=1321622203.1714660406&gtm=4
Source: chromecache_395.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_302.2.dr	String found in binary or memory: https://storerfoundation.org/
Source: chromecache_346.2.dr	String found in binary or memory: https://success.qualtrics.com/Form-Pre-Fill-Helper-DTP.html
Source: chromecache_411.2.dr	String found in binary or memory: https://success.qualtrics.com/js/forms2/css/forms2-theme-plain.css
Source: chromecache_411.2.dr	String found in binary or memory: https://success.qualtrics.com/js/forms2/css/forms2.css
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://support.google.com/google-ads/answer/6259715
Source: chromecache_495.2.dr, chromecache_395.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_487.2.dr, chromecache_266.2.dr, chromecache_426.2.dr, chromecache_307.2.dr, chromecache_225.2.dr, chromecache_273.2.dr, chromecache_242.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_411.2.dr	String found in binary or memory: https://twitter.com/Qualtrics/
Source: chromecache_355.2.dr	String found in binary or memory: https://use.typekit.net/af/97165a/00000000000000007735b0f3/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_355.2.dr	String found in binary or memory: https://use.typekit.net/af/97165a/00000000000000007735b0f3/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_355.2.dr	String found in binary or memory: https://use.typekit.net/af/97165a/00000000000000007735b0f3/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_355.2.dr	String found in binary or memory: https://use.typekit.net/af/c34552/00000000000000007735b0c8/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_355.2.dr	String found in binary or memory: https://use.typekit.net/af/c34552/00000000000000007735b0c8/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_355.2.dr	String found in binary or memory: https://use.typekit.net/af/c34552/00000000000000007735b0c8/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_355.2.dr	String found in binary or memory: https://use.typekit.net/af/c35fc9/00000000000000007735b0de/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_355.2.dr	String found in binary or memory: https://use.typekit.net/af/c35fc9/00000000000000007735b0de/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_355.2.dr	String found in binary or memory: https://use.typekit.net/af/c35fc9/00000000000000007735b0de/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_355.2.dr	String found in binary or memory: https://use.typekit.net/af/efd550/00000000000000007735b0d5/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_355.2.dr	String found in binary or memory: https://use.typekit.net/af/efd550/00000000000000007735b0d5/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_355.2.dr	String found in binary or memory: https://use.typekit.net/af/efd550/00000000000000007735b0d5/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_355.2.dr	String found in binary or memory: https://use.typekit.net/af/f8383a/00000000000000007735b0ef/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_355.2.dr	String found in binary or memory: https://use.typekit.net/af/f8383a/00000000000000007735b0ef/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_355.2.dr	String found in binary or memory: https://use.typekit.net/af/f8383a/00000000000000007735b0ef/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_355.2.dr	String found in binary or memory: https://use.typekit.net/af/fd2e3c/00000000000000007735b0d9/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_355.2.dr	String found in binary or memory: https://use.typekit.net/af/fd2e3c/00000000000000007735b0d9/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_355.2.dr	String found in binary or memory: https://use.typekit.net/af/fd2e3c/00000000000000007735b0d9/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_411.2.dr	String found in binary or memory: https://use.typekit.net/igb0ftr.css
Source: chromecache_505.2.dr	String found in binary or memory: https://vimeo.com/
Source: chromecache_505.2.dr	String found in binary or memory: https://vimeo.com/api/oembed.json?url=
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://vwo.com/blog/ecommerce-statistics/
Source: chromecache_366.2.dr	String found in binary or memory: https://www-api.qualtrics.com/www-api/$
Source: chromecache_366.2.dr	String found in binary or memory: https://www-api.qualtrics.com/www-api/geoip
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.bamboohr.com/hr-glossary/passive-candidate/#:~:text=A%20passive%20candidate%20is%20someo
Source: chromecache_302.2.dr	String found in binary or memory: https://www.bcbsncfoundation.org/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.businesswire.com/news/home/20220719005425/en/Brands-Losing-a-Record-29-for-Each-New-Cust
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.catalyst.org/research/inclusive-leadership-report/?zd_source=hrt
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.cultureamp.com/blog/biggest-lie-people-quit-bosses
Source: chromecache_302.2.dr	String found in binary or memory: https://www.dpi.nc.gov/districts-schools/classroom-resources/early-learning-read-achieve/head-start-
Source: chromecache_342.2.dr	String found in binary or memory: https://www.emerald.com/insight/content/doi/10.1108/17537981211265589/full/html
Source: chromecache_302.2.dr	String found in binary or memory: https://www.fs.usda.gov/
Source: chromecache_302.2.dr	String found in binary or memory: https://www.fws.gov/
Source: chromecache_342.2.dr	String found in binary or memory: https://www.gallup.com/workplace/285674/improve-employee-engagement-workplace.aspx
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.gallup.com/workplace/336941/wellbeing-engagement-paradox-2020.aspx
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.gallup.com/workplace/349484/state-of-the-global-workplace-2022-report.aspx
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.getcloudapp.com/blog/getc...
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.getcloudapp.com/blog/visual-content-marketing
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.getcloudapp.com/uses/customer-support-tool
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.glassdoor.com/Award/Best-Places-to-Work-LST_KQ0
Source: chromecache_342.2.dr	String found in binary or memory: https://www.glassdoor.com/employers/blog/calculate-cost-per-hire/
Source: chromecache_487.2.dr, chromecache_266.2.dr, chromecache_307.2.dr, chromecache_273.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_495.2.dr, chromecache_395.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_495.2.dr, chromecache_395.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_495.2.dr, chromecache_395.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_242.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_495.2.dr, chromecache_395.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_302.2.dr	String found in binary or memory: https://www.google.com/maps/place/Natural
Source: chromecache_487.2.dr, chromecache_266.2.dr, chromecache_426.2.dr, chromecache_307.2.dr, chromecache_225.2.dr, chromecache_273.2.dr, chromecache_242.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_487.2.dr, chromecache_266.2.dr, chromecache_426.2.dr, chromecache_307.2.dr, chromecache_225.2.dr, chromecache_273.2.dr, chromecache_242.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_495.2.dr, chromecache_395.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_302.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-8130632-1
Source: chromecache_302.2.dr, chromecache_411.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_302.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-T6LNLT7
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.hubspot.com/state-of-marketing
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.inc.com/marc-emmer/95-percent-of-new-products-fail-here-are-6-steps-to-make-sure-yours-d
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.indeed.com/career-advice/career-development/i-feel-stuck-in-my-job
Source: chromecache_411.2.dr	String found in binary or memory: https://www.instagram.com/qualtrics/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.invespcro.com/blog/customer-acquisition-retention/
Source: chromecache_302.2.dr	String found in binary or memory: https://www.johnrexendowment.org/
Source: chromecache_229.2.dr	String found in binary or memory: https://www.jsdelivr.com/using-sri-with-dynamic-files
Source: chromecache_411.2.dr	String found in binary or memory: https://www.linkedin.com/company/qualtrics
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.marketingweek.com/heineken-reach-new-consumers-digital/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.markinblog.com/customer-loyalty-retention-statistics/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.mckinsey.com/business-functions/marketing-and-sales/our-insights/personalizing-at-scale
Source: chromecache_426.2.dr, chromecache_225.2.dr, chromecache_242.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_302.2.dr	String found in binary or memory: https://www.nationalservice.gov/programs/social-innovation-fund
Source: chromecache_302.2.dr	String found in binary or memory: https://www.ncdcr.gov/
Source: chromecache_302.2.dr	String found in binary or memory: https://www.niehs.nih.gov/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.nielsen.com/insights/2012/consumer-trust-in-online-social-and-mobile-advertising-grows/
Source: chromecache_302.2.dr	String found in binary or memory: https://www.nsf.gov/
Source: chromecache_302.2.dr	String found in binary or memory: https://www.nwf.org/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.peoplekeep.com/blog/how-to-calculate-hr-employee-retention-rates#:~:text=your%20retentio
Source: chromecache_302.2.dr	String found in binary or memory: https://www.playcore.com/
Source: chromecache_302.2.dr	String found in binary or memory: https://www.pnc.com/
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com#organization
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com#website
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/assets/dist/css/fonts.css
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/assets/dist/css/language-routing.css?v=3
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/assets/dist/css/styles.css
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/assets/dist/js/libraries/bootstrap.js
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/assets/dist/js/libraries/intersection-observer.min.js
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/assets/dist/js/libraries/lazyload.min.js
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/assets/dist/js/libraries/popper.min.js
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/assets/dist/js/libraries/teknkl-simpledto-1.0.4.js
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/assets/dist/js/libraries/vimeo-player.js
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/assets/dist/js/modules/footer-2023-06.js
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/assets/dist/js/modules/internal-library-2023-08.js
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/assets/dist/js/modules/language-routing-2023-12.js
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/assets/dist/js/modules/marketo-2024-03.js
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/assets/dist/js/modules/mutiny-2023-06.js
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/assets/dist/js/modules/styles-2023-12.js
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/assets/dist/svg/display/clipboard-check-x.svg#solid
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/assets/dist/svg/display/laptop.svg#solid
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/assets/dist/svg/display/organization.svg#solid
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/assets/dist/svg/display/phone-landline.svg#solid
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/blog/author/aaron-carpenter/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/blog/author/laura-harding/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/blog/author/ruth-dalessandro/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/blog/belonging-at-work/?utm_lp=hub_employee_improve-employee-engagement
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/blog/branding-trends/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/blog/building-a-career-in-experience-management/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/blog/customer-acquisition-cost/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/blog/developing-people-for-future-work/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/blog/employee-journey-mapping/
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/blog/global-consumer-trends-2022/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/blog/improving-esg-performance/?utm_lp=hub_employee_improve-employee-engag
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/blog/qualtrics-acquires-surveyvitals/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/blog/quiet-quitting/?utm_lp=hub_employee_improve-employee-engagement
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/buy-online/?utm_lp=market-research
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/calculators/value-at-risk-calculator/?utm_lp=hub-hub-investment-case-cx-in
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/customer-experience/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/customer-experience/frontline-feedback/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/customer-experience/surveys/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/customers/chobani/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/customers/fandango/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/customers/underarmour/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/customers/yamaha/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/design-xm/market-segmentation-software/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/design-xm/panel-management/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/discover/?utm_lp=hub_employee_improve-employee-engagement
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/ebooks-guides/2023-ex-trends-report/
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/ebooks-guides/2023-ex-trends-report/?utm_lp=hub_employee_improve-employee-
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/ebooks-guides/2024-ex-trends-report/
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/ebooks-guides/360-development-best-practices/?utm_lp=hub_employee_employee
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/ebooks-guides/cx-insights-into-impact/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/ebooks-guides/cx-relationship-management/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/ebooks-guides/drive-profits-with-customer-segmentation/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/ebooks-guides/employee-lifecycle-feedback/?utm_lp=hub-retention-rate
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/ebooks-guides/optimizing-digital-support-2022/?utm_source=Knowledge-Hague-
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/employee-experience/?utm_lp=hub_employee_improve-employee-engagement
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/employee-experience/exit-interviews/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/events/sessions-customer-experience/session-7-customer-experience-conversi
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/events/webinar-create-and-measure-roi-of-cx/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/brand/brand-marketing/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/brand/brand-tracking-metrics/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/brand/customer-segmentation/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/brand/demographic-segmentation/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/brand/perception-surveys/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/brand/what-is-brand-awareness/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/brand/what-is-market-segmentation/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/customer/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/customer/b2b-customer-journey/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/customer/collecting-customer-feedback/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/customer/customer-acquisition-cost/
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/customer/customer-acquisition/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/customer/customer-care/
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/customer/customer-churn/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/customer/customer-effort-score/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/customer/customer-emotion/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/customer/customer-experience-management-platform/
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/customer/customer-experience-measurement-metrics/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/customer/customer-experience-program/
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/customer/customer-experience/
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/customer/customer-journey-mapping/
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/customer/customer-lifetime-value/
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/customer/customer-loyalty/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/customer/feedback-loop/
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/customer/net-promoter-score/
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/customer/retention-programs/
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/customer/service-tips-skills/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/customer/user-testing-guide/
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/customer/what-is-csat/
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/customer/what-is-digital-cx/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/360-degree-feedback/
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/attrition-rate/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/candidate-experience/
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/company-culture/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/diversity-in-the-workplace/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/employee-burnout/
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/employee-development/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/employee-engagement-strategy/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/employee-engagement-survey/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/employee-engagment-software/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/employee-experience/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/employee-listening/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/employee-pulse-survey-questions/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/employee-surveys/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/employee-turnover/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/employer-branding/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/flexibility-in-the-workplace/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/how-can-you-attract-top-talent/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/interview-feedback/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/leadership-tools/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/leadership-trust/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/management-development
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/measure-employee-engagement/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/organizational-core-values/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/performance-appraisal/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/performance-management-system/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/employee/performance-management/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/product/create-buyer-persona/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/product/how-concept-test/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/product/how-to-price-a-product/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/product/product-bundling/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/product/product-launch/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/product/product-lifecycle-101/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/product/product-management/
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/product/product-marketing/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/product/product-metrics/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/product/product-testing/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/research/market-research-guide/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/research/sentiment-analysis/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/experience-management/research/types-of-conjoint/
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/hreflang-routing/managed/definitions.js
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/en/images/pages/customers/jetblue.jpg
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/hidden/wp-content/uploads/2021/06/xm.png
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/homepage/volkswagen_hero.jpeg
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/svg/display/phone-landline.svg
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/uk/wp-content/uploads/2019/08/home-logo-wall-mobile.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/uk/wp-content/uploads/2019/09/vrt_img.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2018/07/best-in-class
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2019/11/provo4.jpg
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2021/07/NHS-TILE2.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2021/10/Product-Launch-image.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2021/10/Under_Armour_SloaneStephens_thumbnail-
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2021/10/Under_Armour_SloaneStephens_thumbnail.
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2021/10/Yamaha-768x260.jpeg
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2021/10/Yamaha.jpeg
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2021/12/ultimate-listening.jpg
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/03/Screen-Shot-2022-03-24-at-1.00.21-PM-1
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/03/Screen-Shot-2022-03-24-at-1.00.21-PM.p
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/concept-testing-1-150x84.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/concept-testing-1.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds1-150x75.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds1-768x384.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds1.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds10-150x73.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds10-768x372.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds10.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds11-150x89.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds11-768x458.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds11.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds2-150x97.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds2-768x497.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds2.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds3-150x82.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds3-768x419.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds3.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds4-150x67.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds4-768x341.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds4.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds5-150x60.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds5-768x305.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds5.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds6-150x106.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds6-768x543.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds6.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds7-150x84.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds7-768x431.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds7.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds8-150x102.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds8-768x524.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds8.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds9-150x82.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds9-768x420.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds9.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/07/1419666_CareerPathing_01_072522-150x10
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/07/1419666_CareerPathing_01_072522-768x51
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/07/1419666_CareerPathing_01_072522.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/07/1419666_CareerPathing_02_072522-150x10
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/07/1419666_CareerPathing_02_072522-768x51
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/07/1419666_CareerPathing_02_072522.png
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/10/Qualtrics-Meta-Image.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/11/1504585_customer-retention-strategies_
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/11/crstrategies4-150x134.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/11/crstrategies4-768x686.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/11/crstrategies4.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/11/crstrategies5-150x78.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/11/crstrategies5-768x400.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2022/11/crstrategies5.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/01/1546264_Customer-acquisition-cost_A2_0
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/01/1546264_Customer-acquisition-cost_B2_0
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/01/1546264_Customer-acquisition-cost_C2_0
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/01/Screenshot-2023-01-17-at-4.02.32-PM-15
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/01/Screenshot-2023-01-17-at-4.02.32-PM-76
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/01/Screenshot-2023-01-17-at-4.02.32-PM.pn
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/01/automatic-call-summary-150x128.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/01/automatic-call-summary-768x658.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/01/automatic-call-summary.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/1596500_customeracquisition_1_031723-1
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/1596500_customeracquisition_1_031723-7
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/1596500_customeracquisition_1_031723.p
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/1596500_customeracquisition_2_031723-1
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/1596500_customeracquisition_2_031723-7
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/1596500_customeracquisition_2_031723.p
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/1600251_improve-employee-engagement_03
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/Screenshot-2023-03-17-at-11.59.05-AM-1
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/Screenshot-2023-03-17-at-11.59.05-AM-7
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/Screenshot-2023-03-17-at-11.59.05-AM.p
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/Screenshot-2023-03-17-at-12.00.37-PM-1
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/Screenshot-2023-03-17-at-12.00.37-PM-7
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/Screenshot-2023-03-17-at-12.00.37-PM.p
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/above-and-beyond-150x76.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/above-and-beyond-768x390.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/above-and-beyond.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/increase-decrease-150x73.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/increase-decrease-768x376.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/increase-decrease.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/living-values-150x161.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/living-values-768x822.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/living-values.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/opportunities-graph-150x92.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/opportunities-graph-768x470.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/opportunities-graph.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/04/employee-productivity-150x117.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/04/employee-productivity-2-150x124.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/04/employee-productivity-2-768x637.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/04/employee-productivity-2.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/04/employee-productivity-768x600.png
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/04/employee-productivity.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/08/drivers-of-ex-en-150x112.webp
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/08/drivers-of-ex-en-768x573.webp
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/08/drivers-of-ex-en.webp
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/08/tas1-en-1-150x75.webp
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/08/tas1-en-1-768x384.webp
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/08/tas1-en-1.webp
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/08/tas2-en-1-150x75.webp
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/08/tas2-en-1-768x384.webp
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/08/tas2-en-1.webp
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/08/tas3-en-1-150x75.webp
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/08/tas3-en-1-768x384.webp
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/08/tas3-en-1.webp
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/09/usa-logo-wall-2023-09-en.webp
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/10/retention-rate-1-en-150x68.webp
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/10/retention-rate-1-en-380x174.webp
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/10/retention-rate-1-en-768x351.webp
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/10/retention-rate-1-en.webp
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/10/retention-rate-formula-en-150x100.webp
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/10/retention-rate-formula-en-380x253.webp
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/10/retention-rate-formula-en-768x512.webp
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/10/retention-rate-formula-en.webp
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/10/rr1-en-150x81.webp
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/10/rr1-en-380x205.webp
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/10/rr1-en-768x414.webp
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/10/rr1-en.webp
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/10/rr2-en-150x110.webp
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/10/rr2-en-380x279.webp
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/10/rr2-en-768x563.webp
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/2023/10/rr2-en.webp
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/svg/customer/x.svg
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/svg/display/social-facebook-01.svg
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/m/assets/wp-content/uploads/svg/display/social-linkedin-01.svg
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/designxm.svg
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/homepage/bx-final.svg
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/homepage/cx-final.svg
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/m/homepage/ex-final.svg
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/m/qualtrics-xm-long.svg
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/m/qualtrics-xm.png
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/market-research/
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/marketplace/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/marketplace/contact-center-customer-experience/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/marketplace/employee-exit-program/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/marketplace/product-research-survey/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/partnerships/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/people/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/people/360-degree-feedback/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/people/employee-journey-analytics/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/people/engage/employee-engagement/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/people/engage/pulse-surveys/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/people/lifecycle/candidate-experience/
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/powered-by-qualtrics/
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/powered-by-qualtrics/#webpage
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/product-experience/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/strategy/concept-testing-tool/?utm_lp-hub-product-launch-inline1
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/support/common-use-case/xm-solutions/ex25-xm-solution/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/uk/customers/under-armour/?rid=ip
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/uk/customers/virgin-media/
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/uk/design-xm/
Source: chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/uk/iq/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/uk/people/employee-lifecycle/candidate-experience
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/uk/xm-directory/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/watch-demo/people/overview/
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/web-stories/feed/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/xm-institute/five-steps-for-building-a-strong-cx-metrics-program/
Source: chromecache_411.2.dr	String found in binary or memory: https://www.qualtrics.com/xmlrpc.php
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.qualtrics.com/xmplus/pinterest/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.ruleranalytics.com/blog/insight/marketing-attribution-stats/#:~:text=Marketing%20attribu
Source: chromecache_302.2.dr	String found in binary or memory: https://www.rwjf.org/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.slideshare.net/Married2Growth/data-that-supports-true-sales-and-marketing-alignment-1110
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.sonovate.com/blog/write-perfect-job-ad/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.thinkwithgoogle.com/intl/en-gb/marketing-strategies/data-and-measurement/overhaul-market
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.underarmour.com/en-us/hovr/g/33yb
Source: chromecache_302.2.dr	String found in binary or memory: https://www.usda.gov/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.xminstitute.com/data-snippets/what-job-candidates-want/
Source: chromecache_426.2.dr, chromecache_225.2.dr, chromecache_242.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_411.2.dr	String found in binary or memory: https://www.youtube.com/user/QualtricsSoftware/
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www2.deloitte.com/us/en/insights/deloitte-review/issue-22/diversity-and-inclusion-at-work-ei
Source: chromecache_411.2.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50140
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50162
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50123 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49748 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@23/489@146/36

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=2120,i,1019968667426500736,6603024413701182159,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://campaign-statistics.com/link_click/Q8JO54uLM8_NZifI/8b475f29b654ee993e9d9f2d814b5501"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=2120,i,1019968667426500736,6603024413701182159,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://campaign-statistics.com/link_click/Q8JO54uLM8_NZifI/8b475f29b654ee993e9d9f2d814b5501	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://naturalearning.org/coleafs	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://naturalearning.org/wp-content/uploads/2017/03/leafy-background-25.png	0%	Avira URL Cloud	safe
https://naturalearning.org/think-and-do/	0%	Avira URL Cloud	safe
https://naturalearning.org/wp-content/uploads/2019/08/Home-Resources.jpg	0%	Avira URL Cloud	safe
https://naturalearning.org/wp-content/uploads/2019/08/Home-Resources-768x549.jpg	0%	Avira URL Cloud	safe
https://naturalearning.org/greendesk/	0%	Avira URL Cloud	safe
https://naturalearning.org/wp-content/uploads/2019/08/Home-Prof-Dev-150x107.jpg	0%	Avira URL Cloud	safe
https://naturalearning.org/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-prereq.js	0%	Avira URL Cloud	safe
https://naturalearning.org/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.woff	0%	Avira URL Cloud	safe
https://naturalearning.org/sign-up-for-our-newsletter/	0%	Avira URL Cloud	safe
https://www.markinblog.com/customer-loyalty-retention-statistics/	0%	Avira URL Cloud	safe
https://naturalearning.org/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-settings.	0%	Avira URL Cloud	safe
https://www.markinblog.com/customer-loyalty-retention-statistics/	0%	Virustotal		Browse
https://naturalearning.org/wp-content/uploads/2021/01/NLI_Logo_COD_F_GY.png	0%	Avira URL Cloud	safe
https://naturalearning.org/wp-content/uploads/2021/01/NLI_Logo_COD_F_WH.png	0%	Avira URL Cloud	safe
https://naturalearning.org/wp-content/plugins/dg-blog-carousel/styles/style.min.css?ver=1.0.12	0%	Avira URL Cloud	safe
https://naaee.org/	0%	Avira URL Cloud	safe
https://naturalearning.org/wp-content/uploads/2019/08/Home-Prof-Dev-350x250.jpg	0%	Avira URL Cloud	safe
https://naturalearning.org/wp-content/uploads/2018/02/Storer.png	0%	Avira URL Cloud	safe
https://naturalearning.org/infosheetsleaflets/?active_filter=natural-learning-at-home	0%	Avira URL Cloud	safe
https://naturalearning.org/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/easypiechart.js?ver=4.25.0	0%	Avira URL Cloud	safe
https://naturalearning.org/resources/media/	0%	Avira URL Cloud	safe
https://www.emerald.com/insight/content/doi/10.1108/17537981211265589/full/html	0%	Avira URL Cloud	safe
https://naturalearning.org/wp-content/uploads/2018/06/NSF_Logo.png	0%	Avira URL Cloud	safe
https://naturalearning.org/wp-content/uploads/2019/10/facebook_3225194.svg	0%	Avira URL Cloud	safe
https://naturalearning.org/wp-content/uploads/2018/06/US-Forest-Service.svg	0%	Avira URL Cloud	safe
https://naturalearning.org/download/35495/?tmstv=1666124132	0%	Avira URL Cloud	safe
https://naturalearning.org/acknowledging-ancestral-lands	0%	Avira URL Cloud	safe
https://naturalearning.org/wp-content/plugins/dg-blog-carousel/scripts/frontend-bundle.min.js?ver=1.	0%	Avira URL Cloud	safe
https://naturalearning.org/resources/	0%	Avira URL Cloud	safe
https://naturalearning.org/wp-content/uploads/2024/01/NLI_logo_favicon-light-250x250.png	0%	Avira URL Cloud	safe
https://naturalearning.org/wp-content/uploads/2019/08/Home-Resources-250x179.jpg	0%	Avira URL Cloud	safe
https://naturalearning.org/gosc	0%	Avira URL Cloud	safe
https://naturalearning.org/greendesk/	0%	Virustotal		Browse
https://naturalearning.org/resources/	0%	Virustotal		Browse
https://naaee.org/	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
cdn.sender.net	104.22.74.115	true	false	high
naturalearning.org	152.7.106.52	true	false	unknown
d1x56redfii5qy.cloudfront.net	108.138.106.52	true	false	high
adservice.google.com	142.251.40.194	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
spdc-global.pbp.gysm.yahoodns.net	50.17.194.92	true	false	unknown
stats.g.doubleclick.net	172.253.63.155	true	false	high
scontent.xx.fbcdn.net	31.13.71.7	true	false	high
www.google.com	142.251.40.228	true	false	high
epsilon.6sense.com	13.248.142.121	true	false	high
star-mini.c10r.facebook.com	157.240.241.35	true	false	high
sgtm.qualtrics.com	216.239.34.21	true	false	high
ad.doubleclick.net	142.250.65.198	true	false	high
s3-w.us-east-1.amazonaws.com	3.5.25.122	true	false	high
k8s-mutiny-privatea-b7eaf9f835-63806838.us-east-1.elb.amazonaws.com	34.192.223.42	true	false	high
analytics-alv.google.com	216.239.32.181	true	false	high
542-fmf-412.mktoresp.com	192.28.147.68	true	false	unknown
googleads.g.doubleclick.net	172.217.165.130	true	false	high
campaign-statistics.com	172.66.43.168	true	false	unknown
analytics.google.com	142.250.65.206	true	false	high
td.doubleclick.net	142.251.40.98	true	false	high
ib.anycast.adnxs.com	68.67.179.164	true	false	high
cdn.cookielaw.org	104.19.177.52	true	false	high
geolocation.onetrust.com	172.64.155.119	true	false	high
edge.gycpi.b.yahoodns.net	69.147.82.61	true	false	unknown
sjp.mktossl.com	104.17.71.206	true	false	unknown
sp.analytics.yahoo.com	unknown	unknown	false	high
siteintercept.qualtrics.com	unknown	unknown	false	high
secure.adnxs.com	unknown	unknown	false	high
b.6sc.co	unknown	unknown	false	unknown
www-api.qualtrics.com	unknown	unknown	false	high
j.6sc.co	unknown	unknown	false	unknown
use.typekit.net	unknown	unknown	false	high
qualtrics-www.s3.amazonaws.com	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
client-registry.mutinycdn.com	unknown	unknown	false	unknown
c.6sc.co	unknown	unknown	false	unknown
zn725dkxtvxq847sl-qxm.siteintercept.qualtrics.com	unknown	unknown	false	high
www.linkedin.com	unknown	unknown	false	high
eu.qualtrics.com	unknown	unknown	false	high
ncsu.qualtrics.com	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
munchkin.marketo.net	unknown	unknown	false	unknown
www.qualtrics.com	unknown	unknown	false	high
play.vidyard.com	unknown	unknown	false	high
s.yimg.com	unknown	unknown	false	high
cdn.ncsu.edu	unknown	unknown	false	high
p.typekit.net	unknown	unknown	false	high
snap.licdn.com	unknown	unknown	false	high
success.qualtrics.com	unknown	unknown	false	high
api-v2.mutinyhq.io	unknown	unknown	false	unknown
ipv6.6sc.co	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://naturalearning.org/wp-content/uploads/2017/03/leafy-background-25.png	false	Avira URL Cloud: safe	unknown
https://sgtm.qualtrics.com/_set_cookie?val=NsL2Ny0hM33FlbcTQcv9sRCzL202xNJ1v0H08vs%2BKO%2FxhCKBbnaEvl5Xd2BFmiUWPAwonpA05vt2OeB%2FS1jYz4Wo2APKcmpgU7SYLIXhAmExiOsGpzyIxsVLIHZ7FonM%2F2sVak%2BrnKdvHbsb6lCmPfQCUvaA2mtjJeilNiLZJYjUi5v1p4ifjEraiP1oZTr0fQ%3D%3D	false		high
https://success.qualtrics.com/js/forms2/css/forms2-theme-plain.css	false		high
about:blank	false	Avira URL Cloud: safe	low
https://naturalearning.org/wp-content/uploads/2019/08/Home-Resources.jpg	false	Avira URL Cloud: safe	unknown
https://naturalearning.org/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.woff	false	Avira URL Cloud: safe	unknown
https://naturalearning.org/wp-content/uploads/2021/01/NLI_Logo_COD_F_GY.png	false	Avira URL Cloud: safe	unknown
https://naturalearning.org/wp-content/uploads/2021/01/NLI_Logo_COD_F_WH.png	false	Avira URL Cloud: safe	unknown
https://sgtm.qualtrics.com/g/collect?v=2&tid=G-Z0RM4JK167&gtm=45je44t0v883492273z86526812za200&_p=1714660401997&gcs=G111&gcd=13r3r3r3r5&npa=0&dma=0&gdid=dYWJhMj&cid=1321622203.1714660406&ecid=990306678&ul=en-us&sr=1280x1024&_fplc=0&ur=US-NY&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=190938145.1714660404&sst.gse=1&sst.gcd=13r3r3r3r5&sst.tft=1714660401997&sst.ude=0&_s=1&sid=1714660406&sct=1&seg=0&dl=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&dt=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&en=lang_route_no_redirect&_fv=1&_nsi=1&_ss=1&ep.event_category=language%20routing&ep.event_action=language%20routing%20%3A%20languageNotSupported&ep.non_interaction=1&ep.x-ga-mp1-cd55=no%20redirect%20%3A%20languageNotSupported&ep.x-ga-mp1-cd56=siteLang%3A%20en%20%7C%20browserLang%3A%20en-US%20%7C%20geoIP%3A%20%20%7C%20geoMatch%3A%20&ep.x-ga-mp1-cd57=languageNotSupported&ep.c_int_routing_handling=languageNotSupported&ep.c_q_website=en&ep.c_browser_language=en-US&ep.c_int_routing_outcome=no%20redirect%20%3A%20languageNotSupported&ep.c_int_routing_languages=siteLang%3A%20en%20%7C%20browserLang%3A%20en-US%20%7C%20geoIP%3A%20%20%7C%20geoMatch%3A%20&ep.c_hit_timestamp=2024-05-02T16%3A33%3A23.691%2B02%3A00&up.c_int_routing_geoip=&up.c_int_routing_geomatch=&tfd=8646&richsstsse	false		high
https://cdn.sender.net/accounts_resources/base/f6d965115c2786.json	false		high
https://naturalearning.org/wp-content/plugins/dg-blog-carousel/styles/style.min.css?ver=1.0.12	false	Avira URL Cloud: safe	unknown
https://naturalearning.org/wp-content/uploads/2018/02/Storer.png	false	Avira URL Cloud: safe	unknown
https://naturalearning.org/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/easypiechart.js?ver=4.25.0	false	Avira URL Cloud: safe	unknown
https://success.qualtrics.com/rs/542-FMF-412/images/marketo-xdframe-relative.html	false		high
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false		high
https://sgtm.qualtrics.com/g/collect?v=2&tid=G-Z0RM4JK167&gtm=45je44t0v883492273z86526812za200&_p=1714660401997&gcs=G111&gcd=13r3r3r3r5&npa=0&dma=0&gdid=dYWJhMj&cid=1321622203.1714660406&ecid=990306678&ul=en-us&sr=1280x1024&ur=US-NY&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&ec_mode=c&sst.rnd=190938145.1714660404&sst.gse=1&sst.gcd=13r3r3r3r5&sst.tft=1714660401997&sst.ude=0&_s=2&sid=1714660406&sct=1&seg=1&dl=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&dt=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&tfd=10417&richsstsse	false		high
https://naturalearning.org/wp-content/uploads/2018/06/NSF_Logo.png	false	Avira URL Cloud: safe	unknown
https://naturalearning.org/wp-content/uploads/2019/10/facebook_3225194.svg	false	Avira URL Cloud: safe	unknown
https://sgtm.qualtrics.com/_set_cookie?val=DSuotAdEohMxkLvbRoOPAT3OeEcGOgus%2BIfn78E2cfQod0ga7AAWMdd76ePmx5R0EOlHQyJZNVVdZeMuAJqho5oJJxL3CDjcpN4sXT0l7x6D2G4LyLLdvArLoZ0F2oZNrKe84KhZ4gimBz%2BEPUUZpvAljg%3D%3D	false		high
https://naturalearning.org/wp-content/uploads/2018/06/US-Forest-Service.svg	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/scripttemplates/202401.2.0/assets/otFloatingRoundedCorner.json	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1026978278/?random=1056735029&fst=1714660410965&cv=10&fmt=3&label=wX24CLq7jPwBEObj2ekD&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds6-768x543.png	chromecache_480.2.dr, chromecache_342.2.dr	false		high
https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds11.png	chromecache_342.2.dr	false		high
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/10/rr2-en-380x279.webp	chromecache_480.2.dr, chromecache_342.2.dr	false		high
https://www.qualtrics.com/xm-institute/five-steps-for-building-a-strong-cx-metrics-program/	chromecache_480.2.dr, chromecache_342.2.dr	false		high
https://use.typekit.net/af/efd550/00000000000000007735b0d5/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_355.2.dr	false		high
https://github.com/rnmp/salvattore	chromecache_501.2.dr	false		high
https://naturalearning.org/coleafs	chromecache_302.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_495.2.dr, chromecache_395.2.dr	false		high
https://px.ads.linkedin.com/collect?	chromecache_487.2.dr	false		high
https://naturalearning.org/think-and-do/	chromecache_302.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_277.2.dr	false		high
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/increase-decrease-150x73.png	chromecache_480.2.dr, chromecache_342.2.dr	false		high
https://naturalearning.org/wp-content/uploads/2019/08/Home-Resources-768x549.jpg	chromecache_302.2.dr	false	Avira URL Cloud: safe	unknown
https://naturalearning.org/greendesk/	chromecache_302.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2022/11/crstrategies5.png	chromecache_342.2.dr	false		high
https://www.qualtrics.com/m/assets/wp-content/uploads/2022/03/Screen-Shot-2022-03-24-at-1.00.21-PM.p	chromecache_342.2.dr	false		high
https://www.qualtrics.com/people/engage/pulse-surveys/	chromecache_480.2.dr, chromecache_342.2.dr	false		high
https://www.inc.com/marc-emmer/95-percent-of-new-products-fail-here-are-6-steps-to-make-sure-yours-d	chromecache_480.2.dr, chromecache_342.2.dr	false		high
https://naturalearning.org/wp-content/uploads/2019/08/Home-Prof-Dev-150x107.jpg	chromecache_302.2.dr	false	Avira URL Cloud: safe	unknown
https://www.qualtrics.com/assets/dist/svg/display/organization.svg#solid	chromecache_411.2.dr	false		high
https://naturalearning.org/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-prereq.js	chromecache_302.2.dr	false	Avira URL Cloud: safe	unknown
https://naturalearning.org/sign-up-for-our-newsletter/	chromecache_302.2.dr	false	Avira URL Cloud: safe	unknown
https://www.markinblog.com/customer-loyalty-retention-statistics/	chromecache_480.2.dr, chromecache_342.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/svg/display/social-linkedin-01.svg	chromecache_411.2.dr	false		high
https://scdhec.gov/	chromecache_302.2.dr	false		high
https://naturalearning.org/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-settings.	chromecache_302.2.dr	false	Avira URL Cloud: safe	unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2022/03/Screen-Shot-2022-03-24-at-1.00.21-PM-1	chromecache_480.2.dr, chromecache_342.2.dr	false		high
https://use.typekit.net/af/efd550/00000000000000007735b0d5/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_355.2.dr	false		high
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/above-and-beyond-768x390.png	chromecache_480.2.dr, chromecache_342.2.dr	false		high
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/08/tas1-en-1-150x75.webp	chromecache_480.2.dr, chromecache_342.2.dr	false		high
https://github.com/cssinjs/jss	chromecache_226.2.dr	false		high
https://siteintercept.qualtrics.com	chromecache_416.2.dr	false		high
https://www.qualtrics.com/assets/dist/js/libraries/bootstrap.js	chromecache_411.2.dr	false		high
https://naturalearning.org/wp-content/uploads/2019/08/Home-Prof-Dev-350x250.jpg	chromecache_302.2.dr	false	Avira URL Cloud: safe	unknown
http://gmpg.org/xfn/11	chromecache_411.2.dr	false		high
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/08/drivers-of-ex-en.webp	chromecache_342.2.dr	false		high
https://www.qualtrics.com/ebooks-guides/2024-ex-trends-report/	chromecache_342.2.dr	false		high
https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds6.png	chromecache_342.2.dr	false		high
https://naaee.org/	chromecache_302.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.qualtrics.com/ebooks-guides/cx-insights-into-impact/	chromecache_480.2.dr, chromecache_342.2.dr	false		high
https://www.nwf.org/	chromecache_302.2.dr	false		high
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/living-values-150x161.png	chromecache_480.2.dr, chromecache_342.2.dr	false		high
https://developers.marketo.com/MunchkinLicense.pdf	chromecache_350.2.dr, chromecache_445.2.dr	false		high
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/Screenshot-2023-03-17-at-12.00.37-PM.p	chromecache_342.2.dr	false		high
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/10/rr1-en.webp	chromecache_480.2.dr, chromecache_342.2.dr	false		high
https://www.qualtrics.com/m/assets/wp-content/uploads/2019/11/provo4.jpg	chromecache_411.2.dr	false		high
https://www.qualtrics.com/uk/customers/under-armour/?rid=ip	chromecache_480.2.dr, chromecache_342.2.dr	false		high
https://vwo.com/blog/ecommerce-statistics/	chromecache_480.2.dr, chromecache_342.2.dr	false		high
https://naturalearning.org/infosheetsleaflets/?active_filter=natural-learning-at-home	chromecache_302.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.net/af/c35fc9/00000000000000007735b0de/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_355.2.dr	false		high
https://naturalearning.org/resources/media/	chromecache_302.2.dr	false	Avira URL Cloud: safe	unknown
https://www.emerald.com/insight/content/doi/10.1108/17537981211265589/full/html	chromecache_342.2.dr	false	Avira URL Cloud: safe	unknown
https://resources.workable.com/tutorial/passive-talent-pipeline	chromecache_480.2.dr, chromecache_342.2.dr	false		high
https://www.cultureamp.com/blog/biggest-lie-people-quit-bosses	chromecache_480.2.dr, chromecache_342.2.dr	false		high
https://medium.com/	chromecache_480.2.dr, chromecache_342.2.dr	false		high
https://www.qualtrics.com/m/assets/uk/wp-content/uploads/2019/09/vrt_img.png	chromecache_342.2.dr	false		high
https://www.qualtrics.com/m/homepage/ex-final.svg	chromecache_342.2.dr	false		high
https://www.qualtrics.com/m/qualtrics-xm.png	chromecache_411.2.dr	false		high
http://www.elegantthemes.com	chromecache_302.2.dr	false		high
https://www.indeed.com/career-advice/career-development/i-feel-stuck-in-my-job	chromecache_480.2.dr, chromecache_342.2.dr	false		high
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/09/usa-logo-wall-2023-09-en.webp	chromecache_411.2.dr	false		high
https://www.qualtrics.com/uk/design-xm/	chromecache_342.2.dr	false		high
https://www.qualtrics.com/ebooks-guides/optimizing-digital-support-2022/?utm_source=Knowledge-Hague-	chromecache_480.2.dr, chromecache_342.2.dr	false		high
https://dshs.texas.gov/	chromecache_302.2.dr	false		high
https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds7.png	chromecache_342.2.dr	false		high
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/08/tas1-en-1.webp	chromecache_342.2.dr	false		high
https://naturalearning.org/download/35495/?tmstv=1666124132	chromecache_302.2.dr	false	Avira URL Cloud: safe	unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2021/10/Yamaha.jpeg	chromecache_342.2.dr	false		high
https://naturalearning.org/acknowledging-ancestral-lands	chromecache_302.2.dr	false	Avira URL Cloud: safe	unknown
https://naturalearning.org/wp-content/plugins/dg-blog-carousel/scripts/frontend-bundle.min.js?ver=1.	chromecache_302.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/toddmotto/fluidvids/blob/master/dist/fluidvids.js	chromecache_476.2.dr	false		high
https://naturalearning.org/resources/	chromecache_302.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/above-and-beyond-150x76.png	chromecache_480.2.dr, chromecache_342.2.dr	false		high
https://www.qualtrics.com/m/assets/hidden/wp-content/uploads/2021/06/xm.png	chromecache_342.2.dr	false		high
https://naturalearning.org/wp-content/uploads/2024/01/NLI_logo_favicon-light-250x250.png	chromecache_302.2.dr	false	Avira URL Cloud: safe	unknown
https://naturalearning.org/wp-content/uploads/2019/08/Home-Resources-250x179.jpg	chromecache_302.2.dr	false	Avira URL Cloud: safe	unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/living-values.png	chromecache_342.2.dr	false		high
https://naturalearning.org/gosc	chromecache_302.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
108.138.106.52	d1x56redfii5qy.cloudfront.net	United States	16509	AMAZON-02US	false
3.5.25.122	s3-w.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
172.253.63.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
13.248.142.121	epsilon.6sense.com	United States	16509	AMAZON-02US	false
157.240.241.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
104.18.32.137	unknown	United States	13335	CLOUDFLARENETUS	false
142.251.40.130	unknown	United States	15169	GOOGLEUS	false
172.66.43.168	campaign-statistics.com	United States	13335	CLOUDFLARENETUS	false
142.250.65.198	ad.doubleclick.net	United States	15169	GOOGLEUS	false
172.217.165.130	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.22.75.115	unknown	United States	13335	CLOUDFLARENETUS	false
216.239.32.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
172.64.155.119	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.22.74.115	cdn.sender.net	United States	13335	CLOUDFLARENETUS	false
31.13.71.7	scontent.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
104.17.71.206	sjp.mktossl.com	United States	13335	CLOUDFLARENETUS	false
104.19.177.52	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
69.147.82.61	edge.gycpi.b.yahoodns.net	United States	14779	INKTOMI-LAWSONUS	false
142.251.40.228	www.google.com	United States	15169	GOOGLEUS	false
142.251.40.230	unknown	United States	15169	GOOGLEUS	false
192.28.147.68	542-fmf-412.mktoresp.com	United States	53580	MARKETOUS	false
142.251.40.198	unknown	United States	15169	GOOGLEUS	false
216.239.34.21	sgtm.qualtrics.com	United States	15169	GOOGLEUS	false
142.251.40.194	adservice.google.com	United States	15169	GOOGLEUS	false
142.251.40.196	unknown	United States	15169	GOOGLEUS	false
68.67.160.117	unknown	United States	29990	ASN-APPNEXUS	false
142.250.31.156	unknown	United States	15169	GOOGLEUS	false
142.250.81.228	unknown	United States	15169	GOOGLEUS	false
152.7.106.52	naturalearning.org	United States	11442	NCSUUS	false
142.251.40.98	td.doubleclick.net	United States	15169	GOOGLEUS	false
68.67.179.164	ib.anycast.adnxs.com	United States	29990	ASN-APPNEXUS	false
50.17.194.92	spdc-global.pbp.gysm.yahoodns.net	United States	14618	AMAZON-AESUS	false
34.192.223.42	k8s-mutiny-privatea-b7eaf9f835-63806838.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
52.216.38.169	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1435394
Start date and time:	2024-05-02 16:31:39 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 55s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://campaign-statistics.com/link_click/Q8JO54uLM8_NZifI/8b475f29b654ee993e9d9f2d814b5501
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@23/489@146/36
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://naturalearning.org/ Browse: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=ncsu&utm_survey_id=SV_ezeLwH8MeEs4Xye Browse: http://naturalearning.org/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.40.206, 142.250.72.99, 172.253.63.84, 34.104.35.123, 23.47.169.194, 23.41.168.170, 52.165.165.26, 23.33.40.13, 23.33.40.25, 23.33.40.11, 23.33.40.9, 23.33.40.23, 23.33.40.7, 23.33.40.5, 23.33.40.14, 23.33.40.15, 192.229.211.108, 13.95.31.18, 142.250.65.163, 142.251.32.106, 142.250.80.72, 142.250.65.206, 13.85.23.206, 142.251.40.142, 142.251.35.170, 142.250.80.10, 142.250.81.234, 142.251.40.202, 142.250.80.74, 142.250.65.170, 142.250.176.202, 142.251.40.234, 172.217.165.138, 142.250.65.234, 142.250.72.106, 142.251.41.10, 142.250.80.42, 142.250.65.202, 142.250.80.106, 23.55.235.235, 23.54.161.81, 151.101.1.91, 151.101.193.91, 151.101.65.91, 151.101.129.91, 23.204.152.170, 23.204.152.149, 151.101.1.181, 151.101.129.181, 151.101.65.181, 151.101.193.181, 142.250.65.162, 204.79.197.237, 13.107.21.237, 23.196.3.196, 23.196.3.191, 23.57.90.111, 23.57.90.105, 69.192.29.241, 142.251.40.170, 142.251.40.138, 142.250.64.74, 13.107.42.14, 23.196.3.199, 23.34.59.33, 23.34.59
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, e10776.b.akamaiedge.net, a1874.dscg1.akamai.net, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, use-stls.adobe.com.edgesuite.net, update.googleapis.com, cloudenhanced.qualtrics.com.edgekey.net, www.google-analytics.com, fonts.googleapis.com, fs.microsoft.com, content-autofill.googleapis.com, j2.6sc.co.edgekey.net, pagead2.googlesyndication.com, od.linkedin.edgesuite.net, p.typekit.net-stls-v3.edgesuite.net, www.linkedin.com.cdn.cloudflare.net, edgedl.me.gvt1.com, clients.l.google.com, a1916.dscg2.akamai.net, 2-01-2c3e-0073.cdx.cedexis.net, n.sni.global.fastly.net, bat-bing-com.dual-a-0034.a-msedge.net, www.googleadservices.com, ipv6-2.6sc.co.edgekey.net, wildcard.marketo.net.edgekey.net, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, bat.bing.com, e212585.b.akamaiedge.net, glb.sls.prod.dcat.dsp.traf
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	299409
Entropy (8bit):	5.571887519772701
Encrypted:	false
SSDEEP:	6144:t4FfkQglr+g7ldUgWHtASBqmmkCPCSeH4:mFJwr+grG+kcQ4
MD5:	DC687FB6DB5AB4F584EC2EC66CBB851B
SHA1:	A636EE20C9186DFFBE5DDC2BAFFFDECE4DDF4EF6
SHA-256:	C15A73BE028CFE7643FFB297B0CF280232BD12447D20FD5635A829DE9C897991
SHA-512:	2227F4A044E382E06E835D6BDD1015941A383B28794B45F39C5F0CFC5BABC6D9D1CAF01FCD6717F0825E3648DE3F14387E3790A2F48539515D55F8EDB2EE31F7
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-M1MYBR9H42&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":13,"vtp_value":true,"tag_id":16},{"function":"__ogt_referral_exclusion","priority":13,"vtp_includeConditions":["list","naturalearning\\.org"],"tag_id":18},{"function":"__ogt_session_timeout","priority":13,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":19},{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32121)
Category:	downloaded
Size (bytes):	72082
Entropy (8bit):	5.262083408944554
Encrypted:	false
SSDEEP:	768:g+c50EhZi2U/5+1YP3ojUN4XhXXYkjpnQzfEJfPQYH8QpJbnGpMC4iQH:fc50Ez0oJUf0IY5fbnX
MD5:	5F57BD67579AC324B2166B4130A8CC07
SHA1:	3E1FFEE3E8F84FBACF09DE556E9E461E5C0A7FF3
SHA-256:	A452D07F0C98AFCB2E862689E43AEBFE63D8ED39628CD0DB9D1A5BF2490F535C
SHA-512:	BFF7FF5D97BC8F6AD8B48C78201B242BF9A0C896EECC047B4805E9A2AAD061CD284629B55B041B33EB47A6DAECEABED3EB6F6DE23BB60A731C11F0E5F0C22B99
Malicious:	false
Reputation:	low
URL:	https://client-registry.mutinycdn.com/mutiny-client/2.5.3.4.js
Preview:	(window.mutinyWpJsonp=window.mutinyWpJsonp\|\|[]).push([[2],{30:function(t,e,n){"use strict";n.r(e),n.d(e,"render",(function(){return M})),n.d(e,"hydrate",(function(){return B})),n.d(e,"createElement",(function(){return v})),n.d(e,"h",(function(){return v})),n.d(e,"Fragment",(function(){return b})),n.d(e,"createRef",(function(){return m})),n.d(e,"isValidElement",(function(){return i})),n.d(e,"Component",(function(){return _})),n.d(e,"cloneElement",(function(){return D})),n.d(e,"createContext",(function(){return z})),n.d(e,"toChildArray",(function(){return O})),n.d(e,"_unmount",(function(){return I})),n.d(e,"options",(function(){return r}));var r,i,o,s,u,a,l,c,f={},d=[],h=/acit\|ex(?:s\|g\|n\|p\|$)\|rph\|grid\|ows\|mnc\|ntw\|ine[ch]\|zoo\|^ord\|itera/i;function p(t,e){for(var n in e)t[n]=e[n];return t}function y(t){var e=t.parentNode;e&&e.removeChild(t)}function v(t,e,n){var r,i=arguments,o={};for(r in e)"key"!==r&&"ref"!==r&&(o[r]=e[r]);if(arguments.length>3)for(n=[n],r=3;r<arguments.length;r++)n.push

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 198 x 193, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6362
Entropy (8bit):	7.938078916867024
Encrypted:	false
SSDEEP:	192:sS4w1ABezpfS3n5/PtUkESjBD22Z49v9XgvIvNZE:r4szanVlrJjBD/0vlgyc
MD5:	BC049B4EFC1B500E5783987651F586B7
SHA1:	FA2AC004AF7A322092D8285FED016E7A70D78620
SHA-256:	21409860FB0016CCF5E7D476B025FCA769D42A69EFC5E96211009A279FFF7695
SHA-512:	38E7DFA582572F9E5546E55AC24334BC4B40CEE613ABA5249445F51823C368F883C87235666BC34CA12C679B57757E158E550CE471F168DEF60C6658E7DCB9FC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............@?.....pHYs.................PLTEGpL.....................................o...............o.................o..................................7.E............o....j...6.B..o..o..o..o..n6.A....9.J..o....o.~j..j..8.G6.A..j..o..o..9.J7.D9.J6.B.~j....9.J.~j.~j..o..h9.J9.J6.A5.<5.<6.A.~j.~j5.>6.A..k..5.<..o6.A..k9.J..k5.<.~j..j....l....5.<5.<9.J..k5.<..l5.<9.J9.J6.A6.A..m6.A..m.~j.~j.fC...L+..j5.<....g........l.v..q..o..r..=.E.}.fI.L+.L+..o.{....L+...`8.9.J6.A.~j....5.<..r.u.z.y..pL..nX.w..m..j..m..t.O/..o..p.....y..n..l..s....m..r....J(..v~H"..;i<...k..k...pN.~.hKf;..T3.\@....yp@.b9...wD..X8..^..v.{W...aD.N$T0..uR..x..f..kC .~..m..ue=.wN..t.R,..a.7.s1.pHY3..zX.fE.Y5.lU.9.6..:O,.tJ$.e/.]-.9}T0..l.k0.Q8.H..m._E.I..kc.W..].iL.k..o....wJ#......tRNS....vD..Dv.f"."2Tv...2...@D....".2T....T..f?f 0......p.../.P@.`P@.p@0.P`. .....`..........`O.r/..`...VP.`......p..@ ..d...... sM......IDATx..

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 400x250, components 3
Category:	dropped
Size (bytes):	31533
Entropy (8bit):	7.963430573914925
Encrypted:	false
SSDEEP:	768:AW8NnzO22tFRqYhn5/ymyuGBI89gCGoa3rmhMnIMuY:ARNnKPtFRqYhn5amNGBI8qCq74M5
MD5:	6B4C7A00265BFF83B5262339372669D6
SHA1:	7B8E7ED68E010337198EF6F16210C9A599CC5D32
SHA-256:	21DE0989D0BB7C240E20C6B93E3456994D8071B8E252B50424A98993E0AB2780
SHA-512:	5158A99E2E56819009CC5438B10DA2B690620E386A6C81F1022CBE6BA776DA6805BB3AFF716D757BFFCF876353FA66F427776A060E696A8399163795202A8645
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."........................................D..........................!1A."Qa..q.#2..BR....3...$b.r..4C..DS..................................2........................!1A."Q.2a#q.B.......3R..............?....}0j.d..b\bH_..B.........._.d.@.Du.Z..w..Lon.q.h.}.\|..s...H.2.:C.?).$2../##...F..-......7.C........!n.....c..#...E`[.%~%...n...$.`...Gn...T....1.$`J..}...).......VU.8.u...u...q......6..rp1LA.@.......z.....$eY8W>.=..o8Yq.U. ..,.H....B.9.E.U........E%iA<....2=....[9.f.`..d...q~!S..s..u6..,.o..g.){...R..8..)..Ci[.......lP.6.......%?.:W..\zd....34..."..!.w.I..Cj*.H....hy..{.....C..mM.KN.XI........ur.,.a.. ....}.jM_p._-...^,.hW.......EJ...:..q.G.=..n......I..r..(.kD....6..i.n@!9.3...v....<...z......$..Y^.......;..>.%.S..u..#.w3.,..N.D.m.

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6991)
Category:	downloaded
Size (bytes):	7343
Entropy (8bit):	5.168216269565352
Encrypted:	false
SSDEEP:	192:HNqg5hvdVEKI0UEmXXYytmh7f0GpJYhMpCUC6Yw3:txdO9nOdC4Yw3
MD5:	26A7F8E32BC3D2A4A5A7824F1A9381B6
SHA1:	45ACFE4BD787C9470CAC2131400C22DC78107EF0
SHA-256:	4AA6D48451CD5F12AE6D3DA8EE098769445283F5397886188644F7E0FD29742E
SHA-512:	8BFA9C216C10E385553C64E8BA7174F924F8D4043DC16629D7A94633103E94952EECAC135019A4184F911EA7DA5059D51B649D38B1A5C195E0528207886E697F
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/assets/dist/js/libraries/intersection-observer.min.js
Preview:	/*. Minified by jsDelivr using Terser v3.14.1.. * Original file: /npm/intersection-observer@0.7.0/intersection-observer.js. * . * Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files. */.!function(){"use strict";if("object"==typeof window)if("IntersectionObserver"in window&&"IntersectionObserverEntry"in window&&"intersectionRatio"in window.IntersectionObserverEntry.prototype)"isIntersecting"in window.IntersectionObserverEntry.prototype\|\|Object.defineProperty(window.IntersectionObserverEntry.prototype,"isIntersecting",{get:function(){return this.intersectionRatio>0}});else{var t=window.document,e=[];o.prototype.THROTTLE_TIMEOUT=100,o.prototype.POLL_INTERVAL=null,o.prototype.USE_MUTATION_OBSERVER=!0,o.prototype.observe=function(t){if(!this._observationTargets.some(function(e){return e.element==t})){if(!t\|\|1!=t.nodeType)throw new Error("target must be an Element");this._registerInstance(),this._observationTargets.push(

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 1860x2016, components 3
Category:	downloaded
Size (bytes):	189156
Entropy (8bit):	7.367537354084518
Encrypted:	false
SSDEEP:	3072:VjTwfWPDDWXWdZujY2/ymJPQ0WPotu/6VD8wt3:VjceXzV2/ymJY0WATlt3
MD5:	CEF20C9CC0947A33BD78C9029927036F
SHA1:	A498D42D3798E8020FEF2C22A4B66A63CF824888
SHA-256:	9C1326A43D0A889CCE168FA88E77F4313403E5C418F595D601A21D6539B03CF3
SHA-512:	61B497C5CE2F89887A076835B60222806B217A6B6561B31782644F3B833324C6DD390D3EA5394A59762AFF0BDC1CF27A0FC67B1321A66A488EF302B4A7F80975
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2020/11/John-Rex-Endowment_VT.jpg
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.........................................................................D.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15204), with no line terminators
Category:	downloaded
Size (bytes):	15204
Entropy (8bit):	5.145393454479452
Encrypted:	false
SSDEEP:	384:OzJXYlMWDG+0+qnJ4eYNJZDnGV4KEZLOGRn:O9XYl42qnJ4eY3ZDw4KEZLOGRn
MD5:	D29DE80CF4363FD641E6BB8C9576F803
SHA1:	72EC319BDBAAEB56E58341DC0859A7F4D86B43FF
SHA-256:	870A0D4EDA0B78CE739A6557840AB097D1A7464F0C5D3638CC2B862EAD8505AA
SHA-512:	43EA147A6AD32E6D302FD254E3EDBF50801CA5F811C2E8AB79A5E47D4EEE3D9B7466AEF7F88D70D02909BE600BA7A14470F315B85EE674D7B00C1AE88C507159
Malicious:	false
Reputation:	low
URL:	https://client-registry.mutinycdn.com/mutiny-client/6.5.3.4.js
Preview:	(window.mutinyWpJsonp=window.mutinyWpJsonp\|\|[]).push([[6],{46:function(e,t,n){"use strict";n.d(t,"e",(function(){return u})),n.d(t,"d",(function(){return l})),n.d(t,"c",(function(){return p})),n.d(t,"b",(function(){return h})),n.d(t,"a",(function(){return m}));var i=n(34),r=n(0),o=n(5),s=n(13),a=n(10),c=n(3);const d=(e,t)=>Object(c.b)(e,{[i.b]:r.d.AssetViewer,[i.j]:null==t?void 0:t.sessionToken,[i.k]:null==t?void 0:t.visitorToken}),u=(e,t)=>({assetCtaText:e.asset.cta_text,assetDescription:e.asset.description,assetId:e.asset.id,assetImageUrl:e.asset.image_url,assetTitle:e.asset.title,assetUrl:d(e.asset.url,t),eventId:e.event_id}),l=()=>{var e;window.parent!==window&&window.parent.postMessage({type:r.j.AssetViewerLoaded,height:(null===(e=document.body)\|\|void 0===e?void 0:e.clientHeight)\|\|0},"*")},p=()=>{window.setInterval(l,1e4)},h=()=>{const e=Object(o.a)("style");e.nonce=Object(s.a)(),e.innerHTML="\n body::-webkit-scrollbar {\n display: none;\n };\n\n body {\n overfl

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	860
Entropy (8bit):	5.088792672969172
Encrypted:	false
SSDEEP:	12:TM37N+4q/KYmHX5PEBcztVanbvE/ofm49W+TjFqnoXa/8h6mFbFon9e1m:o+4qLmp0czsEo+49D36KZFy
MD5:	FCBE244C7D6A405434FFF74C30E4B331
SHA1:	926A2F05DFA08E33AC7A0704B3C78FBF6DF6638E
SHA-256:	28B0AD7C9A0EE2AAE080B8BA5F764E2A63F86131368E729841A1FB474AB599D3
SHA-512:	2C2665ABD89CE0D1D81E1FB26AB7BC4284A0846D4F088135C45A671545902CB11F83F5F7EB1C22AD8EB16F1B2664E1A74712C1C6A18B5680F576599C0BCE1E9E
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2019/10/youtube_3225180.svg
Preview:	<?xml version="1.0" ?><svg id="Layer_1" style="enable-background:new 0 0 1000 1000;" version="1.1" viewBox="0 0 1000 1000" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><style type="text/css">...st0{fill:#FF0000;}...st1{fill:#FFFFFF;}.</style><title/><g><path class="st0" d="M500,1000L500,1000C223.9,1000,0,776.1,0,500v0C0,223.9,223.9,0,500,0h0c276.1,0,500,223.9,500,500v0 C1000,776.1,776.1,1000,500,1000z"/><path class="st1" d="M818.2,339.1c-7.6-28.8-30.1-51.4-58.7-59.1c-51.8-14-259.4-14-259.4-14s-207.7,0-259.4,14 c-28.6,7.7-51.1,30.3-58.7,59.1C168,391.2,168,500,168,500s0,108.8,13.9,160.9c7.6,28.8,30.1,51.4,58.7,59.1 c51.8,14,259.4,14,259.4,14s207.7,0,259.4-14c28.6-7.7,51.1-30.3,58.7-59.1C832,608.8,832,500,832,500S832,391.2,818.2,339.1z M432.1,598.7V401.3L605.6,500L432.1,598.7z"/></g></svg>

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1512, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1512], comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 1512x1080, components 3
Category:	downloaded
Size (bytes):	313198
Entropy (8bit):	7.925809198831934
Encrypted:	false
SSDEEP:	6144:c4lUm1dfUyfAsyZxQKQ0r3R35G53EX1bren:ZlUm7UykZx/FhpH1bren
MD5:	896765C30AB740B57028A1872B22FDF0
SHA1:	969A8DFA410BDE0EE72C49AA5590B5B4DCCC2BA7
SHA-256:	52230D9C137C4863857FF1879FCA63B8F171AA77033DFFE8CDA695303391F457
SHA-512:	1D53140B31A593AF6AD52F2507A19AB846A918E149FE0D56F8A98581E53788B5DC5DE2ADED2330DB905638EEC135AAA7BDF756C7E59FA361D082AC65FB62954E
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2019/08/Home-Resources.jpg
Preview:	......Exif..MM........................................................................................................(...........1.....$.....2..........i.............$............'.......'.Adobe Photoshop CC 2019 (Macintosh).2019:08:07 15:12:45...........0231..................................8...............................r...........z.(.................................z.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................r...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....H..M.?5%"<..$.......+:.....6Zi..9...v..E...q......~F=i....^......

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=2080, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=3887], baseline, precision 8, 1280x914, components 3
Category:	dropped
Size (bytes):	469792
Entropy (8bit):	7.978157501407625
Encrypted:	false
SSDEEP:	12288:SscTyEsJ+ITDAKelvQJe06/usMzGfY15fu/mIgj/:9cvsJ+udE0CtM3g0
MD5:	A3484B77A6AC80388CA17ECF5CD1C4BC
SHA1:	582ACE9010589660CA8A2BABD1C27FD1234DF11D
SHA-256:	D36ECC57A73E93984168A7535A9797016AD29BD4FFB9493EF4BC521AB2A22873
SHA-512:	B5CD0E0DD09C07CC535C98111E34A027920E283F0F2DD57B33C3119B1B6FBE63631783F1ED85876813512599B658400661C02C5CC96A448D40C6FB5AC3972C80
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`....&.Exif..MM.*.............../........... ...........................................................................(...........1.....!.....2..........i.............$.........`.......`....Adobe Photoshop 23.0 (Macintosh).2021:11:02 14:55:10..............0231...................................................................r...........z.(................................%........H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................r...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...q...DP...Z].........^...5o....].F......t...............

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	4.520161937431786
Encrypted:	false
SSDEEP:	12:o6IS+6EIIDqLIS+6EIl8vIS+6EIS+6MkCy1cIS2I03aS2VQ6IS2Ve7HDMRcH7wWj:n3FdL3FnC3FkFMxya3W9C1EawjVV0ZHP
MD5:	D472F5E7A8A30C9EECD9FD3C1C80073A
SHA1:	EDF4D145B23E7DDE618BE21385CB46CE9C060055
SHA-256:	8AA0C6A1A20D7C6593E9EE8DB51D76F0D88129B7B9EEBD49CF5327BADFFCA7FF
SHA-512:	ABBD1DCB11BAB04A00CC1752F0DA9107EDA4AEFFA531CC4A0438CE00F25354016B3436E298498CDE6AA63423B49A5A2AD9EA8630A189BACDA265131833CC7814
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/plugins/divi_cpt_layout_injector/style.css?ver=6.5.2
Preview:	.et_pb_cpt_list_wrapper .et_pb_post_type {. width: 100%;. float: left;.}...et_pb_cpt_list_wrapper .et_pb_post h2 {. margin-top: 0em;.}...et_pb_cpt_list_wrapper .et_pb_cpt_list_image_container {. float: left;. margin-right: 2em;.}...et_pb_cpt_archive_list .et_pb_row, .et_pb_cpt_archive_grid .et_pb_row_cpt, .et_pb_cpt_archive_grid .et_pb_row_cpt .et_pb_row {. width: 100%;. max-width: inherit;. padding-left: 0;. padding-right: 0;.}...et_cpt_container_column .et_pb_row {. padding: 0;.}. ...et_pb_cpt_archive_list .et_pb_section, .et_pb_cpt_archive_grid .et_pb_section {. padding: 0;.}

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3
Category:	dropped
Size (bytes):	23793
Entropy (8bit):	7.958465679947796
Encrypted:	false
SSDEEP:	384:xsGp478prD+huiAATf+Sf80HVWfxmt2B92JXMDgeywxYAOZhsdmt5:xBp4UrxiAATWSkvxlkJ+i
MD5:	3CBF95EB609A0881AC5AD362CBEDFDB1
SHA1:	12CD72238422D04B75C4EB89DF1DE7AF6BC72E3D
SHA-256:	32A66E1AAD6F6FA10ECB8E73CA9C45B9B9E262566F69D5D0A175A75D31C56ED1
SHA-512:	2636A7FA017D22BB53DC7CA0FD60D794B7C5CC24BBDB51FA19AD80F46C99765D1665740E0D97566A0AFBE474894CEE99B98A7B3ECC417E4B0A989A75D5B191D7
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C............................................................................"................................................................................. ...........k...9."+..W._....7I...................\|.O&....R.<..k....e.I.<}..'Q. .........m.q.....wwF..E.Lr.....K#g..H.G...{...>[M.2..'.]..+..._w......Xwz.wH........JS....Nc...}>^ih?G..=.c..=.c...!...$.W.oM.14..#?...P.m..m.7.Xz6x........q.',8....3.)h...w.....n..'.].l...w..L...`.7.....`..`...<t(..H............G#..d`..+.vn.H..\|.R.^..n..i....}9...:..2..K...7.=~^.........!..=.{.q.0...D\.........k;-}...$.w..{.Y.].:[+.&_..<.n.~....m.l...:...'.K/.^C..=^C..=n.=.{dn..m"..........y..+.....\|..{....DX7..5..?O.[..U.)....a.V.?0.h.h.h.h.h........p..O...........9${.Qn.T.V'.2..C9uV.F.H....'#.......,.6.........'.........<.........[.l.u.o..p.......L.g..^.....U.Mj............k..>..{+Q..2.............O.....i?.......;.3..,\~Iz.z

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (362)
Category:	dropped
Size (bytes):	1182
Entropy (8bit):	5.858980666299011
Encrypted:	false
SSDEEP:	24:jIyagC8jvdznKSgCN0i00uL9oTL9nH7aZPgsHLIyagCOLDljvdFHEnKSgCN0dRdP:jI0C8jVzKnCKi006YL9H7aZPguI0CCjT
MD5:	6A2C866D3B11275A9B78BFD1845AD082
SHA1:	E880445911B724C3F5B59A0CBF70B16EC2196CEB
SHA-256:	B66522D1435E5B65CCF00DEB42C80DE95B2E17F7D8EC7F451B35A93CF52ED530
SHA-512:	C11F86A5325029EEC200303A6F03C2FBC0311C2D56B1F9EF50A9EBC094AAAF0DFC14D4AAF8FC90B9C30F7B5E7F2E30D0A965711E0A3D752C28AD0AEE6A95F9E5
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://analytics.google.com/g/s/collect?dma=0&gtm=45j91e44u1v883492273z86526812z9848816901za200&_gsid=Z0RM4JK167DyNk4LM2WF50xT5KwRx1Qw"]}..event: message.data: {"send_pixel":["https://stats.g.doubleclick.net/g/collect?v=2&dma=0&tid=G-Z0RM4JK167&cid=1321622203.1714660406&gtm=45j91e44u1v883492273z86526812z9848816901za200&aip=1"]}..event: message.data: {"send_pixel":["${transport_url}/_set_cookie?val=0ZKKmLCF9y0rE1KNfrH90lyPJkFag19sm7hbSaHLplBbEJ9e6T5I75jL1iT074W7fTq1jMMMGr%2BLi%2FP3DQ0JEXyiwddKs6XpIgEz8x%2FjC8mkZ%2Fn9wHAORwArT2weT4k%2FJx5jlDX2ZwnIwzT%2F20R0m1h996iMt4Lt%2FKB01y6kfRn6B38u%2F3t6IdPiOMd1uaMRQ5pAdSXjI2Y1Fjm85bn2xuK2ECrZqrhQEjUj%2Fsf8yR9ZyJpFHP7UIBXH3Q8w6u%2BIRBLGBZS0B8oh3RYxYk5McRmJ290f"]}..event: message.data: {"send_pixel":["https://analytics.google.com/g/s/collect?dma=0&gtm=45j91e44u1v883492273z86526812z9848816901za200&_gsid=KREE1SMXRW_Ex9Uelz-tRyyfs0R2oTag"]}..event: message.data: {"send_pixel":["https://stats.g.doubleclick.net/g/coll

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	267010
Entropy (8bit):	5.287579822367895
Encrypted:	false
SSDEEP:	3072:WycbhP+Bmz0bcfZrz7VtxP2mOPhgHvsfcZlVD24VQpc0AYocuEfILQ9ly:Wp9P+BC0yRzpzPg52PVFQpbWcuEfjK
MD5:	8B42DDBA9B0AA1E8C6408B6172AD3C2A
SHA1:	18095964EA60EE747E01EDB23588EA82BCF7E068
SHA-256:	FDCCD8C1C607B7D24E82E5194A296C62FB9E9294B534AC9F290F4E2431486D7C
SHA-512:	5D72A3CDF3A86AC0783796939F37883F41DCD028FDF4ACC8DA70ADA412CE67E8B9291BE3C735BD40B72734097D73AF294CF4321D7DC3A8120F9096986F88596F
Malicious:	false
Reputation:	low
URL:	https://ncsu.qualtrics.com/jfe/static/dist/vendor.8b42ddba9b0aa1e8c640.js
Preview:	webpackJsonp([35],[function(t,e,n){var r,i;r=[n(33),n(119),n(120),n(121),n(122),n(123)],void 0!==(i=function(t,e,n,r,i,o){"use strict";var s={};return s.Class=t,s.AbstractClass=e,s.Interface=n,s.FinalClass=r,s.instanceOf=i,s.options=o,s.mode="loose",s}.apply(e,r))&&(t.exports=i)},function(t,e,n){var r,i;r=[n(14)],void 0!==(i=function(t){"use strict";t.noConflict(),window.jQuery=t;return t.fn.dirtyWatch=function(e,n,r){var i=r\|\|100;return this.each(function(){if(!t(this).data("QWatchTimer")){var r=this,o=r[e],s=setInterval(function(){r[e]!==o&&(n.call(r,o,r[e]),o=r[e])},i);t(r).addClass("QWatchTimer").data("QWatchTimer",s)}})},t.fn.dirtyUnwatch=function(){return this.each(function(){var e=t(this).removeClass("QWatchTimer").data("QWatchTimer");t(this).removeData("QWatchTimer"),clearInterval(e)})},t.fn.dirtyUnwatchAll=function(){return this.each(function(){t(this).find(".QWatchTimer").dirtyUnwatch()})},t}.apply(e,r))&&(t.exports=i)},function(t,e,n){var r,i;r=[n(40),n(70),n(75),n(27),n(80)

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21184)
Category:	downloaded
Size (bytes):	22786
Entropy (8bit):	5.421454041385215
Encrypted:	false
SSDEEP:	384:+4j4PhVOFQ2G2XAQpFVxRQZjilC1LtAYTn5h5/F6l8aZwENztLopz3sc:+hPG2F9hn5h5t1qBDLoZsc
MD5:	B709961DD29D261EE0CE8FB17101874A
SHA1:	9A286EAAA964091528B256C81BB446C7072B7E19
SHA-256:	0A47C6E6F24E634CB79F886E70BBFD65E1E85B0D2AA4FC133488FD1BC1910E3E
SHA-512:	44D50DA84DF301378A9F3D2543A0303F16A1464D1158F21AE63B04EB95A0016BF4BFC80E36AEA535EF39DD10BDE5361BE39A79AA9186C318AC82F297265CFB82
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/magnific-popup.js?ver=4.25.0
Preview:	/!. Magnific Popup v1.0.1 by Dmitry Semenov.* The MIT License (MIT).* Copyright (c) 2014-2015 Dmitry Semenov, http://dimsemenov.com.* http://bit.ly/magnific-popup#build=inline+image+ajax+iframe+gallery+retina+imagezoom+fastclick.. Modified to adapt the latest jQuery version (v3 above) included on WordPress 5.6:.* - (2020-12-15) - jQuery isFunction method is deprecated..* - (2021-02-01) - Number type value passed to css method is deprecated..* - (2021-02-04) - jQuery focus event shorthand is deprecated..* - (2020-02-27) - jQuery isArray method is deprecated../../.Permission is hereby granted, free of charge, to any person obtaining a copy of.this software and associated documentation files (the "Software"), to deal in.the Software without restriction, including without limitation the rights to.use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of.the Software, and to permit persons to whom the Software is furnished to do so,.subject to the following cond

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	564
Entropy (8bit):	5.084955691734945
Encrypted:	false
SSDEEP:	12:t4Gu0zg4ZfN/dMt7XnsduduzRWyfz+m/iMQu9gpC:t4GuKgUVdMt78dudutZJQuh
MD5:	21BAD3AE7273F45E8E8DE7AE14B1DEE1
SHA1:	2E5E80CAD2622BCE172684E51F90FB68FABC6064
SHA-256:	32BDBF296DF6E5A2ED687BCE23AEB7B08AACFF52D7563E040BBEC44E635DCC85
SHA-512:	0AC4E04712FE571C2A3D8B0366F0580C6D492945F81922DBADEB5F6AE51A57C009BF95153896FA11542AFEDA058FEB7907E86AE775DF8E032374199170224433
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/assets/dist/svg/display/laptop.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <symbol id="solid" viewBox="0 0 2684 1792.01">. <title>laptop</title><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path d="M2356,1456h328v119c0,147-120,217-256,217H256c-137,0-256-70-256-217V1456H328V132C328,50,378,0,460,0H2224c82,0,132,50,132,132ZM392,132V1455H2292V132c0-48-20-68-68-68H460c-48,0-68,20-68,68ZM552,1295V224H2132V1295ZM616,288v943H2068V288ZM2620,1575v-55H64v55c0,103,81,153,192,153H2428C2538,1728,2620,1678,2620,1575Z"></path></g></g>. </symbol>.</svg>.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/powered_by_logo.svg
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26539)
Category:	downloaded
Size (bytes):	327796
Entropy (8bit):	5.58338266482771
Encrypted:	false
SSDEEP:	3072:Urr48Q6bfCh9qwrQh2lr77s8HH9deL7rt6AL6h0UgWHtAS3R/ORu6lISe22CSFDl:64EfkQglrLg7ldUgWHtASBsISePCSSd8
MD5:	6A895054BC1DB5FF7EC43D1DD0DE103D
SHA1:	B71554FAADB21BE28BA3B023E39818F2DAB9DF39
SHA-256:	54E8E377E7902B8CA8844281243A508F7D3578007CDAEE29C519C88F60380DEE
SHA-512:	4439E543E49FFF1DD61272E2A68A55AB0C1BCB639072657148599EA52CAA00932345418B99BB113FFC60D3D9394FEB553AD083E078BC207B444345257D72AAB7
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=G-Z0RM4JK167&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"13",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_referral_exclusion","priority":43,"vtp_includeConditions":["list","www\\.qualtrics\\.com","chiefapologyofficer\\.com","support\\-portal\\.qualtrics\\.com","status\\.qualtrics\\.com","payments\\.qualtrics\\.com","qmobility\\.qualtrics\\.com","success\\.qualtrics\\.com","wordpressstaging\\.qualtrics\\.com"],"tag_id":117},{"function":"__ogt_ga_send","priority":43,"vtp_va

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1124
Entropy (8bit):	4.691624965758359
Encrypted:	false
SSDEEP:	24:t4GVCh8gUK4ZFvxqCtFP0lJzHn2JvJ8glQ63LoeWo:1VzlKGqCtFP0ldHmx8glV38Xo
MD5:	E228390FCE3F8429E4D5D7CC18ED32F6
SHA1:	8AE449EA8E3E1306135D385D6EC171AB24C241DB
SHA-256:	25F89C0D7AE67983BD855D6352A203A1F0242923AFF594A98A91BC56BF59DF31
SHA-512:	CB7CD657C36BF361F07B476D4D484F544C01B6E502F0FC144E4E3CB234AB8640479EC703074BE7EE304CA7FD6951747B74AB370FA56884D0C21DE141B76364BC
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <symbol id="solid" viewBox="0 0 1340.99 1854.98">. <title>Asset 1</title><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path d="M1107,271c129,0,234,105,234,234V1621c0,129-105,234-234,234H234C108,1855,0,1754,0,1621V505C0,374,105,271,234,271h61V163c0-22,17-39,39-39H518C535,53,600,0,676,0S817,53,834,124h184c22,0,39,17,39,39V271ZM373,202l0,209H979V202H800a39,39,0,0,1-39-39,85,85,0,0,0-170,0,39,39,0,0,1-39,39Zm890,1419,0-1116c0-86-70-156-156-156h-50V450c0,22-17,39-39,39H334c-22,0-39-17-39-39V349H234c-86,0-156,70-156,156V1621c0,86,70,156,156,156h873C1193,1777,1263,1707,1263,1621ZM884,660c16,14,17,39,2,55L638,983c-10,12-13,9-28,13-11,0-21-4-28-12L458,861a40.43,40.43,0,0,1,0-56,39.24,39.24,0,0,1,55,0l95,96L829,662C843,646,868,645,884,660Zm-35,525a39.24,39.24,0,0,1,0,55L727,1362l122,123a39.24,39.24,0,0,1,0,55c-8,8-18,11-28,11s-20-3-27-11L672,1417,549,1540c-7,8-17,11-27,11s-20-3-28-11a39.24,39.24,0,0,1,0-55l1

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	364
Entropy (8bit):	5.148350047193689
Encrypted:	false
SSDEEP:	6:tI9mc4sl3SYUSmHqiLUMdkKiEZf+MffJTcXU8k/YIXk5WVvWrpvlkdZW+ST8LqS1:t41SRg4Zf+Eh4E8nI0kVvWrpkW+STGp1
MD5:	FFAFF0F0992539B7D62A7D2E0F4208D7
SHA1:	EEE64C11167B2650E185804B614E167BF8CBD0B1
SHA-256:	0E61D8F66A9F5448FA03C316A81B138C3A1B9AEA3AF4153A2842C30DEA80F2FE
SHA-512:	2E9BE327A49CD10D0ABE3C359B756C098D159EE301C09168FB0473ECE197B2E8349DE5DFB39370CB3D8C48328A115E7B1F5CC686212471BB235DA81E889A0A37
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 74 74"><title>Asset 1</title><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path d="M37,0A37,37,0,1,0,74,37,37,37,0,0,0,37,0ZM51.84,40.75,31.28,61c-1.57,1.54-2.85,1-2.85-1.2V16.13c0-2.2,1.28-2.74,2.85-1.2L51.84,35.15A3.92,3.92,0,0,1,51.84,40.75Z" style="fill:#00b4ef"/></g></g></svg>

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20092), with no line terminators
Category:	downloaded
Size (bytes):	20092
Entropy (8bit):	4.858094864503404
Encrypted:	false
SSDEEP:	384:WnCI9ruJgqbxHi9CZJIkZ+Co12Gdx6AlPb:Rg4xHJJIzb
MD5:	38A980E0DACAA1D82B883AA75EA6EB77
SHA1:	AF865B37FCC5F3DC507C54EF5333554E80FA4446
SHA-256:	962EDDC3189144DC1B872CDFE82D4DBF337E0E686D86F18DBBB8604A2700D5FA
SHA-512:	0AF231800C27514586B0EBFC9235546EAFD1427B9C54BB31B8B2EA905100F6DB8B2D97680B6F41F983AB7398E8DC55784221A984340998D2B646923CC987C8FF
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/plugins/dg-carousel/styles/style.min.css?ver=2.0.26
Preview:	.et-db #et-boc .et-fb-modules-list li.dica_divi_carousel .et-fb-icon{padding-top:7px;padding-left:7px}.et-db #et-boc .et-fb-modules-list li.dica_divi_carousel .et-fb-icon svg{width:16px!important;height:16px!important}.et-db #et-boc .et-fb-modules-list li.dica_divi_carousel{background-color:#e1e7ec!important}.et-db #et-boc .et-fb-modules-list li.dica_divi_carousel:hover{background-color:#94a7b7!important;color:#fff}.fancybox-container{z-index:999999}.dica-container .swiper-container{width:100%;height:auto;display:-ms-flexbox;display:flex}.dica-container .swiper-wrapper{height:auto!important;-ms-flex-wrap:nowrap;flex-wrap:nowrap;-webkit-transition-duration:2s;-o-transition-duration:2s;transition-duration:2s;-webkit-transition-property:-webkit-transform!important;transition-property:-webkit-transform!important;-o-transition-property:transform!important;transition-property:transform!important;transition-property:transform,-webkit-transform!important;-webkit-box-sizing:content-box!importan

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (35240)
Category:	downloaded
Size (bytes):	35285
Entropy (8bit):	5.322145022769647
Encrypted:	false
SSDEEP:	768:eZLVluPE17b6DDxz4E4vAy0AHRpqN3Kky9oJzn8lK5toud2f9t6E:KV0Mf2DmNu3N3KAjq
MD5:	F0A5BFBE14E2E42377F2F569E63DAFF1
SHA1:	08784EC9F7EF1C4A57637528993BECB515C8C8EC
SHA-256:	9AC877B8C03430256D35525A1979098A621E887CB252799D347391940FB89B5D
SHA-512:	E0FE0754F0070B85E6D354BAD35A6DF8C09033291B8C398950BF25214B1F59C63B60ABC230DC412C59185A5AEF54DECAC32DD73533AA9897E37E4DB9F445EDDC
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/assets/dist/js/modules/marketo-2024-03.js
Preview:	!function(){var t={9662:function(t,e,o){var r=o(614),n=o(6330),a=TypeError;t.exports=function(t){if(r(t))return t;throw a(n(t)+" is not a function")}},6077:function(t,e,o){var r=o(614),n=String,a=TypeError;t.exports=function(t){if("object"==typeof t\|\|r(t))return t;throw a("Can't set "+n(t)+" as a prototype")}},9670:function(t,e,o){var r=o(111),n=String,a=TypeError;t.exports=function(t){if(r(t))return t;throw a(n(t)+" is not an object")}},1318:function(t,e,o){var r=o(5656),n=o(1400),a=o(6244),i=function(t){return function(e,o,i){var c,s=r(e),u=a(s),d=n(i,u);if(t&&o!=o){for(;u>d;)if((c=s[d++])!=c)return!0}else for(;u>d;d++)if((t\|\|d in s)&&s[d]===o)return t\|\|d\|\|0;return!t&&-1}};t.exports={includes:i(!0),indexOf:i(!1)}},3658:function(t,e,o){"use strict";var r=o(9781),n=o(3157),a=TypeError,i=Object.getOwnPropertyDescriptor,c=r&&!function(){if(void 0!==this)return!0;try{Object.defineProperty([],"length",{writable:!1}).length=1}catch(t){return t instanceof TypeError}}();t.exports=c?function(t

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	209048
Entropy (8bit):	5.318513602430152
Encrypted:	false
SSDEEP:	3072:OXJznO0tuTwPyoDcvA4EIoyR5CcBadyW26Nlad5:qzO0tuTwPyu0EIokC4aUj
MD5:	AEEC463B37D075EA9B5ED5CD4EA88FA7
SHA1:	314FACFB70BDCEB0F42467DE7CB0603A3884DC52
SHA-256:	E133ED1AE38D54FC651A16B69201398F49452E7B207F7A49A3773706F1E17648
SHA-512:	C19838BDCC98E3DE3AE57097BAB039DBE0FE2F872741147E138808A602B86729FCD859170ACABBD1EC0FF7422FC8EBE6B60DD2D6A15D499723A71376BBD1ED36
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/sticky-elements.js?ver=4.25.0
Preview:	!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=382)}([function(t,e){var n=Array.isArray;t.exports=n},function(t,e){t.exports=function(t){var

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 360 x 388, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	25935
Entropy (8bit):	7.960398345569899
Encrypted:	false
SSDEEP:	384:Uv3E7dHCZPcrer8Hl8Bk2Y+o1JmZG+ZaKmJOBKrtyl7N4LIZv+6t4KuT7mnUxP6u:IwwEeIF88Jd+ZR4gNNGmvFuGUgny9kN4
MD5:	1198BB9E1247EA8654428C7A8A3A7A2D
SHA1:	F7F19D93103D09A2C8E8BBD2031A4A32529B9E70
SHA-256:	FD31FF1CBD1B34B913F42C97215ADB2EE5903E448AF478F4806A7C48CBF1E18D
SHA-512:	6226BCD74506B919A142ECD4F55BF77F934FA0E771C16640D191C336E81D368FC210D90616F57AC08A61EE8B954057377EF96C83B996CB76E84B1C8C45B9C4CE
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2020/11/niehs.png
Preview:	.PNG........IHDR...h..........c.,....pHYs............... .IDATx....T.u....ZJ..\...'.Pj.!..c.1..5. F.{.....Xk..z..].%j.....j.1.P...c...RJ)y..^K..p.\.....s.=..3s..3g.Y..Ys.^{.......s.3...........!`.......yd.....! .,@.<0...C...X.....[..!`.X..9`....@A...].1...C....ms..0...."`....cn....!`...!`....E..tA...2...C.....C..0.........e......h....!`.........s..0.....@....Q..'..i.....T...!`..A`...x..'..1.oO~t.....Nc..."..^....5......N.F..i...o......<......F....0.Z.....+.6C....si...o.\|>\|?.ZA..)M..XM...f...._......C _..c...to.f..?..v....w=.zqB.~..6@7..4.y"...<..../..u....&.~..y.hg2.?.$.....U...&8.....F..!.~.>..zyZ7.@..lZ....V.....S.v.z.;h......;.}.B.....;...J:....`.k ..%.......T.....0..D.p..i.`G....i.2.....Gf...f..4.?.t....Y....E...i.[i...w.T..5....*H7r._....4S.f...'.,._lD.;C.. 0.....;.`scZ...c....".)@S.....0.....l..\.~........5.J.S.h.{.U\SY....C...dZ..w....X.\|..8...../..+..!`.t..........I}.^.v\....c.@ U.f...Y..!`.t....(..V.=.zeC.t.AzX....T....i..

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	860
Entropy (8bit):	5.088792672969172
Encrypted:	false
SSDEEP:	12:TM37N+4q/KYmHX5PEBcztVanbvE/ofm49W+TjFqnoXa/8h6mFbFon9e1m:o+4qLmp0czsEo+49D36KZFy
MD5:	FCBE244C7D6A405434FFF74C30E4B331
SHA1:	926A2F05DFA08E33AC7A0704B3C78FBF6DF6638E
SHA-256:	28B0AD7C9A0EE2AAE080B8BA5F764E2A63F86131368E729841A1FB474AB599D3
SHA-512:	2C2665ABD89CE0D1D81E1FB26AB7BC4284A0846D4F088135C45A671545902CB11F83F5F7EB1C22AD8EB16F1B2664E1A74712C1C6A18B5680F576599C0BCE1E9E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" ?><svg id="Layer_1" style="enable-background:new 0 0 1000 1000;" version="1.1" viewBox="0 0 1000 1000" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><style type="text/css">...st0{fill:#FF0000;}...st1{fill:#FFFFFF;}.</style><title/><g><path class="st0" d="M500,1000L500,1000C223.9,1000,0,776.1,0,500v0C0,223.9,223.9,0,500,0h0c276.1,0,500,223.9,500,500v0 C1000,776.1,776.1,1000,500,1000z"/><path class="st1" d="M818.2,339.1c-7.6-28.8-30.1-51.4-58.7-59.1c-51.8-14-259.4-14-259.4-14s-207.7,0-259.4,14 c-28.6,7.7-51.1,30.3-58.7,59.1C168,391.2,168,500,168,500s0,108.8,13.9,160.9c7.6,28.8,30.1,51.4,58.7,59.1 c51.8,14,259.4,14,259.4,14s207.7,0,259.4-14c28.6-7.7,51.1-30.3,58.7-59.1C832,608.8,832,500,832,500S832,391.2,818.2,339.1z M432.1,598.7V401.3L605.6,500L432.1,598.7z"/></g></svg>

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2694)
Category:	downloaded
Size (bytes):	2737
Entropy (8bit):	5.082694626568168
Encrypted:	false
SSDEEP:	48:gJZOtYZL0UfXWndj6Ng8fdW9MIeIa311PdSCA4DpEphlLMUUKYsvFjGhWK4FIJSe:gJoGZL/un16e8lW6dTPk0VEphlLNUTs8
MD5:	2C0D624724DF907441349155672A4FF9
SHA1:	E4FD5FAEEC30991AC5CFAE25B60B4B22D5647200
SHA-256:	FAEB024C5ABC65C38BE719C427FF75DBC44C6B8E5B62A58F986DB8A3F7B2FE13
SHA-512:	845F65D41BCFC1421576D03CEADDF25E732C854D15CD024EA34923740ABBF47502972B6B7401CA66C3D31F912738964CE80EF3918C7FDE480E44DF78619F89E6
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/assets/dist/js/modules/styles-2023-12.js
Preview:	!function(){const{WIL:e}=window,t=()=>Array.from(document.querySelectorAll("svg.icon")),o=e=>{const t=e.split("/");return"/assets/dist/svg/"+t[t.length-2]+"/"+t[t.length-1]},s=e=>{for(let t of e)if(!t.style.width)return!0;return!1},n=(e,t)=>{for(let o of e)o.style.width=t};let r=!1;const i=async()=>{if(r)return;r=!0;const o=t();for(n(o,"");s(o);){for(let e of o)if(!e.style.width)if(e.style.width="1px",e.getBBox().width){const t=e.getBoundingClientRect().height*e.getBBox().width/e.getBBox().height+2;e.style.width=`${t}px`}else e.style.width="";await e.sleepPromise(300)}r=!1};window.resizeSVGIcons=i;const l=async()=>{if(!document.querySelector("svg.icon"))return;const o=t();n(o,"1px");const s=o.reduce(((e,t)=>t.getBoundingClientRect().height?Math.max(e,t.getBBox().width):e),0);n(o,""),s?(i(),window.addEventListener("resize",e.debounce(i,15))):window.setTimeout(l,100)},c=async(e,t,o)=>{if(0==e.getBoundingClientRect().top-t.getBoundingClientRect().top){e.classList.add("shadow-bottom"),e.cl

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	10152
Entropy (8bit):	5.350550221909678
Encrypted:	false
SSDEEP:	192:Wm2KPYICKMyWH08DRXzBIHi3uxLi/DFtwfJpYtOJYw/c3ODM4xRw+QOQEip54f14:Wm2nOVc7K1aaWOIfQB0
MD5:	692B31F88FF93C52AF07298994F1FA52
SHA1:	55BF1A25255E92ED29C7A8B5C5B3A17DEFC991C3
SHA-256:	E3260DB446188242293E04A658411E44C6175108BC5D8B7E7676E8786D4F0501
SHA-512:	4DDBF8B39FAAAAF25D91C441E5F238C6CE632E491642B4029D252BBC8C96CCE367368D8EB909AF055E1985AA7DF4755F6A87616099BD011A77EF242CB5B246A6
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otFloatingRoundedCorner",. "html": "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

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	680
Entropy (8bit):	5.212188142347695
Encrypted:	false
SSDEEP:	12:TM37N+4q/KYmHn5EBcztVanbvEAVVV/HiFbMT5SYEbj:o+4qLmuczsNVVRilMT5Sdj
MD5:	DC71821FB60D5CAF45F1A84C23CFEF46
SHA1:	D659C80F45BFE85E8EF83B2BDD389730000FC59E
SHA-256:	DA3BCB30FD003134E3B6F4EE6ACC8DAE53F462FEC4B3D3896BD7FFB3DD3A6B5B
SHA-512:	88DE93E70D467B99E16EDE6131416A582C8424C0859A1075D8906F38E43FE9DC51E139050C53044FB4DFB8CD1E07C2CD40B75FB8A30DA39DEECDFB925F2001E7
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" ?><svg id="Layer_1" style="enable-background:new 0 0 1000 1000;" version="1.1" viewBox="0 0 1000 1000" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><style type="text/css">...st0{fill:#3B579D;}...st1{fill:#FFFFFF;}.</style><title/><g><path class="st0" d="M500,1000L500,1000C223.9,1000,0,776.1,0,500v0C0,223.9,223.9,0,500,0h0c276.1,0,500,223.9,500,500v0 C1000,776.1,776.1,1000,500,1000z"/><path class="st1" d="M630,1000V612.7h130l19.5-150.9H630v-96.4c0-43.7,12.1-73.5,74.8-73.5l79.9,0V157 c-13.8-1.8-61.3-5.9-116.5-5.9c-115.2,0-194.1,70.3-194.1,199.5v111.3H343.8v150.9h130.3V1000H630z" id="f"/></g></svg>

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	704
Entropy (8bit):	4.467224780702796
Encrypted:	false
SSDEEP:	12:t4G3FoMQeCPNrkSUA9O5XILQhRva4zC2uUbLCqTtlDLXvdXy9roLu4z2oQXpo3C:t4G1oMQeCPt4A9eXIkh1xduUvCqBljvc
MD5:	D409F4BCB69C131F7BCC29918705B037
SHA1:	D02EB464378B7D10FE8ECC2EE0C6BF0C5A43FC7C
SHA-256:	019E3B4FDA66C889C18A7C12EE38D11E22B6AEDC5B6E106999308D47F770CE09
SHA-512:	0F0BFE8B241A2C8DC5DF6436C58D68EB14ED434D4D31B666DA7172D7D4965707EF762D687FDB0D2443D94B41F5127E4A81C8A45AF9F93A279240280DD5F19154
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <symbol id="solid" viewBox="0 0 162.95 162.95">. <path fill-rule="evenodd" d="M81.48 0A81.48 81.48 0 1 0 163 81.48 81.48 81.48 0 0 0 81.48 0zm0 14a67.55 67.55 0 0 1 19.81 3L81.48 61.45 61.68 17a67.43 67.43 0 0 1 19.8-3zM14 81.48a67.47 67.47 0 0 1 3.2-20.56L53.74 143A67.48 67.48 0 0 1 14 81.48zm67.47 67.46A67.76 67.76 0 0 1 61.68 146l19.8-44.49L101.29 146a67.55 67.55 0 0 1-19.81 2.94zm10-65.08H71.52l-13.14 29.48-31.71-71.21A67.88 67.88 0 0 1 46.8 23.6l24.72 55.49h19.91l24.74-55.49a67.81 67.81 0 0 1 20.11 18.53l-31.7 71.19zm57.51-2.38A67.48 67.48 0 0 1 109.21 143l36.54-82.07a67.47 67.47 0 0 1 3.19 20.55z"></path>. </symbol>.</svg>.

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (14491)
Category:	downloaded
Size (bytes):	14535
Entropy (8bit):	5.272373716908952
Encrypted:	false
SSDEEP:	384:Hr9jrJnTAF5qsOvSMxd1dxZD7cmARpWHXv:Jxqa31e+/
MD5:	AA6CD705BFF97F0B85BBA29779EEBBEE
SHA1:	6426831E29D24C261F02A4EC7B72329DB7F12234
SHA-256:	B28D621FF6A5D22D8106CCDA75B89C2DB95F58CE75950549DA21E8248D914DAB
SHA-512:	CE529E1592C18AA65B233201991D01D6A2753F1FB52A6C123C764EB9B58B0522E3E3E305EA952209C4CCACD15392A65B70BC186B96AF4752D7EC16EA55414731
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/assets/dist/js/modules/mutiny-2023-06.js
Preview:	!function(){var t={9662:function(t,n,r){var e=r(614),o=r(6330),i=TypeError;t.exports=function(t){if(e(t))return t;throw i(o(t)+" is not a function")}},9670:function(t,n,r){var e=r(111),o=String,i=TypeError;t.exports=function(t){if(e(t))return t;throw i(o(t)+" is not an object")}},1318:function(t,n,r){var e=r(5656),o=r(1400),i=r(6244),u=function(t){return function(n,r,u){var c,f=e(n),a=i(f),s=o(u,a);if(t&&r!=r){for(;a>s;)if((c=f[s++])!=c)return!0}else for(;a>s;s++)if((t\|\|s in f)&&f[s]===r)return t\|\|s\|\|0;return!t&&-1}};t.exports={includes:u(!0),indexOf:u(!1)}},3658:function(t,n,r){"use strict";var e=r(9781),o=r(3157),i=TypeError,u=Object.getOwnPropertyDescriptor,c=e&&!function(){if(void 0!==this)return!0;try{Object.defineProperty([],"length",{writable:!1}).length=1}catch(t){return t instanceof TypeError}}();t.exports=c?function(t,n){if(o(t)&&!u(t,"length").writable)throw i("Cannot set read only .length");return t.length=n}:function(t,n){return t.length=n}},4326:function(t,n,r){var e=r(17

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	7
Entropy (8bit):	1.950212064914747
Encrypted:	false
SSDEEP:	3:Sn:S
MD5:	D97623D172F087D9640DA9ACD38830FF
SHA1:	515BD358BB7D990930F0E2B3DE399DB1787A2567
SHA-256:	FE04A9DC88D3F3BE8D4F6BC63A9A80F45A4C6D8460E7551DAB849457C091920A
SHA-512:	CE6A1969F698A616663F1A19CCFA12A37A4F6D782432D8A08AEB7879EFD3E2BECF168422EA66BC47E74F6BA865EFAAE6EABE3C4FABA280D7A21F3A94D7C55DA1
Malicious:	false
Reputation:	low
URL:	https://c.6sc.co/
Preview:	<p></p>

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9646), with no line terminators
Category:	downloaded
Size (bytes):	9646
Entropy (8bit):	5.249893782966277
Encrypted:	false
SSDEEP:	96:Lg359mFLbkHed6Hh0D5XELvJcKi5j+kI6ZkD8A5E+eVSlsDdzaLcFw6clpgkU7yL:LS6FP1YHh0D5XEWR+oGQRSlcdspTlpyY
MD5:	FF9E4FA6D687CFA9E1BB37C30A53F017
SHA1:	A062E6B29FBA852F35B31DDF6DD812D41435B615
SHA-256:	5E7D497103EDDED53A71CEEBA4BD814FB4CBBFDF9AAAE65D29EBC1874CD4FA0B
SHA-512:	415D67F38601B74F6A98E54F69485CD22C408F2BD655753FA7CCE5B4CA7E6E7A599D5612FF0FDCD92C47853859A28804F8D8D748D3E401FA2D7E2032DA4150AA
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/plugins/dg-carousel/scripts/frontend-bundle.min.js?ver=2.0.26
Preview:	!function(e){var t={};function o(a){if(t[a])return t[a].exports;var n=t[a]={i:a,l:!1,exports:{}};return e[a].call(n.exports,n,n.exports,o),n.l=!0,n.exports}o.m=e,o.c=t,o.d=function(e,t,a){o.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerable:!0,get:a})},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="/",o(o.s=13)}([function(e,t,o){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a={extend:function(e,t){var o,a={};for(o in e)Object.prototype.hasOwnProperty.call(e,o)&&(a[o]=e[o]);for(o in t)Object.prototype.hasOwnProperty.call(t,o)&&(a[o]=t[o]);return a},df_fix_builder_css_issue:function(e,t){var o=t.querySelectorAll(".et-fb-custom-css-output");0!==o.length&&o.forEach(function(e){var t=e.innerHTML.replace(/.et-db/g,"");t=(t=t.replace(/#et-boc/g,"")).replace(/.et-l/g,""),e.innerHTML=t})},process_icon_font_style:function(){var e=

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14108, version 1.0
Category:	downloaded
Size (bytes):	14108
Entropy (8bit):	7.983957146684126
Encrypted:	false
SSDEEP:	384:Q60JHuDrBgumAPnkdmZvA8iL/KJhoihZ7tp:x0JDN02CpiLyjoy5b
MD5:	C40D83B90DD07818453165D90493D2CE
SHA1:	25B4A64C7266507E8C2EAB440DB03DC22DDFF28D
SHA-256:	2C1DD23B9C4A1373A6551FCE57FCC32EF62E99C513AF1D7C23743492E98566E7
SHA-512:	9DA9AB19FD7A550128C843DC5C409F63C6C802003279C073B34BC4348A534880F96E5FD7BB432FB8395D0A2D961CAA22704FDBC22C8C3F7D4CF8B26591B37190
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lilyscriptone/v15/LhW9MV7ZMfIPdMxeBjBvFN8SXLSIi86i.woff2
Preview:	wOF2......7........(..6.............................:.(.`..l.....x..B..B..6.$.... .....z...&g.".8..E.P.%{T......!..k.Ml@.U+"P.7\|9'BUu....\..x...._..<..^.;qGh.\........o.L........L.&6]C!4.......mv.J. ... ...X.t. F.F............t.n..~.O.'....,..........7uK...;....N....H.{;.....j..9..JZ9R.......%%..Y{....s........2.,....%C.@.;N)...... ..c8X....E..........4....,.. ..u.j..G.g8.w..].tQ....<.....J.......@...DA"....!g..s.].U...4,U.n.....kW.."uKJ...co..&...["r....]c.-{..w3...J.....`2....y..{.'....u.>..\;..><...e..o............A........njiAD.....U8b.N...g..4h.....E.(B.D..1...;....=.h.4.C...N.D.0.K..S...P:......Lg....Xa3......nP{....A.N.PW .L4.....IHC.h.$.&.F1..q3=..b......6Th.?.p%R`.C"2.g......N.).-C.......8.@.1....,8g....T9.....mD.xjE $y.Y.f..^;.........zkfO.v..&0.....`2B.I.9cs.........V...Qx..A.M.np..c}....n.6..E.........t.m7\.....s.bg..._\|.\|.....G..5......?.dO..L.`zO...-.}a}.....\.h.=..}....F.XM..h....."...[[U,... ..\..n.#.`5B...^?..&..-'.kI...

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3
Category:	downloaded
Size (bytes):	23793
Entropy (8bit):	7.958465679947796
Encrypted:	false
SSDEEP:	384:xsGp478prD+huiAATf+Sf80HVWfxmt2B92JXMDgeywxYAOZhsdmt5:xBp4UrxiAATWSkvxlkJ+i
MD5:	3CBF95EB609A0881AC5AD362CBEDFDB1
SHA1:	12CD72238422D04B75C4EB89DF1DE7AF6BC72E3D
SHA-256:	32A66E1AAD6F6FA10ECB8E73CA9C45B9B9E262566F69D5D0A175A75D31C56ED1
SHA-512:	2636A7FA017D22BB53DC7CA0FD60D794B7C5CC24BBDB51FA19AD80F46C99765D1665740E0D97566A0AFBE474894CEE99B98A7B3ECC417E4B0A989A75D5B191D7
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2018/06/DHEC-logo.jpg
Preview:	......JFIF.............C....................................................................C............................................................................"................................................................................. ...........k...9."+..W._....7I...................\|.O&....R.<..k....e.I.<}..'Q. .........m.q.....wwF..E.Lr.....K#g..H.G...{...>[M.2..'.]..+..._w......Xwz.wH........JS....Nc...}>^ih?G..=.c..=.c...!...$.W.oM.14..#?...P.m..m.7.Xz6x........q.',8....3.)h...w.....n..'.].l...w..L...`.7.....`..`...<t(..H............G#..d`..+.vn.H..\|.R.^..n..i....}9...:..2..K...7.=~^.........!..=.{.q.0...D\.........k;-}...$.w..{.Y.].:[+.&_..<.n.~....m.l...:...'.K/.^C..=^C..=n.=.{dn..m"..........y..+.....\|..{....DX7..5..?O.[..U.)....a.V.?0.h.h.h.h.h........p..O...........9${.Qn.T.V'.2..C9uV.F.H....'#.......,.6.........'.........<.........[.l.u.o..p.......L.g..^.....U.Mj............k..>..{+Q..2.............O.....i?.......;.3..,\~Iz.z

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	80
Entropy (8bit):	4.33221219626569
Encrypted:	false
SSDEEP:	3:LUfQ2pHWiR8HopHW4OE9HsuXU9WyRHfHyI:x2pHD5YEl5k9zyI
MD5:	1AE6B27EBA211F4CFCD99B904DA88BB7
SHA1:	53CA38F083C4A21F2EDA633EC304CB4582EDEDA2
SHA-256:	961635B4E9661208EC118D285B3AC1DBF9F3CC96CDDC97F30E55CD2C6566448C
SHA-512:	7DD325AB05B1A419614C2C39224C11E1388F09BCA5EA0F56811E6842B4FB243BCB53AA2BDDE00A94FBC324222B47924152C183337EB390F58C59AC80E89593B6
Malicious:	false
Reputation:	low
Preview:	jsonFeed({"country":"US","state":"NY","stateName":"New York","continent":"NA"});

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 502 x 599, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	55987
Entropy (8bit):	7.9869327922802125
Encrypted:	false
SSDEEP:	1536:EkadRCtSbLtNSuT+54oRuimXe9NKb9tAcxIBRZDE:EkadogNkB54Euimu9NKbDAVlA
MD5:	2C4513CEC5D7A910A3C0261B8AE0EDA5
SHA1:	C5466E6DC2A4DD6FE44709D12D361835DB538988
SHA-256:	AE96FFB8E08425B80D7544D6F42B89E19C306483F494AE03751A0F95CE2E1D0F
SHA-512:	F0A15D8065DB9F4766AB1755D93FFBF1315D4AEFD108AD366F4F70574E83E15C7611E394B7108985723017C0AE26A3BA41580376D1F651DD89D7B0BAF9E79D44
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......W.....aCvj...zIDATx...oh.U............E/bD."...s...{.....=...9..0k..):E.....b.i3.b.RIS.ekl.0V..Y."!#"..s....=..{.......9.{8...a.D(45..9J.bW.J..\|..._....\|.w.7.#..H.....F}........<.k.]R..{$!C3...Q....bk.r.:..\....?....0yn.+....W.]....I.D..)...U..w.?.A.. .....u.vWZ..d.!.,<o.'x..........<cJ....1...s.2......ucV....M.?..nW..f.)Ly...:....W#:...d.k.0^.c=..D9...?..K.......\..{N.....Ul/........%.=.I...z6.!w.%...........g...3..Jr.s........p^I...;.......'....dz.4<.^..:..#.T.)......nx.Wa.._I.9J..C.....6..E..2..Y./f4......]9V...$.C...........C.c.....M..}..;F4......u#....KZ\.o....6.q..VQ.Utd.kt....~...=.J#_v....y....H..........N.'v.#;.}.tp.Zjys9m.y..cEF.+..A....K...EW..7V..};^...5.}.....p..........K.T....6{...T.I.F.......Z.Ijk.......1...d.=...t.u.....y.N.....g..x..LEI..K....+...-#:.....3m..T..`SRs....>T.....{../...N..L........<z&....R..d...K..t..:.....}........a.. }\......e%.&k.......N.....(H.H>5....O.1.s..@...B..y..O=..

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:Hd1Y:w
MD5:	FA9C17CE126A76733ACA269345EB7D47
SHA1:	F1D8AA71F281509D55041F671B1A7BD94524AAD8
SHA-256:	15F88A501BBE49A103551BA087FE6FC7E101894E71C3A74A42E8EFC07DCEC0D8
SHA-512:	DD2E08D8D294E24330DDACFCC602D5AB9C9BD65346E0C6540F599725AB711E1F1621D3939318BFC069E67CEF889B80E781DA3E935D61C26E2086DAC79428818C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlj5xYPDZ8l2xIFDRM0Cs4=?alt=proto
Preview:	CgkKBw0TNArOGgA=

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://sgtm.qualtrics.com/_set_cookie?val=DSuotAdEohMxkLvbRoOPAT3OeEcGOgus%2BIfn78E2cfQod0ga7AAWMdd76ePmx5R0EOlHQyJZNVVdZeMuAJqho5oJJxL3CDjcpN4sXT0l7x6D2G4LyLLdvArLoZ0F2oZNrKe84KhZ4gimBz%2BEPUUZpvAljg%3D%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4162
Entropy (8bit):	7.927612543040604
Encrypted:	false
SSDEEP:	96:4cqQfVWZdqVR/+XpoInQ2RZyrPnllAplPZSjbuBNgVFb9LCviRQ:4MfEzRtQ2G7nzQhZSjbuBCf5Uv
MD5:	CCF49E53580A1B26257AFAF10CF81DB6
SHA1:	2F791F0547AC1DF6606EB208DF3FB9CC3C961EE6
SHA-256:	18601D2BC3BE963FD481A5E6F1AAABA42650C45BDBF0A562E60B20321F94405D
SHA-512:	C985B0F996BCDB796A03BC2D03B7A116C0F5CFC0B298375E1E4F0A518EF3B1843D10F36CACF9073C1A9975E6DE53DE53F10F2BA73491060643300E3B095D2F41
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2024/01/NLI_logo_favicon-light-150x150.png
Preview:	.PNG........IHDR....................pHYs..........+......PLTE...??@..........tjna::<..........[^W.....kocAAB;;=...........................@@B==?EEG....<<>eh_...............................................pvf.................................x...................z.oLLN....!.......................vaac..{........................................../..............PQSCDE.....................w\|mHIH...VVX...........H..&...........syj.......JKK..................kXY[...\|.r.>....C..X..L.....<=>..........PRN.....v...BBC......FGH......wxy..{.....g..S....A..P.......zXZUrsspuh........NOM}.t.............ooq..............$.9nrf.....ZTTV.........UWR........]]_...^^`~~.hhj..\.....ad]............joa..............\_Xefh.......r.....s.........~.......................r(u_-...'t......IDATx...iTSW........$d...H.!P.Y..P. ...0.....T.P9.....k.q....[...u:N{.t...Y.t..4.e}..........4...}......U z!..%.%.%.q++.i.i.)({qX.....Y.........;...9{

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=2080, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=3887], baseline, precision 8, 1280x914, components 3
Category:	downloaded
Size (bytes):	469792
Entropy (8bit):	7.978157501407625
Encrypted:	false
SSDEEP:	12288:SscTyEsJ+ITDAKelvQJe06/usMzGfY15fu/mIgj/:9cvsJ+udE0CtM3g0
MD5:	A3484B77A6AC80388CA17ECF5CD1C4BC
SHA1:	582ACE9010589660CA8A2BABD1C27FD1234DF11D
SHA-256:	D36ECC57A73E93984168A7535A9797016AD29BD4FFB9493EF4BC521AB2A22873
SHA-512:	B5CD0E0DD09C07CC535C98111E34A027920E283F0F2DD57B33C3119B1B6FBE63631783F1ED85876813512599B658400661C02C5CC96A448D40C6FB5AC3972C80
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2021/11/Home-Green-Desk-1280x914.jpg
Preview:	......JFIF.....`.`....&.Exif..MM.*.............../........... ...........................................................................(...........1.....!.....2..........i.............$.........`.......`....Adobe Photoshop 23.0 (Macintosh).2021:11:02 14:55:10..............0231...................................................................r...........z.(................................%........H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................r...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...q...DP...Z].........^...5o....].F......t...............

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (36996), with no line terminators
Category:	downloaded
Size (bytes):	37000
Entropy (8bit):	5.229176136243306
Encrypted:	false
SSDEEP:	768:Ru+uqCaWCYnTArVYEj7L8qyWDWKUP0uhKw:zCHCYnf1
MD5:	0F8515955A6446B73E42AAE4AE97AE31
SHA1:	7E0BACE557616AA54BEAD52ED670E96026DD2FC3
SHA-256:	3C7A5808685FA3403ACAF87C5DCDA0BC93AA9C78680CDADE5A4C646F987D5D6F
SHA-512:	B6C493D20B9299F3C573F272E809F7F6C42AEEE1AF2A25D283A4765DD75CC3584465D17BEB0C0F17F8D1E71BBA2DDD45347CFCBF2BC11DBAF51B1D6FA82184D7
Malicious:	false
Reputation:	low
URL:	https://client-registry.mutinycdn.com/mutiny-client/9.5.3.4.js
Preview:	(window.mutinyWpJsonp=window.mutinyWpJsonp\|\|[]).push([[9],{29:function(e,t,n){e.exports=function(){function e(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function t(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function n(){return J((Math.random()*re<<0).toString(ne),te)}function r(){return"c"+(new Date).getTime().toString(ne)+J((ee=ee<re?ee:0,++ee-1).toString(ne),te)+Q()+(n()+n())}function o(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function i(){if(!et(nt(),this[Ze])){var e={status:this.status,request:this[Qe]+" "+this[Ze]};this.status>=400?tt.leaveBreadcrumb("XMLHttpRequest failed",e,Ye):tt.leaveBreadcrumb("XMLHttpRequest succeeded",e,Ye)}}function a(){et(nt(),this[Ze])\|\|tt.leaveBreadcrumb("XMLHttpRequest error",{request:this[Qe]+" "+this[Ze]},Ye)}function s(e){return"[Throws: "+(e?e.message:"?")+"]"}function u(e,t){try{return e[t]}catch(e){return s(e)}}function c(e){v

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	206843
Entropy (8bit):	5.5350774602745005
Encrypted:	false
SSDEEP:	3072:v2fCh9qwrQh2XTD8Hh9deL7rtKLQ8LUkqHtAS3RpGRuVI012O:ufkQggg7oBUkqHtASBe015
MD5:	2DDB86D031EB38671DA6891509CDB363
SHA1:	8F587ABD07A98A3A64FAE7ADD2AC2C4AB1218092
SHA-256:	CCAE83B1C02D664EA41A0FCD5CD8ED817A3B00EE3E33FC2E697BAB6131B95741
SHA-512:	65D44FB315FF83ABF8F6C0F5C914BE34ADBAF300D261573CEDEA26AAB1FD0DBDCE0731F2E28CC0443E6873A03716818ECE6A8506B3CA76274E1C2C77255A8532
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-8130632-1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__c

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 280 x 180, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6193
Entropy (8bit):	7.940298689390359
Encrypted:	false
SSDEEP:	192:5KGJauL23ffdQN+lx6ujIJVJJb+IyrI4v/29DN:0GJauqdQNEpjInXyX29x
MD5:	9AA59FB29FA4C215E688831C45E1158F
SHA1:	496D2062DECC851B9B75A49D2BB0E1D64B5092A4
SHA-256:	3A32CE0AE7BCAE04660123B99A5D424A1792FC06A65F1D08816E43D6B65A1324
SHA-512:	FA7ADA502FFCFA978C2A9D0560074DE04EA06422B44181CB031B6F89DF3D134CD7CE20E340D70D565C5B6876DD66AE5711B7B591D1CE8628B621FBC2E7651276
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............x......PLTE....r?norijmikn.........fgj.......l4.p;...D.`.n7......f(....uvy......S.j................%.R.................d$..z{~...N.m......]_b-.T6.Y_.x[.vp......]..V....`.\|E.hu.....Q.r9.Y.wB......STX.$X%...)IDATx..ks.:.........8..........$....".w.I..1l.V..pjN.Z.GRKj.&..\|..t..#5..DP...6..%..b...a%.P...V}...'Q3.K.Q]T$....\O-5Z...YK.Ys....w=^Z..y......ER.n.i6n..X.......0...f..Q.\|G...Ne.f.!8...X...O.7[rn.].-C..M.Y..n$.[....\|..K.....`...<......d(..o}.EcbAW.(..._...6.......<.&.....9..E........n\.'..h...!.....Y<7......ak=O.......f?..._.M+)..f\|.....].1.E..:.....J...0[..k...]O....^...Po!./....$..c.k.B0F\|....q.........m....kL..4j.jXlv6.>f'...q/[c........<.bnM...Q....5....Q6..$.D....Rg........Ayl9?{X..B.(...2.J`pVr...z#.i.(.....H.X..\|.........+ukf...j`..y.....H....3L.lM.`i..<..A5OE...-......q.0...fEX.....cn.....AK.u9.F!.o~*3<.o.c..".4.a.0.....p...\|.E...&tE..M>_..U7t+N.....<.V\|G0db.F....]/.41t#...n7..V.;..Z.X..Z....e .

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	115521
Entropy (8bit):	5.204533679546994
Encrypted:	false
SSDEEP:	1536:0hRJ6g32I4BuceZn2jESGXRPALd67zqNb4J7mO2zqa6F3:6RogmInaOCO2zqaE
MD5:	EAC830092663999C2BE3F3EFB0DA7689
SHA1:	91C8DC54DED93E33A760383D788A6F52BB6846F6
SHA-256:	6DE536A2362CBE38A4F6E689F19E6727169FF98108D2A2BDAABE2A8A0FB3B358
SHA-512:	1E655E137F891E15683E508F81C41AD4F8AE823A78B037F9670C815B0965939325D323A622525058F2CE8AA00FCF2889F3DEED7313387AA860C73A14B8E71C81
Malicious:	false
Reputation:	low
URL:	https://client-registry.mutinycdn.com/mutiny-client/1.5.3.4.js
Preview:	(window.mutinyWpJsonp=window.mutinyWpJsonp\|\|[]).push([[1],Array(31).concat([function(e,t,i){"use strict";i.d(t,"b",(function(){return u})),i.d(t,"a",(function(){return h}));var n=i(36),r=i(93),s=i(30),o=i(87),a=i.n(o),l=i(10),c=i(42);n.default.setup(Object(r.a)());const d={};function u(e){return e.includes("!important")?e.replace(/!important/g,"")+" !important":e}function h(e){return function(t){return i=>Object(s.h)(c.c,null,n=>{const r=`${Object(l.a)(t)}-${Object(l.a)(n)}-${Object(l.a)(e)}`;d[r]\|\|(d[r]=a()(t,"function"==typeof e?e(n):e));const o=d[r];return Object(s.h)(o,Object.assign({},i))})}}},,function(e,t,i){"use strict";i.d(t,"a",(function(){return T.a}));var n=i(0),r=i(9),s=i(2),o=i(7);class a{constructor(){this.queue=[],this.logger=new s.a("function-queue")}enqueue(e){this.logger.info("Enqueuing function queue item"),this.queue.push(e)}flushAsync(){setTimeout(()=>this.flush(),0)}flush(){const e=[...this.queue];this.queue=[];for(const t of e)this.logger.info("Flushing function

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (580)
Category:	downloaded
Size (bytes):	20084
Entropy (8bit):	5.364549542409346
Encrypted:	false
SSDEEP:	384:LkG788V8QQ0P+fa0vWgY3u/d9oPYAI2vXFBfZxYge1MuReDSBeFhLegoukeoM:gG78z0P+fa8W0/d9oPp7vjZxYge1MuRk
MD5:	217A60C26AC058061008EE939460CC0E
SHA1:	8A84D4CB092FBBA8DF7890A0DBFF82FAB87F127E
SHA-256:	DAB69AF700E302B9D41E9267AEFF95D778FE26E000F4038B7B07CC1E3C87034E
SHA-512:	1151AE3E6EF82D20DF9153C2CF6ADFA5BAD8C68D14A436142FFC503F9579A12727F84565A6EF559340D28187B49B16218EAF77C151629AB3AEAB41F443BC1A33
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-prereq.js?ver=4761
Preview:	(function(){window.WPD="undefined"!==typeof window.WPD?window.WPD:{};if("undefined"!=typeof WPD.dom)return!1;WPD.dom=function(){if("undefined"==typeof WPD.dom.fn\|\|"undefined"==typeof WPD.dom.fn.a)WPD.dom.fn={a:[],is_wpd_dom:!0,length:0,get:function(a){return"undefined"==typeof a?this.a.slice():"undefined"!=typeof this.a[a]?this.a[a]:null},_:function(a){return"<"===a.charAt(0)?WPD.dom._fn.createElementsFromHTML(a):Array.prototype.slice.call(document.querySelectorAll(a))},$:function(a,b){let c=this.copy(this,.!0);c.a="undefined"!=typeof b?null!==b?b.find(a).get():[]:"string"==typeof a?c._(a):null!==a?[a]:[];c.length=c.a.length;return c},extend:function(){for(let a=1;a<arguments.length;a++)for(let b in arguments[a])arguments[a].hasOwnProperty(b)&&(arguments[0][b]=arguments[a][b]);return arguments[0]},copy:function(a,b){let c,d,e;if("object"!=typeof a\|\|null===a)return a;c=new a.constructor;for(d in a)a.hasOwnProperty(d)&&(e=typeof a[d],c[d]=b&&"object"===e&&null!==a[d]?this.copy(a[d]):a[d]

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://sgtm.qualtrics.com/_set_cookie?val=lsc4u4gN474bKUgzTSnwhO%2BvyYCr0%2FhAsVpNYc45%2FO3VOHZ%2BOw7RudvzAWwv0e6j9KRarIh0ePO%2FDaIqkPkgU%2BZejvfQ%2BvRZ5RnVjku4S6LJPZNkqhqaeN8y6pc1ojwGjZr5w1wZOd%2BZEbwpotfSKhuIpW%2FoN79tyZ3XZ3l%2Fg%2Fi5GZUMgKH1gr7q5OmYCJF4VL%2BIjHuunOBP6%2Fc6dF9YXEUkgLvfV%2Bs8oJf20cARgIYUkUCZND7hD3X5krSOh24aNd6iPsfBCzOw3ysKDXCfDuHOXFuY
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 64512, version 3.-26214
Category:	downloaded
Size (bytes):	64512
Entropy (8bit):	7.996617246335325
Encrypted:	true
SSDEEP:	1536:m9VBUz13EzULRIsSxDb1EqguWAvY8mMTYWfKUHI1QTSO3pk7+:mH2z10+e1xH12AvYqTdKUi7OO7+
MD5:	0D3D8B23E678FA28287D44A01E10553B
SHA1:	5A5DAF8519110F538391DABD1DE828493BA60959
SHA-256:	C254279147099E0B696B281D62B436B8AED42FB0F3ABF1BA17ABC398CA6C90E2
SHA-512:	38C15312E0D0EDAA28CCF694739C92264B3FEDD99EF74FAC388174D3B5788C988EB8F415CB888E920B4B0BEA5FE44BB8E1E7D5D727FF73DDE92FFF0E5A89C2AA
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/plugins/divi-booster/core/icons/socicon/fonts/Socicon.woff2?87visu
Preview:	wOF2.............................................`.\.....X....6.$..4..\.. .... [-aQ4...D....k...p..\.#..t........1DZ...~..3..o..la.Fgd,I.....4....\A..B.Rw...........~...hP.^.ZJy..>.......`.8.....:.....?...^.\|IXa%/..3.[HB.....#2.U...e...q...;....vL..c......[~"..Wffk.....Fpw.PD%!4; ..q..W....jQ..b.....~..U..'={.<.N....!.@\|.?..?....)..2..1.9.8O..../..4..o.....1jsc..cc...`c.....mP...)R!..Q.-`$.."....`...M-=...L.."J#Cz1.u..8M.@.W......J.,.........vv._..0...o&...N$~..fE~....".$x...P.ig&.rb.n...'....^....WD._t.i.7-.-.h..2.o.....]..}f..eHe..U.....#0.!...+........w.Z...`.\|.[.z.......lWC........%8...[.d/.".M..~.......d....<(H...y..<.._.?..?......<.O.TY.JY.nVnV.N.t:cku.f....ey.2....A..AO.s8.........${v..S.vH....[-{.'.X...rd.f\%....W..!.. ....k.g..0.....n1i..S.C...@.;3..+....s..`V..K......qR;J..W!...8...x..../T._....$P.Z.......,..dA.!.}\| ..b.......R\,..b.._:.o&.J........R.kB.G_........Di.e...h.....&....=..f&...Vd..r..u.....,+.-...7......`.......7.7(W.l!

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	206869
Entropy (8bit):	5.535134972678265
Encrypted:	false
SSDEEP:	3072:v2fCh9qwrQh2XMb8HL9deL7rtKLQ8LUkqHtAS3RMGRuVI012O:ufkQgjg7oBUkqHtASBP01J
MD5:	A2F7D9C3D4318FBB642A652769A65719
SHA1:	58CC996E3FCF9997B7E091FDCABD45A5802B4440
SHA-256:	5B63BE6000C90D199595C1B5A8A1C9A44B54D8284A629FC3850B7D19F0086D50
SHA-512:	D6DB75731BF307D59982C130166E4229B5BC5D700D024155C0DB8994EDD13515939FDADF18041FC1EA9DDEE6071576F649EFBA49B79271032C8DD730D8B5972A
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-8130632-1&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__c

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65467)
Category:	downloaded
Size (bytes):	274331
Entropy (8bit):	5.230898071215793
Encrypted:	false
SSDEEP:	3072:NJUscFWNJ+hDJ6eJOIZGrwtux3E0pyPN2zrVNcXOoRZNn7OK:PcFWin2ctux3xmN2XcXO0ZN
MD5:	A6C12C80997A7D9442FA53EA547DF2E1
SHA1:	3BA1392D0CECDB97873D29B94A8AD6A564A03655
SHA-256:	FDBC96B3BA67411276777A3F05E0CAE61CBAF58DAA6C9EB620DC0F0D7300C7B2
SHA-512:	D1F82BB8CBE879E58FF7ED4DADA57B3AD427E46DC5565F3ABC9D3F9F2B7E679B0DEC7B5D18E90F57E5B32E4B8489D32D8D739AA3993222098265B798C4358318
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/themes/Divi/js/scripts.min.js?ver=4.25.0
Preview:	/! For license information please see scripts.min.js.LICENSE.txt /.!function(t){var e={};function n(i){if(e[i])return e[i].exports;var a=e[i]={i:i,l:!1,exports:{}};return t[i].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=t,n.c=e,n.d=function(t,e,i){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:i})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var a in t)n.d(i,a,function(e){return t[e]}.bind(null,a));return i},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=95)}([function(t,e,n){"u

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59701)
Category:	downloaded
Size (bytes):	113381
Entropy (8bit):	4.921824878665509
Encrypted:	false
SSDEEP:	1536:MZeJKfZdlk2u5SOV+UQ37410kxJdPfrF3Ps:MZeJMTk2u5SOV+UQ37410kTd3Z3Ps
MD5:	51A8390B47AA0582CF2D9C96C5ADDEE2
SHA1:	B16A640874025D085C38119A1A02A3460F83F2DE
SHA-256:	98CECF88A23542FA047CE46EEDB650B5C5128761ED4386C0977B847094DDFA20
SHA-512:	711162AB43E59E0FF5F050CCA4278682194248A13EF2EE1F00AB276B6221E7A4DDDEB9645E8798E7F67A34F0001C8F63469F2B2C3E6D4E2519ADA30B6775E191
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaption{margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-bl

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57791)
Category:	downloaded
Size (bytes):	58069
Entropy (8bit):	5.2481291760313145
Encrypted:	false
SSDEEP:	768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGw:5NTKktDLmTF8yJL45XtHjoGw
MD5:	7238BFBEB0E8482FA59D0B0F6AF03EB3
SHA1:	5D636D6C207D422736F05F75FC2B2357380C699D
SHA-256:	26A963234879B2C3407C748913B240F3C4498265D26E11588A0440650AC86B34
SHA-512:	92D9050D4ECF0B0DFA996D4E292884115957DEBF67A687C321C253A5D36A4830E86A7C754D27A3864E15C2374A61B97313C688ECDE6021069D51F8BC2880B107
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/assets/dist/js/libraries/bootstrap.js
Preview:	/!. Bootstrap v4.3.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t=t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,function(t,g,u){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(o){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{},e=Object.keys(r);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(r).filter(function(t){return Object.getOwnPropertyDescriptor

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	10152
Entropy (8bit):	5.350550221909678
Encrypted:	false
SSDEEP:	192:Wm2KPYICKMyWH08DRXzBIHi3uxLi/DFtwfJpYtOJYw/c3ODM4xRw+QOQEip54f14:Wm2nOVc7K1aaWOIfQB0
MD5:	692B31F88FF93C52AF07298994F1FA52
SHA1:	55BF1A25255E92ED29C7A8B5C5B3A17DEFC991C3
SHA-256:	E3260DB446188242293E04A658411E44C6175108BC5D8B7E7676E8786D4F0501
SHA-512:	4DDBF8B39FAAAAF25D91C441E5F238C6CE632E491642B4029D252BBC8C96CCE367368D8EB909AF055E1985AA7DF4755F6A87616099BD011A77EF242CB5B246A6
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202401.2.0/assets/otFloatingRoundedCorner.json
Preview:	. {. "name": "otFloatingRoundedCorner",. "html": "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

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87553
Entropy (8bit):	5.262620498676155
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO
MD5:	826EB77E86B02AB7724FE3D0141FF87C
SHA1:	79CD3587D565AFE290076A8D36C31C305A573D18
SHA-256:	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
SHA-512:	FC79FDB76763025DC39FAC045A215FF155EF2F492A0E9640079D6F089FA6218AF2B3AB7C6EAF636827DEE9294E6939A95AB24554E870C976679C25567AD6374C
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (618)
Category:	downloaded
Size (bytes):	39679
Entropy (8bit):	5.17362723825387
Encrypted:	false
SSDEEP:	384:Wsj7z/BEbTRMfn+B/mdXNJvb5KXyY66GCQBP4lK/SxoxcHDu1yd5xMISGzKrEAMV:WS/VddJvb5tvKtyBGMkJL+imKtJL4m
MD5:	69B2F78354CB0E95DD18259F97967632
SHA1:	AEFF09A4E8E38C6CD47A438417F9DFD1027480CD
SHA-256:	C76C0B19F03B2ED4C56420F712E674FB0F98C5B1E2E5770B1B43A5D78CA2E694
SHA-512:	6E678EECE7BB7A8937B52EE8FCC83EEAF60DEB22DE862C2E9A0CAA2ED270DB0EA6C195278F3837324EF0323CF20A941C8F4150A4F93B8B91172C00471CF0E8EF
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-core.js?ver=4761
Preview:	(function(){window.WPD="undefined"!==typeof window.WPD?window.WPD:{};window.WPD.ajaxsearchlite=new function(){this.prevState=null;this.firstIteration=!0;this.helpers={};this.plugin={};this.addons={addons:[],add:function(d){-1==this.addons.indexOf(d)&&(d=this.addons.push(d),this.addons[d-1].init())},remove:function(d){this.addons.filter(function(b){return b.name==d?("undefined"!=typeof b.destroy&&b.destroy(),!1):!0})}}}})();.(function(d){let b=window.WPD.ajaxsearchlite.helpers;d.fn.extend(window.WPD.ajaxsearchlite.plugin,{setFilterStateInput:function(a){let c=this;"undefined"==typeof a&&(a=65);let f=function(){JSON.stringify(c.originalFormData)!=JSON.stringify(b.formData(d("form",c.n("searchsettings"))))?c.n("searchsettings").find("input[name=filters_initial]").val(0):c.n("searchsettings").find("input[name=filters_initial]").val(1)};0==a?f():setTimeout(function(){f()},a)}})})(WPD.dom);.(function(d){let b=window.WPD.ajaxsearchlite.helpers;d.fn.extend(window.WPD.ajaxsearchlite.plugin,{liv

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 945x533, components 3
Category:	dropped
Size (bytes):	136896
Entropy (8bit):	7.988448850956644
Encrypted:	false
SSDEEP:	3072:QFZtkiugNbFl8g02f5CkxJ0wMPDQhAsVTaXcR4:QDtpbB3fwkroPDwXNR4
MD5:	B59B9E427DE6357477FE06D7E051F643
SHA1:	2904FA02188F825D122B47D0AF930DE89CA85FA5
SHA-256:	81E53BDA089B420011D93FADFC391ECF4D7733186D45E315AC8F6C44372D109F
SHA-512:	1DDFF62A561896B7B9721C9AB9906701EAF3346EF69DC35BB4B01362E65876585AC2C01DDEC775E6D4637F289899BB2622872E6C5D29F499BCA7606BEB9E81BD
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C........................................................ "..".......C...............................................................................................................................................................g.f..y..y.:.jM...V...j.....t3...Dc9.Q[....%.R..S..........a...w;S.......o..Z...m...$Jz.....b.MY..m......v..K...].....Q.....n....=.1.P...../{.1..6o.....%..<)L](..B....r..V..$V.Q.s.{Z..,A.Wz=.]?k........D.&E\|.F=.\.\z.Y../4N.:.2_..M-.fj.=V.'G_..J%!.9.wu.i...C].f.+=..,...........s.8...hm........[K8..........o<.L......4..!...`.WZ....#B...cthi...l..j.=.+...6.o.^'.sd~..3.,.~.ZNH.rY!.+..S.2.^.tj.{.!..o....F........7.C.p!..,.}.S.z\|..3.$_7.\|.......A.?.....Cy..i.h...l."......P..Je9..g..S......'.)cp....4..I...C...y.....=,.BwMr..V:......ijED0.....EfH.U.....3.4.u.).t]S.&.,..V..C.O>.+...!...'...9.Q%.DV...u@-X......3.Bzz.YP9.O5.....'..J..V..).%Xt......k....[:?/.p.2....u......KB.#.9....e!...i.zps=.Y.#

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 340 x 200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	68120
Entropy (8bit):	7.992997247021521
Encrypted:	true
SSDEEP:	1536:9chDMXdoWkvCmFsXUDBAmYtnsbDK1eO31kz+mOu:ihDMKJvyELssfK1Dkz+pu
MD5:	092C4A9975C0BE1ADC4395D321B27B43
SHA1:	C871B499F9D98304B4DACA59459368C65D1F4B6A
SHA-256:	74529EC203BC900549A71E95ADF9169F3C1B969960DC10EF9AFD71917513E21F
SHA-512:	4FF6F9B21302FDB2FA9AE86243496FFD028D99B2078D0E7BDB8178B82350D5603DDE77949B93BD482C8454FB00FA2829AAD787E3B4A1C9810B8D4CFD462739C2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...T..........A.9....pHYs..........+.... .IDATx..].`S..>.I.4... C.%...*.".{.........{..8.e.w....g.4.....J.B[...?.Mn...{.{.w$...6u.A..q.:.x..JJI.}{...."..A%%.P.)>>......._PH.....:.B.0..a:z.CA2.c...A..TX.G..#u.y......Ajll<z32..r.J.m+....b..u..r...R#I...x.x..P..;w'.!..+.h..d.."..OqI).{7Z.`..c)!6.:v.B&..:u.IkW,.m.6.../.:v.H.w...:Rk....G...@.F.OWM..J G..D"!-.?X.O;w.!sJ/...$.c.t...J.}>/..u...G..e.K.r:.....V.$.NC.h..=!R....z...V."..On.&..)...Y,f...H...VC....3...$.....g.7.kZJ~...MQ8f-..h..}..z).C:UUa..@a\Cu.v.K..u_Nq.....t...c...j....2h......r.;L.ze......u..eR\.z....=...y.~.......r.M.p8...N;.....S..g....h.m.o1.....4..ud..I.U......K.t.A>..6.8.?.....3.Q..........e.R...>.O..u..F;a:..h$._O.Ruy!.t.U.5.../)....%..P..dZ.y+..:.TJ9m.....\|(..&4R..@.6f.Y..R.)@J.....7..P....$.Fj..I#..R. #........<.V.6....R~.\|.rs.:.Ia.C...{%^M...y..RRE.M..s.f..g.v....kq...% J....$....\|R#...QN.~.h5...Or\|'......C.g3m..*+....?.n.pX"WP..H.....U[s..'Xo..y...z

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 225, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	9240
Entropy (8bit):	7.973114690418709
Encrypted:	false
SSDEEP:	192:O5KLSYR8wHcqrdhms4c6BJ4G+3HEjbzluEDxa/nb0:AKLSYawHcumsXoJM3UXwExa/b0
MD5:	41031A31622BBC10D9625CD08DE2D6D1
SHA1:	0F4E71E4C2080B20DFF114CE4DC58BC288A93628
SHA-256:	DAA9F07DDA8EF0289C14876C85DC557444B2E55E2F2ED091F21259B08B149D10
SHA-512:	D7DD8F1C66E8E009E590D9B18C600713D1D3F34A1ADCF72C04D599120E22AE74FD54A4E4CE70CAC97E09B53ACABAAC0B9A1AD7CBE7FFCD8861CB67BCBF88BFB2
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2018/02/social-inovation-fund.png
Preview:	.PNG........IHDR..............m"H....PLTE.......>6.[....555.........DDD................................=5...WWW....:1.......aZ...yyy.......$.**IV.jjj___...zzz...RRR;;;...eee......###.Q.JJJ..........T..L..3).......PI............>L.........f_.).........sl...W..\|....>u.e...d..E.Ax......c....".IDATx.....Hv....B t+$.<B#....U.L.;..7..z....-..S...k....~~.....\|I.?y=.3`...8...=0fX..\........6.@. ..I...bY..#@n...3E..#.........F.-['D<....7..(....BD.1.%.0....@.:J`2.3......5...6...>zD.>o..........+h..@...j$T\j....s..!_:..["#8 ....-.2......k.L...\7..2.>R<..g\|.h....i.RK......B.L..)E..%...T.O...b...<"..O....&J...8..&?f.......V.o...1..[(B.-.d.O...q]c..r$p..\|...G.,..P..."..@1.F..UV..i.^....D......DI....7..~Z.6N.0cn..2&G...4Xm..>I........ulV.\|B.BY.....U.;.s..ML....0`.2....v..G.(.A....#..E...h.n.@.pO...A..w......'.4.r...}8#Zr.dO.+..{b`.....s..y..N%.v..{...q...,9....F.4q.vd ..#E.I..`..^.2.m.(.......R...Ge...&[.....".,.... .....K....l."Q..=..p2..m.0.P2...@.}r...&

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.366634665454505
Encrypted:	false
SSDEEP:	3:CUdlG9h/:Xl2/
MD5:	BFF56CE49DD485D195FDFA0A02342568
SHA1:	74FB4071DEAB7D3AB083562067B735DF32C43397
SHA-256:	0E4B1E428A2198EF747010C094101C257B568A97CDCC0F31ED5E9868CC835B39
SHA-512:	15BC2B5B57144C4F71DC203E16B0F7235EC5E659532D5BAFFD3E91D57CEC61D36CA1B7EA28156AB11A3FA46982FE252A58410D7ADF6693C93EDCCA2B2FA1ABB8
Malicious:	false
Reputation:	low
URL:	https://sp.analytics.yahoo.com/sp.pl?a=10000&d=Thu%2C%2002%20May%202024%2014%3A33%3A26%20GMT&n=-2d&b=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&.yp=10005469&f=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&enc=UTF-8&yv=1.15.1&tagmgr=gtm
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	309
Entropy (8bit):	5.181073172478522
Encrypted:	false
SSDEEP:	6:tI9mc4sl3QcC2dmHqiLUMdkKiEZhkJiRXxPt36wGxb/IzDlBpQkGUDi:t41Qz2Eg4Z+OXxPtXGxbgzBNPDi
MD5:	9224EB2BF7E4792EEB3C886791B9CFF8
SHA1:	E1962CC1838F434C09F739CDD9A009B8F1C19992
SHA-256:	3BF0FBD073C925733C2E861A05F1F3C546D4615FB77141D90314154956CE416F
SHA-512:	81AB4DAD3087F7B2C134EDA42E7A60F158981EE492120FC24E6A0D1C39A0B16118CCFD3F2AFADA1A931353D97E7F688068E65709426DF690C1A3AC511FC462A2
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 69 51.27"><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><g id="Layer_1-2-2" data-name="Layer 1-2"><path d="M2.55,51.27,10.36,28.9H0V0H30.72V26.45L16.54,51.27Zm38.37,0L48.73,28.9H38.28V0H69V26.45L54.64,51.27Z"/></g></g></g></svg>

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	66467
Entropy (8bit):	5.428325720409534
Encrypted:	false
SSDEEP:	768:Ata3qttryOxOVcD+GmeP3EJP9wlltyXP7nZhPiNYv0G5mZxkZfcy3rucJlYRWpt8:AtaxY3C5e/ExFZhaGfcWruSlYR6E7B
MD5:	BDE75CBC27CE29173852C47B13F7A2DF
SHA1:	F1BFCE3D8548C4DA60DBB8A4298E7B568F37A1F9
SHA-256:	E6DB2A03B31B06A75355F53AE5538CC75A8E29B2766D7C24337A809137C26F32
SHA-512:	F74F3D2ABE36D04D75A127FBE128CEA572AA5B17B21E552F55A611512A54E045EC275C3982D6865005FDA977C8D3B1CAF54E7DC79E350F500731D59D6095DF4C
Malicious:	false
Reputation:	low
Preview:	{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"Privacy Preference Center","MainInfoText":"When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.","AboutText":"More information","AboutCookiesText":"Your Priv

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 850 x 441, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	38438
Entropy (8bit):	7.918609492190036
Encrypted:	false
SSDEEP:	768:8rEkkdOd6wOcnqvbQy3Y32bwwzSCM+BICkrA5psMqZUEN7BFkwHi8Okrs:+EvEwDTp3YmbwCMpCkryLg1N/kwHi8u
MD5:	932F6534E4459168B4CD5E9F7034D6B4
SHA1:	EAA4267EC1FC5EEBFDA72D428BD22F9C8E56C16B
SHA-256:	8F5913695496FB4F2CBC6D30A4DCC2A360AFA19BF19325BD62F575FCB97AED0F
SHA-512:	CBA0A384E9265609228ECDA741101A5D000E48234B7AA7541ACBEA3393E4C99762B6F40F884D2F5DA0AC59D1F9D33C413F10B806590D6F7AC6C01825C4B07A04
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2021/01/NLI_Logo_COD_F_WH.png
Preview:	.PNG........IHDR...R..........:.o....pHYs..,K..,K..=.... .IDATx..Mr.J...&.......1.SL.....>.vy.`&..L...(;.1.n.'@m&.p.D...../T.\.~RJI..".K..+...r)%..o..!1....A.>..)).......c.2.....g.R\|.%....V..>%" ...f(.....#.."?%...`.4><...........N..U 5...Lx......u.,.?C.E......A.@..u.....+.K.`.U..:..B.4h..u.A..%.......m.-g.}#..u.[.............c.)>..p.../a..1....A..M..1....o]~O..^}.....A......>]..c.I.u..*..@.]..p"........I.v....+.3.>..o...#T.<.2.XB.c.z>.}....n..6.-..:h.9gE..3.......~.....o.E%" ." ." .6.n...P...!.!......p....6\|.N\/.o..\|...`...o(.....:...7db.......e......a.p.H.... 8...Z..G..6./.1b..@.ma....$Fg]\|..o:&p.s.....e...........X.....'..4.].l......l....zd..0.c.........g...1..N.5.n.....'x....S...........\}..H."R.............)6}..s.S9._].Qk./.q.M....r.u.q.......uB.......['......p+...f....;.c.64O..q..$" ." ." .........D.q.C......./..K.6....W.g}5.a......+C..,..Fs(W}.x_CM....)Ci7....e.D.D@.D@.~.h#....?[.k..@.$8...e....Tw...&qm.o.......H.....VA.<Ebd.P...

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11256), with no line terminators
Category:	downloaded
Size (bytes):	11256
Entropy (8bit):	5.010537766861896
Encrypted:	false
SSDEEP:	192:xthsVmeDXDanvgZenjAJKdXSMpNO96hDIzL79V1QVSD1CNxn6fR31r:czDanvuenjAkNBhDInSwh31r
MD5:	2B0DD7EECEA03B4BDEDB94BA622FDB03
SHA1:	703BECBA85161118DD6FC66AF465428EF43F561C
SHA-256:	B7908A015A567EC2363011DF2475368DBFF34360E9DA3FDFF50604D6395FB646
SHA-512:	FE64CFF950921BDF83EC09FE79CA5CE52DE40F5B8788697EB1D7B28055F2817778347D5D3C81A324801C7EC7151B3EE0EEE99B2882C3C3B10BD760342D3BF3E7
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17
Preview:	.mejs-offscreen{border:0;clip:rect(1px,1px,1px,1px);-webkit-clip-path:inset(50%);clip-path:inset(50%);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px;word-wrap:normal}.mejs-container{background:#000;font-family:Helvetica,Arial,serif;position:relative;text-align:left;text-indent:0;vertical-align:top}.mejs-container,.mejs-container *{box-sizing:border-box}.mejs-container video::-webkit-media-controls,.mejs-container video::-webkit-media-controls-panel,.mejs-container video::-webkit-media-controls-panel-container,.mejs-container video::-webkit-media-controls-start-playback-button{-webkit-appearance:none;display:none!important}.mejs-fill-container,.mejs-fill-container .mejs-container{height:100%;width:100%}.mejs-fill-container{background:transparent;margin:0 auto;overflow:hidden;position:relative}.mejs-container:focus{outline:none}.mejs-iframe-overlay{height:100%;position:absolute;width:100%}.mejs-embed,.mejs-embed body{background:#000;height:100%;margin:0;over

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12105), with no line terminators
Category:	downloaded
Size (bytes):	12105
Entropy (8bit):	4.8886706950070336
Encrypted:	false
SSDEEP:	192:nNu6aIKePQKRYFcOcTcLcL+Lc5kKEKzaJNda7St7ey09tSmPi:KcOcTcLcLEcUNmK6q
MD5:	2D346B1CD70FF657AF6B60418592863B
SHA1:	9733EB48687968881CC8225CC1146CB73F4622B5
SHA-256:	F2A0DAEEABA3CCD2397191DD0C6EAF9EB05D5CF71AC18986CABF46C282CA9618
SHA-512:	B8A2037994540A39B804E9885E5927CA0586DCB9A74B6A825EFCB99E948884A3E49BBA6C23B6DB33AAD3C94D918050F301AB3E3D1B5D889694722147E8E55EC7
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/et-cache/1/1/39/et-core-unified-39.min.css?ver=1714401402
Preview:	body,.et_pb_column_1_2 .et_quote_content blockquote cite,.et_pb_column_1_2 .et_link_content a.et_link_main_url,.et_pb_column_1_3 .et_quote_content blockquote cite,.et_pb_column_3_8 .et_quote_content blockquote cite,.et_pb_column_1_4 .et_quote_content blockquote cite,.et_pb_blog_grid .et_quote_content blockquote cite,.et_pb_column_1_3 .et_link_content a.et_link_main_url,.et_pb_column_3_8 .et_link_content a.et_link_main_url,.et_pb_column_1_4 .et_link_content a.et_link_main_url,.et_pb_blog_grid .et_link_content a.et_link_main_url,body .et_pb_bg_layout_light .et_pb_post p,body .et_pb_bg_layout_dark .et_pb_post p{font-size:18px}.et_pb_slide_content,.et_pb_best_value{font-size:20px}body{line-height:1.4em}#et_search_icon:hover,.mobile_menu_bar:before,.mobile_menu_bar:after,.et_toggle_slide_menu:after,.et-social-icon a:hover,.et_pb_sum,.et_pb_pricing li a,.et_pb_pricing_table_button,.et_overlay:before,.entry-summary p.price ins,.et_pb_member_social_links a:hover,.et_pb_widget li a:hover,.et_pb

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9203), with no line terminators
Category:	downloaded
Size (bytes):	9203
Entropy (8bit):	5.063552641195854
Encrypted:	false
SSDEEP:	192:zRq/Gi3VslF7panlRqXkzpm+pCpaR3sXEucZKRqNbRq4lvO4x+2emzpq:zRq/GkEFNalRqXkMURcXX5RqNbRqq7x+
MD5:	1CFC2F45F6B89C401B92E14FAF2EF01A
SHA1:	E6F789986829FCEF1221683E1812EE7440971A96
SHA-256:	B770B98513581B8A54E633D0021E3BCD3935F08D8E7B8FE6E56401891C7F73F8
SHA-512:	E95E03134A1DC093DEA4974AAA5F8A052185C44A52DE8A19CA4C83764B6EC8368E902F2866089D1A13AF04BF02DB447A467B03847566632244E1CEED87C66CEB
Malicious:	false
Reputation:	low
URL:	https://client-registry.mutinycdn.com/mutiny-client/7.5.3.4.js
Preview:	(window.mutinyWpJsonp=window.mutinyWpJsonp\|\|[]).push([[7],{43:function(e,t,n){"use strict";var r;n.d(t,"a",(function(){return r})),function(e){e.Ready="ready",e.EmailCaptured="emailCapture",e.PhoneCaptured="phoneCapture",e.MeetingBooked="scheduling:meetingBooked"}(r\|\|(r={}))},55:function(e,t,n){"use strict";n.d(t,"c",(function(){return a})),n.d(t,"a",(function(){return s})),n.d(t,"b",(function(){return c}));var r=n(43),o=n(10),i=function(e,t,n,r){return new(n\|\|(n=Promise))((function(o,i){function a(e){try{c(r.next(e))}catch(e){i(e)}}function s(e){try{c(r.throw(e))}catch(e){i(e)}}function c(e){var t;e.done?o(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(a,s)}c((r=r.apply(e,t\|\|[])).next())}))};const a=e=>!!(null==e?void 0:e.on);const s=()=>i(void 0,void 0,void 0,(function*(){if(a(window.drift))return window.drift;const e=yield Object(o.b)(window,"drift");return yield Object(o.b)(e,"on"),function(e){if(!a(e))throw new Error("Expected the Drift client to be initiali

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/assets/dist/js/libraries/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=2080, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=3887], baseline, precision 8, 1280x914, components 3
Category:	dropped
Size (bytes):	438408
Entropy (8bit):	7.9763328393433826
Encrypted:	false
SSDEEP:	6144:2UKj279Ji5nEqvC96/LDdVPZGc0/KgOxLHr8/Q1SFoftZPMuAFUJykj6Ugs:sj8JHqK+p1n0S9JLzMuYU36c
MD5:	072C84FBDE6C83ECCA40D0FA6EA6A449
SHA1:	B4CF7417FAA6E480B9FA57FBEBE5EAC24EA364E3
SHA-256:	561152F3ECC4AF3612489186075B5E0D0FD13B9774CF449098F9A93FA399CC62
SHA-512:	30DC3A6E9F66C1BD81BCB8E29C66978EE44960F0C4E7B0A0E185AC87180378B9BE157ED05B78753CF067FA03C09A31C569F6F75F22F975B2197095D5F94731B1
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`....!IExif..MM.*.............../........... ...........................................................................(...........1.....!.....2..........i.............$.........`.......`....Adobe Photoshop 23.0 (Macintosh).2021:11:02 14:56:48..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................r...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.n..m..eu..i.5.=f..m..a63m{}........D.Y]../I...s1....5.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 42472, version 2.0
Category:	downloaded
Size (bytes):	42472
Entropy (8bit):	7.995200216759096
Encrypted:	true
SSDEEP:	768:jrnQ6SNfGtLYSZCwZ/nFLEh9YD+Pd7yd9Y/tGb57LQdxx3xan:HnQsLYmf15yPd7o6/4bFLQzx38n
MD5:	398925543F08803638FF9D20405B7B48
SHA1:	FC8CF390298128EF9FE2D22AC33271F18D03D1EE
SHA-256:	A8C80ACE8DCD6618580B93BA03BEB5942D8EE15F1AAB1143DA225B869AD4159D
SHA-512:	E9DECE64B6A1D5CB9E59EF365EA0210C991F735674FA0A18864AB73D279E8F7E4C47F02BC2635AE25E1ED4FF2BAB73F14D7ACBB90FA75C15A9D2F6066D7D5C1D
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/assets/fonts/bento-sans/regular-0623/Benton-Sans-Book/Benton-Sans-Book.woff2
Preview:	wOF2..............K................................6..x.`..`..>. ..s.....T..o.6.$.. ..... ..}. ...[.#...I..p.....f..^...Y.Ao......Bv.".;....{.......d".]R.I........A..9DADD.v(...bd.n....}v...X..d....Y.,.y.n\..6......0.K?.....~.t._Ae.l.$]L.o...75.g.M....ff.n.yg..j.....\|g<o.h.f..o.E.C..L6G .{.F..I%......Pt.:..D.......,.B)3....Mz...S^.(../u.M.#\|H..>b..l.vi^.....+.j....S!.U..d5.'......~O...........G.......X....W..G..j..N...(.ZM......G..k=.. ~.~v.d..<B ..=JRwJUO=...Z....@.:wX..X~E..~.....]..1....Tu..c..Q.Kx.....s.}A...$j.lV....Q.B.(.")....-.."....;.;7.scm.8.1Vfi..(...R_.s.....+......:....Z.Ekz..9\|.....de......Z.~.i...4.F# K.d...c..'.....7.7.......@5A.D-.$t..S......n..m....J:..PqR%.K.'.7aF.is.j.)......o..F'z3....&.L.\|j73.....7w. ....4".x@...[..J........,...k.x.{-....Z......w..&K..\|.C..&A. A$..a.e..."..H...1..^Z...RJ.a{.u..Z.t.P....Sz.y.n~?.>s/.....E.....p....lg_....3.........X..l*+.t-..P...&.U..S......w...w..D.Y.z."B`.Y]...R&.D...6.y...!....

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/ot_guard_logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3043
Entropy (8bit):	5.012651991970333
Encrypted:	false
SSDEEP:	48:2ummjKHWZfhZZvZpbfZqZmZLqZeZgZ/WxSltHQPucwc5vBMHMoggaM4x28MQCo4d:ZmB8fHZBpFgskE6/x55SBRG1yRMQGymL
MD5:	E710A0001B1632C6675CB47FA53BB7B9
SHA1:	FA0FBFD49C8954B7E87EC11FDCDE4C7CA3BB1D91
SHA-256:	FCEFEEBBC7267CAEA79C9CCB19F7941363E00F8B611F179263A4FE3A729C9BD4
SHA-512:	43CA9B804768DA60B9582CFCA23A46D0D96E1D3B038061E1EFBF0B597B7725C8F2FA88758AFCD05742BE706F8B581F840BFEBC14E7B23410786B73D21A77D81F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" ?><svg id="Layer_1" style="enable-background:new 0 0 1000 1000;" version="1.1" viewBox="0 0 1000 1000" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><style type="text/css">...st0{fill:url(#SVGID_1_);}...st1{fill:#FFFFFF;}.</style><linearGradient gradientUnits="userSpaceOnUse" id="SVGID_1_" x1="146.4465" x2="853.5535" y1="853.5535" y2="146.4465"><stop offset="0" style="stop-color:#FFD521"/><stop offset="5.510481e-02" style="stop-color:#FFD020"/><stop offset="0.1241" style="stop-color:#FEC01E"/><stop offset="0.2004" style="stop-color:#FCA71B"/><stop offset="0.2821" style="stop-color:#FA8316"/><stop offset="0.3681" style="stop-color:#F85510"/><stop offset="0.4563" style="stop-color:#F51E09"/><stop offset="0.5" style="stop-color:#F30005"/><stop offset="0.5035" style="stop-color:#F20007"/><stop offset="0.5966" style="stop-color:#E1003B"/><stop offset="0.6879" style="stop-color:#D30067"/><stop offset="0.7757" style="sto

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19513), with CRLF line terminators
Category:	downloaded
Size (bytes):	19792
Entropy (8bit):	5.148632334180905
Encrypted:	false
SSDEEP:	192:kqxaNf/lSSyJWCh8zfi5o/mXDN3eBxwdJ5R:k8a1/lS0Cifi5o/mXOGJ5R
MD5:	B0765D40A715DB85BF64692166BE2828
SHA1:	05F1610F584E2EA9A576D2CB67344DE5C6F59BFB
SHA-256:	46BBC7B22B8C58DC664CD4B31DA0906636B96C8D64B839B1671D3EFF081F6C1E
SHA-512:	9DF37D7A0982CE70F52790A9FD82FE16F50B8FDDB8390B57B8F32D7EC9D579F11899AA02127D2FA23103D018AAF778AAEEA9B8F1752AF2B4354321E260016DF1
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/plugins/dg-blog-carousel/styles/swiper.min.css?ver=6.5.2
Preview:	/*.. Swiper 4.5.0.. * Most modern mobile touch slider and framework with hardware accelerated transitions.. * http://www.idangero.us/swiper/.. .. Copyright 2014-2019 Vladimir Kharlampidi.. .. Released under the MIT License.. .. Released on: February 22, 2019.. */.. .swiper-container{margin:0 auto;position:relative;overflow:hidden;list-style:none;padding:0;z-index:1}.swiper-container-no-flexbox .swiper-slide{float:left}.swiper-container-vertical>.swiper-wrapper{-webkit-box-orient:vertical;-webkit-box-direction:normal;-webkit-flex-direction:column;-ms-flex-direction:column;flex-direction:column}.swiper-wrapper{position:relative;width:100%;height:100%;z-index:1;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-transition-property:-webkit-transform;transition-property:-webkit-transform;-o-transition-property:transform;transition-property:transform;transition-property:transform,-webkit-transform;-webkit-box-sizing:content-box;box-sizing:content-bo

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9450)
Category:	downloaded
Size (bytes):	24312
Entropy (8bit):	4.829756466938454
Encrypted:	false
SSDEEP:	192:tBWaIl2bdQCwsWz58WDJ+6sevQ5NxAj0tRNR34BVp3wb+LcXTbgXR9wHWm58pIo8:NiRhbJwaja28YIHSL4kV29T
MD5:	9E4BF8C8D2AE672A3862E22EA99B20C5
SHA1:	B054A3819E5CA30275C37BA0724570FA93EAD4AE
SHA-256:	37639EDE40EED8FB4DBD6EDFBED4402C98F1F9F0961CF4100A13666D21145CD9
SHA-512:	2692CFDEFD5DE14336B17A6E3CC26209ED2621BC6C1D4769C859CCE0DF2B851CFF58B40D184FD15B2DD187B123C7D06C4BD431DA158D2279D46E544BB14171A6
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/et-cache/1/1/39/et-divi-dynamic-39-late.css?ver=1714400823
Preview:	@font-face{font-family:ETmodules;font-display:block;src:url(//naturalearning.org/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.eot);src:url(//naturalearning.org/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.eot?#iefix) format("embedded-opentype"),url(//naturalearning.org/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.woff) format("woff"),url(//naturalearning.org/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.ttf) format("truetype"),url(//naturalearning.org/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.svg#ETmodules) format("svg");font-weight:400;font-style:normal}..et_pb_filterable_portfolio .et_pb_portfolio_filters li a.active,.et_pb_filterable_portfolio .et_pb_portofolio_pagination ul li a.active{color:#2ea3f2}.et_pb_filterable_portfolio_grid .et_pb_portfolio_item{display:none}.et_pb_text_align_left.et_pb_filterable_portfolio .et_pb_portofolio_pagination ul{text-align:left}.et_pb_text_align_center.et_pb_filterable_po

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21778), with no line terminators
Category:	downloaded
Size (bytes):	21778
Entropy (8bit):	4.769188103585108
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFjlCS7FGAVsq1nwGfg4xqsQMPNE:JmJ
MD5:	73BC4067D312180A1B19A4D883F42D6A
SHA1:	AD328A9A572FBEA43F295E7769835FF08F6FF1FD
SHA-256:	D3F7B0EC4DE079928A999641E781E80F33597A392A561BC460276DFB4EFB6EEC
SHA-512:	20B89462521684C258A8CE15E94DA67182C66397B0DE528357E01294FF06883C1AD96037A9D739E4575DB8722B1A1967578709A0C844CD45A49E6A51E1B6479D
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202401.2.0/assets/otCommonStyles.css
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18440, version 1.0
Category:	downloaded
Size (bytes):	18440
Entropy (8bit):	7.987522910963964
Encrypted:	false
SSDEEP:	384:fZVctL4X2HyN+ECqQE9ktmriEMQsQ951NLOq+qEQMya:fZizU+EQE0J5QH9VOq+qEN
MD5:	A3D72A9F30CD43EB4E11B40CE946DC5B
SHA1:	74136C1731FE5CCC53D199A35BF44B5FAE6CB800
SHA-256:	6DBF84634C0F42960808B813F7DAC25EBF6623CCCF65C329AE305652FC98A82F
SHA-512:	0D93A241A4955CAD0FF7BD6390014F50DFB811C18DEC2E166E5A9D9938D4939903E2FB4B77560367A13FC1B26501D8D059CFBAF9B1706A748E178562EB417891
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/af/c35fc9/00000000000000007735b0de/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
Preview:	wOF2......H...........G.........................?DYNA.k?GDYN.!..(..T.`....&..s.....P..g..D..6.$.... ........h........Z<D..."R.~....%!.T5..._~.....?.......u.......I.......n.l...j.V....K....3;.>..#%..\..YX.g..k.b..<N..I.cE..~V...H...q....rb..~......9...0...Z...=...+.i.--re....T.l...b..EyH. J.%..".1.H.a..}..^.....^D.....?...A.?.../-...+"_....Pr.u..S..<....a."B_..C..Kr$@?IJE..<..s.N..k.B...~.\|.....I._.$!..I.`c.......V[...&.....R.jzf.(s..@....d...R...`....x..L\|W...{U...k.SF.8....p.S..c..5.o....\|[.......z...Rx@I"......K=...4,...u.jK.nY...K.Q......{.2...m.......B.....,@.kiI.5;7.Rd.".9.7..7.[.n}.K.[.wJNIw....%.F{iSq;..P..e.#......s.2.~>l....@"........w...c....jKv..O'c. MS..1..{...c...@G...E....ip..,...-...z?....N.../...oN..[t..._....f...hY.o.s.?.>l................]]..0......?;}.._..].vL.r.s.....b.V+..F....ShoK..........5]T.*.iV.....2..P....%)....X.1?.. ..L.H.(F%h..ou....j...U..U...rX....1N-..AH.%H6..J....!CG;.t.6.D.....D.)..(..-."..:1!....7...@.3#......

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	23665
Entropy (8bit):	3.761486639235881
Encrypted:	false
SSDEEP:	384:X9iqMkiEUB66xazql0H3QKJw4djlGlXrTE8b1k79a0WPQ8LEan+TELm:X9iqEQJ9jluPrM9U1S
MD5:	A5C3AD85BC4208B369D5C4FFCE8E6543
SHA1:	18D53F723C924AFB7A1D91F775D7D22697016E3A
SHA-256:	9C407E00CE3D31BA35E7E2B3514A79AAFECC82025A965D8324CE26CEAC3EEA1A
SHA-512:	6CEFE0E1652E5DE14F1B124A80D412CB568677C7C39B206FC1CE0FDFBFFAA5076B6313ED1573EC1311BA2BAB1EF66B1CE6F52C7B421599435AEF6E4D2D88B410
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns="http://www.w3.org/2000/svg" xml:space="preserve" height="198.39" viewBox="0 0 182 198.39479" width="182" version="1.1" xmlns:cc="http://creativecommons.org/ns#" xmlns:dc="http://purl.org/dc/elements/1.1/"><g transform="matrix(1.25 0 0 -1.25 153.57 205.66)"><g><path d="m20.282 130.28 1.7297 2.0327-1.5867 2.1485-20.198 27.321-1.4879 2.0123-2.3528-0.8444c-15.039-5.3763-29.343-7.8141-46.384-7.8992-17.021 0.0851-31.328 2.523-46.367 7.8992l-2.3528 0.8444-1.4879-2.0123-20.194-27.321-1.5901-2.1485 1.7297-2.0327c14.28-16.806 8.4645-37.171 3.3334-55.138-2.4617-8.6245-4.7872-16.765-4.7872-23.967 0-20.681 12.884-27.29 32.23-30.848 2.4958-0.45966 5.2537-0.77971 8.1716-1.1202 10.102-1.1713 21.556-2.5026 28.914-10.055l2.4106-2.4753 2.4106 2.4753c7.3545 7.552 18.808 8.8833 28.914 10.055 2.918 0.34048 5.6725 0.66054 8.1682 1.1202 19.346 3.5581 32.234 10.167 32.234 30.848 0 7.2013-2

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=2080, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=3887], baseline, precision 8, 1280x914, components 3
Category:	downloaded
Size (bytes):	438408
Entropy (8bit):	7.9763328393433826
Encrypted:	false
SSDEEP:	6144:2UKj279Ji5nEqvC96/LDdVPZGc0/KgOxLHr8/Q1SFoftZPMuAFUJykj6Ugs:sj8JHqK+p1n0S9JLzMuYU36c
MD5:	072C84FBDE6C83ECCA40D0FA6EA6A449
SHA1:	B4CF7417FAA6E480B9FA57FBEBE5EAC24EA364E3
SHA-256:	561152F3ECC4AF3612489186075B5E0D0FD13B9774CF449098F9A93FA399CC62
SHA-512:	30DC3A6E9F66C1BD81BCB8E29C66978EE44960F0C4E7B0A0E185AC87180378B9BE157ED05B78753CF067FA03C09A31C569F6F75F22F975B2197095D5F94731B1
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2021/11/Home-Prog-Proj-1280x914.jpg
Preview:	......JFIF.....`.`....!IExif..MM.*.............../........... ...........................................................................(...........1.....!.....2..........i.............$.........`.......`....Adobe Photoshop 23.0 (Macintosh).2021:11:02 14:56:48..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................r...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.n..m..eu..i.5.=f..m..a63m{}........D.Y]../I...s1....5.

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (26344)
Category:	downloaded
Size (bytes):	484250
Entropy (8bit):	5.079075802740781
Encrypted:	false
SSDEEP:	12288:EDS27IBJXSQ3fucSH54skc2XVeIUjnEgIPXEf5XSQ3fucSH54skc2XVeIUjnEgIM:EDS27IBJXSQ3fucSH54skc2XVeIUjnE1
MD5:	3441B96381A3DD8E82EFFE7F8420D46E
SHA1:	A37240B41B6E81B50D414B6A003D03D112FA0FA3
SHA-256:	73EC9C32EFC30104C31212F3AD5FF40EE56BBF3E01F8D392832ACB547477C971
SHA-512:	A8BB0DBFCAAC54FA6840DBCF42F2673392CA89CB24C59E08C790561D9C751639737B8B84DD5B7701D6AFA0C865A711F0416A8A4325743BD3108354FD807F6D61
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/
Preview:	<!DOCTYPE html>.<html lang="en-US">.<head>..<meta charset="UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=edge">..<link rel="pingback" href="https://naturalearning.org/xmlrpc.php" />...<script type="text/javascript">...document.documentElement.className = 'js';..</script>...<title>NLI \| Natural Learning Initiative</title>.<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin /><style id="et-builder-googlefonts-cached-inline">/* Original: https://fonts.googleapis.com/css?family=Poppins:100,100italic,200,200italic,300,300italic,regular,italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\|PT+Serif:regular,italic,700,700italic\|Lily+Script+One:regular\|Lato:100,100italic,300,300italic,regular,italic,700,700italic,900,900italic&subset=devanagari,latin,latin-ext,cyrillic,cyrillic-ext&display=swap // User Agent: Mozilla/5.0 (Unknown; Linux x86_64) AppleWebKit/538.1 (KHTML, like Gecko) Safari/538.1 Daum/4.1 */@font-face {font-family: 'L

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	340
Entropy (8bit):	4.964516288558571
Encrypted:	false
SSDEEP:	6:tI9mc4slnLSiMLlCHjcsWVWr2T1TccqjeMU3/YiiEZcC:t4siqCHj1WVSETccQ4/FZcC
MD5:	278C4463AF21A75DF16DE7057D45F702
SHA1:	11EFD48F08C9FE6ADD78278895A71DCB1A11F484
SHA-256:	80EB9B1FB0C08558E6F73F13C5712E879A4D0B240B38FDB299A133F8BCBB4AD8
SHA-512:	7B8319F7879364F5D3139ECB92E6D139D111AD8DA8360E500874E696EC36AF6938023A9885AECDC7082C90EAB24567BB7D9F3B740AB94E4F2FA2DD94D29694A9
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/m/assets/wp-content/uploads/svg/display/social-facebook-01.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" >. . <symbol id="solid" viewBox="0 0 864 1664">. <g data-name="Layer 2"><path d="M773 4q64 4 91 8v264H707q-86 0-116 36t-30 108v189h293l-39 296H561v759H255V905H0V609h255V391q0-124 48-212T436 46Q521 1 636 0q72 0 137 4z" data-name="Layer 1"></path></g>. </symbol>.</svg>.

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 808 x 364, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	13595
Entropy (8bit):	7.953921724438772
Encrypted:	false
SSDEEP:	192:KpOwQnvI9bJJSXZ9pS9zRlTzlNyx3KhV6DWi98gs/uM5lo848RQ6cj:K6AbGL09zLzDyloVos/uM3o841l
MD5:	98E0C4B0273CEC0C97D541CFBF82786B
SHA1:	05AB85A44306E123F1E02B351AD2558B8DEFD6E2
SHA-256:	3879EDDE4FE92FF523C72EB34CB9C9BD04D0B98941D97338DD3F86F4B518C888
SHA-512:	B5EB7525EE8D75C16563796D23528BB891EE8207FEB9419BEDDBD2EB5D97FA7E143A63ECE03017E1D1EB5886273B94B04115C81091849B70C1C5E5C447AE5FA9
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/m/assets/uk/wp-content/uploads/2019/08/home-logo-wall-mobile.png
Preview:	.PNG........IHDR...(...l......\|m....QPLTE..................................................................................~.m....tRNS.@.... .Pp0`......0.`...5.....4`IDATx....r.0....I.#.A.......3m%.c3.B.._.`ga.h6.h.........o...$..S..L0g.R.....s..`HU\|oG.0...L..C;.h...q\|..1..M.s.....{.....6...#%...(..IO..^F.KK.8.);.=.@O).$\|f......xZ..N....../,B.$/....P'F.._g...... )A.N....:..(3...y....^'...q..1..u6HbPV........S^....".AY.N.3H....A.4.$=(k.wQyhf......x.......DN....N...^...W....z. .E....&.q....T.'\..7.j...T'!)-+[.S.\"../.v0..E.#{...`^......2.."Q...sH....YU.\...cb..>L."..\|..}.....Q.Y.:%...{.............N....1.L.g @....CC..1.KE.$N....K.3......INt>.$Q.@.h...V.(.cR..Jo+J.,.e.8../\|q'...N.Q.g_.....'W....g.(..../N.;.E)......J7.s.5......Ea...M.$...O ...Kv1...J....Ms.#..t\."....0.[.Q...Q..am.(".....v...[D.FlD..{_"N.r..o._.WQ.......Q.....(Y.n..QL.H.@n%J.m.[e=.w...G.M.......8)J..bO^.9@>>=......b..H..E..EQ..(...,...j.........x.}.. '/..o9.^g.x`5.ky.."..5.

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=3761, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=3970], progressive, precision 8, 2000x1720, components 3
Category:	dropped
Size (bytes):	554826
Entropy (8bit):	7.961756034277161
Encrypted:	false
SSDEEP:	12288:zKFkVJv1sp09N3bg+HW5gPfWL4YngDcMC/5mF:zIMypQ3b6g2JgDcZY
MD5:	84FB78EDE8BA9C355EE39797F257695C
SHA1:	85FB9AC932E006F6FE5ED29E7FBFDE977B9C86F4
SHA-256:	4DA8A3B3665CD14A1DD2D47EF274BB27506C0CAC7E5061E54C0E96E9F5CB7449
SHA-512:	EADEEA2F99E9DD8E2118876C86943A845528D07044704F0BC67817E1D0293C6D226F3D0F67779F7B19E65ABA894C27F52CCCF5B6EF017D02C1C04CBDF2C421AD
Malicious:	false
Reputation:	low
Preview:	......JFIF............RhPhotoshop 3.0.8BIM.......%..Z...%G............WAYFINDING to NLI.8BIM.%........`.%.L.@ .n}..8BIM.:....................printOutput........PstSbool.....Inteenum....Inte....Clrm....printSixteenBitbool.....printerNameTEXT.....n.l.i.-.b.2.3.6.0.d.n...s.o.d...n.c.s.u...e.d.u......printProofSetupObjc.....P.r.o.o.f. .S.e.t.u.p......proofSetup........Bltnenum....builtinProof....proofCMYK.8BIM.;.....-..............printOutputOptions........Cptnbool.....Clbrbool.....RgsMbool.....CrnCbool.....CntCbool.....Lblsbool.....Ngtvbool.....EmlDbool.....Intrbool.....BckgObjc..........RGBC........Rd doub@o..........Grn doub@o..........Bl doub@o..........BrdTUntF#Rlt............Bld UntF#Rlt............RsltUntF#Pxl@R..........vectorDatabool.....PgPsenum....PgPs....PgPC....LeftUntF#Rlt............Top UntF#Rlt............Scl UntF#Prc@Y..........cropWhenPrintingbool.....cropRectBottomlong........cropRectLeftlong........cropRectRightlong........cropRectToplong.....8BIM.........H.......H..

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1808)
Category:	downloaded
Size (bytes):	197969
Entropy (8bit):	5.525975695625787
Encrypted:	false
SSDEEP:	3072:2efCh9qwrQh2XWz8HU9deL7rtV8LUkqHtAS3ReGRuLhJYmIO:PfkQgyg7oUkqHtASBuJYO
MD5:	D6BEFD1DA56814EFAD81D0448A348D20
SHA1:	C8FC2C06B4606818627FFAB03E07F862F5307466
SHA-256:	F92B0C4A5E7D3AF9CCC08883F260ADE4D83A37B7D7073A951632291F545DE7CD
SHA-512:	822A7CB50B36C159BD52E46103043310F28EA6CAC408B7C6EE7EB2AD00A13783CB16CF643B325ED02692765E73B0FD7697AF510AE0D482FB9E8347659B8D3851
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-T6LNLT7
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_useHashAutoLink":false,"vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":false,"vtp_enableEcommerce":false,"vtp_trackingId":"UA-8130632-1","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableGA4Schema":false},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"}],. "tags":[{"function":"__ua","metadata":["map"],"on

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30631)
Category:	downloaded
Size (bytes):	109549
Entropy (8bit):	5.212860000426464
Encrypted:	false
SSDEEP:	1536:g+S/z2VtkfpMEfl1HOYRZ2TTAFNIrokTO:6CVtkfpMEfGHC
MD5:	D4FB11021594EA62654F154DA7381C2B
SHA1:	B3B36A6DF81A84358DB49F818CA831DAF1356C48
SHA-256:	0AFCFB6A40E8BC7DCA35A5A81E3B453CD2CCBCEF83DAA36F145EE9F646376D29
SHA-512:	B9E0E4D32A6272500B098108114A8EDBE6BEFABB3E15B193603731754ED7D89F077762EFF61B9A750202F2454061CEAADB1E492842CE7813547F03D0F2E0664E
Malicious:	false
Reputation:	low
URL:	https://client-registry.mutinycdn.com/personalize/client/d7e93db96a7cb1fa.js
Preview:	...!function(e){function t(t){for(var n,o,i=t[0],c=t[1],u=0,s=[];u<i.length;u++)o=i[u],Object.prototype.hasOwnProperty.call(r,o)&&r[o]&&s.push(r[o][0]),r[o]=0;for(n in c)Object.prototype.hasOwnProperty.call(c,n)&&(e[n]=c[n]);for(a&&a(t);s.length;)s.shift()()}var n={},r={3:0};function o(t){if(n[t])return n[t].exports;var r=n[t]={i:t,l:!1,exports:{}};return e[t].call(r.exports,r,r.exports,o),r.l=!0,r.exports}o.e=function(e){var t=[],n=r[e];if(0!==n)if(n)t.push(n[2]);else{var i=new Promise((function(t,o){n=r[e]=[t,o]}));t.push(n[2]=i);var c,u=document.createElement("script");u.charset="utf-8",u.timeout=120,o.nc&&u.setAttribute("nonce",o.nc),u.src=function(e){return o.p+"mutiny-client/"+e+".5.3.4.js"}(e);var a=new Error;c=function(t){u.onerror=u.onload=null,clearTimeout(s);var n=r[e];if(0!==n){if(n){var o=t&&("load"===t.type?"missing":t.type),i=t&&t.target&&t.target.src;a.message="Loading chunk "+e+" failed.\n("+o+": "+i+")",a.name="ChunkLoadError",a.type=o,a.request=i,n[1](a)}r[e]=void 0}

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21229)
Category:	downloaded
Size (bytes):	21230
Entropy (8bit):	5.307579290440548
Encrypted:	false
SSDEEP:	384:TRFZ2wWtdbD5ABwXwLrekrff8eTr+x5RxMcBn9LuJ4vV/:T8wAD5ABwXw+krfflyxzxJn9D/
MD5:	0CD317A7B9C520801230E944F7D50E41
SHA1:	E3985FF0C2E8B1EAACB617C7C5AF5BEBFCBCEDA6
SHA-256:	6F08699117C1F15F6D35E7B4380D12D18A1881F075E177B5853B1017A3307544
SHA-512:	EA081268CBB1E95BE578EDDFC82E83AFF07F51D1863E58B1275D36C589998FA4434CAA00B70BFE82ED4DE5069125DCD8939BF85DD874FD64BF6BB988B811D0F5
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Preview:	var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPPConsent",m[m.ChunkSize=4e3]="ChunkSize

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3949), with no line terminators
Category:	downloaded
Size (bytes):	3949
Entropy (8bit):	5.166383224042998
Encrypted:	false
SSDEEP:	48:oaMuvkxlkV4h7ht7JbHhBY4BVBOVUH1BZBZBUTHAB8BUB/tUDH6hZUhWh6cAoJjE:ho3Z75o3UQT0EqJhRh3xdpcjExG
MD5:	D17A15045B347ACE9E1D8B5EA8F63C6A
SHA1:	755C4E0919BBB5E07EAD73ED38BD2E68B99C8D34
SHA-256:	BFEBE0F52CED8BC7062D12767D5E3DF778AB0F93E1CF05147E08AAF9E62205F9
SHA-512:	D194066D11686FDC3990C3D596620798CBDB3AE85214744489175ADEC32F7A56C2683E0A5D280B4F9335E7D8B33745F84C2A74C57F807FA0D17BB4BA40B00F3D
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/plugins/dg-blog-carousel/scripts/frontend-bundle.min.js?ver=1.0.12
Preview:	!function(e){var t={};function o(r){if(t[r])return t[r].exports;var n=t[r]={i:r,l:!1,exports:{}};return e[r].call(n.exports,n,n.exports,o),n.l=!0,n.exports}o.m=e,o.c=t,o.d=function(e,t,r){o.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerable:!0,get:r})},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="/",o(o.s=38)}({1:function(e,t,o){"use strict";Object.defineProperty(t,"__esModule",{value:!0});t.default={apply_element_color:function(e,t,o,r,n,a,c){var i=e[t],l=e[t+"__hover"],p=!0===c?"!important":"";""!==i&&o.push([{selector:n,declaration:"".concat(r,": ").concat(i+p,";")}]),l&&""!==l&&o.push([{selector:a,declaration:"".concat(r,": ").concat(l+p,";")}])},adding_margin_padding:function(e,t,o,r,n){var a=e[t],c=e[t+"_tablet"],i=e[t+"_phone"];if(a&&""!==a){var l=a.split("\|");o.push([{selector:r,declaration:"".concat(n,"-top: ").concat(l[0],"!impo

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	223801
Entropy (8bit):	5.193337512148155
Encrypted:	false
SSDEEP:	1536:FkSIOCGOQGKha063D6zg1rNaYS/yxRTuaUnEW6bNMqg1QNk6hNO6AjbgpQDZG5H3:e6CGyuaUnE7bNMqg1QNk6hNO6LQW
MD5:	4603CB3280AC5C28E572050B417FF195
SHA1:	EF98F6C5CE013AF6BA8C1C63D2BD347B854FDE8D
SHA-256:	8EFF42E40FDC753F642ABD5268A826BE6E3E1A0E553F7783294C837C909C0FE4
SHA-512:	8DCAA32ABD00C969E824F324FF4A88673B2BDBECCD426E66AFAFD9A349A27E7C46BD87EC794FD701AAA6EF6C088F30B03619C3634FC89BBB4C6356245F836A4D
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/assets/dist/css/styles.css
Preview:	.card{position:relative;display:flex;flex-direction:column;min-width:0;word-wrap:break-word;background-color:#fff;background-clip:border-box;border:1px solid rgba(0,0,0,.125);border-radius:.6rem}.card>hr{margin-right:0;margin-left:0}.card>.list-group{border-top:inherit;border-bottom:inherit}.card>.list-group:first-child{border-top-width:0;border-top-left-radius:calc(0.6rem - 1px);border-top-right-radius:calc(0.6rem - 1px)}.card>.list-group:last-child{border-bottom-width:0;border-bottom-right-radius:calc(0.6rem - 1px);border-bottom-left-radius:calc(0.6rem - 1px)}.card>.card-header+.list-group,.card>.list-group+.card-footer{border-top:0}.card-body{flex:1 1 auto;min-height:1px;padding:1.25rem}.card-title{margin-bottom:.75rem}.card-subtitle{margin-top:-0.375rem;margin-bottom:0}.card-text:last-child{margin-bottom:0}.card-link:hover{text-decoration:none}.card-link+.card-link{margin-left:1.25rem}.card-header{padding:.75rem 1.25rem;margin-bottom:0;background-color:rgba(0,0,0,.03);border-bottom

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9318
Entropy (8bit):	5.065028408766183
Encrypted:	false
SSDEEP:	192:le+s1ul0lG2Ywr+o53PsoSOBDP4lO0EHIjgn7Bt1En7IeayvKOXjkETqK:leN11l+o53PsoTDP4M5ugnM7sAT
MD5:	00346CED8D8B5C664B826381BDCD7C48
SHA1:	1CB0AB506F3892DB432C81AB6982FE6837004D23
SHA-256:	5AA24E4AB926693E29FFB0D0CA1557141DEFD3CA61B3B4E7CAEBAA2FCD5BF327
SHA-512:	7D286C00C0C334D39DE610DAA7BBDD0FF2A52DAB124833E5D44A16664705D0A6B014D8F3498A122702056139A0224CC095A88AFE327C23042666C267819A49A6
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/easypiechart.js?ver=4.25.0
Preview:	/!. easyPieChart.* Lightweight plugin to render simple, animated and retina optimized pie charts.. @author Robert Fleischmann <rendro87@gmail.com> (http://robert-fleischmann.de).* @version 2.1.5.. Modified to adapt the latest jQuery version (v3 above) included on WordPress 5.6:.* - (2020-12-15) - jQuery isFunction method is deprecated../..(function(root, factory) {. if(typeof exports === 'object') {. module.exports = factory(require('jquery'));. }. else if(typeof define === 'function' && define.amd) {. define(['jquery'], factory);. }. else {. factory(root.jQuery);. }.}(this, function($) {../. Renderer to render the chart on a canvas object. * @param {DOMElement} el DOM element to host the canvas (root of the plugin). * @param {object} options options object of the plugin. */.var CanvasRenderer = function(el, options) {..var cachedBackground;..var canvas = document.createElement('canvas');...el.appendChild(canvas);...if (typeof(

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2365
Entropy (8bit):	4.36460117289377
Encrypted:	false
SSDEEP:	48:1YllN2WXd+A9WXV9AZdid2iI/d3JIk0LMIZX8s+Z92NafFwg:ibN2WXdh6CZdidDCd+k96XR+Zsc/
MD5:	2D690148F0CD6B4831DD1936560950F3
SHA1:	7FA42A4B873BBB836DE1036730EC37659A820D1E
SHA-256:	999A36D8E3B2FBD3CD444FFC17BACE41C54DD37DAE43E63C0224F4AF002FEE89
SHA-512:	20C961857E6396922B6B83CD96E6B7ECBF64B3C726A561A0602CE9BAF78292962F6C17A2B7F258606C8500934852D251A7A9664474346E46E8EB6C0F587F87BD
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <symbol id="solid" viewBox="0 0 2154.08 2048">. <title>Asset 1</title><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path d="M1865.08,1845q-39,0-78-19a221.34,221.34,0,0,0-84,60q-35,40-46,89h416q-8-48-44-88a236.54,236.54,0,0,0-87-61Q1904.09,1845,1865.08,1845Zm-790,0q-38,0-78-19a219.72,219.72,0,0,0-85,60q-35,40-45,89h416q-9-49-45-89a228.13,228.13,0,0,0-86-60Q1113.08,1845,1075.08,1845Zm-791,0q-39,0-78-19a221.34,221.34,0,0,0-84,60q-35,40-46,89h416q-9-48-44-89a205.59,205.59,0,0,0-86-60Q323.08,1845,284.08,1845Zm1474-185q0,46,33,80,33,32,79,32t78-34q32-32,32-78t-32-78q-32-32-78-32t-79,32Q1758.08,1614,1758.08,1660Zm-569,0q0-46-32-78t-78-32q-46,0-79,32t-33,78q0,46,34,80,32,32,78,32t78-34Q1189.09,1706,1189.08,1660Zm-791,0q0-46-32-78t-78-32q-46,0-79,32-32,32-32,78t32,80q32,32,80,32,46,0,78-34Q399.09,1706,398.08,1660Zm1756,351a35.52,35.52,0,0,1-11,26q-11,11-26,11h-499q-15,0-26-11t-11-26q0-69,40-133t104-102q-40-

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 1004, version 1.0
Category:	downloaded
Size (bytes):	1004
Entropy (8bit):	6.83404079874172
Encrypted:	false
SSDEEP:	24:0tChrLqdKg+X1t+S9e3YTYeZjlcx/3c1oMZr7MSiZ0LV:0tCRmdD8+SiYMok/3cp0Z0J
MD5:	90CF29AB19DC601F2E5A9F9B3C4898FB
SHA1:	A1A366B0BC23887A1F2645C8F68CB7521706D8E1
SHA-256:	C5550D7F8CC83561C801D3CDC4BB3C1784672CF0413EA79B5B32E890B1558C38
SHA-512:	FE4C726A9176E1D379E48CEBA881FCD7A12CAA38B920604FEE157705F4D7F5FAB7D7F0823D74FA0A3930755A45EA463658FE225B9069FAD99B5566823963A4FE
Malicious:	false
Reputation:	low
URL:	https://ncsu.qualtrics.com/jfe/themes/base-css/basestyles-lfe/version-1678899357872-bbfdc9/files/external-link-icon.woff
Preview:	wOFF...............L........................OS/2.......>...VV.c3cmap...4...<...J...wglyf...p........BQhhead...$...+...6...hhea...P.......$.]..hmtx...h............loca...p.........j..maxp...x... ... ...Tname.......;...m.e$post...........)....x.c`da`........t.....B3.f0b.```b`ef....\S......Y@....0#.........x.c```f.`..F..p....\|... .......,........P.@...@9`$.d0......x.5.A..0.E;`.BP.8e.i..5........Cx...!.......g..3..?s.........w.....C#.BsOD<S.......L]r.#..).S..Z.{@.i....4.@g...5......V...[.....2}.....i.....7E..W.OX:D[.K.0.}Q(.@. .}.._[S#....x.c`d``....'...\|e.fa..[qJ..4..X....D...+...x.c`d``a...0.b32..&..F.m.............j.........H........................x.u.KN.0.........`...b.(}.U7.}.....8r.J=......#..p.~...Rby..7.q...;(.K.=+.2.s.'......W...U4.(\.......p.-8NP.3fwx.Vh.E..s.....+.w...!\CS......p..j......ou.l..7.....:...../l..A..{L.....u..J.l.M.X.9.4......v,>..... .v..yN.1.1D.3...O>d.aM.....".X..>...t..........G.<f..4(&~u'\.&+jK..}PL..}.....]...4co..x.c`b......(..R.....

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3841
Entropy (8bit):	5.07545474758336
Encrypted:	false
SSDEEP:	96:TFF6wf/N+RrrsxZprgENmaoIcAK8+EPtab3:TF8wN+Rrr8AeHo4laz
MD5:	BB871D4DDAE01385568227781287C751
SHA1:	6EF4399601C4BF7A6C9CFE4EB6CEFA83E6C907C1
SHA-256:	0BD669409F8A92A1FFA48C2C7C99BB75A7A7A04230AEF595419F4342AA19D818
SHA-512:	D68D4414483D1FF7B40D0820BE87C6D781F3B3417810DFBA32D880CEE01993B1DCEA55E5FF2F1892B6870649A829463461A4C71B147353910259259DB36D399A
Malicious:	false
Reputation:	low
URL:	https://cdn.sender.net/accounts_resources/base/f6d965115c2786.json
Preview:	{"forms":[{"id":"dRN8Kd","rtl":false,"delay":true,"title":"<p>Subscribe to the NLI Newsletter<\/p>","layout":"EmbeddedLayout2","scroll":false,"ctaText":null,"hash_id":"dRN8Kd","exitText":"Close","subtitle":"<p >Subscribe for the latest news!<\/p>","show_gdpr":false,"bottomText":"<p style=\"text-align: center;\">We value your privacy and will never send irrelevant information<\/p>","buttonText":"Submit","embed_hash":"lohi3xbadrn8kd15coa","showLabels":true,"show_title":true,"visit_path":"https:\/\/stats.sender.net\/forms\/60472\/visit","losingTitle":null,"referrer_id":"id-dGOYKd","shadowInset":false,"submit_path":"https:\/\/stats.sender.net\/forms\/60472\/subscribe","delay_amount":5,"is_free_plan":false,"redirect_url":null,"schedule_end":null,"successTitle":"<p>Success!<\/p>","branding_type":"inner","ctaButtonText":"CONTINUE SHOPPING","double_opt_in":false,"form_selector":".sender-form-box","resource_path":"https:\/\/cdn.sender.net\/accounts_resources\/forms\/54619\/60472\/31a9e384b89de1

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1077
Entropy (8bit):	4.455319165064695
Encrypted:	false
SSDEEP:	24:t4/bt4kLL6g+xyPldLdfHsO2SytsaSv5KBR/UAqQaSsXHRG/Mr:gt4kLbldpfHsFnBRcAtaFG0
MD5:	F8FCE552C14452D77068D85EC45CDB35
SHA1:	26C1D6CCCF5ACD7FD577B1A9C1DC362818F8C240
SHA-256:	07C384A653A16DED162D227A91857D78741A4E8C2A38C764A51173C3145030FA
SHA-512:	3C13B218072D53DFE5C21B43F97D50E08C69AE2168CDD20B82B400F41A9887311DF182E44F25CB64F6AE86FFB37742ABE583C82D0435BBEDC787493DA5204A11
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" aria-labeledby="x.svg-id">. <title id="x.svg-id">X Logo</title>. <symbol id="solid" viewBox="0 0 488.000000 459.000000">. <g transform="translate(0.000000,459.000000) scale(0.100000,-0.100000)" stroke="none">.<path d="M14 4579 c-2 -3 160 -224 359 -490 199 -266 622 -832 940 -1257 l578.-773 -37 -42 c-21 -23 -446 -482 -944 -1020 -498 -539 -907 -983 -908 -988 -2.-5 85 -9 210 -8 l213 1 70 77 c39 42 401 433 805 870 404 437 746 807 760 823.l25 29 200 -268 c110 -147 413 -553 673 -901 l474 -632 725 0 c603 0 724 2.720 13 -3 8 -187 256 -409 553 -222 296 -476 636 -564 754 -89 118 -350 469.-582 778 -232 310 -422 568 -422 572 0 7 1226 1338 1643 1783 l119 127 -219 0.-218 -1 -255 -276 c-140 -152 -483 -524 -763 -825 l-507 -548 -615 822 -616.823 -725 5 c-399 3 -728 2 -730 -1z m1718 -886 c237 -318 603 -807 813 -1088.210 -280 676 -904 1036 -1385 360 -482 658 -881 663 -888 6 -9 -65 -12 -324.-12 l-331 0 -656 878 c-1514 2023 -2278 3045 -2287 30

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 2048x542, components 3
Category:	downloaded
Size (bytes):	91184
Entropy (8bit):	7.698281659886198
Encrypted:	false
SSDEEP:	1536:vicNaIYX75FcIrmwRw2G1EjnNdkJ6Ea5B+mDLnF5S8mL+:2IYX75qMw2G1ynXkE9B+m3FQ+
MD5:	478F6A660EAD59C2C101C2172D7D5D5D
SHA1:	43EFE53E86789EF45DED9D88AE30BB3892655D10
SHA-256:	B6A7BC65116C91099CF6496A3504C4D30A1B62318394530B26EACB1C38BFD338
SHA-512:	8763561819F271D8517A43B80A03FF4EC18EF09CDF81C74448755C6EC2FCF5124F647428C3A5830D8DE46AFC11BA05B72D6CF695A045CC0F4B647ACFEED9D1BC
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2018/02/PlayCoreNewTag_FINAL.jpg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...QE..QE..QE..QE..QE..QE..QE......q.d.o.....f.....W..#F..._...... .$...B..z.7..z?.h.d......e...>Z...?..f./..v..\.f#..u?..^c^..>....s..`.?.8.1_...;r...z.D.IK_.}.QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE%.-.Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@.

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://sgtm.qualtrics.com/_set_cookie?val=MDs%2FfjFTNeSmng1K%2FsmiYfRAhOkgI2jJK%2FhNuVShnQzDeA3BrUA1GwNqcIllMd4WZuqvcSgMmebRFoFodxKGtb1rwryhnw5bt2wguRFMwGP%2F1jP69ltQFouxLTAfq6Qdq8SkXiQFeNknhPJ3DSyLxJTM3NXcPyqHlPdBEU7PBiGdgqPcFH9B8nXxKtPinqPT14%2Fez2bGFf%2Bc%2FGIoTeYif0OnxPL0N2omxCUaW5NfwCOHHSUXs7LFa3mFGNQSSlen%2FkAL1QLQC%2ByUuQR%2F9%2BU2Yd7gGAj4
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 248 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17172
Entropy (8bit):	7.974858535178584
Encrypted:	false
SSDEEP:	384:eMkhVBdapU1Yu9OqtRQ30aprApbVP2JseBW:eMkhRasntRQlprAppEsn
MD5:	EEF64DA8CB1A8123E0CFE6BCAFBE3405
SHA1:	F8ED40ABC504308CDA91A59B2D40AEB3D5913B38
SHA-256:	48EB12EAB1BE9C09CF5304995A2E2AC60B3DBE13D0F640C393A0CD0562E2FECB
SHA-512:	8296EAEF35542C51CE59A3071DA507762D7ABDB63FAC7F7A0E1BA1FFEE9A59839CE1CBA7931C0DA6E6C76330117FF1FB6332A24A4616A371C1615DB859C39823
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................... .IDATx..{.\.u...EO.++J.FK....E.`..B.!..%.&.c. 6..vb...al..q.5.\|.b/..I26.8..x2~..U...!.!..L\|1!.+."W+Z.,]...Q..........GwUw!j..]........{.cLi..e..43.P.P..{..W.)...k...oj...o.e....N.Z}#..3...b....6.....N.xF.....o..7.g.\|...{.:.bJ..J...Lw!^.n-.\OY.R._........A.{....x..J.~..^`.......n..Z5n.1.q...@Y\|3@$.w..P.Q......+.G.....J.>.......3..:.e.N.N..#&-.mb.L...\j-..X.A.Z....v..7/5.>....@....E...C8..q.zw...n...-.O.Z.J...1....\|.K`.-..N...Z?..m.n2..^A...j.Vo...Y).r.>g...../.2.~.[._G. ........l.T../4.&PB.....R..5..B...J.q..S....L.j7..M.,W.w.ou.R.M....vs..*.o......f..]_8.B]c..N..=.o,5...D.J.q..W........[...Q.~..".[j.,..D.Z.....3K....<ie.:......4rT......hC...2.....Zi...Ft^.t.bk.s..U...?.......w..T..x.d.%U..6..,.. .vp.v..-...n0..r.q...0..^.i.(.\.oE.....`.B..a.us.....f.HX..8..O.I....O...[..r.>+.Ad...q...Sf...>....o...1.$f.2.hz '.......C....!..v...77~... ..lD.Q.O.oWj.7T..Q...!..16f\..J.>.9j.....eQ.....@..N..o}...h<.>.=.T...>-..(...ws

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10256), with no line terminators
Category:	downloaded
Size (bytes):	10256
Entropy (8bit):	5.224869045471268
Encrypted:	false
SSDEEP:	192:G/BPMpdqK+JcgMRC5Wb2z9f4azFu2TmpnQHc7cmc3wK0uH77eO545WvfY9csc+c/:Gi2K+2gMREdzTmpntQj3fbnxDxrkuktS
MD5:	22DEA2A18E3AAE29D843CA390033CA80
SHA1:	50060FB1C89D8D60661FE8DD04DB8A53C1966913
SHA-256:	58D4AAA7E850B0112A257B4A907D16E6BC5CDDA3DD4518F26D43775FF599B81E
SHA-512:	B7389900D6EDB697BED06AD35556767A813B01B43A1F5CEB4F40A31482EC3BC51F2744A61452D11937A9ACA2235D42D00731C5160C69D315549080D1CF1C6C6C
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/plugins/download-monitor/assets/js/dlm-xhr.min.js?ver=4.9.13
Preview:	jQuery(function(e){new DLM_XHR_Download});class DLM_XHR_Download{constructor(){(dlmXHRinstance=this).init()}init(){dlmXHRinstance.attachButtonEvent()}attachButtonEvent(){jQuery("html, body").on("click",".dlm-no-access-modal-overlay, .dlm-no-access-modal-close",function(e){jQuery("#dlm-no-access-modal").remove()}),jQuery("html, body").on("click","a",function(e){const d=jQuery(this).attr("href");let o=!1;jQuery(this).hasClass("dlm-no-xhr-download")&&(o=!0),"undefined"!=typeof dlmNonXHRGlobalLinks&&0<dlmNonXHRGlobalLinks.length&&void 0!==d&&dlmNonXHRGlobalLinks.forEach(e=>{0<=d.indexOf(e)&&(o=!0)}),o?jQuery("#dlm-no-access-modal").remove():(jQuery(document).trigger("dlm-xhr-download-button-click",[d,this,dlmXHRGlobalLinks]),void 0!==d&&0<=d.indexOf(dlmXHRGlobalLinks)&&dlmXHRinstance.handleDownloadClick(this,e))})}handleDownloadClick(e,d){d.stopPropagation();var o=e.getAttribute("href");let l={button:e,href:o,buttonObj:jQuery(e)};-1===l.href.indexOf("blob:http")&&"#"!==l.href&&(d.preventDe

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2004
Entropy (8bit):	4.284242389859822
Encrypted:	false
SSDEEP:	24:t4GCXMvpyd13kjJXaHyQ+YaVJS0rHFPqA8NnKQw4wXqBxKB7XLIuX8pO1aeTh6y7:1aMUd1UAEq0rHQBnKQrTKBxAdy+uUuj
MD5:	CE05C06B43559DF7E0BD98190F3FD2BE
SHA1:	E4BEF98932546C68BB1C06A50934DD79E264F2E5
SHA-256:	A8D37EDBA7AD451C3630D7254CDB313F33B3FCDE3B180938BAB5B2C3A26CE49F
SHA-512:	831B6BAF1B5470B7D36C6ADB2E64C6E95E9836A6824289B9326DFC10B482F9C6E247C979786E9D0D0B8227280F918A2C8460D26A007B6215062E4A4C5BDC5ABC
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <symbol id="solid" viewBox="0 0 2676 903">. <path d="M190 1330H86v103h104v-103zm1251.5 50c37-35.3 55.5-82 55.5-140 0-33.3-7.8-63.2-23.5-89.5-15.7-26.3-43.2-48.2-82.5-65.5v-2c37.3-9.3 66.3-29.5 87-60.5s31-65.8 31-104.5c0-40.7-9-76.5-27-107.5s-42.3-55-73-72-64.3-25.5-101-25.5h-303v720h279c68 0 120.5-17.7 157.5-53zM1671 845c0-23.3 13-35 39-35h34v-97h-44c-40.7 0-72.8 9.8-96.5 29.5S1568 794 1568 838v595h103V845zm-807 381h75v-80h-75V848c0-13.3 3-23 9-29s15-9 27-9h39v-97h-53c-36.7 0-66.5 11.2-89.5 33.5S762 799.7 762 839v307h-52v80h52v155h102v-155zm250 110v-206h158c38 0 66.8 9.7 86.5 29a99.1 99.1 0 0 1 29.5 74c0 29.3-10 53.8-30 73.5s-48.7 29.5-86 29.5h-158zm-540.5-131c32.3-18 58.2-43.5 77.5-76.5s29-70.8 29-113.5v-85H360c0-40.7 11.2-71.8 33.5-93.5S445.3 804 482 804c20 0 39.8 4.5 59.5 13.5 19.7 9 37.2 21.2 52.5 36.5l76-64c-48-55.3-110-83-186-83-63.3 0-117 19.7-161 59s-66 106.7-66 202c0 62.7 10.2 113.7 30.5 153s46.5 67.7 78.5 85 66 26 10

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1722 x 1731, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1899601
Entropy (8bit):	7.987703262483573
Encrypted:	false
SSDEEP:	49152:sjxefjTesodIXbO4pyWEGnSBqUsQNgv/iHeOnqG1H:sjkfesOILBpmGnvUstHOnqyH
MD5:	745B4209062538ADE29D9E352BCB0325
SHA1:	F8332762CB03DFFD91E3607AE376383225DB53BB
SHA-256:	4FD10E7921F7A327ABCB0BDE1C313C10C979A6ABC320D2983978A13EFEDA3752
SHA-512:	29A7502E3ECA8F60464350F5B956D030D3E91937F6C25C76DE0E875DE3EC5B216C654C3FEAF215FA2D095D560A14C7C58A5D1F35C3A14E2FF79B476446974383
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2018/06/NSF_Logo.png
Preview:	.PNG........IHDR..............F... .IDATx....$YY.Y.....M3..0.....8..,.,..,.e...a.E...T......~....U..^....eAXDE>.cD.E.ED.EdG`YD.f..*3.....DDVeUWuWUgd..;.8q.._d.....=1.L&.&.@...... ...@...... ...@...... .....J.:L.!...@...... ...@...... ...@...... `..]\|. ...@...... ...@...... ...@......zI......NC...... ...@...... ...@...... ... t..... ...@...... ...@...... ...@....%...^.6:...@...... ...@...... ...@...... ...w...... ...@...... ...@...... ...@.....zy..4. ...@...... ...@...... ...@.....B....@...... ...@...... ...@...... ..^.@...i...... ...@...... ...@...... ...@...]\|. ...@...... ...@...... ...@......zI......NC...... ...@...... ...@...... ... t..... ...@...... ...@...... ...@....%...^.6:...@...... ...@...... ...@...... ...w...... ...@...... ...@...... ...@.....zy..4. ...@...... ...@...... ...@.....B....@...... ...@...... ...@...... ..^.@...i...... ...@...... ...@...... ...@...]\|. ...@...... ...@...... ...@......zI......NC...... ...@...... ...@...... ... t..... ...@...... ...@...... .

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	439904
Entropy (8bit):	5.35737770059875
Encrypted:	false
SSDEEP:	6144:prBt/xkaXxsE7qQ2qSI2Ka3iD0kBNOxgzn3EcWhqlSftZ9z+s:RnxkaXKE7q8NOY2Dr
MD5:	9422AF4C8C350FB1FEE377E0E551CA5C
SHA1:	1386A131259C3A2B00DF843400150A1CF4E7A8C1
SHA-256:	A6972C49E66FE3C5026A1A1E26A06C49995CEC36FC522CB56461F5CF0B2B2978
SHA-512:	DB01105DDAE245D4660255324CA85F767F92EB3B0EA2D0BB8E246BA5DECEF8AD09687E8A48ABA9F7481099176EC3AB247826E9B8D8943C0FCF7BE4B3C167246D
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202401.2.0/otBannerSdk.js
Preview:	/** . * onetrust-banner-sdk. * v202401.2.0. * by OneTrust LLC. * Copyright 2024 . */.!function(){"use strict";var N=function(e,t){return(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}N(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function F(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.577819531114783
Encrypted:	false
SSDEEP:	3:HAOfaY:gOfaY
MD5:	4C8A26E14EDABDD7D6BFBF1472AFC853
SHA1:	F268C3DB54608F753ED9320CB2411B00A40C8D65
SHA-256:	B9224CA870B658AB694ECED1FBB07A971FCE7D0C990E50046929E9968BAF435C
SHA-512:	820B85A739953E8A71E89FEB45BBFB01E2D2F8977D30B0AB11BED28A7CA2B0365595AA7074A3A9780C8DE95E0C8DE839B5C390519F5238E8435F44736CDD497F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkh4B5FIGOSGxIFDaWTNiQ=?alt=proto
Preview:	CgkKBw2lkzYkGgA=

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 1125x375, components 3
Category:	dropped
Size (bytes):	40604
Entropy (8bit):	7.705647178432612
Encrypted:	false
SSDEEP:	768:PSyHLdaWlGiMcoX0xmTLo826O6v+aLByKJEC6zxwWGArHtw98:PHZakevIh8zO6v+aLByZxwgK8
MD5:	0376481E7A6CA18B9D5406536EFB8379
SHA1:	EE02022E007C7F6B56DDD19F20BB079E79E0B621
SHA-256:	BE3C1531503A1F9BA2C28A080406AF6875023A770ADC27908919791677B32864
SHA-512:	7C6C017F96975002A7B0D03899BACB33503934B1C5E766A206712A49FCB5EB16375ECCAE392687C8D057E055B4A29D52844F653A8F3907D9FAE4C5548BA630C7
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................w.e.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1191), with no line terminators
Category:	downloaded
Size (bytes):	1191
Entropy (8bit):	5.027775143359677
Encrypted:	false
SSDEEP:	24:pY4YRVssO7j2I2t3Sr+Eq5D7Djqd8DgDLUDORZGbMDbg9ZiWXh6CKu4:l6VssKKLt38qdP0A8cOLGbwbg9ZiA6Ce
MD5:	51300497928562F8C86C7AABA99237CD
SHA1:	E5826832B85C6AFC6502B74CBB8AC5394B04C363
SHA-256:	6D161E98E47AE150B51211443EEF37040FB6269DCF85AD2048548066DCA99E6F
SHA-512:	04BFDF1A41712238902BC6A0E07EFAF356217E98560C52FA5D175C29191617C35853382CE2F69966BDD5E1B40114B872D962A5FAD26A9E0B7D4FC016A6DCB833
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.5.2
Preview:	!function(a){void 0===mejs.plugins&&(mejs.plugins={},mejs.plugins.silverlight=[],mejs.plugins.silverlight.push({types:[]})),mejs.HtmlMediaElementShim=mejs.HtmlMediaElementShim\|\|{getTypeFromFile:mejs.Utils.getTypeFromFile},void 0===mejs.MediaFeatures&&(mejs.MediaFeatures=mejs.Features),void 0===mejs.Utility&&(mejs.Utility=mejs.Utils);var e=MediaElementPlayer.prototype.init,t=(MediaElementPlayer.prototype.init=function(){this.options.classPrefix="mejs-",this.$media=this.$node=a(this.node),e.call(this)},MediaElementPlayer.prototype._meReady);MediaElementPlayer.prototype._meReady=function(){this.container=a(this.container),this.controls=a(this.controls),this.layers=a(this.layers),t.apply(this,arguments)},MediaElementPlayer.prototype.getElement=function(e){return void 0!==a&&e instanceof a?e[0]:e},MediaElementPlayer.prototype.buildfeatures=function(e,t,i,s){for(var l=["playpause","current","progress","duration","tracks","volume","fullscreen"],r=0,n=this.options.features.length;r<n;r++){var

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65266)
Category:	downloaded
Size (bytes):	158005
Entropy (8bit):	5.284310833637965
Encrypted:	false
SSDEEP:	3072:cWdIxUMz/tGzT3+XtHi2iX6JPMupdggt1YHWyFxAcDHzEJLDnWTnWNBEBysX6qMa:dwhggc1l7
MD5:	E53EC3D6E21BE78115810135F5E956FE
SHA1:	523892839B88351523E0498BA881C4431197B54E
SHA-256:	B15C3EA03D50C2430490E7416733A254FEEA4237BB60B54181BD3473EBE4149F
SHA-512:	84B080EAAA043928F038421CEB18BBA7483AFEE5B6480A92EE01992317CDE2361A6DD255B16EC036E51E8A1FEF46B5379C6A5FF5C9EC69D682F96DEAA03A8842
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17
Preview:	/!. MediaElement.js. * http://www.mediaelementjs.com/. . Wrapper that mimics native HTML5 MediaElement (audio and video). * using a variety of technologies (pure JavaScript, Flash, iframe). . Copyright 2010-2017, John Dyer (http://j.hn/). * License: MIT. . /.!function r(a,s,l){function d(n,e){if(!s[n]){if(!a[n]){var t="function"==typeof require&&require;if(!e&&t)return t(n,!0);if(u)return u(n,!0);var o=new Error("Cannot find module '"+n+"'");throw o.code="MODULE_NOT_FOUND",o}var i=s[n]={exports:{}};a[n][0].call(i.exports,function(e){var t=a[n][1][e];return d(t\|\|e)},i,i.exports,r,a,s,l)}return s[n].exports}for(var u="function"==typeof require&&require,e=0;e<l.length;e++)d(l[e]);return d}({1:[function(e,t,n){},{}],2:[function(i,r,e){(function(e){var t,n=void 0!==e?e:"undefined"!=typeof window?window:{},o=i(1);"undefined"!=typeof document?t=document:(t=n["__GLOBAL_DOCUMENT_CACHE@4"])\|\|(t=n["__GLOBAL_DOCUMENT_CACHE@4"]=o),r.exports=t}).call(this,"undefined"!=typeof global?global

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1124
Entropy (8bit):	4.691624965758359
Encrypted:	false
SSDEEP:	24:t4GVCh8gUK4ZFvxqCtFP0lJzHn2JvJ8glQ63LoeWo:1VzlKGqCtFP0ldHmx8glV38Xo
MD5:	E228390FCE3F8429E4D5D7CC18ED32F6
SHA1:	8AE449EA8E3E1306135D385D6EC171AB24C241DB
SHA-256:	25F89C0D7AE67983BD855D6352A203A1F0242923AFF594A98A91BC56BF59DF31
SHA-512:	CB7CD657C36BF361F07B476D4D484F544C01B6E502F0FC144E4E3CB234AB8640479EC703074BE7EE304CA7FD6951747B74AB370FA56884D0C21DE141B76364BC
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/assets/dist/svg/display/clipboard-check-x.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <symbol id="solid" viewBox="0 0 1340.99 1854.98">. <title>Asset 1</title><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path d="M1107,271c129,0,234,105,234,234V1621c0,129-105,234-234,234H234C108,1855,0,1754,0,1621V505C0,374,105,271,234,271h61V163c0-22,17-39,39-39H518C535,53,600,0,676,0S817,53,834,124h184c22,0,39,17,39,39V271ZM373,202l0,209H979V202H800a39,39,0,0,1-39-39,85,85,0,0,0-170,0,39,39,0,0,1-39,39Zm890,1419,0-1116c0-86-70-156-156-156h-50V450c0,22-17,39-39,39H334c-22,0-39-17-39-39V349H234c-86,0-156,70-156,156V1621c0,86,70,156,156,156h873C1193,1777,1263,1707,1263,1621ZM884,660c16,14,17,39,2,55L638,983c-10,12-13,9-28,13-11,0-21-4-28-12L458,861a40.43,40.43,0,0,1,0-56,39.24,39.24,0,0,1,55,0l95,96L829,662C843,646,868,645,884,660Zm-35,525a39.24,39.24,0,0,1,0,55L727,1362l122,123a39.24,39.24,0,0,1,0,55c-8,8-18,11-28,11s-20-3-27-11L672,1417,549,1540c-7,8-17,11-27,11s-20-3-28-11a39.24,39.24,0,0,1,0-55l1

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 360 x 388, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	25935
Entropy (8bit):	7.960398345569899
Encrypted:	false
SSDEEP:	384:Uv3E7dHCZPcrer8Hl8Bk2Y+o1JmZG+ZaKmJOBKrtyl7N4LIZv+6t4KuT7mnUxP6u:IwwEeIF88Jd+ZR4gNNGmvFuGUgny9kN4
MD5:	1198BB9E1247EA8654428C7A8A3A7A2D
SHA1:	F7F19D93103D09A2C8E8BBD2031A4A32529B9E70
SHA-256:	FD31FF1CBD1B34B913F42C97215ADB2EE5903E448AF478F4806A7C48CBF1E18D
SHA-512:	6226BCD74506B919A142ECD4F55BF77F934FA0E771C16640D191C336E81D368FC210D90616F57AC08A61EE8B954057377EF96C83B996CB76E84B1C8C45B9C4CE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...h..........c.,....pHYs............... .IDATx....T.u....ZJ..\...'.Pj.!..c.1..5. F.{.....Xk..z..].%j.....j.1.P...c...RJ)y..^K..p.\.....s.=..3s..3g.Y..Ys.^{.......s.3...........!`.......yd.....! .,@.<0...C...X.....[..!`.X..9`....@A...].1...C....ms..0...."`....cn....!`...!`....E..tA...2...C.....C..0.........e......h....!`.........s..0.....@....Q..'..i.....T...!`..A`...x..'..1.oO~t.....Nc..."..^....5......N.F..i...o......<......F....0.Z.....+.6C....si...o.\|>\|?.ZA..)M..XM...f...._......C _..c...to.f..?..v....w=.zqB.~..6@7..4.y"...<..../..u....&.~..y.hg2.?.$.....U...&8.....F..!.~.>..zyZ7.@..lZ....V.....S.v.z.;h......;.}.B.....;...J:....`.k ..%.......T.....0..D.p..i.`G....i.2.....Gf...f..4.?.t....Y....E...i.[i...w.T..5....*H7r._....4S.f...'.,._lD.;C.. 0.....;.`scZ...c....".)@S.....0.....l..\.~........5.J.S.h.{.U\SY....C...dZ..w....X.\|..8...../..+..!`.t..........I}.^.v\....c.@ U.f...Y..!`.t....(..V.=.zeC.t.AzX....T....i..

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wi/config/10005469.json
Preview:	{}

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 609x775, components 3
Category:	downloaded
Size (bytes):	98410
Entropy (8bit):	7.899530373933149
Encrypted:	false
SSDEEP:	3072:hm+U0ULOAogTtndjU0y7rVyy0Qtl5URTm0:llULRtS0yT0QxURTz
MD5:	1C7632D8A5D362DA1F894326518636AE
SHA1:	4F0B48B7F37E9AED3298BECED358473BAEF7A253
SHA-256:	55B66703E06E85BEC8EF19E0F25596E9AAFD2A7ADF0019151A99BB895D466061
SHA-512:	E654BC7FFF1B6C4DBB81A62E6B669998EE8F9BAE607902BF6BA699808622D69B012E585E2D7E7AE661CBC7C1EA9D3E5214541B0D1A875E636F2953C38AE6793E
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2020/11/Texas-HHS_Logo_VT.jpg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.........................................................................a.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(...(...(...(...(...(...(...(...(.......(.[...5....@..I4....^[..K...W_.u.n.8.N.nH.\|..yG..mY.....W.'........x.../..R..e..z.......y...T.$."]........?i.:..V.M.g.vp..}.O.k..?.k..f;.f..2s.k.e?.k.qv.:R...e.g.O%./.I~'.....E#.CZ..r2>.t..z.k.....->f.O.X....`.. .......<{...[x~Sj.. wU....!

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.556000478045145
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfrPHreKnKRNdzR0s:29M3tRdfOKnWdzRx
MD5:	1853029B9AE515383EDED9CF23925B9A
SHA1:	0FD94582D45C77BE5CE2E0E70A489AB39B49FFB1
SHA-256:	F8C3A90B472930CF15B5C3B62DD334F228D37F728910034F883C785A6A222FF3
SHA-512:	3470F8BB1C69397ADB36FB786AD2DAAEB53919BFA3E833FD50B6D7DEC9450A5350B853AAC358781A96DB52793E677E0212DD43C68028DF13FACC6C9A43B419FD
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":404,"body":"No client claimed the request."}}..

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10769), with no line terminators
Category:	downloaded
Size (bytes):	10769
Entropy (8bit):	4.8913729079030785
Encrypted:	false
SSDEEP:	192:C28h5ysC8g0AyQIuWnmWnnJolV1VLVDNWj8:yIIuWnmWnn6lV1VLVP
MD5:	E730D6AAC76F46FC2942722A56F05E42
SHA1:	FD24EA7F8516EE37324E2110B9718357477FA466
SHA-256:	4EDF92544C1BD1432B517C7014646632BCD4731BEBC32350574DD2A3F45C0C88
SHA-512:	E97748CE95AF6E9EC57086FD089A4E3174BDDE9366BEA29BCE610B208D1222F934816D8CDD5FF6BB8688390C243E9213B78E84A368D4CA098AC8D1C4BB34A55B
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/plugins/dg-blog-carousel/styles/style.min.css?ver=1.0.12
Preview:	.et-db #et-boc .et-fb-modules-list li.dgbc_blog_carousel .et-fb-icon{padding-top:7px;padding-left:7px}.et-db #et-boc .et-fb-modules-list li.dgbc_blog_carousel .et-fb-icon svg{width:16px!important;height:16px!important}.et-db #et-boc .et-fb-modules-list li.dgbc_blog_carousel{background-color:#e1e7ec!important}.et-db #et-boc .et-fb-modules-list li.dgbc_blog_carousel:hover{background-color:#94a7b7!important;color:#fff}.dgbc_blog_carousel .dgbc_carousel_wrapper{position:relative}.dgbc_blog_carousel .swiper-container{width:100%;height:auto;padding-bottom:15px;padding-top:15px;display:-ms-flexbox;display:flex}.dgbc_blog_carousel .swiper-wrapper{height:auto!important;-ms-flex-wrap:nowrap;flex-wrap:nowrap;-webkit-transition-property:-webkit-transform!important;transition-property:-webkit-transform!important;-o-transition-property:transform!important;transition-property:transform!important;transition-property:transform,-webkit-transform!important}.dgbc_blog_carousel .dgbc_post_item{font-size:14

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4162
Entropy (8bit):	7.927612543040604
Encrypted:	false
SSDEEP:	96:4cqQfVWZdqVR/+XpoInQ2RZyrPnllAplPZSjbuBNgVFb9LCviRQ:4MfEzRtQ2G7nzQhZSjbuBCf5Uv
MD5:	CCF49E53580A1B26257AFAF10CF81DB6
SHA1:	2F791F0547AC1DF6606EB208DF3FB9CC3C961EE6
SHA-256:	18601D2BC3BE963FD481A5E6F1AAABA42650C45BDBF0A562E60B20321F94405D
SHA-512:	C985B0F996BCDB796A03BC2D03B7A116C0F5CFC0B298375E1E4F0A518EF3B1843D10F36CACF9073C1A9975E6DE53DE53F10F2BA73491060643300E3B095D2F41
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................pHYs..........+......PLTE...??@..........tjna::<..........[^W.....kocAAB;;=...........................@@B==?EEG....<<>eh_...............................................pvf.................................x...................z.oLLN....!.......................vaac..{........................................../..............PQSCDE.....................w\|mHIH...VVX...........H..&...........syj.......JKK..................kXY[...\|.r.>....C..X..L.....<=>..........PRN.....v...BBC......FGH......wxy..{.....g..S....A..P.......zXZUrsspuh........NOM}.t.............ooq..............$.9nrf.....ZTTV.........UWR........]]_...^^`~~.hhj..\.....ad]............joa..............\_Xefh.......r.....s.........~.......................r(u_-...'t......IDATx...iTSW........$d...H.!P.Y..P. ...0.....T.P9.....k.q....[...u:N{.t...Y.t..4.e}..........4...}......U z!..%.%.%.q++.i.i.)({qX.....Y.........;...9{

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 280 x 180, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6193
Entropy (8bit):	7.940298689390359
Encrypted:	false
SSDEEP:	192:5KGJauL23ffdQN+lx6ujIJVJJb+IyrI4v/29DN:0GJauqdQNEpjInXyX29x
MD5:	9AA59FB29FA4C215E688831C45E1158F
SHA1:	496D2062DECC851B9B75A49D2BB0E1D64B5092A4
SHA-256:	3A32CE0AE7BCAE04660123B99A5D424A1792FC06A65F1D08816E43D6B65A1324
SHA-512:	FA7ADA502FFCFA978C2A9D0560074DE04EA06422B44181CB031B6F89DF3D134CD7CE20E340D70D565C5B6876DD66AE5711B7B591D1CE8628B621FBC2E7651276
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2018/02/Storer.png
Preview:	.PNG........IHDR.............x......PLTE....r?norijmikn.........fgj.......l4.p;...D.`.n7......f(....uvy......S.j................%.R.................d$..z{~...N.m......]_b-.T6.Y_.x[.vp......]..V....`.\|E.hu.....Q.r9.Y.wB......STX.$X%...)IDATx..ks.:.........8..........$....".w.I..1l.V..pjN.Z.GRKj.&..\|..t..#5..DP...6..%..b...a%.P...V}...'Q3.K.Q]T$....\O-5Z...YK.Ys....w=^Z..y......ER.n.i6n..X.......0...f..Q.\|G...Ne.f.!8...X...O.7[rn.].-C..M.Y..n$.[....\|..K.....`...<......d(..o}.EcbAW.(..._...6.......<.&.....9..E........n\.'..h...!.....Y<7......ak=O.......f?..._.M+)..f\|.....].1.E..:.....J...0[..k...]O....^...Po!./....$..c.k.B0F\|....q.........m....kL..4j.jXlv6.>f'...q/[c........<.bnM...Q....5....Q6..$.D....Rg........Ayl9?{X..B.(...2.J`pVr...z#.i.(.....H.X..\|.........+ukf...j`..y.....H....3L.lM.`i..<..A5OE...-......q.0...fEX.....cn.....AK.u9.F!.o~*3<.o.c..".4.a.0.....p...\|.E...&tE..M>_..U7t+N.....<.V\|G0db.F....]/.41t#...n7..V.;..Z.X..Z....e .

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1076
Entropy (8bit):	4.935875551695502
Encrypted:	false
SSDEEP:	24:5724xDebOYmOXJiCPJ8XPOYmz+XaTo8KMhBMUaLQ:524xDebOrOkCPmXPOrMan/BMUas
MD5:	D73FB3458C13D5C72E81F03C3410B1E9
SHA1:	B2EF5919C3884C49E68DA7CBD12286B46524D018
SHA-256:	E0406AFECD57FC54EC054479592D26B12CE1E2AE12F16ED069467DC0BFC39DCA
SHA-512:	27DF38848E4315AA53A9E8127AC8AE9FDF91C6141472D11BC48197F31E9D8263F924F98F1B026060BE1C3E853447EFF19D8286A779F8A37EB54C538807BFFEE2
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/plugins/divi-booster/core/icons/divi-booster-icons/icomoon/style.css?ver=3.8.5
Preview:	@font-face {. font-family: 'divi-booster-icons';. src: url('fonts/divi-booster-icons.eot?7o75rl');. src: url('fonts/divi-booster-icons.eot?7o75rl#iefix') format('embedded-opentype'),. url('fonts/divi-booster-icons.ttf?7o75rl') format('truetype'),. url('fonts/divi-booster-icons.woff?7o75rl') format('woff'),. url('fonts/divi-booster-icons.svg?7o75rl#divi-booster-icons') format('svg');. font-weight: normal;. font-style: normal;. font-display: block;.}..[class^="divi-booster-icons-"], [class=" divi-booster-icons-"] {. / use !important to prevent issues with browser extensions that change fonts /. font-family: 'divi-booster-icons' !important;. speak: never;. font-style: normal;. font-weight: normal;. font-variant: normal;. text-transform: none;. line-height: 1;.. / Better Font Rendering =========== */. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;.}...divi-booster-icons-linktree:before {. content: "\e900";. color: #39e09b;.}..div

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	828
Entropy (8bit):	4.71369936969451
Encrypted:	false
SSDEEP:	12:cYJYH894+LaNyj94+LaNy1CJHv/0c4Doz0Nr0EUpC:rJYgDfCJX2D0CUpC
MD5:	3C256AB342FB7EC08478AB6A222D249E
SHA1:	2648831E246B5AF0FEC735266DEFD6E5575E116B
SHA-256:	57CD46ADBABD6C40823602B4513AECBE89320A769572255272ABE9F008DE69FA
SHA-512:	D1D4DD7D9CBD3F40CBE3438D8CE7AE29564B761B024197EB07603B1672265FC0D6F1DAA528F7B96604D2C41ECE80218DBE2463B18BCFBBBE13F18D1431353678
Malicious:	false
Reputation:	low
URL:	https://success.qualtrics.com/js/forms2/css/forms2-theme-plain.css
Preview:	#mktoStyleLoaded {. /* css load detection, do not remove */. color:#123456;.}...mktoForm fieldset {}..mktoForm fieldset legend{}..mktoForm input[type=text],..mktoForm input[type=url],..mktoForm input[type=email],..mktoForm input[type=tel],..mktoForm input[type=number],..mktoForm input[type=date]{}...mktoForm input[type=text],..mktoForm input[type=url],..mktoForm input[type=email],..mktoForm input[type=tel],..mktoForm input[type=number],..mktoForm input[type=date],..mktoForm textarea.mktoField,..mktoForm select.mktoField {. padding:2px 3px;.}...mktoForm input[type=text]:focus,..mktoForm input[type=url]:focus,..mktoForm input[type=email]:focus,..mktoForm input[type=tel]:focus,..mktoForm input[type=number]:focus,..mktoForm input[type=date]:focus,..mktoForm select.mktoField:focus,..mktoForm textarea.mktoField:focus{}.

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543)
Category:	downloaded
Size (bytes):	1382
Entropy (8bit):	5.025913610029111
Encrypted:	false
SSDEEP:	24:21YXMSYIGxyqms4mJYtPeMsBtE1lEkQjlmtMN2I9z20dgar5Cjcv2sqDMB5znrv:nXDY/ydSUUDE3E/Rmhua0drrdUQD
MD5:	4C36F7B38AC79AEEC73A608A3FF1BC07
SHA1:	C78D85D7BF0CD2BE4900B85E64E6874F4CA3C803
SHA-256:	45AE39B83CE75A8DBF0FEBF1E5B630FC54A713039CCFAD6B46238212A1B858A9
SHA-512:	4D8D523F371919ED6902F63F82595E6AC41A21D4AB02109EFBDB4687518A03FC05D440B6DC01AA73E17C419CE789CDD40CBDF2D2EB18274298643DDC136C355D
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-results-vertical.js?ver=4761
Preview:	(function(a){a.fn.extend(window.WPD.ajaxsearchlite.plugin,{showVerticalResults:function(){this.showResultsBox();if(0<this.n("items").length){let b=this.n("items").length<this.o.itemscount?this.n("items").length:this.o.itemscount;b=0>=b?9999:b;let h=a(".asl_group_header",this.n("resultsDiv"));if(0==this.o.itemscount\|\|this.n("items").length<=this.o.itemscount)this.n("results").css({height:"auto"});else if(1>this.call_num&&this.n("results").css({height:"30px"}),1>this.call_num){let c=0,d=0,e=0,g=0;this.n("items").forEach(function(){d+=.a(this).outerHeight(!0);a(this).outerHeight(!0)>g&&(g=a(this).outerHeight(!0));c++});e=gb;e>d&&(e=d);c=1>c?1:c;d=d/cb;0<h.length&&h.forEach(function(f,k){f=Array.prototype.slice.call(f.parentNode.children).indexOf(f);f-k-Math.floor(f/3)<b&&(e+=a(this).outerHeight(!0))});this.n("results").css({height:e+"px"})}this.n("items").last().addClass("asl_last_item");this.n("results").find(".asl_group_header").prev(".item").addClass("asl_last_item");1==this.o.highli

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6457), with no line terminators
Category:	downloaded
Size (bytes):	6457
Entropy (8bit):	5.161974634833697
Encrypted:	false
SSDEEP:	192:iMKjgjbjGjegmTmFmZmi6F/RmPmdmBmiFF4gooBkES4fhqcE+FUW:6oBTOBU
MD5:	9BEE48D81ED347D677BEA9AEE0EAE02A
SHA1:	28F893B0F0E58ECB0295B370CA5F99BB2D94A52B
SHA-256:	779E15942143532577FC8A6AC98F187275D30C53B369633C752EA1D0D887DDA7
SHA-512:	70316B6C4B9F815038A0F5689DFE34A026C1AB24B35D0423B553F09C9091C64B2269F1433352465456287F564824C375C1A18FBE42085EE04AD25B6E328CB3EA
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/plugins/ajax-search-lite/css/style-curvy-black.css?ver=4.11.5
Preview:	div.asl_w{width:100%;height:auto;border-radius:5px;background-color:transparent;overflow:hidden;border:0 solid #b5b5b5;border-radius:0 0 0 0;box-shadow:none;}#ajaxsearchlite1 .probox,div.asl_w .probox{margin:0;padding:8px;height:28px;background-color:#fff;border:2px solid #1e1e1e;border-radius:0 0 0 0;box-shadow:0 0 0 0 #b5b5b5 inset;border-radius:30px;}#ajaxsearchlite1 .probox .proinput,div.asl_w .probox .proinput{font-weight:normal;font-family:Open Sans;color:#000 !important;font-size:12px;line-height:normal !important;text-shadow:0 0 0 rgba(255,255,255,0);}#ajaxsearchlite1 .probox .proinput input,div.asl_w .probox .proinput input{font-weight:normal;font-family:Open Sans;color:#000 !important;font-size:12px;line-height:normal !important;text-shadow:0 0 0 rgba(255,255,255,0);border:0;box-shadow:none;}div.asl_w.asl_msie .probox .proinput input{line-height:24px !important;}div.asl_w .probox .proinput input::-webkit-input-placeholder{font-weight:normal;font-family:Open Sans;color:rgba(0,

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 10636, version 1.0
Category:	downloaded
Size (bytes):	10636
Entropy (8bit):	7.978926931379975
Encrypted:	false
SSDEEP:	192:MMkeqdpqek6odb91cYv5Y+hEUDXoYN+Fzto6ikKgpTM1FxPkc6xPbbf:gdpqekp1cYTtDXooYtoLkKgpTKxPk5xX
MD5:	7A2C461F7CC8871FE7A741EB10E18E8B
SHA1:	B0FAF95D217F102320175E4900AA3250DAFE4674
SHA-256:	47F3EAEE9BE967B079C84B584BDC161BB26A49A6F081F60813E1B3DC83ECF4F3
SHA-512:	8CA1FDF63C47906FB74EBA9F642EEE9B06ADAF95E78D1BA1D7B5D0726DB3F10022AFAA37515035337A322E0A1C586640912A92B4C6AFB4370259CF0FE019112D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFQ.woff2
Preview:	wOF2......).......aX..)9.............................`..x...8.I..@..6.$..\|. ..H...TO..U...........(#.....8....?T.b.Bc.362.M'..'...b...Jm..Y,....1?.tt....C.2.. .u.Q5.&_.Kt....nZx....]..Gh.\.Q...3{..@..h V...#.a..h.4...5.../P$A"N.6.D.$D0......F..+5.+...V.r.......w\i....EhO...9.......SnI.X>.]s.....j...p.R{..Eb.^v...).Ik.0......D.B.UH_#........4.V....h~..' ..F.....K..)...X&..Y$.h.iD..\x...._..Ii.....k..a2u....^.V...SO....a...eH.LA......C....Z...74g.7.x.7.;..[....v%....36.&.Hy..L.H..-..@..E(....\_...E...a...3..k.e8..O..YB.wS.[H.....z..`...PP.j.)k"..pE..P..2..........r.Bd.o.&d..I:.B..\|...3....J.W=........'.P..v......t.....}.m-./!~.I.>y.....:.2..;......p~..OjT...c.G.-~.....xv........!...cW.~...%.(bOe...qo.k~..wjdl..........:.s~.a........Yb.~.....?I...._Q..........b.&.....C..s.tr..&4..._k.{...X.O.I..0......C.....P\|^.h...\|.6...5..;K....[.^.X.."....Z...od.....6.^<..1.%.E5M.....gdJ...{\,.:.s.......6.\|#...........F2....Swq..F......c...A.......

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65389), with no line terminators
Category:	dropped
Size (bytes):	1849651
Entropy (8bit):	5.0723762368209835
Encrypted:	false
SSDEEP:	6144:GknisB+nN0Ioh5DHnOy3sfVf0TTvsXbivVCGMhWhnDXFv3EMF:bnDI6Nh5DHnJWGVTMhUDNV
MD5:	5F904682FD7F27B2DCF7DAF73B97D930
SHA1:	D3154371887AC01B80858EF5EC0502AA6C777FE9
SHA-256:	C2531E8AC0AE42C9F749E34E6AF4538B4F251FF8C729939F2F7CD4E765E60AFE
SHA-512:	78367B2FE07816CADA7B09647315F0640EC3D5D6C5204C1B84EEF370C1ED8642371BAC8D910AF5805BB0A64E386E8AD766F57D8778AF92B69EB36A98756E447F
Malicious:	false
Reputation:	low
Preview:	{"audience_segments":[{"id":"351","name":"2023Q1 - EMEA - ABM - CX - FinServ \u0026 Insurance Segment","campaign_slug":"2023q1_emea_abm_cx_finserv_insurance","condition":{"attribute":"2023q1_emea_abm_cx_finserv_insurance","value":null,"and":[],"or":[],"comparator":"not_equal","filter":null,"aggregation":null},"condition_tree":null,"hold_out":"0.5","objective":null,"web_experiences":[{"id":"e14f6cd4-130e-48c3-90cd-49b329b8f5e2","state":"promoted","description":null,"name":null,"global":false,"priority":4,"experience_type":"render","redirect_url":null,"url_host":"www.qualtrics.com","url_path":"/hidden/financial-services-customer-experience-emea","url_query_params":null,"url_condition":null,"hold_out":1,"async":false,"experiment_assignment_grouping_strategy":"global","dom_update_group_id":"57799853-0c50-4078-8eae-c1d42877f0b0","dom_update_group_state":"active","variation_key":"b53af2ae-8f00-451b-9873-0ee44da42dfd","variation_name":"Variation 1","dom_updates":[{"selector":"h1.headline","da

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 502 x 599, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	55987
Entropy (8bit):	7.9869327922802125
Encrypted:	false
SSDEEP:	1536:EkadRCtSbLtNSuT+54oRuimXe9NKb9tAcxIBRZDE:EkadogNkB54Euimu9NKbDAVlA
MD5:	2C4513CEC5D7A910A3C0261B8AE0EDA5
SHA1:	C5466E6DC2A4DD6FE44709D12D361835DB538988
SHA-256:	AE96FFB8E08425B80D7544D6F42B89E19C306483F494AE03751A0F95CE2E1D0F
SHA-512:	F0A15D8065DB9F4766AB1755D93FFBF1315D4AEFD108AD366F4F70574E83E15C7611E394B7108985723017C0AE26A3BA41580376D1F651DD89D7B0BAF9E79D44
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2017/05/502px-us-fishandwildlifeservice-logosvg.png
Preview:	.PNG........IHDR.......W.....aCvj...zIDATx...oh.U............E/bD."...s...{.....=...9..0k..):E.....b.i3.b.RIS.ekl.0V..Y."!#"..s....=..{.......9.{8...a.D(45..9J.bW.J..\|..._....\|.w.7.#..H.....F}........<.k.]R..{$!C3...Q....bk.r.:..\....?....0yn.+....W.]....I.D..)...U..w.?.A.. .....u.vWZ..d.!.,<o.'x..........<cJ....1...s.2......ucV....M.?..nW..f.)Ly...:....W#:...d.k.0^.c=..D9...?..K.......\..{N.....Ul/........%.=.I...z6.!w.%...........g...3..Jr.s........p^I...;.......'....dz.4<.^..:..#.T.)......nx.Wa.._I.9J..C.....6..E..2..Y./f4......]9V...$.C...........C.c.....M..}..;F4......u#....KZ\.o....6.q..VQ.Utd.kt....~...=.J#_v....y....H..........N.'v.#;.}.tp.Zjys9m.y..cEF.+..A....K...EW..7V..};^...5.}.....p..........K.T....6{...T.I.F.......Z.Ijk.......1...d.=...t.u.....y.N.....g..x..LEI..K....+...-#:.....3m..T..`SRs....>T.....{../...N..L........<z&....R..d...K..t..:.....}........a.. }\......e%.&k.......N.....(H.H>5....O.1.s..@...B..y..O=..

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 340 x 200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	68120
Entropy (8bit):	7.992997247021521
Encrypted:	true
SSDEEP:	1536:9chDMXdoWkvCmFsXUDBAmYtnsbDK1eO31kz+mOu:ihDMKJvyELssfK1Dkz+pu
MD5:	092C4A9975C0BE1ADC4395D321B27B43
SHA1:	C871B499F9D98304B4DACA59459368C65D1F4B6A
SHA-256:	74529EC203BC900549A71E95ADF9169F3C1B969960DC10EF9AFD71917513E21F
SHA-512:	4FF6F9B21302FDB2FA9AE86243496FFD028D99B2078D0E7BDB8178B82350D5603DDE77949B93BD482C8454FB00FA2829AAD787E3B4A1C9810B8D4CFD462739C2
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2020/11/RWJF-logo.png
Preview:	.PNG........IHDR...T..........A.9....pHYs..........+.... .IDATx..].`S..>.I.4... C.%...*.".{.........{..8.e.w....g.4.....J.B[...?.Mn...{.{.w$...6u.A..q.:.x..JJI.}{...."..A%%.P.)>>......._PH.....:.B.0..a:z.CA2.c...A..TX.G..#u.y......Ajll<z32..r.J.m+....b..u..r...R#I...x.x..P..;w'.!..+.h..d.."..OqI).{7Z.`..c)!6.:v.B&..:u.IkW,.m.6.../.:v.H.w...:Rk....G...@.F.OWM..J G..D"!-.?X.O;w.!sJ/...$.c.t...J.}>/..u...G..e.K.r:.....V.$.NC.h..=!R....z...V."..On.&..)...Y,f...H...VC....3...$.....g.7.kZJ~...MQ8f-..h..}..z).C:UUa..@a\Cu.v.K..u_Nq.....t...c...j....2h......r.;L.ze......u..eR\.z....=...y.~.......r.M.p8...N;.....S..g....h.m.o1.....4..ud..I.U......K.t.A>..6.8.?.....3.Q..........e.R...>.O..u..F;a:..h$._O.Ruy!.t.U.5.../)....%..P..dZ.y+..:.TJ9m.....\|(..&4R..@.6f.Y..R.)@J.....7..P....$.Fj..I#..R. #........<.V.6....R~.\|.rs.:.Ia.C...{%^M...y..RRE.M..s.f..g.v....kq...% J....$....\|R#...QN.~.h5...Or\|'......C.g3m..*+....?.n.pX"WP..H.....U[s..'Xo..y...z

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	3732
Entropy (8bit):	4.7980493798055655
Encrypted:	false
SSDEEP:	96:Qrg3D2/FiuG8rifSb+lIl1iIVFMVIC55PxwCo56s5dxbE:zD2tiRHSbOErGIC5txwCo56s5dxbE
MD5:	FF1D5CCC83A1539AAE72B52079818BAF
SHA1:	2956D9D0BD50FDCB15D2DCA06DE6D6E28DE0A5B5
SHA-256:	2A03D3C62B841312AFA50B9E006254CBD9AB48A6273FBEB2D15EA0391B2D276D
SHA-512:	974B8D5FF1AE3D8DFCA0CFFD05F40815547F08319D40CCDB706CD4F4F67A67294A3003A388506DB5E460C3AF2ADC0D98E920D0E3B8AC92BAB77E76472DB187EE
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/assets/dist/js/libraries/teknkl-simpledto-1.0.4.js
Preview:	/. @author Sanford Whiteman, TEKNKL (blog.teknkl.com / sandy@teknkl.com). @version v1.0.4. @copyright Copyright 2016, 2017, 2018, 2019 FigureOne, Inc.. @license MIT License: You must include this license and the above credits in all uses & reproductions of this software... modified by Brandon der Bl.tter 2020-08./.function SimpleDTO(options) {. var slice = Function.prototype.call.bind(Array.prototype.slice);. try {. options.debug && console.log("SimpleDTO: Unifying domains " + [document.domain, options.domain].join(", ")), document.domain = options.domain;. } catch (error) {. throw "SimpleDTO: Domain unification error, domain: " + options.domain;. }. if ("receive" == options.mode) {. var iframe = document.createElement("iframe");. this.setSource = function (source) {. iframe.src = source;. };. this.getSource = function () {. // return anchor;. return url;. };. iframe.addEventListe

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33798)
Category:	downloaded
Size (bytes):	33889
Entropy (8bit):	5.471108118643796
Encrypted:	false
SSDEEP:	384:P5SO4+6MXSmliogPhM6YMIWeTWjwc0XYtOoZAbZIJ5sDD7jkW7BCiRC2knse0fwh:PgAzJqwUObIJ5sf7RBC+/kWs49Ci9Y
MD5:	444EEB66F3CDCD330F781A6807BF4040
SHA1:	24C51FF18B02ECB4CE8E7FA9D33ACA13466D2D2D
SHA-256:	C768DAE85A74FCC6C44A1A1C2A021C65D7A6AAF5A93C053D6B0D15F4BAB98BF0
SHA-512:	47F323411E500347F0B3FC1A47150E6B9505E241FA91FF0D0846312360A859FB8661A3B754020A0ABACD3ADEC1AB9219BBC2D5D70C030CC0D5D0050ECE96E54C
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/assets/dist/js/modules/language-routing-2023-12.js
Preview:	!function(){var t={9662:function(t,e,n){var o=n(614),r=n(6330),i=TypeError;t.exports=function(t){if(o(t))return t;throw i(r(t)+" is not a function")}},6077:function(t,e,n){var o=n(614),r=String,i=TypeError;t.exports=function(t){if("object"==typeof t\|\|o(t))return t;throw i("Can't set "+r(t)+" as a prototype")}},5787:function(t,e,n){var o=n(7976),r=TypeError;t.exports=function(t,e){if(o(e,t))return t;throw r("Incorrect invocation")}},9670:function(t,e,n){var o=n(111),r=String,i=TypeError;t.exports=function(t){if(o(t))return t;throw i(r(t)+" is not an object")}},1318:function(t,e,n){var o=n(5656),r=n(1400),i=n(6244),a=function(t){return function(e,n,a){var c,s=o(e),u=i(s),l=r(a,u);if(t&&n!=n){for(;u>l;)if((c=s[l++])!=c)return!0}else for(;u>l;l++)if((t\|\|l in s)&&s[l]===n)return t\|\|l\|\|0;return!t&&-1}};t.exports={includes:a(!0),indexOf:a(!1)}},3658:function(t,e,n){"use strict";var o=n(9781),r=n(3157),i=TypeError,a=Object.getOwnPropertyDescriptor,c=o&&!function(){if(void 0!==this)return!0;try

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (41015)
Category:	downloaded
Size (bytes):	41016
Entropy (8bit):	5.40477989512927
Encrypted:	false
SSDEEP:	768:EtAdZlUf9scFoW5F5bNI+MFOTXmn5w00cYb:ldZlUycFFNdT1dcYb
MD5:	B6A0A763B31124BEA2745AB65956E806
SHA1:	892D82D838256B4B97935C7DF05526628F81DEF1
SHA-256:	D21212D2E8B3AD21A06BC7A3694B2EEC14F102B781D26ED19B5E3319FC1B63D2
SHA-512:	FD117C05C6A43F6D3555A9D860CEFA3D575CE216D38EF4A260C8F27988769AE9CC42F3524AD1DCC2BCE23B2630FAF4152B6D50EE608375881FADDAD2267EA49C
Malicious:	false
Reputation:	low
URL:	https://cdn.ncsu.edu/brand-assets/utility-bar/ub.php?color=black&ver=6.5.2
Preview:	!function(t){var n={};function i(e){if(n[e])return n[e].exports;var a=n[e]={i:e,l:!1,exports:{}};return t[e].call(a.exports,a,a.exports,i),a.l=!0,a.exports}i.m=t,i.c=n,i.d=function(t,n,e){i.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},i.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},i.t=function(t,n){if(1&n&&(t=i(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t.__esModule)return t;var e=Object.create(null);if(i.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var a in t)i.d(e,a,function(n){return t[n]}.bind(null,a));return e},i.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return i.d(n,"a",n),n},i.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},i.p="/",i(i.s=1)}([function(t,n){t.exports='<div id="ncstate-utility-bar" class="ncstate-utility-bar" role

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	13367
Entropy (8bit):	5.057936866539623
Encrypted:	false
SSDEEP:	192:1maFFZjROLUFKza7EIU6hUFRuKt3FLrOamnFvr2S1:13FZjROwFKzB6hUFRNFLiaeFvaS1
MD5:	56655DA87943D0E5EF98E742AE6EE3D2
SHA1:	AA87802906516962A3EC0F444031F7154B70F0AF
SHA-256:	256E42104F48A5FA80B031DA12DC56ACDE224FBA3F9810F8F8192B39136D365A
SHA-512:	0478226BADA3BA5CD80A70265B37B723F56804C35F94632CD0255F35776C93294C9EE799B3787EBCB43B1328212CB828B06ADDCD5E9FD33FFE639E9B3E5999A6
Malicious:	false
Reputation:	low
URL:	https://success.qualtrics.com/js/forms2/css/forms2.css
Preview:	/* This is used to test if the stylesheet has been loaded yet/.#mktoStyleLoaded {. background-color: #123456;. display: none;.}..mktoForm {. text-align: left;.}..mktoForm .mktoClear {. clear: both;. float: none;.}..mktoForm div,..mktoForm span,..mktoForm label,..mktoForm p {. text-align: left;. margin: 0;. padding: 0;.}..mktoForm input,..mktoForm select,..mktoForm textarea {. margin: 0;.}..mktoForm {. font-family: inherit;.}..mktoForm .mktoOffset {. float: left;. height: 1.2em;.}..mktoForm .mktoGutter {. float: left;. height: 1.2em;.}..mktoForm .mktoFieldWrap {. float: left;.}..mktoForm .mktoFieldWrap .mktoInstruction {. display: none;.}..mktoForm .mktoLabel {. float: left;. line-height: 1.2em;. padding-top: 0.3em;.}..mktoForm .mktoField {. line-height: 1.2em;. font-size: 1em;. float: left;.}..mktoForm .mktoPlaceholder {. float: left;.}..mktoForm .mktoLogicalField {. float: left;.}..mktoForm fieldset {. padding: 0;. margin: 0;.}..mktoForm fieldset legend {.

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (521)
Category:	downloaded
Size (bytes):	1251
Entropy (8bit):	5.43076853772861
Encrypted:	false
SSDEEP:	24:md7pIgWcbMdRKLmOeQSfmFtHXRWYxRWZgRK+uKF69FxPg6F/ysbVFyIF/IFKe+C+:a7phWzRK4ZcVwYxwTlLxg6FKWrSuCMrT
MD5:	CB731CC5C2BD9F31D6BFEB19F3C8B1FF
SHA1:	16ACA1C951A03EDD875B99BB8D04F01FA19104AF
SHA-256:	5206536707C84BAA892D3C3231B351985EE828CB8B9C0BD8DB42CD3363995FC4
SHA-512:	61A3C5029F6AA6D1EA60711B5BFBE4DF989F8EFB1999919B017C5391A537F5D9245E72184298A8DDA85CFCB92ECACAEA34ADC6C485B04C72AB9CF0AB33B0D976
Malicious:	false
Reputation:	low
URL:	https://munchkin.marketo.net/munchkin.js
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: prod r908. */. (function(b){if(!b.Munchkin){var c=b.document,e=[],k,l={fallback:"163"},g=[],m=function(){if(!k){for(;0<e.length;){var f=e.shift();b.MunchkinTracker[f[0]].apply(b.MunchkinTracker,f[1])}k=!0}},n=function(f){var a=c.createElement("script"),b=c.getElementsByTagName("base")[0]\|\|c.getElementsByTagName("script")[0];a.type="text/javascript";a.async=!0;a.src=f;a.onreadystatechange=function(){"complete"!==this.readyState&&"loaded"!==this.readyState\|\|m()};a.onload=m;b.parentNode.insertBefore(a,b)},h={CLICK_LINK:"CLICK_LINK",.VISIT_WEB_PAGE:"visitWebPage",init:function(b){var a;a=l[b];if(!a&&0<g.length){a=b;var c=0,d;if(0!==a.length)for(d=0;d<a.length;d+=1)c+=a.charCodeAt(d);a=g[c%g.length]}a\|\|(a=l.fallback);e.push(["init",arguments]);"150"===a?n("//munchkin-cdn.marketo.

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 41640, version 2.0
Category:	downloaded
Size (bytes):	41640
Entropy (8bit):	7.994688600703867
Encrypted:	true
SSDEEP:	768:1u8OQB6SuM2F/hvb3jXbRwjGv/4d4hqhwZ8zCPI0T4vRw:8hvSj2dhvbjns4AyZlI0T1
MD5:	EAA67020ADED37952836B10604C64D44
SHA1:	AFA644F4375C31B9A223F31830738B122A84BB75
SHA-256:	E360563C7D994BCF643D3812FE233F3CDDCDF3A49343F29E53A9FD1776D1CF38
SHA-512:	2C909A3135078C944E4914F7AA45EE557F2B3158116E1BF647FA5B6332F312B78779CDC9CBC4A3249002E34CF5D0400D678007918AF031791A39593BFC31167B
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/assets/fonts/bento-sans/regular-0623/Benton-Sans-Bold/Benton-Sans-Bold.woff2
Preview:	wOF2..............;....C...........................J..x.`..`..>.(..s........$.6.$.. ..... ..}. ..6[{.....#A.....\.^'.......n.AU2...Z.7.Sn.G.........?7..a..KR..........I..#....R.^Ad..."w[PW..M.r......c....S\P..4...s.!..F.T..5....L...........;.Y.r+f.)h.b..D).....u3l.EW..).ZzS../...>..dSI.E=..jL...4.z>....P.:.[z....Z.6.I..........`..Kx.s..iG.&..4..U2.F.7J.J...1...Sb\|......3.Q.f.Q{."\|.9....t0(.tN..b.../.2jGD8.r.Z^......},...=7a.R......b.-.: ...qD.XQ.../..._..\..i.~..K.=r@A.G.x.....&i..m.B.t!.....\|.l..y.....?.=s.......3...&.7...x.Y4W.,.k..9..o.e.(...!.@..<2..M.Qw..~.g.... .....M...pO.M.Q7L.S..4.P.5....Z.f.lc.."Y.1z...A...2.0.P..Q.....^}.o..{n..l...S@..Y....$.i.K~.......Pl.l.......`.H...Pnv.T.......q........^)...X...X\|.W....&._w.'..kbq.1N...t..fX.b.P.`.".#...!.....w3!R..e..a..a.0~.5..jh.&..C.Sy.......%]...LT..&..Ch....$.Ta...,.[q...f...T[4.U.S &..U)..UDgR..pf.E...a.=.5`>Q.Vx..< K........H...........@`_..h+..82.m%Q....$.-I.....<b..N8u..g..6.=...\.....0...r..

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1309318
Entropy (8bit):	4.542432491629435
Encrypted:	false
SSDEEP:	24576:E2LVwilvS6x/CyFXi2TvOKxXSG5NwGuI1CzHqa/r+WwWLK8qruJXuKY+7yzTO6TN:E2LVwilvS6x/CyFXi2TvOKxXSG5NwGuK
MD5:	70CF4DDBA1C510234A5A9061644260E5
SHA1:	511BAFFAEC28AF4D9436D40F79F4EA98639F86A9
SHA-256:	DA9FDE1D262259BCA5321D481EBA64A84D788E712473811EACE75B57860F63F3
SHA-512:	669C967B6CBE5DBCE854C3EEC1DF1CCDDCFCBA5BE10B30E2EA31C86502BCFBC44F911C644CC4958A52D602874EA5BF5BC23C3C79812CAB105392C933513F0393
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/hreflang-routing/en.json
Preview:	{"/support/website-app-feedback/dx-programs/data-security-privacy-for-digital-experience-analytics/":{"en":"/support/website-app-feedback/dx-programs/data-security-privacy-for-digital-experience-analytics/","uk":"/support/website-app-feedback/dx-programs/data-security-privacy-for-digital-experience-analytics/","au":"/support/website-app-feedback/dx-programs/data-security-privacy-for-digital-experience-analytics/"},"/support/website-app-feedback/settings-tab/intercepts-section/":{"de":"/support/de/website-app-feedback/settings-tab/intercepts-section/","en":"/support/website-app-feedback/settings-tab/intercepts-section/","fr":"/support/fr/website-app-feedback/settings-tab/intercepts-section/","it":"/support/it/website-app-feedback/settings-tab/intercepts-section/","uk":"/support/website-app-feedback/settings-tab/intercepts-section/","au":"/support/website-app-feedback/settings-tab/intercepts-section/","es":"/support/es/website-app-feedback/settings-tab/intercepts-section/","es-la":"/supp

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=10784251;type=rtlnw0;cat=qualt00;ord=1654710653;gtm=45j91e44u1v883492273z86526812z9848816901za200;dc_pre=1;gdid=dYWJhMj;dma=0;npa=0;gcs=G111;gcd=13r3r3r3r5;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=7204&time=1714660405659&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tm=gtmv2
Preview:	{}

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (516)
Category:	downloaded
Size (bytes):	4711
Entropy (8bit):	5.206575266977806
Encrypted:	false
SSDEEP:	48:35Y2zQV4N1wGKIuGcHI2GcNIxGcXMSnGrfGj8GoMwLG5zGhoGGMn/OjnGLOjfGZl:pbzQKN/5RnMBMwIy2MiL7vMwMSM5
MD5:	5069EF5708361EAE44BA7ED2BAB7F3D9
SHA1:	79E8803594F1EC2211257CDC9C241B1D3661B456
SHA-256:	698F4650F49B5DDD8F6DAC88B517EFE5A4A0BA28DD86079E1A8806BA06DF585D
SHA-512:	EA763B300B9844EBDE638B3AD5EE2CB9B7AEF0EBEAE946E7A4DEA581B364118813BAA4D105BDA4726DA116C7DFAFCCF15A501182B2DB3FEB8CB55A12C1072E41
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/igb0ftr.css
Preview:	/. The Typekit service used to deliver this font or fonts for use on websites. * is provided by Adobe and is subject to these Terms of Use. * http://www.adobe.com/products/eulas/tou_typekit. For font license. * information, see the list below.. . input-sans:. * - http://typekit.com/eulas/00000000000000007735b0c8. * - http://typekit.com/eulas/00000000000000007735b0d5. * - http://typekit.com/eulas/00000000000000007735b0d9. * - http://typekit.com/eulas/00000000000000007735b0de. * - http://typekit.com/eulas/00000000000000007735b0ef. * - http://typekit.com/eulas/00000000000000007735b0f3. . . 2009-2024 Adobe Systems Incorporated. All Rights Reserved.. /./{"last_published":"2023-04-04 16:09:11 UTC"}*/..@import url("https://p.typekit.net/p.css?s=1&k=igb0ftr&ht=tk&f=30546.30551.30552.30553.30556.30557&a=134336088&app=typekit&e=css");..@font-face {.font-family:"input-sans";.src:url("https://use.typekit.net/af/c34552/00000000000000007735b0c8/30/l?primer=7cdcb44be4a7db8877f

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 25284, version 1.0
Category:	downloaded
Size (bytes):	25284
Entropy (8bit):	7.992113065174531
Encrypted:	true
SSDEEP:	768:GwrkkZk9ZnSi+O5N9P+WcrOgdhiTNYYQsuLrq:GkzZIZnx+O5/+PagmTNQRrq
MD5:	26F5A0992B68BB38801B08A348288591
SHA1:	4DC2E90E40D35482883AEA5FA535CFA4E15FD392
SHA-256:	386A206AADE080BB0045005CFDBB660430ED46D652039EEF6BC299D54D7C43ED
SHA-512:	AED53F8119118C10E1EF24536E6B4DFCDF06660154D616EA03DAD8457E045F84CDA54C4AA7F2A4D61BBBF8EEC60E1E4082FDDA131F9FA32923C5F39EBC9D3689
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXg.woff2
Preview:	wOF2......b...........bf..........................H.p.`.......e........W..x..6.$..^. .....u.K....d^......\..d..p;.....m......{.d..g%.c8V..S... .r.px.:dJ.&.l..h}G.o?Llh2.. ~...20lD..Pm.a.Y3k....q.sAvH...'.?..g.#/...i.z#...x0..z.u.r-..c<VA%&..U......y.A'q.......\..y._...."l;...c...Zq..~?..Ir.'9D.`<.D....l...!>@..;.S.$..P.].................\V.>...d....6V..A......_3.n..].....AP<..{E...(.P._iiVZ..=..jk..:.m......WUu'.0.Sc;....}).p....5u...Bf^.^...*.O.T..L/...A..+...BE.........,Y2R.N..})0Oc...o...B...S...4.....H..Iw..../.h.2.........@...$....T....E'........(.W?[..#..t.%.#...Nf,+.{......l.b.=...h[.5.t...z..=.....og.B6.O..c..9593...i.....uh...^1$....'x-.b....'Y..R.k.....G......^.k.X.Nr.1.9.z../.sa.{.....E4'...1....\.x..\.+..F...O....e..+g^.1.\|..{.. ..?.e;...K..ryE.W4.......x.d..G kI.......!T.v./.`IP.VX.uyi...J..EY..iJ....Bw.....P'..S.\..Rj.D....U...P.....XC..).lq&<c3g......x.>.&....Q.r.,..q.q...B..H..9'i...u...././H\|6uit.U~..M..v

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	340
Entropy (8bit):	4.964516288558571
Encrypted:	false
SSDEEP:	6:tI9mc4slnLSiMLlCHjcsWVWr2T1TccqjeMU3/YiiEZcC:t4siqCHj1WVSETccQ4/FZcC
MD5:	278C4463AF21A75DF16DE7057D45F702
SHA1:	11EFD48F08C9FE6ADD78278895A71DCB1A11F484
SHA-256:	80EB9B1FB0C08558E6F73F13C5712E879A4D0B240B38FDB299A133F8BCBB4AD8
SHA-512:	7B8319F7879364F5D3139ECB92E6D139D111AD8DA8360E500874E696EC36AF6938023A9885AECDC7082C90EAB24567BB7D9F3B740AB94E4F2FA2DD94D29694A9
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" >. . <symbol id="solid" viewBox="0 0 864 1664">. <g data-name="Layer 2"><path d="M773 4q64 4 91 8v264H707q-86 0-116 36t-30 108v189h293l-39 296H561v759H255V905H0V609h255V391q0-124 48-212T436 46Q521 1 636 0q72 0 137 4z" data-name="Layer 1"></path></g>. </symbol>.</svg>.

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18187), with no line terminators
Category:	downloaded
Size (bytes):	18187
Entropy (8bit):	5.347759003709589
Encrypted:	false
SSDEEP:	384:s40C/Y3uOOpp9W89rzOv4m8Avx2kjEhNgyyuek:VjOOp281UsAlErPyud
MD5:	5C6ED25DCE803FD84288922B8928409E
SHA1:	3CCC10546AE12F160BACAC1E9E422AF091EA4A41
SHA-256:	480B06B23E574B4BF386FDE1A91145A4171F97AEB5EE800E4BE1850F29B1AD91
SHA-512:	FE9265D2E6EA4ACB7E0A87E08BEDFAF48BCBAD62BB7A86E73F9AE21C8437AF3334D2A9733C6BC47A12BBF54F97EC79271CB5300F90231614F407599D1B4C05E5
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wi/ytc.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=0)}([function(e,t,n){"use strict";function r(){if("undefined"==typeof TextEncoder){window.Tex

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 1366x853, components 3
Category:	downloaded
Size (bytes):	118683
Entropy (8bit):	7.745269440549057
Encrypted:	false
SSDEEP:	3072:4HiPDQLdLjmHYHYvPGbQ3l4neNF5jgFOwBhmS:KiPwBvHwcWlZ1wBhmS
MD5:	A11A1950965965B655B8378D6D19591E
SHA1:	D6495212DCEA0FFE9A6F0C948D31705B0DF49DF5
SHA-256:	9D863CC988E205D1713EE57C36FBB82F3FBF9AC9F9AFEBF04E1CA6A04AD91C4A
SHA-512:	2A83F7200EAA1E3885B5BF27195FE39BCEDADED0619F2091DCD9310F41B128DB742EF668961BAC52C986B8AC3BCD8FF0A236DBE348F88CFDE7B5851197D3F1E1
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2020/11/NCDENR.jpg
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................U.V.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(.......?m.z..;I.....O...a.6&..p\.o......A....U.*:t...../....F.y.~.Q^w...N.........Gt.].l....B.....R...J..%JN.Vh.5%t.QE@.j..o......t.GO.%....oq.....E%YO.{.k.Z......3.;S......^2.j.....>...zeS.Rg.gx.^....%...W....=k..)..}.C...1.

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7567), with no line terminators
Category:	downloaded
Size (bytes):	7567
Entropy (8bit):	5.326389886187007
Encrypted:	false
SSDEEP:	192:prZ2ZVjZa09TmXWToFpBdKAh2Fppdt9jImm6J2F/q:prZ2ZVjZaKTmXWToHBdKAh2FppdDkmmc
MD5:	4862C87E0DF637869C7DF8395202758F
SHA1:	982882B772A55B79664FC4CD4C5F959A21486DCA
SHA-256:	C305DB8BBF0452E04AE20E49774FCEC074D4CD90B456C2C968BA558A396119DC
SHA-512:	6D79731A716B4FEA6C83368293334E3E811B6EEF10B2C27E15B63950676612C8F47BD5E3C030151C120F87EC06774EDA1F9612C4BF2AA55B8CF9B13F7C716D76
Malicious:	false
Reputation:	low
URL:	https://client-registry.mutinycdn.com/mutiny-client/4.5.3.4.js
Preview:	(window.mutinyWpJsonp=window.mutinyWpJsonp\|\|[]).push([[4],{28:function(e,n,t){(function(r){n.log=function(...e){return"object"==typeof console&&console.log&&console.log(...e)},n.formatArgs=function(n){if(n[0]=(this.useColors?"%c":"")+this.namespace+(this.useColors?" %c":" ")+n[0]+(this.useColors?"%c ":" ")+"+"+e.exports.humanize(this.diff),!this.useColors)return;const t="color: "+this.color;n.splice(1,0,t,"color: inherit");let r=0,s=0;n[0].replace(/%[a-zA-Z%]/g,e=>{"%%"!==e&&(r++,"%c"===e&&(s=r))}),n.splice(s,0,t)},n.save=function(e){try{e?n.storage.setItem("debug",e):n.storage.removeItem("debug")}catch(e){}},n.load=function(){let e;try{e=n.storage.getItem("debug")}catch(e){}!e&&void 0!==r&&"env"in r&&(e=r.env.DEBUG);return e},n.useColors=function(){if("undefined"!=typeof window&&window.process&&("renderer"===window.process.type\|\|window.process.__nwjs))return!0;if("undefined"!=typeof navigator&&navigator.userAgent&&navigator.userAgent.toLowerCase().match(/(edge\|trident)\/(\d+)/))return

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1722 x 1731, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1899601
Entropy (8bit):	7.987703262483573
Encrypted:	false
SSDEEP:	49152:sjxefjTesodIXbO4pyWEGnSBqUsQNgv/iHeOnqG1H:sjkfesOILBpmGnvUstHOnqyH
MD5:	745B4209062538ADE29D9E352BCB0325
SHA1:	F8332762CB03DFFD91E3607AE376383225DB53BB
SHA-256:	4FD10E7921F7A327ABCB0BDE1C313C10C979A6ABC320D2983978A13EFEDA3752
SHA-512:	29A7502E3ECA8F60464350F5B956D030D3E91937F6C25C76DE0E875DE3EC5B216C654C3FEAF215FA2D095D560A14C7C58A5D1F35C3A14E2FF79B476446974383
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............F... .IDATx....$YY.Y.....M3..0.....8..,.,..,.e...a.E...T......~....U..^....eAXDE>.cD.E.ED.EdG`YD.f..*3.....DDVeUWuWUgd..;.8q.._d.....=1.L&.&.@...... ...@...... ...@...... .....J.:L.!...@...... ...@...... ...@...... `..]\|. ...@...... ...@...... ...@......zI......NC...... ...@...... ...@...... ... t..... ...@...... ...@...... ...@....%...^.6:...@...... ...@...... ...@...... ...w...... ...@...... ...@...... ...@.....zy..4. ...@...... ...@...... ...@.....B....@...... ...@...... ...@...... ..^.@...i...... ...@...... ...@...... ...@...]\|. ...@...... ...@...... ...@......zI......NC...... ...@...... ...@...... ... t..... ...@...... ...@...... ...@....%...^.6:...@...... ...@...... ...@...... ...w...... ...@...... ...@...... ...@.....zy..4. ...@...... ...@...... ...@.....B....@...... ...@...... ...@...... ..^.@...i...... ...@...... ...@...... ...@...]\|. ...@...... ...@...... ...@......zI......NC...... ...@...... ...@...... ... t..... ...@...... ...@...... .

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	680
Entropy (8bit):	5.212188142347695
Encrypted:	false
SSDEEP:	12:TM37N+4q/KYmHn5EBcztVanbvEAVVV/HiFbMT5SYEbj:o+4qLmuczsNVVRilMT5Sdj
MD5:	DC71821FB60D5CAF45F1A84C23CFEF46
SHA1:	D659C80F45BFE85E8EF83B2BDD389730000FC59E
SHA-256:	DA3BCB30FD003134E3B6F4EE6ACC8DAE53F462FEC4B3D3896BD7FFB3DD3A6B5B
SHA-512:	88DE93E70D467B99E16EDE6131416A582C8424C0859A1075D8906F38E43FE9DC51E139050C53044FB4DFB8CD1E07C2CD40B75FB8A30DA39DEECDFB925F2001E7
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2019/10/facebook_3225194.svg
Preview:	<?xml version="1.0" ?><svg id="Layer_1" style="enable-background:new 0 0 1000 1000;" version="1.1" viewBox="0 0 1000 1000" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><style type="text/css">...st0{fill:#3B579D;}...st1{fill:#FFFFFF;}.</style><title/><g><path class="st0" d="M500,1000L500,1000C223.9,1000,0,776.1,0,500v0C0,223.9,223.9,0,500,0h0c276.1,0,500,223.9,500,500v0 C1000,776.1,776.1,1000,500,1000z"/><path class="st1" d="M630,1000V612.7h130l19.5-150.9H630v-96.4c0-43.7,12.1-73.5,74.8-73.5l79.9,0V157 c-13.8-1.8-61.3-5.9-116.5-5.9c-115.2,0-194.1,70.3-194.1,199.5v111.3H343.8v150.9h130.3V1000H630z" id="f"/></g></svg>

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	4.083787502988387
Encrypted:	false
SSDEEP:	192:jbTZ68RzF5YvWFSP8A7hPoPRtvrkQ082/0dR8j/kS:jXBnFSP8A7hALT+8w0ksS
MD5:	4C57ECDBD4E739C83E3470D97798EAF9
SHA1:	B3E1EC28D462156C390A0F75FFB8AAF2F66135C1
SHA-256:	3497C4DDD7998BEBF648DC4F6BA594370D2565AB81C091E14EFF8EDE4A8AE192
SHA-512:	CF83A529A9AAC9FD8C1E4BBF329285044ABE40CE01EA5EFF0CFBF30D2E5477E697958859ADBF882ADB167E727628DBB219E75B846FC243450A4E01FE5F1A21B9
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/favicon.ico?v=1
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 10952, version 1.0
Category:	downloaded
Size (bytes):	10952
Entropy (8bit):	7.980824912186192
Encrypted:	false
SSDEEP:	192:h0DSCfiM4tVZF/JemE27uR64XRzr3VauTxIQO1RV0g3/zr4kRQJdYG:WDtgv/JCQC6kRzDVaUxIQO1R/zrbQJWG
MD5:	9A1D9132DBB2F04BEC656FF1AD91BB9C
SHA1:	4A7E206A60EC27A610C02439538446A91A45D48B
SHA-256:	55A511DC9D7EEE7C667D558D109678FD98BE366D3B70F19FA097FFB19647425C
SHA-512:	6D7F57E2A7B7490F51C072B9FCC4C43E987875E245BFF340D3E4BDF5550C532FCCF87822E61AE021C21EBA4F7774E23777AF308D6EE376462D9CA1342A67FC97
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFQ.woff2
Preview:	wOF2.............a4..v.............................`..x.....{..@..6.$..\|. ..T....O5.Ux...i..(..>...$pc.V._8.HQ...PWOk^......'......8...X".'._d....j....Wz]..s.S.>pnh.>n.U..c..?....Ory........I..Np2B.U..".$}.m....I.Y...1&j.D......;........4).......d.l#6X............W.z@..j.L..2...l...k.<....J...:........L.b.r. .e..;...K).:.XY.a....2....0..1..Z.E....v.W.p).U.GO<..X......Zm..O.....?..>...n....Q...v...]..H.,..,..e...\|... k.r..f}...n.....i.}...E..ibC.y...\|..H5].e..N...B..\|.,R..J]..m...b..C..........!\|...K....Q.#R..8.,Ux..(h...k.T.......:..e...A.J4.,..:..4RZT.zs...t.N.6.rQ.X\.4.{..h.X<3.\|....1....Zd1.8..LO>4.........l.N...%.4E.#......1.hG.;......n'...$&-.0..5....=^S.U.HI....G./A.sc....yv...9..Qf..........g's.k.[.[.[.[.[.[.."o.W.....7.\....).~.`-..:r.;.7....u&...Y..=.,.+..,.t.G..2....:.#....:...(..w.....d.ed...s.Z.../.\|./VTC..S....3j....)e5:W....I...Q.S=j...i.P....W.:zK..I....U...i.h....t.Du....91.......S.u...Z.Dz.K.z..tb;....

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5711)
Category:	downloaded
Size (bytes):	8718
Entropy (8bit):	5.512367113738345
Encrypted:	false
SSDEEP:	192:0bm5FmM4WVUcEDTAs7tfPfcifjfTfjfdfMxEfMm14jS314jSCjSfKjSRUfzjWOfP:0QyH/jTjhwky73OSUUffWOf4df1zLfPO
MD5:	C4DD3AF9F2E5136186C4947757AB1867
SHA1:	1BCAAB6EA6A1193A0DD436F62CA3E33CDC2EE2E5
SHA-256:	740598DD69C9C6A746E7D18CB2D52794965AF36CB7857BE874C58C54EEECAFB1
SHA-512:	7F949111BC819EAEACBE94126295377505498F207A0856CB619035EF6FA04EA82085C346D0C43C2CDA87D6EF8A05651152ECDF068D198060E79BDCD79663A96A
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/assets/dist/css/language-routing.css?v=3
Preview:	.q-lr-diagnostic{background:#fff;left:10px;top:150px;font-size:12px;position:fixed;z-index:2000000;border:none;box-shadow:0 1px 8px 0 rgba(0,0,0,.2),0 2px 16px 0 rgba(0,0,0,.1);transition:all 500ms ease;width:350px;max-width:98vw;border-radius:0;height:auto;max-height:calc(100vh - 160px);overflow-y:auto;overflow-x:hidden;display:none;font-family:sans-serif !important}.q-lr-diagnostic *{font-family:sans-serif !important}@media(min-width: 320px){.q-lr-diagnostic{display:block}}.q-lr-diagnostic a,.q-lr-diagnostic a:hover,.q-lr-diagnostic a:active,.q-lr-diagnostic a:visited,.q-lr-diagnostic a:focus{color:inherit;text-decoration:underline}.q-lr-diagnostic h3{margin:0;margin-top:10px;padding:10px;border-top:1px solid #666}.q-lr-diagnostic.minimal{color:transparent;width:50px;height:50px;overflow:hidden;box-shadow:none;cursor:pointer;background:#fff}.q-lr-diagnostic .row{pointer-events:none;box-sizing:border-box;margin-left:10px !important;margin-right:10px !important;padding:5px 10px}.q-lr-d

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2500)
Category:	downloaded
Size (bytes):	2553
Entropy (8bit):	5.180744359619404
Encrypted:	false
SSDEEP:	48:EdLr5iN5QO9LY2EDd1t2Tjr4Q5lGW62ClFsZqzWvNIqPZLBqXBx:Edv5ikO9CDdYtA72CEZGWVrhq
MD5:	8F2CA666A110FB2C86D7F0C7DD52F2F6
SHA1:	94BD154D994ACCAC0B54E9563D4E13D2F051000C
SHA-256:	CFF8BFB4FFAE5CC5621A63BD4EB6FE74D1FE29EAEE67F33C95A3E198E126C1BC
SHA-512:	52CB090561CD98D8CC0200C7F6B277902046C1375268FE6A8CC9082EF10E180C859F2E9BC1979671F5DCA7E92BC715B3A14F72266CE65256785A62DAED6647DF
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/assets/dist/js/modules/internal-library-2023-08.js
Preview:	!function(){"use strict";class t{static getLocationDataFromEndpoint=async()=>{let t="https://www-api.qualtrics.com/www-api/geoip";location.hostname.includes("dev")?t="http://localhost:8080/www-api/geoip":location.hostname.includes("wordpressstaging")&&(t="https://g1-cmh.qualtrics.com/www-api/geoip");let e={status:!1,result:null,error_message:""};try{const a=await fetch(t),o=await a.json();o&&null!=o&&o.success&&(e.status=!0,e.result=o)}catch(t){e.error_message=t.message}return e};static getLocationData=async()=>{const t={success:!1,iso_code:""},e=Date.now(),a=t=>{t.created=e,t.expires=e+6048e5,localStorage.setItem("geo_location_data",JSON.stringify(t))},o=()=>(async()=>{const e=await this.getLocationDataFromEndpoint();return e&&null!=e&&e.result?a(e.result):a(t),e})();let i=JSON.parse(localStorage.getItem("geo_location_data"));return null===i\|\|e>i.expires?(await o()).result:i}}t.getLocationData();class e{static get breakpoints(){return{sm:576,md:768,lg:992,xl:1200}}static getSiteSlugLa

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	92950
Entropy (8bit):	5.280681893335927
Encrypted:	false
SSDEEP:	1536:Tv4qCtkOKAaNsZ9eCdYfBk2aDSIJh1OME3974yHCT2BPsy7lEv5Tn/OYVen90v7w:ikOVBRrbOlYc
MD5:	4B85E8FDE846E3B0C6768F10B2E6D57D
SHA1:	C9606290013494AFF78CE243C764ED3F705C16A5
SHA-256:	664392B2A9DC49E3610139682CA109F60A3D6F1ADF123F06C9955BE6F5556C3A
SHA-512:	2732FDE32C07EE928329A602C18F102F5F1D48257F91022D2E80037B7BE02441CB51EDA0546A7C4E720C2E39DD72006669ADFDEA6BD47A547C52386FE22198D6
Malicious:	false
Reputation:	low
URL:	https://ncsu.qualtrics.com/jfe/static/dist/c/prototype.4b85e8fde846e3b0c676.js
Preview:	webpackJsonp([38],{789:function(t,e,n){var r,i;r=[n(3),n(790)],void 0!==(i=function(t,e){"use strict";function n(e,n,r){for(var i=function(){return t.info("Prototype global",n.getSM().SurveyID,r),e.apply(this,arguments)},o=Object.keys(e),s=0;s<o.length;s++)i[o[s]]=e[o[s]];return i}return function(t,r){for(var i in e)"function"==typeof e[i]?r[i]=n(e[i],t,i):r[i]=e[i]}}.apply(e,r))&&(t.exports=i)},790:function(module,exports){(function(){function $A(t){if(!t)return[];if("toArray"in Object(t))return t.toArray();for(var e=t.length\|\|0,n=new Array(e);e--;)n[e]=t[e];return n}function $w(t){return Object.isString(t)?(t=t.strip(),t?t.split(/\s+/):[]):[]}function $H(t){return new Hash(t)}function $R(t,e,n){return new ObjectRange(t,e,n)}var Prototype={Version:"1.7.1",Browser:function(){var t=navigator.userAgent,e="[object Opera]"==Object.prototype.toString.call(window.opera);return{IE:!!window.attachEvent&&!e,Opera:e,WebKit:t.indexOf("AppleWebKit/")>-1,Gecko:t.indexOf("Gecko")>-1&&-1===t.indexOf(

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	65577
Entropy (8bit):	5.370046563081075
Encrypted:	false
SSDEEP:	384:scUCEARxwj1DI7VAEWDSskFL/Rvqt7svi41wlQrpagwXt8ekZgtCxrHH2Orv5ZK4:scN+DUAE0jd7szpaRa+yHHNA9P4F
MD5:	BDBC97044A366414844A93EA65E5AF02
SHA1:	FB8CF2BA7159A1B6D5E5D639309D2B1D9D37A587
SHA-256:	97844014791E7702E498AF1B54139D615FC5A34F9B47CCA8DD9D3CCE6F645BDA
SHA-512:	A819FB8852BF531F14A1CE82F053A3B55B861A551ED5BCDDCDCE7AB6BD0FE74DB6D2D1554AC3C499962570F68A33FEFDFCD693DF193075541B56776FBFA154FD
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202401.2.0/assets/v2/otPcPanel.json
Preview:	. {. "name": "otPcPanel",. "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY1BhbmVsIG90LWhpZGUgb3QtZmFkZS1pbiI+PGRpdiByb2xlPSJhbGVydGRpYWxvZyIgYXJpYS1tb2RhbD0idHJ1ZSIgYXJpYS1kZXNjcmliZWRieT0ib3QtcGMtZGVzYyI+PCEtLSBQQyBIZWFkZXIgLS0+PGRpdiBjbGFzcz0ib3QtcGMtaGVhZGVyIj48ZGl2IGNsYXNzPSJvdC1wYy1sb2dvIiByb2xlPSJpbWciIGFyaWEtbGFiZWw9IkNvbXBhbnkgTG9nbyI+PC9kaXY+PGJ1dHRvbiBpZD0iY2xvc2UtcGMtYnRuLWhhbmRsZXIiIGNsYXNzPSJvdC1jbG9zZS1pY29uIiBhcmlhLWxhYmVsPSJDbG9zZSI+PC9idXR0b24+PC9kaXY+PGRpdiBpZD0ib3QtcGMtY29udGVudCIgY2xhc3M9Im90LXBjLXNjcm9sbGJhciI+PGgyIGlkPSJvdC1wYy10aXRsZSI+WW91ciBQcml2YWN5PC9oMj48ZGl2IGlkPSJvdC1wYy1kZXNjIj48L2Rpdj48YnV0dG9uIGlkPSJhY2NlcHQtcmVjb21tZW5kZWQtYnRuLWhhbmRsZXIiPkFjY2VwdCBBbGw8L2J1dHRvbj48c2VjdGlvbiBjbGFzcz0ib3Qtc2RrLXJvdyBvdC1jYXQtZ3JwIj48aDMgaWQ9Im90LWNhdGVnb3J5LXRpdGxlIj5NYW5hZ2UgQ29va2llIFByZWZlcmVuY2VzPC9oMz48ZGl2IGNsYXNzPSJvdC1wbGktaGRyIj48c3BhbiBjbGFzcz0ib3QtbGktdGl0bGUiPkNvbnNlbnQ8L3NwYW4+IDxzcGFuIGNsYXNzPSJvdC1saS10aXRsZSI+TGV

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2365
Entropy (8bit):	4.36460117289377
Encrypted:	false
SSDEEP:	48:1YllN2WXd+A9WXV9AZdid2iI/d3JIk0LMIZX8s+Z92NafFwg:ibN2WXdh6CZdidDCd+k96XR+Zsc/
MD5:	2D690148F0CD6B4831DD1936560950F3
SHA1:	7FA42A4B873BBB836DE1036730EC37659A820D1E
SHA-256:	999A36D8E3B2FBD3CD444FFC17BACE41C54DD37DAE43E63C0224F4AF002FEE89
SHA-512:	20C961857E6396922B6B83CD96E6B7ECBF64B3C726A561A0602CE9BAF78292962F6C17A2B7F258606C8500934852D251A7A9664474346E46E8EB6C0F587F87BD
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/assets/dist/svg/display/organization.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <symbol id="solid" viewBox="0 0 2154.08 2048">. <title>Asset 1</title><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path d="M1865.08,1845q-39,0-78-19a221.34,221.34,0,0,0-84,60q-35,40-46,89h416q-8-48-44-88a236.54,236.54,0,0,0-87-61Q1904.09,1845,1865.08,1845Zm-790,0q-38,0-78-19a219.72,219.72,0,0,0-85,60q-35,40-45,89h416q-9-49-45-89a228.13,228.13,0,0,0-86-60Q1113.08,1845,1075.08,1845Zm-791,0q-39,0-78-19a221.34,221.34,0,0,0-84,60q-35,40-46,89h416q-9-48-44-89a205.59,205.59,0,0,0-86-60Q323.08,1845,284.08,1845Zm1474-185q0,46,33,80,33,32,79,32t78-34q32-32,32-78t-32-78q-32-32-78-32t-79,32Q1758.08,1614,1758.08,1660Zm-569,0q0-46-32-78t-78-32q-46,0-79,32t-33,78q0,46,34,80,32,32,78,32t78-34Q1189.09,1706,1189.08,1660Zm-791,0q0-46-32-78t-78-32q-46,0-79,32-32,32-32,78t32,80q32,32,80,32,46,0,78-34Q399.09,1706,398.08,1660Zm1756,351a35.52,35.52,0,0,1-11,26q-11,11-26,11h-499q-15,0-26-11t-11-26q0-69,40-133t104-102q-40-

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14703), with no line terminators
Category:	downloaded
Size (bytes):	14703
Entropy (8bit):	5.2971577862776735
Encrypted:	false
SSDEEP:	384:Kfa/StpdWlIvU3r+ekod5JN8W6cwjEKznBhCbHKLA9cy0Cbl:1rIvhoL8W6cwwKmTR
MD5:	8518510C6333E45DE8E8312996FED693
SHA1:	847C3885FB25FE17CB0188DD3FC1B18BB7FAEDCB
SHA-256:	45B9204050B30E61A70E281B36D828B7A235AB0E6FD0EFD0D4B3E3C93A5D9143
SHA-512:	FEFED5592F68C1CE04B2180C1FBE62B1459E504D0C8325F240AA3401AA0E3661C4FF6ADA7E44936AEA2CF513905EBFCE0C4740A7D855469C23DFB7652063AA1B
Malicious:	false
Reputation:	low
URL:	https://ncsu.qualtrics.com/jfe/static/dist/c/jsApi.8518510c6333e45de8e8.js
Preview:	webpackJsonp([29],{215:function(module,exports,__webpack_require__){var __WEBPACK_AMD_DEFINE_ARRAY__,__WEBPACK_AMD_DEFINE_RESULT__;__WEBPACK_AMD_DEFINE_ARRAY__=[__webpack_require__(4),__webpack_require__(0),__webpack_require__(2),__webpack_require__(1),__webpack_require__(788),__webpack_require__(19),__webpack_require__(3),__webpack_require__(68)],void 0!==(__WEBPACK_AMD_DEFINE_RESULT__=function(Promise,dejavu,utils,$,QBuilder,Qualtrics,log,publicED){"use strict";return function(Page,$window){var prototypePromise=Page.getPageTemplate().getFeatureFlag("JFE_BlockPrototypeJS")?Promise.resolve():Promise.resolve(__webpack_require__.e(38).then(__webpack_require__.bind(null,789))).then(function(prototypeLoader){return prototypeLoader(Page,$window)});return $window.Qualtrics=Qualtrics,utils.deepMixIn(Qualtrics,{Browser:{IE:!(!$window.attachEvent\|\|$window.opera),Opera:!!$window.opera,WebKit:navigator.userAgent.indexOf("AppleWebKit/")>-1,Safari:navigator.userAgent.indexOf("Safari/")>-1,MobileWeb

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 450 x 450, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	227378
Entropy (8bit):	7.969104215068005
Encrypted:	false
SSDEEP:	6144:1OIGjfxUCjFr04aXfLUGs9IzeMeS47IMoHqR:wfrJrDgAGv5Xva
MD5:	E5F75A2F4677BC5F5882566631FEB16A
SHA1:	5BFFBEE493568D3B1E2D0805287142C81A39E2E0
SHA-256:	55F01C7A0213E3B0AE82225D9F93DFA6C8BDF64AA414348456DD0FE7B64CB2EE
SHA-512:	46C6D53A3B8337C336AF5301FB941E6CE482B8E57A3CE9832BC05B4182FB6B24791942609D901B227372057E98C6AEA45C779CA85CD0031734358E0CD1E1B42F
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2017/03/leafy-background-25.png
Preview:	.PNG........IHDR.............\|..E....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.2-c001 63.139439, 2010/10/12-08:45:30 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/". xmpRights:Marked="nurrka/123RF". xmpRights:WebStatement="nurrka/123RF">. <dc:rights>. <rdf:Alt>. <rdf:li xml:lang="x-default">nurrka/123RF</rdf:li>. </rdf:Alt>. </dc:rights>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>. . .

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3928)
Category:	downloaded
Size (bytes):	3929
Entropy (8bit):	4.827087998939052
Encrypted:	false
SSDEEP:	48:srG/YxGqarG/YxGqZrc/Sxcq6ra/ExaqLrnnJq/nnixnnJqqnnJSrO/wxOq9rS/q:8kHWfRXp2HGxha
MD5:	A5A46E400955B94F456FAFE891125005
SHA1:	3F083D0D593557DCFA1B971690637C3B8C18EC58
SHA-256:	8C99AF32F6791187242FBD58328D2ADEE32B895F6450011E08BDE5180425CAAF
SHA-512:	39E78B08961A7A5C4B04137D054C78D37A29DBA690DD71C7A1035D18A89C77DD41FFD44999AB3D188D0E574F1D2F59BF4DE5432F7393E52418A0B92BB1675FD4
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/assets/dist/css/fonts.css
Preview:	@font-face{font-family:"benton-sans";src:url("../../fonts/bento-sans/regular-0623/Benton-Sans-Thin/Benton-Sans-Thin.woff2");src:url("../../fonts/bento-sans/regular-0623/Benton-Sans-Thin/Benton-Sans-Thin.eot") format("embedded-opentype"),url("../../fonts/bento-sans/regular-0623/Benton-Sans-Thin/Benton-Sans-Thin.woff2") format("woff2"),url("../../fonts/bento-sans/regular-0623/Benton-Sans-Thin/Benton-Sans-Thin.woff") format("woff");font-style:normal;font-weight:100;font-display:swap}@font-face{font-family:"benton-sans";src:url("../../fonts/bento-sans/regular-0623/Benton-Sans-Thin/Benton-Sans-Thin.woff2");src:url("../../fonts/bento-sans/regular-0623/Benton-Sans-Thin/Benton-Sans-Thin.eot") format("embedded-opentype"),url("../../fonts/bento-sans/regular-0623/Benton-Sans-Thin/Benton-Sans-Thin.woff2") format("woff2"),url("../../fonts/bento-sans/regular-0623/Benton-Sans-Thin/Benton-Sans-Thin.woff") format("woff");font-style:normal;font-weight:200;font-display:swap}@font-face{font-family:"benton

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	69
Entropy (8bit):	4.057426088150192
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHWiR8HopHW4OE9HsuXU9WyRHfHyY:YGKed2pHD5YEl5k9zyY
MD5:	B04CD3F8043EF04F417D4B0E4BCBBC03
SHA1:	88F259A4AE3045409B3657E7D7A791D321BA9DCE
SHA-256:	59E58524340CD7AD353BE010374B124C242FDDE10A0ED41047FE2FD4BB9E5A2E
SHA-512:	A285C493B939D2A165D80F87FC830F5D02AFCC7A8EA1C5CAF9CAA87ABD286F1C98598FFD83023044BDB23D344C60EEF6A6C4BFEDEDD42A4297A0AC09E22FA5B2
Malicious:	false
Reputation:	low
URL:	https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Preview:	{"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1107), with no line terminators
Category:	downloaded
Size (bytes):	1107
Entropy (8bit):	5.064499259121075
Encrypted:	false
SSDEEP:	24:ckXmIN5yE/9ga/9Wp9ifa+6rXaa2Rb9Wpq9WVVocDMMPK9AV1pApDn:O+9gw9WPiS+62aa9WE9WVIMPKoP6D
MD5:	8A5C9689AE636C452B6808740BA04136
SHA1:	8D2C85D7779D00C12AEB6B55A99443952D9A144E
SHA-256:	79CB399203843F65199BEC32BC4ABAC5DFD20F141D3E4EC1424BF00C7108FA45
SHA-512:	A80491B5C34E4719B042D1EF0DC8CFF0E2AD29343AC8926A3CAB36202B02DC360000B430B3141E474FE08BFFC54329EB47082D530AF6B44727490C4CD0F0ED0C
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.5.2
Preview:	!function(e,n){e.wp=e.wp\|\|{},e.wp.mediaelement=new function(){var t={};return{initialize:function(){var e=[];(t="undefined"!=typeof _wpmejsSettings?n.extend(!0,{},_wpmejsSettings):t).classPrefix="mejs-",t.success=t.success\|\|function(e){var t,n;e.rendererName&&-1!==e.rendererName.indexOf("flash")&&(t=e.attributes.autoplay&&"false"!==e.attributes.autoplay,n=e.attributes.loop&&"false"!==e.attributes.loop,t&&e.addEventListener("canplay",function(){e.play()},!1),n)&&e.addEventListener("ended",function(){e.play()},!1)},t.customError=function(e,t){if(-1!==e.rendererName.indexOf("flash")\|\|-1!==e.rendererName.indexOf("flv"))return'<a href="'+t.src+'">'+mejsL10n.strings["mejs.download-file"]+"</a>"},void 0!==t.videoShortcodeLibrary&&"mediaelement"!==t.videoShortcodeLibrary\|\|e.push(".wp-video-shortcode"),void 0!==t.audioShortcodeLibrary&&"mediaelement"!==t.audioShortcodeLibrary\|\|e.push(".wp-audio-shortcode"),e.length&&n(e.join(", ")).not(".mejs-container").filter(function(){return!n(this).parent(

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65268), with CRLF line terminators
Category:	downloaded
Size (bytes):	138474
Entropy (8bit):	5.214308445010487
Encrypted:	false
SSDEEP:	1536:Dj2qhgxfeiEWfGcqi2Z40K8ZrVl3X1iiSsWRLK7A3dzaKBjY4vHgZsUOU7eBWqBd:uZGcoUsrjFsNaKi+HgZsUOUyBWqE3WEo
MD5:	1E4E23B6992B571D42FC629FE71E66EB
SHA1:	1F98A44ACCF14F93B6FF84733C45B68D01DEBE17
SHA-256:	0A75AA5BAB9865958CD01D39856DC37E96491296EF55F5D2FDCE2915B1EA1C58
SHA-512:	482DE003CC1F7D8A132C2280C1670CD5E982FE44F16FFC6E46FB772CA64AF0D3C77AFC35907FC1D0A663C9FD2EFE03FCD3EDC112206DD7FF026BF6000396B8C1
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/plugins/dg-blog-carousel/scripts/swiper.min.js?ver=5.2.1
Preview:	/*.. Swiper 5.2.1.. * Most modern mobile touch slider and framework with hardware accelerated transitions.. * http://swiperjs.com.. .. Copyright 2014-2019 Vladimir Kharlampidi.. .. Released under the MIT License.. .. Released on: November 16, 2019.. */....!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e=e\|\|self).Swiper=t()}(this,(function(){"use strict";var e="undefined"==typeof document?{body:{},addEventListener:function(){},removeEventListener:function(){},activeElement:{blur:function(){},nodeName:""},querySelector:function(){return null},querySelectorAll:function(){return[]},getElementById:function(){return null},createEvent:function(){return{initEvent:function(){}}},createElement:function(){return{children:[],childNodes:[],style:{},setAttribute:function(){},getElementsByTagName:function(){return[]}}},location:{hash:""}}:document,t="undefined"==typeof window?{document:e,navigator:{us

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 420 x 646, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	22918
Entropy (8bit):	7.7509320043850165
Encrypted:	false
SSDEEP:	384:cAAAVZlpN/ojkBsrfjJ7CoaJGmDXU1Su+X5DUn5f/UvC+7NSnxyqjRP:cAAAPdojQifMoBl4uawn5XUvFRSxh
MD5:	50E29C612AF2D9A63324CAE2E4755D7B
SHA1:	56FF35530543FC868B12668A3DC02316756D13A5
SHA-256:	27AB158FAF12F35AAECE4AC9B2D90A51170D5A86CFAEAB119D21291DDCAF9A25
SHA-512:	421D559AEECC5B58343941CAA0FE915B39CD2D8BE11C50CB0C3351471136258C58D68CCD81B820BDAFCE1AE3F4FBED199E254D1B7C91AD9189213A29CC06CC1C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................pHYs...#...#.x.?v.. .IDATx....UU..7..M.I.LI.5P.)%o...$.X^PFgt....KoE.;E.x.F.7.14)E.,/..e^.. .B../%......y.w...>...Z..u.:..Y...}Y....}.w..^.........:2.A.......D`.A..J.Vl.<.M6.,. ...@ ..E#....... .... H!..6@....@. ..@....@.... ..# ...@.A..... .. . HA..F@.......3...@..A.@..(..... ....g....... . .Q.....@....... ....A.o#V..=..`.... ...!0v.E.9........ .....qB.....3...... ...@......U... ..g...32.@...............@.....$gd.... .....$.T......... H......@..>. H>..'. ...8.@..........\|.@.\|P%N.@...p&. 9##.. .... . ..J..... .L.ArFF..@....A.A.A.8!...@.......... .....qB.....3...... ...@......U... ..g...32.@...............@.....$gd.... .....$.T......... H......@..>. H>..'. ...8.@..........\|.@.\|P%N.@...p&. 9##.. .... . ..J..... .L.ArFF..@....A.A.A.8!...@.......... .....*qB.....3...... ...@......U... ..g...32.@...............@.....$gd.... .....$.T......... H......@..>. H>..'. ...8.@..........\|.@.\|P%N.@...p&. 9##.. .... . ..J..... .L.ArFF..@....A.A.

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	7
Entropy (8bit):	1.950212064914747
Encrypted:	false
SSDEEP:	3:Sn:S
MD5:	D97623D172F087D9640DA9ACD38830FF
SHA1:	515BD358BB7D990930F0E2B3DE399DB1787A2567
SHA-256:	FE04A9DC88D3F3BE8D4F6BC63A9A80F45A4C6D8460E7551DAB849457C091920A
SHA-512:	CE6A1969F698A616663F1A19CCFA12A37A4F6D782432D8A08AEB7879EFD3E2BECF168422EA66BC47E74F6BA865EFAAE6EABE3C4FABA280D7A21F3A94D7C55DA1
Malicious:	false
Reputation:	low
Preview:	<p></p>

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	704
Entropy (8bit):	4.467224780702796
Encrypted:	false
SSDEEP:	12:t4G3FoMQeCPNrkSUA9O5XILQhRva4zC2uUbLCqTtlDLXvdXy9roLu4z2oQXpo3C:t4G1oMQeCPt4A9eXIkh1xduUvCqBljvc
MD5:	D409F4BCB69C131F7BCC29918705B037
SHA1:	D02EB464378B7D10FE8ECC2EE0C6BF0C5A43FC7C
SHA-256:	019E3B4FDA66C889C18A7C12EE38D11E22B6AEDC5B6E106999308D47F770CE09
SHA-512:	0F0BFE8B241A2C8DC5DF6436C58D68EB14ED434D4D31B666DA7172D7D4965707EF762D687FDB0D2443D94B41F5127E4A81C8A45AF9F93A279240280DD5F19154
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/assets/dist/svg/customer/volkswagen.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <symbol id="solid" viewBox="0 0 162.95 162.95">. <path fill-rule="evenodd" d="M81.48 0A81.48 81.48 0 1 0 163 81.48 81.48 81.48 0 0 0 81.48 0zm0 14a67.55 67.55 0 0 1 19.81 3L81.48 61.45 61.68 17a67.43 67.43 0 0 1 19.8-3zM14 81.48a67.47 67.47 0 0 1 3.2-20.56L53.74 143A67.48 67.48 0 0 1 14 81.48zm67.47 67.46A67.76 67.76 0 0 1 61.68 146l19.8-44.49L101.29 146a67.55 67.55 0 0 1-19.81 2.94zm10-65.08H71.52l-13.14 29.48-31.71-71.21A67.88 67.88 0 0 1 46.8 23.6l24.72 55.49h19.91l24.74-55.49a67.81 67.81 0 0 1 20.11 18.53l-31.7 71.19zm57.51-2.38A67.48 67.48 0 0 1 109.21 143l36.54-82.07a67.47 67.47 0 0 1 3.19 20.55z"></path>. </symbol>.</svg>.

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 850 x 440, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	39487
Entropy (8bit):	7.923457763265759
Encrypted:	false
SSDEEP:	768:KY/c0WUACmYdkzyAL8O5FNf6LIliwEGszNxbSNDFwRHDEreGX7gb:K953jpf6LIlft6NpVRHI7K
MD5:	E2646C9BFD2D4561536949D5530EDD59
SHA1:	AC9BC66F0E531DFEF8F3A6ADF91F6B451594C519
SHA-256:	F36EB54C8CC0F3C710E44A9B8B8F9B8AA532FB9979C748F5022908A7CD4C126E
SHA-512:	31A4A6E0BE72522405FF0AAEC785A9F6287017B13F82C7F40C147FF99DF3CE41D284E64328C38AF5191C3076D2E19FDD7E083A041F4D7E1BDD9DA544925FCCA5
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2021/01/NLI_Logo_COD_F_GY.png
Preview:	.PNG........IHDR...R.........Of......pHYs..,K..,K..=.... .IDATx..Mr....r.:+....T.qGK.Q.dy....-o@.y.......c.=.#.........#.Z...yT......$A.A..$xpp...$..R..........c.....r.....ga..6.Q..jZ..UU.r..S.?A&....._8@.#./.i..^&.>..O....y..,]A`...y...m....FmZ...o.\|2m3.7..Z.........]Q+....}....-....M?.^.....}\|...rJ.D@.D....q-^./.4.....@.p.Y.,2.:...A...#..\Q.=...d..l..d1..:.......,...:.^..+.].1...=....o...........i...F..5-..3.......u..e....v..aWSE<.].S....?......w....!...U.D@.D P.....A..C}........@~.l.De.H.{...4K..2.6A..[8.D{m..,W..... ..\|.r....-.V.a....wp:l..^.D@.D@..#.2......V3..#.....U..6.w.......a..<.P..&....h....Jq.3...............w....." ." .!.p.Hm.=...l........e....L....=.9n........Y......J`.LW..{.!..s.cQ..M..w.............).J%.p.e.Lg...3.hj..7.S......o.,.h..Q^.t.m.E.g.b..}....;.'U~.....>.c....sd.\......m.@NI.D@.D@.D....3R4i.]M.h;.J\|.l.i...'.>B.].Q....a....9u.K]..... ...#.3.g...{.....:.wpZp\..!..G.. .D@.D@.D..@.3R..X...>.m....@..C].#..7.

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5081
Entropy (8bit):	4.918497793593663
Encrypted:	false
SSDEEP:	96:npyIEp/40w6PeSClpUBKGa6Ay/frLYDj1jMjJjzW5h4QF:FJ6GSClpJ6v/fXYX98JOi+
MD5:	0C490D5AFCFB8D395840A19E82849D8D
SHA1:	89248AB50685A977E64DFAD6A31200EDF5BE6951
SHA-256:	4B26B8B6879B459FCF94D4ED74E17BA42194B3A612B0EB50416D1CE3485280E3
SHA-512:	5508942937B6019257A9314FF4E776C1E644ECE046116614D9F7E64018A710D7FFA37DA8D366E9C1B85FE01D6EA96FA2F198902973794FF2D5C358D70790F286
Malicious:	false
Reputation:	low
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202401.2.0","OptanonDataJSON":"0174e4ef-b832-4af5-a993-2642a1c2e41e","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018ece49-7ff0-794c-b925-1bb29409f37e","Name":"Global Audience","Countries":["pr","ps","pw","py","qa","ad","ae","af","ag","ai","al","am","ao","aq","ar","as","au","aw","az","ba","bb","rs","bd","ru","bf","rw","bh","bi","bj","bl","bm","bn","bo","sa","bq","sb","sc","br","sd","bs","bt","bv","sg","sh","bw","by","sj","bz","sl","sn","so","ca","sr","cc","ss","cd","st","sv","cf","cg","sx","ch","sy","ci","sz","ck","cl","cm","cn","co","tc","cr","td","tf","cu","tg","cv","cw","th","cx","tj","tk","tl","tm","tn","to","tr","tt","tv","tw","d

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	23665
Entropy (8bit):	3.761486639235881
Encrypted:	false
SSDEEP:	384:X9iqMkiEUB66xazql0H3QKJw4djlGlXrTE8b1k79a0WPQ8LEan+TELm:X9iqEQJ9jluPrM9U1S
MD5:	A5C3AD85BC4208B369D5C4FFCE8E6543
SHA1:	18D53F723C924AFB7A1D91F775D7D22697016E3A
SHA-256:	9C407E00CE3D31BA35E7E2B3514A79AAFECC82025A965D8324CE26CEAC3EEA1A
SHA-512:	6CEFE0E1652E5DE14F1B124A80D412CB568677C7C39B206FC1CE0FDFBFFAA5076B6313ED1573EC1311BA2BAB1EF66B1CE6F52C7B421599435AEF6E4D2D88B410
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2018/06/US-Forest-Service.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns="http://www.w3.org/2000/svg" xml:space="preserve" height="198.39" viewBox="0 0 182 198.39479" width="182" version="1.1" xmlns:cc="http://creativecommons.org/ns#" xmlns:dc="http://purl.org/dc/elements/1.1/"><g transform="matrix(1.25 0 0 -1.25 153.57 205.66)"><g><path d="m20.282 130.28 1.7297 2.0327-1.5867 2.1485-20.198 27.321-1.4879 2.0123-2.3528-0.8444c-15.039-5.3763-29.343-7.8141-46.384-7.8992-17.021 0.0851-31.328 2.523-46.367 7.8992l-2.3528 0.8444-1.4879-2.0123-20.194-27.321-1.5901-2.1485 1.7297-2.0327c14.28-16.806 8.4645-37.171 3.3334-55.138-2.4617-8.6245-4.7872-16.765-4.7872-23.967 0-20.681 12.884-27.29 32.23-30.848 2.4958-0.45966 5.2537-0.77971 8.1716-1.1202 10.102-1.1713 21.556-2.5026 28.914-10.055l2.4106-2.4753 2.4106 2.4753c7.3545 7.552 18.808 8.8833 28.914 10.055 2.918 0.34048 5.6725 0.66054 8.1682 1.1202 19.346 3.5581 32.234 10.167 32.234 30.848 0 7.2013-2

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4104
Entropy (8bit):	4.328814271156652
Encrypted:	false
SSDEEP:	96:xmtg2X9ey4B/olsOc27hwyJBnO+78xKkU4t4xZ:x9cs07DJBO+Yx3/t4/
MD5:	9B5C50515ED23529BA92A962A9FA94F0
SHA1:	B7707FE0635253A1EB48D65FA94C0B2EB1E14027
SHA-256:	790B8722D35A47CA9497A4D7971B68873A8AB771F2F2130A7CD7864740333C32
SHA-512:	FAC1F39889A3E7D0A4AABC26DAA34C7F4971355966C2F97A5EA2DDC710328CBD3DB8BB10D3FF90A4231148DC72783AD8C713F732B600703578A13D942E74CEED
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/m/qualtrics-xm-long.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="146.807" height="46.87" xmlns:v="https://vecta.io/nano"><defs><linearGradient id="A" x1=".133" y1=".008" x2=".949" y2="1.101"><stop offset=".042" stop-color="#21dbaa"/><stop offset=".358" stop-color="#00b4ef"/><stop offset=".433" stop-color="#01a7ec"/><stop offset=".568" stop-color="#0487e4"/><stop offset=".68" stop-color="#0768dd"/><stop offset=".965" stop-color="#5f1ae5"/></linearGradient></defs><path d="M48.52 29.028c-.9 0-1.08-.664-1.08-1.811v-11.41c0-3.9-2.2-6.222-5.888-6.222-4.4 0-6.4 3.384-6.435 6.738v.138h2.95v-.139a4.26 4.26 0 0 1 1.128-3.052 3.07 3.07 0 0 1 2.235-.929c1.762 0 2.814 1.375 2.814 3.678v1.07l-3.511 1.666c-3.981 1.862-6.59 3.376-6.59 7.305 0 3.449 2.17 5.766 5.4 5.766a6.46 6.46 0 0 0 4.947-2.557 3.3 3.3 0 0 0 3.36 2.557 4.85 4.85 0 0 0 1.817-.375l.084-.035V28.63l-.2.11a1.86 1.86 0 0 1-1.031.288zm-4.275-9.111v6.654a5.14 5.14 0 0 1-4 2.579 2.77 2.77 0 0 1-2.906-3.058c0-2.63 2.3-4.031 4.3-4.958zM64.935 3.22h-3.108l-.115

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13479)
Category:	downloaded
Size (bytes):	13577
Entropy (8bit):	5.272065782731947
Encrypted:	false
SSDEEP:	192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
MD5:	9FFEB32E2D9EFBF8F70CAABDED242267
SHA1:	3AD0C10E501AC2A9BFA18F9CD7E700219B378738
SHA-256:	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
SHA-512:	8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Preview:	/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13282
Entropy (8bit):	7.957584067560546
Encrypted:	false
SSDEEP:	192:wwY6alMNEdNZjoNnCUh1skQLYvssUGnC9i1HDtS4P+TyGmvGEPASmI/KRpVGs0:3Y6PONoNCU7bejsUMHVC7NEIM/A50
MD5:	28B0BEE0399F58180911159FE685FF90
SHA1:	9E13FD5265E8237BC8A1FAB5D6B3B0B9C0C5185E
SHA-256:	251522FB3BD3D6974004865C6AA618F4F748E2A11703C27A2E7246D8270DCE23
SHA-512:	3DFD38925A7A7DF464234CF1B7BA4F02F954C8582C2B9EDF2ED5EFBCC04AEA86DBD9D8EFD49409774EF4746120A8F41F23A8609BBED1C2DF48EA30D52BF36085
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..................3.IDATx.._..U...t.,,.i..EK.....(T..ZD...E..T...Jo...%`..`..b.@.O..... .....s.I'3gNf..$y.xa.;.I..w..}.d.I.$I.$I.$I.$I.$I..\g..:G....D.$)......G..F.(.i...4..L..,..I..Wi"wI.,8"..m..L..I$I.C.G..&.(.p.a.v.x$.%..H.I?bW.*l...X.I..q(..e..IS1..I$I...C....;M.$i:Tzr)...].FZY...T..Ij....g.eT"I.t..$..kkc.\...J.JW%P.1.$JZ....=V.H.HQ-F...c#E)...e......./>2.o_-...]?...W>..4R.Z...y.....o}r...us...&y..I....S..p...y9..Q...4}.i....`Y?G..Y.D.'...s....x.'./G#.&X..%L.z.0...s\~]...-.G..I.:..EQ.X....(`........4.$5.yO.X.q).~..K..[....d.f.o:....p\[..}......i.-5.An4..,}.\J....<..+&.\|.$..j.$..<?a....kx..$px...<.X.5..Y.,.s)}..R8.$&....3..O....p6....g.JJ7[.[,...c.......I..1[[['...k.<xP)...O.....:.\|.....u\....&i..,..oBd:.dv.X.....k.....}3...1..M..F#{..............vS..4..m..^.=..r).}...phb................S.1......Zr-.V......R...M...&>.......JI...m..^......,....$!YH....A.../.(.'.u.V8<....}..X..aE.n...v,.W\|..8.R.B......U............vL...

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13396)
Category:	downloaded
Size (bytes):	73312
Entropy (8bit):	4.907895113605089
Encrypted:	false
SSDEEP:	384:J20HZWazEyl/5dh4/BOPcgM5Le+8w8mGwYgjOUJt2VxlURAE/CiS3A8KfTlLJ439:Vqe+8w8mGwYgWlURAEsb4x0
MD5:	D840FA9AD603EC2367CE0CF76B97ABFE
SHA1:	41C6CE7DE8B305B60C21A183BCF487BCC2171CBF
SHA-256:	F1BB0206FB12D75F651083219A4A16D9E4B5FCDDC601F3729AD84642AB779E87
SHA-512:	1E7BF8C8B51F453D4D347AC527864D3C70426940ECEF46A9B5BC0FAE53A50AE805C518491F6D25593E0BAEA6848B36FF3746E3DA07390303396E300BE8325C64
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/et-cache/1/1/39/et-divi-dynamic-39.css?ver=1714400823
Preview:	.footer-widget h4,#main-footer .widget_block h1,#main-footer .widget_block h2,#main-footer .widget_block h3,#main-footer .widget_block h4,#main-footer .widget_block h5,#main-footer .widget_block h6{color:#2EA3F2}.footer-widget li:before{border-color:#2EA3F2}.bottom-nav li.current-menu-item>a{color:#2EA3F2}#main-footer{background-color:#222222}#footer-widgets{padding:6% 0 0}.footer-widget{float:left;color:#fff}.last{margin-right:0}.footer-widget .fwidget:last-child{margin-bottom:0 !important}#footer-widgets .footer-widget li{padding-left:14px;position:relative}#footer-widgets .footer-widget li:before{border-radius:3px;border-style:solid;border-width:3px;content:"";left:0;position:absolute;top:9px}#footer-widgets .footer-widget a{color:#fff}#footer-widgets .footer-widget li a{color:#fff;text-decoration:none}#footer-widgets .footer-widget li a:hover{color:rgba(255,255,255,0.7)}.footer-widget .widget_adsensewidget ins{min-width:160px}#footer-bottom{background-color:#1f1f1f;background-color

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x467, components 3
Category:	downloaded
Size (bytes):	26208
Entropy (8bit):	7.960984638966496
Encrypted:	false
SSDEEP:	384:SohI7vP2aVOEheCLn5a93f4nEi9FInZzo8DBGYn0kjp8QCezJ5Rrt4pGuZLVbfQL:SouvXFe4a93GFInZlxvUe/RCZLVbQ0w
MD5:	F91A778F27B36F196BAB12ACA14E4A53
SHA1:	4E6639F828A11C7377BE96AC5681920BBBD8CD64
SHA-256:	5DC5FD0EB4A20994AA3FE486CCC0008E012CAC569052AB71718718EE462C0D23
SHA-512:	27EB1290403E8915415BB449A09BB3DAE22F74695B49E02FC1D1C2008292C64233403320661E78674969E75B5A3B0A1A3A9EDDF3736CD24AFB2BBDE2E2B1F333
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/m/assets/homepage/volkswagen_hero.jpeg
Preview:	......JFIF.............C.............................! ....#'2#%/%..+;,/35888!=A<6A2785...C...........5$.$55555555555555555555555555555555555555555555555555................................................................................................Wm 0..=@SS...e.@0..4.c..GE{[.[x..f....c.............[.....I(..E....n9.t9.S.[..2.kG\nw...q...0.c...qfb.....e.1Mc..,K..z...)...v......&...{.0..1...k..u.cgGrK...^_V....../.#y.. .+...w....<^?......[\|...{...y....^..y.Xe.Ma.R.r..)q.c...y.O@..5...a.Q.!cB.u9...k.e.1.c.b.......l.zO..>.G......GJ.aFv..G..z.O...y.q<...7.\.~...+x.&...W..sq...)q.<....9.Q.........J...5.#..2..+....GL....Qe.+1f.K.....g%..ts....._!......^.7..y...?N...=g........~..Y..+.a0.#.n%.c.q+.\r...CX."1.....^......F=e.S@.R........c(.!eX.X..oO....gX..zk.+..y..\|..]..7.....7w.h..w5/s_S....L...a1.)p.1.D...X.....cXH...7.......2... .4..N4Z.B.(c(.*..T..Eb.k.^..:.g.&..>:.<~..7~.....fL:.]..5w.Z.l.x..&..X....`.,...&j3f...!#......

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 38028, version 1.0
Category:	downloaded
Size (bytes):	38028
Entropy (8bit):	7.99427717757186
Encrypted:	true
SSDEEP:	768:cZapAsTO4aQ/iqtxw2+GtmSBN4PaxyyaHoeTlsXRq5h5B4SWfp:ObTDPCxiSBuPaxXjwqXRUSh
MD5:	B14EFA8215168867CB16E0984A8E3DDC
SHA1:	10FB475890E113884212F46F7D4DBE4CA709CA37
SHA-256:	06671D16883027073C0E721887BF8F411320717F31BD5032185507F741A25025
SHA-512:	4E941B917FE85767C1563C9548839F3448F9C7D06F633FF24E6D635DE3A2C1982F590CA106D00AFEB7B55EA3FFB3DAFBE509442D93F1226FF4A06C5122F38730
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ptserif/v18/EJRSQgYoZZY2vCFuvAnt66qcVys.woff2
Preview:	wOF2..............[@...'..........................8..<.`.......................X.6.$.... ..6..L..z["Aq...J......q...{...+..6.....q.C.\|......T.........o4.&.A@.@.l93..\.z..8;k...7.m.#...;..`3.y.....(tc.........+7....h..-.y.,.~.^.w.P.T...o.zZ[..t..LN....a-..3,+!.\......t..fh...._....rE.w..'...p......v.7gzwA..%KY..-lbL...(......T..I.,..i.r.{.....[...QSFT..fa.m.......c`2.,.`....-z....n.....\.c...9`..R.%"V`..k..b`...+V..Q.........-6......l..b.M. ..._...,..J..c.).h.....k....C.PPZ%.......&N..i...Z....G`...9u...M.@f.-....+.p.9...Y........7%......Q`.@...I..T...$.#.8 ....~o....,..I....:.V_.D"....;...mc..4...>.3S35...HJ..h....o.zo..W..H.b.KR..G...O........g#.3.8r.c.w..@agN7.........N..1.\...6DS.h..(.f..t..hI{.F..uD...C...]R..o..W..O.$........i9........<..5.e......k.........h....]..../l.B...4.!Y<.F.0.....!V..wc@..'...kj~5^i...N...t...P...".....:,.....I.9`.....(..Yv.S..B.O>Q.g.G..a...a\.L8.F...t@<.......4.km.0..........{.g?.. .c.......$...AB.;Q@.

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=3761, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=3970], progressive, precision 8, 2000x1720, components 3
Category:	downloaded
Size (bytes):	554826
Entropy (8bit):	7.961756034277161
Encrypted:	false
SSDEEP:	12288:zKFkVJv1sp09N3bg+HW5gPfWL4YngDcMC/5mF:zIMypQ3b6g2JgDcZY
MD5:	84FB78EDE8BA9C355EE39797F257695C
SHA1:	85FB9AC932E006F6FE5ED29E7FBFDE977B9C86F4
SHA-256:	4DA8A3B3665CD14A1DD2D47EF274BB27506C0CAC7E5061E54C0E96E9F5CB7449
SHA-512:	EADEEA2F99E9DD8E2118876C86943A845528D07044704F0BC67817E1D0293C6D226F3D0F67779F7B19E65ABA894C27F52CCCF5B6EF017D02C1C04CBDF2C421AD
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2022/10/Map-Thumbnail-e1666124343834.jpg
Preview:	......JFIF............RhPhotoshop 3.0.8BIM.......%..Z...%G............WAYFINDING to NLI.8BIM.%........`.%.L.@ .n}..8BIM.:....................printOutput........PstSbool.....Inteenum....Inte....Clrm....printSixteenBitbool.....printerNameTEXT.....n.l.i.-.b.2.3.6.0.d.n...s.o.d...n.c.s.u...e.d.u......printProofSetupObjc.....P.r.o.o.f. .S.e.t.u.p......proofSetup........Bltnenum....builtinProof....proofCMYK.8BIM.;.....-..............printOutputOptions........Cptnbool.....Clbrbool.....RgsMbool.....CrnCbool.....CntCbool.....Lblsbool.....Ngtvbool.....EmlDbool.....Intrbool.....BckgObjc..........RGBC........Rd doub@o..........Grn doub@o..........Bl doub@o..........BrdTUntF#Rlt............Bld UntF#Rlt............RsltUntF#Pxl@R..........vectorDatabool.....PgPsenum....PgPs....PgPC....LeftUntF#Rlt............Top UntF#Rlt............Scl UntF#Prc@Y..........cropWhenPrintingbool.....cropRectBottomlong........cropRectLeftlong........cropRectRightlong........cropRectToplong.....8BIM.........H.......H..

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	5996
Entropy (8bit):	5.420591934941908
Encrypted:	false
SSDEEP:	96:ZOEbaIJOEbaiDFZ8OEbaXkOEbahYOEbavOEbakyhZcyJzV+zmnWOEbafubqGIFuY:aIKAXzhXQkuyE2bqGIwYjlXYO
MD5:	F7562F6C5F51F3076915C17748309BF4
SHA1:	375616D25F0E7F5D8F54587C29F6A2259D7B2347
SHA-256:	12EEBBA255CE6F856459CAB6B183B507BE0417A322F46FAF7DD71B3C4B0EEC27
SHA-512:	C4C278F4DC497EFD124324144C80612C835D8FB681386D0049C094914C98FA0BD22AEAB9586016BAE58BEF493510773B43CA69E46ED9BCF569700DBE03C0BF92
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Open+Sans&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4taVIGxA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4kaVIGxA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext */.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4saVIGxA.woff2) for

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6470), with no line terminators
Category:	downloaded
Size (bytes):	6470
Entropy (8bit):	4.954276651912257
Encrypted:	false
SSDEEP:	96:HaiIwxc4SZIORnNj0aZ/XH9iNOsaD+XicVDAdVMk9HcCWhR:6NNZIORnNwaZ/X9iAD6wMk9zWhR
MD5:	9389A240EC2D748902E2F3D837D46912
SHA1:	8C5E52769FF791C2751CDE97D2F59B2B11D095D3
SHA-256:	CA3AF915877E0F119CE0DF14DFCE6249F76222C600E23882FA7C7F99788971CC
SHA-512:	66B15795777DE6D0F465C9AFB67F8B6808333E8E7454C3BBC26783748F29A74EC365F18B520FBEDCE88E7137D1919025D0E65836BDC58007F623255B66A3FEED
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/css/magnific_popup.css?ver=4.25.0
Preview:	.mfp-wrap .mfp-container button:hover{background:transparent!important}.mfp-wrap .mfp-arrow:active{position:absolute;top:50%}.mfp-wrap .mfp-close:active{position:absolute;top:-10px}.mfp-arrow-left .mfp-a,.mfp-arrow-left:after,.mfp-arrow-right .mfp-a,.mfp-arrow-right:after{font-family:ETmodules;speak:none;font-style:normal;font-weight:400;font-variant:normal;text-transform:none;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.mfp-fade.mfp-bg{opacity:.001;-webkit-transition:all .5s ease-out;transition:all .5s ease-out}.mfp-fade.mfp-bg.mfp-ready{opacity:.8}.mfp-fade.mfp-bg.mfp-removing{opacity:0}.mfp-fade .mfp-wrap.mfp-wrap.mfp-ready .mfp-content{opacity:1}.mfp-fade .mfp-wrap.mfp-wrap.mfp-removing .mfp-content{opacity:0}.mfp-fade .mfp-wrap .mfp-content{opacity:.001;-webkit-transition:all .5s ease-out;transition:all .5s ease-out}.mfp-bg{z-index:1000000;overflow:hidden;background:#0b0b0b;opacity:.8;filter:alpha(opacity=80)}.mfp-bg,.mfp-wrap{top:0;left:0;wi

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4186), with no line terminators
Category:	downloaded
Size (bytes):	4186
Entropy (8bit):	4.923675414240059
Encrypted:	false
SSDEEP:	48:wFfAeWkkqEsKO+TBxaBIIj+NqUFQW76d7JrOv2bN:wueWkkrLoI7U
MD5:	EA958276B7DE454BD3C2873F0DC47E5F
SHA1:	B143F6E8E8F79D8F104C26B0057EF5514D763219
SHA-256:	2E10D353FF038C2CAD3492FC17801AF3E6EF2669C9E9713BDB78B1DCB104C4FE
SHA-512:	2D40A1E713355EFF88FA3BBF5471B4DB5ACC48FA2B978A555C034F2E5C7F131FCAF48E849D5D048DF9D5DAE068C4B6467A97B1DDE99115E6B32F57E928569FC1
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.5.2
Preview:	.mejs-container{clear:both;max-width:100%}.mejs-container *{font-family:Helvetica,Arial}.mejs-container,.mejs-container .mejs-controls,.mejs-embed,.mejs-embed body{background:#222}.mejs-time{font-weight:400;word-wrap:normal}.mejs-controls a.mejs-horizontal-volume-slider{display:table}.mejs-controls .mejs-horizontal-volume-slider .mejs-horizontal-volume-current,.mejs-controls .mejs-time-rail .mejs-time-loaded{background:#fff}.mejs-controls .mejs-time-rail .mejs-time-current{background:#0073aa}.mejs-controls .mejs-horizontal-volume-slider .mejs-horizontal-volume-total,.mejs-controls .mejs-time-rail .mejs-time-total{background:rgba(255,255,255,.33)}.mejs-controls .mejs-horizontal-volume-slider .mejs-horizontal-volume-current,.mejs-controls .mejs-horizontal-volume-slider .mejs-horizontal-volume-total,.mejs-controls .mejs-time-rail span{border-radius:0}.mejs-overlay-loading{background:0 0}.mejs-controls button:hover{border:none;-webkit-box-shadow:none;box-shadow:none}.me-cannotplay{width:au

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	264212
Entropy (8bit):	5.244258934698822
Encrypted:	false
SSDEEP:	3072:pHzE206ZJegGcpybZSILuO42x9y3L1My6iab/ldbPz140OymB7wm713f/AXztDaD:plpy9b/b17OymB7w8/AXztNG
MD5:	962F03B31F204E8C5118FA81F962A838
SHA1:	A718FDB3A6F2122CCF60C6D51357C92C4B2CB68B
SHA-256:	52AB39A90B71336EE2ACAA421AC989863D46B87B52E722FD4BA393B0C02BECC0
SHA-512:	49FE13BCB94EF53F60FB061FCED5ECFBCEA462927B56C36BF74473967DBE0F7DECCF018A0B4DC340F7B7BF5B19B9638144466C21B199BFA8D4C874767BD11DC2
Malicious:	false
Reputation:	low
URL:	https://ncsu.qualtrics.com/jfe/static/dist/jfe.962f03b31f204e8c5118.js
Preview:	webpackJsonp([36],[,,,,,,,,,function(t,e,i){var n;void 0!==(n=function(){"use strict";if("undefined"!=typeof window)return window}.call(e,i,e,t))&&(t.exports=n)},,function(t,e,i){var n,s;n=[i(15),i(2),i(3),i(1),i(24),i(0)],void 0!==(s=function(t,e,i,n,s,o){"use strict";return o.AbstractClass.declare({$name:"PageElement",$extends:t,_id:null,_$el:null,_page:null,_pageID:null,_defaultLan:"EN",_currentLan:"EN",_language:{},_boundView:null,runtime:{},initialize:function(t,e,i){e&&(this._defaultLan=e),i&&this.setPage(i),this.setDef(t)},setDef:function(t){t=t\|\|{},this.runtime.Display=t.Display\|\|"",this._language=t.Language\|\|{},this.translate(this._currentLan)},_getElement:function(){var t=this._pageID?"#"+this._pageID+" .ActivePage #":"#";return n(t+this._id)},bind:function(){this._$el=this._getElement(),this._$el&&this._$el[0]&&(this._boundView=s.bind(this._$el[0],{runtime:this.runtime})),this._trigger("bind")},setPage:function(t){this._page=t,this._pageID=t.id(),this._listenTo(this._page,"t

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1343
Entropy (8bit):	4.939215080601888
Encrypted:	false
SSDEEP:	24:2FetXyrZKPFsPOqKbEFaOQAOsrnh+KGwgaO9+aO6GWc6ihCsyO6edgQGAauNWaGM:rXnds/r1nh+Kngv+k/cTh0edL3jEMupi
MD5:	D71B75B2327258B1D01D50590C1F67CA
SHA1:	B7820E4FFB6BECC133C48F66D9F683545530B959
SHA-256:	1CA76922F55B389B8F590AE7E3BCC3A2DCCDCE3AFF1E5A4335AF081B76A414EA
SHA-512:	1A1930881B4D4D4F092999D6449248AEA68BF1756F6DC32A4EFCE5E7BF240A14633E76988321E5AA3E11144FE5E8C9A443ADF0FBF09A9B57A98C4D2D3A9347A2
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/themes/Divi/core/admin/js/common.js?ver=4.25.0
Preview:	(function($){..$(function(){...var user_agent = navigator.userAgent;...var is_opera_edge;...var browser = user_agent.match(/(opera\|chrome\|safari\|firefox\|msie\|trident(?=\/))/i) \|\| [];...var browser_name = '';...var browser_class = '';....if ( /trident/i.test( browser[0] ) ) {....browser_name = 'ie';...} else if ( browser[0] === 'Chrome' ) {....is_opera_edge = user_agent.match(/\b(OPR\|Edge)/);.....if ( is_opera_edge !== null ) {.....browser_name = is_opera_edge[0].replace('OPR', 'opera');....}...}....// use navigator.appName as browser name if we were unable to get it from user_agent...if ( '' === browser_name ) {....if ('standalone' in window.navigator && !window.navigator.standalone) {.....browser_name = 'uiwebview';....} else {.....browser_name = browser[0] && '' !== browser[0] ? browser[0] : navigator.appName;....}...}....browser_name = browser_name.toLowerCase();....// convert browser name to class. Some classes do not match the browser name...switch( browser_name ) {....case 'msie'

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 2048x1365, components 3
Category:	downloaded
Size (bytes):	940648
Entropy (8bit):	7.9778984005352
Encrypted:	false
SSDEEP:	24576:4C5x+Rd94O2oeaiL96v4udRLLXqvWAqfEncVxtBIJXfFKjT:Kd9fPzCwwwLL5EncHaqT
MD5:	EDAAFCF4109B9F69E6165AE696619F80
SHA1:	19048EDC91B2FC43F0A82CD90E61F68897AB4764
SHA-256:	3F50C8952F0CFFD2A007264A73675382AC1D639BD1F2282DB79F5C9BC9E04B83
SHA-512:	6647A39E720EB3FC4E3A1E45F83F00447DC094BC1CC6270D32680818EF34CA6A82F9A84939B24EFBEA336D2A4224D526AC9BCDF5900E811223C7DCC0E5763431
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2019/08/Home-Page-FULL-RES.jpg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......U...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....E.u.3V..c.M2.3.7&0q...\..Qj...o,H..........m.x&.T...k....U.....'....O..5i.T.k+r.0h.....'.=..G=..y..b.._.i....B]..-...4X.....7d.H5.Kv.E-..#......4..Xh....p.I.,.4.`...s(...U....5..<U....w<.. ...V.K...J..}.m..t...2K..#...L.^.6I..r..l.c.....o8..E{w.S.^..T..D..zE... .=.Y#.*A$`...+...uY...V........<..

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2111 x 601, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	56061
Entropy (8bit):	7.74907743114158
Encrypted:	false
SSDEEP:	768:ynIBnzOxJaLmJEFcgavRiZEVUsnBmT9n9XMd8ZSn2zWivJHIe4NGNF6s3ZCKALs:KAnk+sEFcgaA0UUEk72aaj4NG7BnMs
MD5:	A45786B1BABF21D91F95CC31BDA35BD4
SHA1:	7108BE18AE61AB6D092674EE072405B5B7298CC7
SHA-256:	C8FDBEA5CC2B62C0D56F45E3A281A80987CA3906AFA03DB0C6302A66DACBF5CF
SHA-512:	19A071F580EB40F8E9EF3008DB69569A0446F2201366CA0985E4EF5AEC9A605FDC99E30B72A1DB42B65E8D1D2A60F6818A9E72F7F9484682DDE36B7A4ED1695F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...?...Y.............pHYs...#...#.x.?v.. .IDATx...}.dYz..sfwgV....Y. UA......,@...%.g.G....3. K.......d.k. ....Z...0AL..$$@.B._.f..g.2B.vwf...zWZ..K5..!m....7.9.y.so.TU.\|?..Y.....Y]Uy~.<>......,..f}.9...}.-.}t0.........`.<...............................?.............F.............,4.............`..~...........................Xh..............B#...............................?.............F.............,4.............`..~...........................Xh..............B#...............................?.............F.............,4.............`..~...........................Xh..............B#...............................?.............F.............,4.............`..~...........................Xh..............B#...............................?.............F.............,4.............`..~...........................Xh..............B#...............................?..............n.>.........`.~./........z.........=8..:]O~.......A...._...r?x.\z...y?..6..E.H...h;...1.nZ

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 525x425, components 3
Category:	downloaded
Size (bytes):	38649
Entropy (8bit):	7.7417228232871595
Encrypted:	false
SSDEEP:	768:vpwwwMxLIEeB74WReSfwJiXrOFkiOIezTTTrLqc65WNh+T9CyY6:v5OEeBEe0wOKNIeG5V0x6
MD5:	D7971099D5C64944CA09A886D56B1AE2
SHA1:	AE842D03A64117E73748C2BC37583DF2A011050C
SHA-256:	9B1B074B8D3997D7B8CD50DDF6BD7EB7F721A6DAE9A5459E8FCD6BCA249A5882
SHA-512:	67CED8AB99CD54C3FEF143979A746507FCA5E5353AF31BD8BC186BE52AEF9A9F567CD0798D1C772FF366CD7A6E0E6120C713F4BDE20AA9E97115D706B90EFCE5
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2020/11/NC-State-Foundation-01.jpg
Preview:	......JFIF.....H.H.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...O....%i...!XX\|B.U...... ...c....ETE........

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2111 x 601, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	56061
Entropy (8bit):	7.74907743114158
Encrypted:	false
SSDEEP:	768:ynIBnzOxJaLmJEFcgavRiZEVUsnBmT9n9XMd8ZSn2zWivJHIe4NGNF6s3ZCKALs:KAnk+sEFcgaA0UUEk72aaj4NG7BnMs
MD5:	A45786B1BABF21D91F95CC31BDA35BD4
SHA1:	7108BE18AE61AB6D092674EE072405B5B7298CC7
SHA-256:	C8FDBEA5CC2B62C0D56F45E3A281A80987CA3906AFA03DB0C6302A66DACBF5CF
SHA-512:	19A071F580EB40F8E9EF3008DB69569A0446F2201366CA0985E4EF5AEC9A605FDC99E30B72A1DB42B65E8D1D2A60F6818A9E72F7F9484682DDE36B7A4ED1695F
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/3d2b6fb4-6a2f-40e8-9142-8a3a3a25baa0/4d17d779-0601-4f87-b9c9-8a26d3e68497/e962d8e2-6340-4c53-9266-f5dcd2a8fdbf/QualtricsXM_RBG.png
Preview:	.PNG........IHDR...?...Y.............pHYs...#...#.x.?v.. .IDATx...}.dYz..sfwgV....Y. UA......,@...%.g.G....3. K.......d.k. ....Z...0AL..$$@.B._.f..g.2B.vwf...zWZ..K5..!m....7.9.y.so.TU.\|?..Y.....Y]Uy~.<>......,..f}.9...}.-.}t0.........`.<...............................?.............F.............,4.............`..~...........................Xh..............B#...............................?.............F.............,4.............`..~...........................Xh..............B#...............................?.............F.............,4.............`..~...........................Xh..............B#...............................?.............F.............,4.............`..~...........................Xh..............B#...............................?.............F.............,4.............`..~...........................Xh..............B#...............................?..............n.>.........`.~./........z.........=8..:]O~.......A...._...r?x.\z...y?..6..E.H...h;...1.nZ

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	6026
Entropy (8bit):	5.032065351713075
Encrypted:	false
SSDEEP:	96:vo6U19jUEyUpoUSyUhaaU9b9nG9WaxjS4jzyI5wSuUT:vo6ULU5UWUrUhnU9b9G9jjuI5wwT
MD5:	517981B185CA4EB37CDC81F1E107BF25
SHA1:	44221A21F5888D6B5E11D2957146F4A73CBD8ED5
SHA-256:	AEA11AE6A04A476C49CAC9041B5BA809FC0D633C0680658DE20FB6DB56BD472D
SHA-512:	0D1BAFD1B9FB3131E54D19966FD20144727EC0C82F73E16D25073311C198A140144DC5966DA05CEA28E249523A003642F9F80BEE76ED78ED6ECBCBAC5F7660A4
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/plugins/image-watermark/js/no-right-click.js?ver=1.7.4
Preview:	/.. This javascript is used by the no-right-click-images plugin for wordpress... Version 2.2.. Please give credit as no-right-click-images.js by Keith P. Graham.. http://www.blogseye.com.. /....var IwNRCtargImg = null;..var IwNRCtargSrc = null;..var IwNRCinContext = false;..var IwNRCnotimage = new Image();..var IwNRClimit = 0;..var IwNRCextra = iwArgsNoRightClick.rightclick;..var IwNRCdrag = iwArgsNoRightClick.draganddrop;....function IwNRCdragdropAll( event ) {...try {....var ev = event \|\| window.event;....var targ = ev.srcElement \|\| ev.target;....if ( targ.tagName.toUpperCase() == "A" ) {.....// is this IE and are we dragging a link to the image?.....var hr = targ.href;.....hr = hr.toUpperCase();.....if ( hr.indexOf( '.JPG' ) \|\| hr.indexOf( '.PNG' ) \|\| hr.indexOf( '.GIF' ) ) {......ev.returnValue = false;......if ( ev.preventDefault ) {.......ev.preventDefault();......}......IwNRCinContext = false;......return false;.....}....}....if ( targ.tagName.toUpperCase() != "IMG" ).....retu

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32006)
Category:	downloaded
Size (bytes):	203512
Entropy (8bit):	5.508215712897086
Encrypted:	false
SSDEEP:	3072:7i/bgBBN4g7dje7r98kSUR148OldwwgL2u3DDU8CuqjmMtZ:GkBc6jkrydUKCKu3DDU8CuqjmQ
MD5:	67A33585A071DA3BEFBFE5E8BE12F5F0
SHA1:	DD56F991F078B7DE4D957B779A37CE5AA7CDF272
SHA-256:	B9649E0E9E5790F8D6B5E69AA4FF9969E8F7D72A84F8501FF9379078005124D8
SHA-512:	72C3ED32872EF0A7752F0BF1E772BBDEE68E87D71D13B0D180FF96069462BA81C854502E2E18DFA0B55828E0420446A71D586D69FCB05EF66E55973A039B15B6
Malicious:	false
Reputation:	low
URL:	https://success.qualtrics.com/js/forms2/js/forms2.min.js
Preview:	/! forms2 2024-01-29 See forms2.js for license info /.!function a(b,c,d){function e(g,h){if(!c[g]){if(!b[g]){var i="function"==typeof require&&require;if(!h&&i)return i(g,!0);if(f)return f(g,!0);var j=new Error("Cannot find module '"+g+"'");throw j.code="MODULE_NOT_FOUND",j}var k=c[g]={exports:{}};b[g][0].call(k.exports,function(a){var c=b[g][1][a];return e(c?c:a)},k,k.exports,a,b,c,d)}return c[g].exports}for(var f="function"==typeof require&&require,g=0;g<d.length;g++)e(d[g]);return e}({1:[function(a,b,c){var d="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";!function(a){"use strict";function b(a){var b=a.charCodeAt(0);return b===g\|\|b===l?62:b===h\|\|b===m?63:i>b?-1:i+10>b?b-i+26+26:k+26>b?b-k:j+26>b?b-j+26:void 0}function c(a){function c(a){j[l++]=a}var d,e,g,h,i,j;if(a.length%4>0)throw new Error("Invalid string. Length must be a multiple of 4");var k=a.length;i="="===a.charAt(k-2)?2:"="===a.charAt(k-1)?1:0,j=new f(3*a.length/4-i),g=i>0?a.length-4:a.length;var l=0

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x467, components 3
Category:	dropped
Size (bytes):	26208
Entropy (8bit):	7.960984638966496
Encrypted:	false
SSDEEP:	384:SohI7vP2aVOEheCLn5a93f4nEi9FInZzo8DBGYn0kjp8QCezJ5Rrt4pGuZLVbfQL:SouvXFe4a93GFInZlxvUe/RCZLVbQ0w
MD5:	F91A778F27B36F196BAB12ACA14E4A53
SHA1:	4E6639F828A11C7377BE96AC5681920BBBD8CD64
SHA-256:	5DC5FD0EB4A20994AA3FE486CCC0008E012CAC569052AB71718718EE462C0D23
SHA-512:	27EB1290403E8915415BB449A09BB3DAE22F74695B49E02FC1D1C2008292C64233403320661E78674969E75B5A3B0A1A3A9EDDF3736CD24AFB2BBDE2E2B1F333
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.............................! ....#'2#%/%..+;,/35888!=A<6A2785...C...........5$.$55555555555555555555555555555555555555555555555555................................................................................................Wm 0..=@SS...e.@0..4.c..GE{[.[x..f....c.............[.....I(..E....n9.t9.S.[..2.kG\nw...q...0.c...qfb.....e.1Mc..,K..z...)...v......&...{.0..1...k..u.cgGrK...^_V....../.#y.. .+...w....<^?......[\|...{...y....^..y.Xe.Ma.R.r..)q.c...y.O@..5...a.Q.!cB.u9...k.e.1.c.b.......l.zO..>.G......GJ.aFv..G..z.O...y.q<...7.\.~...+x.&...W..sq...)q.<....9.Q.........J...5.#..2..+....GL....Qe.+1f.K.....g%..ts....._!......^.7..y...?N...=g........~..Y..+.a0.#.n%.c.q+.\r...CX."1.....^......F=e.S@.R........c(.!eX.X..oO....gX..zk.+..y..\|..]..7.....7w.h..w5/s_S....L...a1.)p.1.D...X.....cXH...7.......2... .4..N4Z.B.(c(.*..T..Eb.k.^..:.g.&..>:.<~..7~.....fL:.]..5w.Z.l.x..&..X....`.,...&j3f...!#......

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 868x801, components 3
Category:	dropped
Size (bytes):	72736
Entropy (8bit):	7.805012214289913
Encrypted:	false
SSDEEP:	1536:PwrNlMt+Lqu2P6lRurFsqjpcc5I8Cr62OXzZyk3Z5BgK:ukt+LqXvLjpDI8lU05GK
MD5:	6A4E01662186EA55995A940CE31CD698
SHA1:	DE2953E1192359791185A18F5548EBDFB03CB9E0
SHA-256:	8D1BD6A391D1099D3151D842525B5F01AD909D2687CF37CDD77A3FF051223119
SHA-512:	0641D2B7A337F18AECE4F47A48348B0C3B043B1C21AB712B0B308D71EF2A430287012C23F7AD24E7729CB88D99BD718F74442C2FA36E7E8FB8A2D3A3BA0F073D
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................!.d.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1881
Entropy (8bit):	4.389954115896364
Encrypted:	false
SSDEEP:	24:0pe/SwmNVUPRACGkx19WssLeU9sbSIwD/mz4wDFrrb623vNEI6h3rs3be:06Swf6CGkwssozwD/mkwDFrr22VZiWbe
MD5:	B68F04D5959DC141D76E63EBD43C0F90
SHA1:	12210B0145B70721771698E6DDE8181159628EAD
SHA-256:	65F159F273C9A92CE315E57C1834C8CE19F6BB3A368FE4F37D83D3259BA3F330
SHA-512:	62840FC70A7F9261DA9C439EF49735D3030ECBACF57FD9F4C7CC1F4B462052E18E847DF6119AC5C225833CBB59E279F98ABD35390171B76397C12F79E54E6DCE
Malicious:	false
Reputation:	low
URL:	https://success.qualtrics.com/rs/542-FMF-412/images/marketo-xdframe-relative.html
Preview:	<!doctype html>.<html>. <head>. <title>Marketo Forms 2 Cross-Domain Proxy Frame</title>. modified 2019-10 to use a relative path -->. <script src="/js/forms2/js/forms2.min.js"></script>. /modified -->. <script>. (function (){. var $ = MktoForms2.$;. if(!window.parent \|\| window.parent == window){. return;. }. $(window).on("message", function (e){. var origin = e.originalEvent.origin;. var message = e.originalEvent.data;. try{. message = $.parseJSON(message); . }catch(ex){. return; //our messages are always JSON. }. if(message && message.mktoRequest && message.mktoRequest.ajaxParams){. var p = message.mktoRequest.ajaxParams;. var params = { type:"POST", dataType:"json", url:p.url, data:p.data, crossDomain:false, jsonp:false };. params.success = function (data){. window.parent.postMessage(JSON.string

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223688
Entropy (8bit):	5.454853123316135
Encrypted:	false
SSDEEP:	3072:tt8WClBZIncVuP0bteuvQ+AMPpgArl0xYu5GKn3Q:ttlWBZ7O0bvQQGArHu5GKnA
MD5:	936AF78B12396E6051E173426EA180AF
SHA1:	4ECAAF3C5657796B6970EDE0A7032A8E362F3D4A
SHA-256:	CD3521E9B79712590C50523EF00789C637324AFA1C8987BF5B773C5D3A66FB3D
SHA-512:	FCCFB97CEFB427A305DF888AB3A2225BDD70BC30948FFFA76AD78A02937A72FFC8D508379A036C7AE4B9645EEA7C384ACCDD2A083E6548062D2F02E3AE8FD614
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	4.083787502988387
Encrypted:	false
SSDEEP:	192:jbTZ68RzF5YvWFSP8A7hPoPRtvrkQ082/0dR8j/kS:jXBnFSP8A7hALT+8w0ksS
MD5:	4C57ECDBD4E739C83E3470D97798EAF9
SHA1:	B3E1EC28D462156C390A0F75FFB8AAF2F66135C1
SHA-256:	3497C4DDD7998BEBF648DC4F6BA594370D2565AB81C091E14EFF8EDE4A8AE192
SHA-512:	CF83A529A9AAC9FD8C1E4BBF329285044ABE40CE01EA5EFF0CFBF30D2E5477E697958859ADBF882ADB167E727628DBB219E75B846FC243450A4E01FE5F1A21B9
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 400x250, components 3
Category:	dropped
Size (bytes):	27934
Entropy (8bit):	7.777575982225047
Encrypted:	false
SSDEEP:	768:fj0roH264CGF3iPzRh1s27Un9Ba3/RU7Y8S4i6Cg365P7:fior4piPzQ9Ba3/B8Rhu7
MD5:	849FB59F3AA8544F9468838C4D4B0ED7
SHA1:	808DB4AE84E46D696255B597B733BFE6CEAFDCFD
SHA-256:	BC2F8C8AF748EA8BA3A880CD19442EC6101013F271D035217D7115EFBE5250DF
SHA-512:	5814D4AD242E42BD842AF89146591ACBC205602465C585EAC4B92246176B3697DA517AF91806543F2514EE78DD429C59F4F9E1E0A26EDBAC7C4EBD38EB888BEE
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...;.do.B....L...t}JV.$...w~.n...........+..7...5[V_...M...z.....[.G.......U.9...~....W.R...s.}G.G.:.Z=..f.(..t]..6m.*.._.U....y.<M........v...b]./.s.=...-.'....5...Y...._.......5ps\mZ"...Z.do.S...}.....W..6.X..J.e.:...... .,c...B...K......V....5......V.kQ.D:..H....k...{Y...<.....m.....&..

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64780)
Category:	downloaded
Size (bytes):	75389
Entropy (8bit):	5.317998421041909
Encrypted:	false
SSDEEP:	1536:4nzjSf/dcNANA2AWIIql+HbZ/f3OL4/4K:4zjSf/d8l+HbZ/PN
MD5:	25BFB70085441577363541B4DF4A77E7
SHA1:	0F9DEF166C5537480C274BCDF079ACADCBF0B196
SHA-256:	4018D7F0A983131974ACBEA85F1BE1A84C2CCA541C584F98B5C5C83413913695
SHA-512:	AC5FE942E0F74684DCA14BFD69F06A94DFE21485D9A9F4FE2360A5E194D1D180B4330015295E7700418D2BC5C271686337D359CDAB087775D543822E58A45137
Malicious:	false
Reputation:	low
URL:	https://siteintercept.qualtrics.com/dxjsmodule/12.ffd98a9d3b8cbf2075ed.chunk.js?Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDID=www.qualtrics.com
Preview:	./@preserve.Version 2.5.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. (window["WAFQualtricsWebpackJsonP-cloud-2.5.0"]=window["WAFQualtricsWebpackJsonP-cloud-2.5.0"]\|\|[]).push([[12],{19:function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"e",(function(){return r})),n.d(t,"d",(function(){return a

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 400x250, components 3
Category:	downloaded
Size (bytes):	27934
Entropy (8bit):	7.777575982225047
Encrypted:	false
SSDEEP:	768:fj0roH264CGF3iPzRh1s27Un9Ba3/RU7Y8S4i6Cg365P7:fior4piPzQ9Ba3/B8Rhu7
MD5:	849FB59F3AA8544F9468838C4D4B0ED7
SHA1:	808DB4AE84E46D696255B597B733BFE6CEAFDCFD
SHA-256:	BC2F8C8AF748EA8BA3A880CD19442EC6101013F271D035217D7115EFBE5250DF
SHA-512:	5814D4AD242E42BD842AF89146591ACBC205602465C585EAC4B92246176B3697DA517AF91806543F2514EE78DD429C59F4F9E1E0A26EDBAC7C4EBD38EB888BEE
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2023/12/Bugs-Inside_banner_image_reduced-scaled-e1702935745913-400x250.jpg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...;.do.B....L...t}JV.$...w~.n...........+..7...5[V_...M...z.....[.G.......U.9...~....W.R...s.}G.G.:.Z=..f.(..t]..6m.*.._.U....y.<M........v...b]./.s.=...-.'....5...Y...._.......5ps\mZ"...Z.do.S...}.....W..6.X..J.e.:...... .,c...B...K......V....5......V.kQ.D:..H....k...{Y...<.....m.....&..

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	1.5219280948873621
Encrypted:	false
SSDEEP:	3:U8n:U8n
MD5:	83D24D4B43CC7EEF2B61E66C95F3D158
SHA1:	F0CAFC285EE23BB6C28C5166F305493C4331C84D
SHA-256:	1C0FF118A4290C99F39C90ABB38703A866E47251B23CCA20266C69C812CCAFEB
SHA-512:	E6E84563D3A55767F8E5F36C4E217A0768120D6E15CE4D01AA63D36AF7EC8D20B600CE96DCC56DE91EC7E55E83A8267BADDD68B61447069B82ABDB2E92C6ACB6
Malicious:	false
Reputation:	low
URL:	https://p.typekit.net/p.css?s=1&k=igb0ftr&ht=tk&f=30546.30551.30552.30553.30556.30557&a=134336088&app=typekit&e=css
Preview:	/**/.

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (21745), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	74299
Entropy (8bit):	5.064713024656408
Encrypted:	false
SSDEEP:	768:rx5vMZdapNth1dzD/Dwj9CVO53V6k8wzc745gJjKL2FN:t5v8ap9PLTVOxc745gJjKL2H
MD5:	30607B2243C63B8614ABF1596B9CAC37
SHA1:	BC9A73AF10821EBB9241828A3D598A678796F224
SHA-256:	8E0B361BAF0199139CCAE4877F5BA96462C37BD927AA0720A07ADC2F798F463B
SHA-512:	7C71E4CCBD0D86236BB45C7F24E39DF37FA895E33E3130415B6314F8A010B72A91EB061124FF7E0A17FB77311BFDD44CBBD930EC4BBA9F000F25F3CCFBC5ADBF
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=ncsu&utm_survey_id=SV_ezeLwH8MeEs4Xye
Preview:	.<!DOCTYPE html>..<html lang="en" prefix="og: http://ogp.me/ns#" translate="no">. ID: 96479 -->..<head>.. OneTrust Cookies Consent Notice start for qualtrics.com -->. <script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" type="text/javascript" charset="UTF-8" data-domain-script="0174e4ef-b832-4af5-a993-2642a1c2e41e"></script>. <script data-ot-ignore type="text/javascript">. function OptanonWrapper() {}. </script>. OneTrust Cookies Consent Notice end for qualtrics.com -->. Unindexing the support search page Todo: change when support becomes static-->. . <meta charset="UTF-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <meta name="google" content="nositelinkssearchbox">. <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">. <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.p

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2653), with no line terminators
Category:	downloaded
Size (bytes):	2653
Entropy (8bit):	5.339127754242436
Encrypted:	false
SSDEEP:	48:TLjv5R8wyLl4XCe4y5eAjVe3yzFXKkCKdLeEpQ8LeEpm3LeEpcn:TgZizFX/7oFfZaL
MD5:	E1542BDDE1AABD40B7728011E4BB8248
SHA1:	3AEF44E0851B09DDA43046422104134A98785CD1
SHA-256:	2CCBE6FFBE55F4872852786FD4E47FDF834E556DF3DF0918E6DD090C16C5A85A
SHA-512:	AE17927EB8422565DC62BAD06A0822BDF956C09ED8A9F4A49A110786868DD7E130031DD133329764F308F646B3835B6041B4674F76A174996CE28226DC61F904
Malicious:	false
Reputation:	low
URL:	https://ncsu.qualtrics.com/jfe/static/dist/c/db.e1542bdde1aabd40b772.js
Preview:	webpackJsonp([16],{189:function(e,n,t){var i,r;i=[t(0),t(183),t(509),t(510),t(511),t(512),t(513),t(514),t(515)],void 0!==(r=function(e,n,t,i,r,s,o,u,d){"use strict";return e.Class.declare({$name:"DBRendererBundle",$extends:n,getDefinedRenderers:function(){return{DB:t}},getDefinedTemplates:function(){return{DBFLB:i,DBGRBWOTXB:r,DBGRBWOTXBURL:s,DBGRBWTXB:o,DBGRBWTXBURL:u,DBTB:d}}})}.apply(n,i))&&(e.exports=r)},509:function(e,n,t){var i,r;i=[t(54),t(0),t(9),t(2)],void 0!==(r=function(e,n,t,i){"use strict";return n.Class.declare({$name:"DBRendererHTML",$extends:e,initialize:function(e){this.$super(e)},hasResponse:function(){return!0},useUpdatedDBElements:function(){return i.getPathArray(t,["experimental","UseUpdatedDBElements"])},useFieldset:function(){return!this.useUpdatedDBElements()}})}.apply(n,i))&&(e.exports=r)},510:function(e,n){e.exports='{{? Q.runtime.ShowQuestionText }}\n <label class=\'QuestionText BorderColor\'>{{=Q.runtime.QuestionText}}</label>\n{{?}}\n<div class="Question

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (48732)
Category:	downloaded
Size (bytes):	48735
Entropy (8bit):	5.458611128024058
Encrypted:	false
SSDEEP:	768:zaoEqoi/oCbSR6Nd8BOMWUwcHK6FtvdDQVyrCC5wwVDvv/GCTEsu08Dt0k:z3BFd8BOjuvyyBeUvJgsuJtP
MD5:	C045F11FB5DCCBDAD50235D99F08D930
SHA1:	65A467CD5EDF7EE598518284FCCC73E775BCA074
SHA-256:	05DCE95EAA2457F1ED9076E0D32B59680B654CF7CA6A4E35F3FE682C78F460B0
SHA-512:	12A2308F76F4198D1D547576163C5240D8E3F404887051249F85A3F9D6BB168B95D12B61F9A29825D611610B21BA4E5C5DA804C2861656E716ED0BBB78B8447F
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function t(t,n,e){return n in t?Object.defineProperty(t,n,{value:e,enumerable:!0,configurable:!0,writable:!0}):t[n]=e,t}var n,e,r,o,i={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,s=2,f=(t(n={},a,"li_gc"),t(n,u,"li_mc"),n),d=function nr(){var t=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,n=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var o in function(t,n){if(!(t instanceof n))throw new TypeError("Cannot call a class as a function")}(this,nr),t=t\|\|{},this.consentAvailable=!1,this.issuedAt=n,this.userMode=e,this.optedInConsentMap={},i)t[o]=t[o]\|\|c,t[o]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[o]=t[o]===l\|\|t[o]===c&&r===l},v=(e=[i.ADVERTISING,i.ANALYTICS_AND_RESEARCH,i.FUNCTIONAL],r=[c,l,s,c],o=new R

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1654
Entropy (8bit):	4.792409894357088
Encrypted:	false
SSDEEP:	48:Iw0s5TfBFL6d0tfzqEoMWPqp+a11xPhMH57n3:z9VFuIqFVP21LiH57n3
MD5:	2D24D81BF78B6D5A19F55C6665ECCF5C
SHA1:	DBC157904D68E0424B2954EDE06CBD7AEB9716A7
SHA-256:	C375801D367DB7ACAEB5AC064D2CACFE0533D3BC25951EA86525D3B34DB2BCBD
SHA-512:	0CF46BB2BA12EAD869C4F108365B8EFE634259FCDA41629E64945E1DAFAD8AFB44F3DA446962893809CD8C883ED6FB21AB59B99F5135B62EA905BD08D0B19824
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/plugins/dg-carousel/styles/light-box-styles.css?ver=2.0.26
Preview:	/* Light Box Feature /...dg-carousel-lightbox {.. opacity: 0;.. transition: all .3s ease;.. width: 0;.. height: 0;.. display: none;.. }.. .dg-carousel-lightbox.open {.. opacity: 1;.. width: auto;.. height: auto;.. position: fixed;.. background-color: rgba(51, 51, 51, 0.88);.. top: 0;.. bottom: 0;.. left: 0;.. right: 0;.. z-index: 999999;.. padding-bottom:30px;.. display: block;.. }.. .dg-carousel-lightbox.open .lightbox-header {.. / background-color: rgba(51, 51, 51, 0.84);; /.. / padding: 11px 15px; /.. / margin-bottom: 30px; */.. text-align: right;.. }.. .dg-carousel-lightbox.open .image-wrapper{.. display: flex;.. justify-content: center;.. max-height: 100%;.. margin: 0 auto;.. height: 100%;.. white-space: nowrap;.. align-items: center;.. }.. .dg-carousel-lightbox .image-wrapper img {.. transform: scale(0);.. }.. @keyframes imageAnimation {.. from {transform: scale(0);}.. to

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 1366x853, components 3
Category:	dropped
Size (bytes):	118683
Entropy (8bit):	7.745269440549057
Encrypted:	false
SSDEEP:	3072:4HiPDQLdLjmHYHYvPGbQ3l4neNF5jgFOwBhmS:KiPwBvHwcWlZ1wBhmS
MD5:	A11A1950965965B655B8378D6D19591E
SHA1:	D6495212DCEA0FFE9A6F0C948D31705B0DF49DF5
SHA-256:	9D863CC988E205D1713EE57C36FBB82F3FBF9AC9F9AFEBF04E1CA6A04AD91C4A
SHA-512:	2A83F7200EAA1E3885B5BF27195FE39BCEDADED0619F2091DCD9310F41B128DB742EF668961BAC52C986B8AC3BCD8FF0A236DBE348F88CFDE7B5851197D3F1E1
Malicious:	false
Reputation:	low
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................U.V.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(.......?m.z..;I.....O...a.6&..p\.o......A....U.*:t...../....F.y.~.Q^w...N.........Gt.].l....B.....R...J..%JN.Vh.5%t.QE@.j..o......t.GO.%....oq.....E%YO.{.k.Z......3.;S......^2.j.....>...zeS.Rg.gx.^....%...W....=k..)..}.C...1.

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8035)
Category:	downloaded
Size (bytes):	9840
Entropy (8bit):	5.486234913785518
Encrypted:	false
SSDEEP:	192:pIUkupNRxauPT2Gh6N+rHfGWTddZBobKTPsGD6u0IMmu/RLl7s:DRxHc+T+WxBobKTPsGD6JIMmu/k
MD5:	C285A36BB69877717CC756E69AE687D3
SHA1:	80A34D66D58D54EACA5C3DAE08734F42B396DC7A
SHA-256:	46A4445998E76A44134DD96D48856669A9F8CCFF942E24E1D66995ABF3BE665B
SHA-512:	A0B1B3C8907FA61111D964457C48048F9D616EBAB79397137D9AA645435210827F54D774B0C78BA4369675BBBC8E687AEC0CE95C7FDA57AF574DD2CA8022DB76
Malicious:	false
Reputation:	low
URL:	https://zn725dkxtvxq847sl-qxm.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_725dKxtvxQ847Sl
Preview:	(function () {. if (typeof window.QSI === 'undefined'){. window.QSI = {};. }.. var tempQSIConfig = {"hostedJSLocation":"https://siteintercept.qualtrics.com/dxjsmodule/","baseURL":"https://siteintercept.qualtrics.com","surveyTakingBaseURL":"https://s.qualtrics.com/spoke/all/jam","zoneId":"ZN_725dKxtvxQ847Sl"};.. // If QSI.config is defined in snippet, merge with QSIConfig from orchestrator-handler.. if (typeof window.QSI.config !== 'undefined' && typeof window.QSI.config === 'object') {. // This merges the user defined QSI.config with the handler defined QSIConfig. // If both objects have a property with the same name,. // then the second object property overwrites the first.. for (var attrname in tempQSIConfig) { window.QSI.config[attrname] = tempQSIConfig[attrname]; }. } else {. window.QSI.config = tempQSIConfig;. }.. window.QSI.shouldStripQueryParamsInQLoc = false;.})();../@preserve.Version 2.5.0./../*@license.

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	36802
Entropy (8bit):	5.183194921183498
Encrypted:	false
SSDEEP:	768:YnTZj5u1RVtbRzHaRe65Fgfa2FxYtWtVfpvxD+4gkN:YnTZj5u1RVtbRzHaRepa2gWtVfpvd+4z
MD5:	A60C659081EE525AECA43337835957EC
SHA1:	4DF40ADAB0BC106568B85FFA54DAE1656F85104C
SHA-256:	BA05B4AB8C4705D70D11100F5BC140516D4871EC0CB5427F4E92D4D162F446C4
SHA-512:	F4DC3B264BEB3EF390CF64C338A1BFB0588A8A94F659D5305A63E9EFF0BF33745D49968901259BAB8FF5AEBA6B6AEA832A3AB2EBE958926A24A6B82ABF15701C
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/themes/Divi-child/style.css?ver=4.25.0
Preview:	@charset "UTF-8";./* CSS Document /./.Theme Name: Divi Child.Description: Child theme of Divi for NCSU Natural Learning Initiative.Template: Divi././-----------NLI Custom Stylesheet_Updated 2-27-2024-----------/./___________GLOBAL STYLES__________*/.html{..margin-top:0 !important;.}.body{..overflow-x: hidden;.}.#page-container{..top: 0px;. position: relative;.}..et_fullwidth_secondary_nav #top-header .container {..padding-right: 2%;. padding-left: 2%;.}.#main-content{..background-color: transparent;..color:#0F0F10;.}.#main-content .container{. width:100% !important;.}.#top-header{..z-index:99996 !important;.}.#main-header{..z-index:99996 !important;..backdrop-filter: blur(10px);.. -webkit-backdrop-filter: blur(10px);..top:0 !important;..box-shadow: 0px 6px 10px -6px rgba(0,0,0,0.3) !important;.}.body:not(.page-id-39) #main-header .container{..width:100% !important;..max-width:1600px;.}.#main-header .container{..width:100% !important;..max-width:1920px;.}.#ncstate-utility-b

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", progressive, precision 8, 400x250, components 3
Category:	downloaded
Size (bytes):	26931
Entropy (8bit):	7.9795752447182355
Encrypted:	false
SSDEEP:	384:qU8uinQm4UcioH/oNJoYhylp+4UpRGanp2NMfWufNg2Gw6J1H/TEQSE1uFmjZA+l:qNuihJpIO2NMuufNg5wI2clz
MD5:	D3A9CFE6FC294A3752E31DEB4BD30C17
SHA1:	C3DAD89628DC54BFEFF52896582F59AFF5F1100E
SHA-256:	72C0AFAFA5CD14BB50D983035BF65D61878F46B33CB8BB93840482718534778B
SHA-512:	5B14A6C85AA08C7207F07A41E5B566E930EFB6FC228B9E314352F09F374C2ACF224874BC7EDFEFE99B35C01E69D716B7B659D9DCE7AD7A230E428C2B71FA1B6D
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2023/12/FEELC_photos_for_newsletter_cover_image-400x250.jpg
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...............................................................................Nr.).Lf.Mw..].o.zU.(.........l.k..g}_..Ubr.x..2sN.K..........S..Gy..s....^[V..y..=..:.t.X..W.o.8..Y.~..[......z}O....`/...g...)..v..P.{...g{_S..X9....Mi........@.[,..,.....S..a.]...8....;.>.Wey.....G..=.3.....C.../P-..Q.?.{..........J[<...v..{.s..v...,..dj9A..z.>.c.vT.z<...Em..=....z....%.,.\|....s..=.t9..<@.F..K.`..2.8Q.Y...1..p...c...A....K...w.Ze@..^?nZh0.....NrE..,.vpp........a...M.X.tr.....{.g}.;..=.....c...BK.n....pw.+..1.i6sWF....-..J.=....l.....]gY.S.@.&.f...F.l.e..R....d~...f..~......1..4.{...>.{...I2.....c...%...>..}q...T.X...#\.#.3.sL..g.b.M`...V-........#.. .Y...&..........p1........y8.Y^..{..{...zbr<h...s._R.B..U.~..m~g...

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 248 x 170, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17172
Entropy (8bit):	7.974858535178584
Encrypted:	false
SSDEEP:	384:eMkhVBdapU1Yu9OqtRQ30aprApbVP2JseBW:eMkhRasntRQlprAppEsn
MD5:	EEF64DA8CB1A8123E0CFE6BCAFBE3405
SHA1:	F8ED40ABC504308CDA91A59B2D40AEB3D5913B38
SHA-256:	48EB12EAB1BE9C09CF5304995A2E2AC60B3DBE13D0F640C393A0CD0562E2FECB
SHA-512:	8296EAEF35542C51CE59A3071DA507762D7ABDB63FAC7F7A0E1BA1FFEE9A59839CE1CBA7931C0DA6E6C76330117FF1FB6332A24A4616A371C1615DB859C39823
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2017/09/USDAlogo-e1508354968125.png
Preview:	.PNG........IHDR................... .IDATx..{.\.u...EO.++J.FK....E.`..B.!..%.&.c. 6..vb...al..q.5.\|.b/..I26.8..x2~..U...!.!..L\|1!.+."W+Z.,]...Q..........GwUw!j..]........{.cLi..e..43.P.P..{..W.)...k...oj...o.e....N.Z}#..3...b....6.....N.xF.....o..7.g.\|...{.:.bJ..J...Lw!^.n-.\OY.R._........A.{....x..J.~..^`.......n..Z5n.1.q...@Y\|3@$.w..P.Q......+.G.....J.>.......3..:.e.N.N..#&-.mb.L...\j-..X.A.Z....v..7/5.>....@....E...C8..q.zw...n...-.O.Z.J...1....\|.K`.-..N...Z?..m.n2..^A...j.Vo...Y).r.>g...../.2.~.[._G. ........l.T../4.&PB.....R..5..B...J.q..S....L.j7..M.,W.w.ou.R.M....vs..*.o......f..]_8.B]c..N..=.o,5...D.J.q..W........[...Q.~..".[j.,..D.Z.....3K....<ie.:......4rT......hC...2.....Zi...Ft^.t.bk.s..U...?.......w..T..x.d.%U..6..,.. .vp.v..-...n0..r.q...0..^.i.(.\.oE.....`.B..a.us.....f.HX..8..O.I....O...[..r.>+.Ad...q...Sf...>....o...1.$f.2.hz '.......C....!..v...77~... ..lD.Q.O.oWj.7T..Q...!..16f\..J.>.9j.....eQ.....@..N..o}...h<.>.=.T...>-..(...ws

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 850 x 441, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	38438
Entropy (8bit):	7.918609492190036
Encrypted:	false
SSDEEP:	768:8rEkkdOd6wOcnqvbQy3Y32bwwzSCM+BICkrA5psMqZUEN7BFkwHi8Okrs:+EvEwDTp3YmbwCMpCkryLg1N/kwHi8u
MD5:	932F6534E4459168B4CD5E9F7034D6B4
SHA1:	EAA4267EC1FC5EEBFDA72D428BD22F9C8E56C16B
SHA-256:	8F5913695496FB4F2CBC6D30A4DCC2A360AFA19BF19325BD62F575FCB97AED0F
SHA-512:	CBA0A384E9265609228ECDA741101A5D000E48234B7AA7541ACBEA3393E4C99762B6F40F884D2F5DA0AC59D1F9D33C413F10B806590D6F7AC6C01825C4B07A04
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R..........:.o....pHYs..,K..,K..=.... .IDATx..Mr.J...&.......1.SL.....>.vy.`&..L...(;.1.n.'@m&.p.D...../T.\.~RJI..".K..+...r)%..o..!1....A.>..)).......c.2.....g.R\|.%....V..>%" ...f(.....#.."?%...`.4><...........N..U 5...Lx......u.,.?C.E......A.@..u.....+.K.`.U..:..B.4h..u.A..%.......m.-g.}#..u.[.............c.)>..p.../a..1....A..M..1....o]~O..^}.....A......>]..c.I.u..*..@.]..p"........I.v....+.3.>..o...#T.<.2.XB.c.z>.}....n..6.-..:h.9gE..3.......~.....o.E%" ." ." .6.n...P...!.!......p....6\|.N\/.o..\|...`...o(.....:...7db.......e......a.p.H.... 8...Z..G..6./.1b..@.ma....$Fg]\|..o:&p.s.....e...........X.....'..4.].l......l....zd..0.c.........g...1..N.5.n.....'x....S...........\}..H."R.............)6}..s.S9._].Qk./.q.M....r.u.q.......uB.......['......p+...f....;.c.64O..q..$" ." ." .........D.q.C......./..K.6....W.g}5.a......+C..,..Fs(W}.x_CM....)Ci7....e.D.D@.D@.~.h#....?[.k..@.$8...e....Tw...&qm.o.......H.....VA.<Ebd.P...

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7520), with no line terminators
Category:	downloaded
Size (bytes):	7520
Entropy (8bit):	5.05430874180172
Encrypted:	false
SSDEEP:	192:hXV2s5/la+2ZWygIJWmpcHWaMaRNX8pEqUZMSq:hF2G/tYqdHz9bX3q
MD5:	F68C0ACB3672227521763161CBD41A21
SHA1:	C5FB35AA61D02AC34F820940D6A142898061D44F
SHA-256:	C94B350D90E850FEFDBFC5D9498770DAC371F18876191821EEC42C0BFC69484D
SHA-512:	39C81A1CF61D114B4E4A6389DA147D9B542C95154625B504FF9956FF692182EB43797E78452D45E35D15595A23369438EEA7797FCFAAD1E2E7BDAEE8DDA47E30
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/assets/dist/js/libraries/lazyload.min.js
Preview:	!function(t,n){"object"==typeof exports&&"undefined"!=typeof module?module.exports=n():"function"==typeof define&&define.amd?define(n):(t=t\|\|self).LazyLoad=n()}(this,(function(){"use strict";function t(){return(t=Object.assign\|\|function(t){for(var n=1;n<arguments.length;n++){var e=arguments[n];for(var i in e)Object.prototype.hasOwnProperty.call(e,i)&&(t[i]=e[i])}return t}).apply(this,arguments)}var n="undefined"!=typeof window,e=n&&!("onscroll"in window)\|\|"undefined"!=typeof navigator&&/(gle\|ing\|ro)bot\|crawl\|spider/i.test(navigator.userAgent),i=n&&"IntersectionObserver"in window,o=n&&"classList"in document.createElement("p"),r=n&&window.devicePixelRatio>1,a={elements_selector:".lazy",container:e\|\|n?document:null,threshold:300,thresholds:null,data_src:"src",data_srcset:"srcset",data_sizes:"sizes",data_bg:"bg",data_bg_hidpi:"bg-hidpi",data_bg_multi:"bg-multi",data_bg_multi_hidpi:"bg-multi-hidpi",data_poster:"poster",class_applied:"applied",class_loading:"loading",class_loaded:"loaded",cl

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 525x425, components 3
Category:	dropped
Size (bytes):	38649
Entropy (8bit):	7.7417228232871595
Encrypted:	false
SSDEEP:	768:vpwwwMxLIEeB74WReSfwJiXrOFkiOIezTTTrLqc65WNh+T9CyY6:v5OEeBEe0wOKNIeG5V0x6
MD5:	D7971099D5C64944CA09A886D56B1AE2
SHA1:	AE842D03A64117E73748C2BC37583DF2A011050C
SHA-256:	9B1B074B8D3997D7B8CD50DDF6BD7EB7F721A6DAE9A5459E8FCD6BCA249A5882
SHA-512:	67CED8AB99CD54C3FEF143979A746507FCA5E5353AF31BD8BC186BE52AEF9A9F567CD0798D1C772FF366CD7A6E0E6120C713F4BDE20AA9E97115D706B90EFCE5
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...O....%i...!XX\|B.U...... ...c....ETE........

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	236
Entropy (8bit):	5.145727613837954
Encrypted:	false
SSDEEP:	3:RAMTFLyFKPLD0NHaK9WJ/iMxWAqYEMTFLTLLWAqzRAdrLASFjNPqNM5eJRhXOS23:z572U/vEOx5TLyorRoM5kRkS2uALr
MD5:	D8915F83CBBD3735AB0D0BE1F2FAF6E4
SHA1:	B29B776DDE2E221B6E6AA2B266E8DF581DBEBB8F
SHA-256:	4107F94BA66447AF979DD7AD407777C90D3202D15756C4A85C0ED85CDFC3EAC4
SHA-512:	BCE1C5521F2F448B12E92701C34F540FE46AD52B6C5F7870AD54555E0D4322AB5A10E236A2AC726D19BD88069C1B1E92831157309D5AF48C4B4677EDABA8634E
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/wtfdivi/wp_footer.js?ver=1635256086
Preview:	jQuery(function($){$('#footer-info').html("© <span class=\"divibooster_year\"><\/span><script>jQuery(function($){$(\".divibooster_year\").text(new Date().getFullYear());});<\/script> NC State University. All rights reserved. ");});

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	65577
Entropy (8bit):	5.370046563081075
Encrypted:	false
SSDEEP:	384:scUCEARxwj1DI7VAEWDSskFL/Rvqt7svi41wlQrpagwXt8ekZgtCxrHH2Orv5ZK4:scN+DUAE0jd7szpaRa+yHHNA9P4F
MD5:	BDBC97044A366414844A93EA65E5AF02
SHA1:	FB8CF2BA7159A1B6D5E5D639309D2B1D9D37A587
SHA-256:	97844014791E7702E498AF1B54139D615FC5A34F9B47CCA8DD9D3CCE6F645BDA
SHA-512:	A819FB8852BF531F14A1CE82F053A3B55B861A551ED5BCDDCDCE7AB6BD0FE74DB6D2D1554AC3C499962570F68A33FEFDFCD693DF193075541B56776FBFA154FD
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otPcPanel",. "html": "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

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 450 x 450, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	227378
Entropy (8bit):	7.969104215068005
Encrypted:	false
SSDEEP:	6144:1OIGjfxUCjFr04aXfLUGs9IzeMeS47IMoHqR:wfrJrDgAGv5Xva
MD5:	E5F75A2F4677BC5F5882566631FEB16A
SHA1:	5BFFBEE493568D3B1E2D0805287142C81A39E2E0
SHA-256:	55F01C7A0213E3B0AE82225D9F93DFA6C8BDF64AA414348456DD0FE7B64CB2EE
SHA-512:	46C6D53A3B8337C336AF5301FB941E6CE482B8E57A3CE9832BC05B4182FB6B24791942609D901B227372057E98C6AEA45C779CA85CD0031734358E0CD1E1B42F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............\|..E....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.2-c001 63.139439, 2010/10/12-08:45:30 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/". xmpRights:Marked="nurrka/123RF". xmpRights:WebStatement="nurrka/123RF">. <dc:rights>. <rdf:Alt>. <rdf:li xml:lang="x-default">nurrka/123RF</rdf:li>. </rdf:Alt>. </dc:rights>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>. . .

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	295333
Entropy (8bit):	5.569394285045464
Encrypted:	false
SSDEEP:	3072:FL4lgTyfCh9qwrQh2lr7vl8Hu9deL7rt6AL6h0UgWHtAS3R1ORu6mmkC22CSFDgY:t4FfkQglrzg7ldUgWHtASBnmkCPCSeH4
MD5:	F3B3B3F4CA29F643A540111FFD7864C2
SHA1:	BD0E445743C949AED167BD980B40F0CBD262DF82
SHA-256:	0DFAD3B1C554513FBC11C3C9BE24DCED04133610EFA079C977C8BF736B56E801
SHA-512:	54DB2159D62EDA9B5AE9710A0D9A571CC6E0F18A1216F43EB64ADDDAF0052B464DEF28B1718FCEA1BBCDEF1E5AAF89FEA0502859993D68607042A73B39F9CA37
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-M1MYBR9H42&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":13,"vtp_value":true,"tag_id":16},{"function":"__ogt_referral_exclusion","priority":13,"vtp_includeConditions":["list","naturalearning\\.org"],"tag_id":18},{"function":"__ogt_session_timeout","priority":13,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":19},{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (806)
Category:	downloaded
Size (bytes):	5294
Entropy (8bit):	5.215920587582217
Encrypted:	false
SSDEEP:	96:STT4EvYjNo4dD1kRxae/fshRnkATod1TdIGEIfS+x/By+66Hs:A0No4dxk/aHhRk0I1x/fSkZy+0
MD5:	E5695937F6E0E31357CCC78CB83A74ED
SHA1:	56A4C5C63CD83444F48E0AEC65E62AA55DECC9DD
SHA-256:	30DBACE3242C382DF25BDFCB858C88D826C3F2D845D899603BABBD841D0770CE
SHA-512:	24C0711019AA24C90DB0034382CA3672C16281860D6D6DA83577AA7E0FB3B0FC2431822AAFF65926F0992184A01AED710A3542A10BDE8272778A112A6C0DB120
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-wrapper.js?ver=4761
Preview:	window._ASL_load=function(){let d=WPD.dom;window.ASL.instances={instances:[],get:function(b,a){this.clean();if("undefined"===typeof b\|\|0==b)return this.instances;if("undefined"===typeof a){a=[];for(var c=0;c<this.instances.length;c++)this.instances[c].o.id==b&&a.push(this.instances[c]);return 0<a.length?a:!1}for(c=0;c<this.instances.length;c++)if(this.instances[c].o.id==b&&this.instances[c].o.iid==a)return this.instances[c];return!1},set:function(b){if(this.exist(b.o.id,b.o.iid))return!1;this.instances.push(b);.return!0},exist:function(b,a){this.clean();for(let c=0;c<this.instances.length;c++)if(this.instances[c].o.id==b&&("undefined"===typeof a\|\|this.instances[c].o.iid==a))return!0;return!1},clean:function(){let b=[],a=this;this.instances.forEach(function(c,e){0==d(".asl_m_"+c.o.rid).length&&b.push(e)});b.forEach(function(c){"undefined"!==typeof a.instances[c]&&(a.instances[c].destroy(),a.instances.splice(c,1))})},destroy:function(b,a){let c=this.get(b,a);if(!1!==c)if(Array.isArray(c)

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	578
Entropy (8bit):	4.672254507187077
Encrypted:	false
SSDEEP:	12:t4s9aoBmuSrJ7dsGyYRcs/R66HxlGMrfyjyjSR0d8UC:t4s4Gmv17ds+Gsk6HxlnfyjdRVn
MD5:	A63F2B7A08A92B5E34BEE5D001380CD5
SHA1:	8066F81533F0E8AD4C5798101FB198EF11E96A92
SHA-256:	44CF2D40A9E206F3E38E92C31573C175E16E596A369D78922DCA01D2F8E24F33
SHA-512:	90481B65A5D8F7E4A443E6958952F5E9D20BBBA039FD493C6F884D6C8D32F84155C20860093C1C128B60A96526344C74212F3381033F046A8753A812C4115C20
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" >. . <symbol id="solid" viewBox="0 -359 1792 1792">. <g transform="matrix(1 0 0 -1 0 1433)">. <path d="M313 1700.5q46 -24.5 70.5 -68t24.5 -97.5q0 -52 -25 -94.5t-72 -67.5t-108 -25q-60 0 -106.5 25t-71.5 68t-25 96t25.5 96t72.5 67.5t107 24.5q62 0 108 -24.5zM1492.5 1170.5q94.5 -54.5 148 -164.5t53.5 -273v-626h-363v584q0 116 -45 181.5t-139 65.5q-68 0 -113 -33.t-65.5 -84t-20.5 -105v-609h-362v1092h361v-158q49 78 124 131t205 53q122 0 216.5 -54.5zM385 107h-364v1092h364v-1092z"></path>. </g>. </symbol>.</svg>.

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 868x801, components 3
Category:	downloaded
Size (bytes):	72736
Entropy (8bit):	7.805012214289913
Encrypted:	false
SSDEEP:	1536:PwrNlMt+Lqu2P6lRurFsqjpcc5I8Cr62OXzZyk3Z5BgK:ukt+LqXvLjpDI8lU05GK
MD5:	6A4E01662186EA55995A940CE31CD698
SHA1:	DE2953E1192359791185A18F5548EBDFB03CB9E0
SHA-256:	8D1BD6A391D1099D3151D842525B5F01AD909D2687CF37CDD77A3FF051223119
SHA-512:	0641D2B7A337F18AECE4F47A48348B0C3B043B1C21AB712B0B308D71EF2A430287012C23F7AD24E7729CB88D99BD718F74442C2FA36E7E8FB8A2D3A3BA0F073D
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2020/11/NAAEE_Logo_VT.jpg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................!.d.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 45868, version 1.0
Category:	downloaded
Size (bytes):	45868
Entropy (8bit):	7.995537164653295
Encrypted:	true
SSDEEP:	768:yG/SrzyIuACK0wnrdUyNBebUo83vhrjf7SWiVYvuhKyPqS:yAsmuruvb8fBj2iuXSS
MD5:	6DCB326C9D79642B4C1AAB8EE204FE4E
SHA1:	01F4C0461DF25CB97A94C4ABDE20DDB2736AE5A5
SHA-256:	74B23D24E945E6F7490758DC5C7BB2BC3DABDECA7788E827D2F395FF0275EEE8
SHA-512:	0B09E539A9003A3F69706D24258DCEF776136AF49BDBF3BC526005D4D25DA060339342BFDCCD70509DF75D6FC845830E91EA010800641AD85DA768A8AC9895BF
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ptserif/v18/EJRTQgYoZZY2vCFuvAFT_rO1cg.woff2
Preview:	wOF2.......,.......0.............................. ..<.`....J.........../......P.6.$.... ..F..\..6[.zq.hw.^..Y...o....C.v....nZ1.5.8...Xw......R.1.l<M' .....7.`...L.1.....t...R.-.!.U6..v.MtI0......c..r....T.}..%..6..G8.#._.?.6\|.L.....=...2M ......I^.I^C......}....h.'i.B..0..."..'........X.%.vy@.&....?G.`-tf.......,Y..l.Wd.......[.c.06..m.U16..#.$ZAAJ..x..}.EQ.}..Q..\|._7\|.~2.}.7...6...+.VJL....~.}.....F..4..Nc.TD.D,..Di.`....[..4...I.K(.U.H.2J.m.g$4ua...J.t<....=..w.......>.z.31.....J.$<.:........O... .....fO%....}O../...Lo+Ii=R......"rS..^..b.....4.g....S[..u.0.......&.V.:.G.....~.v.U.+....&w.Rs.f.....)aJ.N....i.?.f?.:..(...[...j/..p.R............[.nXZ^.........:...-........CP.a.e..T.4.y)y.)....r>.6.......P.&.u+.EM6..AB..H......v....mw.?.o...tZ.,...l.E.....B...........(.(.(.M..P.w...u..Tp..p. 6..-fV ...,..s......1.3W....N...P..W9.2...e._e........+.}.....VH@_6...!..Z}.j.....=0.,......h..k.....nL.. .:.&...._mVo..U.S'cT.....b}.....k=(...h

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1645), with no line terminators
Category:	downloaded
Size (bytes):	1645
Entropy (8bit):	4.807198820464474
Encrypted:	false
SSDEEP:	24:iLsuNBYEuuKBfsaZJTlTr1VCUOy3Oq3V/xW3NzxI/P/NwNNeF5MN8pFg4qMl7Jyg:iYu89uH4JhNVX3VQaXeTo9jg4LlF
MD5:	4C3A6D7389A91FA6E946C9695CE9196A
SHA1:	A8BB51DF76A7E24A3982546AE18943012C5FD365
SHA-256:	48FEBB3DBC13933A7F767C367722B66F03C3F45A030940C221A2ADB5722289FB
SHA-512:	9A82E7C2BC1AB73EC7EA2FA75DD4B595600824E85B84235E6CDA4236422E5036CA26D5F8F24DA4D949FE9FF5F2AB52FB43579ACB2CBCE7C94C86203F5B490430
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/wtfdivi/wp_head.css?ver=1635256086
Preview:	@media only screen and (min-width:981px){.et_header_style_left #et_top_search{position:absolute !important;right:0}.et_header_style_left #et-top-navigation{padding-right:40px !important}.et_header_style_centered #et_top_search{position:absolute !important;right:-20px;top:10px}.et_header_style_centered #et-top-navigation{padding-right:0 !important}}header#main-header.et-fixed-header,#main-header{-webkit-box-shadow:none !important;-moz-box-shadow:none !important;box-shadow:none !important}#top-menu li.current-menu-item>a{color:black !important}#top-menu li.current-menu-item>a:hover{color:#2ea3f2 !important}#footer-info + #footer-info{display:none}.et_pb_slide_image,.et_pb_slide:first-child .et_pb_slide_image img.active{-webkit-animation-duration:0s !important;animation-duration:0s !important}#slb_viewer_slb_default{z-index:100000 !important}@media only screen and ( min-width:981px){.et_header_style_left #et-top-navigation{display:table-cell;vertical-align:middle;float:none !important}.et

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-M1MYBR9H42&gacid=382778281.1714660381&gtm=45je44t0v889670875za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&z=1509789436
Preview:	<html></html>

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (336), with no line terminators
Category:	downloaded
Size (bytes):	336
Entropy (8bit):	5.234668520157943
Encrypted:	false
SSDEEP:	6:cvyCnaz/jg4le6UauQ8n/XZgZeJ0HqkEPElLkyvMi9/VUrhph/1lG2aL5k:cvyxjNs6A/TElvv5/VsXG2aL6
MD5:	DBD309900B5CE40D0020A1C412B54281
SHA1:	B2487C4BE82445B6500176A11BAD33710C722177
SHA-256:	BD137F9B15D22353CE12CB081AB01B5816003B87B80C3485346AD921FD293A2D
SHA-512:	2D5075D6BE4F2115F960B4E4A3FF9087E4A01587C47AF6069CDFFE75ABBF3BF88CC88312217F04891000E9718CA8A212E7698B6F33B63B568FB6A5116FA7D5D6
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISQQm2Ek-P-gIPixIFDfyM-aUSBQ02_qTlEgUN0LAlAhIFDUjR-e0SBQ0PqGwMEgUNsuxnZBIFDZr6tJMSBQ1v2WWiEnIJr4ib3hYYvIUSBQ38jPmlEgUN7BKW-hIFDTb-pOUSBQ2zQpkKEgUND6hsDBIFDdCwJQISBQ1I0fntEgUNsuxnZBIFDUmqLfwSBQ2zOd1FEgUN8zidsBIFDYgkCwwSBQ0LRy0mEgUNQzm9xhIFDYVXtu8=?alt=proto
Preview:	ClwKCw38jPmlGgQIAxgBCgsNNv6k5RoECAUYAQoHDdCwJQIaAAoHDUjR+e0aAAoLDQ+obAwaBAgJGAEKCw2y7GdkGgQIDRgBCgsNmvq0kxoECCQYAQoHDW/ZZaIaAAqbAQoLDfyM+aUaBAgDGAEKBw3sEpb6GgAKCw02/qTlGgQIBRgBCgcNs0KZChoACgsND6hsDBoECAkYAQoHDdCwJQIaAAoHDUjR+e0aAAoLDbLsZ2QaBAgNGAEKCw1Jqi38GgQIJBgBCgcNszndRRoACgcN8zidsBoACgcNiCQLDBoACgcNC0ctJhoACgcNQzm9xhoACgcNhVe27xoA

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 2048x542, components 3
Category:	dropped
Size (bytes):	91184
Entropy (8bit):	7.698281659886198
Encrypted:	false
SSDEEP:	1536:vicNaIYX75FcIrmwRw2G1EjnNdkJ6Ea5B+mDLnF5S8mL+:2IYX75qMw2G1ynXkE9B+m3FQ+
MD5:	478F6A660EAD59C2C101C2172D7D5D5D
SHA1:	43EFE53E86789EF45DED9D88AE30BB3892655D10
SHA-256:	B6A7BC65116C91099CF6496A3504C4D30A1B62318394530B26EACB1C38BFD338
SHA-512:	8763561819F271D8517A43B80A03FF4EC18EF09CDF81C74448755C6EC2FCF5124F647428C3A5830D8DE46AFC11BA05B72D6CF695A045CC0F4B647ACFEED9D1BC
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...QE..QE..QE..QE..QE..QE..QE......q.d.o.....f.....W..#F..._...... .$...B..z.7..z?.h.d......e...>Z...?..f./..v..\.f#..u?..^c^..>....s..`.?.8.1_...;r...z.D.IK_.}.QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE%.-.Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@.

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	71
Entropy (8bit):	4.732434577489323
Encrypted:	false
SSDEEP:	3:WKLmHm0H2DMSFWA2EeCXw:1mcDNslVCA
MD5:	2E69AD2B1A30E8F89971CB6912F079CF
SHA1:	FE425F207B5CA32EFFAF1827173B16715A32E6A5
SHA-256:	1771AAD88D0164B8F869D097851C94CC83D1A837F12FE8DE39D0F309FE45F33C
SHA-512:	61614D24AB0AC98AD42D5983ED6107C4AE4748567AF567A3304218530579EA318BC9730D3981E17F3866FB79D4168C93CF41EFAEE4A81AC6F7BC79B0257AB964
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-load.js?ver=4761
Preview:	WPD.dom._fn.plugin("ajaxsearchlite",window.WPD.ajaxsearchlite.plugin);.

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9450)
Category:	downloaded
Size (bytes):	24312
Entropy (8bit):	4.829756466938454
Encrypted:	false
SSDEEP:	192:tBWaIl2bdQCwsWz58WDJ+6sevQ5NxAj0tRNR34BVp3wb+LcXTbgXR9wHWm58pIo8:NiRhbJwaja28YIHSL4kV29T
MD5:	9E4BF8C8D2AE672A3862E22EA99B20C5
SHA1:	B054A3819E5CA30275C37BA0724570FA93EAD4AE
SHA-256:	37639EDE40EED8FB4DBD6EDFBED4402C98F1F9F0961CF4100A13666D21145CD9
SHA-512:	2692CFDEFD5DE14336B17A6E3CC26209ED2621BC6C1D4769C859CCE0DF2B851CFF58B40D184FD15B2DD187B123C7D06C4BD431DA158D2279D46E544BB14171A6
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/et-cache/1/1/39/et-divi-dynamic-39-late.css
Preview:	@font-face{font-family:ETmodules;font-display:block;src:url(//naturalearning.org/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.eot);src:url(//naturalearning.org/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.eot?#iefix) format("embedded-opentype"),url(//naturalearning.org/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.woff) format("woff"),url(//naturalearning.org/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.ttf) format("truetype"),url(//naturalearning.org/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.svg#ETmodules) format("svg");font-weight:400;font-style:normal}..et_pb_filterable_portfolio .et_pb_portfolio_filters li a.active,.et_pb_filterable_portfolio .et_pb_portofolio_pagination ul li a.active{color:#2ea3f2}.et_pb_filterable_portfolio_grid .et_pb_portfolio_item{display:none}.et_pb_text_align_left.et_pb_filterable_portfolio .et_pb_portofolio_pagination ul{text-align:left}.et_pb_text_align_center.et_pb_filterable_po

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	66467
Entropy (8bit):	5.428325720409534
Encrypted:	false
SSDEEP:	768:Ata3qttryOxOVcD+GmeP3EJP9wlltyXP7nZhPiNYv0G5mZxkZfcy3rucJlYRWpt8:AtaxY3C5e/ExFZhaGfcWruSlYR6E7B
MD5:	BDE75CBC27CE29173852C47B13F7A2DF
SHA1:	F1BFCE3D8548C4DA60DBB8A4298E7B568F37A1F9
SHA-256:	E6DB2A03B31B06A75355F53AE5538CC75A8E29B2766D7C24337A809137C26F32
SHA-512:	F74F3D2ABE36D04D75A127FBE128CEA572AA5B17B21E552F55A611512A54E045EC275C3982D6865005FDA977C8D3B1CAF54E7DC79E350F500731D59D6095DF4C
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/0174e4ef-b832-4af5-a993-2642a1c2e41e/018ece49-7ff0-794c-b925-1bb29409f37e/en.json
Preview:	{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"Privacy Preference Center","MainInfoText":"When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.","AboutText":"More information","AboutCookiesText":"Your Priv

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 225, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	9240
Entropy (8bit):	7.973114690418709
Encrypted:	false
SSDEEP:	192:O5KLSYR8wHcqrdhms4c6BJ4G+3HEjbzluEDxa/nb0:AKLSYawHcumsXoJM3UXwExa/b0
MD5:	41031A31622BBC10D9625CD08DE2D6D1
SHA1:	0F4E71E4C2080B20DFF114CE4DC58BC288A93628
SHA-256:	DAA9F07DDA8EF0289C14876C85DC557444B2E55E2F2ED091F21259B08B149D10
SHA-512:	D7DD8F1C66E8E009E590D9B18C600713D1D3F34A1ADCF72C04D599120E22AE74FD54A4E4CE70CAC97E09B53ACABAAC0B9A1AD7CBE7FFCD8861CB67BCBF88BFB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............m"H....PLTE.......>6.[....555.........DDD................................=5...WWW....:1.......aZ...yyy.......$.**IV.jjj___...zzz...RRR;;;...eee......###.Q.JJJ..........T..L..3).......PI............>L.........f_.).........sl...W..\|....>u.e...d..E.Ax......c....".IDATx.....Hv....B t+$.<B#....U.L.;..7..z....-..S...k....~~.....\|I.?y=.3`...8...=0fX..\........6.@. ..I...bY..#@n...3E..#.........F.-['D<....7..(....BD.1.%.0....@.:J`2.3......5...6...>zD.>o..........+h..@...j$T\j....s..!_:..["#8 ....-.2......k.L...\7..2.>R<..g\|.h....i.RK......B.L..)E..%...T.O...b...<"..O....&J...8..&?f.......V.o...1..[(B.-.d.O...q]c..r$p..\|...G.,..P..."..@1.F..UV..i.^....D......DI....7..~Z.6N.0cn..2&G...4Xm..>I........ulV.\|B.BY.....U.;.s..ML....0`.2....v..G.(.A....#..E...h.n.@.pO...A..w......'.4.r...}8#Zr.dO.+..{b`.....s..y..N%.v..{...q...,9....F.4q.vd ..#E.I..`..^.2.m.(.......R...Ge...&[.....".,.... .....K....l."Q..=..p2..m.0.P2...@.}r...&

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4104
Entropy (8bit):	4.328814271156652
Encrypted:	false
SSDEEP:	96:xmtg2X9ey4B/olsOc27hwyJBnO+78xKkU4t4xZ:x9cs07DJBO+Yx3/t4/
MD5:	9B5C50515ED23529BA92A962A9FA94F0
SHA1:	B7707FE0635253A1EB48D65FA94C0B2EB1E14027
SHA-256:	790B8722D35A47CA9497A4D7971B68873A8AB771F2F2130A7CD7864740333C32
SHA-512:	FAC1F39889A3E7D0A4AABC26DAA34C7F4971355966C2F97A5EA2DDC710328CBD3DB8BB10D3FF90A4231148DC72783AD8C713F732B600703578A13D942E74CEED
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="146.807" height="46.87" xmlns:v="https://vecta.io/nano"><defs><linearGradient id="A" x1=".133" y1=".008" x2=".949" y2="1.101"><stop offset=".042" stop-color="#21dbaa"/><stop offset=".358" stop-color="#00b4ef"/><stop offset=".433" stop-color="#01a7ec"/><stop offset=".568" stop-color="#0487e4"/><stop offset=".68" stop-color="#0768dd"/><stop offset=".965" stop-color="#5f1ae5"/></linearGradient></defs><path d="M48.52 29.028c-.9 0-1.08-.664-1.08-1.811v-11.41c0-3.9-2.2-6.222-5.888-6.222-4.4 0-6.4 3.384-6.435 6.738v.138h2.95v-.139a4.26 4.26 0 0 1 1.128-3.052 3.07 3.07 0 0 1 2.235-.929c1.762 0 2.814 1.375 2.814 3.678v1.07l-3.511 1.666c-3.981 1.862-6.59 3.376-6.59 7.305 0 3.449 2.17 5.766 5.4 5.766a6.46 6.46 0 0 0 4.947-2.557 3.3 3.3 0 0 0 3.36 2.557 4.85 4.85 0 0 0 1.817-.375l.084-.035V28.63l-.2.11a1.86 1.86 0 0 1-1.031.288zm-4.275-9.111v6.654a5.14 5.14 0 0 1-4 2.579 2.77 2.77 0 0 1-2.906-3.058c0-2.63 2.3-4.031 4.3-4.958zM64.935 3.22h-3.108l-.115

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13177), with no line terminators
Category:	downloaded
Size (bytes):	13177
Entropy (8bit):	5.024047983712418
Encrypted:	false
SSDEEP:	384:Ru+nAG3gCSqhyTfLJ2xOENInjwB2iVGeYn9KSz:aFENihz
MD5:	45185FD0A08A3FD90ACF0007A238795F
SHA1:	48BAC2241FB6845B88265FDEC0C59936FEBAD744
SHA-256:	80DA7A888759FD6264FEEB1AEA86AD00FD7D6168AAB07C726332DE14D1B972EE
SHA-512:	9B964233C0BE535B9C95C62BFC8FF55FF4F9FB0563D7FB7BF469ADEF226B2DBD95BB61D2711D9BD6000D78D398AF00AFDDC2197182CA606E7D060806070A5DBA
Malicious:	false
Reputation:	low
URL:	https://success.qualtrics.com/index.php/form/getForm?munchkinId=542-FMF-412&form=7836&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F&callback=jQuery37104990298446629253_1714660402559&_=1714660402560
Preview:	jQuery37104990298446629253_1714660402559({"Id":7836,"Vid":7836,"Status":"approved","Name":"Universal Form","Description":"","Layout":"left","GutterWidth":5,"OffsetWidth":5,"HasTwoButtons":true,"SubmitLabel":"Submit","ResetLabel":"Clear","ButtonLocation":"110","LabelWidth":100,"FieldWidth":150,"ToolTipType":"none","FontFamily":"inherit","FontSize":"13px","FontColor":"#333","FontUrl":null,"LineMargin":5,"ProcessorVersion":2,"CreatedByUserid":6519,"ProcessOptions":{"language":"English","locale":"en_US","profiling":{"isEnabled":false,"numberOfProfilingFields":3,"alwaysShowFields":[]},"socialSignOn":{"isEnabled":false,"enabledNetworks":[],"cfId":null,"codeSnippet":""}},"EnableDeferredMode":0,"EnableCaptcha":0,"EnableGlobalFormValidationRule":1,"ButtonType":null,"ButtonImageUrl":null,"ButtonText":null,"ButtonSubmissionText":"Please Wait","ButtonStyle":{"id":14,"className":"mktoNative","css":"","buttonColor":null},"ThemeStyle":{"id":3,"displayOrder":7,"name":"Plain","backgroundColor":"#FFF","

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 420 x 646, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	22918
Entropy (8bit):	7.7509320043850165
Encrypted:	false
SSDEEP:	384:cAAAVZlpN/ojkBsrfjJ7CoaJGmDXU1Su+X5DUn5f/UvC+7NSnxyqjRP:cAAAPdojQifMoBl4uawn5XUvFRSxh
MD5:	50E29C612AF2D9A63324CAE2E4755D7B
SHA1:	56FF35530543FC868B12668A3DC02316756D13A5
SHA-256:	27AB158FAF12F35AAECE4AC9B2D90A51170D5A86CFAEAB119D21291DDCAF9A25
SHA-512:	421D559AEECC5B58343941CAA0FE915B39CD2D8BE11C50CB0C3351471136258C58D68CCD81B820BDAFCE1AE3F4FBED199E254D1B7C91AD9189213A29CC06CC1C
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2020/11/NCR-Logo-Vertical-Color-White-BG.png
Preview:	.PNG........IHDR....................pHYs...#...#.x.?v.. .IDATx....UU..7..M.I.LI.5P.)%o...$.X^PFgt....KoE.;E.x.F.7.14)E.,/..e^.. .B../%......y.w...>...Z..u.:..Y...}Y....}.w..^.........:2.A.......D`.A..J.Vl.<.M6.,. ...@ ..E#....... .... H!..6@....@. ..@....@.... ..# ...@.A..... .. . HA..F@.......3...@..A.@..(..... ....g....... . .Q.....@....... ....A.o#V..=..`.... ...!0v.E.9........ .....qB.....3...... ...@......U... ..g...32.@...............@.....$gd.... .....$.T......... H......@..>. H>..'. ...8.@..........\|.@.\|P%N.@...p&. 9##.. .... . ..J..... .L.ArFF..@....A.A.A.8!...@.......... .....qB.....3...... ...@......U... ..g...32.@...............@.....$gd.... .....$.T......... H......@..>. H>..'. ...8.@..........\|.@.\|P%N.@...p&. 9##.. .... . ..J..... .L.ArFF..@....A.A.A.8!...@.......... .....*qB.....3...... ...@......U... ..g...32.@...............@.....$gd.... .....$.T......... H......@..>. H>..'. ...8.@..........\|.@.\|P%N.@...p&. 9##.. .... . ..J..... .L.ArFF..@....A.A.

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 400x250, components 3
Category:	downloaded
Size (bytes):	31533
Entropy (8bit):	7.963430573914925
Encrypted:	false
SSDEEP:	768:AW8NnzO22tFRqYhn5/ymyuGBI89gCGoa3rmhMnIMuY:ARNnKPtFRqYhn5amNGBI8qCq74M5
MD5:	6B4C7A00265BFF83B5262339372669D6
SHA1:	7B8E7ED68E010337198EF6F16210C9A599CC5D32
SHA-256:	21DE0989D0BB7C240E20C6B93E3456994D8071B8E252B50424A98993E0AB2780
SHA-512:	5158A99E2E56819009CC5438B10DA2B690620E386A6C81F1022CBE6BA776DA6805BB3AFF716D757BFFCF876353FA66F427776A060E696A8399163795202A8645
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2023/10/DCDEE_newsletter_article_image-400x250.jpg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."........................................D..........................!1A."Qa..q.#2..BR....3...$b.r..4C..DS..................................2........................!1A."Q.2a#q.B.......3R..............?....}0j.d..b\bH_..B.........._.d.@.Du.Z..w..Lon.q.h.}.\|..s...H.2.:C.?).$2../##...F..-......7.C........!n.....c..#...E`[.%~%...n...$.`...Gn...T....1.$`J..}...).......VU.8.u...u...q......6..rp1LA.@.......z.....$eY8W>.=..o8Yq.U. ..,.H....B.9.E.U........E%iA<....2=....[9.f.`..d...q~!S..s..u6..,.o..g.){...R..8..)..Ci[.......lP.6.......%?.:W..\zd....34..."..!.w.I..Cj*.H....hy..{.....C..mM.KN.XI........ur.,.a.. ....}.jM_p._-...^,.hW.......EJ...:..q.G.=..n......I..r..(.kD....6..i.n@!9.3...v....<...z......$..Y^.......;..>.%.S..u..#.w3.,..N.D.m.

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7397), with no line terminators
Category:	downloaded
Size (bytes):	7397
Entropy (8bit):	5.149594137840769
Encrypted:	false
SSDEEP:	192:ps+IIOQ96r9b+Vi/9AK9fTsTklq1A89fjSFxvzE:u+IICBluvB
MD5:	BDDF673724F89EB17C70EBD53A364B80
SHA1:	6AFCC24C0F65A3FAFEDAA9F16C83B4DC6E25D54A
SHA-256:	904B9D920E3433F48EBF530B9588F34C066D1EC02B97A6E1F42A9ABBD189DF7B
SHA-512:	21E9D1FF93BA684141A6FA58EE62D7D6275D3978E9152984C15BEA4B0D5002323A46CFAC0DDFB82F53D3FBCC5EBB551AF40651B1D28F9947EF9F46F0AA849420
Malicious:	false
Reputation:	low
URL:	https://client-registry.mutinycdn.com/mutiny-client/10.5.3.4.js
Preview:	(window.mutinyWpJsonp=window.mutinyWpJsonp\|\|[]).push([[10],{94:function(n,e,t){"use strict";t.r(e),t.d(e,"getCLS",(function(){return S})),t.d(e,"getFCP",(function(){return b})),t.d(e,"getFID",(function(){return k})),t.d(e,"getINP",(function(){return z})),t.d(e,"getLCP",(function(){return K})),t.d(e,"getTTFB",(function(){return Q})),t.d(e,"onCLS",(function(){return S})),t.d(e,"onFCP",(function(){return b})),t.d(e,"onFID",(function(){return k})),t.d(e,"onINP",(function(){return z})),t.d(e,"onLCP",(function(){return K})),t.d(e,"onTTFB",(function(){return Q}));var r,i,o,a,u,c=-1,f=function(n){addEventListener("pageshow",(function(e){e.persisted&&(c=e.timeStamp,n(e))}),!0)},s=function(){return window.performance&&performance.getEntriesByType&&performance.getEntriesByType("navigation")[0]},d=function(){var n=s();return n&&n.activationStart\|\|0},v=function(n,e){var t=s(),r="navigate";return c>=0?r="back-forward-cache":t&&(r=document.prerendering\|\|d()>0?"prerender":document.wasDiscarded?"restor

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (606)
Category:	downloaded
Size (bytes):	11133
Entropy (8bit):	5.520280429902031
Encrypted:	false
SSDEEP:	192:aCrC821ch80emIm9Db2M4GqZQ0M7jLQn2RC6yQEU+9my8M8iJAP3A/pFd0Pa9Sl4:aC2VzmX2TGeQj7Ha2RahU+9my8M8iJ3/
MD5:	EA7826F34518D7C2295738F39C7640FA
SHA1:	0095729B4BC2A580E4CE033993DAFE498DB87DF5
SHA-256:	68CC280CE370C6F1F51A4FC5950103FC38DF80A429552C549ADD04EBD8BD3A23
SHA-512:	E371BB3BAB334509BAA629DE564D37EBC7CA3CDDF059E33FE394A90856394AB318B26133D10BF9D3E47D83449F3C8242724C7850F58DC94A8F834666ACECD321
Malicious:	false
Reputation:	low
URL:	https://munchkin.marketo.net/163/munchkin.js
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: 163 r896. */. (function(l){if(!l.MunchkinTracker){var h=l.document,p=h.location,C=encodeURIComponent,y=!1,q=null,t=null,D=!1,v=null,E=[],u=function(b,a,c,d){try{var e=function(){try{c.apply(this,arguments)}catch(a){}};b.addEventListener?b.addEventListener(a,e,d\|\|!1):b.attachEvent&&b.attachEvent("on"+a,e);E.push([b,a,e,d])}catch(f){}},U=function(b,a,c,d){try{b.removeEventListener?b.removeEventListener(a,c,d\|\|!1):b.detachEvent&&b.detachEvent("on"+a,c)}catch(e){}},e=function(b){return"undefined"!==typeof b&&null!==.b},F=function(b,a){return b.className.match(RegExp("(\\s\|^)"+a+"(\\s\|$)"))},V=e(l.XMLHttpRequest)&&e((new l.XMLHttpRequest).withCredentials),s=function(b){var a=null,c;if(e(b))if(0===b.length)a="";else try{a=decodeURIComponent(b)}catch(d){c=b.indexOf("?");if(-1!==c)t

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21778), with no line terminators
Category:	dropped
Size (bytes):	21778
Entropy (8bit):	4.769188103585108
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFjlCS7FGAVsq1nwGfg4xqsQMPNE:JmJ
MD5:	73BC4067D312180A1B19A4D883F42D6A
SHA1:	AD328A9A572FBEA43F295E7769835FF08F6FF1FD
SHA-256:	D3F7B0EC4DE079928A999641E781E80F33597A392A561BC460276DFB4EFB6EEC
SHA-512:	20B89462521684C258A8CE15E94DA67182C66397B0DE528357E01294FF06883C1AD96037A9D739E4575DB8722B1A1967578709A0C844CD45A49E6A51E1B6479D
Malicious:	false
Reputation:	low
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	15655
Entropy (8bit):	4.717933299348096
Encrypted:	false
SSDEEP:	192:n/gfzhYVcP/mYowrvpaCADbP5uIVduVFzBK5qtsTIhIoBOFWxYiVQsjrmk7IxCSY:Ifz11ZADMI5UbNsux5
MD5:	FB6C9C5F71F64B2BEEE8A64D6238D835
SHA1:	9FCE557D749985AF121AAF82B3DB89852E78BCE2
SHA-256:	0BCCF2F0EE0B5313D9A177E92E195EEADB6C234EA1C811635CB132071B94AC2D
SHA-512:	C9D9D0FC4DEF5B8B98B1EB2CBD8B5FCEEF21884035DDFF7059C5C404840458DBBC7CBFBAF3D5665AF42D336F1A809222F869F3CFA7502A1101A0BDC9D4AD04B4
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/plugins/divi-booster/core/icons/socicon/style.css?ver=3.8.5
Preview:	[class^="socicon-"], [class=" socicon-"] {.. / use !important to prevent issues with browser extensions that change fonts /.. font-family: 'Socicon' !important;.. speak: none;.. font-style: normal;.. font-weight: normal;.. font-variant: normal;.. text-transform: none;.. line-height: 1;.... / Better Font Rendering =========== */.. -webkit-font-smoothing: antialiased;.. -moz-osx-font-smoothing: grayscale;..}.....socicon-eitaa:before {.. content: "\e97c";..}...socicon-soroush:before {.. content: "\e97d";..}...socicon-bale:before {.. content: "\e97e";..}...socicon-zazzle:before {.. content: "\e97b";..}...socicon-society6:before {.. content: "\e97a";..}...socicon-redbubble:before {.. content: "\e979";..}...socicon-avvo:before {.. content: "\e978";..}...socicon-stitcher:before {.. content: "\e977";..}...socicon-googlehangouts:before {.. content: "\e974";..}...socicon-dlive:before {.. content: "\e975";..}...socicon-vsco:before {.. content: "\e976";..}...socicon-flipb

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3043
Entropy (8bit):	5.012651991970333
Encrypted:	false
SSDEEP:	48:2ummjKHWZfhZZvZpbfZqZmZLqZeZgZ/WxSltHQPucwc5vBMHMoggaM4x28MQCo4d:ZmB8fHZBpFgskE6/x55SBRG1yRMQGymL
MD5:	E710A0001B1632C6675CB47FA53BB7B9
SHA1:	FA0FBFD49C8954B7E87EC11FDCDE4C7CA3BB1D91
SHA-256:	FCEFEEBBC7267CAEA79C9CCB19F7941363E00F8B611F179263A4FE3A729C9BD4
SHA-512:	43CA9B804768DA60B9582CFCA23A46D0D96E1D3B038061E1EFBF0B597B7725C8F2FA88758AFCD05742BE706F8B581F840BFEBC14E7B23410786B73D21A77D81F
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2019/12/instagram_3225191.svg
Preview:	<?xml version="1.0" ?><svg id="Layer_1" style="enable-background:new 0 0 1000 1000;" version="1.1" viewBox="0 0 1000 1000" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><style type="text/css">...st0{fill:url(#SVGID_1_);}...st1{fill:#FFFFFF;}.</style><linearGradient gradientUnits="userSpaceOnUse" id="SVGID_1_" x1="146.4465" x2="853.5535" y1="853.5535" y2="146.4465"><stop offset="0" style="stop-color:#FFD521"/><stop offset="5.510481e-02" style="stop-color:#FFD020"/><stop offset="0.1241" style="stop-color:#FEC01E"/><stop offset="0.2004" style="stop-color:#FCA71B"/><stop offset="0.2821" style="stop-color:#FA8316"/><stop offset="0.3681" style="stop-color:#F85510"/><stop offset="0.4563" style="stop-color:#F51E09"/><stop offset="0.5" style="stop-color:#F30005"/><stop offset="0.5035" style="stop-color:#F20007"/><stop offset="0.5966" style="stop-color:#E1003B"/><stop offset="0.6879" style="stop-color:#D30067"/><stop offset="0.7757" style="sto

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=2080, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=3887], comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 1985x1418, components 3
Category:	downloaded
Size (bytes):	617827
Entropy (8bit):	7.971838005654082
Encrypted:	false
SSDEEP:	12288:/2v4EgsudQVw+xh6MU2YdBEQSWB9j00/3/Q84fAHfrTA8:/2zgsuIUMUJEQTfoQQEjc8
MD5:	176F9BEDEEF3C6C1E43093D1170464CC
SHA1:	7119FB1928455C449A26EA29E81706E5FAE55AD7
SHA-256:	C3AF09757C149C632A83FAAD24B1D5394F0A7F40111DE5572B06B1A81F604304
SHA-512:	CE36830AE2B8F8E32DEFAE76921CF54F98E7E600B3A288896009F7FCB265B3B73AFB09B5C75159A4FB0B505A3AD031A3139100868F325CFBDB2B1B7ADCC9B6AD
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2019/08/Home-Prof-Dev.jpg
Preview:	......Exif..MM.*.............../........... ...........................................................................(...........1.....$.....2..........i.............$............'.......'.Adobe Photoshop CC 2019 (Macintosh).2019:08:07 15:13:08...........0231...................................................................r...........z.(.................................[.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................r...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...e..:x..U.....>m..)CC...-..qph........Z.XL.lZI\. Ta:D.["~..~U..>.dt..J.

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 599, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	52315
Entropy (8bit):	7.890554978111643
Encrypted:	false
SSDEEP:	1536:AGhMz0ZER+4CcxBSRcMOQ1PJVFLfelp0y:NhHZERe05MOQ1PvU3
MD5:	68233FBD29D7A0D4360F9D937EA9B0F8
SHA1:	F732D38BFD5B99011297EEF3CC15CE8762072A4F
SHA-256:	99326486E6496E66EDE40B3C1DB6784B9A6E7FD289FCC9188B31CBC197435BDF
SHA-512:	77BAF1AC75028C5745DEAA16569E1C2901499787A094858C4997885446FDEF8C53C0C97EEB622B8896261DDC5187A10762147566CC07897052D1C1C0EDA329CE
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2017/09/BCBSNC-Foundation-Logo-800px-768x599.png
Preview:	.PNG........IHDR.......W.....$}3u..."IDATx...1J.A...WY.X..O..x.+kO`ee!.U<....@......."..%.X.Fp.@..~..Y.za...............................................................................................................................................................................................................`<.O.....d.l/..`T.M.....9...(X......!J...N..`M.!W.,J.-..><.a_9...Ob......9.9?...6;..".2.A.Cm..]....g..-..s......~...Ei.Q.O.{o...E}.W....[y.ig..j.F.b..B.(.8>..B.>.p.*.b.)..h..(E. .!.A..,}..C.DD...C..UJ.ZD&6......D.R0..& .c.l..\...eots7..M..s.....o..~...{..vgv....Q.h...v........T...@G`_.....b.C.B.!.$......._..5vY..E.AY.X......z..bR..MU.?..>.2..5..........O.....b.l..C.!..B.I.....+..y5=..m...&..e... ...P....}^...5A.....j.Z....7vA.[...}.._.B.!.l]...6..;.6.;..../..y..P...p.&.$.....fR....]H.A..=....&v.......gx...B.!....)7Qk.ER.>Y...t..C..c?..o1......v..w..j...X..cm0c....10..&.w..3w...9..B.!.....ql..q?....@.J..M..AHu..=...f.S.S...C;.f3..f......%....n.?..

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13282
Entropy (8bit):	7.957584067560546
Encrypted:	false
SSDEEP:	192:wwY6alMNEdNZjoNnCUh1skQLYvssUGnC9i1HDtS4P+TyGmvGEPASmI/KRpVGs0:3Y6PONoNCU7bejsUMHVC7NEIM/A50
MD5:	28B0BEE0399F58180911159FE685FF90
SHA1:	9E13FD5265E8237BC8A1FAB5D6B3B0B9C0C5185E
SHA-256:	251522FB3BD3D6974004865C6AA618F4F748E2A11703C27A2E7246D8270DCE23
SHA-512:	3DFD38925A7A7DF464234CF1B7BA4F02F954C8582C2B9EDF2ED5EFBCC04AEA86DBD9D8EFD49409774EF4746120A8F41F23A8609BBED1C2DF48EA30D52BF36085
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2018/06/NWF-Logo.png
Preview:	.PNG........IHDR..................3.IDATx.._..U...t.,,.i..EK.....(T..ZD...E..T...Jo...%`..`..b.@.O..... .....s.I'3gNf..$y.xa.;.I..w..}.d.I.$I.$I.$I.$I.$I..\g..:G....D.$)......G..F.(.i...4..L..,..I..Wi"wI.,8"..m..L..I$I.C.G..&.(.p.a.v.x$.%..H.I?bW.*l...X.I..q(..e..IS1..I$I...C....;M.$i:Tzr)...].FZY...T..Ij....g.eT"I.t..$..kkc.\...J.JW%P.1.$JZ....=V.H.HQ-F...c#E)...e......./>2.o_-...]?...W>..4R.Z...y.....o}r...us...&y..I....S..p...y9..Q...4}.i....`Y?G..Y.D.'...s....x.'./G#.&X..%L.z.0...s\~]...-.G..I.:..EQ.X....(`........4.$5.yO.X.q).~..K..[....d.f.o:....p\[..}......i.-5.An4..,}.\J....<..+&.\|.$..j.$..<?a....kx..$px...<.X.5..Y.,.s)}..R8.$&....3..O....p6....g.JJ7[.[,...c.......I..1[[['...k.<xP)...O.....:.\|.....u\....&i..,..oBd:.dv.X.....k.....}3...1..M..F#{..............vS..4..m..^.=..r).}...phb................S.1......Zr-.V......R...M...&>.......JI...m..^......,....$!YH....A.../.(.'.u.V8<....}..X..aE.n...v,.W\|..8.R.B......U............vL...

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 609x775, components 3
Category:	dropped
Size (bytes):	98410
Entropy (8bit):	7.899530373933149
Encrypted:	false
SSDEEP:	3072:hm+U0ULOAogTtndjU0y7rVyy0Qtl5URTm0:llULRtS0yT0QxURTz
MD5:	1C7632D8A5D362DA1F894326518636AE
SHA1:	4F0B48B7F37E9AED3298BECED358473BAEF7A253
SHA-256:	55B66703E06E85BEC8EF19E0F25596E9AAFD2A7ADF0019151A99BB895D466061
SHA-512:	E654BC7FFF1B6C4DBB81A62E6B669998EE8F9BAE607902BF6BA699808622D69B012E585E2D7E7AE661CBC7C1EA9D3E5214541B0D1A875E636F2953C38AE6793E
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.........................................................................a.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(...(...(...(...(...(...(...(...(.......(.[...5....@..I4....^[..K...W_.u.n.8.N.nH.\|..yG..mY.....W.'........x.../..R..e..z.......y...T.$."]........?i.:..V.M.g.vp..}.O.k..?.k..f;.f..2s.k.e?.k.qv.:R...e.g.O%./.I~'.....E#.CZ..r2>.t..z.k.....->f.O.X....`.. .......<{...[x~Sj.. wU....!

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://sgtm.qualtrics.com/_set_cookie?val=NsL2Ny0hM33FlbcTQcv9sRCzL202xNJ1v0H08vs%2BKO%2FxhCKBbnaEvl5Xd2BFmiUWPAwonpA05vt2OeB%2FS1jYz4Wo2APKcmpgU7SYLIXhAmExiOsGpzyIxsVLIHZ7FonM%2F2sVak%2BrnKdvHbsb6lCmPfQCUvaA2mtjJeilNiLZJYjUi5v1p4ifjEraiP1oZTr0fQ%3D%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	364
Entropy (8bit):	5.148350047193689
Encrypted:	false
SSDEEP:	6:tI9mc4sl3SYUSmHqiLUMdkKiEZf+MffJTcXU8k/YIXk5WVvWrpvlkdZW+ST8LqS1:t41SRg4Zf+Eh4E8nI0kVvWrpkW+STGp1
MD5:	FFAFF0F0992539B7D62A7D2E0F4208D7
SHA1:	EEE64C11167B2650E185804B614E167BF8CBD0B1
SHA-256:	0E61D8F66A9F5448FA03C316A81B138C3A1B9AEA3AF4153A2842C30DEA80F2FE
SHA-512:	2E9BE327A49CD10D0ABE3C359B756C098D159EE301C09168FB0473ECE197B2E8349DE5DFB39370CB3D8C48328A115E7B1F5CC686212471BB235DA81E889A0A37
Malicious:	false
Reputation:	low
URL:	https://qualtrics-www.s3.amazonaws.com/play-px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 74 74"><title>Asset 1</title><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path d="M37,0A37,37,0,1,0,74,37,37,37,0,0,0,37,0ZM51.84,40.75,31.28,61c-1.57,1.54-2.85,1-2.85-1.2V16.13c0-2.2,1.28-2.74,2.85-1.2L51.84,35.15A3.92,3.92,0,0,1,51.84,40.75Z" style="fill:#00b4ef"/></g></g></svg>

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 850 x 440, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	39487
Entropy (8bit):	7.923457763265759
Encrypted:	false
SSDEEP:	768:KY/c0WUACmYdkzyAL8O5FNf6LIliwEGszNxbSNDFwRHDEreGX7gb:K953jpf6LIlft6NpVRHI7K
MD5:	E2646C9BFD2D4561536949D5530EDD59
SHA1:	AC9BC66F0E531DFEF8F3A6ADF91F6B451594C519
SHA-256:	F36EB54C8CC0F3C710E44A9B8B8F9B8AA532FB9979C748F5022908A7CD4C126E
SHA-512:	31A4A6E0BE72522405FF0AAEC785A9F6287017B13F82C7F40C147FF99DF3CE41D284E64328C38AF5191C3076D2E19FDD7E083A041F4D7E1BDD9DA544925FCCA5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R.........Of......pHYs..,K..,K..=.... .IDATx..Mr....r.:+....T.qGK.Q.dy....-o@.y.......c.=.#.........#.Z...yT......$A.A..$xpp...$..R..........c.....r.....ga..6.Q..jZ..UU.r..S.?A&....._8@.#./.i..^&.>..O....y..,]A`...y...m....FmZ...o.\|2m3.7..Z.........]Q+....}....-....M?.^.....}\|...rJ.D@.D....q-^./.4.....@.p.Y.,2.:...A...#..\Q.=...d..l..d1..:.......,...:.^..+.].1...=....o...........i...F..5-..3.......u..e....v..aWSE<.].S....?......w....!...U.D@.D P.....A..C}........@~.l.De.H.{...4K..2.6A..[8.D{m..,W..... ..\|.r....-.V.a....wp:l..^.D@.D@..#.2......V3..#.....U..6.w.......a..<.P..&....h....Jq.3...............w....." ." .!.p.Hm.=...l........e....L....=.9n........Y......J`.LW..{.!..s.cQ..M..w.............).J%.p.e.Lg...3.hj..7.S......o.,.h..Q^.t.m.E.g.b..}....;.'U~.....>.c....sd.\......m.@NI.D@.D@.D....3R4i.]M.h;.J\|.l.i...'.>B.].Q....a....9u.K]..... ...#.3.g...{.....:.wpZp\..!..G.. .D@.D@.D..@.3R..X...>.m....@..C].#..7.

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	268
Entropy (8bit):	4.131781133238713
Encrypted:	false
SSDEEP:	6:v4qoX0XB79i8eJOezXXhKvN8K2GTagGT4Swg:ANgBU8eJh0N8YTaDTxJ
MD5:	E563EB64599FAFFFDEF3F74823167013
SHA1:	E5D985C93FC2EE5A4430A257701A57552A29472F
SHA-256:	380CF92AE6491502D63D9194CBC0C0F20B85A1E00B5720586213D88EB0DD8A74
SHA-512:	D31F7DD2BFC653D77DC83A6A40CCF65DCDC933BC52F8AB8199961DBFE02BC0DC7695438B1EE25B4E04929E7B87436C9D8FF1A01674E5CAA050A864D70E6F8E4C
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/manifest.json
Preview:	{. "name": "",. "icons": [. {. "src": "/android-chrome-192x192.png",. "sizes": "192x192",. "type": "image/png". }. ],. "theme_color": "#ffffff",. "background_color": "#ffffff",. "display": "standalone".}

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	309
Entropy (8bit):	5.181073172478522
Encrypted:	false
SSDEEP:	6:tI9mc4sl3QcC2dmHqiLUMdkKiEZhkJiRXxPt36wGxb/IzDlBpQkGUDi:t41Qz2Eg4Z+OXxPtXGxbgzBNPDi
MD5:	9224EB2BF7E4792EEB3C886791B9CFF8
SHA1:	E1962CC1838F434C09F739CDD9A009B8F1C19992
SHA-256:	3BF0FBD073C925733C2E861A05F1F3C546D4615FB77141D90314154956CE416F
SHA-512:	81AB4DAD3087F7B2C134EDA42E7A60F158981EE492120FC24E6A0D1C39A0B16118CCFD3F2AFADA1A931353D97E7F688068E65709426DF690C1A3AC511FC462A2
Malicious:	false
Reputation:	low
URL:	https://qualtrics-www.s3.amazonaws.com/quote-black.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 69 51.27"><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><g id="Layer_1-2-2" data-name="Layer 1-2"><path d="M2.55,51.27,10.36,28.9H0V0H30.72V26.45L16.54,51.27Zm38.37,0L48.73,28.9H38.28V0H69V26.45L54.64,51.27Z"/></g></g></g></svg>

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	578
Entropy (8bit):	4.672254507187077
Encrypted:	false
SSDEEP:	12:t4s9aoBmuSrJ7dsGyYRcs/R66HxlGMrfyjyjSR0d8UC:t4s4Gmv17ds+Gsk6HxlnfyjdRVn
MD5:	A63F2B7A08A92B5E34BEE5D001380CD5
SHA1:	8066F81533F0E8AD4C5798101FB198EF11E96A92
SHA-256:	44CF2D40A9E206F3E38E92C31573C175E16E596A369D78922DCA01D2F8E24F33
SHA-512:	90481B65A5D8F7E4A443E6958952F5E9D20BBBA039FD493C6F884D6C8D32F84155C20860093C1C128B60A96526344C74212F3381033F046A8753A812C4115C20
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/m/assets/wp-content/uploads/svg/display/social-linkedin-01.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" >. . <symbol id="solid" viewBox="0 -359 1792 1792">. <g transform="matrix(1 0 0 -1 0 1433)">. <path d="M313 1700.5q46 -24.5 70.5 -68t24.5 -97.5q0 -52 -25 -94.5t-72 -67.5t-108 -25q-60 0 -106.5 25t-71.5 68t-25 96t25.5 96t72.5 67.5t107 24.5q62 0 108 -24.5zM1492.5 1170.5q94.5 -54.5 148 -164.5t53.5 -273v-626h-363v584q0 116 -45 181.5t-139 65.5q-68 0 -113 -33.t-65.5 -84t-20.5 -105v-609h-362v1092h361v-158q49 78 124 131t205 53q122 0 216.5 -54.5zM385 107h-364v1092h364v-1092z"></path>. </g>. </symbol>.</svg>.

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7584)
Category:	downloaded
Size (bytes):	7960
Entropy (8bit):	5.186616349927992
Encrypted:	false
SSDEEP:	192:P6LtB8pf0ph5zlZVZe/Yl+Nza7Grui62y2+/TK2IJ2ru+xf:PN+H55I/Yl+Nza7Grui6ph/TKXJku+xf
MD5:	984977DC184F8059F2A679B324893E4C
SHA1:	D60A246BA584BA892A87BCF446E71D26ADBCB91A
SHA-256:	55A084B5F4C439A2786141108B266370E0E4ACCC4E72629B2177DC6AA658D6C8
SHA-512:	03BC5C73408C2F99E708227F4EBDCE819D68D9B0BDEFFC4B7B598E29519924B12A4B1DDB9C047F2943791C0603E9A3FD99C354A4F0D7F1F8118425A2CAD55F37
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.mobile.js?ver=4.25.0
Preview:	/!. jQuery Mobile v1.4.5.* Copyright 2010, 2014 jQuery Foundation, Inc..* jquery.org/license.. Modified to adapt the latest jQuery version (v3 above) included on WordPress 5.6:.* - (2020-12-11) - Try to access `.concat` of undefined `$.event.props` - removed..* - (2021-02-04) - jQuery bind method is deprecated..* - (2021-02-04) - jQuery unbind method is deprecated..*/..(function(e,t,n){typeof define=="function"&&define.amd?define(["jquery"],function(r){return n(r,e,t),r.mobile}):n(e.jQuery,e,t)})(this,document,function(e,t,n,r){(function(e,t,n,r){function T(e){while(e&&typeof e.originalEvent!="undefined")e=e.originalEvent;return e}function N(t,n){var i=t.type,s,o,a,l,c,h,p,d,v;t=e.Event(t),t.type=n,s=t.originalEvent,o=[],i.search(/^(mouse\|click)/)>-1&&(o=f);if(s)for(p=o.length,l;p;)l=o[--p],t[l]=s[l];i.search(/mouse(down\|up)\|click/)>-1&&!t.which&&(t.which=1);if(i.search(/^touch/)!==-1){a=T(s),i=a.touches,c=a.changedTouches,h=i&&i.length?i[0]:c&&c.length?c[0]:r;if(h)for(d=0,v=u.leng

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 2048x1365, components 3
Category:	dropped
Size (bytes):	940648
Entropy (8bit):	7.9778984005352
Encrypted:	false
SSDEEP:	24576:4C5x+Rd94O2oeaiL96v4udRLLXqvWAqfEncVxtBIJXfFKjT:Kd9fPzCwwwLL5EncHaqT
MD5:	EDAAFCF4109B9F69E6165AE696619F80
SHA1:	19048EDC91B2FC43F0A82CD90E61F68897AB4764
SHA-256:	3F50C8952F0CFFD2A007264A73675382AC1D639BD1F2282DB79F5C9BC9E04B83
SHA-512:	6647A39E720EB3FC4E3A1E45F83F00447DC094BC1CC6270D32680818EF34CA6A82F9A84939B24EFBEA336D2A4224D526AC9BCDF5900E811223C7DCC0E5763431
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......U...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....E.u.3V..c.M2.3.7&0q...\..Qj...o,H..........m.x&.T...k....U.....'....O..5i.T.k+r.0h.....'.=..G=..y..b.._.i....B]..-...4X.....7d.H5.Kv.E-..#......4..Xh....p.I.,.4.`...s(...U....5..<U....w<.. ...V.K...J..}.m..t...2K..#...L.^.6I..r..l.c.....o8..E{w.S.^..T..D..zE... .=.Y#.*A$`...+...uY...V........<..

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 900x632, components 3
Category:	dropped
Size (bytes):	36026
Entropy (8bit):	7.964339232104728
Encrypted:	false
SSDEEP:	768:moKNCH65WFuhv4Dt7mUyimAEJopAgCc7SJVg4H3Sp8t3EnGQKAnbHH8RkD0:96ptYmUnBEJop2Lu8KGzmbH8GD0
MD5:	7DB50D91E52E2ACCB5BFF53CA725EB60
SHA1:	5C9E82B630D7227811B57F713F0F7D6EC3EFA1D7
SHA-256:	6DF924DF4FE1BD57EBCF29C86B479FD0436AD85289DE5D2BEA46929D65C90CBF
SHA-512:	B1BD45FA95FC68C4023ED19A2CEDDE7FA6D4BBD4735AD66ABD180E8F6791E61641280BBEE1E72206B8DBDAF0FC282D3D9C456235851E9CB0B6FE39C114CAB08E
Malicious:	false
Reputation:	low
Preview:	......JFIF....................................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@@@@@@@@@@@@......x...."............................................... .1.R.......`...........1..4..H.&.]...r\|....B0.mF...T...Z.....`4.#..'&.. .@..Ey.Uv.:[Yrm.....\..Da........L...\..!.b9Jc.B.J .../.D.-....U6..q}.k....Q.p.u/..`........F..V......7.HK7.=..I.P.............@.]P..].....0...D.4.....FN.1...7.I.8.ST!).m......y..C\\.W]U.=M..W0h...d.s.Y...%..JS..F..A$."..\|....n..3.t\.]9..J$..a.....)0..0.X.$UU}..%R..76.qQ...@.......t[d..D4.<.w...$....!. `W.v.UK...B57).e..GC@...UG/5U.T.....Mg..Z.y...L1..4...B..J0.....k).F.JNDT$JR..C......hc.0....~..&...o.:i...6..0`0.. .%.9\N..z+.;)..&!.0..%{..6......R..g5:.b....8.w@...$.@....^.fmVi.....s..H@.....]..kRI$..........i.........y2z0`.......IE(.=q.}Q..L.....q..m..Q.n\|z.k...em..k.Yr.....'i.l.... @......b..IJC.Dk...`...N9...<...eV.~.;...8.m.d.......&.$!(.)...1.....@0.H..?&Zg)Y

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (45247), with NEL line terminators
Category:	downloaded
Size (bytes):	148076
Entropy (8bit):	5.362908810868204
Encrypted:	false
SSDEEP:	3072:TiEf9h1pUQb82nNGY6Aj7Rglg+mWovV5c:19h1prnEY+e+mtu
MD5:	C7B80A37DA78CA14D6E87E0BAA0ACA57
SHA1:	BA3F0226BB8E68535180BF8917744232D90E1C56
SHA-256:	DCABE55B1FF18FBAAE396C3F2A0BB6E7E0029CD3D656694BAD4B2232FCE00720
SHA-512:	8D2783DA0997268EE9D543F91FC5352213C199E25F455E1965E7E15F437CB0DA3E8FB1303A4C008FF890FC2FD8C66B679A9E976DC7BA4950D0F71877BD904AE9
Malicious:	false
Reputation:	low
URL:	https://cdn.sender.net/accounts_resources/universal.js
Preview:	(()=>{var l,d,n={3387:e=>{e.exports=function(e){if("function"!=typeof e)throw TypeError(e+" is not a function!");return e}},8184:(e,t,n)=>{var r=n(7574)("unscopables"),o=Array.prototype;null==o[r]&&n(3341)(o,r,{}),e.exports=function(e){o[r][e]=!0}},8828:(e,t,n)=>{"use strict";var r=n(1212)(!0);e.exports=function(e,t,n){return t+(n?r(e,t).length:1)}},6440:e=>{e.exports=function(e,t,n,r){if(!(e instanceof t)\|\|void 0!==r&&r in e)throw TypeError(n+": incorrect invocation!");return e}},4228:(e,t,n)=>{var r=n(3305);e.exports=function(e){if(!r(e))throw TypeError(e+" is not an object!");return e}},1464:(e,t,n)=>{var c=n(7221),u=n(1485),l=n(157);e.exports=function(a){return function(e,t,n){var r,o=c(e),i=u(o.length),s=l(n,i);if(a&&t!=t){for(;s<i;)if((r=o[s++])!=r)return!0}else for(;s<i;s++)if((a\|\|s in o)&&o[s]===t)return a\|\|s\|\|0;return!a&&-1}}},6179:(e,t,n)=>{var b=n(5052),w=n(1249),E=n(8270),_=n(1485),r=n(5572);e.exports=function(d,e){var f=1==d,p=2==d,h=3==d,v=4==d,m=6==d,y=5==d\|\|m,g=e\|\|r;ret

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11438), with no line terminators
Category:	downloaded
Size (bytes):	11438
Entropy (8bit):	4.470300115108478
Encrypted:	false
SSDEEP:	192:CdmAqG5sHW+cZZVhFMBXICeF5C03e+TpTAS/3ZnWR3skZRyMb70RAkObUeFm0U6v:OkfMt/twTL
MD5:	429325BCDC1700452DAFF7467A5F1FC4
SHA1:	635DE8A4CFA699C43E0295F63A4F551DC5C368D9
SHA-256:	733EBC26F4B2D2D14BF9335E153115D161AF31D28E79390BCBF2FCFAB5A54B2D
SHA-512:	8FF445469AF0AF07C9001D2E2519425774178970BB49E7E06B100DFB19A4368CC3D157B7B6655CA9347E43C9F7ED2FD0CA9D4BC586F3899ECCA8C52EF407ABB3
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/hreflang-routing/managed/definitions.js
Preview:	var ql_routing_custom_data = {"exclusions":{"exact":{"/uk/free-account/":1,"/au/free-account/":1},"partial":{"/lp/":1,"/events/":1,"/ebooks-guides/":1,"/x4summit/":1,"/uk/x4europe/":1,"/au/x4sydney/":1,"/fr/x4europe/":1,"/support/es/":1,"/research-center/":1,"/resources/":1}},"geoip_lang":{"AL":{"en":{"path":"uk","type":"auto"},"es":{"path":"es","type":"auto"}},"AR":{"en":{"path":"en","type":"auto"},"es":{"path":"es-la","type":"auto"}},"AM":{"en":{"path":"uk","type":"auto"},"es":{"path":"es","type":"auto"}},"AU":{"en":{"path":"au","type":"auto"},"es":{"path":"es","type":"auto"}},"AT":{"en":{"path":"uk","type":"auto"},"es":{"path":"es","type":"auto"}},"BS":{"en":{"path":"en","type":"auto"},"es":{"path":"es-la","type":"auto"}},"BE":{"en":{"path":"uk","type":"auto"},"es":{"path":"es","type":"auto"}},"BZ":{"en":{"path":"en","type":"auto"},"es":{"path":"es-la","type":"auto"}},"BM":{"en":{"path":"en","type":"auto"},"es":{"path":"es-la","type":"auto"}},"BO":{"en":{"path":"uk","type":"auto"},"

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 2048x1188, components 3
Category:	dropped
Size (bytes):	112839
Entropy (8bit):	7.443645756983046
Encrypted:	false
SSDEEP:	1536:/fqsbrOEvzxwxRSPhxV6P/80LyTY/tHSNgb6j/3+tMAqY+LlbfhQiN:nqATtwxsJ4LtHSNW6jf+CAqx1F
MD5:	CC71398779B5DDE40D7974F3A1340D5A
SHA1:	744F97136795B96782A0716227EB51AA91E95366
SHA-256:	0CB1B4858D1B23BA34B871F30A94EC38A0652C521E47B934C4ED916B23DC25F7
SHA-512:	A3471BB427BFC53884D3C62B17DF86DA59B81B66D3355C99E8C4BA4093E113680FFDC5862F512CCBD55862A23105C45EEA98A01A16259F01AAB439DFA2CC054E
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...)7P..Y..t..Z.........@..g..W.x.....7.._O}Ja...3.#....JW..wy.5..d.p.r.....i7.gw.9'O.....T._!....l..."....~. =09?.5.`..R..O......`6x.K......^.._..........3_.Rm......4>0....:...........}....Y..O.

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	19729
Entropy (8bit):	4.854386499302335
Encrypted:	false
SSDEEP:	192:yusSlsOksOcwsOc3ragZlY4ZSuPcqd0TtU0YnFkwVLwVD9IBmJfk8W4+3FdQk5FL:F0UZBifk87AfUgHxFZZr
MD5:	F9F3DC95E9215FBF325F43E79F376F03
SHA1:	5B0C62E2F187ACF67B36E84C8D6A2A6CED24C190
SHA-256:	50E78D616575712470F76136B2ED2B52B1BBB02FDE3A6F2CED084980C2B4D602
SHA-512:	E976100D746033F6ABB597518490A6A1D272C04367CC4FF8ABA6732C2719DEEE791ECA8753CA798C42CEB5B7C24631A49EB62C7E0AEE7FB26DA468B10EEF7CED
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/plugins/ajax-search-lite/css/style.basic.css?ver=4.11.5
Preview:	@keyframes aslAnFadeInDrop {.. 0% {.. opacity: 0;.. transform: translate(0, -50px);.. }.. 100% {.. opacity: 1;.. transform: translate(0, 0);.. }..}....@-webkit-keyframes aslAnFadeInDrop {.. 0% {.. opacity: 0;.. transform: translate(0, -50px);.. -webkit-transform: translate(0, -50px);.. }.. 100% {.. opacity: 1;.. transform: translate(0, 0);.. -webkit-transform: translate(0, 0);.. }..}....@keyframes aslAnFadeOutDrop {.. 0% {.. opacity: 1;.. transform: translate(0, 0);.. -webkit-transform: translate(0, 0);.. }.. 100% {.. opacity: 0;.. transform: translate(0, -50px);.. -webkit-transform: translate(0, -50px);.. }..}....@-webkit-keyframes aslAnFadeOutDrop {.. 0% {.. opacity: 1;.. transform: translate(0, 0);.. -webkit-transform: translate(0, 0);.. }.. 100% {.. opacity: 0;.. transform: translate(0, -50px)

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1512, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1512], comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 1512x1080, components 3
Category:	dropped
Size (bytes):	313198
Entropy (8bit):	7.925809198831934
Encrypted:	false
SSDEEP:	6144:c4lUm1dfUyfAsyZxQKQ0r3R35G53EX1bren:ZlUm7UykZx/FhpH1bren
MD5:	896765C30AB740B57028A1872B22FDF0
SHA1:	969A8DFA410BDE0EE72C49AA5590B5B4DCCC2BA7
SHA-256:	52230D9C137C4863857FF1879FCA63B8F171AA77033DFFE8CDA695303391F457
SHA-512:	1D53140B31A593AF6AD52F2507A19AB846A918E149FE0D56F8A98581E53788B5DC5DE2ADED2330DB905638EEC135AAA7BDF756C7E59FA361D082AC65FB62954E
Malicious:	false
Reputation:	low
Preview:	......Exif..MM........................................................................................................(...........1.....$.....2..........i.............$............'.......'.Adobe Photoshop CC 2019 (Macintosh).2019:08:07 15:12:45...........0231..................................8...............................r...........z.(.................................z.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................r...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....H..M.?5%"<..$.......+:.....6Zi..9...v..E...q......~F=i....^......

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 808 x 364, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	13595
Entropy (8bit):	7.953921724438772
Encrypted:	false
SSDEEP:	192:KpOwQnvI9bJJSXZ9pS9zRlTzlNyx3KhV6DWi98gs/uM5lo848RQ6cj:K6AbGL09zLzDyloVos/uM3o841l
MD5:	98E0C4B0273CEC0C97D541CFBF82786B
SHA1:	05AB85A44306E123F1E02B351AD2558B8DEFD6E2
SHA-256:	3879EDDE4FE92FF523C72EB34CB9C9BD04D0B98941D97338DD3F86F4B518C888
SHA-512:	B5EB7525EE8D75C16563796D23528BB891EE8207FEB9419BEDDBD2EB5D97FA7E143A63ECE03017E1D1EB5886273B94B04115C81091849B70C1C5E5C447AE5FA9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...l......\|m....QPLTE..................................................................................~.m....tRNS.@.... .Pp0`......0.`...5.....4`IDATx....r.0....I.#.A.......3m%.c3.B.._.`ga.h6.h.........o...$..S..L0g.R.....s..`HU\|oG.0...L..C;.h...q\|..1..M.s.....{.....6...#%...(..IO..^F.KK.8.);.=.@O).$\|f......xZ..N....../,B.$/....P'F.._g...... )A.N....:..(3...y....^'...q..1..u6HbPV........S^....".AY.N.3H....A.4.$=(k.wQyhf......x.......DN....N...^...W....z. .E....&.q....T.'\..7.j...T'!)-+[.S.\"../.v0..E.#{...`^......2.."Q...sH....YU.\...cb..>L."..\|..}.....Q.Y.:%...{.............N....1.L.g @....CC..1.KE.$N....K.3......INt>.$Q.@.h...V.(.cR..Jo+J.,.e.8../\|q'...N.Q.g_.....'W....g.(..../N.;.E)......J7.s.5......Ea...M.$...O ...Kv1...J....Ms.#..t\."....0.[.Q...Q..am.(".....v...[D.FlD..{_"N.r..o._.WQ.......Q.....(Y.n..QL.H.@n%J.m.[e=.w...G.M.......8)J..bO^.9@>>=......b..H..E..EQ..(...,...j.........x.}.. '/..o9.^g.x`5.ky.."..5.

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (14947)
Category:	downloaded
Size (bytes):	14991
Entropy (8bit):	5.324259797767631
Encrypted:	false
SSDEEP:	192:zYzPHzQpgf39hDF6PvLPFaKOeAn04BT3cQLsiEjh1K7U0dEmEFzj622S7Dj:zYzAaY3rZtAn5MpwXdEmEF/622S7Dj
MD5:	F6CD180E9058A84B6B61341A85069C68
SHA1:	AF2F415F63ED89F365DC2BE0AE10ED96B1769BF4
SHA-256:	7383C8BD85A0C74AA5171E26DDB4CBD4FE922830092F6A20BAE4723D4D3A82A7
SHA-512:	D84BC10D500265C814E94781A45DD8E6E3E8C75B239F66C449FB6CBD4CBDA90F99F41F5AFC3936A0ABFE2DBA9D92BC9BF7391F73761E26E329E8EBC847AEAD3F
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/assets/dist/js/modules/footer-2023-06.js
Preview:	!function(){var t={662:function(t,e,r){var n=r(614),o=r(330),i=TypeError;t.exports=function(t){if(n(t))return t;throw i(o(t)+" is not a function")}},670:function(t,e,r){var n=r(111),o=String,i=TypeError;t.exports=function(t){if(n(t))return t;throw i(o(t)+" is not an object")}},880:function(t,e,r){var n=r(781),o=r(70),i=r(114);t.exports=n?function(t,e,r){return o.f(t,e,i(1,r))}:function(t,e,r){return t[e]=r,t}},114:function(t){t.exports=function(t,e){return{enumerable:!(1&t),configurable:!(2&t),writable:!(4&t),value:e}}},45:function(t,e,r){var n=r(339),o=r(70);t.exports=function(t,e,r){return r.get&&n(r.get,e,{getter:!0}),r.set&&n(r.set,e,{setter:!0}),o.f(t,e,r)}},72:function(t,e,r){var n=r(854),o=Object.defineProperty;t.exports=function(t,e){try{o(n,t,{value:e,configurable:!0,writable:!0})}catch(r){n[t]=e}return e}},781:function(t,e,r){var n=r(293);t.exports=!n((function(){return 7!=Object.defineProperty({},1,{get:function(){return 7}})[1]}))},154:function(t){var e="object"==typeof doc

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (370)
Category:	downloaded
Size (bytes):	1190
Entropy (8bit):	5.912796994092376
Encrypted:	false
SSDEEP:	24:jIyagCA0jvdznKSgCN0i00u+2JszPNhil3sKLzIyagCO1ljvdFHEnKSgCN0dRdP:jI0CtjVzKnCKi00SIPNwl1LzI0CkjVag
MD5:	EE3996224B2866C52E767A6730B0D95E
SHA1:	CC22E34D1CABC9E90B7239EBAF401D0A928D7C05
SHA-256:	569E2D8D2F944B997DEA41233129473C2E6AFA7BB5AF04B52CE6E967DDF28D39
SHA-512:	57288A5564040F805EE8011ED88EB2CFD52CD8ED0E4F7A5B12444A7CDFE0B05CB104B5ECB999A9C4E7D9911920B28702592DC30DE7989D9273DEE46C7E5E47E3
Malicious:	false
Reputation:	low
URL:	https://sgtm.qualtrics.com/g/collect?v=2&tid=G-Z0RM4JK167&gtm=45je44t0v883492273z86526812za200&_p=1714660401997&gcs=G111&gcd=13r3r3r3r5&npa=0&dma=0&gdid=dYWJhMj&cid=1321622203.1714660406&ecid=990306678&ul=en-us&sr=1280x1024&_fplc=0&ur=US-NY&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=190938145.1714660404&sst.gse=1&sst.gcd=13r3r3r3r5&sst.tft=1714660401997&sst.ude=0&_s=1&sid=1714660406&sct=1&seg=0&dl=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&dt=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&en=lang_route_no_redirect&_fv=1&_nsi=1&_ss=1&ep.event_category=language%20routing&ep.event_action=language%20routing%20%3A%20languageNotSupported&ep.non_interaction=1&ep.x-ga-mp1-cd55=no%20redirect%20%3A%20languageNotSupported&ep.x-ga-mp1-cd56=siteLang%3A%20en%20%7C%20browserLang%3A%20en-US%20%7C%20geoIP%3A%20%20%7C%20geoMatch%3A%20&ep.x-ga-mp1-cd57=languageNotSupported&ep.c_int_routing_handling=languageNotSupported&ep.c_q_website=en&ep.c_browser_language=en-US&ep.c_int_routing_outcome=no%20redirect%20%3A%20languageNotSupported&ep.c_int_routing_languages=siteLang%3A%20en%20%7C%20browserLang%3A%20en-US%20%7C%20geoIP%3A%20%20%7C%20geoMatch%3A%20&ep.c_hit_timestamp=2024-05-02T16%3A33%3A23.691%2B02%3A00&up.c_int_routing_geoip=&up.c_int_routing_geomatch=&tfd=8646&richsstsse
Preview:	event: message.data: {"send_pixel":["https://analytics.google.com/g/s/collect?dma=0&gtm=45j91e44u1v883492273z86526812z9848816901za200&_gsid=Z0RM4JK1673yDHrATkpG9HnBIazXzoTQ"]}..event: message.data: {"send_pixel":["https://stats.g.doubleclick.net/g/collect?v=2&dma=0&tid=G-Z0RM4JK167&cid=1321622203.1714660406&gtm=45j91e44u1v883492273z86526812z9848816901za200&aip=1"]}..event: message.data: {"send_pixel":["${transport_url}/_set_cookie?val=lsc4u4gN474bKUgzTSnwhO%2BvyYCr0%2FhAsVpNYc45%2FO3VOHZ%2BOw7RudvzAWwv0e6j9KRarIh0ePO%2FDaIqkPkgU%2BZejvfQ%2BvRZ5RnVjku4S6LJPZNkqhqaeN8y6pc1ojwGjZr5w1wZOd%2BZEbwpotfSKhuIpW%2FoN79tyZ3XZ3l%2Fg%2Fi5GZUMgKH1gr7q5OmYCJF4VL%2BIjHuunOBP6%2Fc6dF9YXEUkgLvfV%2Bs8oJf20cARgIYUkUCZND7hD3X5krSOh24aNd6iPsfBCzOw3ysKDXCfDuHOXFuY"]}..event: message.data: {"send_pixel":["https://analytics.google.com/g/s/collect?dma=0&gtm=45j91e44u1v883492273z86526812z9848816901za200&_gsid=KREE1SMXRW6EXQBQVi2FvvZqUgTIiu3Q"]}..event: message.data: {"send_pixel":["https://stats.g.doubleclick.ne

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 599, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	52315
Entropy (8bit):	7.890554978111643
Encrypted:	false
SSDEEP:	1536:AGhMz0ZER+4CcxBSRcMOQ1PJVFLfelp0y:NhHZERe05MOQ1PvU3
MD5:	68233FBD29D7A0D4360F9D937EA9B0F8
SHA1:	F732D38BFD5B99011297EEF3CC15CE8762072A4F
SHA-256:	99326486E6496E66EDE40B3C1DB6784B9A6E7FD289FCC9188B31CBC197435BDF
SHA-512:	77BAF1AC75028C5745DEAA16569E1C2901499787A094858C4997885446FDEF8C53C0C97EEB622B8896261DDC5187A10762147566CC07897052D1C1C0EDA329CE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......W.....$}3u..."IDATx...1J.A...WY.X..O..x.+kO`ee!.U<....@......."..%.X.Fp.@..~..Y.za...............................................................................................................................................................................................................`<.O.....d.l/..`T.M.....9...(X......!J...N..`M.!W.,J.-..><.a_9...Ob......9.9?...6;..".2.A.Cm..]....g..-..s......~...Ei.Q.O.{o...E}.W....[y.ig..j.F.b..B.(.8>..B.>.p.*.b.)..h..(E. .!.A..,}..C.DD...C..UJ.ZD&6......D.R0..& .c.l..\...eots7..M..s.....o..~...{..vgv....Q.h...v........T...@G`_.....b.C.B.!.$......._..5vY..E.AY.X......z..bR..MU.?..>.2..5..........O.....b.l..C.!..B.I.....+..y5=..m...&..e... ...P....}^...5A.....j.Z....7vA.[...}.._.B.!.l]...6..;.6.;..../..y..P...p.&.$.....fR....]H.A..=....&v.......gx...B.!....)7Qk.ER.>Y...t..C..c?..o1......v..w..j...X..cm0c....10..&.w..3w...9..B.!.....ql..q?....@.J..M..AHu..=...f.S.S...C;.f3..f......%....n.?..

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31995)
Category:	downloaded
Size (bytes):	66949
Entropy (8bit):	5.347341158043117
Encrypted:	false
SSDEEP:	1536:mmuqlAT9wYZif4pPHnvL6EVnM4gX4FPIBx4tPJnw3+X1paTXZ5rWGdV4TKu/:HR4osPYtB4Tl
MD5:	BF231EB780489FFFEA00AEF444500B14
SHA1:	F0D4603FA4441A3CF3773EFFFBDA309001C579B0
SHA-256:	95EF911FCF12DFE0A1FB5B17A3B24FA81C6B07B102B435949B06E7E124DE51CB
SHA-512:	06CF250E2969A01549C9920CCC47B85BBBFF773AB68FE7D22BDE8C58850D4091F1702D983457847855F42AC32E0C78398B05CC005410393682D97AEB28D41877
Malicious:	false
Reputation:	low
URL:	https://j.6sc.co/6si.min.js
Preview:	!function(){var t={},e={},n={},i={},r={},o={},a={},s={},u={},l={},c={},d={},f={},h={},p={},m={},v={},b={},y={},g={},w={},_={},E={},k={},S={},F={},C={},T={},A={},x={},I={},M={},P={},U=this&&this.__spreadArray\|\|function(t,e,n){if(n\|\|2===arguments.length)for(var i,r=0,o=e.length;r<o;r++)!i&&r in e\|\|(i\|\|(i=Array.prototype.slice.call(e,0,r)),i[r]=e[r]);return t.concat(i\|\|Array.prototype.slice.call(e))},N=this&&this.__assign\|\|function(){return N=Object.assign\|\|function(t){for(var e,n=1,i=arguments.length;n<i;n++){e=arguments[n];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])}return t},N.apply(this,arguments)},L=this&&this.__awaiter\|\|function(t,e,n,i){function r(t){return t instanceof n?t:new n(function(e){e(t)})}return new(n\|\|(n=Promise))(function(n,o){function a(t){try{u(i.next(t))}catch(t){o(t)}}function s(t){try{u(i.throw(t))}catch(t){o(t)}}function u(t){t.done?n(t.value):r(t.value).then(a,s)}u((i=i.apply(t,e\|\|[])).next())})},D=this&&this.__generator\|\|function(t,e){f

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 945x533, components 3
Category:	downloaded
Size (bytes):	136896
Entropy (8bit):	7.988448850956644
Encrypted:	false
SSDEEP:	3072:QFZtkiugNbFl8g02f5CkxJ0wMPDQhAsVTaXcR4:QDtpbB3fwkroPDwXNR4
MD5:	B59B9E427DE6357477FE06D7E051F643
SHA1:	2904FA02188F825D122B47D0AF930DE89CA85FA5
SHA-256:	81E53BDA089B420011D93FADFC391ECF4D7733186D45E315AC8F6C44372D109F
SHA-512:	1DDFF62A561896B7B9721C9AB9906701EAF3346EF69DC35BB4B01362E65876585AC2C01DDEC775E6D4637F289899BB2622872E6C5D29F499BCA7606BEB9E81BD
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/m/assets/wp-content/uploads/2019/11/provo4.jpg
Preview:	......JFIF.............C........................................................ "..".......C...............................................................................................................................................................g.f..y..y.:.jM...V...j.....t3...Dc9.Q[....%.R..S..........a...w;S.......o..Z...m...$Jz.....b.MY..m......v..K...].....Q.....n....=.1.P...../{.1..6o.....%..<)L](..B....r..V..$V.Q.s.{Z..,A.Wz=.]?k........D.&E\|.F=.\.\z.Y../4N.:.2_..M-.fj.=V.'G_..J%!.9.wu.i...C].f.+=..,...........s.8...hm........[K8..........o<.L......4..!...`.WZ....#B...cthi...l..j.=.+...6.o.^'.sd~..3.,.~.ZNH.rY!.+..S.2.^.tj.{.!..o....F........7.C.p!..,.}.S.z\|..3.$_7.\|.......A.?.....Cy..i.h...l."......P..Je9..g..S......'.)cp....4..I...C...y.....=,.BwMr..V:......ijED0.....EfH.U.....3.4.u.).t]S.&.,..V..C.O>.+...!...'...9.Q%.DV...u@-X......3.Bzz.YP9.O5.....'..J..V..).%Xt......k....[:?/.p.2....u......KB.#.9....e!...i.zps=.Y.#

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19014)
Category:	downloaded
Size (bytes):	19148
Entropy (8bit):	5.210713262585755
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb96u:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ35
MD5:	53783A65EF1289D137861C97C5569928
SHA1:	9A831D24ADB68D7BF66811ADCC94B3444FA8E88B
SHA-256:	B99188F4B26C91DCA6853CA9B3D0ED06EA2845F3B6B79A983B5790537DFF23F0
SHA-512:	53C53EE36D862BF3769A4F45976BA22D41B08BA98503E4A73D7EB1C291A7E5AAA3730283F528216B992C16322EB0675DC3BC9C5E31583DB8F6A1F8B02022B2BD
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/assets/dist/js/libraries/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 1125x375, components 3
Category:	downloaded
Size (bytes):	40604
Entropy (8bit):	7.705647178432612
Encrypted:	false
SSDEEP:	768:PSyHLdaWlGiMcoX0xmTLo826O6v+aLByKJEC6zxwWGArHtw98:PHZakevIh8zO6v+aLByZxwgK8
MD5:	0376481E7A6CA18B9D5406536EFB8379
SHA1:	EE02022E007C7F6B56DDD19F20BB079E79E0B621
SHA-256:	BE3C1531503A1F9BA2C28A080406AF6875023A770ADC27908919791677B32864
SHA-512:	7C6C017F96975002A7B0D03899BACB33503934B1C5E766A206712A49FCB5EB16375ECCAE392687C8D057E055B4A29D52844F653A8F3907D9FAE4C5548BA630C7
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2020/11/pnc_color.jpg
Preview:	......JFIF.....,.,.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................w.e.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1077
Entropy (8bit):	4.455319165064695
Encrypted:	false
SSDEEP:	24:t4/bt4kLL6g+xyPldLdfHsO2SytsaSv5KBR/UAqQaSsXHRG/Mr:gt4kLbldpfHsFnBRcAtaFG0
MD5:	F8FCE552C14452D77068D85EC45CDB35
SHA1:	26C1D6CCCF5ACD7FD577B1A9C1DC362818F8C240
SHA-256:	07C384A653A16DED162D227A91857D78741A4E8C2A38C764A51173C3145030FA
SHA-512:	3C13B218072D53DFE5C21B43F97D50E08C69AE2168CDD20B82B400F41A9887311DF182E44F25CB64F6AE86FFB37742ABE583C82D0435BBEDC787493DA5204A11
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/m/assets/wp-content/uploads/svg/customer/x.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" aria-labeledby="x.svg-id">. <title id="x.svg-id">X Logo</title>. <symbol id="solid" viewBox="0 0 488.000000 459.000000">. <g transform="translate(0.000000,459.000000) scale(0.100000,-0.100000)" stroke="none">.<path d="M14 4579 c-2 -3 160 -224 359 -490 199 -266 622 -832 940 -1257 l578.-773 -37 -42 c-21 -23 -446 -482 -944 -1020 -498 -539 -907 -983 -908 -988 -2.-5 85 -9 210 -8 l213 1 70 77 c39 42 401 433 805 870 404 437 746 807 760 823.l25 29 200 -268 c110 -147 413 -553 673 -901 l474 -632 725 0 c603 0 724 2.720 13 -3 8 -187 256 -409 553 -222 296 -476 636 -564 754 -89 118 -350 469.-582 778 -232 310 -422 568 -422 572 0 7 1226 1338 1643 1783 l119 127 -219 0.-218 -1 -255 -276 c-140 -152 -483 -524 -763 -825 l-507 -548 -615 822 -616.823 -725 5 c-399 3 -728 2 -730 -1z m1718 -886 c237 -318 603 -807 813 -1088.210 -280 676 -904 1036 -1385 360 -482 658 -881 663 -888 6 -9 -65 -12 -324.-12 l-331 0 -656 878 c-1514 2023 -2278 3045 -2287 30

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3349
Entropy (8bit):	4.968259174504228
Encrypted:	false
SSDEEP:	96:eJY/EPgJA//DMlsH+dMjzdyhuKturHpg8gPVNDabkbfFWgH70S:koEPgJATmsrQt4MVN9tiS
MD5:	FA07F10043B891DACDB82F26FD2B42BC
SHA1:	9C1DC49E9747758E033C0E9A7D016401BD78602C
SHA-256:	462747422C6AF30AA81A0373FA1CFD736455CEF52BDBB816F67BE9531D84EACE
SHA-512:	828F723649AE5A7B996DE43FEFC9B904D1A1D54F83671CC6998FDC7E0BB75C7761C8E0BB4A4497F2E4658606C193953C7019D7859E6EBAB3DB34C794EC575618
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.25.0
Preview:	/jshint browser:true /./!. FitVids 1.1.. Copyright 2013, Chris Coyier - http://css-tricks.com + Dave Rupert - http://daverupert.com.* Credit to Thierry Koblentz - http://www.alistapart.com/articles/creating-intrinsic-ratios-for-video/.* Released under the WTFPL license - http://sam.zoy.org/wtfpl/../..;(function( $ ){.. 'use strict';.. $.fn.fitVids = function( options ) {. var settings = {. customSelector: null,. ignore: null. };.. if(!document.getElementById('fit-vids-style')) {. // appendStyles: https://github.com/toddmotto/fluidvids/blob/master/dist/fluidvids.js. var head = document.head \|\| document.getElementsByTagName('head')[0];. var css = '.fluid-width-video-wrapper{width:100%;position:relative;padding:0;}.fluid-width-video-wrapper iframe,.fluid-width-video-wrapper object,.fluid-width-video-wrapper embed {position:absolute;top:0;left:0;width:100%;height:100%;}';. var div = document.createElement("div");. div.innerHTML = '<p>x<

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 900x632, components 3
Category:	downloaded
Size (bytes):	36026
Entropy (8bit):	7.964339232104728
Encrypted:	false
SSDEEP:	768:moKNCH65WFuhv4Dt7mUyimAEJopAgCc7SJVg4H3Sp8t3EnGQKAnbHH8RkD0:96ptYmUnBEJop2Lu8KGzmbH8GD0
MD5:	7DB50D91E52E2ACCB5BFF53CA725EB60
SHA1:	5C9E82B630D7227811B57F713F0F7D6EC3EFA1D7
SHA-256:	6DF924DF4FE1BD57EBCF29C86B479FD0436AD85289DE5D2BEA46929D65C90CBF
SHA-512:	B1BD45FA95FC68C4023ED19A2CEDDE7FA6D4BBD4735AD66ABD180E8F6791E61641280BBEE1E72206B8DBDAF0FC282D3D9C456235851E9CB0B6FE39C114CAB08E
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/m/assets/en/images/pages/customers/jetblue.jpg
Preview:	......JFIF....................................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@@@@@@@@@@@@......x...."............................................... .1.R.......`...........1..4..H.&.]...r\|....B0.mF...T...Z.....`4.#..'&.. .@..Ey.Uv.:[Yrm.....\..Da........L...\..!.b9Jc.B.J .../.D.-....U6..q}.k....Q.p.u/..`........F..V......7.HK7.=..I.P.............@.]P..].....0...D.4.....FN.1...7.I.8.ST!).m......y..C\\.W]U.=M..W0h...d.s.Y...%..JS..F..A$."..\|....n..3.t\.]9..J$..a.....)0..0.X.$UU}..%R..76.qQ...@.......t[d..D4.<.w...$....!. `W.v.UK...B57).e..GC@...UG/5U.T.....Mg..Z.y...L1..4...B..J0.....k).F.JNDT$JR..C......hc.0....~..&...o.:i...6..0`0.. .%.9\N..z+.;)..&!.0..%{..6......R..g5:.b....8.w@...$.@....^.fmVi.....s..H@.....]..kRI$..........i.........y2z0`.......IE(.=q.}Q..L.....q..m..Q.n\|z.k...em..k.Yr.....'i.l.... @......b..IJC.Dk...`...N9...<...eV.~.;...8.m.d.......&.$!(.)...1.....@0.H..?&Zg)Y

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	564
Entropy (8bit):	5.084955691734945
Encrypted:	false
SSDEEP:	12:t4Gu0zg4ZfN/dMt7XnsduduzRWyfz+m/iMQu9gpC:t4GuKgUVdMt78dudutZJQuh
MD5:	21BAD3AE7273F45E8E8DE7AE14B1DEE1
SHA1:	2E5E80CAD2622BCE172684E51F90FB68FABC6064
SHA-256:	32BDBF296DF6E5A2ED687BCE23AEB7B08AACFF52D7563E040BBEC44E635DCC85
SHA-512:	0AC4E04712FE571C2A3D8B0366F0580C6D492945F81922DBADEB5F6AE51A57C009BF95153896FA11542AFEDA058FEB7907E86AE775DF8E032374199170224433
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <symbol id="solid" viewBox="0 0 2684 1792.01">. <title>laptop</title><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path d="M2356,1456h328v119c0,147-120,217-256,217H256c-137,0-256-70-256-217V1456H328V132C328,50,378,0,460,0H2224c82,0,132,50,132,132ZM392,132V1455H2292V132c0-48-20-68-68-68H460c-48,0-68,20-68,68ZM552,1295V224H2132V1295ZM616,288v943H2068V288ZM2620,1575v-55H64v55c0,103,81,153,192,153H2428C2538,1728,2620,1678,2620,1575Z"></path></g></g>. </symbol>.</svg>.

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", progressive, precision 8, 400x250, components 3
Category:	dropped
Size (bytes):	26931
Entropy (8bit):	7.9795752447182355
Encrypted:	false
SSDEEP:	384:qU8uinQm4UcioH/oNJoYhylp+4UpRGanp2NMfWufNg2Gw6J1H/TEQSE1uFmjZA+l:qNuihJpIO2NMuufNg5wI2clz
MD5:	D3A9CFE6FC294A3752E31DEB4BD30C17
SHA1:	C3DAD89628DC54BFEFF52896582F59AFF5F1100E
SHA-256:	72C0AFAFA5CD14BB50D983035BF65D61878F46B33CB8BB93840482718534778B
SHA-512:	5B14A6C85AA08C7207F07A41E5B566E930EFB6FC228B9E314352F09F374C2ACF224874BC7EDFEFE99B35C01E69D716B7B659D9DCE7AD7A230E428C2B71FA1B6D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...............................................................................Nr.).Lf.Mw..].o.zU.(.........l.k..g}_..Ubr.x..2sN.K..........S..Gy..s....^[V..y..=..:.t.X..W.o.8..Y.~..[......z}O....`/...g...)..v..P.{...g{_S..X9....Mi........@.[,..,.....S..a.]...8....;.>.Wey.....G..=.3.....C.../P-..Q.?.{..........J[<...v..{.s..v...,..dj9A..z.>.c.vT.z<...Em..=....z....%.,.\|....s..=.t9..<@.F..K.`..2.8Q.Y...1..p...c...A....K...w.Ze@..^?nZh0.....NrE..,.vpp........a...M.X.tr.....{.g}.;..=.....c...BK.n....pw.+..1.i6sWF....-..J.=....l.....]gY.S.@.&.f...F.l.e..R....d~...f..~......1..4.{...>.{...I2.....c...%...>..}q...T.X...#\.#.3.sL..g.b.M`...V-........#.. .Y...&..........p1........y8.Y^..{..{...zbr<h...s._R.B..U.~..m~g...

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65389), with no line terminators
Category:	downloaded
Size (bytes):	1849651
Entropy (8bit):	5.0723762368209835
Encrypted:	false
SSDEEP:	6144:GknisB+nN0Ioh5DHnOy3sfVf0TTvsXbivVCGMhWhnDXFv3EMF:bnDI6Nh5DHnJWGVTMhUDNV
MD5:	5F904682FD7F27B2DCF7DAF73B97D930
SHA1:	D3154371887AC01B80858EF5EC0502AA6C777FE9
SHA-256:	C2531E8AC0AE42C9F749E34E6AF4538B4F251FF8C729939F2F7CD4E765E60AFE
SHA-512:	78367B2FE07816CADA7B09647315F0640EC3D5D6C5204C1B84EEF370C1ED8642371BAC8D910AF5805BB0A64E386E8AD766F57D8778AF92B69EB36A98756E447F
Malicious:	false
Reputation:	low
URL:	https://client-registry.mutinycdn.com/personalize/client_data/d7e93db96a7cb1fa.json
Preview:	{"audience_segments":[{"id":"351","name":"2023Q1 - EMEA - ABM - CX - FinServ \u0026 Insurance Segment","campaign_slug":"2023q1_emea_abm_cx_finserv_insurance","condition":{"attribute":"2023q1_emea_abm_cx_finserv_insurance","value":null,"and":[],"or":[],"comparator":"not_equal","filter":null,"aggregation":null},"condition_tree":null,"hold_out":"0.5","objective":null,"web_experiences":[{"id":"e14f6cd4-130e-48c3-90cd-49b329b8f5e2","state":"promoted","description":null,"name":null,"global":false,"priority":4,"experience_type":"render","redirect_url":null,"url_host":"www.qualtrics.com","url_path":"/hidden/financial-services-customer-experience-emea","url_query_params":null,"url_condition":null,"hold_out":1,"async":false,"experiment_assignment_grouping_strategy":"global","dom_update_group_id":"57799853-0c50-4078-8eae-c1d42877f0b0","dom_update_group_state":"active","variation_key":"b53af2ae-8f00-451b-9873-0ee44da42dfd","variation_name":"Variation 1","dom_updates":[{"selector":"h1.headline","da

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	57944
Entropy (8bit):	5.329201495927398
Encrypted:	false
SSDEEP:	768:so/MPceY1M9WU9Yw5d1uYMxBMYUYNQj+DYfq5j1jYY8Z02LKVYKYLyYOYlBhsX94:RJeUwT7ltMHM9eEqJ1UTZ02LKVlEyE
MD5:	867C172404C38FAB0B121F85995BE382
SHA1:	00FE51924679285DB811050BA277DE6BFBA711E4
SHA-256:	8269809364B5D2D44DE24E6C47ADF19C7981085DA4227D654DA0FCBB1E053B4A
SHA-512:	55F3E2F4166F0DCE10B60B3AB730A8C19CCCC0651AE95CA0F409035357FF0127D6BCABAF14ADE142B79AD2CA30E4FD65B815DDF22E70E40CDE66A5D5D1AD540A
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/620324491428838?v=2.9.154&r=stable&domain=www.qualtrics.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5081
Entropy (8bit):	4.918497793593663
Encrypted:	false
SSDEEP:	96:npyIEp/40w6PeSClpUBKGa6Ay/frLYDj1jMjJjzW5h4QF:FJ6GSClpJ6v/fXYX98JOi+
MD5:	0C490D5AFCFB8D395840A19E82849D8D
SHA1:	89248AB50685A977E64DFAD6A31200EDF5BE6951
SHA-256:	4B26B8B6879B459FCF94D4ED74E17BA42194B3A612B0EB50416D1CE3485280E3
SHA-512:	5508942937B6019257A9314FF4E776C1E644ECE046116614D9F7E64018A710D7FFA37DA8D366E9C1B85FE01D6EA96FA2F198902973794FF2D5C358D70790F286
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/0174e4ef-b832-4af5-a993-2642a1c2e41e/0174e4ef-b832-4af5-a993-2642a1c2e41e.json
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202401.2.0","OptanonDataJSON":"0174e4ef-b832-4af5-a993-2642a1c2e41e","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018ece49-7ff0-794c-b925-1bb29409f37e","Name":"Global Audience","Countries":["pr","ps","pw","py","qa","ad","ae","af","ag","ai","al","am","ao","aq","ar","as","au","aw","az","ba","bb","rs","bd","ru","bf","rw","bh","bi","bj","bl","bm","bn","bo","sa","bq","sb","sc","br","sd","bs","bt","bv","sg","sh","bw","by","sj","bz","sl","sn","so","ca","sr","cc","ss","cd","st","sv","cf","cg","sx","ch","sy","ci","sz","ck","cl","cm","cn","co","tc","cr","td","tf","cu","tg","cv","cw","th","cx","tj","tk","tl","tm","tn","to","tr","tt","tv","tw","d

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (534)
Category:	downloaded
Size (bytes):	5595
Entropy (8bit):	5.023374086384431
Encrypted:	false
SSDEEP:	96:3zb9bOUu9CT0SkhdOEiD31FvfxCLnvva4LTrdCHOqR0GImy0mcVq:3lCwEdOp31Fvfx6vvakH1qR0GIHD
MD5:	32516444EF9A5C79A76737DC5C48F826
SHA1:	A815697C69AE46E3DAAA83CAE1BCEB912F0B8E40
SHA-256:	62D488EA36E8A9825F058050D92C778E9734E929F4C68289F884C4F980D93B2E
SHA-512:	7F2BC000D8F973F781E4D50CA32CB694D26AC9A13F8444034542BA1451E27E9A82A52D8CE53AADC8A7CDC6D65A7639C99EB3AC159AAEBEA3F6C3F5DAE4CF9739
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-settings.js?ver=4761
Preview:	(function(c){c.fn.extend(window.WPD.ajaxsearchlite.plugin,{showSettings:function(){let b;null==(b=this.initSettings)\|\|b.call(this);this.n("searchsettings").css(this.settAnim.showCSS);this.n("searchsettings").removeClass(this.settAnim.hideClass).addClass(this.settAnim.showClass);this.n("prosettings").data("opened",1);this.fixSettingsPosition(!0)},hideSettings:function(){let b=this,a;null==(a=b.initSettings)\|\|a.call(b);b.n("searchsettings").removeClass(b.settAnim.showClass).addClass(b.settAnim.hideClass);.setTimeout(function(){b.n("searchsettings").css(b.settAnim.hideCSS)},b.settAnim.duration);b.n("prosettings").data("opened",0)}})})(WPD.dom);.(function(c){c.fn.extend(window.WPD.ajaxsearchlite.plugin,{initFacetEvents:function(){let b=this;c("input[type=checkbox]",b.n("searchsettings")).on("asl_chbx_change",function(a){b.ktype=a.type;b.n("searchsettings").find("input[name=filters_changed]").val(1);let e;null==(e=b.gaEvent)\|\|e.call(b,"facet_change",{option_label:c(this).closest("fieldset")

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (528)
Category:	downloaded
Size (bytes):	1664
Entropy (8bit):	5.128107020478423
Encrypted:	false
SSDEEP:	48:HXGFxKkGGvnnmVJALpZXZCLHKl4xqFiEgzxq:3+XGwnn6JeI+MqF+q
MD5:	A1C36AEB7A1E465A24899CBEAAB3A3A6
SHA1:	8FB84B7536D214FEFBF1D7D65AD887A4A441D4E9
SHA-256:	358D031AE310F2F7949026440ADE6A6E0D1BF52733503156366796BF2D401347
SHA-512:	A6CD24C6072689C2B83A4217C90BAA4918DF6BA0008000991881C35F17D33FED2F18BA248377FE409D31360F85239E663A3D4A977BCBEA6D1C5D7856F74D7693
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-autocomplete.js?ver=4761
Preview:	(function(c){c.fn.extend(window.WPD.ajaxsearchlite.plugin,{autocompleteGoogleOnly:function(){let a=this,d=a.n("text").val();if(""==a.n("text").val())a.n("textAutocomplete").val("");else{var e=a.n("textAutocomplete").val();if(""==e\|\|0!=e.indexOf(d)){a.n("textAutocomplete").val("");var f=a.o.autocomplete.lang;["wpml_lang","polylang_lang","qtranslate_lang"].forEach(function(b){0<c('input[name="'+b+'"]',a.n("searchsettings")).length&&1<c('input[name="'+b+'"]',a.n("searchsettings")).val().length&&(f=c('input[name="'+.b+'"]',a.n("searchsettings")).val())});a.n("text").val().length>=a.o.autocomplete.trigger_charcount&&c.fn.ajax({url:"https://clients1.google.com/complete/search",cors:"no-cors",data:{q:d,hl:f,nolabels:"t",client:"hp",ds:""},success:function(b){0<b[1].length&&(b=b[1][0][0].replace(/(<([^>]+)>)/ig,""),b=c("<textarea />").html(b).text(),b=b.substr(d.length),a.n("textAutocomplete").val(d+b),a.fixAutocompleteScrollLeft())}})}}},fixAutocompleteScrollLeft:function(){this.n("textAutoco

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1193
Entropy (8bit):	4.933705785365677
Encrypted:	false
SSDEEP:	24:JYvgV6z6AoKvc8vRcAPuzVezyUWO0oeC5tGWFGW7egIMF:yNBFRccuzVezy+16WgW7e5MF
MD5:	CCE855B1755E7381B4B765E92A43CAA0
SHA1:	B2E61AFE0F84D80AEF10376B43F1C249E576036C
SHA-256:	12D0823177E101A1399F4AFA158B8ECA3F6EA66FED3A268630A02A74D3299453
SHA-512:	C276994976A530695FE4E023321B38A22C0EE6EB4971726398A7BDF2722A3BBFC8F32B55E7B5276F3A06E9075A13D76DE9B8CEA1472913575F16D4753676599C
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/plugins/divi-booster/core/fixes/126-customizer-social-icons/icons.css?ver=3.8.5
Preview:	@charset "UTF-8";..../* === Divi-specific styles === /..../ Font /...et-social-icon a.socicon:before { ...font-family: "socicon" !important; ..}...et-social-icon a.divi-booster-icons:before { ...font-family: "divi-booster-icons" !important; .. color: inherit;..}..../ Icon positioning /...et-social-icon a.socicon { top: 1px; }...et-social-icon a.socicon:not(.et-extra-icon) { margin-right: 4px; }..../ Fix hover cutoff issue /..#et-secondary-menu .et-social-icon a.socicon {...width: 16px;...margin-right: -2px;..}..#footer-bottom .et-social-icon a.socicon {...width: 40px;.. margin-left: -6px;.. margin-right: -6px;..}..../ Extra /..a.et-extra-icon.socicon:before{...font-family:"socicon" !important..}..#et-info .et-extra-social-icons .et-extra-icon:hover {.. background: rgba(255, 255, 255, 0.3) !important;..}..../ --- icon adjustments --- */....#top-header .et-social-icon a.socicon-imdb {.. font-size: 31px;.. margin-top: -16px;.. top: 9px;..}..#top-header .et-s

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56171)
Category:	downloaded
Size (bytes):	517818
Entropy (8bit):	5.527924685012859
Encrypted:	false
SSDEEP:	6144:nKF2550vMJDUe20d2fkvgxgg7ldUkqHtASBuXNOOQE:wde20EOmggbsaXNF
MD5:	31487DEF59D5FE0CD01DD3523C4A3417
SHA1:	1545AB59BB1A9DB2CDAEFC03F38417F47B419717
SHA-256:	188151EFB69AFEE02B6B1873ADB39A44EFC7D51F6103457B6C0FEFFB79D4EEA6
SHA-512:	B4D0F4DFD0161588D095B74461E66A02D48F61BFB2AB99271BDC776C562B5DD8C96E9A267BEC2DC578E23226315A662ED9151ED6A4CA71DB06A4AE752EF618A2
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-W6F8HX
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"872",. . "macros":[{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"OnetrustActiveGroups"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__u","convert_case_to":1,"vtp_component":"PATH","vtp_defaultPages":["list"],"vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__jsm","vtp_javascript":["template","(function(){try{return window.top!==window.self}catch(a){return!1}})();"]},{"function":"__f","vtp_component":"URL"},{"function":"__remm","vtp_setDefaultValue":true,"vtp_input":["macro",1],"vtp_fullMatch":false,"vtp_replaceAfterMatch":false,"vtp_defaultValue":"false","vtp_ignoreCase":true,"vtp_map":["list",["map","k

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3841
Entropy (8bit):	5.07545474758336
Encrypted:	false
SSDEEP:	96:TFF6wf/N+RrrsxZprgENmaoIcAK8+EPtab3:TF8wN+Rrr8AeHo4laz
MD5:	BB871D4DDAE01385568227781287C751
SHA1:	6EF4399601C4BF7A6C9CFE4EB6CEFA83E6C907C1
SHA-256:	0BD669409F8A92A1FFA48C2C7C99BB75A7A7A04230AEF595419F4342AA19D818
SHA-512:	D68D4414483D1FF7B40D0820BE87C6D781F3B3417810DFBA32D880CEE01993B1DCEA55E5FF2F1892B6870649A829463461A4C71B147353910259259DB36D399A
Malicious:	false
Reputation:	low
Preview:	{"forms":[{"id":"dRN8Kd","rtl":false,"delay":true,"title":"<p>Subscribe to the NLI Newsletter<\/p>","layout":"EmbeddedLayout2","scroll":false,"ctaText":null,"hash_id":"dRN8Kd","exitText":"Close","subtitle":"<p >Subscribe for the latest news!<\/p>","show_gdpr":false,"bottomText":"<p style=\"text-align: center;\">We value your privacy and will never send irrelevant information<\/p>","buttonText":"Submit","embed_hash":"lohi3xbadrn8kd15coa","showLabels":true,"show_title":true,"visit_path":"https:\/\/stats.sender.net\/forms\/60472\/visit","losingTitle":null,"referrer_id":"id-dGOYKd","shadowInset":false,"submit_path":"https:\/\/stats.sender.net\/forms\/60472\/subscribe","delay_amount":5,"is_free_plan":false,"redirect_url":null,"schedule_end":null,"successTitle":"<p>Success!<\/p>","branding_type":"inner","ctaButtonText":"CONTINUE SHOPPING","double_opt_in":false,"form_selector":".sender-form-box","resource_path":"https:\/\/cdn.sender.net\/accounts_resources\/forms\/54619\/60472\/31a9e384b89de1

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 10832, version 1.0
Category:	downloaded
Size (bytes):	10832
Entropy (8bit):	7.980002920294047
Encrypted:	false
SSDEEP:	192:Pae8YrTL7vS+1YyLN+kVTAb9SKp8MDXNWacYkZCDDZag+zrMcZbOzzaI5Ee:PabOTHvzqyL4ktWJpTDDZlXWOb
MD5:	27624B02DBE8CAA6CFFA01DC7EAAD077
SHA1:	C8795E9910438315A39451DBD2D7D947445C0579
SHA-256:	2517FD308838EEC084AF7BB64660C3F6B675684F3518980F121A3A568E9AD933
SHA-512:	A71B34D58FED3517FC700AE1A8FDFE0A31BE81160096D9DDBBD5F2824592FEB3878E87599DDE84F31BB2340D2A54329B2476FE864F643AEFE88F357E30666C5A
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecg.woff2
Preview:	wOF2......P......ap..)..............................`..x...<.y..@..6.$..\|. ..\....O..U...0....Y...(....c..q..~.AT.].....ZZ...X.J...#..i...).2.I..qt..l.S.,.......Qn.....T..F.....w.\...}.....x:3......jG7(m..6t8.m....[.PZ.P.%.U...../.F...F....uX..zp..1...;/...0..1X.iAK.Hn.b.%.....q..z].3..`Z.F..CsL....e}<}...:.T...)C....C^#...?....D...$H<......N;0...-.Ur%..........z...Vw..b.$7....'...[e....b.......'R......t+K...rg.e&..Y..L.....-..~.G....2.#Wa...=......Z.....+..`...4..\.Uz.i. ...NP........A<...4V6..@@..&.....4...7.B'D..".Y....cl.....&..nwQ.[.+..a..7.`MTv.....N2..^....\|.cV......g..\.......m..:.L..........z.5.....zP...3.P..v.#.fNIu....y.m.@_.rR.R..IM..k._sj..~.....Y._.3..VD...N>..,.......m2.(.B;.........w.....h...Y....G..{..'.....{>...7......lG....W=..\|.....:...;sj..........>S,......\|..K..~I.g..{.=.>..>*7`&...qn...8&.J7.. sfl[e.,.t<x..".^..Ul....:..f....=.@....1.%3..0..B&...L.:....x=.... 5.L..H.......DoV(LiHZ.S..j`..~..S ..f.+"A....>~

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (559)
Category:	downloaded
Size (bytes):	198458
Entropy (8bit):	5.467598320659577
Encrypted:	false
SSDEEP:	3072:xCD1necoktGzsFNdNekqF4Cr3u7EKjnZVOnH2vrWF+PyhMBeEkVGWie2R0tGnBFV:IDbh9rWFkBeEoGWie2ej1Y
MD5:	F3304483D83B262C469A3D77431D67E9
SHA1:	0B8F6ACBDDC839565C77B2E67E327205DB1655F6
SHA-256:	C8DFF4634422C7000048C71A0E33AB73F587E69829A977F4884D87C668A66EED
SHA-512:	AEBC21874F7829B09A3164B30651ED148DB6CA103A622E59BCABC508B926606276A6A4F12C25933B40627AAE3E80110CB6FECFF5857981C01102BC98A50BC57E
Malicious:	false
Reputation:	low
URL:	https://ncsu.qualtrics.com/jfe/themes/templated-skins/qualtrics.2014:null:837823f84b2d242dc7e4cc9df30608fcfc607f48/version-1711743329010-179061/stylesheet.css
Preview:	#css-trigger{font-family:jfe !important}.#SurveyEngineBody{-webkit-text-size-adjust:100%}..Skin .MC .MAHR li,.Skin .MC .SAHR li{float:left}..Skin .QuestionBody .TextEntryBox.TextEntryLarge{width:600px;height:200px;margin:7px 0}..Skin .QuestionBody .TextEntryBox.TextEntryMedium{width:300px;height:100px;margin:7px 0}..Skin .PGR .DragAndDrop .Items ul li.Selected .rank{display:block}..Skin .PGR .DragAndDrop .NotSelected .rank{display:none}..Skin .PGR .DragAndDrop .Items ul li.Selected:hover{border:1px solid #ccc}..Skin .PGR .DragAndDrop .NotSelected:hover{border:none;padding-left:0;padding-right:0}..Skin .PGR .DragAndDrop .NotSelected .rank{display:none}..Skin .PGR .DragAndDrop .Items ul li.Selected .rank{display:inline-block}..Skin .QuestionOverlay{position:absolute;top:0;bottom:0;left:0;right:0;z-index:10000;background-color:#fff;opacity:0;filter:alpha(opacity=0)}..Skin .ResponseSummary~.QuestionOuter.Matrix .DL td.last{width:50%}..OrgHierarchy{padding:0 20px 20px 20px}..OrgHierarchy .O

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	755
Entropy (8bit):	4.6494332311899695
Encrypted:	false
SSDEEP:	12:YGKvxaNmmi+B3NpH5xM/h/bEpUAxaNmr2yy3954z8okewRx873rLdqnYcnGz:Yd4N9HQJBNl4lYG7LdqYcGz
MD5:	6E499B9624356D3591D8C757099360A0
SHA1:	502D4843F09F1B5CAD8EE29C56734E28B10E0667
SHA-256:	9BDBC8771D4422A4DA0025E110A66C4E13503EA21C50779F6640E413701A7E16
SHA-512:	EEF2E1FDA969E09A7D65634AD8BA82B0CCD3CC86715351C73BCCAA4646A37AE36F4EEBD73E4CE9567B24D1DE953B621394D050EFCC9C86F306C75DE69C988AFF
Malicious:	false
Reputation:	low
URL:	https://epsilon.6sense.com/v3/company/details
Preview:	{"company":{"domain":"","name":"","region":"","country":"United States","state":"New York","city":"New York City","industry":"","country_iso_code":"US","address":"","zip":"","phone":"","employee_range":"","revenue_range":"","employee_count":"","annual_revenue":"","is_blacklisted":false,"state_code":"","is_6qa":false,"geoIP_country":"United States","geoIP_state":"New York","geoIP_city":"New York City","company_match":"Non-actionable Match","additional_comment":"There is no valid B2B use case as this was matched to something other than a company name/domain (i.e. bot, host, noisy signal, etc.)","naics":"","naics_description":"","sic":"","industry_v2":[],"sic_description":""},"scores":[],"segments":{"ids":[],"names":[],"list":[]},"confidence":"NA"}

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 2048x1188, components 3
Category:	downloaded
Size (bytes):	112839
Entropy (8bit):	7.443645756983046
Encrypted:	false
SSDEEP:	1536:/fqsbrOEvzxwxRSPhxV6P/80LyTY/tHSNgb6j/3+tMAqY+LlbfhQiN:nqATtwxsJ4LtHSNW6jf+CAqx1F
MD5:	CC71398779B5DDE40D7974F3A1340D5A
SHA1:	744F97136795B96782A0716227EB51AA91E95366
SHA-256:	0CB1B4858D1B23BA34B871F30A94EC38A0652C521E47B934C4ED916B23DC25F7
SHA-512:	A3471BB427BFC53884D3C62B17DF86DA59B81B66D3355C99E8C4BA4093E113680FFDC5862F512CCBD55862A23105C45EEA98A01A16259F01AAB439DFA2CC054E
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2018/06/Head-Start-Logo.jpg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...)7P..Y..t..Z.........@..g..W.x.....7.._O}Ja...3.#....JW..wy.5..d.p.r.....i7.gw.9'O.....T._!....l..."....~. =09?.5.`..R..O......`6x.K......^.._..........3_.Rm......4>0....:...........}....Y..O.

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 198 x 193, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6362
Entropy (8bit):	7.938078916867024
Encrypted:	false
SSDEEP:	192:sS4w1ABezpfS3n5/PtUkESjBD22Z49v9XgvIvNZE:r4szanVlrJjBD/0vlgyc
MD5:	BC049B4EFC1B500E5783987651F586B7
SHA1:	FA2AC004AF7A322092D8285FED016E7A70D78620
SHA-256:	21409860FB0016CCF5E7D476B025FCA769D42A69EFC5E96211009A279FFF7695
SHA-512:	38E7DFA582572F9E5546E55AC24334BC4B40CEE613ABA5249445F51823C368F883C87235666BC34CA12C679B57757E158E550CE471F168DEF60C6658E7DCB9FC
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/uploads/2020/10/Give-VRT-W.png
Preview:	.PNG........IHDR..............@?.....pHYs.................PLTEGpL.....................................o...............o.................o..................................7.E............o....j...6.B..o..o..o..o..n6.A....9.J..o....o.~j..j..8.G6.A..j..o..o..9.J7.D9.J6.B.~j....9.J.~j.~j..o..h9.J9.J6.A5.<5.<6.A.~j.~j5.>6.A..k..5.<..o6.A..k9.J..k5.<.~j..j....l....5.<5.<9.J..k5.<..l5.<9.J9.J6.A6.A..m6.A..m.~j.~j.fC...L+..j5.<....g........l.v..q..o..r..=.E.}.fI.L+.L+..o.{....L+...`8.9.J6.A.~j....5.<..r.u.z.y..pL..nX.w..m..j..m..t.O/..o..p.....y..n..l..s....m..r....J(..v~H"..;i<...k..k...pN.~.hKf;..T3.\@....yp@.b9...wD..X8..^..v.{W...aD.N$T0..uR..x..f..kC .~..m..ue=.wN..t.R,..a.7.s1.pHY3..zX.fE.Y5.lU.9.6..:O,.tJ$.e/.]-.9}T0..l.k0.Q8.H..m._E.I..kc.W..].iL.k..o....wJ#......tRNS....vD..Dv.f"."2Tv...2...@D....".2T....T..f?f 0......p.../.P@.`P@.p@0.P`. .....`..........`O.r/..`...VP.`......p..@ ..d...... sM......IDATx..

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2004
Entropy (8bit):	4.284242389859822
Encrypted:	false
SSDEEP:	24:t4GCXMvpyd13kjJXaHyQ+YaVJS0rHFPqA8NnKQw4wXqBxKB7XLIuX8pO1aeTh6y7:1aMUd1UAEq0rHQBnKQrTKBxAdy+uUuj
MD5:	CE05C06B43559DF7E0BD98190F3FD2BE
SHA1:	E4BEF98932546C68BB1C06A50934DD79E264F2E5
SHA-256:	A8D37EDBA7AD451C3630D7254CDB313F33B3FCDE3B180938BAB5B2C3A26CE49F
SHA-512:	831B6BAF1B5470B7D36C6ADB2E64C6E95E9836A6824289B9326DFC10B482F9C6E247C979786E9D0D0B8227280F918A2C8460D26A007B6215062E4A4C5BDC5ABC
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/assets/dist/svg/customer/jetblue.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <symbol id="solid" viewBox="0 0 2676 903">. <path d="M190 1330H86v103h104v-103zm1251.5 50c37-35.3 55.5-82 55.5-140 0-33.3-7.8-63.2-23.5-89.5-15.7-26.3-43.2-48.2-82.5-65.5v-2c37.3-9.3 66.3-29.5 87-60.5s31-65.8 31-104.5c0-40.7-9-76.5-27-107.5s-42.3-55-73-72-64.3-25.5-101-25.5h-303v720h279c68 0 120.5-17.7 157.5-53zM1671 845c0-23.3 13-35 39-35h34v-97h-44c-40.7 0-72.8 9.8-96.5 29.5S1568 794 1568 838v595h103V845zm-807 381h75v-80h-75V848c0-13.3 3-23 9-29s15-9 27-9h39v-97h-53c-36.7 0-66.5 11.2-89.5 33.5S762 799.7 762 839v307h-52v80h52v155h102v-155zm250 110v-206h158c38 0 66.8 9.7 86.5 29a99.1 99.1 0 0 1 29.5 74c0 29.3-10 53.8-30 73.5s-48.7 29.5-86 29.5h-158zm-540.5-131c32.3-18 58.2-43.5 77.5-76.5s29-70.8 29-113.5v-85H360c0-40.7 11.2-71.8 33.5-93.5S445.3 804 482 804c20 0 39.8 4.5 59.5 13.5 19.7 9 37.2 21.2 52.5 36.5l76-64c-48-55.3-110-83-186-83-63.3 0-117 19.7-161 59s-66 106.7-66 202c0 62.7 10.2 113.7 30.5 153s46.5 67.7 78.5 85 66 26 10

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 43296, version 1.0
Category:	downloaded
Size (bytes):	43296
Entropy (8bit):	7.995299145518181
Encrypted:	true
SSDEEP:	768:0o2bI9D9HAU3ryntTjImbj6o/Gjqp6/YepkqWPjmfU4S6Z8IQHhog/2bmz6Mh2G/:0Db4tB3+T1OSGj+EkZmfUY8cbm+MhzTN
MD5:	EDD30FE88BCD0277020EE87E5A8F341B
SHA1:	1FB9958A451789B542A6D6CF43628ECF733ABFF2
SHA-256:	89078FCD78C0D66DB6386B3163540F4489BA4F123DE9009059B274A337603007
SHA-512:	520C552902A816053AD230A506C0903AEB3E4DB66E4AFFFD899395DA93F3612C779E9AD046027895DCF07AA734B1E91B29B60E599CC83D4780515E575FBF96E9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ptserif/v18/EJRVQgYoZZY2vCFuvAFYzr8.woff2
Preview:	wOF2....... ......................................N..<.`....>........$..>.......X.6.$.... .....\..J[.gq.....r................9'..bl.bv;@.$.~....jR.2..i...S..7t".N&......id2l.DZ"I....&.w....YE..i.... ..._.}C.j.#..,.U~.l.._...)....X.....=..O.......$....e^....V.9....Ot...My..MW....p..`+....@.A.FFq.'.?_'u..U.....j..k.Y...n...@.z....(H..J....Xq.F]...........>}.....i..fU.7M.,..B!Y...!uV#4..F)....,....ma..!....)...........E._..../.......r-..^5.:V#:..'...T6.o.u........G...A.&..~.'.J....H...$..]..J.^.>..%..~V.%./aC.l....+...pA..o...J..G..:...{.......!..n?.R.m..\.WKG...X..f.......A.G.-.{b.k...u $.0.q..K.C.nc..`.w.7.8...i....q..{..F.A..d..F;A6.d;..?.R..&X..#:....D.. $..G.dM`..i.o.s..l]t..).......wf...c....I.(n...C(...O.........fH"......!.0"...D..n...}.9....[.........L..(M..\|.......5.d..).>r.>.PcD*........=.gL{....L..U...p9.......v.\a...Q....zHJ....).K{....R....d..Zjw.....]..............43...v.........<_.D...M(...i....(........=..$.^....

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 92084, version 2.4
Category:	downloaded
Size (bytes):	92084
Entropy (8bit):	6.340206705743041
Encrypted:	false
SSDEEP:	1536:n2S6qLRqKELiXMjCs7VDmGWALXJ8jzxJ9OIgr26F9BEFDTs8/M/OuWhX5j63QWIh:n2S6qLRqKELiXMjCs7VDmGWAN8H79OIl
MD5:	4F7C51948CE1B802A13EBBCCEC151D0C
SHA1:	5B1D3CD0929108DA4B6334C4A487DB08C9520F1D
SHA-256:	FE67B77AC7E0EF4B482DAFB86ADFA403DB1B89A2F337D2DC8BD1278CFE975196
SHA-512:	87FAB156E0C1E79F4DD07075CEE8905DCC8C01C7708FBF6E9F6592F1C0F62083C86D0076EC23F73FC4351B51D6E03951FF7AECE0AD9305488B910A8F8FEFB023
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.woff
Preview:	wOFF......g.......gh........................OS/2.......`...`....cmap...h...d...d...gasp................glyf......Z...Z.&..7head..[....6...6'..Dhhea..\(...$...$.A..hmtx..\L...h...ha.c.loca..b....6...6..maxp..e.... ... ....name..f............6post..g.... ... ...............................3...................................@.........@...@............... .................................H.............~...&........... .............. b.l..........................................79..................79..................79.......I.@...>.#..%265...2764/...'&"....0"1.....2?..... ...........................@...s...............................I.B...@.#..."...'&".....021....27>.?.64'&"...4&. ............................@...........................s........................0.1..2764/.!2654&#!764'&"..0.1......18.1..............s...............................................................(.....3!.....2?.>.7>.58.9.4&'../.&".....!"......s............................................................

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 1860x2016, components 3
Category:	dropped
Size (bytes):	189156
Entropy (8bit):	7.367537354084518
Encrypted:	false
SSDEEP:	3072:VjTwfWPDDWXWdZujY2/ymJPQ0WPotu/6VD8wt3:VjceXzV2/ymJY0WATlt3
MD5:	CEF20C9CC0947A33BD78C9029927036F
SHA1:	A498D42D3798E8020FEF2C22A4B66A63CF824888
SHA-256:	9C1326A43D0A889CCE168FA88E77F4313403E5C418F595D601A21D6539B03CF3
SHA-512:	61B497C5CE2F89887A076835B60222806B217A6B6561B31782644F3B833324C6DD390D3EA5394A59762AFF0BDC1CF27A0FC67B1321A66A488EF302B4A7F80975
Malicious:	false
Reputation:	low
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.........................................................................D.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 10776, version 1.0
Category:	downloaded
Size (bytes):	10776
Entropy (8bit):	7.981748955085368
Encrypted:	false
SSDEEP:	192:nNAWdM5d/3qMW27ye8wUItmlB6pmEUofkqBCQS+4AUPNl20GHvRnQ34N9ZrQ:Z+HWVekItmlB6pnvBC9hNl2LPRQoPrQ
MD5:	D60B12F3996BDB9C6B7CCB606033F0BD
SHA1:	1C98A8F52A693840077D14186B6A9F82B9EA0E5E
SHA-256:	9EE3D5272B624DCE64C062C8214684890312A902C9D2F43FC6EDFAF452E4252C
SHA-512:	7CBBA97F76062B0BDD2F0D1397F08934A9E66D88325D37CE52160F0BFD34FDFCB0571B0EF4DF4E8D47F8D97A52D102568181B9AC0305A6F15F92D168EBFFC0AF
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFQ.woff2
Preview:	wOF2.............a...)..............................`..x... .E..@..6.$..\|. ..B....OU#r.8..7=.(.$)......C\|..L...k.WO.:+H.\.!...........p....XS\|b...~.\.."..n..+./...Gt..#4.I...?.g... '&.....hD.Vc..[.w/.\.....V..m&Z..FEh. s9vd.r..3..=D.6.T...Z..c......'U.6..p.`........l@..'......z.~_..J.1..2.[.7.+Q.{X..Xa..A)...'D.V...y....4ev....n.y0..2.Y.+...L.q-........&.G..8..S.....hxH.$t..j....;...;[r....SM.........`0L.uLJ..&n...Ot....!.@:rU].S..j.1...K....E.2....qQ.....#s..f......>ikw.....:F..!..n)u.[.~TY.. ......U.H3.c.F......a..M...A.q.R.w.../c<X..j..X..Y.A/.}.J.6....'.m7pS..........m.3...T..C./...A..J(..7.........F....Y.....v..z...\..s.Yq<..q.Ky%.\| .p.x.t........M...'..DPQ.B.+.R}..O.nlq.O..d...^p....+A...r....9.#.z.;..hO...>...N<3>.>e<.>.<%?%=.?M{....d....x"}.~.x,......+d.......@.......`....E.. ....F$Bv...gOy........l.D...\|.!.E.T.D6T..."n.jTWq.yO:\|..B+.>wF.C..GR...........q....#.....t.wp.S..t.4CZ.(..}.sh.....$.1..0.2..%.....)s.y...4k..u...i.k.w

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2863)
Category:	downloaded
Size (bytes):	2971
Entropy (8bit):	4.7721417842731615
Encrypted:	false
SSDEEP:	48:5YReAZAdjz/smzrfijiLKjKGirjNTzW1CTujEckMEcwapcjvEqsw:5YRf+qCLNTzS1EuEfaAEI
MD5:	FBF37F4F60F2BBE54C8F728B7EBB25D3
SHA1:	1739E269F99DEF8B0B816A6A4A1EACDB810B554C
SHA-256:	8DCA4C5DD3EAE03BDA18AE5121E23365156894AEC753E41A899326CAEE96AEBE
SHA-512:	8A5E0578D20698E776613F9FEC806D5EDF3E93EFC3A712581C91ED12767FE78898E60B660B7075379D8624F66CE7301B051E44DB67BCE109F2856CCFC442A8EC
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/plugins/dp-portfolio-posts-pro/styles/style.min.css?ver=4.1.9
Preview:	.et_pb_fullwidth_portfolio .et_pb_portfolio_image.show_excerpt:hover .et_overlay:before{top:10%}.et_pb_fullwidth_portfolio .et_pb_portfolio_image.show_excerpt:hover h3{margin-top:15%}.et_pb_fullwidth_portfolio .et_pb_portfolio_image.show_excerpt .post-excerpt{padding:0 10px}.et_pb_fullwidth_portfolio.et_pb_bg_layout_light .et_pb_portfolio_image.show_excerpt .post-excerpt{color:#666}.et_pb_fullwidth_portfolio.et_pb_bg_layout_dark .et_pb_portfolio_image.show_excerpt .post-excerpt{color:#fff}.et_pb_fullwidth_portfolio.carousel_arrow_sides:hover .et-pb-arrow-prev{left:-17px}.et_pb_fullwidth_portfolio.carousel_arrow_sides:hover .et-pb-arrow-next{right:-14px}.et_pb_fullwidth_portfolio.carousel_arrow_top .et-pb-arrow-next,.et_pb_fullwidth_portfolio.carousel_arrow_top .et-pb-arrow-prev,.et_pb_fullwidth_portfolio.carousel_arrow_top:hover .et-pb-arrow-next,.et_pb_fullwidth_portfolio.carousel_arrow_top:hover .et-pb-arrow-prev{top:10%}.et_pb_dpfilterable_blog_0.et_pb_filterable_portfolio .post-met

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6322)
Category:	downloaded
Size (bytes):	8574
Entropy (8bit):	5.312402923845142
Encrypted:	false
SSDEEP:	192:dPmRQHMXDHcCC3fxqC0TN6ZbucRm5i5HHQpcaQGcFjAW90YgtKryaxggy6cqF4/8:dP+TXjcCC3fslQucYu0ca7cFjAW90gxr
MD5:	BF7FE805AB945E4B2C4D56DA59476811
SHA1:	307135FD2987F477C7BD50FCD0CC28A1CFF1F568
SHA-256:	B6205029E1016596807B655C8F57818736A787E32CEB1407EFFA152AC3BB9380
SHA-512:	1237AC2A5BD2BD37B403F747D0CE3DB65ED1E9C67B92AA4018B08C0747167470DE113E36A01950F3A266B815806170F4C15068CAD18AB71EB32957FEF2D6FFA4
Malicious:	false
Reputation:	low
URL:	https://naturalearning.org/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/salvattore.js?ver=4.25.0
Preview:	/!. Salvattore 1.0.5 by @rnmp and @ppold.* https://github.com/rnmp/salvattore.* Licensed under the MIT license..* Copyright (c) 2013-2014 Rolando Murillo and Giorgio Leveroni./../.Permission is hereby granted, free of charge, to any person obtaining a copy of.this software and associated documentation files (the "Software"), to deal in.the Software without restriction, including without limitation the rights to.use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of.the Software, and to permit persons to whom the Software is furnished to do so,.subject to the following conditions:..The above copyright notice and this permission notice shall be included in all.copies or substantial portions of the Software...THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.COPYRIGHT HOLDERS

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1309318
Entropy (8bit):	4.542432491629435
Encrypted:	false
SSDEEP:	24576:E2LVwilvS6x/CyFXi2TvOKxXSG5NwGuI1CzHqa/r+WwWLK8qruJXuKY+7yzTO6TN:E2LVwilvS6x/CyFXi2TvOKxXSG5NwGuK
MD5:	70CF4DDBA1C510234A5A9061644260E5
SHA1:	511BAFFAEC28AF4D9436D40F79F4EA98639F86A9
SHA-256:	DA9FDE1D262259BCA5321D481EBA64A84D788E712473811EACE75B57860F63F3
SHA-512:	669C967B6CBE5DBCE854C3EEC1DF1CCDDCFCBA5BE10B30E2EA31C86502BCFBC44F911C644CC4958A52D602874EA5BF5BC23C3C79812CAB105392C933513F0393
Malicious:	false
Reputation:	low
Preview:	{"/support/website-app-feedback/dx-programs/data-security-privacy-for-digital-experience-analytics/":{"en":"/support/website-app-feedback/dx-programs/data-security-privacy-for-digital-experience-analytics/","uk":"/support/website-app-feedback/dx-programs/data-security-privacy-for-digital-experience-analytics/","au":"/support/website-app-feedback/dx-programs/data-security-privacy-for-digital-experience-analytics/"},"/support/website-app-feedback/settings-tab/intercepts-section/":{"de":"/support/de/website-app-feedback/settings-tab/intercepts-section/","en":"/support/website-app-feedback/settings-tab/intercepts-section/","fr":"/support/fr/website-app-feedback/settings-tab/intercepts-section/","it":"/support/it/website-app-feedback/settings-tab/intercepts-section/","uk":"/support/website-app-feedback/settings-tab/intercepts-section/","au":"/support/website-app-feedback/settings-tab/intercepts-section/","es":"/support/es/website-app-feedback/settings-tab/intercepts-section/","es-la":"/supp

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=2080, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=3887], comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 1985x1418, components 3
Category:	dropped
Size (bytes):	617827
Entropy (8bit):	7.971838005654082
Encrypted:	false
SSDEEP:	12288:/2v4EgsudQVw+xh6MU2YdBEQSWB9j00/3/Q84fAHfrTA8:/2zgsuIUMUJEQTfoQQEjc8
MD5:	176F9BEDEEF3C6C1E43093D1170464CC
SHA1:	7119FB1928455C449A26EA29E81706E5FAE55AD7
SHA-256:	C3AF09757C149C632A83FAAD24B1D5394F0A7F40111DE5572B06B1A81F604304
SHA-512:	CE36830AE2B8F8E32DEFAE76921CF54F98E7E600B3A288896009F7FCB265B3B73AFB09B5C75159A4FB0B505A3AD031A3139100868F325CFBDB2B1B7ADCC9B6AD
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.............../........... ...........................................................................(...........1.....$.....2..........i.............$............'.......'.Adobe Photoshop CC 2019 (Macintosh).2019:08:07 15:13:08...........0231...................................................................r...........z.(.................................[.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................r...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...e..:x..U.....>m..)CC...-..qph........Z.XL.lZI\. Ta:D.["~..~U..>.dt..J.

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39683), with no line terminators
Category:	downloaded
Size (bytes):	39683
Entropy (8bit):	5.169264290289704
Encrypted:	false
SSDEEP:	768:e8PseMO9BAdOfgBrgnQmznUlu+PrgPoFC:FP4s9V
MD5:	31AB63318722A78F03C1FFC763D517D1
SHA1:	4BFEB7CCA08E57D6BB18208408818C2F43C6DB71
SHA-256:	146F4EC2A86085362B81484C85916EC686502BF5807F9FD9CDAB5B59D32395CA
SHA-512:	1431BBF2988B32C99BA42D622F775C2DD488CFD21F7F9981D821A3AB2E2BF12C0952F4D9E9D370B601FB95C8FCEB4E9D0315D2E32ACE3DD529F43D400FFEA04A
Malicious:	false
Reputation:	low
URL:	https://ncsu.qualtrics.com/jfe/static/dist/c/mc.31ab63318722a78f03c1.js
Preview:	webpackJsonp([6],{197:function(e,n,i){var t,o;t=[i(0),i(183),i(683),i(684),i(685),i(279),i(686),i(687),i(688),i(689),i(690),i(691),i(692),i(693),i(694),i(695),i(696)],void 0!==(o=function(e,n,i,t,o,r,c,s,d,l,a,u,h,C,m,p,I){"use strict";return e.Class.declare({$name:"MCRendererBundle",$extends:n,getDefinedRenderers:function(){return{MCDL:i,MCMACB:t,MCMSB:o,MCSA:r,MCSB:c}},getDefinedTemplates:function(){return{MCDL:s,MCMACOLTX:d,MCMAHRTX:l,MCMAVRTX:a,MCMSB:u,MCNPS:h,MCSACOLTX:C,MCSAHRTX:m,MCSAVRTX:p,MCSB:I}}})}.apply(n,t))&&(e.exports=o)},279:function(e,n,i){var t,o;t=[i(3),i(17),i(2),i(0),i(354)],void 0!==(o=function(e,n,i,t,o){"use strict";return t.Class.declare({$name:"MCSARendererHTML",$extends:o,blankOptionScreenreader:{},detectedClick:!1,initialize:function(e){this.$super(e),this.on("prerender",function(){this.blankOptionScreenreader=this.getMessageFromTemplate("Blank")}.$bind(this)),this.on("postrender",function(){i.each(this.runtime.Choices,function(e,n){e.TextEntry\|\|this._$el.fi

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16060)
Category:	downloaded
Size (bytes):	16184
Entropy (8bit):	5.134178088554705
Encrypted:	false
SSDEEP:	384:T3fzXQsyRkcyEVCGxVleW72KhRkaSph1H:4syRDyEFxVlXvhKdhp
MD5:	E33AE21D571866DC7C9DB6D10C29DB1F
SHA1:	72F90B5163582FBB47D613EAE3EBFE5674ABD778
SHA-256:	2A760066FCEE7A17505CE4D13428F8B5DC8907CB2BA6ACC0020DDDE89869A5E0
SHA-512:	B6DFF12EBB4C76CA3C027E7B2D1D8B36BC5938BDC1255AF17290EAB9B350C6FB50ACBE3DB72105C1076568634DCD50E21A567322C34CD07127E1765F214965CF
Malicious:	false
Reputation:	low
URL:	https://www.qualtrics.com/assets/dist/js/libraries/vimeo-player.js
Preview:	/! @vimeo/player v2.10.1 \| (c) 2020 Vimeo \| MIT License \| https://github.com/vimeo/player.js /.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):((e=e\|\|self).Vimeo=e.Vimeo\|\|{},e.Vimeo.Player=t())}(this,function(){"use strict";function r(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,r.key,r)}}var e="undefined"!=typeof global&&"[object global]"==={}.toString.call(global);function i(e,t){return 0===e.indexOf(t.toLowerCase())?e:"".concat(t.toLowerCase()).concat(e.substr(0,1).toUpperCase()).concat(e.substr(1))}function s(e){return/^(https?:)?\/\/((player\|www)\.)?vimeo\.com(?=$\|\/)/.test(e)}function o(e){var t,n=0<arguments.length&&void 0!==e?e:{},r=n.id,o=n.url,i=r\|\|o;if(!i)throw new Error("An id or url must be passed, either in an options object or as a data-vimeo-id or data-vimeo-url attribute.");if(t=i,!i

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 2, 2024 16:32:20.483565092 CEST	49675	443	192.168.2.4	173.222.162.32
May 2, 2024 16:32:22.050024033 CEST	49678	443	192.168.2.4	104.46.162.224
May 2, 2024 16:32:30.248614073 CEST	49675	443	192.168.2.4	173.222.162.32
May 2, 2024 16:32:32.272420883 CEST	49736	443	192.168.2.4	172.66.43.168
May 2, 2024 16:32:32.272458076 CEST	443	49736	172.66.43.168	192.168.2.4
May 2, 2024 16:32:32.272512913 CEST	49736	443	192.168.2.4	172.66.43.168
May 2, 2024 16:32:32.272831917 CEST	49736	443	192.168.2.4	172.66.43.168
May 2, 2024 16:32:32.272845030 CEST	443	49736	172.66.43.168	192.168.2.4
May 2, 2024 16:32:32.273319006 CEST	49737	443	192.168.2.4	172.66.43.168
May 2, 2024 16:32:32.273341894 CEST	443	49737	172.66.43.168	192.168.2.4
May 2, 2024 16:32:32.273408890 CEST	49737	443	192.168.2.4	172.66.43.168
May 2, 2024 16:32:32.273852110 CEST	49737	443	192.168.2.4	172.66.43.168
May 2, 2024 16:32:32.273864985 CEST	443	49737	172.66.43.168	192.168.2.4
May 2, 2024 16:32:32.461469889 CEST	443	49736	172.66.43.168	192.168.2.4
May 2, 2024 16:32:32.461947918 CEST	49736	443	192.168.2.4	172.66.43.168
May 2, 2024 16:32:32.461973906 CEST	443	49736	172.66.43.168	192.168.2.4
May 2, 2024 16:32:32.463002920 CEST	443	49736	172.66.43.168	192.168.2.4
May 2, 2024 16:32:32.463058949 CEST	49736	443	192.168.2.4	172.66.43.168
May 2, 2024 16:32:32.464596987 CEST	49736	443	192.168.2.4	172.66.43.168
May 2, 2024 16:32:32.464660883 CEST	443	49736	172.66.43.168	192.168.2.4
May 2, 2024 16:32:32.465060949 CEST	49736	443	192.168.2.4	172.66.43.168
May 2, 2024 16:32:32.465068102 CEST	443	49736	172.66.43.168	192.168.2.4
May 2, 2024 16:32:32.466234922 CEST	443	49737	172.66.43.168	192.168.2.4
May 2, 2024 16:32:32.466481924 CEST	49737	443	192.168.2.4	172.66.43.168
May 2, 2024 16:32:32.466494083 CEST	443	49737	172.66.43.168	192.168.2.4
May 2, 2024 16:32:32.467647076 CEST	443	49737	172.66.43.168	192.168.2.4
May 2, 2024 16:32:32.467706919 CEST	49737	443	192.168.2.4	172.66.43.168
May 2, 2024 16:32:32.468856096 CEST	49737	443	192.168.2.4	172.66.43.168
May 2, 2024 16:32:32.468924999 CEST	443	49737	172.66.43.168	192.168.2.4
May 2, 2024 16:32:32.514113903 CEST	49737	443	192.168.2.4	172.66.43.168
May 2, 2024 16:32:32.514115095 CEST	49736	443	192.168.2.4	172.66.43.168
May 2, 2024 16:32:32.514125109 CEST	443	49737	172.66.43.168	192.168.2.4
May 2, 2024 16:32:32.564043045 CEST	49737	443	192.168.2.4	172.66.43.168
May 2, 2024 16:32:32.850649118 CEST	443	49736	172.66.43.168	192.168.2.4
May 2, 2024 16:32:32.850811958 CEST	443	49736	172.66.43.168	192.168.2.4
May 2, 2024 16:32:32.850884914 CEST	49736	443	192.168.2.4	172.66.43.168
May 2, 2024 16:32:32.864240885 CEST	49736	443	192.168.2.4	172.66.43.168
May 2, 2024 16:32:32.864260912 CEST	443	49736	172.66.43.168	192.168.2.4
May 2, 2024 16:32:33.629198074 CEST	49740	443	192.168.2.4	142.251.40.228
May 2, 2024 16:32:33.629242897 CEST	443	49740	142.251.40.228	192.168.2.4
May 2, 2024 16:32:33.629581928 CEST	49740	443	192.168.2.4	142.251.40.228
May 2, 2024 16:32:33.630188942 CEST	49740	443	192.168.2.4	142.251.40.228
May 2, 2024 16:32:33.630208969 CEST	443	49740	142.251.40.228	192.168.2.4
May 2, 2024 16:32:33.892306089 CEST	443	49740	142.251.40.228	192.168.2.4
May 2, 2024 16:32:33.892611980 CEST	49740	443	192.168.2.4	142.251.40.228
May 2, 2024 16:32:33.892644882 CEST	443	49740	142.251.40.228	192.168.2.4
May 2, 2024 16:32:33.893676043 CEST	443	49740	142.251.40.228	192.168.2.4
May 2, 2024 16:32:33.893744946 CEST	49740	443	192.168.2.4	142.251.40.228
May 2, 2024 16:32:34.099137068 CEST	49740	443	192.168.2.4	142.251.40.228
May 2, 2024 16:32:34.099320889 CEST	443	49740	142.251.40.228	192.168.2.4
May 2, 2024 16:32:34.103315115 CEST	49741	443	192.168.2.4	23.51.58.94
May 2, 2024 16:32:34.103347063 CEST	443	49741	23.51.58.94	192.168.2.4
May 2, 2024 16:32:34.103564978 CEST	49741	443	192.168.2.4	23.51.58.94
May 2, 2024 16:32:34.125499010 CEST	49741	443	192.168.2.4	23.51.58.94
May 2, 2024 16:32:34.125515938 CEST	443	49741	23.51.58.94	192.168.2.4
May 2, 2024 16:32:34.139619112 CEST	49740	443	192.168.2.4	142.251.40.228
May 2, 2024 16:32:34.139628887 CEST	443	49740	142.251.40.228	192.168.2.4
May 2, 2024 16:32:34.184505939 CEST	49740	443	192.168.2.4	142.251.40.228
May 2, 2024 16:32:34.312927961 CEST	443	49741	23.51.58.94	192.168.2.4
May 2, 2024 16:32:34.313003063 CEST	49741	443	192.168.2.4	23.51.58.94
May 2, 2024 16:32:34.528588057 CEST	49741	443	192.168.2.4	23.51.58.94
May 2, 2024 16:32:34.528601885 CEST	443	49741	23.51.58.94	192.168.2.4
May 2, 2024 16:32:34.528824091 CEST	443	49741	23.51.58.94	192.168.2.4
May 2, 2024 16:32:34.582088947 CEST	49741	443	192.168.2.4	23.51.58.94
May 2, 2024 16:32:36.331031084 CEST	49741	443	192.168.2.4	23.51.58.94
May 2, 2024 16:32:36.372138977 CEST	443	49741	23.51.58.94	192.168.2.4
May 2, 2024 16:32:36.421562910 CEST	443	49741	23.51.58.94	192.168.2.4
May 2, 2024 16:32:36.421695948 CEST	443	49741	23.51.58.94	192.168.2.4
May 2, 2024 16:32:36.421752930 CEST	49741	443	192.168.2.4	23.51.58.94
May 2, 2024 16:32:36.733820915 CEST	49741	443	192.168.2.4	23.51.58.94
May 2, 2024 16:32:36.733831882 CEST	443	49741	23.51.58.94	192.168.2.4
May 2, 2024 16:32:36.733865976 CEST	49741	443	192.168.2.4	23.51.58.94
May 2, 2024 16:32:36.733870029 CEST	443	49741	23.51.58.94	192.168.2.4
May 2, 2024 16:32:36.925126076 CEST	49748	443	192.168.2.4	23.51.58.94
May 2, 2024 16:32:36.925165892 CEST	443	49748	23.51.58.94	192.168.2.4
May 2, 2024 16:32:36.925225019 CEST	49748	443	192.168.2.4	23.51.58.94
May 2, 2024 16:32:36.925477982 CEST	49748	443	192.168.2.4	23.51.58.94
May 2, 2024 16:32:36.925491095 CEST	443	49748	23.51.58.94	192.168.2.4
May 2, 2024 16:32:37.114638090 CEST	443	49748	23.51.58.94	192.168.2.4
May 2, 2024 16:32:37.114727020 CEST	49748	443	192.168.2.4	23.51.58.94
May 2, 2024 16:32:37.115870953 CEST	49748	443	192.168.2.4	23.51.58.94
May 2, 2024 16:32:37.115875959 CEST	443	49748	23.51.58.94	192.168.2.4
May 2, 2024 16:32:37.116672039 CEST	443	49748	23.51.58.94	192.168.2.4
May 2, 2024 16:32:37.117697954 CEST	49748	443	192.168.2.4	23.51.58.94
May 2, 2024 16:32:37.160130978 CEST	443	49748	23.51.58.94	192.168.2.4
May 2, 2024 16:32:37.291527987 CEST	443	49748	23.51.58.94	192.168.2.4
May 2, 2024 16:32:37.291735888 CEST	443	49748	23.51.58.94	192.168.2.4
May 2, 2024 16:32:37.292357922 CEST	49748	443	192.168.2.4	23.51.58.94
May 2, 2024 16:32:37.292376995 CEST	49748	443	192.168.2.4	23.51.58.94
May 2, 2024 16:32:37.292376995 CEST	49748	443	192.168.2.4	23.51.58.94
May 2, 2024 16:32:37.292387962 CEST	443	49748	23.51.58.94	192.168.2.4
May 2, 2024 16:32:37.292396069 CEST	443	49748	23.51.58.94	192.168.2.4
May 2, 2024 16:32:43.906001091 CEST	443	49740	142.251.40.228	192.168.2.4
May 2, 2024 16:32:43.906063080 CEST	443	49740	142.251.40.228	192.168.2.4
May 2, 2024 16:32:43.906114101 CEST	49740	443	192.168.2.4	142.251.40.228
May 2, 2024 16:32:44.044748068 CEST	49740	443	192.168.2.4	142.251.40.228
May 2, 2024 16:32:44.044753075 CEST	443	49740	142.251.40.228	192.168.2.4
May 2, 2024 16:32:47.451308966 CEST	443	49737	172.66.43.168	192.168.2.4
May 2, 2024 16:32:47.451431990 CEST	443	49737	172.66.43.168	192.168.2.4
May 2, 2024 16:32:47.451489925 CEST	49737	443	192.168.2.4	172.66.43.168
May 2, 2024 16:32:47.957638025 CEST	49737	443	192.168.2.4	172.66.43.168
May 2, 2024 16:32:47.957660913 CEST	443	49737	172.66.43.168	192.168.2.4
May 2, 2024 16:32:51.814383030 CEST	49764	80	192.168.2.4	152.7.106.52
May 2, 2024 16:32:51.815063000 CEST	49765	80	192.168.2.4	152.7.106.52
May 2, 2024 16:32:51.923362017 CEST	80	49764	152.7.106.52	192.168.2.4
May 2, 2024 16:32:51.923458099 CEST	49764	80	192.168.2.4	152.7.106.52
May 2, 2024 16:32:51.923856974 CEST	49764	80	192.168.2.4	152.7.106.52
May 2, 2024 16:32:51.925091028 CEST	80	49765	152.7.106.52	192.168.2.4
May 2, 2024 16:32:51.925182104 CEST	49765	80	192.168.2.4	152.7.106.52
May 2, 2024 16:32:52.033313990 CEST	80	49764	152.7.106.52	192.168.2.4
May 2, 2024 16:32:52.034703970 CEST	80	49764	152.7.106.52	192.168.2.4
May 2, 2024 16:32:52.075416088 CEST	49764	80	192.168.2.4	152.7.106.52
May 2, 2024 16:32:52.532968044 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:52.533000946 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:52.533065081 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:52.533646107 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:52.533662081 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:52.760802031 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:52.761115074 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:52.761135101 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:52.762135983 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:52.762193918 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:52.764687061 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:52.764743090 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:52.765161037 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:52.765167952 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:52.811245918 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:52.984728098 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:52.984755039 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:52.984764099 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:52.984966040 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:52.984983921 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.033644915 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.091413021 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.091423035 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.091459036 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.091475964 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.091516018 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.091521978 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.091523886 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.091562033 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.091586113 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.091634035 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.091643095 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.091676950 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.091685057 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.091720104 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.091725111 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.091739893 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.120615959 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.120672941 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.120680094 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.138720989 CEST	49767	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.138756037 CEST	443	49767	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.138987064 CEST	49767	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.139388084 CEST	49767	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.139404058 CEST	443	49767	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.139961958 CEST	49768	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.139983892 CEST	443	49768	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.140063047 CEST	49768	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.140264034 CEST	49768	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.140275002 CEST	443	49768	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.140774012 CEST	49769	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.140796900 CEST	443	49769	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.140999079 CEST	49769	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.141181946 CEST	49769	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.141197920 CEST	443	49769	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.141869068 CEST	49770	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.141892910 CEST	443	49770	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.142066002 CEST	49770	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.142247915 CEST	49770	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.142260075 CEST	443	49770	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.142951012 CEST	49771	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.142975092 CEST	443	49771	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.143028975 CEST	49771	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.143374920 CEST	49771	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.143385887 CEST	443	49771	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.171195984 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.198631048 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.198648930 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.198698044 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.198704004 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.198741913 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.198764086 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.198769093 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.198786020 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.198793888 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.198829889 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.198836088 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.199131966 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.199173927 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.199187040 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.199194908 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.199229956 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.199290037 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.199296951 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.199338913 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.199568033 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.199625015 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.199630976 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.228060007 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.228130102 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.228137016 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.275125027 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.305610895 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.305620909 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.305645943 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.305670977 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.305705070 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.305710077 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.305804014 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.305813074 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.305859089 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.305866003 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.305985928 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.305994034 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.306040049 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.306046009 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.306179047 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.306216002 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.306231022 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.306236982 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.306257963 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.306358099 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.306406975 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.306412935 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.306603909 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.306662083 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.306668043 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.306972980 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.307055950 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.307059050 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.307066917 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.307113886 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.307118893 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.307149887 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.307192087 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.307197094 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.307239056 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.307368994 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.307416916 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.307420969 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.307655096 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.307699919 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.307704926 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.335566044 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.335647106 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.335659027 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.335848093 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.335907936 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.335912943 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.336061954 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.336121082 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.336127996 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.360346079 CEST	443	49769	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.363070011 CEST	443	49767	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.365485907 CEST	443	49771	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.366806030 CEST	443	49768	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.373836040 CEST	443	49770	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.384491920 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.413830996 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.413842916 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.413933039 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.413942099 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.414278984 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.414341927 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.414347887 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.414988995 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.415051937 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.415059090 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.415523052 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.415580988 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.415586948 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.415759087 CEST	49771	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.415765047 CEST	49769	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.415774107 CEST	49768	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.415775061 CEST	49767	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.416026115 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.416079998 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.416085958 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.416214943 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.416269064 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.416275978 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.416449070 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.416502953 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.416510105 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.417092085 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.417150021 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.417156935 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.417603016 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.417655945 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.417663097 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.417938948 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.417994976 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.418000937 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.418483019 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.418539047 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.418545961 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.419008970 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.419060946 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.419066906 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.419428110 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.419476032 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.419481039 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.419605970 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.419656992 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.419661999 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.419677019 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.419719934 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.419728994 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.420049906 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.420114040 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.420120001 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.420684099 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.420744896 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.420751095 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.421226978 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.421277046 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.421283007 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.423213959 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.423271894 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.423278093 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.423670053 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.423719883 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.423732042 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.424351931 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.424412012 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.424417973 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.428667068 CEST	49770	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.429441929 CEST	49770	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.429446936 CEST	443	49770	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.429862022 CEST	49768	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.429872990 CEST	443	49768	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.429979086 CEST	49771	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.429992914 CEST	443	49771	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.430150986 CEST	49767	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.430157900 CEST	443	49767	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.430341959 CEST	49769	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.430352926 CEST	443	49769	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.430406094 CEST	443	49768	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.430511951 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.430593967 CEST	443	49767	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.430932045 CEST	443	49771	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.430980921 CEST	49771	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.431251049 CEST	443	49770	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.431260109 CEST	443	49770	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.431293011 CEST	49770	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.431457043 CEST	443	49769	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.431468964 CEST	443	49769	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.431504011 CEST	49769	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.431566000 CEST	49768	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.431638002 CEST	443	49768	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.431879044 CEST	49767	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.431936979 CEST	443	49767	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.432260036 CEST	49771	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.432322979 CEST	443	49771	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.432509899 CEST	49770	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.432565928 CEST	443	49770	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.432748079 CEST	49769	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.432805061 CEST	443	49769	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.433384895 CEST	49768	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.434009075 CEST	49767	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.434078932 CEST	49771	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.434088945 CEST	443	49771	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.434171915 CEST	49770	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.434176922 CEST	443	49770	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.434266090 CEST	49769	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.434273005 CEST	443	49769	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.442850113 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.442912102 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.442918062 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.443053007 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.443260908 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.443312883 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.443317890 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.443731070 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.443790913 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.443798065 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.444147110 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.444205046 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.444210052 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.444639921 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.444700003 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.444706917 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.476120949 CEST	443	49767	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.480113029 CEST	443	49768	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.480355024 CEST	49771	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.480370045 CEST	49769	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.480370045 CEST	49770	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.490667105 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.490745068 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.490751982 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.491010904 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.491074085 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.491079092 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.521239042 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.521312952 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.521320105 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.521701097 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.521758080 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.521763086 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.522130966 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.522196054 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.522202015 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.522650957 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.522716999 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.522723913 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.523111105 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.523169041 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.523175001 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.523652077 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.523705006 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.523710966 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.523777962 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.523818970 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.576066017 CEST	443	49769	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.576144934 CEST	443	49769	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.576210976 CEST	49769	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.582282066 CEST	443	49771	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.583226919 CEST	443	49771	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.583290100 CEST	49771	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.585597038 CEST	443	49768	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.585618973 CEST	443	49768	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.585625887 CEST	443	49768	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.585700035 CEST	49768	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.585712910 CEST	443	49768	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.585865021 CEST	443	49767	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.585880995 CEST	443	49767	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.585932970 CEST	49767	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.585941076 CEST	443	49767	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.585985899 CEST	443	49767	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.589790106 CEST	49767	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.591523886 CEST	443	49770	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.591542959 CEST	443	49770	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.591548920 CEST	443	49770	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.591567993 CEST	443	49770	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.591603994 CEST	49770	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.591614008 CEST	443	49770	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.591629982 CEST	49770	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.627125978 CEST	49768	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.643117905 CEST	49770	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.694561958 CEST	443	49768	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.694572926 CEST	443	49768	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.694665909 CEST	49768	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.694725037 CEST	443	49768	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.694781065 CEST	49768	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.694787979 CEST	443	49768	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.694808960 CEST	443	49768	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.694823027 CEST	49768	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.694856882 CEST	49768	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.700376034 CEST	443	49770	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.700385094 CEST	443	49770	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.700413942 CEST	443	49770	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.700448036 CEST	49770	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.700469971 CEST	443	49770	152.7.106.52	192.168.2.4
May 2, 2024 16:32:53.700485945 CEST	49770	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:53.700505018 CEST	49770	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:54.035610914 CEST	80	49764	152.7.106.52	192.168.2.4
May 2, 2024 16:32:54.037810087 CEST	49764	80	192.168.2.4	152.7.106.52
May 2, 2024 16:32:55.388751030 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:56.834055901 CEST	49764	80	192.168.2.4	152.7.106.52
May 2, 2024 16:32:56.944009066 CEST	80	49764	152.7.106.52	192.168.2.4
May 2, 2024 16:32:56.944240093 CEST	49766	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:56.944264889 CEST	443	49766	152.7.106.52	192.168.2.4
May 2, 2024 16:32:56.944788933 CEST	49773	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:56.944808006 CEST	443	49773	152.7.106.52	192.168.2.4
May 2, 2024 16:32:56.944864035 CEST	49773	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:56.956532955 CEST	49773	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:56.956549883 CEST	443	49773	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.177062988 CEST	443	49773	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.245696068 CEST	49773	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.395162106 CEST	49773	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.395186901 CEST	443	49773	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.395687103 CEST	443	49773	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.396225929 CEST	49773	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.396287918 CEST	443	49773	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.396354914 CEST	49773	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.396585941 CEST	49767	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.396599054 CEST	443	49767	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.396883011 CEST	49775	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.396903992 CEST	443	49775	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.396975994 CEST	49775	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.397515059 CEST	49775	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.397540092 CEST	443	49775	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.398102999 CEST	49771	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.398130894 CEST	443	49771	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.398420095 CEST	49776	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.398437023 CEST	443	49776	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.398508072 CEST	49776	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.399024010 CEST	49776	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.399048090 CEST	443	49776	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.399316072 CEST	49769	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.399337053 CEST	443	49769	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.399581909 CEST	49777	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.399609089 CEST	443	49777	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.399672031 CEST	49777	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.400141954 CEST	49777	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.400156975 CEST	443	49777	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.406073093 CEST	49770	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.406094074 CEST	443	49770	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.406388044 CEST	49778	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.406403065 CEST	443	49778	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.406466007 CEST	49778	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.406867981 CEST	49778	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.406879902 CEST	443	49778	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.408812046 CEST	49768	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.408834934 CEST	443	49768	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.409298897 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.409326077 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.409378052 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.409953117 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.409965992 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.440120935 CEST	443	49773	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.505227089 CEST	443	49773	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.505244970 CEST	443	49773	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.505287886 CEST	49773	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.505297899 CEST	443	49773	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.505315065 CEST	443	49773	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.505382061 CEST	49773	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.506855965 CEST	49773	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.506863117 CEST	443	49773	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.507347107 CEST	49780	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.507375956 CEST	443	49780	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.507436037 CEST	49780	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.508105040 CEST	49780	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.508116961 CEST	443	49780	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.618056059 CEST	443	49775	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.618264914 CEST	49775	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.618273973 CEST	443	49775	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.618609905 CEST	443	49775	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.618897915 CEST	49775	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.618963003 CEST	443	49775	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.619014025 CEST	49775	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.624005079 CEST	443	49776	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.624198914 CEST	49776	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.624208927 CEST	443	49776	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.624566078 CEST	443	49776	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.625299931 CEST	49776	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.625364065 CEST	443	49776	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.626162052 CEST	443	49777	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.627722025 CEST	49777	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.627732992 CEST	443	49777	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.628021002 CEST	49776	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.628756046 CEST	443	49777	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.628827095 CEST	49777	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.629205942 CEST	49777	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.629286051 CEST	443	49777	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.629399061 CEST	49777	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.629405975 CEST	443	49777	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.632872105 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.633052111 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.633060932 CEST	443	49778	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.633069038 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.633215904 CEST	49778	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.633227110 CEST	443	49778	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.634095907 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.634098053 CEST	443	49778	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.634161949 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.634161949 CEST	49778	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.634433985 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.634489059 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.634773016 CEST	49778	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.634824038 CEST	443	49778	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.635025024 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.635030985 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.635092020 CEST	49778	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.635097027 CEST	443	49778	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.664123058 CEST	443	49775	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.668118954 CEST	443	49776	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.734186888 CEST	443	49780	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.734946966 CEST	49780	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.734968901 CEST	443	49780	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.736016035 CEST	443	49780	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.736073971 CEST	49780	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.736417055 CEST	49780	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.736474991 CEST	443	49780	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.736562014 CEST	49780	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.736568928 CEST	443	49780	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.769814968 CEST	49777	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.769989967 CEST	49778	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.781364918 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.834631920 CEST	443	49775	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.834651947 CEST	443	49775	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.834732056 CEST	49775	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.834749937 CEST	443	49775	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.842714071 CEST	443	49776	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.842736006 CEST	443	49776	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.842787981 CEST	49776	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.842803001 CEST	443	49776	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.842823029 CEST	443	49776	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.842854977 CEST	49776	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.842880011 CEST	49776	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.845613956 CEST	49776	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.845630884 CEST	443	49776	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.846159935 CEST	49781	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.846194983 CEST	443	49781	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.846245050 CEST	49781	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.846999884 CEST	49781	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.847013950 CEST	443	49781	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.848944902 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.848964930 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.848970890 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.848982096 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.849003077 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.849020004 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.849040031 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.852241039 CEST	443	49778	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.852263927 CEST	443	49778	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.852271080 CEST	443	49778	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.852310896 CEST	443	49778	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.852319002 CEST	443	49778	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.852319002 CEST	49778	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.852339029 CEST	49778	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.852344036 CEST	443	49778	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.852355003 CEST	443	49778	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.852369070 CEST	49778	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.852406025 CEST	49778	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.853388071 CEST	49778	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.853394032 CEST	443	49778	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.853676081 CEST	49782	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.853699923 CEST	443	49782	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.853764057 CEST	49782	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.854299068 CEST	49782	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.854315996 CEST	443	49782	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.854929924 CEST	443	49777	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.854950905 CEST	443	49777	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.854957104 CEST	443	49777	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.854979992 CEST	443	49777	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.854988098 CEST	49777	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.854999065 CEST	443	49777	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.855021954 CEST	49777	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.936403990 CEST	49780	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.936506987 CEST	49777	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.941375017 CEST	443	49775	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.941414118 CEST	443	49775	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.941462994 CEST	49775	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.941490889 CEST	443	49775	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.941526890 CEST	443	49775	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.941555977 CEST	49775	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.941555977 CEST	49775	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.941586971 CEST	49775	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.941940069 CEST	49775	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.941957951 CEST	443	49775	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.942347050 CEST	49783	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.942377090 CEST	443	49783	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.942437887 CEST	49783	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.942975998 CEST	49783	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.942986965 CEST	443	49783	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.953644991 CEST	443	49780	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.953666925 CEST	443	49780	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.953674078 CEST	443	49780	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.953692913 CEST	443	49780	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.953710079 CEST	49780	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.953722000 CEST	443	49780	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.953747034 CEST	49780	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.955641031 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.955648899 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.955673933 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.955715895 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.955740929 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.955754042 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.955916882 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.955924988 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.955946922 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.955964088 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.955971956 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.955991983 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.956310987 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.956319094 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.956351995 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.956356049 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.956366062 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.956387997 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.962795019 CEST	443	49777	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.962805033 CEST	443	49777	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.962830067 CEST	443	49777	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.962846041 CEST	49777	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.962882996 CEST	49777	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.963280916 CEST	443	49777	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.963288069 CEST	443	49777	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.963306904 CEST	443	49777	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.963330984 CEST	49777	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.963357925 CEST	49777	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.963362932 CEST	443	49777	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.963371038 CEST	443	49777	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.963402987 CEST	49777	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.963697910 CEST	49777	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.963706970 CEST	443	49777	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.964123964 CEST	49784	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.964135885 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.964196920 CEST	49784	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.964798927 CEST	49784	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.964814901 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.999314070 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.999321938 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.999346972 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:57.999466896 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.999466896 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:57.999495983 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.044132948 CEST	49780	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.062145948 CEST	443	49780	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.062158108 CEST	443	49780	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.062187910 CEST	443	49780	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.062213898 CEST	49780	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.062259912 CEST	49780	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.062263012 CEST	443	49780	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.062272072 CEST	443	49780	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.062305927 CEST	49780	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.062355042 CEST	443	49780	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.062459946 CEST	49780	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.062895060 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.062907934 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.062927008 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.063049078 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.063049078 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.063087940 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.063107014 CEST	49780	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.063118935 CEST	443	49780	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.063218117 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.063227892 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.063249111 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.063282013 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.063297033 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.063313961 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.063401937 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.063410044 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.063424110 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.063452005 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.063462019 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.063477993 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.063503981 CEST	49785	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.063522100 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.063529015 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.063534021 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.063551903 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.063563108 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.063568115 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.063577890 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.063613892 CEST	49785	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.063613892 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.063632011 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.063648939 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.063669920 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.064865112 CEST	49785	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.064877033 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.065325975 CEST	49779	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.065334082 CEST	443	49779	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.065589905 CEST	49786	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.065630913 CEST	443	49786	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.065689087 CEST	49786	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.066189051 CEST	49786	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.066227913 CEST	443	49786	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.070425034 CEST	443	49781	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.070636034 CEST	49781	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.070657969 CEST	443	49781	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.071031094 CEST	443	49781	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.071429014 CEST	49781	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.071491957 CEST	443	49781	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.071600914 CEST	49781	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.085916042 CEST	443	49782	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.086188078 CEST	49782	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.086200953 CEST	443	49782	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.086855888 CEST	443	49782	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.087620020 CEST	49782	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.087683916 CEST	443	49782	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.087759972 CEST	49782	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.116118908 CEST	443	49781	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.132118940 CEST	443	49782	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.167207956 CEST	443	49783	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.167496920 CEST	49783	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.167516947 CEST	443	49783	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.168565989 CEST	443	49783	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.168827057 CEST	49783	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.169051886 CEST	49783	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.169110060 CEST	443	49783	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.169255018 CEST	49783	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.187988043 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.188349962 CEST	49784	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.188361883 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.189378977 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.189501047 CEST	49784	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.189730883 CEST	49784	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.189791918 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.189888954 CEST	49784	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.212121964 CEST	443	49783	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.232124090 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.234312057 CEST	49783	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.234322071 CEST	443	49783	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.281518936 CEST	49784	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.281526089 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.289366961 CEST	443	49781	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.289391041 CEST	443	49781	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.289520979 CEST	49781	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.289540052 CEST	443	49781	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.289552927 CEST	443	49781	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.289850950 CEST	443	49786	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.289880991 CEST	49781	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.290035963 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.290389061 CEST	49786	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.290402889 CEST	443	49786	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.290720940 CEST	49785	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.290719986 CEST	49781	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.290739059 CEST	443	49781	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.290745974 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.291064978 CEST	49787	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.291085958 CEST	443	49787	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.291205883 CEST	49787	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.291259050 CEST	443	49786	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.291390896 CEST	49786	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.291762114 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.291884899 CEST	49787	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.291886091 CEST	49785	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.291897058 CEST	443	49787	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.292768955 CEST	49785	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.292772055 CEST	49786	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.292844057 CEST	443	49786	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.292856932 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.293075085 CEST	49786	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.293154001 CEST	49785	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.293160915 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.303972960 CEST	443	49782	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.303994894 CEST	443	49782	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.304058075 CEST	443	49782	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.304080009 CEST	49782	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.304156065 CEST	49782	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.304949045 CEST	49782	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.304975986 CEST	443	49782	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.305227041 CEST	49788	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.305250883 CEST	443	49788	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.305445910 CEST	49788	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.306544065 CEST	49788	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.306555986 CEST	443	49788	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.336117029 CEST	443	49786	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.343974113 CEST	49783	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.343975067 CEST	49785	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.343977928 CEST	49786	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.343997955 CEST	443	49786	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.387305975 CEST	443	49783	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.387382984 CEST	443	49783	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.388911963 CEST	49783	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.389368057 CEST	49783	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.389368057 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.389394045 CEST	443	49783	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.389410973 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.390140057 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.390372992 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.390383959 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.407668114 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.407680035 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.407704115 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.407732964 CEST	49784	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.407753944 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.407782078 CEST	49784	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.469115019 CEST	49784	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.509005070 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.509037018 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.509043932 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.509094000 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.509135008 CEST	49785	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.509162903 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.509274006 CEST	49785	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.509803057 CEST	443	49786	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.509813070 CEST	443	49786	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.509838104 CEST	443	49786	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.509871006 CEST	49786	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.509891033 CEST	443	49786	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.509934902 CEST	49786	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.511718035 CEST	443	49787	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.512402058 CEST	49787	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.512411118 CEST	443	49787	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.512707949 CEST	443	49787	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.513256073 CEST	49787	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.513256073 CEST	49787	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.513308048 CEST	443	49787	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.515297890 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.515307903 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.515352011 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.515424967 CEST	49784	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.515424967 CEST	49784	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.515604019 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.515611887 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.515645981 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.515675068 CEST	49784	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.515693903 CEST	49784	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.516458035 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.516467094 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.516506910 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.516536951 CEST	49784	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.516575098 CEST	49784	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.526531935 CEST	443	49788	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.526736975 CEST	49788	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.526748896 CEST	443	49788	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.527071953 CEST	443	49788	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.527456045 CEST	49788	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.527456045 CEST	49788	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.527470112 CEST	443	49788	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.527509928 CEST	443	49788	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.548974991 CEST	443	49786	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.549025059 CEST	443	49786	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.549062967 CEST	49786	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.549248934 CEST	49786	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.551331043 CEST	49786	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.551354885 CEST	443	49786	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.553172112 CEST	49790	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.553204060 CEST	443	49790	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.553468943 CEST	49790	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.553694010 CEST	49790	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.553706884 CEST	443	49790	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.561373949 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.561383009 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.561443090 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.561469078 CEST	49784	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.561666012 CEST	49784	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.561672926 CEST	443	49784	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.561701059 CEST	49784	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.570544004 CEST	49791	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.570574045 CEST	443	49791	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.570720911 CEST	49791	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.571835041 CEST	49791	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.571847916 CEST	443	49791	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.582041979 CEST	49787	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.610359907 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.611959934 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.611978054 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.612323999 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.616250038 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.616317034 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.617379904 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.617393017 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.617523909 CEST	49785	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.617964029 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.618067026 CEST	49785	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.618572950 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.618762016 CEST	49785	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.619790077 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.640347958 CEST	49788	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.664122105 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.701941013 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.702100992 CEST	49785	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.727336884 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.727638960 CEST	49785	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.728012085 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.728224039 CEST	49785	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.728487015 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.728599072 CEST	49785	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.729026079 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.729156017 CEST	49785	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.729530096 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.729633093 CEST	49785	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.729743004 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.729826927 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.729861021 CEST	49785	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.730318069 CEST	443	49787	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.730346918 CEST	443	49787	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.730355978 CEST	443	49787	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.730372906 CEST	49785	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.730380058 CEST	443	49787	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.730437040 CEST	49787	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.730451107 CEST	443	49787	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.730489016 CEST	49787	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.730783939 CEST	49785	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.730783939 CEST	49785	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.730802059 CEST	443	49785	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.732052088 CEST	49785	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.736207008 CEST	49792	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.736236095 CEST	443	49792	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.736331940 CEST	49792	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.736557961 CEST	49792	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.736572027 CEST	443	49792	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.746735096 CEST	443	49788	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.746753931 CEST	443	49788	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.746762037 CEST	443	49788	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.746814013 CEST	443	49788	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.746846914 CEST	49788	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.747781992 CEST	49788	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.747996092 CEST	49788	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.748022079 CEST	443	49788	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.773170948 CEST	443	49787	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.773245096 CEST	443	49787	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.773655891 CEST	49787	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.773655891 CEST	49787	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.777556896 CEST	443	49790	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.778057098 CEST	49790	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.778080940 CEST	443	49790	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.778357029 CEST	443	49790	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.779422998 CEST	49790	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.779489994 CEST	443	49790	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.780133009 CEST	49790	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.790610075 CEST	49793	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.790613890 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.790644884 CEST	443	49793	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.790669918 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.792043924 CEST	49793	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.792052984 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.793288946 CEST	49795	443	192.168.2.4	108.138.106.52
May 2, 2024 16:32:58.793291092 CEST	49793	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.793304920 CEST	443	49793	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.793309927 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:58.793373108 CEST	49795	443	192.168.2.4	108.138.106.52
May 2, 2024 16:32:58.793713093 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.793741941 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.795803070 CEST	49795	443	192.168.2.4	108.138.106.52
May 2, 2024 16:32:58.795809031 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:58.795844078 CEST	443	49791	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.799007893 CEST	49791	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.799029112 CEST	443	49791	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.799380064 CEST	443	49791	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.799900055 CEST	49791	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.799957991 CEST	443	49791	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.800687075 CEST	49791	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.824117899 CEST	443	49790	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.827153921 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.827172995 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.827398062 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.827409983 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.848119974 CEST	443	49791	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.905726910 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:58.905745983 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:58.907299042 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:58.907623053 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:58.907633066 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:58.934881926 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.935066938 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.935101032 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.935111046 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.935153961 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.935195923 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.935375929 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.935384035 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.935512066 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.961210012 CEST	443	49792	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.961534977 CEST	49792	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.961544991 CEST	443	49792	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.961884022 CEST	443	49792	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.964279890 CEST	49792	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.964344025 CEST	443	49792	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.967796087 CEST	49792	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.980804920 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.980813980 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.980969906 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.994225025 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:58.994445086 CEST	49795	443	192.168.2.4	108.138.106.52
May 2, 2024 16:32:58.994457960 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:58.996089935 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:58.996272087 CEST	49795	443	192.168.2.4	108.138.106.52
May 2, 2024 16:32:58.997206926 CEST	49795	443	192.168.2.4	108.138.106.52
May 2, 2024 16:32:58.997206926 CEST	49795	443	192.168.2.4	108.138.106.52
May 2, 2024 16:32:58.997219086 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:58.997298002 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:58.997495890 CEST	443	49790	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.997518063 CEST	443	49790	152.7.106.52	192.168.2.4
May 2, 2024 16:32:58.997632027 CEST	49790	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:58.997641087 CEST	443	49790	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.012108088 CEST	443	49792	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.016310930 CEST	443	49791	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.016323090 CEST	443	49791	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.016635895 CEST	49791	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.016649961 CEST	443	49791	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.017724991 CEST	443	49793	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.020838976 CEST	49793	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.020855904 CEST	443	49793	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.021177053 CEST	443	49793	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.022881985 CEST	49793	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.022881985 CEST	49793	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.022898912 CEST	443	49793	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.022941113 CEST	443	49793	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.023900986 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.024435997 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.024472952 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.025464058 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.025620937 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.025927067 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.025995016 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.026024103 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.042709112 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.042716980 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.043050051 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.043059111 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.043082952 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.043093920 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.043133974 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.043519020 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.043551922 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.043556929 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.043584108 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.043802023 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.044095993 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.044547081 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.044576883 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.044583082 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.044612885 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.044910908 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.044940948 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.044945955 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.044984102 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.047139883 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.068137884 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.069319963 CEST	49790	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.069319963 CEST	49795	443	192.168.2.4	108.138.106.52
May 2, 2024 16:32:59.069333076 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:59.089440107 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.089521885 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.092335939 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.092782974 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.092788935 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.093744993 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.093851089 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.094784975 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.094841957 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.094980001 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.094986916 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.106667042 CEST	443	49790	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.106674910 CEST	443	49790	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.106713057 CEST	443	49790	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.106719017 CEST	443	49790	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.106738091 CEST	49790	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.106748104 CEST	443	49790	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.106837034 CEST	49790	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.107494116 CEST	443	49790	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.107573986 CEST	49790	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.125027895 CEST	443	49791	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.125140905 CEST	49791	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.125150919 CEST	443	49791	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.125709057 CEST	443	49791	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.125715971 CEST	443	49791	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.125737906 CEST	443	49791	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.125766039 CEST	49791	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.125775099 CEST	443	49791	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.125799894 CEST	49791	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.126291990 CEST	443	49791	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.126300097 CEST	443	49791	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.126327038 CEST	443	49791	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.126370907 CEST	49791	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.126379013 CEST	443	49791	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.126533031 CEST	49791	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.150163889 CEST	443	49790	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.150223970 CEST	49790	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.150291920 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.150356054 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.150939941 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.150995016 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.151509047 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.151576042 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.152045012 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.152093887 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.152916908 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.152975082 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.154850960 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.154897928 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.154993057 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.155041933 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.155050039 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.155108929 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.155113935 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.155159950 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.155574083 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.155643940 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.156116962 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.156179905 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.165733099 CEST	443	49791	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.165740967 CEST	443	49791	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.165790081 CEST	49791	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.165796041 CEST	443	49791	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.165888071 CEST	49791	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.166033030 CEST	49791	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.166043997 CEST	443	49791	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.166079998 CEST	49791	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.166094065 CEST	49791	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.166438103 CEST	49805	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.166450977 CEST	443	49805	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.166505098 CEST	49805	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.167102098 CEST	49805	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.167113066 CEST	443	49805	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.169766903 CEST	49795	443	192.168.2.4	108.138.106.52
May 2, 2024 16:32:59.169816017 CEST	49787	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.169828892 CEST	443	49787	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.184163094 CEST	443	49792	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.184182882 CEST	443	49792	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.184242964 CEST	49792	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.184253931 CEST	443	49792	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.195703983 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.195771933 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.196134090 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.196183920 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.196830988 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.196893930 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.214417934 CEST	49793	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.214432955 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.214447975 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.214493990 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.215790033 CEST	443	49790	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.215851068 CEST	49790	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.216217041 CEST	443	49790	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.216274023 CEST	49790	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.216598034 CEST	443	49790	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.216660023 CEST	49790	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.216665983 CEST	443	49790	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.216681957 CEST	443	49790	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.216725111 CEST	49790	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.217174053 CEST	49790	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.217181921 CEST	443	49790	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.217767000 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.217789888 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.218053102 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.218774080 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.218801022 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.234059095 CEST	49792	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.240127087 CEST	443	49793	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.240154028 CEST	443	49793	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.240160942 CEST	443	49793	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.240184069 CEST	443	49793	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.240211010 CEST	49793	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.240214109 CEST	443	49793	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.240226984 CEST	443	49793	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.240252972 CEST	49793	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.240284920 CEST	443	49793	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.240328074 CEST	49793	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.243557930 CEST	49793	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.243571043 CEST	443	49793	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.244093895 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.244113922 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.244194984 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.244697094 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.244705915 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.244725943 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.244749069 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.244782925 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.244812012 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.245536089 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.245553017 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.257361889 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.257426023 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.257853031 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.257915020 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.258521080 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.258579016 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.259078026 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.259135008 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.259638071 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.259696007 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.260179043 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.260230064 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.260618925 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.260689974 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.261181116 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.261236906 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.261673927 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.261732101 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.262145042 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.262208939 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.262609005 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.262664080 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.263412952 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.263480902 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.263830900 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.263892889 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.264331102 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.264393091 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.264790058 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.264849901 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.265270948 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.265324116 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.265609026 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.265671015 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.265980005 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.266036034 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.266489983 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.266541958 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.266860008 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.266910076 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.267167091 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.267225027 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.267532110 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.267592907 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.268361092 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.268434048 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.286488056 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:59.286550999 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:59.286571980 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:59.286604881 CEST	49795	443	192.168.2.4	108.138.106.52
May 2, 2024 16:32:59.286613941 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:59.286638021 CEST	49795	443	192.168.2.4	108.138.106.52
May 2, 2024 16:32:59.286654949 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:59.286672115 CEST	49795	443	192.168.2.4	108.138.106.52
May 2, 2024 16:32:59.286712885 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:59.286731005 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:59.286762953 CEST	49795	443	192.168.2.4	108.138.106.52
May 2, 2024 16:32:59.286771059 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:59.286783934 CEST	49795	443	192.168.2.4	108.138.106.52
May 2, 2024 16:32:59.286807060 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:59.286848068 CEST	49795	443	192.168.2.4	108.138.106.52
May 2, 2024 16:32:59.293195009 CEST	443	49792	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.293204069 CEST	443	49792	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.293256044 CEST	49792	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.293685913 CEST	443	49792	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.293694973 CEST	443	49792	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.293761015 CEST	49792	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.293768883 CEST	443	49792	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.293795109 CEST	443	49792	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.293832064 CEST	49792	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.295064926 CEST	49792	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.295073032 CEST	443	49792	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.295497894 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.295510054 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.295600891 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.296334982 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.296344995 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.301289082 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:59.301310062 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:59.301346064 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:59.301373959 CEST	49795	443	192.168.2.4	108.138.106.52
May 2, 2024 16:32:59.301403046 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:59.301422119 CEST	49795	443	192.168.2.4	108.138.106.52
May 2, 2024 16:32:59.301429033 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:59.301451921 CEST	49795	443	192.168.2.4	108.138.106.52
May 2, 2024 16:32:59.301466942 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:59.301476955 CEST	49795	443	192.168.2.4	108.138.106.52
May 2, 2024 16:32:59.301502943 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:59.301511049 CEST	49795	443	192.168.2.4	108.138.106.52
May 2, 2024 16:32:59.303119898 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.303184032 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.303473949 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.303528070 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.304106951 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.304178953 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.304639101 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.304703951 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.305227995 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.305298090 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.310880899 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:59.310929060 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:59.310939074 CEST	49795	443	192.168.2.4	108.138.106.52
May 2, 2024 16:32:59.310964108 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:59.311045885 CEST	49795	443	192.168.2.4	108.138.106.52
May 2, 2024 16:32:59.311053038 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:59.311119080 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:59.311261892 CEST	49795	443	192.168.2.4	108.138.106.52
May 2, 2024 16:32:59.324872017 CEST	49795	443	192.168.2.4	108.138.106.52
May 2, 2024 16:32:59.324889898 CEST	443	49795	108.138.106.52	192.168.2.4
May 2, 2024 16:32:59.330071926 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.330216885 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.330260038 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.330267906 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.331026077 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.331151962 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.331156969 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.331233978 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.331274033 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.331279039 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.331432104 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.331481934 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.331486940 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.331590891 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.331636906 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.331641912 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.331830978 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.331866980 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.331876993 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.331882000 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.331931114 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.331935883 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.332150936 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.332199097 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.332204103 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.332338095 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.332384109 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.332389116 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.332472086 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.332511902 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.332515955 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.332578897 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.332614899 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.332619905 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.332688093 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.332731962 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.332736015 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.332801104 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.332838058 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.332844019 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.333333015 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.333374023 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.333379984 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.333498001 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.333560944 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.333573103 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.333578110 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.333616972 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.333627939 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.333909988 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.333956957 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.333961964 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.334070921 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.334125042 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.334131002 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.334405899 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.334448099 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.334454060 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.334800005 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.334841967 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.334846973 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.334932089 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.335119009 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.335164070 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.335170031 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.355860949 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.355869055 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.355892897 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.355921030 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.355957985 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.356369019 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.356376886 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.356400967 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.356420994 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.356451035 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.356784105 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.356791973 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.356817961 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.356839895 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.356863976 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.366244078 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.366312027 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.367587090 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.367643118 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.367650986 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.367701054 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.369946957 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.369992018 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.369997025 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.370001078 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.370042086 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.370404005 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.370460987 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.371032000 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.371102095 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.371906042 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.371963978 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.372554064 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.372633934 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.373111963 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.373168945 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.373511076 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.373567104 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.373886108 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.373943090 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.375271082 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.375330925 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.375806093 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.375863075 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.376641989 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.376717091 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.377177000 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.377242088 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.377863884 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.377926111 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.378492117 CEST	49809	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.378519058 CEST	443	49809	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.378519058 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.378597975 CEST	49809	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.378648996 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.379017115 CEST	49809	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.379029989 CEST	443	49809	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.380068064 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.380121946 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.380563974 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.380623102 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.381417036 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.381498098 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.381948948 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.382031918 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.382563114 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.382647038 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.382683992 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.382730007 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.382736921 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.382757902 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.382859945 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.383116961 CEST	49789	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.383127928 CEST	443	49789	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.383485079 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.383508921 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.383572102 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.387366056 CEST	443	49805	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.396794081 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.396802902 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.396826982 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.396858931 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.396903038 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.397866964 CEST	49805	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.397876024 CEST	443	49805	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.398034096 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.398042917 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.398233891 CEST	443	49805	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.398622036 CEST	49805	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.398766994 CEST	49805	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.399013042 CEST	443	49805	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.401807070 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.401825905 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.401876926 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.402049065 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.402059078 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.417752981 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.417805910 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.417813063 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.417864084 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.418514967 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.420226097 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.420268059 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.420273066 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.420305014 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.420495033 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.420501947 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.420552015 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.420809984 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.420816898 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.420855045 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.421432018 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.421474934 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.421802044 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.421843052 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.421977043 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.422020912 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.422310114 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.422358990 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.422538996 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.422588110 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.422992945 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.423038006 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.423233032 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.423280954 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.423561096 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.423608065 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.423949957 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.423994064 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.441338062 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.441737890 CEST	49805	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.442035913 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.442051888 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.442341089 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.442684889 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.442743063 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.442862034 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.470129013 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.470138073 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.470155001 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.470196962 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.470221043 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.470727921 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.470736027 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.470902920 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.471293926 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.471301079 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.471366882 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.472316980 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.472325087 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.472408056 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.472836018 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.472843885 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.472904921 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.473397017 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.473403931 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.473460913 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.473952055 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.474005938 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.474186897 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.474235058 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.476586103 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.476912022 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.476923943 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.477205038 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.477494955 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.477550983 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.477602959 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.488111973 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.507420063 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.507479906 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.507571936 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.507613897 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.507955074 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.508014917 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.508038044 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.508064032 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.508093119 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.508142948 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.508615017 CEST	49794	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.508637905 CEST	443	49794	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.508682966 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.508738995 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.508975029 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.508999109 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.509006977 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.509063959 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.509145975 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.509355068 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.509408951 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.509560108 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.509615898 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.509624004 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.509638071 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.509661913 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.509680033 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.512167931 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.512178898 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.516495943 CEST	49798	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.516505957 CEST	443	49798	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.516967058 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.518307924 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.518317938 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.519314051 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.519388914 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.519670963 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.519726992 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.519855976 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.519860983 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.524111032 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.543243885 CEST	49813	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.543257952 CEST	443	49813	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.543329000 CEST	49813	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.543581963 CEST	49813	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.543593884 CEST	443	49813	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.601994038 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.606661081 CEST	443	49805	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.606681108 CEST	443	49805	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.606731892 CEST	49805	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.606745958 CEST	443	49805	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.606758118 CEST	443	49805	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.606792927 CEST	49805	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.607116938 CEST	443	49809	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.607569933 CEST	49809	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.607578039 CEST	443	49809	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.609088898 CEST	49805	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.609106064 CEST	443	49805	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.609239101 CEST	443	49809	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.609348059 CEST	49809	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.609493017 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.609508991 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.609576941 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.610405922 CEST	49809	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.610483885 CEST	443	49809	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.610948086 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.610963106 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.611310959 CEST	49809	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.611319065 CEST	443	49809	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.625086069 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.625188112 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.625490904 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.625499010 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.625633001 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.625646114 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.626579046 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.626640081 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.626672983 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.626722097 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.626995087 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.627078056 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.627362013 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.627420902 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.627770901 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.627775908 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.627825022 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.627830982 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.655123949 CEST	49809	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.660842896 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.660864115 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.660933018 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.660943031 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.670391083 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.699918032 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.699944973 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.700009108 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.700030088 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.702256918 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.732446909 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.732650995 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.732661963 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.732990980 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.733278036 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.733333111 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.733388901 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.733409882 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.733416080 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.733438969 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.733453035 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.733462095 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.733489990 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.733577013 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.740788937 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.740849018 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.757823944 CEST	443	49813	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.758043051 CEST	49813	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.758052111 CEST	443	49813	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.759675026 CEST	443	49813	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.759788990 CEST	49813	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.760154009 CEST	49813	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.760229111 CEST	443	49813	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.760329962 CEST	49813	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.760339975 CEST	443	49813	104.22.74.115	192.168.2.4
May 2, 2024 16:32:59.771411896 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.771419048 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.771483898 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.771486998 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.771497965 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.771538019 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.771550894 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.771550894 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.771565914 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.771591902 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.771611929 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.776125908 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.809587955 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.809596062 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.809633017 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.809669018 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.809685946 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.809698105 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.809739113 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.809864044 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.809926033 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.809972048 CEST	49813	443	192.168.2.4	104.22.74.115
May 2, 2024 16:32:59.814104080 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.814177990 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.824409962 CEST	443	49809	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.824459076 CEST	443	49809	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.824480057 CEST	443	49809	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.824513912 CEST	49809	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.824527025 CEST	443	49809	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.824563026 CEST	49809	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.833942890 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.834141970 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.834150076 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.834523916 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.834928989 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.835005045 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.835103035 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.839677095 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.839688063 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.839735985 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.839749098 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.840068102 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.840075016 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.840105057 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.840138912 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.840147018 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.840156078 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.840816975 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.840825081 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.840848923 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.840878963 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.840886116 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.840905905 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.841598034 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.841619968 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.841626883 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.841653109 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.841670990 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.841677904 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.841697931 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.844638109 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.844657898 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.844669104 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.844701052 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.844716072 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.852296114 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.852371931 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.870176077 CEST	49809	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.880115986 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.880810022 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.880877018 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.881486893 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.881558895 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.882929087 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.882997990 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.883358955 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.883435011 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.884541988 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.884613037 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.884938955 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.885001898 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.885087013 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.885094881 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.885118961 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.885138988 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.885150909 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.885159016 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.889458895 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.919169903 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.919234037 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.919250965 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.919307947 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.919470072 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.919516087 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.919567108 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.919615984 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.919755936 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.919840097 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.924287081 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.924340010 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.932466984 CEST	443	49809	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.932487965 CEST	443	49809	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.932504892 CEST	443	49809	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.932526112 CEST	49809	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.932569027 CEST	49809	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.932734013 CEST	443	49809	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.932765007 CEST	443	49809	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.932838917 CEST	49809	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.932838917 CEST	49809	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.933015108 CEST	443	49809	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.933032990 CEST	443	49809	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.933065891 CEST	49809	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.933088064 CEST	49809	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.949064970 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.949073076 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.949091911 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.949111938 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.949129105 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.949142933 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.949690104 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.949707031 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.949754953 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.949774981 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.949876070 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.949878931 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.949896097 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.949920893 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.949928045 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.949955940 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.950086117 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.950092077 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.950109005 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.950130939 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.950138092 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.950150013 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.950284958 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.950293064 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.950315952 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.950328112 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.950336933 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.950354099 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.950453997 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.950462103 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.950512886 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.950519085 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.950699091 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.950706005 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.950745106 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.950752974 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.950763941 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.950798988 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.950809956 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.950829029 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.950844049 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.950850010 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.950870037 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.950932026 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.950939894 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.950962067 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.950980902 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.950985909 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.951003075 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.951210022 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.951217890 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.951239109 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.951301098 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.951301098 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.951304913 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.955301046 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.955308914 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.955359936 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.955997944 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.956005096 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.956057072 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.956257105 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.956263065 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.956309080 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.962593079 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.962651014 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.962964058 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.963009119 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.973606110 CEST	443	49809	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.973669052 CEST	49809	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.973685980 CEST	443	49809	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.973768950 CEST	443	49809	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.973819971 CEST	49809	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.976856947 CEST	49809	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.976872921 CEST	443	49809	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.989869118 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.989880085 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.989906073 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.989955902 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.989962101 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.989983082 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.992427111 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.992487907 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.993030071 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.993088007 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.993706942 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.993781090 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.994776011 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.994851112 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.995573044 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.995641947 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.996160984 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.996220112 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.997323036 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.997349977 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.997370005 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.997380972 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.997395992 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.997852087 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.997952938 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.998009920 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.998692036 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.998759031 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.999262094 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.999360085 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:32:59.999856949 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:32:59.999932051 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.000391006 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.000480890 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.001276970 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.001286030 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.001359940 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.029345036 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.029407978 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.029889107 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.029947042 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.030184031 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.030237913 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.030582905 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.030647039 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.030898094 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.030945063 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.031352043 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.031404018 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.031692028 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.031743050 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.032068014 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.032126904 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.032438040 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.032490015 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.034818888 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.034876108 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.034990072 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.035012960 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.035063028 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.035075903 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.035096884 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.035109043 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.035120964 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.035303116 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.036334038 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.036401987 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.057388067 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.057401896 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.057424068 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.057456970 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.057470083 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.057497025 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.057691097 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.057710886 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.057763100 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.057770967 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.058248997 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.058258057 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.058386087 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.059041023 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.059047937 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.059070110 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.059087038 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.059096098 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.059104919 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.059228897 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.059236050 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.059279919 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.059597015 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.059648991 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.059880972 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.059890032 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.059916019 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.059938908 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.059948921 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.059984922 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.060169935 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.060178041 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.060225964 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.060412884 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.060420990 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.060462952 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.060688972 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.060697079 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.060749054 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.060925961 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.060931921 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.060966969 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.061355114 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.061362028 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.061408997 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.061712027 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.061718941 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.061764956 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.062057972 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.062113047 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.062376022 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.062455893 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.062851906 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.062864065 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.062968016 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.062968016 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.062994003 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.063004971 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.063030005 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.063060999 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.063069105 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.063086987 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.063105106 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.063110113 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.063128948 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.063245058 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.063254118 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.063271999 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.063287973 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.063293934 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.063309908 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.063595057 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.063622952 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.063669920 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.063673973 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.064081907 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.064090014 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.064131021 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.064136982 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.064481020 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.064507008 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.064537048 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.064541101 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.064558029 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.067122936 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.067130089 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.067179918 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.067450047 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.067503929 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.067878962 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.067938089 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.068250895 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.068305016 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.068572998 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.068628073 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.068995953 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.069056034 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.074146986 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.074206114 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.074532032 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.074594021 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.074851990 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.074903965 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.099912882 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.100054979 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.100078106 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.103445053 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.103524923 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.103827000 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.103888035 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.104626894 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.104695082 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.104773045 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.104827881 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.104835987 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.104845047 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.104885101 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.105333090 CEST	49806	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.105346918 CEST	443	49806	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.105608940 CEST	49818	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.105635881 CEST	443	49818	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.105710983 CEST	49818	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.106129885 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.106194973 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.106439114 CEST	49818	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.106450081 CEST	443	49818	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.106832981 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.106900930 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.107331038 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.107392073 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.111283064 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.111305952 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.111479998 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.111706018 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.111718893 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.111995935 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.112065077 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.137728930 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.137794971 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.137984037 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.138052940 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.138304949 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.138360023 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.138542891 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.138606071 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.138986111 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.139039040 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.139149904 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.139206886 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.139342070 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.139398098 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.139547110 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.139600039 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.140057087 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.140129089 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.140729904 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.140784979 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.140988111 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.141038895 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.141289949 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.141346931 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.141705036 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.141753912 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.141973972 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.142023087 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.142188072 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.142235994 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.142380953 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.142429113 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.142550945 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.142596006 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.142777920 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.142824888 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.142985106 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.143040895 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.143501043 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.143553972 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.143831968 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.143882036 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.143982887 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.144032955 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.164382935 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.164583921 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.164772034 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.164834976 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.165673971 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.165747881 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.166047096 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.166096926 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.166199923 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.166251898 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.166332960 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.166380882 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.166625977 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.166687012 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.166831017 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.166877985 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.167056084 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.167097092 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.167299986 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.167346954 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.167814970 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.167876005 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.168015003 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.168061018 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.168071985 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.168097973 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.168118954 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.168132067 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.168312073 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.168319941 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.168344021 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.168366909 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.168378115 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.168397903 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.168936014 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.168943882 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.169008970 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.169018030 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.169033051 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.169084072 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.169202089 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.169279099 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.169352055 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.169400930 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.169500113 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.169553041 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.169646978 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.169698000 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.169792891 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.169847965 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.169984102 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.170036077 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.170039892 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.170078993 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.170100927 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.170212984 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.170222998 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.170274019 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.170321941 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.170329094 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.170363903 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.170370102 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.170392036 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.170402050 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.170407057 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.170435905 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.170494080 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.170500994 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.170520067 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.170541048 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.170546055 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.170566082 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.170651913 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.170659065 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.170677900 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.170698881 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.170706034 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.170736074 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.170823097 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.170835972 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.170888901 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.170895100 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.171086073 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.171108961 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.171168089 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.171173096 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.171196938 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.171360970 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.171416998 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.171422005 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.171713114 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.171782017 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.171786070 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.171921968 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.172022104 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.172025919 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.172118902 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.172177076 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.172182083 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.172337055 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.172404051 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.172409058 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.175780058 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.175874949 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.175931931 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.175987959 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.176218033 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.176279068 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.176604986 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.176659107 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.177018881 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.177074909 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.177345037 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.177417994 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.177613974 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.177673101 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.177828074 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.177901030 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.178036928 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.178103924 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.178230047 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.178286076 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.178476095 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.178529024 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.178986073 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.182080984 CEST	49808	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.182094097 CEST	443	49808	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.182471991 CEST	49820	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.182493925 CEST	443	49820	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.182668924 CEST	49820	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.182737112 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.182786942 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.182879925 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.182926893 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.183231115 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.183284044 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.183377028 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.183425903 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.183545113 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.183598995 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.184334040 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.184391022 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.184432983 CEST	49820	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.184447050 CEST	443	49820	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.186310053 CEST	443	49813	104.22.74.115	192.168.2.4
May 2, 2024 16:33:00.186371088 CEST	443	49813	104.22.74.115	192.168.2.4
May 2, 2024 16:33:00.186424017 CEST	443	49813	104.22.74.115	192.168.2.4
May 2, 2024 16:33:00.186474085 CEST	49813	443	192.168.2.4	104.22.74.115
May 2, 2024 16:33:00.186496973 CEST	443	49813	104.22.74.115	192.168.2.4
May 2, 2024 16:33:00.186520100 CEST	443	49813	104.22.74.115	192.168.2.4
May 2, 2024 16:33:00.186563015 CEST	49813	443	192.168.2.4	104.22.74.115
May 2, 2024 16:33:00.206885099 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.206940889 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.206949949 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.206970930 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.206995964 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.207010031 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.207014084 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.207031965 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.207129002 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.207179070 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.207184076 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.211026907 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.211088896 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.212588072 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.212595940 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.212635040 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.212644100 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.220345974 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.220410109 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.220493078 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.220549107 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.220676899 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.220722914 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.232089043 CEST	49813	443	192.168.2.4	104.22.74.115
May 2, 2024 16:33:00.232105970 CEST	443	49813	104.22.74.115	192.168.2.4
May 2, 2024 16:33:00.239375114 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.239399910 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.239849091 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.240278959 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.240289927 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.246011972 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.246093988 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.246494055 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.246557951 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.246921062 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.246982098 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.247371912 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.247433901 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.247999907 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.248059034 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.248558044 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.248620987 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.248936892 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.248997927 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.249492884 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.249556065 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.249974966 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.250036955 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.251125097 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.251193047 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.252135038 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.252211094 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.268218040 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.268295050 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.271724939 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.271795034 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.272159100 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.272214890 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.272861004 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.272929907 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.273427963 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.273478031 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.274002075 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.274055958 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.274363995 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.274620056 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.274848938 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.274900913 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.275361061 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.275434971 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.275773048 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.275830030 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.276215076 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.276268959 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.276793003 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.276856899 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.277199030 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.277257919 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.277651072 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.277707100 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.278578043 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.278640032 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.279303074 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.279361963 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.280230999 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.280284882 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.280728102 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.280778885 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.281225920 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.281274080 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.281723022 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.281769991 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.282139063 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.282188892 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.282738924 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.282787085 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.283288956 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.283334970 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.283684015 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.283730984 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.284126043 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.284173012 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.284514904 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.284564018 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.284981012 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.285031080 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.285514116 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.285567045 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.286154985 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.286205053 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.286699057 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.286747932 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.287292957 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.287358046 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.287767887 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.287823915 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.289741993 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.289814949 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.290553093 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.290607929 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.290890932 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.290950060 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.291471958 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.291532993 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.291994095 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.292052984 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.292762041 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.292829990 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.294306040 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.294369936 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.294738054 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.294792891 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.295207977 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.295258045 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.295608997 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.295665979 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.296078920 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.296127081 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.296732903 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.296742916 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.296762943 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.296787024 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.296802044 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.296811104 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.297482014 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.297489882 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.297509909 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.297533035 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.297543049 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.297552109 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.298182964 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.298188925 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.298209906 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.298233032 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.298240900 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.298249960 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.299037933 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.299046040 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.299063921 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.299087048 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.299098015 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.299113989 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.299472094 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.299479961 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.299521923 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.299530029 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.299875975 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.299901009 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.299922943 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.299931049 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.299942970 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.300209045 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.300266027 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.300272942 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.301043034 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.301049948 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.301069021 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.301084042 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.301090002 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.301114082 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.301919937 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.301932096 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.301949024 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.301970005 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.301975965 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.301994085 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.302386045 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.302392960 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.302431107 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.302438021 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.302903891 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.302911043 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.302962065 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.302967072 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.303335905 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.303361893 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.303390980 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.303395987 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.303404093 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.303720951 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.303781033 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.303785086 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.304208994 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.304260969 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.304265976 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.304642916 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.304698944 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.304702997 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.305103064 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.305169106 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.305175066 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.305737972 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.305800915 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.305808067 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.306247950 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.306308031 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.306312084 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.307701111 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.307765961 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.307775021 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.308187962 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.308254957 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.308259010 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.308589935 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.308784008 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.308788061 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.309043884 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.309366941 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.309370995 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.309379101 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.309428930 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.309432983 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.310003042 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.310067892 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.310071945 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.310612917 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.310669899 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.310674906 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.310985088 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.311037064 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.311042070 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.311424971 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.311487913 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.311494112 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.311860085 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.311908960 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.311913967 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.312292099 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.312336922 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.312342882 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.313091040 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.313164949 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.313517094 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.313577890 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.314368010 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.314425945 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.314821005 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.314882994 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.315385103 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.315442085 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.315797091 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.315850973 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.316173077 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.316241980 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.316668034 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.316721916 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.317266941 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.317328930 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.317888975 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.317939997 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.318331957 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.318382025 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.318799973 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.318852901 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.319180965 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.319231987 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.319840908 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.319905043 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.320308924 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.320369959 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.320811033 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.320888042 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.321182966 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.321244001 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.321353912 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.321408987 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.321624041 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.321681976 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.321770906 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.321957111 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.322129011 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.322139025 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.322205067 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.322438955 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.322505951 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.322613955 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.322662115 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.322824001 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.322870016 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.322987080 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.323038101 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.323164940 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.323215008 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.323405027 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.323453903 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.323551893 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.323597908 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.323694944 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.323765039 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.323921919 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.323973894 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.324345112 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.324402094 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.324517965 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.324579000 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.324717999 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.324768066 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.324930906 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.325011969 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.325043917 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.325103045 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.325812101 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.325866938 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.325872898 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.325998068 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.326066971 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.326071978 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.326211929 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.326277971 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.326282978 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.326421976 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.326472044 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.326482058 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.326598883 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.326651096 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.326656103 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.326944113 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.327099085 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.327121973 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.327133894 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.327146053 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.327174902 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.327236891 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.327316999 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.327716112 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.327833891 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.327840090 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.329315901 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.329394102 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.329476118 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.329541922 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.329683065 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.329741001 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.329798937 CEST	443	49818	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.329842091 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.329909086 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.330054045 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.330104113 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.330296040 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.330351114 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.337842941 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.354675055 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.354788065 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.354958057 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.355036974 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.355179071 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.355261087 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.355348110 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.355405092 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.355629921 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.355678082 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.355950117 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.355998039 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.356010914 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.356024027 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.356044054 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.356055975 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.356059074 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.356110096 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.381233931 CEST	49818	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.396522045 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.396589041 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.396900892 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.396955967 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.397214890 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.397264004 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.397521973 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.397571087 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.398046017 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.398101091 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.398361921 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.398415089 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.398593903 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.398642063 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.398901939 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.398947001 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.399235964 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.399281025 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.399591923 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.399641037 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.399876118 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.399930954 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.400183916 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.400232077 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.400916100 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.400966883 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.401676893 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.401724100 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.401963949 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.402018070 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.402467966 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.402527094 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.402714014 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.402769089 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.402995110 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.403047085 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.403310061 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.403363943 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.405333042 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.405348063 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.405400038 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.405409098 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.405420065 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.405755043 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.405761957 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.405785084 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.405812979 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.405822039 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.405843973 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.406559944 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.406568050 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.406584978 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.406608105 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.406615019 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.406627893 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.406883955 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.406891108 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.406919956 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.406927109 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.406949043 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.407530069 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.407562971 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.407576084 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.407582998 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.407608032 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.409266949 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.409337997 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.409773111 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.409851074 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.410679102 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.410712957 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.410721064 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.410734892 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.410758018 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.411303997 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.411312103 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.411401033 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.412131071 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.412192106 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.413938999 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.413996935 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.414277077 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.414336920 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.414676905 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.414741993 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.414839029 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.414889097 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.415111065 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.415163994 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.415163994 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.415174007 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.415210009 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.416438103 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.416491985 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.416631937 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.416682005 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.416861057 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.416907072 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.417027950 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.417079926 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.417208910 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.417260885 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.417351961 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.417402029 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.417593956 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.417646885 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.417696953 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.417746067 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.417902946 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.417948961 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.418051004 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.418098927 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.418263912 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.418313980 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.418483973 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.418535948 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.418678999 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.418711901 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.418725014 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.418730021 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.418766022 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.418772936 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.418842077 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.421552896 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.421619892 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.421819925 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.421873093 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.421886921 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.421895981 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.421921015 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.421945095 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.422072887 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.422118902 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.422502041 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.422545910 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.422555923 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.422564983 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.422596931 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.434098959 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.434168100 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.434259892 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.434314966 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.434361935 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.434411049 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.436304092 CEST	443	49820	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.464728117 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.489453077 CEST	49820	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.503982067 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.504044056 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.505044937 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.505091906 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.505269051 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.505321026 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.505460024 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.505508900 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.505753994 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.505810022 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.506011009 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.506062031 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.506109953 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.506156921 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.506162882 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.506171942 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.506202936 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.544128895 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:00.544208050 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:00.544645071 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.569703102 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.570513964 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.570647001 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.571861982 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.573158026 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.573743105 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.573795080 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.574084044 CEST	49820	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.574101925 CEST	443	49820	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.574377060 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.574395895 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.574503899 CEST	49818	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.574531078 CEST	443	49818	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.574630022 CEST	443	49820	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.575182915 CEST	443	49818	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.575223923 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.575423002 CEST	49822	443	192.168.2.4	104.22.75.115
May 2, 2024 16:33:01.575442076 CEST	443	49822	104.22.75.115	192.168.2.4
May 2, 2024 16:33:01.575489998 CEST	49822	443	192.168.2.4	104.22.75.115
May 2, 2024 16:33:01.576404095 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.577203035 CEST	49820	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.577279091 CEST	443	49820	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.578023911 CEST	49823	443	192.168.2.4	104.22.75.115
May 2, 2024 16:33:01.578083992 CEST	443	49823	104.22.75.115	192.168.2.4
May 2, 2024 16:33:01.578145981 CEST	49823	443	192.168.2.4	104.22.75.115
May 2, 2024 16:33:01.578557968 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.578742981 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.580574989 CEST	49818	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.580660105 CEST	443	49818	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.580866098 CEST	49822	443	192.168.2.4	104.22.75.115
May 2, 2024 16:33:01.580883026 CEST	443	49822	104.22.75.115	192.168.2.4
May 2, 2024 16:33:01.581197977 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.581358910 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.581562996 CEST	49823	443	192.168.2.4	104.22.75.115
May 2, 2024 16:33:01.581597090 CEST	443	49823	104.22.75.115	192.168.2.4
May 2, 2024 16:33:01.581764936 CEST	49820	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.581896067 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.581932068 CEST	49818	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.582007885 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.628119946 CEST	443	49818	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.628119946 CEST	443	49820	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.628138065 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.628164053 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.691628933 CEST	443	49818	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.691656113 CEST	443	49818	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.691664934 CEST	443	49818	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.691729069 CEST	49818	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.691752911 CEST	443	49818	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.691975117 CEST	443	49820	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.691994905 CEST	443	49820	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.692003012 CEST	443	49820	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.692043066 CEST	49820	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.692058086 CEST	443	49820	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.692070007 CEST	49820	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.693675041 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.693738937 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.693800926 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.693814993 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.694226980 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.694267035 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.694287062 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.694331884 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.694358110 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.694370985 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.694396973 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.694417000 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.736114979 CEST	49818	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.736217022 CEST	49820	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.787883997 CEST	443	49822	104.22.75.115	192.168.2.4
May 2, 2024 16:33:01.791804075 CEST	49822	443	192.168.2.4	104.22.75.115
May 2, 2024 16:33:01.791816950 CEST	443	49822	104.22.75.115	192.168.2.4
May 2, 2024 16:33:01.791845083 CEST	443	49823	104.22.75.115	192.168.2.4
May 2, 2024 16:33:01.792025089 CEST	49823	443	192.168.2.4	104.22.75.115
May 2, 2024 16:33:01.792046070 CEST	443	49823	104.22.75.115	192.168.2.4
May 2, 2024 16:33:01.792572021 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.792663097 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.792678118 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.792697906 CEST	443	49822	104.22.75.115	192.168.2.4
May 2, 2024 16:33:01.792747974 CEST	49822	443	192.168.2.4	104.22.75.115
May 2, 2024 16:33:01.793040037 CEST	443	49823	104.22.75.115	192.168.2.4
May 2, 2024 16:33:01.793095112 CEST	49823	443	192.168.2.4	104.22.75.115
May 2, 2024 16:33:01.793338060 CEST	49822	443	192.168.2.4	104.22.75.115
May 2, 2024 16:33:01.793395996 CEST	443	49822	104.22.75.115	192.168.2.4
May 2, 2024 16:33:01.793948889 CEST	49823	443	192.168.2.4	104.22.75.115
May 2, 2024 16:33:01.794023991 CEST	443	49823	104.22.75.115	192.168.2.4
May 2, 2024 16:33:01.794120073 CEST	49822	443	192.168.2.4	104.22.75.115
May 2, 2024 16:33:01.794127941 CEST	443	49822	104.22.75.115	192.168.2.4
May 2, 2024 16:33:01.796752930 CEST	49814	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.796766996 CEST	443	49814	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.797084093 CEST	49824	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.797127008 CEST	443	49824	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.797178030 CEST	49824	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.797694921 CEST	49824	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.797708035 CEST	443	49824	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.798597097 CEST	443	49818	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.798608065 CEST	443	49818	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.798671961 CEST	49818	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.798964977 CEST	443	49818	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.798974037 CEST	443	49818	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.799021959 CEST	49818	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.799189091 CEST	443	49818	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.799197912 CEST	443	49818	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.799242020 CEST	49818	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.799599886 CEST	443	49818	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.799608946 CEST	443	49818	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.799654007 CEST	49818	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.799664974 CEST	443	49818	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.799685001 CEST	443	49818	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.799712896 CEST	49818	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.799726009 CEST	49818	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.799858093 CEST	443	49820	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.799870968 CEST	443	49820	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.799892902 CEST	443	49820	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.799906015 CEST	49820	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.799941063 CEST	49820	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.800178051 CEST	443	49820	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.800184011 CEST	443	49820	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.800230026 CEST	49820	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.800239086 CEST	443	49820	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.800249100 CEST	443	49820	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.800297022 CEST	49820	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.800616980 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.800638914 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.800656080 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.800682068 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.800698996 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.800717115 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.800735950 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.801279068 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.801297903 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.801316023 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.801337004 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.801368952 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.801386118 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.801568985 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.801587105 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.801603079 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.801624060 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.801640034 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.801723003 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.802288055 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.802304983 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.802323103 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.802333117 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.802367926 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.802473068 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.802489996 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.802519083 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.802536011 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.802613974 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.802630901 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.802661896 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.802683115 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.842901945 CEST	49822	443	192.168.2.4	104.22.75.115
May 2, 2024 16:33:01.907700062 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.907720089 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.907753944 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.907764912 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.907788038 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.907819986 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.907957077 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.907974958 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.907998085 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.908010960 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.908023119 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.908050060 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.908070087 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.908421040 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.908440113 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.908457041 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.908478975 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.908503056 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.908514023 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.909111977 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.909128904 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.909157038 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.909187078 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.909199953 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.909245014 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.909498930 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.909517050 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.909545898 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.909559965 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.909586906 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.909699917 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.909734964 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.909778118 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.909779072 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.909796000 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.909931898 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.909995079 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.910007000 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.910996914 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.911015034 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.911077976 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.911345005 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.911411047 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.911505938 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.911570072 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.911658049 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.911716938 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.911823034 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.911883116 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.911966085 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.912028074 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.912194014 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.912267923 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.928721905 CEST	49823	443	192.168.2.4	104.22.75.115
May 2, 2024 16:33:01.928739071 CEST	443	49823	104.22.75.115	192.168.2.4
May 2, 2024 16:33:01.996074915 CEST	49810	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.996084929 CEST	443	49810	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.996706963 CEST	49828	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:01.996730089 CEST	443	49828	152.7.106.52	192.168.2.4
May 2, 2024 16:33:01.996786118 CEST	49828	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.002681971 CEST	49828	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.002693892 CEST	443	49828	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.015582085 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.015650034 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.015666008 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.015955925 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.015974998 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.015993118 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.016016006 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.016041040 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.016041040 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.016072989 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.016953945 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.016971111 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.016988039 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.017010927 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.017030954 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.017045975 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.017180920 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.017198086 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.017222881 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.017232895 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.017256021 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.017277956 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.017288923 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.017457008 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.017474890 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.017504930 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.017515898 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.017543077 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.017817974 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.017858982 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.017888069 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.017915010 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.017941952 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.018158913 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.018229961 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.018241882 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.018362045 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.018407106 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.018424034 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.018455982 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.018652916 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.018704891 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.018716097 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.018923998 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.018985987 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.018997908 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.019079924 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.019135952 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.019145966 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.019222021 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.019278049 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.019287109 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.019344091 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.019401073 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.019411087 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.019973040 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.020032883 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.020374060 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.020430088 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.020962954 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.021034956 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.021102905 CEST	443	49824	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.021349907 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.021404982 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.021528006 CEST	49824	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.021553040 CEST	443	49824	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.021658897 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.021708012 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.021851063 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.021867990 CEST	443	49824	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.021910906 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.022193909 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.022242069 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.022305012 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.022325993 CEST	49824	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.022352934 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.022384882 CEST	443	49824	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.022506952 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.022566080 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.022655010 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.022707939 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.022739887 CEST	49824	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.022775888 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.022828102 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.022975922 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.023022890 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.032525063 CEST	49823	443	192.168.2.4	104.22.75.115
May 2, 2024 16:33:02.060937881 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.061017990 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.068111897 CEST	443	49824	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.122786045 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.122858047 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.122875929 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.123661995 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.123680115 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.123698950 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.123723984 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.123745918 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.123764038 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.123780966 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.124093056 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.124129057 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.124150038 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.124164104 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.124185085 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.124209881 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.124223948 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.124603987 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.124622107 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.124640942 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.124665022 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.124681950 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.124699116 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.124715090 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.124835968 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.124881983 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.124910116 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.124972105 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.125083923 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.125133991 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.129472017 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.129555941 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.130002975 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.130177975 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.130388975 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.130450964 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.131361961 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.131422997 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.131778002 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.131840944 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.132430077 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.132493973 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.133030891 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.133084059 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.133395910 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.133451939 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.134007931 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.134068012 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.134675026 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.134738922 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.135185003 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.135246038 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.135687113 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.135747910 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.136189938 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.136253119 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.136557102 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.136682987 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.136914968 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.136976957 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.137041092 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.137152910 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.137200117 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.226465940 CEST	443	49828	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.242985010 CEST	49828	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.243001938 CEST	443	49828	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.243355989 CEST	443	49828	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.244486094 CEST	443	49824	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.244505882 CEST	443	49824	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.244595051 CEST	49824	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.244625092 CEST	443	49824	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.244651079 CEST	443	49824	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.244697094 CEST	443	49824	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.244740963 CEST	49824	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.252068996 CEST	49828	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.252149105 CEST	443	49828	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.254808903 CEST	49828	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.259941101 CEST	443	49822	104.22.75.115	192.168.2.4
May 2, 2024 16:33:02.260009050 CEST	443	49822	104.22.75.115	192.168.2.4
May 2, 2024 16:33:02.260070086 CEST	49822	443	192.168.2.4	104.22.75.115
May 2, 2024 16:33:02.260082960 CEST	443	49822	104.22.75.115	192.168.2.4
May 2, 2024 16:33:02.260329962 CEST	443	49822	104.22.75.115	192.168.2.4
May 2, 2024 16:33:02.260409117 CEST	443	49822	104.22.75.115	192.168.2.4
May 2, 2024 16:33:02.260453939 CEST	49822	443	192.168.2.4	104.22.75.115
May 2, 2024 16:33:02.300159931 CEST	443	49828	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.352741957 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.352915049 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.412153959 CEST	49818	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.412168026 CEST	443	49818	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.412476063 CEST	49820	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.412484884 CEST	443	49820	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.413759947 CEST	49812	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.413778067 CEST	443	49812	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.445277929 CEST	443	49828	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.445348024 CEST	443	49828	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.445429087 CEST	49828	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.447376013 CEST	49811	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.447391987 CEST	443	49811	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.453218937 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.453249931 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.453408003 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.453819990 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.453831911 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.457297087 CEST	49831	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.457315922 CEST	443	49831	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.457381010 CEST	49831	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.457637072 CEST	49831	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.457648993 CEST	443	49831	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.462675095 CEST	49832	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.462694883 CEST	443	49832	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.462771893 CEST	49832	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.462999105 CEST	49832	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.463015079 CEST	443	49832	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.469322920 CEST	49807	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.469331980 CEST	443	49807	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.520772934 CEST	49824	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.520795107 CEST	443	49824	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.522595882 CEST	49822	443	192.168.2.4	104.22.75.115
May 2, 2024 16:33:02.522609949 CEST	443	49822	104.22.75.115	192.168.2.4
May 2, 2024 16:33:02.533327103 CEST	49833	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.533385038 CEST	443	49833	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.533509016 CEST	49833	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.533736944 CEST	49833	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.533771992 CEST	443	49833	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.534713030 CEST	49821	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.534733057 CEST	443	49821	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.538301945 CEST	49834	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.538330078 CEST	443	49834	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.538427114 CEST	49834	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.538609982 CEST	49834	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.538624048 CEST	443	49834	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.539516926 CEST	49819	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.539535999 CEST	443	49819	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.539891958 CEST	49828	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.539907932 CEST	443	49828	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.549072981 CEST	49835	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.549088955 CEST	443	49835	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.549151897 CEST	49835	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.549314976 CEST	49835	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.549326897 CEST	443	49835	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.555500031 CEST	49837	443	192.168.2.4	172.253.63.155
May 2, 2024 16:33:02.555521011 CEST	443	49837	172.253.63.155	192.168.2.4
May 2, 2024 16:33:02.555579901 CEST	49837	443	192.168.2.4	172.253.63.155
May 2, 2024 16:33:02.555845022 CEST	49837	443	192.168.2.4	172.253.63.155
May 2, 2024 16:33:02.555856943 CEST	443	49837	172.253.63.155	192.168.2.4
May 2, 2024 16:33:02.581538916 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.581562996 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.581620932 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.581813097 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.581829071 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.586411953 CEST	49839	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.586431980 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.586492062 CEST	49839	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.586675882 CEST	49839	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.586687088 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.588037014 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.588046074 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.588107109 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.588301897 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.588313103 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.589593887 CEST	49841	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.589605093 CEST	443	49841	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.589775085 CEST	49841	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.589946032 CEST	49841	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.589960098 CEST	443	49841	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.593157053 CEST	49842	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.593173027 CEST	443	49842	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.593221903 CEST	49842	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.593415976 CEST	49842	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.593426943 CEST	443	49842	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.594877958 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.594899893 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.595058918 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.595582008 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.595593929 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.623064995 CEST	49844	443	192.168.2.4	142.251.40.98
May 2, 2024 16:33:02.623078108 CEST	443	49844	142.251.40.98	192.168.2.4
May 2, 2024 16:33:02.623224020 CEST	49844	443	192.168.2.4	142.251.40.98
May 2, 2024 16:33:02.623687983 CEST	49844	443	192.168.2.4	142.251.40.98
May 2, 2024 16:33:02.623699903 CEST	443	49844	142.251.40.98	192.168.2.4
May 2, 2024 16:33:02.676518917 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.676754951 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.676764011 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.677079916 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.677752972 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.677839994 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.677870035 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.679248095 CEST	443	49831	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.679445028 CEST	49831	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.679455996 CEST	443	49831	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.679780960 CEST	443	49831	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.680080891 CEST	49831	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.680146933 CEST	443	49831	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.680217028 CEST	49831	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.685473919 CEST	443	49832	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.685767889 CEST	49832	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.685790062 CEST	443	49832	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.686832905 CEST	443	49832	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.686920881 CEST	49832	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.687521935 CEST	49832	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.687587023 CEST	443	49832	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.689600945 CEST	49832	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.689610004 CEST	443	49832	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.717955112 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.717978954 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.727871895 CEST	49831	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.727881908 CEST	443	49831	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.732625961 CEST	49832	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.752022982 CEST	443	49837	172.253.63.155	192.168.2.4
May 2, 2024 16:33:02.752278090 CEST	49837	443	192.168.2.4	172.253.63.155
May 2, 2024 16:33:02.752285004 CEST	443	49837	172.253.63.155	192.168.2.4
May 2, 2024 16:33:02.753407955 CEST	443	49837	172.253.63.155	192.168.2.4
May 2, 2024 16:33:02.753474951 CEST	49837	443	192.168.2.4	172.253.63.155
May 2, 2024 16:33:02.753690958 CEST	443	49833	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.754081011 CEST	49833	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.754096985 CEST	443	49833	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.754373074 CEST	49837	443	192.168.2.4	172.253.63.155
May 2, 2024 16:33:02.754451036 CEST	443	49837	172.253.63.155	192.168.2.4
May 2, 2024 16:33:02.754528999 CEST	49837	443	192.168.2.4	172.253.63.155
May 2, 2024 16:33:02.754534006 CEST	443	49837	172.253.63.155	192.168.2.4
May 2, 2024 16:33:02.754990101 CEST	443	49833	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.755054951 CEST	49833	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.755300999 CEST	49833	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.755358934 CEST	443	49833	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.755398035 CEST	49833	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.768066883 CEST	443	49834	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.768255949 CEST	49834	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.768270969 CEST	443	49834	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.769166946 CEST	443	49834	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.769232035 CEST	49834	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.769638062 CEST	49834	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.769692898 CEST	443	49834	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.769776106 CEST	49834	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.774008989 CEST	443	49835	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.774166107 CEST	49835	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.774183035 CEST	443	49835	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.775021076 CEST	443	49835	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.775084019 CEST	49835	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.775348902 CEST	49835	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.775394917 CEST	443	49835	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.775628090 CEST	49835	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.775633097 CEST	443	49835	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.795663118 CEST	49837	443	192.168.2.4	172.253.63.155
May 2, 2024 16:33:02.796133995 CEST	443	49833	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.804553032 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.804781914 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.804800034 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.805116892 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.805592060 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.805649042 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.805702925 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.810338020 CEST	443	49841	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.811345100 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.811387062 CEST	49841	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.811397076 CEST	443	49841	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.811503887 CEST	49839	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.811517000 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.811686039 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.811825037 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.811832905 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.811837912 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.812119961 CEST	443	49834	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.812125921 CEST	49839	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.812186003 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.812225103 CEST	49839	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.812437057 CEST	443	49841	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.812500954 CEST	49841	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.812779903 CEST	49841	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.812836885 CEST	443	49841	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.812840939 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.812861919 CEST	49841	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.812891960 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.813182116 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.813240051 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.813251019 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.816026926 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.816051006 CEST	443	49842	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.816056013 CEST	49835	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.816206932 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.816220999 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.816327095 CEST	49842	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.816339970 CEST	443	49842	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.817070007 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.817125082 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.817606926 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.817706108 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.817709923 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.817847967 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.817923069 CEST	443	49842	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.817972898 CEST	49842	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.818331957 CEST	49842	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.818387985 CEST	443	49842	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.818527937 CEST	49842	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.818533897 CEST	443	49842	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.831351042 CEST	49833	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.831425905 CEST	49834	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.831432104 CEST	443	49833	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.831439972 CEST	443	49834	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.846568108 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.846579075 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.856132984 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.860117912 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.860125065 CEST	443	49841	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.862158060 CEST	49841	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.862174034 CEST	443	49841	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.862202883 CEST	49842	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.895020008 CEST	443	49831	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.895050049 CEST	443	49831	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.895059109 CEST	443	49831	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.895112991 CEST	49831	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.895123005 CEST	443	49831	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.896142960 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.896167040 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.896173954 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.896217108 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.896231890 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.896393061 CEST	443	49844	142.251.40.98	192.168.2.4
May 2, 2024 16:33:02.896708012 CEST	49844	443	192.168.2.4	142.251.40.98
May 2, 2024 16:33:02.896724939 CEST	443	49844	142.251.40.98	192.168.2.4
May 2, 2024 16:33:02.898386002 CEST	443	49844	142.251.40.98	192.168.2.4
May 2, 2024 16:33:02.898452044 CEST	49844	443	192.168.2.4	142.251.40.98
May 2, 2024 16:33:02.899430990 CEST	49844	443	192.168.2.4	142.251.40.98
May 2, 2024 16:33:02.899514914 CEST	443	49844	142.251.40.98	192.168.2.4
May 2, 2024 16:33:02.899595022 CEST	49844	443	192.168.2.4	142.251.40.98
May 2, 2024 16:33:02.899602890 CEST	443	49844	142.251.40.98	192.168.2.4
May 2, 2024 16:33:02.904824972 CEST	443	49832	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.904848099 CEST	443	49832	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.904855013 CEST	443	49832	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.904895067 CEST	49832	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.904911041 CEST	443	49832	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.908129930 CEST	49841	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.936191082 CEST	49839	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.936204910 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.936211109 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.936211109 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.936218023 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.936225891 CEST	49831	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.936227083 CEST	49834	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.936240911 CEST	49833	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.947613001 CEST	443	49837	172.253.63.155	192.168.2.4
May 2, 2024 16:33:02.947706938 CEST	443	49837	172.253.63.155	192.168.2.4
May 2, 2024 16:33:02.947778940 CEST	49837	443	192.168.2.4	172.253.63.155
May 2, 2024 16:33:02.947865009 CEST	49837	443	192.168.2.4	172.253.63.155
May 2, 2024 16:33:02.947877884 CEST	443	49837	172.253.63.155	192.168.2.4
May 2, 2024 16:33:02.947885990 CEST	49837	443	192.168.2.4	172.253.63.155
May 2, 2024 16:33:02.947915077 CEST	49837	443	192.168.2.4	172.253.63.155
May 2, 2024 16:33:02.951103926 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.951658964 CEST	49832	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.951659918 CEST	49844	443	192.168.2.4	142.251.40.98
May 2, 2024 16:33:02.971383095 CEST	443	49833	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.971407890 CEST	443	49833	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.971415997 CEST	443	49833	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.971455097 CEST	443	49833	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.971460104 CEST	49833	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.971618891 CEST	49833	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.972150087 CEST	49833	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.972174883 CEST	443	49833	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.973546028 CEST	49848	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.973562956 CEST	443	49848	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.973669052 CEST	49848	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.973956108 CEST	49848	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.973968029 CEST	443	49848	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.987097979 CEST	443	49834	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.987257004 CEST	443	49834	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.987313986 CEST	49834	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.988007069 CEST	49834	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.988019943 CEST	443	49834	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.990041018 CEST	49849	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.990060091 CEST	443	49849	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.990128994 CEST	49849	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.990317106 CEST	49849	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.990328074 CEST	443	49849	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.994431019 CEST	443	49835	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.994491100 CEST	443	49835	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.994571924 CEST	49835	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.994577885 CEST	443	49835	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.994612932 CEST	443	49835	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.994666100 CEST	49835	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.995174885 CEST	49835	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.995183945 CEST	443	49835	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.996890068 CEST	49850	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.996908903 CEST	443	49850	152.7.106.52	192.168.2.4
May 2, 2024 16:33:02.996957064 CEST	49850	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.997142076 CEST	49850	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:02.997150898 CEST	443	49850	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.003365040 CEST	443	49831	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.003375053 CEST	443	49831	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.003423929 CEST	443	49831	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.003428936 CEST	49831	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.003434896 CEST	443	49831	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.003469944 CEST	49831	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.003489971 CEST	443	49831	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.003539085 CEST	49831	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.003797054 CEST	49831	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.003802061 CEST	443	49831	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.005402088 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.005410910 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.005434036 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.005481005 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.005510092 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.005556107 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.005563021 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.005616903 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.005800009 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.005806923 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.005852938 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.006146908 CEST	49851	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.006184101 CEST	443	49851	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.006242037 CEST	49851	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.006553888 CEST	49851	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.006571054 CEST	443	49851	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.014405966 CEST	443	49832	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.014417887 CEST	443	49832	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.014458895 CEST	49832	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.014619112 CEST	443	49832	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.014626026 CEST	443	49832	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.014686108 CEST	49832	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.014895916 CEST	443	49832	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.014903069 CEST	443	49832	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.014947891 CEST	49832	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.024811029 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.024831057 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.024837971 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.024878025 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.024890900 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.026771069 CEST	443	49841	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.026791096 CEST	443	49841	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.026798964 CEST	443	49841	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.026818991 CEST	443	49841	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.026848078 CEST	49841	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.026859999 CEST	443	49841	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.026882887 CEST	49841	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.031454086 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.031464100 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.031480074 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.031507015 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.031519890 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.031547070 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.031959057 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.031974077 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.031996012 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.032006979 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.032013893 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.032030106 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.032139063 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.032166004 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.032174110 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.032196045 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.032207966 CEST	49839	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.032212973 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.032233000 CEST	49839	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.033788919 CEST	443	49842	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.033879042 CEST	443	49842	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.034014940 CEST	49842	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.034614086 CEST	49842	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.034621000 CEST	443	49842	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.045161963 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.045171022 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.045219898 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.053272963 CEST	443	49832	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.053282976 CEST	443	49832	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.053344011 CEST	443	49832	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.053353071 CEST	49832	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.053390980 CEST	49832	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.053726912 CEST	49832	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.053736925 CEST	443	49832	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.058177948 CEST	49852	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.058267117 CEST	443	49852	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.058342934 CEST	49852	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.059094906 CEST	49852	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.059113979 CEST	443	49852	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.066606045 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.066617966 CEST	49841	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.117094994 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.117101908 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.117178917 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.117501974 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.117564917 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.118005037 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.118063927 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.120204926 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.120268106 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.120609999 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.120661020 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.121052027 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.121104002 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.133261919 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.133270979 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.133316040 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.133408070 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.133414984 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.133470058 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.133574009 CEST	443	49841	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.133583069 CEST	443	49841	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.133605957 CEST	443	49841	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.133624077 CEST	49841	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.133651972 CEST	49841	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.134008884 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.134016037 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.134063005 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.134073973 CEST	443	49841	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.134082079 CEST	443	49841	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.134126902 CEST	443	49841	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.134128094 CEST	49841	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.134169102 CEST	49841	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.134717941 CEST	49841	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.134737015 CEST	443	49841	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.139364958 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.139374971 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.139396906 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.139404058 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.139419079 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.139439106 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.139550924 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.139559031 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.139579058 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.139594078 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.139600992 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.139620066 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.139787912 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.139795065 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.139815092 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.139831066 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.139837980 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.139859915 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.141166925 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.141179085 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.141205072 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.141216040 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.141225100 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.141238928 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.141413927 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.141422987 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.141443968 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.141453028 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.141458035 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.141480923 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.141654015 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.141664982 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.141680002 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.141691923 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.141697884 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.141716003 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.141844988 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.141851902 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.141872883 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.141891956 CEST	49839	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.141899109 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.141916037 CEST	49839	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.142127991 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.142136097 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.142152071 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.142179012 CEST	49839	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.142184019 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.142194033 CEST	49839	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.142376900 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.142384052 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.142410994 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.142424107 CEST	49839	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.142430067 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.142450094 CEST	49839	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.154529095 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.154601097 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.159276009 CEST	443	49844	142.251.40.98	192.168.2.4
May 2, 2024 16:33:03.159615993 CEST	443	49844	142.251.40.98	192.168.2.4
May 2, 2024 16:33:03.159682035 CEST	49844	443	192.168.2.4	142.251.40.98
May 2, 2024 16:33:03.177907944 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.177917004 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.177944899 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.177962065 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.177968025 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.177998066 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.178127050 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.178134918 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.178169966 CEST	49839	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.178177118 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.178195953 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.178212881 CEST	49839	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.178247929 CEST	49839	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.179053068 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.179059982 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.179089069 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.179092884 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.179102898 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.179122925 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.197436094 CEST	443	49848	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.216700077 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.216710091 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.216780901 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.225630045 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.225696087 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.225852013 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.225910902 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.226399899 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.226464987 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.226890087 CEST	49848	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.226902008 CEST	443	49848	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.227200031 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.227211952 CEST	443	49848	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.227264881 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.228081942 CEST	49844	443	192.168.2.4	142.251.40.98
May 2, 2024 16:33:03.228097916 CEST	443	49844	142.251.40.98	192.168.2.4
May 2, 2024 16:33:03.228425026 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.228486061 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.228890896 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.228945971 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.229330063 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.229384899 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.229619026 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.229672909 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.230019093 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.230077982 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.230505943 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.230537891 CEST	49848	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.230565071 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.230602980 CEST	443	49848	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.230964899 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.231034040 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.231292963 CEST	49848	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.238535881 CEST	49839	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.238543034 CEST	443	49839	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.243539095 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.243563890 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.243630886 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.243952990 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.244023085 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.244482994 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.244544983 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.245176077 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.245232105 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.245260000 CEST	443	49849	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.245507002 CEST	49849	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.245516062 CEST	443	49849	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.245810986 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.245867968 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.245989084 CEST	443	49849	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.246628046 CEST	49849	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.246717930 CEST	443	49849	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.246745110 CEST	49849	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.247064114 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.247072935 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.247093916 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.247119904 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.247127056 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.247153997 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.247570038 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.247577906 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.247601986 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.247617006 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.247622967 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.247651100 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.248025894 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.248033047 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.248055935 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.248089075 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.248104095 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.248115063 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.248402119 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.248409033 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.248428106 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.248450994 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.248456955 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.248481035 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.248774052 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.248781919 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.248827934 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.248837948 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.250070095 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.250080109 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.250099897 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.250123978 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.250129938 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.250149965 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.250471115 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.250479937 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.250497103 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.250510931 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.250515938 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.250535011 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.251177073 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.251185894 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.251205921 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.251225948 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.251230955 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.251270056 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.251729965 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.251739025 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.251756907 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.251770973 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.251801014 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.252191067 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.252198935 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.252213001 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.252224922 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.252262115 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.252516031 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.252523899 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.252573967 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.262800932 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.262866020 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.263149023 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.263206005 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.263835907 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.263904095 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.272121906 CEST	443	49848	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.282671928 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.282758951 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.286343098 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.286356926 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.286405087 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.286415100 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.286766052 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.286772966 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.286792040 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.286818981 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.286827087 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.286861897 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.287364006 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.287374973 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.287430048 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.291693926 CEST	443	49850	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.292110920 CEST	443	49849	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.293375969 CEST	49850	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.293384075 CEST	443	49850	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.294847012 CEST	443	49850	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.294903994 CEST	49850	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.295979023 CEST	49849	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.298206091 CEST	49850	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.298285961 CEST	443	49850	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.298542023 CEST	49850	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.298548937 CEST	443	49850	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.325534105 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.325612068 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.337241888 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.337333918 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.337943077 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.338000059 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.339104891 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.339184999 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.341015100 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.341094971 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.341763973 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.341833115 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.341970921 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.342027903 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.342178106 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.342228889 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.342632055 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.342690945 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.342809916 CEST	49850	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.342880011 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.342924118 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.342932940 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.342946053 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.342998028 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.347095013 CEST	49830	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.347106934 CEST	443	49830	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.353988886 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.354053974 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.354512930 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.354568958 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.354891062 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.354952097 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.355278969 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.355344057 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.355699062 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.355751038 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.356236935 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.356288910 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.356859922 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.356914997 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.357439041 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.357500076 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.358057976 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.358114958 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.358792067 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.358859062 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.358860016 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.358870983 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.358908892 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.359352112 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.359359026 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.359405041 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.359909058 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.359915972 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.359954119 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.360184908 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.360232115 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.360750914 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.360760927 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.360797882 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.360831022 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.361300945 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.361351013 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.361429930 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.361480951 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.362181902 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.362234116 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.362571955 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.362618923 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.363023996 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.363075018 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.363579035 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.363625050 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.364243031 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.364259958 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.364301920 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.364734888 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.364744902 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.364788055 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.365416050 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.365426064 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.365464926 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.366034031 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.366087914 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.366437912 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.366492033 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.367031097 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.367086887 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.367211103 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.367269039 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.367270947 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.367284060 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.367321014 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.367347002 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.367347956 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.367358923 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.367399931 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.367934942 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.367997885 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.368349075 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.368407011 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.376485109 CEST	443	49851	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.377978086 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.378199100 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.380019903 CEST	49851	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.380033970 CEST	443	49851	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.380238056 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.381048918 CEST	443	49851	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.381102085 CEST	49851	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.381433964 CEST	49851	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.381491899 CEST	443	49851	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.381680965 CEST	49851	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.381690025 CEST	443	49851	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.393136024 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.393214941 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.395308971 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.395370007 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.396303892 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.396379948 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.396610022 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.396672010 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.397093058 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.397152901 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.397499084 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.397558928 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.398298025 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.398351908 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.398617983 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.398679972 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.400794983 CEST	49853	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.400827885 CEST	443	49853	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.400917053 CEST	49853	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.401314974 CEST	49853	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.401333094 CEST	443	49853	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.420290947 CEST	443	49848	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.420372963 CEST	443	49848	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.420427084 CEST	49848	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.423847914 CEST	49848	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.423861980 CEST	443	49848	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.427818060 CEST	49854	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.427846909 CEST	443	49854	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.428003073 CEST	49854	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.428272009 CEST	49854	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.428286076 CEST	443	49854	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.434292078 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.434355021 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.434402943 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.434457064 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.437375069 CEST	49851	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.456095934 CEST	443	49852	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.456295013 CEST	49852	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.456340075 CEST	443	49852	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.457465887 CEST	443	49852	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.457526922 CEST	49852	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.458029032 CEST	49852	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.458123922 CEST	443	49852	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.458277941 CEST	49852	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.458295107 CEST	443	49852	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.462771893 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.462841034 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.463082075 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.463134050 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.463325977 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.463382006 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.463748932 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.463812113 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.463927031 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.463978052 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.464224100 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.464279890 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.464494944 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.464554071 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.465065002 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.465121984 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.465240002 CEST	443	49849	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.465285063 CEST	443	49849	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.465306044 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.465344906 CEST	49849	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.465358973 CEST	443	49849	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.465373039 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.465445995 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.465490103 CEST	443	49849	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.465500116 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.465531111 CEST	49849	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.465797901 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.465853930 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.465857983 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.465907097 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.466051102 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.466101885 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.466217041 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.466270924 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.466377020 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.466427088 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.466609955 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.466660976 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.467056036 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.467132092 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.467274904 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.467331886 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.467508078 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.467561960 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.467859983 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.467909098 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.468210936 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.468269110 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.468365908 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.468419075 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.468513966 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.468574047 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.468992949 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.469054937 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.469127893 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.469191074 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.469304085 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.469351053 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.469528913 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.469587088 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.469871998 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.469926119 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.470057011 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.470110893 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.470164061 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.470207930 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.470609903 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.470663071 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.470980883 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.471036911 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.471203089 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.471252918 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.471292019 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.471391916 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.471441984 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.471560001 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.471618891 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.471775055 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.471844912 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.473046064 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.473100901 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.473433018 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.473510981 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.473599911 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.473670006 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.474096060 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.474170923 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.474297047 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.474369049 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.474597931 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.474656105 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.474740028 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.474806070 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.474909067 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.474972010 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.475208044 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.475266933 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.475770950 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.475857973 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.475925922 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.475996971 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.476083040 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.476124048 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.476388931 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.476480961 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.477332115 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.477402925 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.477965117 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.478018999 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.478317022 CEST	49849	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.478328943 CEST	443	49849	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.478456974 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.478523970 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.479024887 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.479094028 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.479922056 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.480003119 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.480417967 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.480492115 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.489919901 CEST	49855	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.489949942 CEST	443	49855	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.490010023 CEST	49855	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.490283012 CEST	49855	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.490297079 CEST	443	49855	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.501468897 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.501540899 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.501595020 CEST	49852	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.502085924 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.502151966 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.503446102 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.503519058 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.504589081 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.504652023 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.504966974 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.505033016 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.505445957 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.505512953 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.506572962 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.506647110 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.507916927 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.508008003 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.508399963 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.508450985 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.512820959 CEST	443	49850	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.512865067 CEST	443	49850	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.512939930 CEST	49850	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.512954950 CEST	443	49850	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.512991905 CEST	443	49850	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.513020039 CEST	49850	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.513036966 CEST	49850	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.514774084 CEST	49850	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.514785051 CEST	443	49850	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.521020889 CEST	49856	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.521075010 CEST	443	49856	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.521151066 CEST	49856	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.521384001 CEST	49856	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.521404028 CEST	443	49856	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.545075893 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.545152903 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.545295954 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.545353889 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.573966980 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.574028969 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.574503899 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.574562073 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.575115919 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.575177908 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.575714111 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.575768948 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.576227903 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.576297998 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.576816082 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.576884031 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.577322960 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.577380896 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.578140020 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.578193903 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.579246998 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.579301119 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.580063105 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.580111980 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.580491066 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.580547094 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.580558062 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.580571890 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.580620050 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.580683947 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.580737114 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.580981016 CEST	49838	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.580997944 CEST	443	49838	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.581296921 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.581352949 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.582005024 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.582060099 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.582626104 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.582679033 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.583187103 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.583226919 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.583826065 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.583878994 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.584517956 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.584578037 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.585349083 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.585407972 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.585705996 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.585755110 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.586350918 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.586411953 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.586981058 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.587038994 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.587555885 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.587618113 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.588119984 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.588182926 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.589328051 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.589381933 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.590168953 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.590235949 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.591551065 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.591605902 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.592803001 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.592865944 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.593389988 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.593445063 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.596229076 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.596333981 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.596824884 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.596883059 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.597979069 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.598037958 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.598499060 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.598572969 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.599236012 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.599368095 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.600064993 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.600125074 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.600323915 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.600395918 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.600404024 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.600416899 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.600457907 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.601039886 CEST	443	49851	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.601063013 CEST	443	49851	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.601073980 CEST	443	49851	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.601097107 CEST	443	49851	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.601129055 CEST	49851	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.601131916 CEST	443	49851	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.601156950 CEST	49851	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.601177931 CEST	49851	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.609186888 CEST	49840	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.609200001 CEST	443	49840	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.610806942 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.610888958 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.612061024 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.612122059 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.612667084 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.612735987 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.613373041 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.613437891 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.617492914 CEST	49851	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.617503881 CEST	443	49851	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.623074055 CEST	443	49853	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.623819113 CEST	49853	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.623833895 CEST	443	49853	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.624203920 CEST	443	49853	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.625200987 CEST	49853	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.625266075 CEST	443	49853	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.625480890 CEST	49853	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.627873898 CEST	49857	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.627890110 CEST	443	49857	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.628005981 CEST	49857	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.628339052 CEST	49857	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.628350973 CEST	443	49857	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.652919054 CEST	443	49854	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.654050112 CEST	49854	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.654073000 CEST	443	49854	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.654359102 CEST	443	49854	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.655263901 CEST	49854	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.655314922 CEST	443	49854	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.655379057 CEST	49854	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.668114901 CEST	443	49853	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.682287931 CEST	443	49852	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.682312965 CEST	443	49852	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.682320118 CEST	443	49852	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.682356119 CEST	443	49852	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.682374001 CEST	49852	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.682424068 CEST	443	49852	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.682449102 CEST	443	49852	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.682486057 CEST	49852	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.682517052 CEST	49852	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.685087919 CEST	49852	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.685112000 CEST	443	49852	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.687016964 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.687103987 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.688044071 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.688110113 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.688702106 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.688793898 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.689476967 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.689544916 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.690149069 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.690217018 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.690757990 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.690818071 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.691188097 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.691252947 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.691668987 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.691731930 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.692070961 CEST	49859	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.692089081 CEST	443	49859	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.692234993 CEST	49859	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.692498922 CEST	49859	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.692507982 CEST	443	49859	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.692536116 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.692586899 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.693108082 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.693172932 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.693567991 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.693618059 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.693999052 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.694062948 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.694737911 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.694788933 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.695154905 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.695209980 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.696119070 CEST	443	49854	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.696254969 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.696320057 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.697118044 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.697175026 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.697885990 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.697957039 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.700001001 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.700058937 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.700798988 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.700872898 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.701493025 CEST	443	49843	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.701544046 CEST	49843	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.713689089 CEST	443	49855	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.713866949 CEST	49855	443	192.168.2.4	152.7.106.52
May 2, 2024 16:33:03.713876009 CEST	443	49855	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.714171886 CEST	443	49855	152.7.106.52	192.168.2.4
May 2, 2024 16:33:03.714648008 CEST	49855	443	192.168.2.4	152.7.106.52

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 2, 2024 16:32:32.004319906 CEST	192.168.2.4	1.1.1.1	0xa8f6	Standard query (0)	campaign-statistics.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:32:32.004545927 CEST	192.168.2.4	1.1.1.1	0x7c37	Standard query (0)	campaign-statistics.com	65	IN (0x0001)	false
May 2, 2024 16:32:32.869554043 CEST	192.168.2.4	1.1.1.1	0xeada	Standard query (0)	ncsu.qualtrics.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:32:32.870121002 CEST	192.168.2.4	1.1.1.1	0x58c9	Standard query (0)	ncsu.qualtrics.com	65	IN (0x0001)	false
May 2, 2024 16:32:33.532597065 CEST	192.168.2.4	1.1.1.1	0x8112	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:32:33.533176899 CEST	192.168.2.4	1.1.1.1	0xec4b	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 2, 2024 16:32:34.158103943 CEST	192.168.2.4	1.1.1.1	0x6ff6	Standard query (0)	eu.qualtrics.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:32:34.158615112 CEST	192.168.2.4	1.1.1.1	0x7748	Standard query (0)	eu.qualtrics.com	65	IN (0x0001)	false
May 2, 2024 16:32:42.389410973 CEST	192.168.2.4	1.1.1.1	0x72f0	Standard query (0)	ncsu.qualtrics.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:32:42.389749050 CEST	192.168.2.4	1.1.1.1	0x6498	Standard query (0)	ncsu.qualtrics.com	65	IN (0x0001)	false
May 2, 2024 16:32:51.628578901 CEST	192.168.2.4	1.1.1.1	0x6e73	Standard query (0)	naturalearning.org	A (IP address)	IN (0x0001)	false
May 2, 2024 16:32:51.628856897 CEST	192.168.2.4	1.1.1.1	0x6b84	Standard query (0)	naturalearning.org	65	IN (0x0001)	false
May 2, 2024 16:32:52.372555017 CEST	192.168.2.4	1.1.1.1	0x7d7b	Standard query (0)	naturalearning.org	A (IP address)	IN (0x0001)	false
May 2, 2024 16:32:52.372890949 CEST	192.168.2.4	1.1.1.1	0x7d0b	Standard query (0)	naturalearning.org	65	IN (0x0001)	false
May 2, 2024 16:32:53.100456953 CEST	192.168.2.4	1.1.1.1	0xf273	Standard query (0)	cdn.ncsu.edu	A (IP address)	IN (0x0001)	false
May 2, 2024 16:32:53.100614071 CEST	192.168.2.4	1.1.1.1	0x343e	Standard query (0)	cdn.ncsu.edu	65	IN (0x0001)	false
May 2, 2024 16:32:58.803605080 CEST	192.168.2.4	1.1.1.1	0xefcf	Standard query (0)	cdn.sender.net	A (IP address)	IN (0x0001)	false
May 2, 2024 16:32:58.803807974 CEST	192.168.2.4	1.1.1.1	0xad5a	Standard query (0)	cdn.sender.net	65	IN (0x0001)	false
May 2, 2024 16:32:59.170588970 CEST	192.168.2.4	1.1.1.1	0xb8a2	Standard query (0)	naturalearning.org	A (IP address)	IN (0x0001)	false
May 2, 2024 16:32:59.170774937 CEST	192.168.2.4	1.1.1.1	0xccd0	Standard query (0)	naturalearning.org	65	IN (0x0001)	false
May 2, 2024 16:33:00.241910934 CEST	192.168.2.4	1.1.1.1	0x9303	Standard query (0)	cdn.sender.net	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:00.242211103 CEST	192.168.2.4	1.1.1.1	0xce9	Standard query (0)	cdn.sender.net	65	IN (0x0001)	false
May 2, 2024 16:33:02.464857101 CEST	192.168.2.4	1.1.1.1	0x35ba	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:02.465002060 CEST	192.168.2.4	1.1.1.1	0xa187	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
May 2, 2024 16:33:02.465619087 CEST	192.168.2.4	1.1.1.1	0xe00a	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:02.465745926 CEST	192.168.2.4	1.1.1.1	0xd83	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
May 2, 2024 16:33:02.534354925 CEST	192.168.2.4	1.1.1.1	0x72f	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:02.534523964 CEST	192.168.2.4	1.1.1.1	0x7e	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
May 2, 2024 16:33:18.336323023 CEST	192.168.2.4	1.1.1.1	0xa282	Standard query (0)	www.qualtrics.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:18.336987019 CEST	192.168.2.4	1.1.1.1	0xea7d	Standard query (0)	www.qualtrics.com	65	IN (0x0001)	false
May 2, 2024 16:33:19.252259016 CEST	192.168.2.4	1.1.1.1	0x6514	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:19.252718925 CEST	192.168.2.4	1.1.1.1	0xb2d	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
May 2, 2024 16:33:19.253640890 CEST	192.168.2.4	1.1.1.1	0xc3eb	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:19.254060984 CEST	192.168.2.4	1.1.1.1	0x334b	Standard query (0)	use.typekit.net	65	IN (0x0001)	false
May 2, 2024 16:33:19.256781101 CEST	192.168.2.4	1.1.1.1	0xa7b9	Standard query (0)	client-registry.mutinycdn.com	65	IN (0x0001)	false
May 2, 2024 16:33:19.256782055 CEST	192.168.2.4	1.1.1.1	0x3c3e	Standard query (0)	client-registry.mutinycdn.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:19.912877083 CEST	192.168.2.4	1.1.1.1	0x3e53	Standard query (0)	www.qualtrics.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:19.912877083 CEST	192.168.2.4	1.1.1.1	0x1cd8	Standard query (0)	www.qualtrics.com	65	IN (0x0001)	false
May 2, 2024 16:33:20.177387953 CEST	192.168.2.4	1.1.1.1	0xe7fe	Standard query (0)	p.typekit.net	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:20.180411100 CEST	192.168.2.4	1.1.1.1	0x988c	Standard query (0)	p.typekit.net	65	IN (0x0001)	false
May 2, 2024 16:33:20.352159977 CEST	192.168.2.4	1.1.1.1	0xf52f	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:20.352366924 CEST	192.168.2.4	1.1.1.1	0x57e5	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
May 2, 2024 16:33:20.353662014 CEST	192.168.2.4	1.1.1.1	0x6543	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:20.353837013 CEST	192.168.2.4	1.1.1.1	0x47a9	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
May 2, 2024 16:33:20.379988909 CEST	192.168.2.4	1.1.1.1	0x8a17	Standard query (0)	success.qualtrics.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:20.380297899 CEST	192.168.2.4	1.1.1.1	0x4c25	Standard query (0)	success.qualtrics.com	65	IN (0x0001)	false
May 2, 2024 16:33:21.733882904 CEST	192.168.2.4	1.1.1.1	0x849d	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:21.735135078 CEST	192.168.2.4	1.1.1.1	0x3989	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
May 2, 2024 16:33:21.736510992 CEST	192.168.2.4	1.1.1.1	0x4a52	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:21.737751961 CEST	192.168.2.4	1.1.1.1	0x6819	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
May 2, 2024 16:33:21.738696098 CEST	192.168.2.4	1.1.1.1	0x3491	Standard query (0)	success.qualtrics.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:21.739427090 CEST	192.168.2.4	1.1.1.1	0xa87b	Standard query (0)	success.qualtrics.com	65	IN (0x0001)	false
May 2, 2024 16:33:22.879261017 CEST	192.168.2.4	1.1.1.1	0x5645	Standard query (0)	play.vidyard.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:22.879398108 CEST	192.168.2.4	1.1.1.1	0x9dd2	Standard query (0)	play.vidyard.com	65	IN (0x0001)	false
May 2, 2024 16:33:23.229576111 CEST	192.168.2.4	1.1.1.1	0xa14c	Standard query (0)	qualtrics-www.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:23.229962111 CEST	192.168.2.4	1.1.1.1	0xbffe	Standard query (0)	qualtrics-www.s3.amazonaws.com	65	IN (0x0001)	false
May 2, 2024 16:33:23.242302895 CEST	192.168.2.4	1.1.1.1	0x2413	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:23.242458105 CEST	192.168.2.4	1.1.1.1	0xe5d	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
May 2, 2024 16:33:23.417864084 CEST	192.168.2.4	1.1.1.1	0x7d1f	Standard query (0)	www-api.qualtrics.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:23.418214083 CEST	192.168.2.4	1.1.1.1	0x6ea1	Standard query (0)	www-api.qualtrics.com	65	IN (0x0001)	false
May 2, 2024 16:33:23.780143976 CEST	192.168.2.4	1.1.1.1	0xa222	Standard query (0)	qualtrics-www.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:23.780421019 CEST	192.168.2.4	1.1.1.1	0x3b30	Standard query (0)	qualtrics-www.s3.amazonaws.com	65	IN (0x0001)	false
May 2, 2024 16:33:24.066215992 CEST	192.168.2.4	1.1.1.1	0xac69	Standard query (0)	www-api.qualtrics.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:24.066417933 CEST	192.168.2.4	1.1.1.1	0xb113	Standard query (0)	www-api.qualtrics.com	65	IN (0x0001)	false
May 2, 2024 16:33:24.145451069 CEST	192.168.2.4	1.1.1.1	0xa1dd	Standard query (0)	client-registry.mutinycdn.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:24.145694017 CEST	192.168.2.4	1.1.1.1	0xbc6b	Standard query (0)	client-registry.mutinycdn.com	65	IN (0x0001)	false
May 2, 2024 16:33:24.523786068 CEST	192.168.2.4	1.1.1.1	0x63b4	Standard query (0)	j.6sc.co	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:24.524032116 CEST	192.168.2.4	1.1.1.1	0x9210	Standard query (0)	j.6sc.co	65	IN (0x0001)	false
May 2, 2024 16:33:24.543149948 CEST	192.168.2.4	1.1.1.1	0xba11	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:24.543597937 CEST	192.168.2.4	1.1.1.1	0x3e85	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 2, 2024 16:33:24.558162928 CEST	192.168.2.4	1.1.1.1	0xfb7a	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:24.558162928 CEST	192.168.2.4	1.1.1.1	0xfaa	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
May 2, 2024 16:33:24.558768034 CEST	192.168.2.4	1.1.1.1	0x4427	Standard query (0)	munchkin.marketo.net	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:24.558921099 CEST	192.168.2.4	1.1.1.1	0x8e24	Standard query (0)	munchkin.marketo.net	65	IN (0x0001)	false
May 2, 2024 16:33:24.559390068 CEST	192.168.2.4	1.1.1.1	0xa136	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:24.559540987 CEST	192.168.2.4	1.1.1.1	0x50f9	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
May 2, 2024 16:33:24.588551044 CEST	192.168.2.4	1.1.1.1	0x4c55	Standard query (0)	api-v2.mutinyhq.io	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:24.588551044 CEST	192.168.2.4	1.1.1.1	0xd10f	Standard query (0)	api-v2.mutinyhq.io	65	IN (0x0001)	false
May 2, 2024 16:33:26.071768999 CEST	192.168.2.4	1.1.1.1	0x5bd1	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:26.072191000 CEST	192.168.2.4	1.1.1.1	0x1f34	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
May 2, 2024 16:33:26.543946028 CEST	192.168.2.4	1.1.1.1	0x3d29	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:26.544137001 CEST	192.168.2.4	1.1.1.1	0xab72	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
May 2, 2024 16:33:26.959770918 CEST	192.168.2.4	1.1.1.1	0x4a20	Standard query (0)	sgtm.qualtrics.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:26.961908102 CEST	192.168.2.4	1.1.1.1	0xc4f2	Standard query (0)	sgtm.qualtrics.com	65	IN (0x0001)	false
May 2, 2024 16:33:27.202852011 CEST	192.168.2.4	1.1.1.1	0x8f77	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.203084946 CEST	192.168.2.4	1.1.1.1	0xca15	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
May 2, 2024 16:33:27.247642994 CEST	192.168.2.4	1.1.1.1	0xe54	Standard query (0)	542-fmf-412.mktoresp.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.247770071 CEST	192.168.2.4	1.1.1.1	0x64d5	Standard query (0)	542-fmf-412.mktoresp.com	65	IN (0x0001)	false
May 2, 2024 16:33:27.388192892 CEST	192.168.2.4	1.1.1.1	0xb3b0	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.388451099 CEST	192.168.2.4	1.1.1.1	0x6991	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
May 2, 2024 16:33:27.408123970 CEST	192.168.2.4	1.1.1.1	0x6cf	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.408251047 CEST	192.168.2.4	1.1.1.1	0x4d28	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
May 2, 2024 16:33:27.485222101 CEST	192.168.2.4	1.1.1.1	0xad4a	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.485348940 CEST	192.168.2.4	1.1.1.1	0xadbe	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
May 2, 2024 16:33:27.485810995 CEST	192.168.2.4	1.1.1.1	0xdbc5	Standard query (0)	c.6sc.co	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.485923052 CEST	192.168.2.4	1.1.1.1	0x3527	Standard query (0)	c.6sc.co	65	IN (0x0001)	false
May 2, 2024 16:33:27.486382008 CEST	192.168.2.4	1.1.1.1	0x6ddd	Standard query (0)	ipv6.6sc.co	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.486457109 CEST	192.168.2.4	1.1.1.1	0x5bf8	Standard query (0)	ipv6.6sc.co	65	IN (0x0001)	false
May 2, 2024 16:33:27.628294945 CEST	192.168.2.4	1.1.1.1	0xfdac	Standard query (0)	epsilon.6sense.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.628478050 CEST	192.168.2.4	1.1.1.1	0x5183	Standard query (0)	epsilon.6sense.com	65	IN (0x0001)	false
May 2, 2024 16:33:27.645929098 CEST	192.168.2.4	1.1.1.1	0xe644	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.646058083 CEST	192.168.2.4	1.1.1.1	0xf2a7	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
May 2, 2024 16:33:27.648274899 CEST	192.168.2.4	1.1.1.1	0x6412	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.648477077 CEST	192.168.2.4	1.1.1.1	0xdc1	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
May 2, 2024 16:33:27.653417110 CEST	192.168.2.4	1.1.1.1	0x24fc	Standard query (0)	sgtm.qualtrics.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.653637886 CEST	192.168.2.4	1.1.1.1	0xe98a	Standard query (0)	sgtm.qualtrics.com	65	IN (0x0001)	false
May 2, 2024 16:33:27.706306934 CEST	192.168.2.4	1.1.1.1	0x93c3	Standard query (0)	b.6sc.co	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.706624985 CEST	192.168.2.4	1.1.1.1	0x58f7	Standard query (0)	b.6sc.co	65	IN (0x0001)	false
May 2, 2024 16:33:27.715058088 CEST	192.168.2.4	1.1.1.1	0x5505	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.715337992 CEST	192.168.2.4	1.1.1.1	0x4f19	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
May 2, 2024 16:33:27.860035896 CEST	192.168.2.4	1.1.1.1	0x5564	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.860167027 CEST	192.168.2.4	1.1.1.1	0x838b	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
May 2, 2024 16:33:27.957500935 CEST	192.168.2.4	1.1.1.1	0xfc5b	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.957710028 CEST	192.168.2.4	1.1.1.1	0x6056	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
May 2, 2024 16:33:28.044768095 CEST	192.168.2.4	1.1.1.1	0x45b	Standard query (0)	ipv6.6sc.co	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:28.044982910 CEST	192.168.2.4	1.1.1.1	0x5fcc	Standard query (0)	ipv6.6sc.co	65	IN (0x0001)	false
May 2, 2024 16:33:28.048408031 CEST	192.168.2.4	1.1.1.1	0x9327	Standard query (0)	c.6sc.co	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:28.048547029 CEST	192.168.2.4	1.1.1.1	0x66bc	Standard query (0)	c.6sc.co	65	IN (0x0001)	false
May 2, 2024 16:33:28.270723104 CEST	192.168.2.4	1.1.1.1	0xb53c	Standard query (0)	b.6sc.co	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:28.271754026 CEST	192.168.2.4	1.1.1.1	0xa0c3	Standard query (0)	b.6sc.co	65	IN (0x0001)	false
May 2, 2024 16:33:28.535423040 CEST	192.168.2.4	1.1.1.1	0xcd63	Standard query (0)	epsilon.6sense.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:28.535849094 CEST	192.168.2.4	1.1.1.1	0x93f5	Standard query (0)	epsilon.6sense.com	65	IN (0x0001)	false
May 2, 2024 16:33:28.758920908 CEST	192.168.2.4	1.1.1.1	0x2116	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:28.759531975 CEST	192.168.2.4	1.1.1.1	0xefc	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
May 2, 2024 16:33:31.580893040 CEST	192.168.2.4	1.1.1.1	0xd78c	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:31.581091881 CEST	192.168.2.4	1.1.1.1	0xba34	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
May 2, 2024 16:33:32.112420082 CEST	192.168.2.4	1.1.1.1	0xa247	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:32.112581015 CEST	192.168.2.4	1.1.1.1	0xfe23	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
May 2, 2024 16:33:32.114929914 CEST	192.168.2.4	1.1.1.1	0x9261	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:32.115080118 CEST	192.168.2.4	1.1.1.1	0x8ee	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
May 2, 2024 16:33:32.117831945 CEST	192.168.2.4	1.1.1.1	0xa609	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:32.117981911 CEST	192.168.2.4	1.1.1.1	0x4d55	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
May 2, 2024 16:33:32.516016006 CEST	192.168.2.4	1.1.1.1	0x4ca7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:32.516016006 CEST	192.168.2.4	1.1.1.1	0xcc89	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 2, 2024 16:33:32.778393030 CEST	192.168.2.4	1.1.1.1	0x2206	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:32.778552055 CEST	192.168.2.4	1.1.1.1	0xef20	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
May 2, 2024 16:33:33.270550966 CEST	192.168.2.4	1.1.1.1	0x40ff	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:33.270891905 CEST	192.168.2.4	1.1.1.1	0xf7a6	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
May 2, 2024 16:33:33.721354008 CEST	192.168.2.4	1.1.1.1	0x64c9	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:33.721548080 CEST	192.168.2.4	1.1.1.1	0x1ba1	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
May 2, 2024 16:33:34.195977926 CEST	192.168.2.4	1.1.1.1	0xc69a	Standard query (0)	zn725dkxtvxq847sl-qxm.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:34.200814962 CEST	192.168.2.4	1.1.1.1	0x1a3a	Standard query (0)	zn725dkxtvxq847sl-qxm.siteintercept.qualtrics.com	65	IN (0x0001)	false
May 2, 2024 16:33:34.721354961 CEST	192.168.2.4	1.1.1.1	0x4c99	Standard query (0)	siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:34.721482038 CEST	192.168.2.4	1.1.1.1	0x98c2	Standard query (0)	siteintercept.qualtrics.com	65	IN (0x0001)	false
May 2, 2024 16:33:37.866955996 CEST	192.168.2.4	1.1.1.1	0x45a2	Standard query (0)	siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:37.867574930 CEST	192.168.2.4	1.1.1.1	0x67b0	Standard query (0)	siteintercept.qualtrics.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 2, 2024 16:32:32.092312098 CEST	1.1.1.1	192.168.2.4	0xa8f6	No error (0)	campaign-statistics.com		172.66.43.168	A (IP address)	IN (0x0001)	false
May 2, 2024 16:32:32.092312098 CEST	1.1.1.1	192.168.2.4	0xa8f6	No error (0)	campaign-statistics.com		172.66.40.88	A (IP address)	IN (0x0001)	false
May 2, 2024 16:32:32.095793962 CEST	1.1.1.1	192.168.2.4	0x7c37	No error (0)	campaign-statistics.com			65	IN (0x0001)	false
May 2, 2024 16:32:33.050884962 CEST	1.1.1.1	192.168.2.4	0x58c9	No error (0)	ncsu.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:32:33.051156044 CEST	1.1.1.1	192.168.2.4	0xeada	No error (0)	ncsu.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:32:33.623382092 CEST	1.1.1.1	192.168.2.4	0x8112	No error (0)	www.google.com		142.251.40.228	A (IP address)	IN (0x0001)	false
May 2, 2024 16:32:33.624556065 CEST	1.1.1.1	192.168.2.4	0xec4b	No error (0)	www.google.com			65	IN (0x0001)	false
May 2, 2024 16:32:34.247715950 CEST	1.1.1.1	192.168.2.4	0x7748	No error (0)	eu.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:32:34.249018908 CEST	1.1.1.1	192.168.2.4	0x6ff6	No error (0)	eu.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:32:42.488722086 CEST	1.1.1.1	192.168.2.4	0x72f0	No error (0)	ncsu.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:32:42.583940983 CEST	1.1.1.1	192.168.2.4	0x6498	No error (0)	ncsu.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:32:46.683449030 CEST	1.1.1.1	192.168.2.4	0xe72d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:32:46.683449030 CEST	1.1.1.1	192.168.2.4	0xe72d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
May 2, 2024 16:32:51.774663925 CEST	1.1.1.1	192.168.2.4	0x6e73	No error (0)	naturalearning.org		152.7.106.52	A (IP address)	IN (0x0001)	false
May 2, 2024 16:32:52.485347986 CEST	1.1.1.1	192.168.2.4	0x7d7b	No error (0)	naturalearning.org		152.7.106.52	A (IP address)	IN (0x0001)	false
May 2, 2024 16:32:53.200023890 CEST	1.1.1.1	192.168.2.4	0xf273	No error (0)	cdn.ncsu.edu	d1x56redfii5qy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:32:53.200023890 CEST	1.1.1.1	192.168.2.4	0xf273	No error (0)	d1x56redfii5qy.cloudfront.net		108.138.106.52	A (IP address)	IN (0x0001)	false
May 2, 2024 16:32:53.200023890 CEST	1.1.1.1	192.168.2.4	0xf273	No error (0)	d1x56redfii5qy.cloudfront.net		108.138.106.93	A (IP address)	IN (0x0001)	false
May 2, 2024 16:32:53.200023890 CEST	1.1.1.1	192.168.2.4	0xf273	No error (0)	d1x56redfii5qy.cloudfront.net		108.138.106.19	A (IP address)	IN (0x0001)	false
May 2, 2024 16:32:53.200023890 CEST	1.1.1.1	192.168.2.4	0xf273	No error (0)	d1x56redfii5qy.cloudfront.net		108.138.106.71	A (IP address)	IN (0x0001)	false
May 2, 2024 16:32:53.208955050 CEST	1.1.1.1	192.168.2.4	0x343e	No error (0)	cdn.ncsu.edu	d1x56redfii5qy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:32:58.893948078 CEST	1.1.1.1	192.168.2.4	0xad5a	No error (0)	cdn.sender.net			65	IN (0x0001)	false
May 2, 2024 16:32:58.896945000 CEST	1.1.1.1	192.168.2.4	0xefcf	No error (0)	cdn.sender.net		104.22.74.115	A (IP address)	IN (0x0001)	false
May 2, 2024 16:32:58.896945000 CEST	1.1.1.1	192.168.2.4	0xefcf	No error (0)	cdn.sender.net		104.22.75.115	A (IP address)	IN (0x0001)	false
May 2, 2024 16:32:58.896945000 CEST	1.1.1.1	192.168.2.4	0xefcf	No error (0)	cdn.sender.net		172.67.27.94	A (IP address)	IN (0x0001)	false
May 2, 2024 16:32:59.376774073 CEST	1.1.1.1	192.168.2.4	0xb8a2	No error (0)	naturalearning.org		152.7.106.52	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:00.331779003 CEST	1.1.1.1	192.168.2.4	0x9303	No error (0)	cdn.sender.net		104.22.75.115	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:00.331779003 CEST	1.1.1.1	192.168.2.4	0x9303	No error (0)	cdn.sender.net		104.22.74.115	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:00.331779003 CEST	1.1.1.1	192.168.2.4	0x9303	No error (0)	cdn.sender.net		172.67.27.94	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:00.332386971 CEST	1.1.1.1	192.168.2.4	0xce9	No error (0)	cdn.sender.net			65	IN (0x0001)	false
May 2, 2024 16:33:01.884955883 CEST	1.1.1.1	192.168.2.4	0x7a53	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:01.884955883 CEST	1.1.1.1	192.168.2.4	0x7a53	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:02.553173065 CEST	1.1.1.1	192.168.2.4	0x35ba	No error (0)	analytics.google.com		142.250.65.206	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:02.553303003 CEST	1.1.1.1	192.168.2.4	0xa187	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:02.555120945 CEST	1.1.1.1	192.168.2.4	0xe00a	No error (0)	stats.g.doubleclick.net		172.253.63.155	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:02.555120945 CEST	1.1.1.1	192.168.2.4	0xe00a	No error (0)	stats.g.doubleclick.net		172.253.63.154	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:02.622447968 CEST	1.1.1.1	192.168.2.4	0x72f	No error (0)	td.doubleclick.net		142.251.40.98	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:18.428764105 CEST	1.1.1.1	192.168.2.4	0xea7d	No error (0)	www.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:18.437158108 CEST	1.1.1.1	192.168.2.4	0xa282	No error (0)	www.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:19.340568066 CEST	1.1.1.1	192.168.2.4	0xb2d	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
May 2, 2024 16:33:19.340778112 CEST	1.1.1.1	192.168.2.4	0x6514	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:19.340778112 CEST	1.1.1.1	192.168.2.4	0x6514	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:19.341741085 CEST	1.1.1.1	192.168.2.4	0xc3eb	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:19.342693090 CEST	1.1.1.1	192.168.2.4	0x334b	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:19.345727921 CEST	1.1.1.1	192.168.2.4	0x3c3e	No error (0)	client-registry.mutinycdn.com	n.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:19.366127014 CEST	1.1.1.1	192.168.2.4	0xa7b9	No error (0)	client-registry.mutinycdn.com	n.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:20.011400938 CEST	1.1.1.1	192.168.2.4	0x3e53	No error (0)	www.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:20.014904976 CEST	1.1.1.1	192.168.2.4	0x1cd8	No error (0)	www.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:20.265670061 CEST	1.1.1.1	192.168.2.4	0xe7fe	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:20.270075083 CEST	1.1.1.1	192.168.2.4	0x988c	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:20.440089941 CEST	1.1.1.1	192.168.2.4	0xf52f	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:20.440089941 CEST	1.1.1.1	192.168.2.4	0xf52f	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:20.440443039 CEST	1.1.1.1	192.168.2.4	0x57e5	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
May 2, 2024 16:33:20.441458941 CEST	1.1.1.1	192.168.2.4	0x6543	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:20.441458941 CEST	1.1.1.1	192.168.2.4	0x6543	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:20.441603899 CEST	1.1.1.1	192.168.2.4	0x47a9	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
May 2, 2024 16:33:20.469594002 CEST	1.1.1.1	192.168.2.4	0x8a17	No error (0)	success.qualtrics.com	qualtrics.mktoweb.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:20.469594002 CEST	1.1.1.1	192.168.2.4	0x8a17	No error (0)	qualtrics.mktoweb.com	sjp.mktossl.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:20.469594002 CEST	1.1.1.1	192.168.2.4	0x8a17	No error (0)	sjp.mktossl.com		104.17.71.206	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:20.469594002 CEST	1.1.1.1	192.168.2.4	0x8a17	No error (0)	sjp.mktossl.com		104.17.72.206	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:20.469594002 CEST	1.1.1.1	192.168.2.4	0x8a17	No error (0)	sjp.mktossl.com		104.17.70.206	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:20.469594002 CEST	1.1.1.1	192.168.2.4	0x8a17	No error (0)	sjp.mktossl.com		104.17.73.206	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:20.469594002 CEST	1.1.1.1	192.168.2.4	0x8a17	No error (0)	sjp.mktossl.com		104.17.74.206	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:20.480986118 CEST	1.1.1.1	192.168.2.4	0x4c25	No error (0)	success.qualtrics.com	qualtrics.mktoweb.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:20.480986118 CEST	1.1.1.1	192.168.2.4	0x4c25	No error (0)	qualtrics.mktoweb.com	sjp.mktossl.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:20.480986118 CEST	1.1.1.1	192.168.2.4	0x4c25	No error (0)	sjp.mktossl.com			65	IN (0x0001)	false
May 2, 2024 16:33:21.822937965 CEST	1.1.1.1	192.168.2.4	0x849d	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:21.822937965 CEST	1.1.1.1	192.168.2.4	0x849d	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:21.823818922 CEST	1.1.1.1	192.168.2.4	0x3989	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
May 2, 2024 16:33:21.825330019 CEST	1.1.1.1	192.168.2.4	0x4a52	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:21.825330019 CEST	1.1.1.1	192.168.2.4	0x4a52	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:21.828125954 CEST	1.1.1.1	192.168.2.4	0x6819	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
May 2, 2024 16:33:21.828172922 CEST	1.1.1.1	192.168.2.4	0x3491	No error (0)	success.qualtrics.com	qualtrics.mktoweb.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:21.828172922 CEST	1.1.1.1	192.168.2.4	0x3491	No error (0)	qualtrics.mktoweb.com	sjp.mktossl.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:21.828172922 CEST	1.1.1.1	192.168.2.4	0x3491	No error (0)	sjp.mktossl.com		104.17.73.206	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:21.828172922 CEST	1.1.1.1	192.168.2.4	0x3491	No error (0)	sjp.mktossl.com		104.17.70.206	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:21.828172922 CEST	1.1.1.1	192.168.2.4	0x3491	No error (0)	sjp.mktossl.com		104.17.72.206	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:21.828172922 CEST	1.1.1.1	192.168.2.4	0x3491	No error (0)	sjp.mktossl.com		104.17.71.206	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:21.828172922 CEST	1.1.1.1	192.168.2.4	0x3491	No error (0)	sjp.mktossl.com		104.17.74.206	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:21.841984987 CEST	1.1.1.1	192.168.2.4	0xa87b	No error (0)	success.qualtrics.com	qualtrics.mktoweb.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:21.841984987 CEST	1.1.1.1	192.168.2.4	0xa87b	No error (0)	qualtrics.mktoweb.com	sjp.mktossl.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:21.841984987 CEST	1.1.1.1	192.168.2.4	0xa87b	No error (0)	sjp.mktossl.com			65	IN (0x0001)	false
May 2, 2024 16:33:22.967885971 CEST	1.1.1.1	192.168.2.4	0x5645	No error (0)	play.vidyard.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:22.970602989 CEST	1.1.1.1	192.168.2.4	0x9dd2	No error (0)	play.vidyard.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:23.329793930 CEST	1.1.1.1	192.168.2.4	0xe5d	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
May 2, 2024 16:33:23.330890894 CEST	1.1.1.1	192.168.2.4	0x2413	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:23.330890894 CEST	1.1.1.1	192.168.2.4	0x2413	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:23.340708971 CEST	1.1.1.1	192.168.2.4	0xbffe	No error (0)	qualtrics-www.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:23.340708971 CEST	1.1.1.1	192.168.2.4	0xbffe	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:23.344502926 CEST	1.1.1.1	192.168.2.4	0xa14c	No error (0)	qualtrics-www.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:23.344502926 CEST	1.1.1.1	192.168.2.4	0xa14c	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:23.344502926 CEST	1.1.1.1	192.168.2.4	0xa14c	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.25.122	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:23.344502926 CEST	1.1.1.1	192.168.2.4	0xa14c	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.25.119	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:23.344502926 CEST	1.1.1.1	192.168.2.4	0xa14c	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.26.244	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:23.344502926 CEST	1.1.1.1	192.168.2.4	0xa14c	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.231.73	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:23.344502926 CEST	1.1.1.1	192.168.2.4	0xa14c	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.43.100	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:23.344502926 CEST	1.1.1.1	192.168.2.4	0xa14c	No error (0)	s3-w.us-east-1.amazonaws.com		16.182.96.113	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:23.344502926 CEST	1.1.1.1	192.168.2.4	0xa14c	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.30.129	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:23.344502926 CEST	1.1.1.1	192.168.2.4	0xa14c	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.25.44	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:23.511307955 CEST	1.1.1.1	192.168.2.4	0x7d1f	No error (0)	www-api.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:23.520559072 CEST	1.1.1.1	192.168.2.4	0x6ea1	No error (0)	www-api.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:23.880949974 CEST	1.1.1.1	192.168.2.4	0x3b30	No error (0)	qualtrics-www.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:23.880949974 CEST	1.1.1.1	192.168.2.4	0x3b30	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:23.893838882 CEST	1.1.1.1	192.168.2.4	0xa222	No error (0)	qualtrics-www.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:23.893838882 CEST	1.1.1.1	192.168.2.4	0xa222	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:23.893838882 CEST	1.1.1.1	192.168.2.4	0xa222	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.38.169	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:23.893838882 CEST	1.1.1.1	192.168.2.4	0xa222	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.124.33	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:23.893838882 CEST	1.1.1.1	192.168.2.4	0xa222	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.43.89	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:23.893838882 CEST	1.1.1.1	192.168.2.4	0xa222	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.195.41	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:23.893838882 CEST	1.1.1.1	192.168.2.4	0xa222	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.82.252	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:23.893838882 CEST	1.1.1.1	192.168.2.4	0xa222	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.129.49	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:23.893838882 CEST	1.1.1.1	192.168.2.4	0xa222	No error (0)	s3-w.us-east-1.amazonaws.com		16.182.97.193	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:23.893838882 CEST	1.1.1.1	192.168.2.4	0xa222	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.138.105	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:24.164513111 CEST	1.1.1.1	192.168.2.4	0xac69	No error (0)	www-api.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:24.166413069 CEST	1.1.1.1	192.168.2.4	0xb113	No error (0)	www-api.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:24.236324072 CEST	1.1.1.1	192.168.2.4	0xbc6b	No error (0)	client-registry.mutinycdn.com	n.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:24.236505032 CEST	1.1.1.1	192.168.2.4	0xa1dd	No error (0)	client-registry.mutinycdn.com	n.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:24.613360882 CEST	1.1.1.1	192.168.2.4	0x9210	No error (0)	j.6sc.co	j2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:24.616204977 CEST	1.1.1.1	192.168.2.4	0x63b4	No error (0)	j.6sc.co	j2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:24.632594109 CEST	1.1.1.1	192.168.2.4	0x3e85	No error (0)	www.google.com			65	IN (0x0001)	false
May 2, 2024 16:33:24.632606030 CEST	1.1.1.1	192.168.2.4	0xba11	No error (0)	www.google.com		142.251.40.196	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:24.648030996 CEST	1.1.1.1	192.168.2.4	0xfb7a	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:24.648174047 CEST	1.1.1.1	192.168.2.4	0xfaa	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:24.649645090 CEST	1.1.1.1	192.168.2.4	0xa136	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:24.649645090 CEST	1.1.1.1	192.168.2.4	0xa136	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:24.649645090 CEST	1.1.1.1	192.168.2.4	0xa136	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:24.649979115 CEST	1.1.1.1	192.168.2.4	0x50f9	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:24.650794983 CEST	1.1.1.1	192.168.2.4	0x8e24	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:24.652491093 CEST	1.1.1.1	192.168.2.4	0x4427	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:24.679327011 CEST	1.1.1.1	192.168.2.4	0x4c55	No error (0)	api-v2.mutinyhq.io	k8s-mutiny-privatea-b7eaf9f835-63806838.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:24.679327011 CEST	1.1.1.1	192.168.2.4	0x4c55	No error (0)	k8s-mutiny-privatea-b7eaf9f835-63806838.us-east-1.elb.amazonaws.com		34.192.223.42	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:24.679327011 CEST	1.1.1.1	192.168.2.4	0x4c55	No error (0)	k8s-mutiny-privatea-b7eaf9f835-63806838.us-east-1.elb.amazonaws.com		54.82.52.52	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:24.679327011 CEST	1.1.1.1	192.168.2.4	0x4c55	No error (0)	k8s-mutiny-privatea-b7eaf9f835-63806838.us-east-1.elb.amazonaws.com		3.220.31.202	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:24.679327011 CEST	1.1.1.1	192.168.2.4	0x4c55	No error (0)	k8s-mutiny-privatea-b7eaf9f835-63806838.us-east-1.elb.amazonaws.com		3.92.89.122	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:24.679327011 CEST	1.1.1.1	192.168.2.4	0x4c55	No error (0)	k8s-mutiny-privatea-b7eaf9f835-63806838.us-east-1.elb.amazonaws.com		34.230.216.97	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:24.702438116 CEST	1.1.1.1	192.168.2.4	0xd10f	No error (0)	api-v2.mutinyhq.io	k8s-mutiny-privatea-b7eaf9f835-63806838.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:26.160680056 CEST	1.1.1.1	192.168.2.4	0x5bd1	No error (0)	googleads.g.doubleclick.net		172.217.165.130	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:26.160696030 CEST	1.1.1.1	192.168.2.4	0x1f34	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
May 2, 2024 16:33:26.633290052 CEST	1.1.1.1	192.168.2.4	0x3d29	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:26.633290052 CEST	1.1.1.1	192.168.2.4	0x3d29	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:26.633734941 CEST	1.1.1.1	192.168.2.4	0xab72	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:26.633734941 CEST	1.1.1.1	192.168.2.4	0xab72	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:27.051839113 CEST	1.1.1.1	192.168.2.4	0x4a20	No error (0)	sgtm.qualtrics.com		216.239.34.21	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.051839113 CEST	1.1.1.1	192.168.2.4	0x4a20	No error (0)	sgtm.qualtrics.com		216.239.38.21	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.051839113 CEST	1.1.1.1	192.168.2.4	0x4a20	No error (0)	sgtm.qualtrics.com		216.239.36.21	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.051839113 CEST	1.1.1.1	192.168.2.4	0x4a20	No error (0)	sgtm.qualtrics.com		216.239.32.21	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.291390896 CEST	1.1.1.1	192.168.2.4	0x8f77	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:27.291390896 CEST	1.1.1.1	192.168.2.4	0x8f77	No error (0)	spdc-global.pbp.gysm.yahoodns.net		50.17.194.92	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.291390896 CEST	1.1.1.1	192.168.2.4	0x8f77	No error (0)	spdc-global.pbp.gysm.yahoodns.net		54.88.71.74	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.291714907 CEST	1.1.1.1	192.168.2.4	0xca15	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:27.336697102 CEST	1.1.1.1	192.168.2.4	0xe54	No error (0)	542-fmf-412.mktoresp.com		192.28.147.68	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.476789951 CEST	1.1.1.1	192.168.2.4	0xb3b0	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:27.476789951 CEST	1.1.1.1	192.168.2.4	0xb3b0	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.476789951 CEST	1.1.1.1	192.168.2.4	0xb3b0	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.476854086 CEST	1.1.1.1	192.168.2.4	0x6991	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:27.496274948 CEST	1.1.1.1	192.168.2.4	0x6cf	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:27.496274948 CEST	1.1.1.1	192.168.2.4	0x6cf	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:27.497199059 CEST	1.1.1.1	192.168.2.4	0x4d28	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:27.497199059 CEST	1.1.1.1	192.168.2.4	0x4d28	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:27.573549032 CEST	1.1.1.1	192.168.2.4	0xad4a	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:27.573549032 CEST	1.1.1.1	192.168.2.4	0xad4a	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:27.573549032 CEST	1.1.1.1	192.168.2.4	0xad4a	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.573549032 CEST	1.1.1.1	192.168.2.4	0xad4a	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.573549032 CEST	1.1.1.1	192.168.2.4	0xad4a	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.573549032 CEST	1.1.1.1	192.168.2.4	0xad4a	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.573549032 CEST	1.1.1.1	192.168.2.4	0xad4a	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.573549032 CEST	1.1.1.1	192.168.2.4	0xad4a	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.573549032 CEST	1.1.1.1	192.168.2.4	0xad4a	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.573549032 CEST	1.1.1.1	192.168.2.4	0xad4a	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.573549032 CEST	1.1.1.1	192.168.2.4	0xad4a	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.573549032 CEST	1.1.1.1	192.168.2.4	0xad4a	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.573549032 CEST	1.1.1.1	192.168.2.4	0xad4a	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.573549032 CEST	1.1.1.1	192.168.2.4	0xad4a	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.574894905 CEST	1.1.1.1	192.168.2.4	0x3527	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:27.574954987 CEST	1.1.1.1	192.168.2.4	0x5bf8	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:27.575253010 CEST	1.1.1.1	192.168.2.4	0xdbc5	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:27.577334881 CEST	1.1.1.1	192.168.2.4	0x6ddd	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:27.717521906 CEST	1.1.1.1	192.168.2.4	0xfdac	No error (0)	epsilon.6sense.com		13.248.142.121	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.717521906 CEST	1.1.1.1	192.168.2.4	0xfdac	No error (0)	epsilon.6sense.com		76.223.9.105	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.734040976 CEST	1.1.1.1	192.168.2.4	0xe644	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:27.734040976 CEST	1.1.1.1	192.168.2.4	0xe644	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.734040976 CEST	1.1.1.1	192.168.2.4	0xe644	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.734040976 CEST	1.1.1.1	192.168.2.4	0xe644	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.734040976 CEST	1.1.1.1	192.168.2.4	0xe644	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.734615088 CEST	1.1.1.1	192.168.2.4	0xf2a7	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:27.737529993 CEST	1.1.1.1	192.168.2.4	0x6412	No error (0)	stats.g.doubleclick.net		142.250.31.156	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.737529993 CEST	1.1.1.1	192.168.2.4	0x6412	No error (0)	stats.g.doubleclick.net		142.250.31.155	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.742531061 CEST	1.1.1.1	192.168.2.4	0x24fc	No error (0)	sgtm.qualtrics.com		216.239.34.21	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.742531061 CEST	1.1.1.1	192.168.2.4	0x24fc	No error (0)	sgtm.qualtrics.com		216.239.32.21	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.742531061 CEST	1.1.1.1	192.168.2.4	0x24fc	No error (0)	sgtm.qualtrics.com		216.239.36.21	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.742531061 CEST	1.1.1.1	192.168.2.4	0x24fc	No error (0)	sgtm.qualtrics.com		216.239.38.21	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.794704914 CEST	1.1.1.1	192.168.2.4	0x58f7	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:27.795768023 CEST	1.1.1.1	192.168.2.4	0x93c3	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:27.803596020 CEST	1.1.1.1	192.168.2.4	0x5505	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:27.803596020 CEST	1.1.1.1	192.168.2.4	0x5505	No error (0)	spdc-global.pbp.gysm.yahoodns.net		50.17.194.92	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.803596020 CEST	1.1.1.1	192.168.2.4	0x5505	No error (0)	spdc-global.pbp.gysm.yahoodns.net		54.88.71.74	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:27.803947926 CEST	1.1.1.1	192.168.2.4	0x4f19	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:27.948749065 CEST	1.1.1.1	192.168.2.4	0x838b	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:27.948749065 CEST	1.1.1.1	192.168.2.4	0x838b	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:27.948982000 CEST	1.1.1.1	192.168.2.4	0x5564	No error (0)	www.linkedin.com	2-01-2c3e-0073.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:28.046858072 CEST	1.1.1.1	192.168.2.4	0xfc5b	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:28.046858072 CEST	1.1.1.1	192.168.2.4	0xfc5b	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:28.046858072 CEST	1.1.1.1	192.168.2.4	0xfc5b	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:28.046858072 CEST	1.1.1.1	192.168.2.4	0xfc5b	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:28.046858072 CEST	1.1.1.1	192.168.2.4	0xfc5b	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:28.046858072 CEST	1.1.1.1	192.168.2.4	0xfc5b	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:28.046858072 CEST	1.1.1.1	192.168.2.4	0xfc5b	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:28.046858072 CEST	1.1.1.1	192.168.2.4	0xfc5b	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:28.046858072 CEST	1.1.1.1	192.168.2.4	0xfc5b	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:28.046858072 CEST	1.1.1.1	192.168.2.4	0xfc5b	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:28.046858072 CEST	1.1.1.1	192.168.2.4	0xfc5b	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:28.046858072 CEST	1.1.1.1	192.168.2.4	0xfc5b	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:28.046858072 CEST	1.1.1.1	192.168.2.4	0xfc5b	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:28.046858072 CEST	1.1.1.1	192.168.2.4	0xfc5b	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:28.132808924 CEST	1.1.1.1	192.168.2.4	0x45b	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:28.135191917 CEST	1.1.1.1	192.168.2.4	0x5fcc	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:28.137743950 CEST	1.1.1.1	192.168.2.4	0x9327	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:28.138503075 CEST	1.1.1.1	192.168.2.4	0x66bc	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:28.360279083 CEST	1.1.1.1	192.168.2.4	0xa0c3	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:28.360975981 CEST	1.1.1.1	192.168.2.4	0xb53c	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:28.624178886 CEST	1.1.1.1	192.168.2.4	0xcd63	No error (0)	epsilon.6sense.com		13.248.142.121	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:28.624178886 CEST	1.1.1.1	192.168.2.4	0xcd63	No error (0)	epsilon.6sense.com		76.223.9.105	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:28.847157955 CEST	1.1.1.1	192.168.2.4	0x2116	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:28.847157955 CEST	1.1.1.1	192.168.2.4	0x2116	No error (0)	scontent.xx.fbcdn.net		31.13.71.7	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:28.847726107 CEST	1.1.1.1	192.168.2.4	0xefc	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:31.671001911 CEST	1.1.1.1	192.168.2.4	0xba34	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
May 2, 2024 16:33:31.671453953 CEST	1.1.1.1	192.168.2.4	0xd78c	No error (0)	ad.doubleclick.net		142.250.65.198	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:32.200680971 CEST	1.1.1.1	192.168.2.4	0xfe23	No error (0)	adservice.google.com			65	IN (0x0001)	false
May 2, 2024 16:33:32.200694084 CEST	1.1.1.1	192.168.2.4	0xa247	No error (0)	adservice.google.com		142.251.40.194	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:32.203293085 CEST	1.1.1.1	192.168.2.4	0x8ee	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
May 2, 2024 16:33:32.203625917 CEST	1.1.1.1	192.168.2.4	0x9261	No error (0)	ad.doubleclick.net		142.251.40.198	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:32.205977917 CEST	1.1.1.1	192.168.2.4	0x4d55	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
May 2, 2024 16:33:32.206017017 CEST	1.1.1.1	192.168.2.4	0xa609	No error (0)	ad.doubleclick.net		142.251.40.230	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:32.605278969 CEST	1.1.1.1	192.168.2.4	0x4ca7	No error (0)	www.google.com		142.250.81.228	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:32.605500937 CEST	1.1.1.1	192.168.2.4	0xcc89	No error (0)	www.google.com			65	IN (0x0001)	false
May 2, 2024 16:33:32.866544008 CEST	1.1.1.1	192.168.2.4	0x2206	No error (0)	adservice.google.com		142.251.40.130	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:32.866956949 CEST	1.1.1.1	192.168.2.4	0xef20	No error (0)	adservice.google.com			65	IN (0x0001)	false
May 2, 2024 16:33:33.359081030 CEST	1.1.1.1	192.168.2.4	0x40ff	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:33.359081030 CEST	1.1.1.1	192.168.2.4	0x40ff	No error (0)	star-mini.c10r.facebook.com		157.240.241.35	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:33.360460043 CEST	1.1.1.1	192.168.2.4	0xf7a6	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:33.809026003 CEST	1.1.1.1	192.168.2.4	0x64c9	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:33.809026003 CEST	1.1.1.1	192.168.2.4	0x64c9	No error (0)	star-mini.c10r.facebook.com		157.240.241.35	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:33.809864998 CEST	1.1.1.1	192.168.2.4	0x1ba1	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:34.294783115 CEST	1.1.1.1	192.168.2.4	0xc69a	No error (0)	zn725dkxtvxq847sl-qxm.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:34.294783115 CEST	1.1.1.1	192.168.2.4	0xc69a	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:34.299417019 CEST	1.1.1.1	192.168.2.4	0x1a3a	No error (0)	zn725dkxtvxq847sl-qxm.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:34.299417019 CEST	1.1.1.1	192.168.2.4	0x1a3a	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:34.809041023 CEST	1.1.1.1	192.168.2.4	0x98c2	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:34.809041023 CEST	1.1.1.1	192.168.2.4	0x98c2	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:34.809643030 CEST	1.1.1.1	192.168.2.4	0x4c99	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:34.809643030 CEST	1.1.1.1	192.168.2.4	0x4c99	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:34.904125929 CEST	1.1.1.1	192.168.2.4	0xf359	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:34.904125929 CEST	1.1.1.1	192.168.2.4	0xf359	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
May 2, 2024 16:33:37.954854012 CEST	1.1.1.1	192.168.2.4	0x45a2	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:37.954854012 CEST	1.1.1.1	192.168.2.4	0x45a2	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:37.956110954 CEST	1.1.1.1	192.168.2.4	0x67b0	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
May 2, 2024 16:33:37.956110954 CEST	1.1.1.1	192.168.2.4	0x67b0	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49764	152.7.106.52	80	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 2, 2024 16:32:51.923856974 CEST	433	OUT	GET / HTTP/1.1 Host: naturalearning.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 2, 2024 16:32:52.034703970 CEST	483	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 02 May 2024 14:32:51 GMT Server: Apache Location: https://naturalearning.org/ Content-Length: 235 Keep-Alive: timeout=2, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6e 61 74 75 72 61 6c 65 61 72 6e 69 6e 67 2e 6f 72 67 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://naturalearning.org/">here</a>.</p></body></html>

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	172.66.43.168	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:32 UTC	726	OUT	GET /link_click/Q8JO54uLM8_NZifI/8b475f29b654ee993e9d9f2d814b5501 HTTP/1.1 Host: campaign-statistics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:32 UTC	1128	IN	HTTP/1.1 302 Found Date: Thu, 02 May 2024 14:32:32 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://ncsu.qualtrics.com/jfe/form/SV_ezeLwH8MeEs4Xye?sender_campaign=bmP34R&sender_ctype=email&sender_customer=k8lWl35&utm_campaign=%27DCDEE Baseline Survey REMINDER%27&utm_medium=%27email%27&utm_source=%27newsletter%27 access-control-allow-origin: * access-control-allow-methods: * access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=63072000; includeSubdomains x-content-type-options: nosniff CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K9HCfWwK9BccgoeaJQBcNH%2BlUbyWeDuKH6%2FQXhEGlsFXQoLas7p94m8%2BkT4QU0TXxTGz9E56ULOnwjEgfRbbHumiq%2FTJbQ5s6viKWN8vDHFloXQRdIP%2BW%2Bdo4pn5WLPqrC1Q8lZ1zbCY%2BA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87d8b8a3ef9a6a53-EWR alt-svc: h3=":443"; ma=86400
2024-05-02 14:32:32 UTC	241	IN	Data Raw: 31 30 38 0d 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6e 63 73 75 2e 71 75 61 6c 74 72 69 63 73 2e 63 6f 6d 2f 6a 66 65 2f 66 6f 72 6d 2f 53 56 5f 65 7a 65 4c 77 48 38 4d 65 45 73 34 58 79 65 3f 73 65 6e 64 65 72 5f 63 61 6d 70 61 69 67 6e 3d 62 6d 50 33 34 52 26 61 6d 70 3b 73 65 6e 64 65 72 5f 63 74 79 70 65 3d 65 6d 61 69 6c 26 61 6d 70 3b 73 65 6e 64 65 72 5f 63 75 73 74 6f 6d 65 72 3d 6b 38 6c 57 6c 33 35 26 61 6d 70 3b 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 25 32 37 44 43 44 45 45 20 42 61 73 65 6c 69 6e 65 20 53 75 72 76 65 79 20 52 45 4d 49 4e 44 45 52 25 32 37 26 61 6d 70 3b 75 74 6d 5f 6d 65 64 69 75 6d 3d 25 32 37 65 6d 61 69 6c 25 32 37 26 61 6d 70 3b 75 74 6d 5f 73 6f 75 72 63 65 3d 25 32 Data Ascii: 108<a href="https://ncsu.qualtrics.com/jfe/form/SV_ezeLwH8MeEs4Xye?sender_campaign=bmP34R&sender_ctype=email&sender_customer=k8lWl35&utm_campaign=%27DCDEE Baseline Survey REMINDER%27&utm_medium=%27email%27&utm_source=%2
2024-05-02 14:32:32 UTC	30	IN	Data Raw: 37 6e 65 77 73 6c 65 74 74 65 72 25 32 37 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a 0d 0a Data Ascii: 7newsletter%27">Found</a>.
2024-05-02 14:32:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:36 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-02 14:32:36 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=39891 Date: Thu, 02 May 2024 14:32:36 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49748	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:37 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-02 14:32:37 UTC	455	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 Cache-Control: public, max-age=59390 Date: Thu, 02 May 2024 14:32:37 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-02 14:32:37 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49766	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:52 UTC	641	OUT	GET / HTTP/1.1 Host: naturalearning.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:52 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:52 GMT Server: Apache Cache-Control: no-cache WPO-Cache-Status: cached Last-Modified: Thu, 02 May 2024 14:10:28 GMT Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-05-02 14:32:52 UTC	7936	IN	Data Raw: 32 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6e 61 74 75 72 61 6c 65 61 72 6e 69 6e 67 2e 6f 72 67 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 Data Ascii: 2000<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><link rel="pingback" href="https://naturalearning.org/xmlrpc.php" /><script type="text/javascript">document.documentEle
2024-05-02 14:32:52 UTC	262	IN	Data Raw: 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 6c 61 74 6f 2f 76 32 34 2f 53 36 75 5f 77 34 42 4d 55 54 50 48 6a 78 73 49 35 77 71 5f 46 51 66 72 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4c 61 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 6c 61 74 6f 2f 76 32 34 2f 53 36 75 5f 77 34 42 4d 55 54 50 48 6a 78 73 49 33 77 69 5f 46 51 66 72 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 27 Data Ascii: ttps://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI5wq_FQfr.woff) format('woff');}@font-face {font-family: 'Lato';font-style: italic;font-weight: 900;font-display: swap;src: url(https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI3wi_FQfr.woff) format('
2024-05-02 14:32:52 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-02 14:32:53 UTC	8192	IN	Data Raw: 32 30 30 30 0d 0a 7d 40 66 6f 6e 74 2d 66 61 63 65 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4c 61 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 6c 61 74 6f 2f 76 32 34 2f 53 36 75 38 77 34 42 4d 55 54 50 48 68 33 30 41 55 69 2d 73 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4c 61 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 66 6f 6e 74 Data Ascii: 2000}@font-face {font-family: 'Lato';font-style: normal;font-weight: 100;font-display: swap;src: url(https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHh30AUi-s.woff) format('woff');}@font-face {font-family: 'Lato';font-style: normal;font-weight: 300;font
2024-05-02 14:32:53 UTC	6	IN	Data Raw: 77 61 70 3b 73 72 Data Ascii: wap;sr
2024-05-02 14:32:53 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-02 14:32:53 UTC	8192	IN	Data Raw: 32 30 30 30 0d 0a 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 70 6f 70 70 69 6e 73 2f 76 32 31 2f 70 78 69 41 79 70 38 6b 76 38 4a 48 67 46 56 72 4a 4a 4c 6d 45 30 74 4d 4d 50 49 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 50 6f 70 70 69 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 70 6f 70 70 69 6e 73 2f 76 32 31 2f 70 78 69 44 79 70 38 6b 76 38 4a Data Ascii: 2000c: url(https://fonts.gstatic.com/s/poppins/v21/pxiAyp8kv8JHgFVrJJLmE0tMMPI.woff2) format('woff2');}@font-face {font-family: 'Poppins';font-style: italic;font-weight: 200;font-display: swap;src: url(https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8J
2024-05-02 14:32:53 UTC	6	IN	Data Raw: 65 6e 74 2d 2d 6c Data Ascii: ent--l
2024-05-02 14:32:53 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-02 14:32:53 UTC	8192	IN	Data Raw: 32 30 30 30 0d 0a 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 61 28 32 35 35 2c 31 30 35 2c 30 2c 31 29 20 30 25 2c 72 67 62 28 32 30 37 2c 34 36 2c 34 36 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 76 65 72 79 2d 6c 69 67 68 74 2d 67 72 61 79 2d 74 6f 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 33 38 2c 32 33 38 2c 32 33 38 29 20 30 25 2c 72 67 62 28 31 36 39 2c 31 38 34 2c 31 39 35 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 Data Ascii: 2000uminous-vivid-orange-to-vivid-red: linear-gradient(135deg,rgba(255,105,0,1) 0%,rgb(207,46,46) 100%);--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%);--wp--preset--gradient

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49768	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:53 UTC	602	OUT	GET /wp-content/plugins/dg-blog-carousel/styles/swiper.min.css?ver=6.5.2 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:53 UTC	206	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:53 GMT Server: Apache Last-Modified: Thu, 19 Nov 2020 00:56:09 GMT Accept-Ranges: bytes Content-Length: 19792 Connection: close Content-Type: text/css
2024-05-02 14:32:53 UTC	7986	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 53 77 69 70 65 72 20 34 2e 35 2e 30 0d 0a 20 2a 20 4d 6f 73 74 20 6d 6f 64 65 72 6e 20 6d 6f 62 69 6c 65 20 74 6f 75 63 68 20 73 6c 69 64 65 72 20 61 6e 64 20 66 72 61 6d 65 77 6f 72 6b 20 77 69 74 68 20 68 61 72 64 77 61 72 65 20 61 63 63 65 6c 65 72 61 74 65 64 20 74 72 61 6e 73 69 74 69 6f 6e 73 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 64 61 6e 67 65 72 6f 2e 75 73 2f 73 77 69 70 65 72 2f 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2d 32 30 31 39 20 56 6c 61 64 69 6d 69 72 20 4b 68 61 72 6c 61 6d 70 69 64 69 0d 0a 20 2a 0d 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 0d 0a 20 2a 0d 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 6f 6e 3a 20 46 65 Data Ascii: /** * Swiper 4.5.0 * Most modern mobile touch slider and framework with hardware accelerated transitions * http://www.idangero.us/swiper/ * * Copyright 2014-2019 Vladimir Kharlampidi * * Released under the MIT License * * Released on: Fe
2024-05-02 14:32:53 UTC	8000	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 2d 64 79 6e 61 6d 69 63 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 2d 61 63 74 69 76 65 2d 6d 61 69 6e 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 2d 64 79 6e 61 6d 69 63 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 2d 61 63 74 69 76 65 2d 70 72 65 76 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c Data Ascii: ransform:scale(1)}.swiper-pagination-bullets-dynamic .swiper-pagination-bullet-active-main{-webkit-transform:scale(1);-ms-transform:scale(1);transform:scale(1)}.swiper-pagination-bullets-dynamic .swiper-pagination-bullet-active-prev{-webkit-transform:scal
2024-05-02 14:32:53 UTC	3806	IN	Data Raw: 25 33 45 25 33 43 75 73 65 25 32 30 78 6c 69 6e 6b 25 33 41 68 72 65 66 25 33 44 27 25 32 33 6c 27 25 32 30 6f 70 61 63 69 74 79 25 33 44 27 2e 32 37 27 25 32 30 74 72 61 6e 73 66 6f 72 6d 25 33 44 27 72 6f 74 61 74 65 28 36 30 25 32 30 36 30 25 32 43 36 30 29 27 25 32 46 25 33 45 25 33 43 75 73 65 25 32 30 78 6c 69 6e 6b 25 33 41 68 72 65 66 25 33 44 27 25 32 33 6c 27 25 32 30 6f 70 61 63 69 74 79 25 33 44 27 2e 32 37 27 25 32 30 74 72 61 6e 73 66 6f 72 6d 25 33 44 27 72 6f 74 61 74 65 28 39 30 25 32 30 36 30 25 32 43 36 30 29 27 25 32 46 25 33 45 25 33 43 75 73 65 25 32 30 78 6c 69 6e 6b 25 33 41 68 72 65 66 25 33 44 27 25 32 33 6c 27 25 32 30 6f 70 61 63 69 74 79 25 33 44 27 2e 32 37 27 25 32 30 74 72 61 6e 73 66 6f 72 6d 25 33 44 27 72 6f 74 61 74 65 Data Ascii: %3E%3Cuse%20xlink%3Ahref%3D'%23l'%20opacity%3D'.27'%20transform%3D'rotate(60%2060%2C60)'%2F%3E%3Cuse%20xlink%3Ahref%3D'%23l'%20opacity%3D'.27'%20transform%3D'rotate(90%2060%2C60)'%2F%3E%3Cuse%20xlink%3Ahref%3D'%23l'%20opacity%3D'.27'%20transform%3D'rotate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49767	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:53 UTC	604	OUT	GET /wp-content/plugins/dg-carousel/styles/light-box-styles.css?ver=2.0.26 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:53 UTC	205	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:53 GMT Server: Apache Last-Modified: Wed, 07 Sep 2022 13:43:26 GMT Accept-Ranges: bytes Content-Length: 1654 Connection: close Content-Type: text/css
2024-05-02 14:32:53 UTC	1654	IN	Data Raw: 2f 2a 20 4c 69 67 68 74 20 42 6f 78 20 46 65 61 74 75 72 65 20 2a 2f 0d 0a 2e 64 67 2d 63 61 72 6f 75 73 65 6c 2d 6c 69 67 68 74 62 6f 78 20 7b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 2e 33 73 20 65 61 73 65 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 30 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 64 67 2d 63 61 72 6f 75 73 65 6c 2d 6c 69 67 68 74 62 6f 78 2e 6f 70 65 6e 20 7b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 Data Ascii: /* Light Box Feature */.dg-carousel-lightbox { opacity: 0; transition: all .3s ease; width: 0; height: 0; display: none; } .dg-carousel-lightbox.open { opacity: 1; width: auto; height: auto; position: f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49771	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:53 UTC	625	OUT	GET /wp-content/plugins/divi-booster/core/fixes/126-customizer-social-icons/icons.css?ver=3.8.5 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:53 UTC	205	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:53 GMT Server: Apache Last-Modified: Thu, 12 May 2022 01:43:24 GMT Accept-Ranges: bytes Content-Length: 1193 Connection: close Content-Type: text/css
2024-05-02 14:32:53 UTC	1193	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0d 0a 0d 0a 2f 2a 20 3d 3d 3d 20 44 69 76 69 2d 73 70 65 63 69 66 69 63 20 73 74 79 6c 65 73 20 3d 3d 3d 20 2a 2f 0d 0a 0d 0a 2f 2a 20 46 6f 6e 74 20 2a 2f 0d 0a 2e 65 74 2d 73 6f 63 69 61 6c 2d 69 63 6f 6e 20 61 2e 73 6f 63 69 63 6f 6e 3a 62 65 66 6f 72 65 20 7b 20 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 73 6f 63 69 63 6f 6e 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 0d 0a 7d 0d 0a 2e 65 74 2d 73 6f 63 69 61 6c 2d 69 63 6f 6e 20 61 2e 64 69 76 69 2d 62 6f 6f 73 74 65 72 2d 69 63 6f 6e 73 3a 62 65 66 6f 72 65 20 7b 20 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 64 69 76 69 2d 62 6f 6f 73 74 65 72 2d 69 63 6f 6e 73 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 0d 0a 20 20 20 20 63 6f 6c 6f 72 Data Ascii: @charset "UTF-8";/* === Divi-specific styles === // Font */.et-social-icon a.socicon:before { font-family: "socicon" !important; }.et-social-icon a.divi-booster-icons:before { font-family: "divi-booster-icons" !important; color

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49770	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:53 UTC	605	OUT	GET /wp-content/plugins/divi-booster/core/icons/socicon/style.css?ver=3.8.5 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:53 UTC	206	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:53 GMT Server: Apache Last-Modified: Thu, 12 May 2022 01:43:24 GMT Accept-Ranges: bytes Content-Length: 15655 Connection: close Content-Type: text/css
2024-05-02 14:32:53 UTC	7986	IN	Data Raw: 5b 63 6c 61 73 73 5e 3d 22 73 6f 63 69 63 6f 6e 2d 22 5d 2c 20 5b 63 6c 61 73 73 2a 3d 22 20 73 6f 63 69 63 6f 6e 2d 22 5d 20 7b 0d 0a 20 20 2f 2a 20 75 73 65 20 21 69 6d 70 6f 72 74 61 6e 74 20 74 6f 20 70 72 65 76 65 6e 74 20 69 73 73 75 65 73 20 77 69 74 68 20 62 72 6f 77 73 65 72 20 65 78 74 65 6e 73 69 6f 6e 73 20 74 68 61 74 20 63 68 61 6e 67 65 20 66 6f 6e 74 73 20 2a 2f 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 6f 63 69 63 6f 6e 27 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 73 70 65 61 6b 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a Data Ascii: [class^="socicon-"], [class=" socicon-"] { / use !important to prevent issues with browser extensions that change fonts */ font-family: 'Socicon' !important; speak: none; font-style: normal; font-weight: normal; font-variant: normal;
2024-05-02 14:32:53 UTC	7669	IN	Data Raw: 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 31 34 22 3b 0d 0a 7d 0d 0a 2e 73 6f 63 69 63 6f 6e 2d 63 6f 64 65 72 77 61 6c 6c 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 31 35 22 3b 0d 0a 7d 0d 0a 2e 73 6f 63 69 63 6f 6e 2d 63 75 72 73 65 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 31 36 22 3b 0d 0a 7d 0d 0a 2e 73 6f 63 69 63 6f 6e 2d 64 61 69 6c 79 6d 6f 74 69 6f 6e 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 31 37 22 3b 0d 0a 7d 0d 0a 2e 73 6f 63 69 63 6f 6e 2d 64 65 65 7a 65 72 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 31 38 22 3b 0d 0a 7d 0d 0a 2e 73 6f 63 69 63 6f 6e 2d 64 65 6c 69 63 69 6f 75 73 3a 62 Data Ascii: { content: "\e014";}.socicon-coderwall:before { content: "\e015";}.socicon-curse:before { content: "\e016";}.socicon-dailymotion:before { content: "\e017";}.socicon-deezer:before { content: "\e018";}.socicon-delicious:b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49769	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:53 UTC	624	OUT	GET /wp-content/plugins/divi-booster/core/icons/divi-booster-icons/icomoon/style.css?ver=3.8.5 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:53 UTC	205	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:53 GMT Server: Apache Last-Modified: Thu, 12 May 2022 01:43:24 GMT Accept-Ranges: bytes Content-Length: 1076 Connection: close Content-Type: text/css
2024-05-02 14:32:53 UTC	1076	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 64 69 76 69 2d 62 6f 6f 73 74 65 72 2d 69 63 6f 6e 73 27 3b 0a 20 20 73 72 63 3a 20 20 75 72 6c 28 27 66 6f 6e 74 73 2f 64 69 76 69 2d 62 6f 6f 73 74 65 72 2d 69 63 6f 6e 73 2e 65 6f 74 3f 37 6f 37 35 72 6c 27 29 3b 0a 20 20 73 72 63 3a 20 20 75 72 6c 28 27 66 6f 6e 74 73 2f 64 69 76 69 2d 62 6f 6f 73 74 65 72 2d 69 63 6f 6e 73 2e 65 6f 74 3f 37 6f 37 35 72 6c 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 0a 20 20 20 20 75 72 6c 28 27 66 6f 6e 74 73 2f 64 69 76 69 2d 62 6f 6f 73 74 65 72 2d 69 63 6f 6e 73 2e 74 74 66 3f 37 6f 37 35 72 6c 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 0a Data Ascii: @font-face { font-family: 'divi-booster-icons'; src: url('fonts/divi-booster-icons.eot?7o75rl'); src: url('fonts/divi-booster-icons.eot?7o75rl#iefix') format('embedded-opentype'), url('fonts/divi-booster-icons.ttf?7o75rl') format('truetype'),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49773	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:57 UTC	588	OUT	GET /wp-content/uploads/wtfdivi/wp_head.css?ver=1635256086 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:57 UTC	205	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:57 GMT Server: Apache Last-Modified: Thu, 29 Feb 2024 19:22:48 GMT Accept-Ranges: bytes Content-Length: 1645 Connection: close Content-Type: text/css
2024-05-02 14:32:57 UTC	1645	IN	Data Raw: 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 38 31 70 78 29 7b 2e 65 74 5f 68 65 61 64 65 72 5f 73 74 79 6c 65 5f 6c 65 66 74 20 23 65 74 5f 74 6f 70 5f 73 65 61 72 63 68 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 72 69 67 68 74 3a 30 7d 2e 65 74 5f 68 65 61 64 65 72 5f 73 74 79 6c 65 5f 6c 65 66 74 20 23 65 74 2d 74 6f 70 2d 6e 61 76 69 67 61 74 69 6f 6e 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 65 74 5f 68 65 61 64 65 72 5f 73 74 79 6c 65 5f 63 65 6e 74 65 72 65 64 20 23 65 74 5f 74 6f 70 5f 73 65 61 72 63 68 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 20 21 69 6d 70 6f 72 74 61 6e 74 Data Ascii: @media only screen and (min-width:981px){.et_header_style_left #et_top_search{position:absolute !important;right:0}.et_header_style_left #et-top-navigation{padding-right:40px !important}.et_header_style_centered #et_top_search{position:absolute !important

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49775	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:57 UTC	601	OUT	GET /wp-content/plugins/ajax-search-lite/css/style.basic.css?ver=4.11.5 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:57 UTC	206	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:57 GMT Server: Apache Last-Modified: Tue, 23 Apr 2024 13:08:49 GMT Accept-Ranges: bytes Content-Length: 19729 Connection: close Content-Type: text/css
2024-05-02 14:32:57 UTC	7986	IN	Data Raw: 40 6b 65 79 66 72 61 6d 65 73 20 61 73 6c 41 6e 46 61 64 65 49 6e 44 72 6f 70 20 7b 0d 0a 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 20 2d 35 30 70 78 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 31 30 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 20 30 29 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 61 73 6c 41 6e 46 61 64 65 49 6e 44 72 6f 70 20 7b 0d 0a 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a Data Ascii: @keyframes aslAnFadeInDrop { 0% { opacity: 0; transform: translate(0, -50px); } 100% { opacity: 1; transform: translate(0, 0); }}@-webkit-keyframes aslAnFadeInDrop { 0% { opacity:
2024-05-02 14:32:57 UTC	8000	IN	Data Raw: 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 64 69 76 2e 61 73 6c 5f 6d 20 2e 70 72 6f 62 6f 78 20 64 69 76 2e 61 73 6c 5f 6c 6f 61 64 65 72 2d 69 6e 6e 65 72 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 7d 0d 0a 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 65 2d 73 69 6d 70 6c 65 20 7b 0d 0a 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 Data Ascii: enter;}div.asl_m .probox div.asl_loader-inner { width: 100%; margin: 0 auto; text-align: center; height: 100%;}@-webkit-keyframes rotate-simple { 0% { -webkit-transform: rotate(0deg); transform: rotat
2024-05-02 14:32:57 UTC	3743	IN	Data Raw: 63 72 6f 6c 6c 62 61 72 2d 74 68 75 6d 62 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 64 69 76 2e 61 73 6c 5f 72 2e 76 65 72 74 69 63 61 6c 3a 68 6f 76 65 72 20 2e 72 65 73 75 6c 74 73 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 68 75 6d 62 2c 0d 0a 64 69 76 2e 61 73 6c 5f 73 2e 73 65 61 72 63 68 73 65 74 74 69 6e 67 73 3a 68 6f 76 65 72 20 2e 61 73 6c 5f 73 65 74 74 5f 73 63 72 6f 6c 6c 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 68 75 6d 62 20 7b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 31 32 70 78 20 31 32 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 35 29 3b 0d 0a 7d 0d 0a 40 6d 65 64 69 61 20 28 68 6f 76 65 72 3a 20 6e Data Ascii: crollbar-thumb { border: none;}div.asl_r.vertical:hover .results::-webkit-scrollbar-thumb,div.asl_s.searchsettings:hover .asl_sett_scroll::-webkit-scrollbar-thumb { box-shadow: inset 0 0 12px 12px rgba(0, 0, 0, 0.5);}@media (hover: n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49776	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:57 UTC	607	OUT	GET /wp-content/plugins/ajax-search-lite/css/style-curvy-black.css?ver=4.11.5 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:57 UTC	205	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:57 GMT Server: Apache Last-Modified: Tue, 23 Apr 2024 13:08:49 GMT Accept-Ranges: bytes Content-Length: 6457 Connection: close Content-Type: text/css
2024-05-02 14:32:57 UTC	6457	IN	Data Raw: 64 69 76 2e 61 73 6c 5f 77 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 6f 72 64 65 72 3a 30 20 73 6f 6c 69 64 20 23 62 35 62 35 62 35 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 30 20 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 7d 23 61 6a 61 78 73 65 61 72 63 68 6c 69 74 65 31 20 2e 70 72 6f 62 6f 78 2c 64 69 76 2e 61 73 6c 5f 77 20 2e 70 72 6f 62 6f 78 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 38 70 78 3b 68 65 69 67 68 74 3a 32 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 Data Ascii: div.asl_w{width:100%;height:auto;border-radius:5px;background-color:transparent;overflow:hidden;border:0 solid #b5b5b5;border-radius:0 0 0 0;box-shadow:none;}#ajaxsearchlite1 .probox,div.asl_w .probox{margin:0;padding:8px;height:28px;background-color:#fff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49777	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:57 UTC	604	OUT	GET /wp-content/et-cache/1/1/39/et-divi-dynamic-39-late.css?ver=1714400823 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:57 UTC	206	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:57 GMT Server: Apache Last-Modified: Mon, 29 Apr 2024 14:36:42 GMT Accept-Ranges: bytes Content-Length: 24312 Connection: close Content-Type: text/css
2024-05-02 14:32:57 UTC	7986	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 45 54 6d 6f 64 75 6c 65 73 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 73 72 63 3a 75 72 6c 28 2f 2f 6e 61 74 75 72 61 6c 65 61 72 6e 69 6e 67 2e 6f 72 67 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 44 69 76 69 2f 63 6f 72 65 2f 61 64 6d 69 6e 2f 66 6f 6e 74 73 2f 6d 6f 64 75 6c 65 73 2f 61 6c 6c 2f 6d 6f 64 75 6c 65 73 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 2f 2f 6e 61 74 75 72 61 6c 65 61 72 6e 69 6e 67 2e 6f 72 67 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 44 69 76 69 2f 63 6f 72 65 2f 61 64 6d 69 6e 2f 66 6f 6e 74 73 2f 6d 6f 64 75 6c 65 73 2f 61 6c 6c 2f 6d 6f 64 75 6c 65 73 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 22 Data Ascii: @font-face{font-family:ETmodules;font-display:block;src:url(//naturalearning.org/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.eot);src:url(//naturalearning.org/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.eot?#iefix) format("
2024-05-02 14:32:57 UTC	8000	IN	Data Raw: 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 20 2e 65 74 5f 70 62 5f 66 69 6c 74 65 72 61 62 6c 65 5f 70 6f 72 74 66 6f 6c 69 6f 20 2e 65 74 5f 70 62 5f 70 6f 72 74 66 6f 6c 69 6f 5f 66 69 6c 74 65 72 73 20 75 6c 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 20 2e 65 74 5f 70 62 5f 66 69 6c 74 65 72 61 62 6c 65 5f 70 6f 72 74 66 6f 6c 69 6f 20 2e 65 74 5f 70 62 5f 70 6f 72 74 66 6f 6c 69 6f 5f 66 69 6c 74 65 72 73 20 6c 69 7b 77 69 64 74 68 3a 35 30 25 7d 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 20 2e 65 74 5f 70 62 5f 66 69 6c 74 65 72 61 62 6c 65 5f 70 6f 72 74 66 6f 6c 69 6f 20 2e 65 74 5f 70 62 5f 70 6f 72 74 66 6f 6c 69 6f 5f 66 69 6c 74 65 72 73 20 6c 69 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 61 7b 62 6f 72 64 65 72 2d 72 61 64 Data Ascii: .et_pb_column .et_pb_filterable_portfolio .et_pb_portfolio_filters ul{width:100%}.et_pb_column .et_pb_filterable_portfolio .et_pb_portfolio_filters li{width:50%}.et_pb_column .et_pb_filterable_portfolio .et_pb_portfolio_filters li:first-child a{border-rad
2024-05-02 14:32:57 UTC	8000	IN	Data Raw: 63 6f 6c 75 6d 6e 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 36 20 2e 65 74 5f 70 62 5f 67 72 69 64 5f 69 74 65 6d 2c 2e 65 74 5f 70 62 5f 72 6f 77 5f 33 2d 35 5f 31 2d 35 5f 31 2d 35 3e 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 35 20 2e 65 74 5f 70 62 5f 67 72 69 64 5f 69 74 65 6d 2c 2e 65 74 5f 70 62 5f 72 6f 77 5f 34 63 6f 6c 3e 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 34 20 2e 65 74 5f 70 62 5f 67 72 69 64 5f 69 74 65 6d 2c 2e 65 74 5f 70 62 5f 72 6f 77 5f 35 63 6f 6c 3e 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 35 20 2e 65 74 5f 70 62 5f 67 72 69 64 5f 69 74 65 6d 2c 2e 65 74 5f 70 62 5f 72 6f 77 5f 36 63 6f 6c Data Ascii: column.et_pb_column_1_6 .et_pb_grid_item,.et_pb_row_3-5_1-5_1-5>.et_pb_column.et_pb_column_1_5 .et_pb_grid_item,.et_pb_row_4col>.et_pb_column.et_pb_column_1_4 .et_pb_grid_item,.et_pb_row_5col>.et_pb_column.et_pb_column_1_5 .et_pb_grid_item,.et_pb_row_6col
2024-05-02 14:32:57 UTC	326	IN	Data Raw: 6f 6e 65 20 2e 65 74 2d 70 62 2d 61 72 72 6f 77 2d 6e 65 78 74 2c 2e 65 74 5f 70 62 5f 62 67 5f 6c 61 79 6f 75 74 5f 64 61 72 6b 5f 70 68 6f 6e 65 20 2e 65 74 2d 70 62 2d 61 72 72 6f 77 2d 70 72 65 76 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 7d 2e 65 74 5f 6d 6f 62 69 6c 65 5f 64 65 76 69 63 65 20 2e 65 74 2d 70 62 2d 61 72 72 6f 77 2d 70 72 65 76 7b 6c 65 66 74 3a 32 32 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 2e 65 74 5f 6d 6f 62 69 6c 65 5f 64 65 76 69 63 65 20 2e 65 74 2d 70 62 2d 61 72 72 6f 77 2d 6e 65 78 74 7b 72 69 67 68 74 3a 32 32 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 37 70 78 29 7b 2e 65 74 5f 6d 6f 62 69 6c 65 5f 64 65 76 69 63 65 20 2e 65 74 2d 70 62 2d 61 72 72 6f 77 2d 70 72 65 76 7b 6c Data Ascii: one .et-pb-arrow-next,.et_pb_bg_layout_dark_phone .et-pb-arrow-prev{color:#fff}}.et_mobile_device .et-pb-arrow-prev{left:22px;opacity:1}.et_mobile_device .et-pb-arrow-next{right:22px;opacity:1}@media (max-width:767px){.et_mobile_device .et-pb-arrow-prev{l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49779	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:57 UTC	599	OUT	GET /wp-content/et-cache/1/1/39/et-divi-dynamic-39.css?ver=1714400823 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:57 UTC	206	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:57 GMT Server: Apache Last-Modified: Mon, 29 Apr 2024 14:27:03 GMT Accept-Ranges: bytes Content-Length: 73312 Connection: close Content-Type: text/css
2024-05-02 14:32:57 UTC	7986	IN	Data Raw: 2e 66 6f 6f 74 65 72 2d 77 69 64 67 65 74 20 68 34 2c 23 6d 61 69 6e 2d 66 6f 6f 74 65 72 20 2e 77 69 64 67 65 74 5f 62 6c 6f 63 6b 20 68 31 2c 23 6d 61 69 6e 2d 66 6f 6f 74 65 72 20 2e 77 69 64 67 65 74 5f 62 6c 6f 63 6b 20 68 32 2c 23 6d 61 69 6e 2d 66 6f 6f 74 65 72 20 2e 77 69 64 67 65 74 5f 62 6c 6f 63 6b 20 68 33 2c 23 6d 61 69 6e 2d 66 6f 6f 74 65 72 20 2e 77 69 64 67 65 74 5f 62 6c 6f 63 6b 20 68 34 2c 23 6d 61 69 6e 2d 66 6f 6f 74 65 72 20 2e 77 69 64 67 65 74 5f 62 6c 6f 63 6b 20 68 35 2c 23 6d 61 69 6e 2d 66 6f 6f 74 65 72 20 2e 77 69 64 67 65 74 5f 62 6c 6f 63 6b 20 68 36 7b 63 6f 6c 6f 72 3a 23 32 45 41 33 46 32 7d 2e 66 6f 6f 74 65 72 2d 77 69 64 67 65 74 20 6c 69 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 45 41 33 Data Ascii: .footer-widget h4,#main-footer .widget_block h1,#main-footer .widget_block h2,#main-footer .widget_block h3,#main-footer .widget_block h4,#main-footer .widget_block h5,#main-footer .widget_block h6{color:#2EA3F2}.footer-widget li:before{border-color:#2EA3
2024-05-02 14:32:57 UTC	8000	IN	Data Raw: 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 37 2e 38 35 33 25 7d 2e 65 74 5f 70 62 5f 67 75 74 74 65 72 73 32 2e 65 74 5f 70 62 5f 66 6f 6f 74 65 72 5f 63 6f 6c 75 6d 6e 73 5f 32 5f 35 5f 5f 33 5f 35 20 2e 66 6f 6f 74 65 72 2d 77 69 64 67 65 74 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 7b 77 69 64 74 68 3a 35 38 2e 38 25 7d 2e 65 74 5f 70 62 5f 67 75 74 74 65 72 73 32 2e 65 74 5f 70 62 5f 66 6f 6f 74 65 72 5f 63 6f 6c 75 6d 6e 73 5f 32 5f 35 5f 5f 33 5f 35 20 2e 66 6f 6f 74 65 72 2d 77 69 64 67 65 74 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 20 2e 66 77 69 64 67 65 74 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 2e 31 30 32 25 7d 2e 65 74 5f 70 62 5f 67 75 74 74 65 72 73 32 2e 65 74 5f 70 62 5f 66 6f 6f 74 65 72 5f 63 6f 6c 75 6d 6e 73 5f 31 5f 32 5f 5f 31 5f 36 20 Data Ascii: rgin-bottom:7.853%}.et_pb_gutters2.et_pb_footer_columns_2_5__3_5 .footer-widget:nth-child(2){width:58.8%}.et_pb_gutters2.et_pb_footer_columns_2_5__3_5 .footer-widget:nth-child(2) .fwidget{margin-bottom:5.102%}.et_pb_gutters2.et_pb_footer_columns_1_2__1_6
2024-05-02 14:32:57 UTC	8000	IN	Data Raw: 5f 31 5f 34 20 2e 65 74 5f 70 62 5f 62 6c 6f 67 5f 67 72 69 64 20 2e 63 6f 6c 75 6d 6e 2e 73 69 7a 65 2d 31 6f 66 31 2c 2e 65 74 5f 70 62 5f 72 6f 77 5f 34 63 6f 6c 3e 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 34 20 2e 65 74 5f 70 62 5f 62 6c 6f 67 5f 67 72 69 64 20 2e 63 6f 6c 75 6d 6e 2e 73 69 7a 65 2d 31 6f 66 32 2c 2e 65 74 5f 70 62 5f 72 6f 77 5f 35 63 6f 6c 3e 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 35 20 2e 65 74 5f 70 62 5f 62 6c 6f 67 5f 67 72 69 64 20 2e 63 6f 6c 75 6d 6e 2e 73 69 7a 65 2d 31 6f 66 31 2c 2e 65 74 5f 70 62 5f 72 6f 77 5f 35 63 6f 6c 3e 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 35 20 2e 65 74 5f Data Ascii: _1_4 .et_pb_blog_grid .column.size-1of1,.et_pb_row_4col>.et_pb_column.et_pb_column_1_4 .et_pb_blog_grid .column.size-1of2,.et_pb_row_5col>.et_pb_column.et_pb_column_1_5 .et_pb_blog_grid .column.size-1of1,.et_pb_row_5col>.et_pb_column.et_pb_column_1_5 .et_
2024-05-02 14:32:57 UTC	8000	IN	Data Raw: 6c 75 6d 6e 5f 31 5f 32 20 2e 65 74 5f 61 75 64 69 6f 5f 63 6f 6e 74 65 6e 74 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 32 20 2e 65 74 5f 6c 69 6e 6b 5f 63 6f 6e 74 65 6e 74 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 32 20 2e 65 74 5f 71 75 6f 74 65 5f 63 6f 6e 74 65 6e 74 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 33 5f 35 20 2e 65 74 5f 61 75 64 69 6f 5f 63 6f 6e 74 65 6e 74 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 33 5f 35 20 2e 65 74 5f 6c 69 6e 6b 5f 63 6f 6e 74 65 6e 74 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 33 5f 35 20 2e 65 74 5f 71 75 6f 74 65 5f 63 6f 6e 74 65 6e 74 7b 70 61 64 64 69 6e 67 3a 33 35 70 78 20 34 30 70 78 7d 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 32 20 2e 65 74 5f 71 75 6f 74 65 5f 63 6f 6e 74 Data Ascii: lumn_1_2 .et_audio_content,.et_pb_column_1_2 .et_link_content,.et_pb_column_1_2 .et_quote_content,.et_pb_column_3_5 .et_audio_content,.et_pb_column_3_5 .et_link_content,.et_pb_column_3_5 .et_quote_content{padding:35px 40px}.et_pb_column_1_2 .et_quote_cont
2024-05-02 14:32:57 UTC	8000	IN	Data Raw: 6e 6b 5f 6d 61 69 6e 5f 75 72 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 37 70 78 29 7b 2e 65 74 5f 61 75 64 69 6f 5f 63 6f 6e 74 65 6e 74 20 68 32 2c 2e 65 74 5f 6c 69 6e 6b 5f 63 6f 6e 74 65 6e 74 20 68 32 2c 2e 65 74 5f 71 75 6f 74 65 5f 63 6f 6e 74 65 6e 74 2c 2e 65 74 5f 71 75 6f 74 65 5f 63 6f 6e 74 65 6e 74 20 62 6c 6f 63 6b 71 75 6f 74 65 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 65 74 5f 61 75 64 69 6f 5f 63 6f 6e 74 65 6e 74 2c 2e 65 74 5f 6c 69 6e 6b 5f 63 6f 6e 74 65 6e 74 7b 70 61 64 64 69 6e 67 3a 33 35 70 78 20 32 30 Data Ascii: nk_main_url{font-size:18px!important}}@media (max-width:767px){.et_audio_content h2,.et_link_content h2,.et_quote_content,.et_quote_content blockquote p{font-size:20px!important;line-height:26px!important}.et_audio_content,.et_link_content{padding:35px 20
2024-05-02 14:32:58 UTC	8000	IN	Data Raw: 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6d 65 6a 73 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 76 6f 6c 75 6d 65 2d 73 6c 69 64 65 72 20 2e 6d 65 6a 73 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 76 6f 6c 75 6d 65 2d 68 61 6e 64 6c 65 2c 2e 65 74 5f 70 62 5f 74 65 78 74 5f 63 6f 6c 6f 72 5f 64 61 72 6b 20 2e 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6d 65 6a 73 2d 74 69 6d 65 2d 72 61 69 6c 20 2e 6d 65 6a 73 2d 74 69 6d 65 2d 68 61 6e 64 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 36 36 36 7d 2e 65 74 5f 70 62 5f 74 65 78 74 5f 63 6f 6c 6f 72 5f 64 61 72 6b 20 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6d 65 6a 73 2d 74 69 6d 65 20 73 70 61 6e 7b 63 6f 6c 6f 72 3a 23 39 39 39 7d 2e 65 74 5f 70 62 5f 63 6f 6c Data Ascii: mejs-controls .mejs-horizontal-volume-slider .mejs-horizontal-volume-handle,.et_pb_text_color_dark .mejs-controls .mejs-time-rail .mejs-time-handle{background:#666}.et_pb_text_color_dark .mejs-container .mejs-controls .mejs-time span{color:#999}.et_pb_col
2024-05-02 14:32:58 UTC	8000	IN	Data Raw: 6f 6c 6c 65 72 73 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 7a 2d 69 6e 64 65 78 3a 31 30 7d 2e 65 74 2d 70 62 2d 63 6f 6e 74 72 6f 6c 6c 65 72 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 35 29 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 2d 39 39 39 39 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 37 70 78 3b 77 69 64 74 68 3a 37 70 78 3b 68 65 69 67 68 74 3a 37 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 6f 70 61 63 69 74 Data Ascii: ollers{position:absolute;bottom:20px;left:0;width:100%;text-align:center;z-index:10}.et-pb-controllers a{display:inline-block;background-color:hsla(0,0%,100%,.5);text-indent:-9999px;border-radius:7px;width:7px;height:7px;margin-right:10px;padding:0;opacit
2024-05-02 14:32:58 UTC	8000	IN	Data Raw: 74 66 6f 6c 69 6f 20 2e 65 74 5f 70 62 5f 70 6f 72 74 66 6f 6c 69 6f 5f 66 69 6c 74 65 72 73 20 6c 69 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 34 20 2e 65 74 5f 70 62 5f 66 69 6c 74 65 72 61 62 6c 65 5f 70 6f 72 74 66 6f 6c 69 6f 20 2e 65 74 5f 70 62 5f 70 6f 72 74 66 6f 6c 69 6f 5f 66 69 6c 74 65 72 73 20 6c 69 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 35 20 2e 65 74 5f 70 62 5f 66 69 6c 74 65 72 61 62 6c 65 5f 70 6f 72 74 66 6f 6c 69 6f 20 2e 65 74 5f 70 62 5f 70 6f 72 74 66 6f 6c 69 6f 5f 66 69 6c 74 65 72 73 20 6c 69 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 36 20 2e 65 74 5f 70 62 5f 66 69 6c 74 65 72 61 62 6c 65 5f 70 6f 72 74 66 6f 6c 69 6f 20 2e 65 74 5f 70 62 5f 70 6f 72 74 66 6f 6c 69 6f 5f 66 69 6c 74 65 72 73 20 6c Data Ascii: tfolio .et_pb_portfolio_filters li,.et_pb_column_1_4 .et_pb_filterable_portfolio .et_pb_portfolio_filters li,.et_pb_column_1_5 .et_pb_filterable_portfolio .et_pb_portfolio_filters li,.et_pb_column_1_6 .et_pb_filterable_portfolio .et_pb_portfolio_filters l
2024-05-02 14:32:58 UTC	8000	IN	Data Raw: 63 74 69 6f 6e 5f 76 69 64 65 6f 20 2e 70 61 67 69 6e 61 74 69 6f 6e 2c 2e 65 74 5f 70 62 5f 70 6f 72 74 66 6f 6c 69 6f 5f 67 72 69 64 2e 65 74 5f 70 62 5f 73 65 63 74 69 6f 6e 5f 76 69 64 65 6f 20 2e 77 70 2d 70 61 67 65 6e 61 76 69 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 65 74 5f 70 62 5f 70 6f 72 74 66 6f 6c 69 6f 5f 69 74 65 6d 73 5f 77 72 61 70 70 65 72 2e 6e 6f 5f 70 61 67 69 6e 61 74 69 6f 6e 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 38 31 70 78 29 7b 2e 65 74 5f 70 62 5f 70 6f 72 74 66 6f 6c 69 6f 5f 67 72 69 64 20 2e 65 74 5f 70 62 5f 70 6f 72 74 66 6f 6c 69 6f 5f 69 74 65 6d 20 69 6d 67 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 65 74 5f 70 62 5f 70 6f 72 Data Ascii: ction_video .pagination,.et_pb_portfolio_grid.et_pb_section_video .wp-pagenavi{position:relative}.et_pb_portfolio_items_wrapper.no_pagination{border-bottom:none}@media (min-width:981px){.et_pb_portfolio_grid .et_pb_portfolio_item img{width:100%}.et_pb_por
2024-05-02 14:32:58 UTC	1326	IN	Data Raw: 62 5f 66 75 6c 6c 77 69 64 74 68 5f 70 6f 72 74 66 6f 6c 69 6f 20 2e 65 74 5f 70 62 5f 70 6f 72 74 66 6f 6c 69 6f 5f 69 6d 61 67 65 3a 68 6f 76 65 72 20 68 33 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 35 25 7d 2e 65 74 5f 70 62 5f 66 75 6c 6c 77 69 64 74 68 5f 70 6f 72 74 66 6f 6c 69 6f 3a 68 6f 76 65 72 20 2e 65 74 2d 70 62 2d 61 72 72 6f 77 2d 70 72 65 76 7b 6c 65 66 74 3a 32 32 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 2e 65 74 5f 70 62 5f 66 75 6c 6c 77 69 64 74 68 5f 70 6f 72 74 66 6f 6c 69 6f 3a 68 6f 76 65 72 20 2e 65 74 2d 70 62 2d 61 72 72 6f 77 2d 6e 65 78 74 7b 72 69 67 68 74 3a 32 32 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 2e 65 74 5f 70 62 5f 66 75 6c 6c 77 69 64 74 68 5f 70 6f 72 74 66 6f 6c 69 6f 20 2e 65 74 5f 70 62 5f 6e 6f 5f 72 65 73 75 6c 74 Data Ascii: b_fullwidth_portfolio .et_pb_portfolio_image:hover h3{margin-top:35%}.et_pb_fullwidth_portfolio:hover .et-pb-arrow-prev{left:22px;opacity:1}.et_pb_fullwidth_portfolio:hover .et-pb-arrow-next{right:22px;opacity:1}.et_pb_fullwidth_portfolio .et_pb_no_result

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49778	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:57 UTC	602	OUT	GET /wp-content/plugins/dg-blog-carousel/styles/style.min.css?ver=1.0.12 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:57 UTC	206	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:57 GMT Server: Apache Last-Modified: Thu, 19 Nov 2020 00:56:09 GMT Accept-Ranges: bytes Content-Length: 10769 Connection: close Content-Type: text/css
2024-05-02 14:32:57 UTC	7986	IN	Data Raw: 2e 65 74 2d 64 62 20 23 65 74 2d 62 6f 63 20 2e 65 74 2d 66 62 2d 6d 6f 64 75 6c 65 73 2d 6c 69 73 74 20 6c 69 2e 64 67 62 63 5f 62 6c 6f 67 5f 63 61 72 6f 75 73 65 6c 20 2e 65 74 2d 66 62 2d 69 63 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 37 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 37 70 78 7d 2e 65 74 2d 64 62 20 23 65 74 2d 62 6f 63 20 2e 65 74 2d 66 62 2d 6d 6f 64 75 6c 65 73 2d 6c 69 73 74 20 6c 69 2e 64 67 62 63 5f 62 6c 6f 67 5f 63 61 72 6f 75 73 65 6c 20 2e 65 74 2d 66 62 2d 69 63 6f 6e 20 73 76 67 7b 77 69 64 74 68 3a 31 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 31 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 65 74 2d 64 62 20 23 65 74 2d 62 6f 63 20 2e 65 74 2d 66 62 2d 6d 6f 64 75 6c 65 73 2d 6c 69 73 74 20 6c 69 Data Ascii: .et-db #et-boc .et-fb-modules-list li.dgbc_blog_carousel .et-fb-icon{padding-top:7px;padding-left:7px}.et-db #et-boc .et-fb-modules-list li.dgbc_blog_carousel .et-fb-icon svg{width:16px!important;height:16px!important}.et-db #et-boc .et-fb-modules-list li
2024-05-02 14:32:57 UTC	2783	IN	Data Raw: 6f 6e 2d 6e 65 78 74 7b 72 69 67 68 74 3a 30 3b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 33 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 33 73 7d 2e 64 67 62 63 5f 62 6c 6f 67 5f 63 61 72 6f 75 73 65 6c 20 2e 61 72 72 6f 77 2d 6f 75 74 73 69 64 65 2e 61 72 72 6f 77 2d 6f 6e 2d 68 6f 76 65 72 20 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 70 72 65 76 7b 6c 65 66 74 3a 30 3b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 33 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 Data Ascii: on-next{right:0;opacity:0;-webkit-transition-delay:.3s;-o-transition-delay:.3s;transition-delay:.3s}.dgbc_blog_carousel .arrow-outside.arrow-on-hover .swiper-button-prev{left:0;opacity:0;-webkit-transition-delay:.3s;-o-transition-delay:.3s;transition-dela

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49780	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:57 UTC	597	OUT	GET /wp-content/plugins/dg-carousel/styles/style.min.css?ver=2.0.26 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:57 UTC	206	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:57 GMT Server: Apache Last-Modified: Wed, 07 Sep 2022 13:43:26 GMT Accept-Ranges: bytes Content-Length: 20092 Connection: close Content-Type: text/css
2024-05-02 14:32:57 UTC	7986	IN	Data Raw: 2e 65 74 2d 64 62 20 23 65 74 2d 62 6f 63 20 2e 65 74 2d 66 62 2d 6d 6f 64 75 6c 65 73 2d 6c 69 73 74 20 6c 69 2e 64 69 63 61 5f 64 69 76 69 5f 63 61 72 6f 75 73 65 6c 20 2e 65 74 2d 66 62 2d 69 63 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 37 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 37 70 78 7d 2e 65 74 2d 64 62 20 23 65 74 2d 62 6f 63 20 2e 65 74 2d 66 62 2d 6d 6f 64 75 6c 65 73 2d 6c 69 73 74 20 6c 69 2e 64 69 63 61 5f 64 69 76 69 5f 63 61 72 6f 75 73 65 6c 20 2e 65 74 2d 66 62 2d 69 63 6f 6e 20 73 76 67 7b 77 69 64 74 68 3a 31 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 31 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 65 74 2d 64 62 20 23 65 74 2d 62 6f 63 20 2e 65 74 2d 66 62 2d 6d 6f 64 75 6c 65 73 2d 6c 69 73 74 20 6c 69 Data Ascii: .et-db #et-boc .et-fb-modules-list li.dica_divi_carousel .et-fb-icon{padding-top:7px;padding-left:7px}.et-db #et-boc .et-fb-modules-list li.dica_divi_carousel .et-fb-icon svg{width:16px!important;height:16px!important}.et-db #et-boc .et-fb-modules-list li
2024-05-02 14:32:58 UTC	8000	IN	Data Raw: 6f 6e 74 61 69 6e 65 72 20 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 70 72 65 76 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 35 33 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 35 33 70 78 3b 68 65 69 67 68 74 3a 35 33 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 2e 39 36 65 6d 3b 6c 65 66 74 3a 61 75 74 6f 3b 72 69 67 68 74 3a 61 75 74 6f 7d 2e 64 69 63 61 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 6e 65 78 74 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 34 73 20 65 61 73 65 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 6f 2d 74 Data Ascii: ontainer .swiper-button-prev{background-image:none!important;width:53px;font-size:53px;height:53px;background-color:#fff;margin-top:0;line-height:.96em;left:auto;right:auto}.dica-container .swiper-button-next{-webkit-transition:all .4s ease!important;-o-t
2024-05-02 14:32:58 UTC	4106	IN	Data Raw: 73 68 61 64 6f 77 3a 30 20 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 45 54 6d 6f 64 75 6c 65 73 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 73 70 65 61 6b 3a 6e 6f 6e 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 Data Ascii: shadow:0 0!important;font-family:ETmodules!important;display:block!important;font-weight:400;font-style:normal;font-variant:normal;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;line-height:1;text-transform:none;speak:none;content:""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49781	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:58 UTC	607	OUT	GET /wp-content/plugins/dp-portfolio-posts-pro/styles/style.min.css?ver=4.1.9 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:58 UTC	205	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:58 GMT Server: Apache Last-Modified: Wed, 05 Jul 2023 15:27:37 GMT Accept-Ranges: bytes Content-Length: 2971 Connection: close Content-Type: text/css
2024-05-02 14:32:58 UTC	2971	IN	Data Raw: 2e 65 74 5f 70 62 5f 66 75 6c 6c 77 69 64 74 68 5f 70 6f 72 74 66 6f 6c 69 6f 20 2e 65 74 5f 70 62 5f 70 6f 72 74 66 6f 6c 69 6f 5f 69 6d 61 67 65 2e 73 68 6f 77 5f 65 78 63 65 72 70 74 3a 68 6f 76 65 72 20 2e 65 74 5f 6f 76 65 72 6c 61 79 3a 62 65 66 6f 72 65 7b 74 6f 70 3a 31 30 25 7d 2e 65 74 5f 70 62 5f 66 75 6c 6c 77 69 64 74 68 5f 70 6f 72 74 66 6f 6c 69 6f 20 2e 65 74 5f 70 62 5f 70 6f 72 74 66 6f 6c 69 6f 5f 69 6d 61 67 65 2e 73 68 6f 77 5f 65 78 63 65 72 70 74 3a 68 6f 76 65 72 20 68 33 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 25 7d 2e 65 74 5f 70 62 5f 66 75 6c 6c 77 69 64 74 68 5f 70 6f 72 74 66 6f 6c 69 6f 20 2e 65 74 5f 70 62 5f 70 6f 72 74 66 6f 6c 69 6f 5f 69 6d 61 67 65 2e 73 68 6f 77 5f 65 78 63 65 72 70 74 20 2e 70 6f 73 74 2d 65 78 63 Data Ascii: .et_pb_fullwidth_portfolio .et_pb_portfolio_image.show_excerpt:hover .et_overlay:before{top:10%}.et_pb_fullwidth_portfolio .et_pb_portfolio_image.show_excerpt:hover h3{margin-top:15%}.et_pb_fullwidth_portfolio .et_pb_portfolio_image.show_excerpt .post-exc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49782	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:58 UTC	638	OUT	GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/css/magnific_popup.css?ver=4.25.0 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:58 UTC	205	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:58 GMT Server: Apache Last-Modified: Sat, 20 Apr 2024 13:43:59 GMT Accept-Ranges: bytes Content-Length: 6470 Connection: close Content-Type: text/css
2024-05-02 14:32:58 UTC	6470	IN	Data Raw: 2e 6d 66 70 2d 77 72 61 70 20 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 20 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 66 70 2d 77 72 61 70 20 2e 6d 66 70 2d 61 72 72 6f 77 3a 61 63 74 69 76 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 7d 2e 6d 66 70 2d 77 72 61 70 20 2e 6d 66 70 2d 63 6c 6f 73 65 3a 61 63 74 69 76 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 31 30 70 78 7d 2e 6d 66 70 2d 61 72 72 6f 77 2d 6c 65 66 74 20 2e 6d 66 70 2d 61 2c 2e 6d 66 70 2d 61 72 72 6f 77 2d 6c 65 66 74 3a 61 66 74 65 72 2c 2e 6d 66 70 2d 61 72 72 6f 77 2d 72 69 67 68 74 20 2e 6d 66 70 2d 61 2c 2e 6d 66 70 2d Data Ascii: .mfp-wrap .mfp-container button:hover{background:transparent!important}.mfp-wrap .mfp-arrow:active{position:absolute;top:50%}.mfp-wrap .mfp-close:active{position:absolute;top:-10px}.mfp-arrow-left .mfp-a,.mfp-arrow-left:after,.mfp-arrow-right .mfp-a,.mfp-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49783	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:58 UTC	598	OUT	GET /wp-content/plugins/divi_cpt_layout_injector/style.css?ver=6.5.2 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:58 UTC	204	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:58 GMT Server: Apache Last-Modified: Sat, 03 Jun 2017 17:31:47 GMT Accept-Ranges: bytes Content-Length: 621 Connection: close Content-Type: text/css
2024-05-02 14:32:58 UTC	621	IN	Data Raw: 2e 65 74 5f 70 62 5f 63 70 74 5f 6c 69 73 74 5f 77 72 61 70 70 65 72 20 2e 65 74 5f 70 62 5f 70 6f 73 74 5f 74 79 70 65 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 7d 0a 0a 2e 65 74 5f 70 62 5f 63 70 74 5f 6c 69 73 74 5f 77 72 61 70 70 65 72 20 2e 65 74 5f 70 62 5f 70 6f 73 74 20 68 32 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 65 6d 3b 0a 7d 0a 0a 2e 65 74 5f 70 62 5f 63 70 74 5f 6c 69 73 74 5f 77 72 61 70 70 65 72 20 2e 65 74 5f 70 62 5f 63 70 74 5f 6c 69 73 74 5f 69 6d 61 67 65 5f 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 32 65 6d 3b 0a 7d 0a 0a 2e 65 74 5f 70 62 5f 63 70 Data Ascii: .et_pb_cpt_list_wrapper .et_pb_post_type { width: 100%; float: left;}.et_pb_cpt_list_wrapper .et_pb_post h2 { margin-top: 0em;}.et_pb_cpt_list_wrapper .et_pb_cpt_list_image_container { float: left; margin-right: 2em;}.et_pb_cp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49784	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:58 UTC	584	OUT	GET /wp-content/themes/Divi-child/style.css?ver=4.25.0 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:58 UTC	206	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:58 GMT Server: Apache Last-Modified: Tue, 09 Apr 2024 20:26:05 GMT Accept-Ranges: bytes Content-Length: 36802 Connection: close Content-Type: text/css
2024-05-02 14:32:58 UTC	7986	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 2f 2a 20 43 53 53 20 44 6f 63 75 6d 65 6e 74 20 2a 2f 0a 2f 2a 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 44 69 76 69 20 43 68 69 6c 64 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 43 68 69 6c 64 20 74 68 65 6d 65 20 6f 66 20 44 69 76 69 20 66 6f 72 20 4e 43 53 55 20 4e 61 74 75 72 61 6c 20 4c 65 61 72 6e 69 6e 67 20 49 6e 69 74 69 61 74 69 76 65 0a 54 65 6d 70 6c 61 74 65 3a 20 44 69 76 69 0a 2a 2f 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 4e 4c 49 20 43 75 73 74 6f 6d 20 53 74 79 6c 65 73 68 65 65 74 5f 55 70 64 61 74 65 64 20 32 2d 32 37 2d 32 30 32 34 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 2f 2a 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 47 4c 4f 42 41 4c 20 53 54 59 4c 45 53 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 2a 2f Data Ascii: @charset "UTF-8";/* CSS Document //Theme Name: Divi ChildDescription: Child theme of Divi for NCSU Natural Learning InitiativeTemplate: Divi//-----------NLI Custom Stylesheet_Updated 2-27-2024-----------//___________GLOBAL STYLES__________*/
2024-05-02 14:32:58 UTC	8000	IN	Data Raw: 6f 74 28 23 70 6f 73 74 2d 31 35 37 35 29 20 2e 65 74 5f 70 62 5f 73 65 63 74 69 6f 6e 5f 30 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 62 6f 64 79 3a 6e 6f 74 28 2e 73 65 61 72 63 68 29 3a 6e 6f 74 28 2e 68 6f 6d 65 29 20 61 72 74 69 63 6c 65 2e 74 61 67 2d 6d 6f 6e 74 65 73 73 6f 72 69 3a 6e 6f 74 28 23 70 6f 73 74 2d 31 35 37 35 29 3a 3a 62 65 66 6f 72 65 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 4d 6f 6e 74 65 73 73 6f 72 69 22 3b 0a 09 70 61 64 64 69 6e 67 3a 20 32 30 70 78 3b 0a 7d 0a 62 6f 64 79 3a 6e 6f 74 28 2e 73 65 61 72 63 68 29 3a 6e 6f 74 28 2e 68 6f 6d 65 29 20 61 72 74 69 63 6c 65 2e 63 61 74 65 67 6f 72 79 2d 72 65 73 65 61 72 63 68 20 2e 65 74 5f 70 62 5f 73 65 63 74 69 6f 6e 5f 30 20 Data Ascii: ot(#post-1575) .et_pb_section_0 { display: none !important;}body:not(.search):not(.home) article.tag-montessori:not(#post-1575)::before{content: "Montessori";padding: 20px;}body:not(.search):not(.home) article.category-research .et_pb_section_0
2024-05-02 14:32:58 UTC	8000	IN	Data Raw: 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 65 74 5f 70 62 5f 77 69 64 67 65 74 5f 61 72 65 61 7b 0a 09 70 61 64 64 69 6e 67 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 65 74 5f 70 62 5f 77 69 64 67 65 74 7b 0a 09 77 69 64 74 68 3a 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 6e 6c 69 5f 68 65 61 64 65 72 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 77 69 64 74 68 3a Data Ascii: portant;}.et_pb_widget_area{padding:0 !important;}.et_pb_widget{width:100% !important;}.nli_header{background-color: transparent !important;padding-left:0px !important;padding-right:0px !important;text-align: center!important; width:
2024-05-02 14:32:58 UTC	8000	IN	Data Raw: 30 34 66 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 63 63 63 3b 0a 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 2e 35 65 6d 3b 0a 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 32 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 65 74 5f 70 62 5f 74 6f 67 67 6c 65 5f 63 6f 6e 74 65 6e 74 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 33 33 33 33 33 33 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 3b 0a 20 20 62 61 63 Data Ascii: 04f" !important;position: absolute; right: 0; font-size: 16px; color: #ccc; top: 50%; margin-top: -.5em;padding-right: 20px !important;display: block !important;}.et_pb_toggle_content {color: #333333 !important; padding-top: 0; bac
2024-05-02 14:32:58 UTC	4816	IN	Data Raw: 43 4f 4c 55 4d 4e 53 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 2a 2f 0a 2f 2a 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 7b 0a 09 2e 65 74 5f 70 62 5f 74 65 78 74 7b 0a 09 09 63 6f 6c 75 6d 6e 73 3a 32 3b 0a 09 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 38 30 70 78 29 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 30 30 70 78 29 7b 0a 09 2e 65 74 5f 70 62 5f 74 65 78 74 7b 0a 09 09 63 6f 6c 75 6d 6e 73 3a 32 3b 0a 09 7d 0a 7d 0a 2a 2f 0a 2f 2a 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 43 55 53 54 4f 4d 20 43 52 55 4e 43 48 20 4e 41 56 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 2a 2f 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 31 34 30 70 78 29 20 7b 0a 09 23 65 74 5f 73 65 61 72 63 68 5f Data Ascii: COLUMNS_____________//@media (min-width: 1200px){.et_pb_text{columns:2;}}@media (max-width: 980px) and (min-width: 700px){.et_pb_text{columns:2;}}//___________CUSTOM CRUNCH NAV__________*/@media (min-width: 1140px) {#et_search_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49786	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:58 UTC	603	OUT	GET /wp-content/et-cache/1/1/39/et-core-unified-39.min.css?ver=1714401402 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:58 UTC	206	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:58 GMT Server: Apache Last-Modified: Mon, 29 Apr 2024 14:36:42 GMT Accept-Ranges: bytes Content-Length: 12105 Connection: close Content-Type: text/css
2024-05-02 14:32:58 UTC	7986	IN	Data Raw: 62 6f 64 79 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 32 20 2e 65 74 5f 71 75 6f 74 65 5f 63 6f 6e 74 65 6e 74 20 62 6c 6f 63 6b 71 75 6f 74 65 20 63 69 74 65 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 32 20 2e 65 74 5f 6c 69 6e 6b 5f 63 6f 6e 74 65 6e 74 20 61 2e 65 74 5f 6c 69 6e 6b 5f 6d 61 69 6e 5f 75 72 6c 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 33 20 2e 65 74 5f 71 75 6f 74 65 5f 63 6f 6e 74 65 6e 74 20 62 6c 6f 63 6b 71 75 6f 74 65 20 63 69 74 65 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 33 5f 38 20 2e 65 74 5f 71 75 6f 74 65 5f 63 6f 6e 74 65 6e 74 20 62 6c 6f 63 6b 71 75 6f 74 65 20 63 69 74 65 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 34 20 2e 65 74 5f 71 75 6f 74 65 5f 63 6f 6e 74 65 6e 74 20 62 6c 6f 63 Data Ascii: body,.et_pb_column_1_2 .et_quote_content blockquote cite,.et_pb_column_1_2 .et_link_content a.et_link_main_url,.et_pb_column_1_3 .et_quote_content blockquote cite,.et_pb_column_3_8 .et_quote_content blockquote cite,.et_pb_column_1_4 .et_quote_content bloc
2024-05-02 14:32:58 UTC	4119	IN	Data Raw: 5f 31 5f 33 20 2e 65 74 5f 6c 69 6e 6b 5f 63 6f 6e 74 65 6e 74 20 68 32 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 33 5f 38 20 2e 65 74 5f 6c 69 6e 6b 5f 63 6f 6e 74 65 6e 74 20 68 32 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 34 20 2e 65 74 5f 6c 69 6e 6b 5f 63 6f 6e 74 65 6e 74 20 68 32 2c 2e 65 74 5f 70 62 5f 62 6c 6f 67 5f 67 72 69 64 20 2e 65 74 5f 6c 69 6e 6b 5f 63 6f 6e 74 65 6e 74 20 68 32 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 33 20 2e 65 74 5f 61 75 64 69 6f 5f 63 6f 6e 74 65 6e 74 20 68 32 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 33 5f 38 20 2e 65 74 5f 61 75 64 69 6f 5f 63 6f 6e 74 65 6e 74 20 68 32 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 34 20 2e 65 74 5f 61 75 64 69 6f 5f 63 6f 6e 74 65 6e 74 20 68 32 2c Data Ascii: _1_3 .et_link_content h2,.et_pb_column_3_8 .et_link_content h2,.et_pb_column_1_4 .et_link_content h2,.et_pb_blog_grid .et_link_content h2,.et_pb_column_1_3 .et_audio_content h2,.et_pb_column_3_8 .et_audio_content h2,.et_pb_column_1_4 .et_audio_content h2,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49785	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:58 UTC	566	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:58 UTC	213	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:58 GMT Server: Apache Last-Modified: Thu, 09 Nov 2023 14:39:38 GMT Accept-Ranges: bytes Content-Length: 87553 Connection: close Content-Type: text/javascript
2024-05-02 14:32:58 UTC	7979	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-05-02 14:32:58 UTC	8000	IN	Data Raw: 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 66 65 28 65 2c 22 69 6e 70 75 74 22 29 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 21 31 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 3f 22 6c 61 62 65 6c 22 69 6e 20 65 3f 22 6c 61 62 65 6c 22 69 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 65 2e 69 73 44 Data Ascii: type===t}}function _(t){return function(e){return(fe(e,"input")\|\|fe(e,"button"))&&e.type===t}}function z(t){return function(e){return"form"in e?e.parentNode&&!1===e.disabled?"label"in e?"label"in e.parentNode?e.parentNode.disabled===t:e.disabled===t:e.isD
2024-05-02 14:32:58 UTC	8000	IN	Data Raw: 62 6c 69 6e 67 29 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 3c 36 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 62 2e 70 73 65 75 64 6f 73 2e 65 6d 70 74 79 28 65 29 7d 2c 68 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 71 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 62 75 74 74 6f 6e 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 7d 2c 74 Data Ascii: bling)if(e.nodeType<6)return!1;return!0},parent:function(e){return!b.pseudos.empty(e)},header:function(e){return q.test(e.nodeName)},input:function(e){return N.test(e.nodeName)},button:function(e){return fe(e,"input")&&"button"===e.type\|\|fe(e,"button")},t
2024-05-02 14:32:58 UTC	8000	IN	Data Raw: 64 65 3b 72 65 74 75 72 6e 20 74 26 26 31 31 21 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 3f 74 3a 6e 75 6c 6c 7d 2c 70 61 72 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 22 70 61 72 65 6e 74 4e 6f 64 65 22 29 7d 2c 70 61 72 65 6e 74 73 55 6e 74 69 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 29 7d 2c 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 29 7d 2c 70 72 65 76 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 29 7d 2c 6e 65 78 74 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 Data Ascii: de;return t&&11!==t.nodeType?t:null},parents:function(e){return d(e,"parentNode")},parentsUntil:function(e,t,n){return d(e,"parentNode",n)},next:function(e){return A(e,"nextSibling")},prev:function(e){return A(e,"previousSibling")},nextAll:function(e){ret
2024-05-02 14:32:58 UTC	8000	IN	Data Raw: 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 2e 72 65 6d 6f 76 65 28 74 68 69 73 2c 65 29 7d 29 7d 7d 29 2c 63 65 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 69 66 28 65 29 72 65 74 75 72 6e 20 74 3d 28 74 7c 7c 22 66 78 22 29 2b 22 71 75 65 75 65 22 2c 72 3d 5f 2e 67 65 74 28 65 2c 74 29 2c 6e 26 26 28 21 72 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 72 3d 5f 2e 61 63 63 65 73 73 28 65 2c 74 2c 63 65 2e 6d 61 6b 65 41 72 72 61 79 28 6e 29 29 3a 72 2e 70 75 73 68 28 6e 29 29 2c 72 7c 7c 5b 5d 7d 2c 64 65 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3d 74 7c 7c 22 66 78 22 3b 76 61 72 20 6e 3d 63 65 2e 71 75 65 75 65 28 65 2c 74 29 2c 72 Data Ascii: this.each(function(){z.remove(this,e)})}}),ce.extend({queue:function(e,t,n){var r;if(e)return t=(t\|\|"fx")+"queue",r=_.get(e,t),n&&(!r\|\|Array.isArray(n)?r=_.access(e,t,ce.makeArray(n)):r.push(n)),r\|\|[]},dequeue:function(e,t){t=t\|\|"fx";var n=ce.queue(e,t),r
2024-05-02 14:32:58 UTC	8000	IN	Data Raw: 3d 3d 6f 2e 6e 61 6d 65 73 70 61 63 65 26 26 21 75 2e 72 6e 61 6d 65 73 70 61 63 65 2e 74 65 73 74 28 6f 2e 6e 61 6d 65 73 70 61 63 65 29 7c 7c 28 75 2e 68 61 6e 64 6c 65 4f 62 6a 3d 6f 2c 75 2e 64 61 74 61 3d 6f 2e 64 61 74 61 2c 76 6f 69 64 20 30 21 3d 3d 28 72 3d 28 28 63 65 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 6f 2e 6f 72 69 67 54 79 70 65 5d 7c 7c 7b 7d 29 2e 68 61 6e 64 6c 65 7c 7c 6f 2e 68 61 6e 64 6c 65 72 29 2e 61 70 70 6c 79 28 69 2e 65 6c 65 6d 2c 73 29 29 26 26 21 31 3d 3d 3d 28 75 2e 72 65 73 75 6c 74 3d 72 29 26 26 28 75 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 75 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 29 29 7d 72 65 74 75 72 6e 20 63 2e 70 6f 73 74 44 69 73 70 61 74 63 68 26 26 63 2e 70 6f 73 74 44 69 73 Data Ascii: ==o.namespace&&!u.rnamespace.test(o.namespace)\|\|(u.handleObj=o,u.data=o.data,void 0!==(r=((ce.event.special[o.origType]\|\|{}).handle\|\|o.handler).apply(i.elem,s))&&!1===(u.result=r)&&(u.preventDefault(),u.stopPropagation()))}return c.postDispatch&&c.postDis
2024-05-02 14:32:58 UTC	8000	IN	Data Raw: 74 42 65 66 6f 72 65 28 65 2c 74 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 7d 29 7d 2c 62 65 66 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 68 69 73 29 7d 29 7d 2c 61 66 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 68 69 73 2e 6e 65 78 74 53 69 62 6c Data Ascii: tBefore(e,t.firstChild)}})},before:function(){return $e(this,arguments,function(e){this.parentNode&&this.parentNode.insertBefore(e,this)})},after:function(){return $e(this,arguments,function(e){this.parentNode&&this.parentNode.insertBefore(e,this.nextSibl
2024-05-02 14:32:58 UTC	8000	IN	Data Raw: 72 6f 70 48 6f 6f 6b 73 2e 5f 64 65 66 61 75 6c 74 2e 67 65 74 28 74 68 69 73 29 7d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 61 74 2e 70 72 6f 70 48 6f 6f 6b 73 5b 74 68 69 73 2e 70 72 6f 70 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 75 72 61 74 69 6f 6e 3f 74 68 69 73 2e 70 6f 73 3d 74 3d 63 65 2e 65 61 73 69 6e 67 5b 74 68 69 73 2e 65 61 73 69 6e 67 5d 28 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 75 72 61 74 69 6f 6e 2a 65 2c 30 2c 31 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 75 72 61 74 69 6f 6e 29 3a 74 68 69 73 2e 70 6f 73 3d 74 3d 65 2c 74 68 69 73 2e 6e 6f 77 3d 28 74 68 69 73 2e 65 6e 64 2d 74 68 69 73 2e 73 74 61 72 74 29 2a 74 2b 74 68 69 73 2e 73 74 61 72 74 2c 74 68 69 73 2e Data Ascii: ropHooks._default.get(this)},run:function(e){var t,n=at.propHooks[this.prop];return this.options.duration?this.pos=t=ce.easing[this.easing](e,this.options.duratione,0,1,this.options.duration):this.pos=t=e,this.now=(this.end-this.start)t+this.start,this.
2024-05-02 14:32:58 UTC	8000	IN	Data Raw: 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 63 65 2e 72 65 6d 6f 76 65 41 74 74 72 28 65 2c 74 29 3a 69 26 26 22 73 65 74 22 69 6e 20 69 26 26 76 6f 69 64 20 30 21 3d 3d 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 28 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 74 2c 6e 2b 22 22 29 2c 6e 29 3a 69 26 26 22 67 65 74 22 69 6e 20 69 26 26 6e 75 6c 6c 21 3d 3d 28 72 3d 69 2e 67 65 74 28 65 2c 74 29 29 3f 72 3a 6e 75 6c 6c 3d 3d 28 72 3d 63 65 2e 66 69 6e 64 2e 61 74 74 72 28 65 2c 74 29 29 3f 76 6f 69 64 20 30 3a 72 29 7d 2c 61 74 74 72 48 6f 6f 6b 73 3a 7b 74 79 70 65 3a 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 6c 65 2e 72 61 64 69 6f 56 61 6c 75 65 26 26 22 72 61 64 69 6f 22 Data Ascii: 0)),void 0!==n?null===n?void ce.removeAttr(e,t):i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:(e.setAttribute(t,n+""),n):i&&"get"in i&&null!==(r=i.get(e,t))?r:null==(r=ce.find.attr(e,t))?void 0:r)},attrHooks:{type:{set:function(e,t){if(!le.radioValue&&"radio"
2024-05-02 14:32:58 UTC	8000	IN	Data Raw: 6d 61 70 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 6e 61 6d 65 3a 74 2e 6e 61 6d 65 2c 76 61 6c 75 65 3a 65 2e 72 65 70 6c 61 63 65 28 4c 74 2c 22 5c 72 5c 6e 22 29 7d 7d 29 3a 7b 6e 61 6d 65 3a 74 2e 6e 61 6d 65 2c 76 61 6c 75 65 3a 6e 2e 72 65 70 6c 61 63 65 28 4c 74 2c 22 5c 72 5c 6e 22 29 7d 7d 29 2e 67 65 74 28 29 7d 7d 29 3b 76 61 72 20 4d 74 3d 2f 25 32 30 2f 67 2c 52 74 3d 2f 23 2e 2a 24 2f 2c 49 74 3d 2f 28 5b 3f 26 5d 29 5f 3d 5b 5e 26 5d 2a 2f 2c 57 74 3d 2f 5e 28 2e 2a 3f 29 3a 5b 20 5c 74 5d 2a 28 5b 5e 5c 72 5c 6e 5d 2a 29 24 2f 67 6d 2c 46 74 3d 2f 5e 28 3f 3a 47 45 54 7c 48 45 41 44 29 24 2f 2c 24 74 3d 2f 5e 5c 2f 5c 2f 2f 2c 42 74 3d 7b 7d 2c 5f 74 3d 7b 7d 2c 7a 74 3d 22 2a 2f 22 2e 63 6f 6e 63 61 74 28 22 2a 22 Data Ascii: map(n,function(e){return{name:t.name,value:e.replace(Lt,"\r\n")}}):{name:t.name,value:n.replace(Lt,"\r\n")}}).get()}});var Mt=/%20/g,Rt=/#.$/,It=/([?&])_=[^&]/,Wt=/^(.?):[ \t]([^\r\n])$/gm,Ft=/^(?:GET\|HEAD)$/,$t=/^\/\//,Bt={},_t={},zt="/".concat("*"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49787	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:58 UTC	574	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:58 UTC	213	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:58 GMT Server: Apache Last-Modified: Thu, 24 Aug 2023 14:32:53 GMT Accept-Ranges: bytes Content-Length: 13577 Connection: close Content-Type: text/javascript
2024-05-02 14:32:58 UTC	7979	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r
2024-05-02 14:32:58 UTC	5598	IN	Data Raw: 48 2c 45 3d 73 2e 64 61 74 61 3b 69 28 73 2c 22 64 61 74 61 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 2c 6f 2c 61 3b 69 66 28 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 61 20 69 6e 20 6e 3d 73 2e 68 61 73 44 61 74 61 28 65 29 26 26 45 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 2c 6f 3d 7b 7d 2c 74 29 61 21 3d 3d 78 28 61 29 3f 28 75 28 22 64 61 74 61 2d 63 61 6d 65 6c 43 61 73 65 22 2c 22 6a 51 75 65 72 79 2e 64 61 74 61 28 29 20 61 6c 77 61 79 73 20 73 65 74 73 2f 67 65 74 73 20 63 61 6d 65 6c 43 61 73 65 64 20 6e 61 6d 65 73 3a 20 22 2b 61 29 2c 6e 5b 61 5d 3d 74 5b 61 5d 29 3a 6f 5b 61 5d 3d 74 5b 61 5d 3b 72 65 74 75 72 6e 20 Data Ascii: H,E=s.data;i(s,"data",function(e,t,r){var n,o,a;if(t&&"object"==typeof t&&2===arguments.length){for(a in n=s.hasData(e)&&E.call(this,e),o={},t)a!==x(a)?(u("data-camelCase","jQuery.data() always sets/gets camelCased names: "+a),n[a]=t[a]):o[a]=t[a];return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49788	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:58 UTC	586	OUT	GET /wp-content/plugins/image-watermark/js/no-right-click.js?ver=1.7.4 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:58 UTC	212	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:58 GMT Server: Apache Last-Modified: Fri, 05 Apr 2024 01:43:33 GMT Accept-Ranges: bytes Content-Length: 6026 Connection: close Content-Type: text/javascript
2024-05-02 14:32:58 UTC	6026	IN	Data Raw: 2f 2a 0d 0a 20 54 68 69 73 20 6a 61 76 61 73 63 72 69 70 74 20 69 73 20 75 73 65 64 20 62 79 20 74 68 65 20 6e 6f 2d 72 69 67 68 74 2d 63 6c 69 63 6b 2d 69 6d 61 67 65 73 20 70 6c 75 67 69 6e 20 66 6f 72 20 77 6f 72 64 70 72 65 73 73 2e 0d 0a 20 56 65 72 73 69 6f 6e 20 32 2e 32 0d 0a 20 50 6c 65 61 73 65 20 67 69 76 65 20 63 72 65 64 69 74 20 61 73 20 6e 6f 2d 72 69 67 68 74 2d 63 6c 69 63 6b 2d 69 6d 61 67 65 73 2e 6a 73 20 62 79 20 4b 65 69 74 68 20 50 2e 20 47 72 61 68 61 6d 0d 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6c 6f 67 73 65 79 65 2e 63 6f 6d 0d 0a 20 2a 2f 0d 0a 0d 0a 76 61 72 20 49 77 4e 52 43 74 61 72 67 49 6d 67 20 3d 20 6e 75 6c 6c 3b 0d 0a 76 61 72 20 49 77 4e 52 43 74 61 72 67 53 72 63 20 3d 20 6e 75 6c 6c 3b 0d 0a 76 61 72 20 49 77 4e Data Ascii: /* This javascript is used by the no-right-click-images plugin for wordpress. Version 2.2 Please give credit as no-right-click-images.js by Keith P. Graham http://www.blogseye.com */var IwNRCtargImg = null;var IwNRCtargSrc = null;var IwN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49789	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:58 UTC	625	OUT	GET /wp-content/uploads/2019/08/Home-Prof-Dev.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:58 UTC	209	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:58 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:25:38 GMT Accept-Ranges: bytes Content-Length: 617827 Connection: close Content-Type: image/jpeg
2024-05-02 14:32:58 UTC	7983	IN	Data Raw: ff d8 ff e1 1b e5 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 0f 2f 00 00 01 01 00 03 00 00 00 01 08 20 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 24 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d8 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 39 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 31 39 3a 30 38 3a 30 37 20 31 35 3a 31 33 3a 30 38 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*/ (1$2i$''Adobe Photoshop CC 2019 (Macintosh)2019:08:07 15:13:08
2024-05-02 14:32:58 UTC	8000	IN	Data Raw: 00 00 00 00 00 00 0c 63 72 6f 70 52 65 63 74 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 0d 63 72 6f 70 52 65 63 74 52 69 67 68 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 63 72 6f 70 52 65 63 74 54 6f 70 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 60 00 00 00 01 00 01 00 60 00 00 00 01 00 01 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 01 38 42 49 4d 03 f5 00 00 00 00 00 48 00 2f 66 66 00 01 00 6c 66 66 00 06 00 00 00 00 00 01 00 2f 66 66 00 01 00 a1 99 9a 00 06 00 00 00 00 00 01 00 Data Ascii: cropRectLeftlongcropRectRightlongcropRectToplong8BIM``8BIM&?8BIM8BIM8BIM8BIM'8BIMH/fflff/ff
2024-05-02 14:32:58 UTC	8000	IN	Data Raw: f3 0f 7a ef f5 85 d3 f4 df e8 5d 3b e9 7f 42 b7 e8 fd 1f cc fa 4b c6 d2 55 f0 ee cf cd fc 9f cb b3 eb bd 2f fe 5b bf f9 de 0f f3 5f d1 be 87 fd af ff 00 bb 9f b9 fc 85 a5 47 f3 94 7c 6c fe 8f f4 38 fc ef f8 55 e2 09 29 3a ad 9f cb 1f ee 0f ca 4f 4b f5 eb fe 55 1f d0 3f 3b fa 0f d3 e4 7f 4f ff 00 bb 0b 9d 6a 82 4a d4 7e 50 d4 96 ed ac 3f e9 74 fd 1f a6 df a7 f4 79 fc e4 6c af e7 9f f4 be 91 fa 5f 4b 9f cf fe 5a cf 49 12 a6 d7 64 c5 56 49 05 27 3c 8f 88 e3 9f ec ff 00 29 13 33 f9 e1 fc ef d1 6f f3 ff 00 4f 8f fa 8f dc 55 12 4e e8 84 a3 83 f0 5d 5f 4e ff 00 91 9b f4 3f 9b 6f f3 df 43 8f ce 5c 7a 49 b2 d9 23 77 ff d9 00 38 42 49 4d 04 21 00 00 00 00 00 5d 00 00 00 01 01 00 00 00 0f 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 Data Ascii: z];BKU/[_G\|l8U):OKU?;OjJ~P?tyl_KZIdVI'<)3oOUN]_N?oC\zI#w8BIM!]Adobe Photosh
2024-05-02 14:32:58 UTC	8000	IN	Data Raw: ca 40 a7 b9 eb f5 35 6e f8 ed 89 38 f9 85 68 ae c9 29 7f 08 03 d3 14 8b fe b9 47 eb 42 f0 be d4 13 92 31 da ac 0b 76 79 dc 7e ee 3d 73 55 b5 32 c6 62 42 86 e3 a8 35 62 d3 19 38 20 63 ae e1 d6 aa ea 0c 0c ad 85 2b b9 3b f1 83 9a 95 a8 99 cb de 03 f6 86 c0 df b0 fc e1 7f 86 ab b6 31 9e 09 3e 95 2d cf 99 e7 b0 54 56 2c 72 17 76 0b 54 12 03 8e df 87 6a cd 92 30 10 17 00 7e 34 8c 32 3e f2 f1 ea 69 07 20 7a 7a d2 38 05 71 81 c7 a8 ac de a3 4c 69 65 38 df f2 e7 a1 1d 0d 2b 70 c4 1c 0f 6a 41 d3 1c 0a 43 f2 f1 8c d4 8c 56 fe 2e 98 d8 4f 5e 6a 00 c1 ba 64 70 3e f5 4a 48 23 a0 53 ed d7 f3 a6 15 0c ea c4 f0 3a e4 e6 93 18 d0 72 3d 08 a4 ce f8 c8 ef 4b 20 2c 70 78 c5 35 87 1c 75 ef 52 02 76 c7 7a 61 e0 7b d3 81 27 ad 07 1d 29 80 8a 41 1e f4 a0 6e e3 a0 1d 8d 26 46 de Data Ascii: @5n8h)GB1vy~=sU2bB5b8 c+;1>-TV,rvTj0~42>i zz8qLie8+pjACV.O^jdp>JH#S:r=K ,px5uRvza{')An&F
2024-05-02 14:32:58 UTC	8000	IN	Data Raw: 4e 3a d4 68 e0 34 84 80 06 d2 70 06 2a 18 d5 a5 80 61 49 52 01 63 9f e5 4a 5b 2e ab c8 cf 0c 09 cd 7c 8d dd db 47 e8 36 ee 5b 13 08 4a 05 2f d3 7f 2f df d2 a2 17 27 70 65 39 62 a7 3b b2 09 39 f5 1d 7f 1a 63 ca 58 c5 90 10 2e 49 63 c6 7d 31 49 01 46 da 46 ee a4 e1 fa 63 26 9a 94 87 6b 74 2a eb f2 2b fd 99 3e 74 2a db c0 da 0f 24 60 fb 56 4c 4e 23 54 22 55 58 8e 41 54 e4 36 09 1c 9e 9f 95 68 6b 52 6f da cd 95 8e 26 c9 75 3c 7b 71 59 51 20 0c 51 70 b1 36 5b 01 70 bc f3 c0 ae e8 3d 37 31 71 d7 62 55 9d 94 10 a5 95 8a 9c 82 db bb f1 fa 53 e3 b8 30 a0 da db 41 00 90 7a 1f f1 aa ab 80 09 50 15 48 2b f8 e6 a3 0c 37 1c 9c a2 81 d6 b5 4d f7 13 8a ea 8b b3 c8 67 98 e7 70 18 db c9 c8 fd 6a 95 ce 9f 64 ea a2 7b 6b 59 b9 eb 24 4a d9 1e 84 63 a5 2a b1 da ed f7 94 e4 96 Data Ascii: N:h4paIRcJ[.\|G6[J//'pe9b;9cX.Ic}1IFFc&kt+>t$`VLN#T"UXAT6hkRo&u<{qYQ Qp6[p=71qbUS0AzPH+7Mgpjd{kY$Jc
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: b5 c6 e5 39 f2 f2 08 cf 5c 8a ab b3 7a 60 2e 7d ea d5 b3 32 17 c8 0a 02 75 eb 42 02 1b 95 2a c4 63 69 cf 4a 80 9c 9c 73 c7 40 4f 15 62 70 36 2e d3 9f 7a 83 03 7e 69 80 8e db 55 46 00 03 d2 a3 6c 0e 99 c7 bd 49 37 2b d8 67 b8 eb 4c 38 c0 e4 9f a9 a5 61 32 32 db 40 3b 72 4d 56 ba 07 21 bb d5 bd db 41 ee 3d 6a b4 df 7d 41 e9 4e 22 45 69 30 e7 df bd 35 5b b7 f3 a5 18 5c 93 d6 93 3b ba 56 88 96 21 39 71 e8 3a d0 47 ca 54 11 83 d7 77 f4 a4 fe 02 28 3c 7b fb 55 19 f5 13 b1 1c e0 fa d3 c3 70 0f a0 c6 3d e9 99 cf 3f ce 97 24 ae d0 3b ee cf bd 54 40 93 80 a0 63 9f 7a 17 ef 03 d8 75 a6 85 e3 9c e4 9a 5f e1 da 3b f5 a2 da 80 e0 00 39 cd 39 47 24 d3 4e 18 e7 34 8f c0 5c 50 03 b9 df 9e f4 bc 31 c1 cf 14 1e 39 a7 06 05 45 57 40 02 77 10 3b 8a 71 4c e0 70 48 ea 69 87 e5 Data Ascii: 9\z`.}2uB*ciJs@Obp6.z~iUFlI7+gL8a22@;rMV!A=j}AN"Ei05[\;V!9q:GTw(<{Up=?$;T@czu_;99G$N4\P19EW@w;qLpHi
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: f5 a8 16 50 02 9f ee e0 e3 d4 e2 a4 b6 61 96 77 23 cb 53 c9 db 93 93 cd 71 5a e7 65 ec 62 f8 ee e1 e0 b4 b6 95 1d f0 26 ec 73 c6 cc 1e 3f 3a e7 b4 f5 86 78 12 75 c0 91 ba e7 a3 1f 52 6b 57 e2 44 cc 9a 75 b2 2a 91 fb fc 92 07 24 15 e3 8a e1 f4 a9 24 b6 bd 88 46 d9 0e 30 e7 9e 32 32 3d ab d3 c3 5f 90 e2 a9 67 33 a9 1a 7a 82 24 92 18 77 80 58 09 3e 75 63 9e 08 a8 06 99 03 2b 87 8a 27 6c 7d e6 8d 49 39 e7 b8 f7 a7 45 74 24 88 03 26 03 0c 02 79 29 e9 4f fb 47 9a db 9a 75 dc 17 69 da bc 12 38 15 ba 72 bd 84 a2 91 5d b4 3b 77 11 34 90 c4 1d 09 28 23 8c 74 c6 0e 71 55 df c3 56 2a 88 8f 65 6e 55 b8 26 43 90 47 b7 bd 68 3c c5 c3 2e f0 d2 22 65 42 0c 16 f5 cd 44 58 a0 56 56 8d d7 66 3a 1c 64 fb 7a d6 aa 4c 1a 46 5c 9e 14 d2 98 00 2c e1 4c 02 a4 20 c8 23 dc 77 a8 57 Data Ascii: Paw#SqZeb&s?:xuRkWDu$$F022=_g3z$wX>uc+'l}I9Et$&y)OGui8r];w4(#tqUVenU&CGh<."eBDXVVf:dzLF\,L #wW
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 0e 4e 0e 7b 57 73 3e 98 63 60 0a 0e 9e 95 c8 6a b6 f8 bb 63 83 b0 9f 9b 15 f4 8d 5f 54 78 b1 95 f7 30 c4 18 60 0e 49 27 d6 b7 ad 21 11 db ba 0e 1b 19 0d 9c fa 55 28 6c e4 69 47 cb 9f 73 5b 31 c2 51 40 2b 81 d3 3f 5a f2 ab c5 f3 1e 8d 16 ac 79 8f 8c 4e cf 11 5e 28 e3 ee 13 5e 4f f1 45 fe cf e0 5d 75 87 19 b2 95 94 15 e1 8f 03 83 dd bd bd ab d7 fc 5b 6a 4e b3 76 f8 dd ba 4c f1 fd dc 7f 8d 78 bf c5 c8 f1 e0 4d 64 6e 09 2a 44 47 ef 10 30 60 54 8c 2f 1c 7c d8 e7 af b5 79 18 ba 6e 30 6d 9f 45 97 cb 9a ac 57 99 f3 7e 99 24 30 41 1a 2e d1 b5 76 bb 30 da c1 bb e7 f1 ad 05 90 16 40 41 d8 78 ce ec 8f ae 2b 3f 4d 9f fd 1e de e2 30 ca b2 22 c9 b4 31 c1 04 03 9e 30 2b 41 c6 cc 03 2b 3b 91 d0 f3 c1 39 eb f8 d7 e6 75 97 be cf d4 e0 f4 23 58 04 8e bb 72 70 4e 58 03 ea 7a Data Ascii: N{Ws>c`jc_Tx0`I'!U(liGs[1Q@+?ZyN^(^OE]u[jNvLxMdn*DG0`T/\|yn0mEW~$0A.v0@Ax+?M0"10+A+;9u#XrpNXz
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 56 00 f2 72 15 dd 17 a6 d2 d9 fc 29 86 de 2c 82 ac 71 9c 9c 9c e3 d6 a1 94 8a f2 27 cd b9 72 1b b2 1e 86 ab 18 83 31 1f 75 7a e7 19 3b aa fc 8e 91 e4 92 00 6f ba 4f 5a af bf 6f 0d 9e 0e ec 28 fe b5 93 2d 5d 90 f9 40 ed e4 b0 5e a0 f4 63 f4 aa 37 88 44 25 11 c2 2b 02 0a 85 39 cf 63 9f e9 5a 52 4c 8e a7 e5 20 0c 93 93 c8 e6 b3 e6 7f 3b 38 6f 2d 54 64 96 6c 01 58 c9 1a 47 73 95 d1 dc 2f 88 61 2a a3 77 cc a0 37 46 3e b5 ed 5a 6c 5b af 06 d1 b6 31 6e a6 47 73 8c 70 3a 57 8b e9 41 65 d7 71 bc 14 62 08 2a 73 96 dc 47 5e dd 2b d8 f4 d9 84 b7 c5 f6 94 7f b3 88 ce fe 40 1d 78 15 f2 78 e5 fb c3 e8 30 eb dc 2c dc 8f 31 c3 e0 aa 2f 4c f1 b7 eb 54 1c 79 73 12 71 92 36 b6 3d 0d 5d b9 7c 4a 73 f3 2f f1 73 90 4d 57 c0 32 3e 71 ca ee 1f 85 70 74 3a 92 2a 4c aa d1 10 e1 80 Data Ascii: Vr),q'r1uz;oOZo(-]@^c7D%+9cZRL ;8o-TdlXGs/aw7F>Zl[1nGsp:WAeqbsG^+@xx0,1/LTysq6=]\|Js/sMW2>qpt:*L
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 40 00 9c 83 91 eb 5f 3e 76 21 ea 0f a7 1e b5 2c 64 7e 00 e4 7d 6a 20 48 1f 74 37 e3 4f 52 58 0f 93 67 be 69 0f 72 c2 6e e4 85 c8 3c d4 89 b8 60 8c 03 dc 1a 62 15 c0 39 24 0e b4 e4 25 4f 1d e8 63 25 c0 18 c7 07 18 1f 5a b3 1a e5 46 46 0f 7f ad 55 0a 18 a8 ee 0e e0 3d ea d8 66 cf 28 32 7d eb 58 3b 33 26 4e 80 6d c1 a7 aa ed 3c 1e 29 8a 38 c9 18 3e 82 a6 42 36 f1 5e 8c 6e d1 8b 1c 08 dc 3b 01 d6 9e bf 7b de 90 2e e0 47 4f 5a 7a 0d c0 76 35 d0 90 87 10 33 c9 c7 a6 3b d3 94 16 e7 67 eb 46 3d 79 34 aa a0 77 ad 51 9b 1e 0b 0c 81 f2 e2 80 dc 73 d6 83 8c 0e f4 bb 03 73 cd 68 85 70 0d 87 5c 74 3d 68 8b 90 79 f5 a0 af 19 1f 85 28 38 5c 0e bd e9 b0 b8 2f 20 f6 fa d2 8c 85 fa d2 6d c0 00 9a 70 e7 af 4a 9b 5c 08 b6 e0 f1 4e 27 23 24 63 de 9c 7d ba 52 0e 7d 4f b1 a4 d5 Data Ascii: @_>v!,d~}j Ht7ORXgirn<`b9$%Oc%ZFFU=f(2}X;3&Nm<)8>B6^n;{.GOZzv53;gF=y4wQsshp\t=hy(8\/ mpJ\N'#$c}R}O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49790	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:58 UTC	629	OUT	GET /wp-content/plugins/divi-booster/core/icons/socicon/fonts/Socicon.woff2?87visu HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://naturalearning.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:58 UTC	281	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:58 GMT Server: Apache Last-Modified: Thu, 12 May 2022 01:43:24 GMT Accept-Ranges: bytes Content-Length: 64512 Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, public Connection: close Content-Type: font/woff2
2024-05-02 14:32:58 UTC	7911	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 fc 00 00 0b 00 00 00 01 c6 0c 00 00 fb b0 00 03 99 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 60 00 5c 11 08 0a 86 f6 58 85 b3 16 01 36 02 24 03 89 34 0b 84 5c 00 04 20 05 83 06 07 20 5b 2d 61 51 34 a2 85 ec 44 80 ea f7 b7 6b 12 bf ed 9e 70 c7 bb 1d 5c ff 23 cb d4 8c 74 a4 d5 02 cd fe bf 1e d0 31 44 5a 17 f1 0a 7e 0b d0 99 33 91 c5 6f c7 11 6c 61 fb 46 67 64 2c 49 9f cb d2 a6 b8 c8 34 04 a6 b1 8d 5c 41 11 cc 42 0f 52 77 e6 d0 d5 7f ec 98 a6 18 cb 8e d4 dc af e1 dd 7e cb 09 9e 68 50 02 5e bf 5a 4a 79 a6 86 3e 1c 06 c1 f0 81 01 8b 60 18 38 03 dc c9 11 8d 3a 11 7f 9e d7 cd 3f f7 de f7 5e c6 7c 49 58 61 25 2f 83 b0 33 08 5b 48 42 c2 14 08 04 b6 23 32 9c 55 01 01 dd 65 8a bb b8 71 b5 88 b8 3b d0 dd a1 b5 b5 Data Ascii: wOF2`\X6$4\ [-aQ4Dkp\#t1DZ~3olaFgd,I4\ABRw~hP^ZJy>`8:?^\|IXa%/3[HB#2Ueq;
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 2e 79 81 84 5c 3e b7 e5 18 95 b3 ae 13 28 e0 02 22 80 1b cf ad 5e c8 11 eb b9 cc 72 53 50 c9 92 99 6e 88 f2 4c cf 45 81 02 2e 04 22 dc a8 71 f8 3b c6 b7 de ea 79 84 22 b8 b5 fe 22 0b 1f 01 74 41 12 12 b5 23 6e 36 86 2d 2c 3e 66 e2 4d 8d ce 99 1b eb e8 14 55 af 4a 04 82 8f 7c da bf de 95 b3 dd 55 51 de 86 a0 b3 88 96 00 4c 6c a4 2f e7 56 b6 be 70 a5 50 6f c3 05 7f 8b 8f f2 b2 3b e1 d6 14 bc eb 9a b3 42 c9 75 1a c1 7b 53 f5 18 9c fd 82 d5 98 4c d0 66 9d 1d 6b d0 f0 17 96 bc 6e dc 8b 66 b8 17 2c 20 73 d7 1e e1 f5 87 1c e9 55 59 63 f4 3b a6 db 52 84 77 bd 27 a3 91 89 ae d7 8d ac 2b 6f 6a 2d e4 d6 ee 28 33 6d ac 57 9e ce 3c 61 55 2e 1b f4 9d e7 ef b6 52 e4 ec 43 73 e5 04 bb bd cd a8 d2 bd d2 3a c8 55 8e 8a 72 c6 f2 be 9f 37 9c e8 95 33 e3 92 4f d1 de b3 61 94 Data Ascii: .y\>("^rSPnLE."q;y""tA#n6-,>fMUJ\|UQLl/VpPo;Bu{SLfknf, sUYc;Rw'+oj-(3mW<aU.RCs:Ur73Oa
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: ac fc 25 16 4b c5 e7 ee c3 51 30 92 92 2f bc ac 51 82 01 85 a2 f0 6e b3 8a 62 5c 8c 91 8f e7 46 13 07 32 b7 23 a2 2c 36 c3 eb 25 e1 94 b1 44 3a 2d 11 c8 a1 b3 5b c4 be 87 38 30 0a 50 20 e8 ad b3 ea a5 7f db 54 c4 89 52 63 cc ac 25 83 dd 3f d3 4a 06 0b 3a 90 83 a3 c4 9c e8 50 93 50 05 67 1a ab 5a 13 03 0f 66 fb 43 40 7e 04 26 76 ea 15 cb 2e ca 04 57 c4 b1 14 62 aa ca 96 3f 5e 3c 34 79 a6 e0 4d f8 a1 07 cf b7 1b 3d f2 95 45 b3 92 76 ef 0d f8 86 0b a9 b0 a0 2d a3 a3 ce bd c9 93 b5 41 80 b0 fb 98 73 09 23 f5 be d4 0e 44 96 bc ec bc de 3e 4b c3 12 67 d8 20 27 70 38 b7 89 65 02 9a 8a 54 67 17 f1 0b 2f 7d 05 a8 b0 46 8b 70 3b e5 91 fc ec 21 b6 a5 da a4 e8 24 65 65 4e 75 be 3c 9b c2 df 91 ef 68 58 b3 eb f4 d2 48 d3 06 0c af 8e 7b bf ad 13 e4 c7 b5 bd a7 fd 02 ca Data Ascii: %KQ0/Qnb\F2#,6%D:-[80P TRc%?J:PPgZfC@~&v.Wb?^<4yM=Ev-As#D>Kg 'p8eTg/}Fp;!$eeNu<hXH{
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 86 3f 18 31 90 03 7e b1 41 ce e2 20 b6 6d d2 94 05 69 11 6b c5 7b 98 88 3e f7 9e 2d 78 85 21 30 4d df 7b 9b a9 0f 40 98 84 ea b5 8f 3a e8 02 06 79 1c d4 fb 3f a3 42 6c 1e cb 00 87 c6 04 72 b7 f6 38 da 63 b8 31 ce 58 d7 17 79 1f 31 1a 28 f2 68 65 5f 6b ef 47 0c 51 c5 c6 20 1c e1 31 70 ef 20 c9 da d9 9c dd 0c 71 be cb 15 9b 64 72 c5 ba b2 d5 a2 93 e3 06 ea 4f 1f 36 e3 21 08 04 ca 57 e8 bd 09 20 fd f7 06 55 99 e5 ed 44 81 65 b0 35 18 97 92 5a 8c db 9c e5 29 7b 0a 38 70 49 41 c8 83 cd 4a 9e dd e6 f5 66 65 f9 bc 76 3b 8f 97 9d c5 e3 d9 ec 5e 6f 76 16 2c a4 09 04 64 f0 12 b4 ab 33 ff d7 e1 69 13 7a 47 d5 34 7c 5e 82 7a 6d a6 26 81 cf ce cf 1f a7 e7 73 73 de a1 44 e0 0f 26 c1 3d db 4a 73 c9 89 60 e8 ae e7 4f da 76 5e fd ba 5a 15 1f 0d 6e 4e 3e 7d c8 25 91 2f 20 Data Ascii: ?1~A mik{>-x!0M{@:y?Blr8c1Xy1(he_kGQ 1p qdrO6!W UDe5Z){8pIAJfev;^ov,d3izG4\|^zm&ssD&=Js`Ov^ZnN>}%/
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: b8 84 33 c0 cf 3f 31 6f de bc ac 1f 62 36 87 84 fc d2 5a 61 9a 78 94 01 7f 93 e9 8f da b2 47 86 c8 d3 fb 73 ed a1 c3 1e e0 77 75 60 f7 73 0e 81 35 92 c4 fa dd 8a 8c ae d1 f6 d7 83 77 9c fb a8 17 81 7c f1 59 72 ec b4 f0 f8 31 5f 67 a5 f2 01 5f dc 51 bf 5f 98 fd 77 8c 09 58 72 ce 82 a2 c2 0f 02 43 f4 74 a1 3a 21 7a dd 5a e7 e1 1c 10 31 77 b8 8a f6 1d 58 b5 49 d4 b6 b8 14 ed 63 21 84 1d d1 69 f7 fd c8 a7 26 34 d6 29 14 cb 1c 6b 2f 51 b4 96 ba c5 10 62 5c 7c af 50 1a c5 70 9c 33 31 11 28 2a f1 54 b7 53 81 5a ad a1 d3 51 e2 28 49 9c a2 82 84 78 c4 62 56 43 80 e9 66 dc d4 35 27 fb 3b a5 00 08 3a 24 36 c8 c0 e5 da c4 32 a0 30 14 38 f0 9b 21 e5 ae a4 a2 43 dd bd d7 2a a6 00 78 5d 5f 50 06 93 a5 31 1f ea 35 5f d3 95 f1 30 31 4b af b9 20 b3 27 44 c5 0e 41 8b a5 65 Data Ascii: 3?1ob6ZaxGswu`s5w\|Yr1_g_Q_wXrCt:!zZ1wXIc!i&4)k/Qb\\|Pp31(TSZQ(IxbVCf5';:$6208!Cx]_P15_01K 'DAe
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 4c d6 78 41 4d 01 5a f6 ce fe fc 47 5e 24 be c0 80 8f 86 26 08 c7 ab 39 e5 9b 08 c7 6d 99 15 2b 44 8d f6 59 33 26 85 be 43 0c 79 87 18 da 3b 20 15 1d c2 d1 c9 7b bc 4b f7 71 cc 7e d2 85 5b 15 92 5f bc 3e 32 7c ca ea 18 d2 c2 d8 0b 6e 6b b4 77 ee 39 70 a3 8a 2f 4e 38 2f 11 31 e4 5a 73 48 bc 7a 3e 8e d8 c9 9b e6 ac 03 c3 4e 48 af 70 37 07 08 3a 3a 4d 5e 93 29 1a 88 de f7 ee 48 e1 f8 f0 b8 e0 a8 1b 68 2a 37 74 79 79 9c 8d e3 74 0a 2c 43 44 02 0d d6 0e 37 b7 c6 56 79 26 45 63 a6 eb 3d d6 26 ab c5 4a 58 bf a9 60 8d 99 a7 c0 36 54 23 bd df 05 b0 75 24 a6 20 bd 20 3f a9 20 bd ae 51 cd ff ce e7 f7 42 ab 3e 5f fc 02 05 84 d6 26 6d 5a 5a 61 9e ad 20 3d cd 77 42 58 58 57 58 68 2f ac ab 83 7a 3a 58 f2 84 81 b1 23 83 6e 9b 7f c4 e5 b9 14 6a ec 9c 3a 36 2e b6 3a f6 5b Data Ascii: LxAMZG^$&9m+DY3&Cy; {Kq~[_>2\|nkw9p/N8/1ZsHz>NHp7::M^)Hh*7tyyt,CD7Vy&Ec=&JX`6T#u$ ? QB>_&mZZa =wBXXWXh/z:X#nj:6.:[
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: c7 7f 45 cf 20 bc c6 92 ae e3 88 5d d8 2f 21 e1 01 67 44 f1 5f 63 49 4f b0 b2 5f 4d db be 57 be ae 4c bc 81 13 23 fe e9 47 98 31 a1 e4 1b 4e fc 33 23 ee e9 4f c7 ab 55 19 fa 81 32 e9 63 6c a6 cd 06 77 4d c1 2d 15 2d d6 26 63 33 75 78 3f 41 be 05 d0 49 a4 49 32 89 2b 6a 8b 56 4c 8e 34 3a e9 be bc 0d fc f5 63 8e 31 16 e9 55 d7 e8 18 cf 98 42 b9 bd 63 57 0d 08 1a 24 41 9f cb 31 cb af 29 e5 33 fb 06 27 ab 7e 68 55 81 93 ca 68 82 8c 93 5d b5 c8 c1 05 3d 5d 1c 93 73 9b ff 4f 25 c6 25 d5 b0 5a 25 72 ae 10 16 f3 21 3e b5 b6 d4 d6 5a ca 51 93 3c de 51 e4 76 f5 17 20 27 e7 9d 87 78 cc 8b c7 64 8e b9 3e cf 67 d6 f2 f8 bb 52 09 0a d4 9a ab b4 4e ca a0 77 cd 47 01 f8 d8 de 8f 61 76 e5 cb ca bb 98 00 39 84 d7 12 4a b8 c3 87 69 5c a2 1b 10 04 ab 32 2e 3e 36 2d 13 08 f7 Data Ascii: E ]/!gD_cIO_MWL#G1N3#OU2clwM--&c3ux?AII2+jVL4:c1UBcW$A1)3'~hUh]=]sO%%Z%r!>ZQ<Qv 'xd>gRNwGav9Ji\2.>6-
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 1c 6b e7 68 9a 65 41 e3 ea a7 5f 9f 2a d8 0b 40 f4 87 a3 a6 c3 74 4d 06 5c 34 1c 22 ad 90 f2 7f 67 1a 5c 68 46 71 4c e4 c8 96 84 d8 8e 1b c2 1a 26 b2 e0 81 5d 3c 1d 19 70 9a 53 b3 c1 76 e6 6f 61 71 8c 70 d1 e6 7c e2 a6 ee 84 15 f7 1e cd b8 1c 87 f3 0e ba 70 72 ac 61 b7 15 5e 27 eb f9 ae 16 d8 c6 d1 9a 03 e6 2b 9a 33 fc 7b 62 d2 b6 bb ea 52 3d 9e 6d 9c ca 0f 23 db 8f a4 b4 dd 77 6b 5a 74 dd ec 79 9d 9b 1e b8 61 1d 70 83 c7 83 89 4e df cc 59 22 2d a4 78 12 7f d9 04 ac 34 5b 8a f6 67 e7 4b a3 ee f6 e2 34 1c a9 48 5d 7a 75 eb 32 a4 d8 b6 93 4a 8c 09 88 b7 4b 86 70 43 9b f8 f8 48 dd cc 1b df 5e 9e 7a b5 ef b9 fa 73 c0 61 d6 8d ab 7e 10 dd 5d 49 52 49 90 a2 4e 11 5c 68 ab f8 3d 39 b9 44 a2 45 18 09 5c e0 a0 31 0c 2f 33 10 92 a4 44 a3 26 f7 b7 a2 54 67 aa 00 ea Data Ascii: kheA_*@tM\4"g\hFqL&]<pSvoaqp\|pra^'+3{bR=m#wkZtyapNY"-x4[gK4H]zu2JKpCH^zsa~]IRIN\h=9DE\1/3D&Tg
2024-05-02 14:32:59 UTC	601	IN	Data Raw: ba 2f 53 ca 64 43 9d d5 3c 5a 13 e4 3e 1b 21 6a 76 4e 1f e5 68 2f cb d6 72 d7 1a 56 0c ac 17 dc 11 3c 79 88 43 a5 13 f4 d7 2a 71 5b c7 39 ce 43 ab 04 b5 5d d9 1b 76 1e 58 01 48 03 65 28 13 61 ac d4 01 52 98 eb 5f f1 24 85 b4 ba 29 d9 09 c6 5f ba 66 72 80 fb 17 d9 f5 65 a5 e1 fc d7 22 f3 ff 88 04 4c 2f 3f 7b 4e 7c 46 13 7f fe c1 44 f4 5a 33 ec 03 75 1b a4 7f 97 b4 15 60 1c 91 fc de 8e 84 b7 28 fe 92 33 00 bb 6d 17 61 a4 13 8a 54 0a 19 62 32 a0 71 30 d4 b0 c8 92 d2 86 61 20 9c f9 ff 27 87 76 a1 01 a7 01 57 fd eb a2 82 57 60 75 14 50 bb 80 2a fe 78 bd db 74 16 30 48 85 6d 01 bc 9c 17 d1 0c 24 ab da 98 c8 ef 4d 92 8e 91 eb 7c 8a 2a 04 18 8e 2e a2 43 46 7e 1f a5 ea 69 d0 70 1e 9a 29 f6 1f 23 61 16 fe 7f e1 d6 99 49 44 96 ef 51 93 84 05 90 17 41 88 5f 1f 8f 79 Data Ascii: /SdC<Z>!jvNh/rV<yCq[9C]vXHe(aR_$)_fre"L/?{N\|FDZ3u`(3maTb2q0a 'vWW`uPxt0Hm$M\|*.CF~ip)#aIDQA_y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49791	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:58 UTC	629	OUT	GET /wp-content/uploads/2021/01/NLI_Logo_COD_F_GY.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:59 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:58 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:19:09 GMT Accept-Ranges: bytes Content-Length: 39487 Connection: close Content-Type: image/png
2024-05-02 14:32:59 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 52 00 00 01 b8 08 06 00 00 00 4f 66 d6 ca 00 00 00 09 70 48 59 73 00 00 2c 4b 00 00 2c 4b 01 a5 3d 96 a9 00 00 20 00 49 44 41 54 78 01 ec bd 4d 72 dc b8 97 ee ed 72 d4 b8 3a 2b e2 8e e5 f4 06 54 e9 71 47 4b e9 51 cf 64 79 dc 11 fa d8 80 2d 6f 40 0a 79 03 96 bd 01 a5 15 d1 63 a7 3d bb 23 d1 ea f8 8f 9d f6 06 9c d6 b8 23 2a df 5a c0 ad f7 79 54 a4 9c a2 f8 05 10 24 41 f0 41 04 94 24 78 70 70 ce 0f cc 24 0e 01 52 bf fc fd f7 df 0f fe fd df ff 63 f4 e0 c1 83 09 72 9d b4 fa d7 bf fe 67 61 ab 00 36 8c 51 97 b9 6a 5a a0 bd 55 55 e1 aa 72 b1 1d 53 c8 3f 41 26 13 e6 df 90 f3 d2 5f 38 40 bf 23 e4 2f b0 69 8e cf 5e 26 f8 3e 85 e1 4f 91 e9 f3 08 79 0b b9 2c 5d 41 60 89 fc 05 79 0e ff b9 6d 94 1c 9d 7f 46 6d 5a Data Ascii: PNGIHDRROfpHYs,K,K= IDATxMrr:+TqGKQdy-o@yc=##*ZyT$AA$xpp$Rcrga6QjZUUrS?A&_8@#/i^&>Oy,]A`ymFmZ
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 20 33 c8 b3 49 ec bb a7 4d da 68 63 94 ea d8 11 c0 60 7f 84 9a 9c 15 65 00 ad e4 96 00 5f 40 b1 eb 56 a5 b4 89 80 19 81 2e 02 a9 99 99 89 cd 48 c7 17 a9 27 d0 ce 8b 56 93 e9 35 da da 6f b2 81 aa ba 63 9f 39 c0 e6 20 a6 e9 c4 36 5e a1 cd 3a 77 c3 9b b6 31 57 3f ee 02 db fc 38 73 00 d7 44 b2 d1 3b 6d c2 10 e9 f4 9e c0 27 58 c8 00 ea 51 fc 7d af 6d 30 f4 f0 26 c8 36 f2 45 6d 65 ff 28 b8 c2 07 ed 5b 54 d1 b7 d6 3e eb d5 4d fc 4d 6a fc f7 98 36 23 93 d9 53 64 f6 49 95 f4 0d 42 49 df 45 55 2a 48 a6 17 04 8a 66 27 7b e1 80 e7 46 be 8f 67 fc 3c 37 53 e6 85 4a a0 d5 a5 7d 84 c8 0b 0c 06 a9 bc b0 ec 74 0d 15 b6 f0 42 fe 08 f6 1c e0 f3 14 79 03 d9 55 e2 45 9f cb 47 2a 0d 16 5c 35 5a a6 07 f6 70 a9 c8 23 c8 bd 42 3e 42 76 7d 97 ec 2f e8 3c 43 7e c3 be c6 67 5f 13 07 Data Ascii: 3IMhc`e_@V.H'V5oc9 6^:w1W?8sD;m'XQ}m0&6Eme([T>MMj6#SdIBIEUHf'{Fg<7SJ}tByUEG\5Zp#B>Bv}/<C~g_
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 44 40 04 7a 4b 60 d2 23 cb c7 3d b2 55 a6 06 4a 00 41 c6 1c f9 0f b8 f7 04 f9 35 f2 55 40 ae 5e c3 b7 99 2f fe 04 1f 48 c5 a0 43 9e 95 3a d6 eb d0 7d f9 3a c9 0e 11 10 01 11 10 81 06 08 f4 29 90 e2 ff 90 52 12 01 2f 08 20 e0 58 20 73 f6 86 b3 54 0c aa 42 78 6f c0 89 17 70 63 23 82 0c a4 d2 6f b4 8b ff 41 ef b5 4f e0 1d db f2 d6 b1 3e a9 13 01 11 10 01 11 10 01 5f 08 fc ee 8b 21 15 ec d8 c3 52 c4 3e 05 7e 15 5c 92 48 08 04 18 54 c1 0f e6 be a7 b9 4f 0e 04 19 48 e5 00 f6 2a 82 cd b1 d1 b6 78 27 1d 3c da 2a 52 3d 11 10 01 11 10 01 11 10 81 5a 04 3e 2b 98 aa c5 4f 95 9b 23 b0 6a 4e 75 2b 9a af 10 10 7a e5 c3 90 02 29 46 b0 21 4c 69 e6 9d a9 9a 95 ca 23 a3 72 11 10 01 11 10 01 11 68 8f 00 9f 5f d6 bf 28 69 8f b7 5a aa 4e 60 51 5d d4 4b c9 c8 37 ab 06 13 48 c5 Data Ascii: D@zK`#=UJA5U@^/HC:}:)R/ X sTBxopc#oAO>_!R>~\HTOHx'<R=Z>+O#jNu+z)F!Li#rh_(iZN`Q]K7H
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 01 d2 1c 65 9c 9d ba 4a 1f eb d1 fe b2 47 b6 0e d1 d4 68 88 4e 3b f4 79 d7 a1 2e 13 55 49 10 b5 48 57 c2 ef 06 cb ba ba 49 bf 87 e0 72 9c b6 a9 ed 7d 05 52 6d 13 ef b0 3d cc 4a f1 42 d9 e7 8b 64 87 f4 d4 b4 08 88 80 08 04 41 80 77 b4 39 3b 35 49 7b c3 bb cd c8 db 28 7f 9d 3e d6 87 7d d8 be ec 83 9d 03 b6 d1 c7 d7 d3 af 7a d4 1f 5d cc c0 30 48 e2 4c 14 03 a6 bc 14 e5 1d 68 a1 fc b4 85 36 0a 9b 50 20 55 88 27 c8 83 27 41 7a 25 a7 44 40 04 44 40 04 aa 12 d8 80 e0 17 04 53 07 59 15 30 68 e2 75 e2 29 b2 96 fa 65 01 52 99 2d 01 de cc f5 2d 5d fa 66 50 81 3d 6d 2f eb fb 06 5b fe 28 09 a2 68 ee 87 02 9b 9b 3e d4 f9 ac 94 02 a9 a6 bb d8 33 fd 98 95 8a 60 d2 85 67 66 c9 1c 11 10 01 11 10 81 f6 09 9c 23 98 7a 9f b3 d4 2f 82 39 7f 20 73 30 a5 24 02 b5 09 c4 33 86 be Data Ascii: eJGhN;y.UIHWIr}Rm=JBdAw9;5I{(>}z]0HLh6P U''Az%D@D@SY0hu)eR--]fP=m/[(h>3`gf#z/9 s0$3
2024-05-02 14:32:59 UTC	7502	IN	Data Raw: 93 b9 ef 40 e4 cb d7 1d 02 a6 79 ad 10 40 3f dd 85 c3 3e 81 eb 61 e2 3e dd 25 4e db 50 fe 09 fe 3e 4d 64 84 f8 9c 25 d2 35 06 35 a3 99 13 d1 46 19 00 f9 1d 99 0b a1 14 89 7a b8 90 66 bf 9e 42 9a 5a df 9b 42 9b f8 ce b3 be 7c eb 8e 89 76 4a f4 08 8b cf 14 cf 63 a6 00 95 2b f4 d1 93 dd 3f e7 7d 1f e8 e8 0d e4 96 81 32 2b f6 90 85 d4 58 4f a5 7c 1f b2 75 0a 60 62 da 72 8a 32 3b a8 54 ca c5 94 ef 62 fa 11 02 08 df 7e 35 45 dc ad 4e e1 08 9c 06 88 ac 5b df ba 4a b8 98 7a 09 5d b3 00 ac c6 cc 3a 8a 53 29 d7 36 9f 00 94 cf 42 3e 04 4f ea e3 f8 9b 22 78 0b b1 db 15 af 9d 4a 75 85 6c 9c 5e df f9 78 3b d1 02 22 ce cb 9e a4 70 0a 94 c3 94 f6 3f 90 7c 31 ab f5 1a 38 ce 40 60 5c 25 25 6d 41 27 c9 8e 89 f6 3a c0 19 be d6 fe 53 00 ff 37 ac 21 0b 29 0a 8e 66 07 8e ce b8 Data Ascii: @y@?>a>%NP>Md%55FzfBZB\|vJc+?}2+XO\|u`br2;Tb~5EN[Jz]:S)6B>O"xJul^x;"p?\|18@`\%%mA':S7!)f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49792	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:58 UTC	589	OUT	GET /wp-content/et-cache/1/1/39/et-divi-dynamic-39-late.css HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:59 UTC	206	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:59 GMT Server: Apache Last-Modified: Mon, 29 Apr 2024 14:36:42 GMT Accept-Ranges: bytes Content-Length: 24312 Connection: close Content-Type: text/css
2024-05-02 14:32:59 UTC	7986	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 45 54 6d 6f 64 75 6c 65 73 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 73 72 63 3a 75 72 6c 28 2f 2f 6e 61 74 75 72 61 6c 65 61 72 6e 69 6e 67 2e 6f 72 67 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 44 69 76 69 2f 63 6f 72 65 2f 61 64 6d 69 6e 2f 66 6f 6e 74 73 2f 6d 6f 64 75 6c 65 73 2f 61 6c 6c 2f 6d 6f 64 75 6c 65 73 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 2f 2f 6e 61 74 75 72 61 6c 65 61 72 6e 69 6e 67 2e 6f 72 67 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 44 69 76 69 2f 63 6f 72 65 2f 61 64 6d 69 6e 2f 66 6f 6e 74 73 2f 6d 6f 64 75 6c 65 73 2f 61 6c 6c 2f 6d 6f 64 75 6c 65 73 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 22 Data Ascii: @font-face{font-family:ETmodules;font-display:block;src:url(//naturalearning.org/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.eot);src:url(//naturalearning.org/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.eot?#iefix) format("
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 20 2e 65 74 5f 70 62 5f 66 69 6c 74 65 72 61 62 6c 65 5f 70 6f 72 74 66 6f 6c 69 6f 20 2e 65 74 5f 70 62 5f 70 6f 72 74 66 6f 6c 69 6f 5f 66 69 6c 74 65 72 73 20 75 6c 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 20 2e 65 74 5f 70 62 5f 66 69 6c 74 65 72 61 62 6c 65 5f 70 6f 72 74 66 6f 6c 69 6f 20 2e 65 74 5f 70 62 5f 70 6f 72 74 66 6f 6c 69 6f 5f 66 69 6c 74 65 72 73 20 6c 69 7b 77 69 64 74 68 3a 35 30 25 7d 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 20 2e 65 74 5f 70 62 5f 66 69 6c 74 65 72 61 62 6c 65 5f 70 6f 72 74 66 6f 6c 69 6f 20 2e 65 74 5f 70 62 5f 70 6f 72 74 66 6f 6c 69 6f 5f 66 69 6c 74 65 72 73 20 6c 69 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 61 7b 62 6f 72 64 65 72 2d 72 61 64 Data Ascii: .et_pb_column .et_pb_filterable_portfolio .et_pb_portfolio_filters ul{width:100%}.et_pb_column .et_pb_filterable_portfolio .et_pb_portfolio_filters li{width:50%}.et_pb_column .et_pb_filterable_portfolio .et_pb_portfolio_filters li:first-child a{border-rad
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 63 6f 6c 75 6d 6e 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 36 20 2e 65 74 5f 70 62 5f 67 72 69 64 5f 69 74 65 6d 2c 2e 65 74 5f 70 62 5f 72 6f 77 5f 33 2d 35 5f 31 2d 35 5f 31 2d 35 3e 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 35 20 2e 65 74 5f 70 62 5f 67 72 69 64 5f 69 74 65 6d 2c 2e 65 74 5f 70 62 5f 72 6f 77 5f 34 63 6f 6c 3e 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 34 20 2e 65 74 5f 70 62 5f 67 72 69 64 5f 69 74 65 6d 2c 2e 65 74 5f 70 62 5f 72 6f 77 5f 35 63 6f 6c 3e 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 35 20 2e 65 74 5f 70 62 5f 67 72 69 64 5f 69 74 65 6d 2c 2e 65 74 5f 70 62 5f 72 6f 77 5f 36 63 6f 6c Data Ascii: column.et_pb_column_1_6 .et_pb_grid_item,.et_pb_row_3-5_1-5_1-5>.et_pb_column.et_pb_column_1_5 .et_pb_grid_item,.et_pb_row_4col>.et_pb_column.et_pb_column_1_4 .et_pb_grid_item,.et_pb_row_5col>.et_pb_column.et_pb_column_1_5 .et_pb_grid_item,.et_pb_row_6col
2024-05-02 14:32:59 UTC	326	IN	Data Raw: 6f 6e 65 20 2e 65 74 2d 70 62 2d 61 72 72 6f 77 2d 6e 65 78 74 2c 2e 65 74 5f 70 62 5f 62 67 5f 6c 61 79 6f 75 74 5f 64 61 72 6b 5f 70 68 6f 6e 65 20 2e 65 74 2d 70 62 2d 61 72 72 6f 77 2d 70 72 65 76 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 7d 2e 65 74 5f 6d 6f 62 69 6c 65 5f 64 65 76 69 63 65 20 2e 65 74 2d 70 62 2d 61 72 72 6f 77 2d 70 72 65 76 7b 6c 65 66 74 3a 32 32 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 2e 65 74 5f 6d 6f 62 69 6c 65 5f 64 65 76 69 63 65 20 2e 65 74 2d 70 62 2d 61 72 72 6f 77 2d 6e 65 78 74 7b 72 69 67 68 74 3a 32 32 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 37 70 78 29 7b 2e 65 74 5f 6d 6f 62 69 6c 65 5f 64 65 76 69 63 65 20 2e 65 74 2d 70 62 2d 61 72 72 6f 77 2d 70 72 65 76 7b 6c Data Ascii: one .et-pb-arrow-next,.et_pb_bg_layout_dark_phone .et-pb-arrow-prev{color:#fff}}.et_mobile_device .et-pb-arrow-prev{left:22px;opacity:1}.et_mobile_device .et-pb-arrow-next{right:22px;opacity:1}@media (max-width:767px){.et_mobile_device .et-pb-arrow-prev{l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49795	108.138.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:58 UTC	567	OUT	GET /brand-assets/utility-bar/ub.php?color=black&ver=6.5.2 HTTP/1.1 Host: cdn.ncsu.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:59 UTC	761	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 41016 Connection: close Date: Thu, 02 May 2024 14:33:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Last-Modified: Thu, 27 Jul 2023 13:30:27 GMT ETag: "b6a0a763b31124bea2745ab65956e806" x-amz-server-side-encryption: AES256 x-amz-meta-s3cmd-attrs: atime:1690464329/ctime:1690464329/gid:108/gname:ncsu/md5:b6a0a763b31124bea2745ab65956e806/mode:33276/mtime:1690464329/uid:27926/uname:brabec Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 54798bbc2ce3e33c706761634ac87e48.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: YMHR9WUCTVOzLYU28lDzjb67sd3-JOJhrjwUCHVux2qLIL5oiPquKw==
2024-05-02 14:32:59 UTC	15623	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 69 66 28 6e 5b 65 5d 29 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 6e 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 65 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 69 29 2c 61 2e 6c 3d 21 30 2c 61 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 74 2c 69 2e 63 3d 6e 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 69 2e 6f 28 74 2c 6e 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 65 7d 29 7d 2c 69 2e 72 3d 66 75 6e Data Ascii: !function(t){var n={};function i(e){if(n[e])return n[e].exports;var a=n[e]={i:e,l:!1,exports:{}};return t[e].call(a.exports,a,a.exports,i),a.l=!0,a.exports}i.m=t,i.c=n,i.d=function(t,n,e){i.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},i.r=fun
2024-05-02 14:32:59 UTC	16384	IN	Data Raw: 39 39 20 37 31 2e 39 39 38 7a 27 2f 25 33 45 25 33 43 2f 73 76 67 25 33 45 5c 22 29 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 6c 65 66 74 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 31 2e 32 65 6d 3b 5c 6e 7d 5c 6e 5c 6e 23 6e 63 73 74 61 74 65 2d 75 74 69 6c 69 74 79 2d 62 61 72 20 2e 6e 63 73 74 61 74 65 2d 75 74 69 6c 69 74 79 2d 62 61 72 2d 68 6f 6d 65 20 61 3a 68 6f 76 65 72 20 7b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 5c 6e 7d 5c 6e 5c 6e 23 6e 63 73 74 61 74 65 2d 75 74 69 6c 69 74 79 2d 62 61 72 20 2e 6e 63 73 74 61 74 65 2d 75 74 69 6c 69 74 79 2d 62 Data Ascii: 99 71.998z'/%3E%3C/svg%3E\");\n background-repeat: no-repeat;\n background-position: left;\n background-size: 1.2em;\n}\n\n#ncstate-utility-bar .ncstate-utility-bar-home a:hover {\n background-color: #333;\n}\n\n#ncstate-utility-bar .ncstate-utility-b
2024-05-02 14:32:59 UTC	9009	IN	Data Raw: 3d 3d 74 79 70 65 6f 66 20 62 74 6f 61 3f 28 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 6e 6b 22 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 2e 61 74 74 72 73 2e 74 79 70 65 26 26 28 74 2e 61 74 74 72 73 2e 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 29 2c 74 2e 61 74 74 72 73 2e 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 2c 6d 28 6e 2c 74 2e 61 74 74 72 73 29 2c 68 28 74 2c 6e 29 2c 6e 7d 28 6e 29 2c 65 3d 53 2e 62 69 6e 64 28 6e 75 6c 6c 2c 69 2c 6e 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 28 69 29 2c 69 2e 68 72 65 66 26 26 55 52 4c 2e 72 65 76 6f 6b 65 4f 62 6a 65 63 74 55 52 4c 28 69 2e 68 72 65 66 29 7d 29 3a 28 69 3d 67 28 6e 29 Data Ascii: ==typeof btoa?(i=function(t){var n=document.createElement("link");return void 0===t.attrs.type&&(t.attrs.type="text/css"),t.attrs.rel="stylesheet",m(n,t.attrs),h(t,n),n}(n),e=S.bind(null,i,n),a=function(){f(i),i.href&&URL.revokeObjectURL(i.href)}):(i=g(n)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49793	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:59 UTC	607	OUT	GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:59 UTC	206	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:59 GMT Server: Apache Last-Modified: Tue, 15 Dec 2020 20:54:04 GMT Accept-Ranges: bytes Content-Length: 11256 Connection: close Content-Type: text/css
2024-05-02 14:32:59 UTC	7986	IN	Data Raw: 2e 6d 65 6a 73 2d 6f 66 66 73 63 72 65 65 6e 7b 62 6f 72 64 65 72 3a 30 3b 63 6c 69 70 3a 72 65 63 74 28 31 70 78 2c 31 70 78 2c 31 70 78 2c 31 70 78 29 3b 2d 77 65 62 6b 69 74 2d 63 6c 69 70 2d 70 61 74 68 3a 69 6e 73 65 74 28 35 30 25 29 3b 63 6c 69 70 2d 70 61 74 68 3a 69 6e 73 65 74 28 35 30 25 29 3b 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 70 78 3b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c Data Ascii: .mejs-offscreen{border:0;clip:rect(1px,1px,1px,1px);-webkit-clip-path:inset(50%);clip-path:inset(50%);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px;word-wrap:normal}.mejs-container{background:#000;font-family:Helvetica,Arial
2024-05-02 14:32:59 UTC	3270	IN	Data Raw: 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 35 29 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6c 65 66 74 3a 35 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 38 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 77 69 64 74 68 3a 32 70 78 7d 2e 6d 65 6a 73 2d 76 6f 6c 75 6d 65 2d 63 75 72 72 65 6e 74 7b 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 65 6a 73 2d 76 6f 6c 75 6d 65 2d 63 75 72 72 65 6e 74 2c 2e 6d 65 6a 73 2d 76 Data Ascii: hsla(0,0%,100%,.5);height:100px;left:50%;margin:0;position:absolute;top:8px;-webkit-transform:translateX(-50%);-ms-transform:translateX(-50%);transform:translateX(-50%);width:2px}.mejs-volume-current{left:0;margin:0;width:100%}.mejs-volume-current,.mejs-v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49794	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:59 UTC	616	OUT	GET /wp-content/themes/Divi/core/admin/fonts/modules/all/modules.woff HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://naturalearning.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:59 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:59 GMT Server: Apache Last-Modified: Sat, 20 Apr 2024 13:43:59 GMT Accept-Ranges: bytes Content-Length: 92084 Connection: close Content-Type: font/woff
2024-05-02 14:32:59 UTC	7985	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 01 67 b4 00 0b 00 00 00 01 67 68 00 02 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 08 00 00 00 60 00 00 00 60 12 92 09 f1 63 6d 61 70 00 00 01 68 00 00 00 64 00 00 00 64 05 d1 af 16 67 61 73 70 00 00 01 cc 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 01 d4 00 01 5a 1c 00 01 5a 1c 26 06 ef 37 68 65 61 64 00 01 5b f0 00 00 00 36 00 00 00 36 27 b3 f6 44 68 68 65 61 00 01 5c 28 00 00 00 24 00 00 00 24 0a 41 07 d8 68 6d 74 78 00 01 5c 4c 00 00 06 68 00 00 06 68 61 c4 63 b5 6c 6f 63 61 00 01 62 b4 00 00 03 36 00 00 03 36 e1 eb 8c be 6d 61 78 70 00 01 65 ec 00 00 00 20 00 00 00 20 01 ba 01 09 6e 61 6d 65 00 01 66 0c 00 00 01 86 00 00 01 86 9b b2 b6 36 70 6f 73 74 00 01 67 94 00 00 00 Data Ascii: wOFFgghOS/2``cmaphddgaspglyfZZ&7head[66'Dhhea\($$Ahmtx\Lhhaclocab66maxpe namef6postg
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 13 0d 0d 13 00 00 00 00 01 01 22 00 e2 02 de 02 9e 00 20 00 00 25 16 32 3f 01 17 16 32 37 36 34 2f 01 37 36 34 27 26 22 0f 01 27 26 22 07 06 14 1f 01 07 06 14 17 01 22 09 1a 0a b1 b1 0a 1a 09 0a 0a b1 b1 0a 0a 09 1a 0a b1 b1 0a 1a 09 0a 0a b1 b1 0a 0a e2 0a 0a b1 b1 0a 0a 09 1a 0a b1 b1 0a 1a 09 0a 0a b1 b1 0a 0a 09 1a 0a b1 b1 0a 1a 09 00 00 00 01 00 cb 00 83 03 78 03 38 00 33 00 00 25 1e 01 17 1e 01 17 1e 01 17 32 16 33 3a 01 33 36 32 33 3e 01 37 32 36 31 3e 01 37 3e 01 35 32 30 31 01 36 26 27 26 06 07 01 27 26 06 07 06 16 1f 01 30 32 01 b9 01 02 01 01 03 02 02 03 02 02 04 02 02 06 02 01 03 01 03 06 03 01 01 02 04 02 01 02 01 01 7d 0a 07 10 0f 25 0a fe a0 c3 0e 25 0c 0d 02 0d eb 01 8d 01 01 01 01 01 01 01 01 01 01 01 01 03 02 01 01 03 02 01 03 02 02 63 Data Ascii: " %2?2764/764'&"'&""x83%23:3623>7261>7>52016&'&'&02}%%c
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 01 03 fc 03 7f 00 2b 00 53 00 00 37 1e 01 33 32 36 37 1e 01 33 32 37 3e 01 37 36 35 34 27 2e 01 27 26 23 22 07 0e 01 07 06 15 14 17 1e 01 17 16 17 0e 01 07 0e 01 17 13 34 37 3e 01 37 36 33 32 17 1e 01 17 16 15 14 07 0e 01 07 06 23 22 26 27 26 06 07 0e 01 07 3e 01 37 36 26 27 2e 01 35 3d 04 0f 0a 45 7a 43 20 68 1c 69 5d 5c 8a 28 28 28 28 8a 5c 5d 69 69 5d 5c 8a 28 28 0a 09 25 1b 1b 22 0f 2a 1a 06 02 04 07 23 23 78 51 51 5c 5c 51 51 78 23 23 23 23 78 51 51 5c 1c 70 19 06 0b 05 2d 51 2a 12 1e 0c 04 06 09 43 47 14 09 0a 24 27 05 0a 20 21 71 4c 4c 57 56 4c 4c 71 21 21 21 21 71 4c 4c 56 29 28 27 4a 22 22 1d 24 42 1f 07 13 08 01 ca 49 40 40 60 1c 1c 1c 1c 60 40 40 49 49 41 40 60 1c 1b 0b 05 01 02 03 1c 20 07 1c 39 1e 0a 15 06 33 84 49 00 00 03 00 02 00 3a 04 00 Data Ascii: +S73267327>7654'.'&#"47>7632#"&'&>76&'.5=EzC hi]\((((\]ii]\((%"##xQQ\\QQx####xQQ\p-QCG$' !qLLWVLLq!!!!qLLV)('J""$BI@@``@@IIA@` 93I:
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: c3 02 fa 66 01 01 01 02 05 04 fd b9 01 3e 40 1b 25 25 1b 1b 25 25 1b 1b 25 25 1b 1b 25 25 03 05 0d 13 aa fe ea 02 03 02 92 07 0e 06 06 06 13 0d 0d 13 42 02 11 1f 01 3f 2b 26 02 01 6a 0b 0e 13 0d a0 fe c6 02 03 01 06 07 01 33 00 01 00 30 ff c1 03 dc 03 b1 00 4f 00 00 01 2e 01 07 06 16 17 01 16 32 37 36 34 27 01 2e 01 37 36 16 17 01 1e 01 07 06 26 27 01 26 27 2e 01 37 36 37 36 37 36 16 17 16 17 01 16 32 37 36 34 27 01 26 27 2e 01 07 06 07 06 07 06 16 17 16 17 01 1e 01 33 32 36 37 36 37 36 26 27 26 27 01 01 c2 32 75 2d 2c 08 32 01 6f 09 1b 09 09 09 fe 92 19 13 1e 1d 43 19 01 97 58 29 34 35 78 55 fe 3c 1c 15 15 0f 0a 0b 24 2a 2d 2c 4d 1d 1e 0e 01 a0 09 1b 09 09 09 fe 60 2f 31 32 60 2d 2e 27 27 12 11 07 19 19 2e 01 c4 1d 74 47 20 43 21 30 06 06 24 22 22 20 fe Data Ascii: f>@%%%%%%%%B?+&j30O.2764'.76&'&'.7676762764'&'.3267676&'&'2u-,2oCX)45xU<$*-,M`/12`-.''.tG C!0$""
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 04 0d 17 0b 6f 05 09 05 04 07 03 51 02 01 53 05 10 0a 6f 0a 17 0c 07 09 13 0a 0a 14 0a 4b 11 20 10 49 15 27 13 04 0d 17 0a 70 05 09 05 04 07 03 52 02 01 02 54 06 0f 0a 01 9f 49 3b 20 1f 94 49 49 3b 20 1f 94 63 38 28 28 38 38 28 28 38 02 af 1a 0c 1c 08 11 0a 54 0a 15 06 0d 06 06 0d 06 1f 54 0a 11 08 28 58 01 01 58 0c 1c 08 11 0a 54 0a 15 06 0d 06 06 0d 06 1f 54 0a 11 08 28 58 01 01 3e a1 14 1c 1c 14 14 1c 1c 01 9a 04 0d 17 0b 6f 05 09 05 04 07 03 51 02 01 53 05 10 0a 6f 0a 17 0c 07 09 13 0a 0a 14 0a 4c 10 20 10 49 15 27 13 04 0d 17 0a 70 05 09 05 04 07 03 52 02 01 02 54 06 0f 0a 6f 0a 17 0c 07 09 13 0a 0a 14 0a 4c 10 20 10 4a 14 28 12 01 64 1f 94 49 49 3b 20 1f 94 49 49 3b d0 28 38 38 28 28 38 38 fe 58 0a 19 3b 0a 11 08 28 1a 3e 01 01 58 28 08 11 0a 54 1f Data Ascii: oQSoK I'pRTI; II; c8((88((8TT(XXTT(X>oQSoL I'pRToL J(dII; II;(88((88X;(>X(T
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 17 1e 01 17 16 13 32 17 1e 01 17 16 15 14 06 07 0e 01 15 14 06 23 22 26 35 34 36 37 3e 01 35 34 26 23 22 06 15 14 06 23 22 26 35 34 37 3e 01 37 36 33 11 22 26 35 34 36 33 32 16 15 14 06 23 02 00 6a 5d 5e 8b 28 28 28 28 8b 5e 5d 6a 6a 5d 5e 8b 28 28 28 28 8b 5e 5d 6a 30 2e 2e 48 16 16 46 46 14 20 26 1a 1a 26 56 21 30 19 5c 24 2e 52 26 1a 1a 26 17 16 49 2e 2d 2f 1b 27 27 1b 1b 27 27 1b 40 28 28 8b 5e 5d 6a 6a 5d 5e 8b 28 28 28 28 8b 5e 5d 6a 6a 5d 5e 8b 28 28 03 80 0e 0e 3a 2c 2d 3d 47 6f 26 0b 24 09 1a 26 26 1a 3d 59 12 1b 38 19 46 26 3f 42 1b 25 25 1b 3e 30 30 42 10 11 fc fd 27 1b 1b 27 27 1b 1b 27 00 00 01 00 00 00 00 04 00 03 80 00 28 00 00 37 0e 01 07 32 37 3e 01 37 36 37 1e 01 33 32 37 3e 01 37 36 35 34 27 2e 01 27 26 23 22 07 0e 01 07 06 15 14 17 1e Data Ascii: 2#"&5467>54&#"#"&547>763"&54632#j]^((((^]jj]^((((^]j0..HFF &&V!0\$.R&&I.-/''''@((^]jj]^((((^]jj]^((:,-=Go&$&&=Y8F&?B%%>00B''''(727>767327>7654'.'&#"
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 01 00 1a ff e8 03 c0 03 bd 00 4c 00 00 17 1e 01 37 3e 01 37 3e 01 35 11 25 15 14 06 07 2a 01 07 30 22 39 01 0e 01 07 0e 01 17 1e 01 37 3e 01 37 3e 01 35 11 34 26 35 34 36 3d 01 34 26 07 05 0e 01 1d 01 1c 01 17 06 14 15 11 14 06 07 22 06 23 22 06 39 01 0e 01 07 0e 01 17 1a 23 82 37 17 1f 09 05 06 02 40 4a 12 02 03 02 02 15 2b 13 38 1b 24 23 82 37 1d 23 06 02 03 01 01 26 1a fd c0 1a 26 01 01 4a 12 01 02 01 02 03 15 2a 13 37 1c 24 0f 2e 05 2a 12 2b 18 0a 1b 10 01 de 6d fc 43 2c 04 01 04 12 0f 2b 7e 2f 2f 05 2b 15 39 1d 08 0f 09 02 6e 03 05 03 01 03 02 40 1a 1a 08 6d 08 31 1a 40 01 01 01 01 03 01 fe ad 43 2c 03 01 01 04 12 0f 2b 7e 2f 00 00 00 03 00 00 ff c0 04 00 03 c0 00 1b 00 29 00 37 00 00 01 22 07 0e 01 07 06 15 14 17 1e 01 17 16 33 32 37 3e 01 37 36 35 Data Ascii: L7>7>5%0"97>7>54&546=4&"#"9#7@J+8$#7#&&J7$.*+mC,+~//+9n@m1@C,+~/)7"327>765
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 42 5e 5e 42 42 5e 5e 42 a7 10 16 16 10 0f 16 16 01 c0 27 37 37 27 27 37 37 27 02 00 28 28 8b 5e 5d 6a 6a 5d 5e 8b 28 28 28 28 8b 5e 5d 6a 6a 5d 5e 8b 28 28 fd 7c 19 25 10 0f 1c 0d 0e 11 06 06 08 01 01 01 01 01 01 08 06 06 11 0e 0d 1c 0f 10 25 19 1a 29 41 41 29 1a 1a 24 10 0f 1c 0d 0e 11 06 06 08 01 01 01 01 01 01 08 06 06 11 0e 0d 1c 0f 10 25 19 1a 29 41 41 29 01 22 0b 11 08 08 0b 04 04 06 01 01 01 01 01 01 06 04 04 0b 08 08 11 0b 08 1b 17 19 26 3f 3f 26 19 17 1b 08 0b 11 08 08 0b 04 04 06 01 01 01 01 01 01 06 04 04 0b 08 08 11 0b 08 1b 17 19 26 3f 3f 26 19 17 1b fe b0 5e 42 42 5e 5e 42 42 5e 01 21 16 10 0f 16 16 0f 10 16 00 00 08 00 00 ff c0 04 00 03 c0 00 09 00 1d 00 2c 00 47 00 54 00 61 00 7d 00 99 00 00 01 1e 01 17 3e 01 37 2e 01 07 07 06 07 0e 01 07 Data Ascii: B^^BB^^B'77''77'((^]jj]^((((^]jj]^((\|%%)AA)$%)AA)"&??&&??&^BB^^BB^!,GTa}>7.
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 0d 16 09 09 09 09 09 02 1c fe e7 b0 6a 03 0b 0b 1a 10 0d 17 09 0a 0d 03 08 12 0a 0b 16 0c 13 21 0e 0d 13 05 09 16 0d 0d 1c 0e 0f 1b 0d 0d 17 0a 09 0f 06 06 05 03 c0 70 50 fd 80 50 70 70 50 02 80 50 70 ff 09 10 07 08 0b 04 04 04 04 04 04 0b 08 07 10 09 0a 14 0b 0b 14 0a 09 11 07 07 0b 04 04 04 04 04 04 0b 07 07 11 09 0a 14 0b 0b 14 1a 0c 0b 0b 0c 0c 1c 10 11 1d 0b 0c 0c 0c 0c 0b 1d 11 10 1c 03 09 09 09 09 09 15 0c 0d 16 08 09 09 09 08 09 16 0d 0c 15 09 fd be 80 80 74 10 1a 0b 0b 0a 08 08 08 14 0b 09 0e 05 05 05 0b 0b 0c 1c 11 0a 0e 06 05 06 06 05 06 0f 09 0a 17 0d 0d 1b 0f f9 00 00 03 00 00 ff c0 04 00 03 c0 00 0f 00 3b 00 63 00 00 01 21 22 06 15 11 14 16 33 21 32 36 35 11 34 26 01 22 26 27 0e 01 23 22 27 2e 01 27 26 35 34 36 37 2e 01 35 34 36 33 32 16 17 Data Ascii: j!pPPppPPpt;c!"3!2654&"&'#"'.'&5467.54632
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: c0 04 00 03 c0 00 34 00 4f 00 00 01 21 22 06 15 14 16 33 11 14 16 33 21 15 07 0e 01 17 1e 01 3f 01 15 14 16 33 32 36 3d 01 17 1e 01 33 32 36 37 36 26 2f 01 35 21 32 36 35 11 32 36 35 34 26 23 0f 01 06 22 2f 01 07 0e 01 23 22 26 27 26 34 3f 01 36 32 1f 01 37 36 32 17 16 14 03 c0 fc c0 1a 26 26 1a 26 1a 01 40 b6 09 02 09 09 1b 0a 8a 13 0d 0d 13 8a 05 0b 06 07 0c 05 09 02 09 b6 01 40 1a 26 1a 26 26 1a 8a e0 09 1a 09 63 8f 05 0c 06 06 0c 04 0a 09 a5 09 1b 09 64 ca 09 1b 09 09 03 c0 26 1a 1a 26 fe 00 1a 26 64 a4 09 1b 0a 09 02 09 7e 66 0d 13 13 0d 66 7e 04 04 05 05 0a 1b 09 a4 64 26 1a 02 00 26 1a 1a 26 f7 d8 09 09 5e 95 05 05 04 05 09 1b 09 ac 0a 09 5f c3 09 0a 09 1b 00 00 00 00 02 00 00 ff c0 04 00 03 c0 00 24 00 33 00 00 13 30 33 3a 01 33 32 33 15 06 16 33 Data Ascii: 4O!"33!?326=32676&/5!2652654&#"/#"&'&4?62762&&&@@&&&cd&&&d~ff~d&&&^_$303:3233

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49798	104.22.74.115	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:59 UTC	547	OUT	GET /accounts_resources/universal.js HTTP/1.1 Host: cdn.sender.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:59 UTC	530	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:59 GMT Content-Type: text/javascript Content-Length: 148076 Connection: close ETag: "c7b80a37da78ca14d6e87e0baa0aca57" Last-Modified: Thu, 02 May 2024 08:30:33 GMT Vary: Accept-Encoding Cache-Control: max-age=3600 CF-Cache-Status: HIT Age: 1763 Accept-Ranges: bytes referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 87d8b94a5cde15d7-EWR alt-svc: h3=":443"; ma=86400
2024-05-02 14:32:59 UTC	839	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 6c 2c 64 2c 6e 3d 7b 33 33 38 37 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 65 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 21 22 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 38 31 38 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 72 3d 6e 28 37 35 37 34 29 28 22 75 6e 73 63 6f 70 61 62 6c 65 73 22 29 2c 6f 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 3b 6e 75 6c 6c 3d 3d 6f 5b 72 5d 26 26 6e 28 33 33 34 31 29 28 6f 2c 72 2c 7b 7d 29 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 5b 72 5d 5b 65 5d 3d 21 30 7d 7d 2c 38 38 32 38 3a 28 Data Ascii: (()=>{var l,d,n={3387:e=>{e.exports=function(e){if("function"!=typeof e)throw TypeError(e+" is not a function!");return e}},8184:(e,t,n)=>{var r=n(7574)("unscopables"),o=Array.prototype;null==o[r]&&n(3341)(o,r,{}),e.exports=function(e){o[r][e]=!0}},8828:(
2024-05-02 14:32:59 UTC	1369	IN	Data Raw: 61 26 26 2d 31 7d 7d 7d 2c 36 31 37 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 62 3d 6e 28 35 30 35 32 29 2c 77 3d 6e 28 31 32 34 39 29 2c 45 3d 6e 28 38 32 37 30 29 2c 5f 3d 6e 28 31 34 38 35 29 2c 72 3d 6e 28 35 35 37 32 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 76 61 72 20 66 3d 31 3d 3d 64 2c 70 3d 32 3d 3d 64 2c 68 3d 33 3d 3d 64 2c 76 3d 34 3d 3d 64 2c 6d 3d 36 3d 3d 64 2c 79 3d 35 3d 3d 64 7c 7c 6d 2c 67 3d 65 7c 7c 72 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 6f 2c 69 3d 45 28 65 29 2c 73 3d 77 28 69 29 2c 61 3d 62 28 74 2c 6e 2c 33 29 2c 63 3d 5f 28 73 2e 6c 65 6e 67 74 68 29 2c 75 3d 30 2c 6c 3d 66 3f 67 28 65 2c 63 29 3a 70 3f 67 28 65 2c 30 29 Data Ascii: a&&-1}}},6179:(e,t,n)=>{var b=n(5052),w=n(1249),E=n(8270),_=n(1485),r=n(5572);e.exports=function(d,e){var f=1==d,p=2==d,h=3==d,v=4==d,m=6==d,y=5==d\|\|m,g=e\|\|r;return function(e,t,n){for(var r,o,i=E(e),s=w(i),a=b(t,n,3),c=_(s.length),u=0,l=f?g(e,c):p?g(e,0)
2024-05-02 14:32:59 UTC	1369	IN	Data Raw: 4e 75 6c 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 5b 74 5d 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 74 3d 4f 62 6a 65 63 74 28 65 29 2c 6f 29 29 3f 65 3a 69 3f 72 28 74 29 3a 22 4f 62 6a 65 63 74 22 3d 3d 28 65 3d 72 28 74 29 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 63 61 6c 6c 65 65 3f 22 41 72 67 75 6d 65 6e 74 73 22 3a 65 7d 7d 2c 35 30 38 39 3a 65 3d 3e 7b 76 61 72 20 74 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 7d 7d 2c 36 31 39 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 Data Ascii: Null":"string"==typeof(e=function(e,t){try{return e[t]}catch(e){}}(t=Object(e),o))?e:i?r(t):"Object"==(e=r(t))&&"function"==typeof t.callee?"Arguments":e}},5089:e=>{var t={}.toString;e.exports=function(e){return t.call(e).slice(8,-1)}},6197:(e,t,n)=>{"use
2024-05-02 14:32:59 UTC	1369	IN	Data Raw: 26 26 28 65 2e 5f 69 5b 72 5d 3d 6f 29 29 2c 65 7d 2c 67 65 74 45 6e 74 72 79 3a 73 2c 73 65 74 53 74 72 6f 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 72 28 65 2c 6e 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 5f 74 3d 76 28 65 2c 6e 29 2c 74 68 69 73 2e 5f 6b 3d 74 2c 74 68 69 73 2e 5f 6c 3d 76 6f 69 64 20 30 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 65 2e 5f 6b 2c 6e 3d 65 2e 5f 6c 3b 6e 26 26 6e 2e 72 3b 29 6e 3d 6e 2e 70 3b 72 65 74 75 72 6e 20 65 2e 5f 74 26 26 28 65 2e 5f 6c 3d 6e 3d 6e 3f 6e 2e 6e 3a 65 2e 5f 74 2e 5f 66 29 3f 6f 28 30 2c 22 6b 65 79 73 22 3d 3d 74 3f 6e 2e 6b 3a 22 76 61 6c 75 65 73 22 3d 3d 74 3f 6e 2e 76 3a 5b 6e 2e 6b 2c 6e 2e 76 5d 29 3a 28 65 2e 5f Data Ascii: &&(e._i[r]=o)),e},getEntry:s,setStrong:function(e,n,t){r(e,n,function(e,t){this._t=v(e,n),this._k=t,this._l=void 0},function(){for(var e=this,t=e._k,n=e._l;n&&n.r;)n=n.p;return e._t&&(e._l=n=n?n.n:e._t._f)?o(0,"keys"==t?n.k:"values"==t?n.v:[n.k,n.v]):(e._
2024-05-02 14:32:59 UTC	1369	IN	Data Raw: 79 70 65 2c 74 29 2c 45 2e 4e 45 45 44 3d 21 30 29 2c 54 28 70 2c 6e 29 2c 6d 5b 6e 5d 3d 70 2c 67 28 67 2e 47 2b 67 2e 57 2b 67 2e 46 2a 28 70 21 3d 66 29 2c 6d 29 2c 69 7c 7c 72 2e 73 65 74 53 74 72 6f 6e 67 28 70 2c 6e 2c 6f 29 2c 70 7d 7d 2c 36 30 39 34 3a 65 3d 3e 7b 65 3d 65 2e 65 78 70 6f 72 74 73 3d 7b 76 65 72 73 69 6f 6e 3a 22 32 2e 36 2e 31 32 22 7d 3b 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 5f 5f 65 26 26 28 5f 5f 65 3d 65 29 7d 2c 37 32 32 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 37 39 36 37 29 2c 6f 3d 6e 28 31 39 39 36 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 74 20 69 6e 20 65 3f 72 2e 66 28 65 2c 74 2c 6f 28 30 2c 6e 29 29 3a 65 Data Ascii: ype,t),E.NEED=!0),T(p,n),m[n]=p,g(g.G+g.W+g.F*(p!=f),m),i\|\|r.setStrong(p,n,o),p}},6094:e=>{e=e.exports={version:"2.6.12"};"number"==typeof __e&&(__e=e)},7227:(e,t,n)=>{"use strict";var r=n(7967),o=n(1996);e.exports=function(e,t,n){t in e?r.f(e,t,o(0,n)):e
2024-05-02 14:32:59 UTC	1369	IN	Data Raw: 3d 7b 7d 29 3a 28 68 5b 74 5d 7c 7c 7b 7d 29 5b 62 5d 2c 66 3d 61 3f 76 3a 76 5b 74 5d 7c 7c 28 76 5b 74 5d 3d 7b 7d 29 2c 70 3d 66 5b 62 5d 7c 7c 28 66 5b 62 5d 3d 7b 7d 29 3b 66 6f 72 28 72 20 69 6e 20 6e 3d 61 3f 74 3a 6e 29 6f 3d 28 28 69 3d 21 73 26 26 64 26 26 76 6f 69 64 20 30 21 3d 3d 64 5b 72 5d 29 3f 64 3a 6e 29 5b 72 5d 2c 69 3d 6c 26 26 69 3f 67 28 6f 2c 68 29 3a 75 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 3f 67 28 46 75 6e 63 74 69 6f 6e 2e 63 61 6c 6c 2c 6f 29 3a 6f 2c 64 26 26 79 28 64 2c 72 2c 6f 2c 65 26 77 2e 55 29 2c 66 5b 72 5d 21 3d 6f 26 26 6d 28 66 2c 72 2c 69 29 2c 75 26 26 70 5b 72 5d 21 3d 6f 26 26 28 70 5b 72 5d 3d 6f 29 7d 3b 68 2e 63 6f 72 65 3d 76 2c 77 2e 46 3d 31 2c 77 2e 47 3d 32 2c 77 2e 53 3d 34 Data Ascii: ={}):(h[t]\|\|{})[b],f=a?v:v[t]\|\|(v[t]={}),p=f[b]\|\|(f[b]={});for(r in n=a?t:n)o=((i=!s&&d&&void 0!==d[r])?d:n)[r],i=l&&i?g(o,h):u&&"function"==typeof o?g(Function.call,o):o,d&&y(d,r,o,e&w.U),f[r]!=o&&m(f,r,i),u&&p[r]!=o&&(p[r]=o)};h.core=v,w.F=1,w.G=2,w.S=4
2024-05-02 14:32:59 UTC	1369	IN	Data Raw: 5d 2c 72 3d 61 5b 31 5d 2c 63 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 2c 74 29 2c 75 28 52 65 67 45 78 70 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 2c 32 3d 3d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 65 2c 74 68 69 73 2c 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 65 2c 74 68 69 73 29 7d 29 29 7d 7d 2c 31 31 35 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 34 32 32 38 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 72 28 74 68 69 73 29 2c 74 3d 22 22 3b 72 65 74 75 72 6e 20 65 2e 67 6c 6f 62 61 6c 26 26 28 74 2b 3d 22 67 22 29 2c 65 2e 69 67 6e 6f 72 65 43 61 Data Ascii: ],r=a[1],c(String.prototype,n,t),u(RegExp.prototype,o,2==e?function(e,t){return r.call(e,this,t)}:function(e){return r.call(e,this)}))}},1158:(e,t,n)=>{"use strict";var r=n(4228);e.exports=function(){var e=r(this),t="";return e.global&&(t+="g"),e.ignoreCa
2024-05-02 14:32:59 UTC	1369	IN	Data Raw: 74 75 72 6e 20 37 21 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 28 36 30 33 34 29 28 22 64 69 76 22 29 2c 22 61 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 7d 29 2e 61 7d 29 7d 2c 38 38 38 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 6f 3d 6e 28 33 33 30 35 29 2c 69 3d 6e 28 35 31 37 30 29 2e 73 65 74 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 74 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 74 21 3d 3d 6e 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 72 3d 74 2e 70 72 6f 74 6f 74 79 70 65 29 21 3d 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 26 26 6f 28 72 29 26 26 69 26 26 69 28 65 2c 72 29 Data Ascii: turn 7!=Object.defineProperty(n(6034)("div"),"a",{get:function(){return 7}}).a})},8880:(e,t,n)=>{var o=n(3305),i=n(5170).set;e.exports=function(e,t,n){var r,t=t.constructor;return t!==n&&"function"==typeof t&&(r=t.prototype)!==n.prototype&&o(r)&&i&&i(e,r)
2024-05-02 14:32:59 UTC	1369	IN	Data Raw: 28 34 37 31 39 29 2c 6f 3d 6e 28 31 39 39 36 29 2c 69 3d 6e 28 33 38 34 34 29 2c 73 3d 7b 7d 3b 6e 28 33 33 34 31 29 28 73 2c 6e 28 37 35 37 34 29 28 22 69 74 65 72 61 74 6f 72 22 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 72 28 73 2c 7b 6e 65 78 74 3a 6f 28 31 2c 6e 29 7d 29 2c 69 28 65 2c 74 2b 22 20 49 74 65 72 61 74 6f 72 22 29 7d 7d 2c 38 31 37 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 67 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 76 61 72 20 62 3d 6e 28 32 37 35 30 29 2c 77 3d 6e 28 32 31 32 37 29 2c 45 3d 6e 28 38 38 35 39 29 2c 5f 3d 6e Data Ascii: (4719),o=n(1996),i=n(3844),s={};n(3341)(s,n(7574)("iterator"),function(){return this}),e.exports=function(e,t,n){e.prototype=r(s,{next:o(1,n)}),i(e,t+" Iterator")}},8175:(e,t,n)=>{"use strict";function g(){return this}var b=n(2750),w=n(2127),E=n(8859),_=n
2024-05-02 14:32:59 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 2c 64 6f 6e 65 3a 21 21 65 7d 7d 7d 2c 39 30 36 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 7d 7d 2c 32 37 35 30 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 21 31 7d 2c 32 39 38 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 61 28 65 2c 6f 2c 7b 76 61 6c 75 65 3a 7b 69 3a 22 4f 22 2b 20 2b 2b 63 2c 77 3a 7b 7d 7d 7d 29 7d 76 61 72 20 6f 3d 6e 28 34 34 31 35 29 28 22 6d 65 74 61 22 29 2c 69 3d 6e 28 33 33 30 35 29 2c 73 3d 6e 28 37 39 31 37 29 2c 61 3d 6e 28 37 39 36 37 29 2e 66 2c 63 3d 30 2c 75 3d 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 2c 6c 3d 21 6e 28 39 34 34 38 29 28 66 75 6e 63 74 69 6f Data Ascii: {return{value:t,done:!!e}}},906:e=>{e.exports={}},2750:e=>{e.exports=!1},2988:(e,t,n)=>{function r(e){a(e,o,{value:{i:"O"+ ++c,w:{}}})}var o=n(4415)("meta"),i=n(3305),s=n(7917),a=n(7967).f,c=0,u=Object.isExtensible\|\|function(){return!0},l=!n(9448)(functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49805	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:59 UTC	596	OUT	GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.5.2 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:59 UTC	205	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:59 GMT Server: Apache Last-Modified: Fri, 13 Mar 2020 01:36:43 GMT Accept-Ranges: bytes Content-Length: 4186 Connection: close Content-Type: text/css
2024-05-02 14:32:59 UTC	4186	IN	Data Raw: 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2a 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 2c 2e 6d 65 6a 73 2d 65 6d 62 65 64 2c 2e 6d 65 6a 73 2d 65 6d 62 65 64 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 32 32 7d 2e 6d 65 6a 73 2d 74 69 6d 65 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 20 61 2e 6d 65 6a 73 2d 68 6f 72 69 7a 6f 6e 74 61 Data Ascii: .mejs-container{clear:both;max-width:100%}.mejs-container *{font-family:Helvetica,Arial}.mejs-container,.mejs-container .mejs-controls,.mejs-embed,.mejs-embed body{background:#222}.mejs-time{font-weight:400;word-wrap:normal}.mejs-controls a.mejs-horizonta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49806	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:59 UTC	631	OUT	GET /wp-content/uploads/2017/03/leafy-background-25.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:59 UTC	208	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:59 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:18:26 GMT Accept-Ranges: bytes Content-Length: 227378 Connection: close Content-Type: image/png
2024-05-02 14:32:59 UTC	7984	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 c2 00 00 01 c2 08 06 00 00 00 7c 18 c9 45 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0a 89 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 32 2d 63 30 30 31 20 36 33 2e 31 33 39 34 33 39 2c 20 32 30 31 30 2f 31 30 2f 31 32 2d 30 38 3a 34 35 3a 33 30 20 20 Data Ascii: PNGIHDR\|EtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.2-c001 63.139439, 2010/10/12-08:45:30
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 7c 9f f9 99 9f 79 49 88 61 39 82 13 44 31 17 ee a3 84 1b 01 8c 48 59 37 b9 17 cc df 7a 69 a4 34 cf 25 8c 5c 7f 84 34 a2 da 3a b8 65 00 21 4c 4c 2f 46 91 db a1 4c bd e0 76 5f c1 71 16 6b 8a c6 ee 5b 84 f8 77 f1 3a e3 73 65 10 63 d4 2c 7a 38 04 5e 08 91 96 6f df b6 a4 26 eb 9e 22 53 8a ff 69 09 c3 15 0c 76 b3 ed 4e 26 40 c9 ca fa 5b d7 6a cf b0 5f 98 b7 bd 41 94 27 cc 4e 8b ec 4e e2 85 09 4b 78 e9 19 2c 12 78 54 b6 35 fc 8a 76 4e cd d9 5f 0c 7b 53 c6 97 49 16 63 26 68 d0 34 5c c8 ca 2d 4e 47 48 a2 f1 be cb 62 34 ae 77 eb 8c 11 51 02 d0 3c 1a c5 e8 ed 89 7d f2 1b 7a 5d 8b c6 b3 09 42 8a b4 fb d1 8f 7b 3c 97 bb 13 33 f3 ce ad bb 19 91 f1 a8 b5 8e 7c a6 e0 89 b3 4b 8a f9 9c cf f9 9c 9b 2f fc c2 2f bc c4 d8 29 46 f8 0c 66 2b 63 34 2b d7 da b9 47 fd 1e dc 3c 23 Data Ascii: \|yIa9D1HY7zi4%\4:e!LL/FLv_qk[w:sec,z8^o&"SivN&@[j_A'NNKx,xT5vN_{SIc&h4\-NGHb4wQ<}z]B{<3\|K//)Ff+c4+G<#
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 96 51 e7 33 18 60 1e 11 ca 6a 5d f6 c7 7a 30 0a d7 6d bf c5 9e 63 ad f6 0d b3 c2 50 21 34 c4 3d 0f 50 5e 01 78 f6 93 2d 63 f1 a1 0f 7d e8 25 6e e2 ec ca 55 32 d2 30 d5 03 b1 48 20 be a2 6c e3 bc e1 1b be e1 e5 5a da f7 d6 41 ad 76 17 3e d9 b3 75 fd 64 b1 b0 2a 79 23 5c b7 87 2f 1b 37 b7 f3 5a 96 9d 19 88 48 73 cf 8a b9 52 b8 8a b7 6d 06 e1 d9 1b f4 5c 7f 8c c9 7d 14 46 38 d2 89 21 7b 84 94 f9 55 d6 b3 31 8d 3b e9 f5 18 03 35 66 87 fe c2 a5 ca 3f fc ed ec bf 33 ab 6e 2d 50 f3 b2 4e 4c 88 1b ac ef 83 57 34 19 63 49 9b 87 1b eb ba ac 0f 2e 45 63 9b 3a 2c ae c3 6b 30 5e 8b a8 c4 27 f7 d4 46 d1 5f e3 77 e4 18 7c ac 09 7a ef 5a c4 51 7a ec 29 a1 ce e2 c5 cc 68 f9 f5 aa f4 7f b4 dd e9 37 67 9f 51 74 b9 ed e6 cc 8f 37 a2 ce 33 29 78 75 c5 ea 5a cf 46 f7 60 d3 b1 Data Ascii: Q3`j]z0mcP!4=P^x-c}%nU20H lZAv>ud*y#\/7ZHsRm\}F8!{U1;5f?3n-PNLW4cI.Ec:,k0^'F_w\|zZQz)h7gQt73)xuZF`
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 66 56 fd a6 9e d7 62 2c 4b 1a dd f5 3b 9c a0 60 50 40 b7 73 c7 3e 7f 0f bc dd f3 ef b6 3f 64 82 a9 c4 28 73 a3 3c 82 1b c5 98 70 b6 0f e0 d6 c9 2d b9 65 b7 95 e1 32 f8 92 5e 28 65 0a bc 83 d9 26 f5 14 7b 2e 49 a2 38 52 f1 c5 5e 04 e5 66 22 e7 e9 c8 52 2f 3e e7 3a cc 3e 9c 6e 4e 0b fb 4d 66 0a 36 5d 5b f3 7a 2e 7a 4a b6 f5 db e3 bc 37 3c 4c f0 d4 81 d5 e8 95 80 a7 78 54 9a e4 b9 14 88 68 70 9b e9 7b a6 79 ee 11 42 14 7c fc 02 ef c9 5b 82 c7 5a 57 65 4f d6 8a 1f d8 f3 4d 7c 22 7c c0 29 a5 9b 77 06 dd a1 41 bf c3 7d e3 cb e4 2e 8c e2 9a cd 3a dd 98 bf 39 4b 74 59 41 92 75 25 0c c0 cb 65 bf ce fa 52 30 c0 5b 72 9b ae 1b 14 0e c4 0b ca fe 06 63 ca 95 79 2f 8f dc ae 34 67 13 78 2f 0a af 67 a2 f5 e4 52 09 33 94 77 fb 7e b6 5b 4c 2e dc 73 6a a4 1e 90 fb 92 79 99 Data Ascii: fVb,K;`P@s>?d(s<p-e2^(e&{.I8R^f"R/>:>nNMf6][z.zJ7<LxThp{yB\|[ZWeOM\|"\|)wA}.:9KtYAu%eR0[rcy/4gx/gR3w~[L.sjy
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: f8 e5 db 76 d2 36 cd c0 a9 05 31 03 63 21 56 ae 1c 9a 37 cb 70 2d a5 b3 d3 c4 9e 71 d5 31 4c 98 72 d9 70 69 24 6a a3 68 e8 62 58 12 12 b2 02 6c 4a 1b 0a 29 8d 51 3b b4 53 2b 2b b3 2c 0d 6b 85 a1 7d 2b ae b3 0c 78 0b 57 21 c6 99 ad 5a 9c 62 dd 17 90 8c 76 87 31 d7 c1 07 b2 8a 0b 62 52 67 4d 28 21 a0 66 13 03 c2 3c ea 2e 74 2d 13 b4 8c b3 1a 2d 18 97 40 46 00 e0 42 cb 26 cc b7 fe 6f e3 05 11 a9 a6 da ee 63 55 74 38 a8 f8 04 26 05 9e 5b d6 90 70 5f 98 ee 89 24 29 1c 62 2c de e1 d3 32 8d da e7 55 3b b9 5d 99 c4 6a 3a 48 74 5d bd 67 26 b0 97 fd c6 a0 4f 2b c7 f5 95 db d4 e8 62 35 7a 30 a5 64 a6 88 9e dd 59 78 5f 24 6e 10 7a 94 da b2 9f a3 b3 75 c1 5f 53 ec 6e f7 3a b3 27 6b f0 2d 5b db 38 6f f1 16 6f 71 2b e6 bb bc e4 1c 63 f3 04 d0 88 fb 58 a8 62 44 94 5b d9 Data Ascii: v61c!V7p-q1Lrpi$jhbXlJ)Q;S++,k}+xW!Zbv1bRgM(!f<.t--@FB&ocUt8&[p_$)b,2U;]j:Ht]g&O+b5z0dYx_$nzu_Sn:'k-[8ooq+cXbD[
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 66 12 6f 7d 75 2e db 4d ee 29 11 8f 2c c4 83 e8 03 28 15 7a c2 87 de 43 e6 ac 02 8d 76 36 a9 f1 e6 09 54 7f 9b 72 66 e5 65 15 46 63 e9 05 f9 01 ca 1f 80 7d b2 8b 81 43 57 6c c6 fb 36 bf f0 c5 eb c9 e2 de 58 fd 2f 7f f3 9b df fc 84 e0 a0 50 88 3a 64 52 92 c0 ab 30 f7 b6 27 2a 55 1d 51 54 5a b0 6e 12 ef e5 b7 45 04 4c d9 7c c5 77 ea c0 eb 0b 1a c8 e5 88 78 b8 28 b9 37 7f b4 56 e6 d5 85 de f3 71 63 b8 66 23 46 b6 38 d3 37 a1 d2 94 e5 fa 6a 36 c2 a7 22 72 68 45 40 37 97 65 d9 74 c5 b7 d6 d5 e0 39 30 8a cf 6e c2 ca ab 70 fd 3e cf 66 de 12 98 dc 43 dc 44 8d a8 a1 88 7d 13 06 98 c7 b3 21 a4 b2 b7 9c 09 81 d2 18 1b 88 c8 b7 bf 97 05 68 7d 10 b7 18 9c 9f bb a6 d0 67 40 c1 39 58 47 93 13 5e 8d 8f 6f b3 84 15 24 b7 83 c9 6b ce dc 12 f1 ba 68 42 b0 f6 1b b3 71 8d 8a Data Ascii: fo}u.M),(zCv6TrfeFc}CWl6X/P:dR0'*UQTZnEL\|wx(7Vqcf#F87j6"rhE@7et90np>fCD}!h}g@9XG^o$khBq
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 0e 2a 8c 4e 5b 3b 7c 0c c8 2c e5 06 d8 ee 28 a5 74 57 9c b9 13 b5 a1 f7 db 16 6d bb cf 6f 9d 8d 0d 25 a0 f9 db 7d b9 9f 6c 2d e8 be 7b a4 8c 7a a6 88 af 0e 09 4b 30 b7 78 f9 35 7d bc 22 da 04 64 9f c5 1c 65 53 95 0a 5c a2 c9 26 2c 78 3f bf b5 c3 27 bc 8a 19 26 14 ad 07 a2 f1 45 90 dd 16 6f ee 4d b8 63 40 4a 88 35 0d fd d9 7f 44 1d 0a 86 f2 3d 23 7f b9 02 73 c5 a6 18 15 63 ba 87 7d c0 58 98 b0 be 8e 14 6f 13 0f 10 4f 4c ef 3a a5 8f 43 c5 14 36 30 e5 be 3e c3 ba b5 e6 92 89 36 63 34 df bf 75 43 f2 88 99 12 74 1f 0c 59 ef ca 2c f7 00 59 f1 6a c9 06 9e 9b b7 21 17 33 c6 c8 e5 b6 80 27 a0 e1 b3 80 06 65 8f 16 12 6a 10 b7 ff f3 54 60 62 fb 57 5a b9 bf 39 db db 2b 33 26 83 2c 29 8d 5c ac af 69 ec d6 ad 1c 05 9f 2d 08 e8 7d ce 97 85 60 1f d4 15 3a 97 66 a4 6d 71 Data Ascii: *N[;\|,(tWmo%}l-{zK0x5}"deS\&,x?'&EoMc@J5D=#sc}XoOL:C60>6c4uCtY,Yj!3'ejT`bWZ9+3&,)\i-}`:fmq
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: d0 cf 3c 20 5f 13 28 09 9b 2b e8 37 63 f4 53 97 94 98 d3 22 ca da 69 8e da 2b 86 e4 33 6e da 48 a2 4d c9 75 88 12 0d 58 9f 18 a8 69 e1 11 35 a5 e6 de d5 2f 25 b4 57 69 40 bd 7e 27 44 dc df a1 b1 d6 10 41 93 d8 d7 2f bf 5d 5e 2e 52 b9 8c 78 83 f7 ed 07 45 1f 41 6f 2d 60 13 28 58 3c 04 12 24 ea b9 9a 99 97 fb 63 c1 40 96 9f fd 49 99 50 22 dc 31 0e b9 ae ff b7 bf ea 2b 41 a0 b1 49 9b 72 5c 1d 53 0a b4 04 07 82 0b fa 4c c1 20 90 86 72 ae fb 90 80 25 d0 24 c3 c8 d8 64 ed f9 3b 77 18 37 15 85 78 1b 32 bb 86 6b af a0 59 d7 93 6f 28 57 02 d0 af 7e f5 ab af a0 81 75 69 0f c4 02 b5 92 a2 68 d6 42 dc 31 60 b7 8d dd 2a 87 3d 8b db dd e8 d6 79 2e 70 c9 fd e2 35 eb e0 15 b9 13 48 52 e6 92 c7 ec 83 b5 49 ba 70 2d f4 90 3b b2 fe 88 ce 1a 5d 12 64 a1 da 46 cd ec b9 be 12 Data Ascii: < _(+7cS"i+3nHMuXi5/%Wi@~'DA/]^.RxEAo-`(X<$c@IP"1+AIr\SL r%$d;w7x2kYo(W~uihB1`*=y.p5HRIp-;]dF
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 0a 74 94 4c 79 35 c5 d8 eb 79 36 f4 4f 4e da bb 40 bc 9f 74 12 7e 60 38 e0 07 7a a2 18 fe ad 5f df 38 24 c0 07 f8 f3 fa 15 2f bc c9 77 95 9b 29 6f e2 f5 00 0c d1 e1 17 0b ca ed 56 6a 72 ae 86 ed da be 0c 18 e3 62 7e ca 29 3f 3d 42 a3 58 28 3e 49 08 d0 b1 bf 15 07 6c a2 f2 9a fe 36 03 a1 42 4f ee 83 d9 ea ea 5f 33 5a 48 c3 e7 28 1f c8 dd 9a 08 8d f5 13 df be a2 29 c0 98 e2 5a 88 75 d1 80 98 05 f0 f9 a7 ad 79 fb 12 de ba ac 02 cc 9b 08 b2 07 6d 5f b8 6d f5 59 24 44 6d f0 df ff fd df 7f ab 53 da d6 42 9b 64 b0 d9 b7 de 27 a1 01 18 60 a9 db 8b 84 6d ee b2 84 79 a3 59 80 89 f6 81 55 e2 db 9a 3c 53 0d 72 c5 3d 6a 33 c6 62 af 2e 29 97 f1 15 08 cb 14 db 37 f5 4e 7c ff 51 66 74 3d c4 9c 45 f8 8a 87 bc ac c2 8d 21 c5 b4 cb 00 5e 83 42 21 bb 8d 51 be 06 49 af 02 56 Data Ascii: tLy5y6ON@t~`8z_8$/w)oVjrb~)?=BX(>Il6BO_3ZH()Zuym_mY$DmSBd'`myYU<Sr=j3b.)7N\|Qft=E!^B!QIV
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: c8 20 ff d7 bd 1e b1 d7 a1 c6 c1 fa 7b 47 7b f4 b3 96 4d 1a e6 2d 40 ae 60 94 36 c8 ba a1 3d d2 e2 f3 03 6f 0b 30 7f 03 0c 41 20 de 44 4b 50 fa 01 99 69 41 8b b4 69 1c 34 2b 0a 80 a4 1b d6 64 19 6a 98 18 8b 8e 6b 13 3c 3a 84 e2 40 21 45 f5 2b 34 a9 06 ea 82 77 2d df ea 84 b0 b1 b9 67 03 5f 3b e8 90 89 56 4d 20 48 66 89 21 97 41 bb 33 d5 4a 78 40 9c 04 27 e4 b3 87 04 77 ee 43 70 73 2e 04 7e c2 6f 09 c7 7b dc 4d 60 b1 c5 e0 1b 03 58 26 e6 2c e0 51 e5 01 eb 9a c9 12 5a 86 5d 42 08 eb 88 e5 b0 4c 99 f5 5c 07 1f f7 21 28 29 3e 11 ea c6 1e 2a b0 76 4f 4a c6 d6 92 ba d6 39 23 5a 5a b8 17 fc ee bb 7e 6f a0 5e 8d 6c 0a 03 4d 9f ab 6e b3 95 97 d1 45 bc 3b 6c 14 9e 79 0e 06 09 cf fd a0 01 c2 1c 93 2a 03 33 9c 49 19 04 1f 16 8e 44 0d 34 28 a6 8b 01 d4 0d 04 0d 12 00 Data Ascii: {G{M-@`6=o0A DKPiAi4+djk<:@!E+4w-g_;VM Hf!A3Jx@'wCps.~o{M`X&,QZ]BL\!()>vOJ9#ZZ~o^lMnE;ly3ID4(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49807	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:59 UTC	630	OUT	GET /wp-content/uploads/2019/08/Home-Page-FULL-RES.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:59 UTC	209	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:59 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:25:36 GMT Accept-Ranges: bytes Content-Length: 940648 Connection: close Content-Type: image/jpeg
2024-05-02 14:32:59 UTC	7983	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 32 0a ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 05 55 08 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82C!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$U"
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 8c 3f 0c ca 70 c1 7b e0 fa 9e 9f 9d 49 4b 40 10 5a 58 da e9 f1 b4 76 96 f1 c0 8c 41 2a 83 19 e0 0f e9 53 38 26 37 0a 06 e2 a4 0c f4 ce 3b d0 68 cd 03 be b7 3c b2 7f 85 d7 13 6b ad 6c 66 92 78 3c 86 95 ee 58 e3 74 84 30 51 f9 81 f8 0a 92 e3 c2 da 96 97 e1 04 12 5d c7 65 72 81 e2 9a ee 6f f9 75 b6 dc 72 89 8e 4b 31 39 e3 93 d2 bd 40 1a f3 2f 16 cd aa 6a 5a cd cb dd 5b 4e 74 7b 19 42 bb 83 f2 a6 de bb 47 f1 39 00 f3 db 3d b1 5c 55 29 42 92 72 8c 75 66 ca 4e 7d 0e 02 ca cb 53 44 bc 83 4a 77 b7 d3 ae 24 24 dd 3a 85 b9 99 00 e1 49 ce 55 78 ce 06 3a f2 4d 75 1f 05 f5 68 74 eb fb bd 32 ea 39 05 c4 e0 05 9d b9 55 00 9c 26 7b 67 3d 3d aa 1f 07 a7 fc 24 97 63 49 8d 1a dc 6d 91 c3 27 fc b3 40 3e 5f d4 a8 ac 7d 32 eb 5e d0 75 6b e8 b4 f4 36 d3 4f 1e 1e 3f 2b 71 65 07 Data Ascii: ?p{IK@ZXvA*S8&7;h<klfx<Xt0Q]erourK19@/jZ[Nt{BG9=\U)BrufN}SDJw$$:IUx:Muht29U&{g==$cIm'@>_}2^uk6O?+qe
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 04 36 f3 cd 7a a6 87 f0 fe ff 00 44 65 89 3c 5f ab cb 64 bc 08 1f 04 81 e8 18 e4 8f c2 b2 3e 0e 68 32 5b c7 aa eb 97 0b 89 2f ee 18 a1 ff 00 64 b6 e3 fa 9a f4 93 55 4e 3c aa e8 ad 2d 66 97 dc 36 34 58 d1 51 06 15 46 00 aa 1e 24 d5 17 43 f0 fe a1 a9 36 3f d1 ad de 41 ee 71 c7 eb 8a d0 ae 2b e3 3d c3 c1 e0 0b c4 43 83 3c 91 c5 f8 16 c9 fe 55 52 76 57 25 ec 72 ff 00 b3 d6 8e cd 69 ab 78 8a e1 49 9a ee 6f 29 1c f7 03 e6 6f cc 91 f9 57 a9 6a 57 b6 70 ec b6 b8 9c 24 b3 11 e5 22 fd f2 d9 e0 81 ec 6b 9f f8 59 62 ba 5f c3 ed 29 76 95 dd 13 4e de a7 73 13 fc b1 5e 71 1f c5 3b 9d 73 5e 8e ee 7b 68 ed 9e d8 b8 b5 65 07 28 0e 70 58 1f bc 7f 2c d6 73 a8 a1 15 72 67 2b 74 3d ac 5e 88 ac a4 b8 9c 04 68 93 73 80 72 3a 67 83 e8 6b cb f5 0d 54 dc cd 24 92 37 cc c4 b1 ab 72 Data Ascii: 6zDe<_d>h2[/dUN<-f64XQF$C6?Aq+=C<URvW%rixIo)oWjWp$"kYb_)vNs^q;s^{he(pX,srg+t=^hsr:gkT$7r
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: b4 97 db fc 4c e1 49 27 f2 35 91 a7 68 ba 26 99 f0 b3 58 ba d5 ec d2 eb 57 b9 bd 36 f6 ae 8d fb f8 25 51 c0 2b fd dc 83 9c 66 ab 59 f8 b4 5e 78 12 1b 49 5c 19 6c 67 42 57 be ce 47 1f 98 fd 6b 4a d4 9c 14 6c 27 24 a2 e2 bc 8a fe 3b 8b c3 7f f0 84 78 76 6b 3b 88 bf b5 ed 2e a4 82 e6 14 52 a4 46 59 d8 33 67 a9 ce 30 7d 0e 2b b0 f1 6e 9b 61 a9 78 26 ea e6 33 70 f7 4d 6c b2 87 f3 98 ab 63 07 95 ce 31 c7 4a e4 7c 66 ba 3e bf e1 21 77 6d f6 38 b5 7b 69 a3 41 1d ba ed fb 44 24 10 5d b2 7e f8 3b 72 06 38 39 e7 3c 3f c3 5e 2e 78 74 75 d3 f5 58 f0 81 0c 41 b2 39 18 c5 55 66 dd 9a 17 33 69 9c 1e 92 66 69 d2 1f 3f cb 81 f3 bf 3d 00 1d 78 ef f4 ae e7 c2 3a 46 9f a9 47 ad 5a 6a 57 1f 65 bc b3 b7 fb 45 b9 1f 76 55 1d 7a 9e 98 21 b8 e7 19 ac ff 00 07 de da 78 5b c4 16 d7 Data Ascii: LI'5h&XW6%Q+fY^xI\lgBWGkJl'$;xvk;.RFY3g0}+nax&3pMlc1J\|f>!wm8{iAD$]~;r89<?^.xtuXA9Uf3ifi?=x:FGZjWeEvUz!x[
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: d0 f2 8a 55 4e 7f 4a c0 f1 27 c4 a1 aa e9 f6 d6 d1 44 de 65 b4 9b e3 95 94 70 38 c0 f7 e9 5c 5e a7 7d 7d aa ce f7 77 8e d2 b3 72 59 ab ae 94 1a d7 61 4a a7 34 54 52 d2 e6 3e 99 33 c7 29 8f 3c 1a ec ec 34 4b bd 5f 4c bb 48 62 33 4d 19 12 15 1c 93 c5 71 08 c6 2b c0 00 e8 df a5 7a b6 81 a7 cd 36 95 fb 99 25 86 49 76 07 64 62 0e 38 f4 f6 a7 8c 97 2c 54 8d 29 24 de a5 e3 e1 8b ad 3f 46 86 e2 e2 d9 a2 06 21 8d c3 07 a5 71 ba ac fa 9d 95 b9 48 64 26 ce 47 24 aa 0c ed 61 c7 3e 9d 6b d4 7c 47 79 6b 63 65 1d a5 bb c9 e4 ca b8 68 d9 c9 50 f8 e1 80 3d 3a 60 e3 d6 bc ba ee f2 ff 00 4b 0e 42 24 b0 3c 85 c1 3d 79 ac b0 ba cd b6 61 36 9b d3 63 00 7d ac c6 ec 91 48 f0 f5 61 b7 81 ef 53 69 af 0a 39 76 50 ce 70 13 3d 01 ad c4 d7 a0 b8 b1 16 cc 1a 3c ee 67 18 ef d8 55 23 a1 Data Ascii: UNJ'Dep8\^}}wrYaJ4TR>3)<4K_LHb3Mq+z6%Ivdb8,T)$?F!qHd&G$a>k\|GykcehP=:`KB$<=ya6c}HaSi9vPp=<gU#
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: c0 b7 1a 6e b9 e1 8b 37 6f b3 ba a1 88 92 e4 b0 ef ff 00 02 19 ad fd 03 c4 fa 7c 1a 7c 7a 7e 95 a6 cf a4 da 44 30 8a e9 cb 7a 92 c3 3c 9f 5a c1 f1 67 8a 6f ed a4 9e 08 24 77 48 76 80 e3 95 52 c0 11 cf af 0d 58 d7 cf 29 a9 fb 3a 31 72 7d fa 15 4a 0d ab 3d bb 1e 8f 6d af 41 71 6b 14 de 5c a1 9d 03 32 15 c1 43 dc 1f 71 50 cd e2 54 80 96 6b 39 da 30 3e f4 64 31 fc ab c8 74 ff 00 89 17 fa 65 a1 86 4b 0f 3c 86 ca cc 5f f3 c8 eb d6 a1 bb f1 8e af 06 96 f6 53 07 49 0e d7 8e 51 95 78 fb e3 df 35 e7 cb 33 cc 79 b9 92 56 1c 68 42 d6 d4 d4 f8 a5 e2 74 d4 af 8c 10 ea b2 47 6f 0a af 97 6e b1 ba 86 7c 12 5d 89 18 c8 e9 c6 7f ad 51 d1 7e 36 6b 56 3a 04 5a 15 86 8d a7 06 89 49 69 a5 76 20 e3 b9 1c 0c fe 35 9e be 2e 87 c4 7a 75 d5 b6 bf 02 b4 f1 c4 cd 05 d2 a7 21 bb 03 8e Data Ascii: n7o\|\|z~D0z<Zgo$wHvRX):1r}J=mAqk\2CqPTk90>d1teK<_SIQx53yVhBtGon\|]Q~6kV:ZIiv 5.zu!
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 83 2c 36 af a6 07 7f 7c 74 ab de 1e fe d0 5d 3a fe e6 cf 53 7b 70 01 13 db c8 e0 a5 c0 23 1b 42 9e ad d7 9e c0 75 e2 ba 63 49 28 5a c4 25 aa 3d 43 c3 17 1e 6b da db 42 00 55 18 03 d3 8c 7f 2a ce d5 75 38 e1 b3 d7 2c 97 69 8a de c5 63 97 23 8f 32 49 c1 fd 15 6a 4f 85 fa 95 98 d4 49 bc 93 6b 98 8a c4 bd 77 37 a0 f7 c0 35 ce 6a 52 4d fd 85 ab 6a 73 85 b7 6d 43 55 0f b6 51 8c 46 99 ed f5 70 3f 0a f3 30 f4 9a 4e fd 4a 8e c6 7e 9b 75 75 76 2d 6c ad e6 63 a2 ef 2f 70 18 06 42 e9 9d 87 07 b9 19 1e 9f 30 f4 ad 59 34 9d 32 f0 ab de da 35 cc 77 72 19 a2 2a e1 06 7a 04 1b 47 03 8e 95 9b a0 41 a6 dc ca d6 7a 45 fb ac b3 a1 94 a9 8d b6 c4 e0 b0 61 91 9e c1 48 27 8e 6a ce 84 5a de f8 48 f3 c7 7f 0c 21 ed e1 61 37 cb 14 8c 07 ce 3b 0f a8 ae ea ae 49 72 b7 6b 6c 42 d3 54 Data Ascii: ,6\|t]:S{p#BucI(Z%=CkBUu8,ic#2IjOIkw75jRMjsmCUQFp?0NJ~uuv-lc/pB0Y425wrzGAzEaH'jZH!a7;IrklBT
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: c1 66 dd b6 6c 61 97 18 18 fa 57 88 6a 4f 68 da ed ac 28 64 86 dd 5d 55 d9 be 66 55 24 02 7f 0e 6b d0 16 e2 df 47 ba 93 4a b6 90 cf 6b 6f 23 aa 5c 6d c0 95 43 1f 9b f1 aa b7 2c 2d 63 48 de da 33 aa d2 34 35 f1 2a cf 34 ca 5a 0f 31 a3 cf fb bd 7f 5e 3f 03 5c 9d e5 fd 8c 43 51 b5 d2 2c a1 96 38 57 cd 13 1f 99 dc 23 00 40 3d bb 9f 71 5d ae b9 ad c7 a6 fc 26 86 e3 4d 22 3b 9d 41 da d9 0f 4d a4 96 2c df 90 3f 9d 79 a7 82 a6 4f b4 dc db 4f 8c 49 01 51 c7 51 91 9f d2 b3 57 bd c7 39 74 5b 16 6d 3c 57 25 ed ea de b4 84 2b 20 8d 01 e0 ee cf 4f ce a0 d5 56 6b 96 81 56 16 31 ca ce d1 22 0c e0 93 96 5f fb e8 93 f8 d6 1d b4 0d 1e 97 90 e0 3c 73 60 71 d7 e7 af 46 f0 33 9b 99 a4 13 84 4b 48 51 e4 59 40 05 c4 bf 2e 14 02 79 1c 64 fd 2a aa de 52 b5 c8 8c 52 d4 ca f0 e6 95 Data Ascii: flaWjOh(d]UfU$kGJko#\mC,-cH3454Z1^?\CQ,8W#@=q]&M";AM,?yOOIQQW9t[m<W%+ OVkV1"_<s`qF3KHQY@.ydRR
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 7d eb 8a d3 24 4d 16 fe 0d 57 4b 48 ae 03 31 30 c6 41 62 87 b8 20 fa 76 ab 77 71 e6 9b d4 27 28 a7 64 b6 2c 78 b6 f3 36 5a 7d 8a 43 14 53 2a 28 94 20 c0 ce 3b fb 93 9a cf 83 1a 74 12 a5 c2 46 37 b8 8e 20 70 c5 4e 32 48 27 a7 6f ce a5 d5 ed 35 5d 7b 53 b7 66 b4 b9 0d b8 ca 63 40 42 83 d8 9a d5 f1 1e 99 05 b5 a5 a5 e5 ec 71 4a f1 8f 2d ad 92 60 ad bc 8c e4 8c 67 b7 e9 58 ad 52 8f 71 ad 9c e5 a1 89 a6 f8 aa eb 47 bc 75 7b 64 b9 8a 6f 90 ee 03 72 e7 8c 7a 11 ec 6b 76 f2 c3 c3 57 3e 12 90 4d 01 8b 55 57 de a6 37 db df a1 53 ed e9 5c 22 4a e9 9f 39 ca 48 a4 14 38 3c f3 5b f7 fe 28 b8 f1 08 88 5d da 5a cb 7f b1 61 17 0d 84 18 1d 09 1d 33 ef 5b 4a 2e 36 b2 32 d7 64 3e cf c3 96 4f 60 97 32 49 22 e0 9c 8d c0 2f e3 59 37 97 11 4b 32 c3 03 13 6f 16 42 e4 e7 eb 50 5e Data Ascii: }$MWKH10Ab vwq'(d,x6Z}CS*( ;tF7 pN2H'o5]{Sfc@BqJ-`gXRqGu{dorzkvW>MUW7S\"J9H8<[(]Za3[J.62d>O`2I"/Y7K2oBP^
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: de ef 6c 93 de dc 01 31 48 ae 00 58 54 92 70 4e 09 ce 31 d7 eb de b1 75 25 b5 bc b9 69 2c 62 9a 28 70 3f d7 b8 66 1e a4 90 3a 57 57 a1 78 16 09 a1 12 5f 4e 2e 23 dd 94 68 b2 15 c7 b1 23 38 35 67 51 f0 7c 4f 67 2a e9 2c 58 f9 98 78 1d c6 c2 07 51 9f 63 ea 6b cc af 98 a7 2e 46 28 ab ee ce 5e 0f 13 6a 9a 75 bc 76 b1 5c 93 69 02 f9 68 8a 42 e4 92 79 cf 53 c9 ab d7 3e 29 fb 4e 99 16 f5 99 67 57 da 02 48 42 32 8e e7 d4 f6 ac 89 74 9b af 21 a5 b5 12 4c b0 e5 e5 8f ca f9 62 04 e0 64 d4 31 b4 4e 82 2f 34 49 26 ed c1 13 3b 63 18 f9 b8 3d f8 fd 2b 4f ab c2 a2 bc 63 60 e4 92 e8 3f 50 d5 61 96 e1 43 42 ec 99 c9 5d d8 cf d3 d3 f9 d4 f1 34 77 5a 77 d9 ed 2d 94 6a 46 40 0b e4 e4 a6 3a 8f 4c f7 a6 35 ae 97 e5 24 a2 e2 49 e7 cb 6e 8d 53 85 03 be 69 f3 eb 7a 75 ad bc 03 4f Data Ascii: l1HXTpN1u%i,b(p?f:WWx_N.#h#85gQ\|Og*,XxQck.F(^juv\ihByS>)NgWHB2t!Lbd1N/4I&;c=+Oc`?PaCB]4wZw-jF@:L5$InSizuO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49808	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:59 UTC	626	OUT	GET /wp-content/uploads/2019/08/Home-Resources.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:59 UTC	209	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:59 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:25:44 GMT Accept-Ranges: bytes Content-Length: 313198 Connection: close Content-Type: image/jpeg
2024-05-02 14:32:59 UTC	7983	IN	Data Raw: ff d8 ff e1 13 04 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 05 e8 00 00 01 01 00 03 00 00 00 01 05 e8 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 24 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d8 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 39 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 31 39 3a 30 38 3a 30 37 20 31 35 3a 31 32 3a 34 35 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*(1$2i$''Adobe Photoshop CC 2019 (Macintosh)2019:08:07 15:12:45
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 4f e9 ab 9d 63 aa 9c 27 37 13 14 31 f9 b6 37 79 2f 8d b5 b3 b3 9c d3 f4 ed 7f f8 3a ff 00 eb 8a 4e 28 70 f1 5e 8a 02 46 5c 20 6a f9 6b be a4 7d 6c 6f 3d 2b 20 ff 00 54 35 df f5 2f 72 1b be a8 7d 69 6f 3d 23 30 fc 29 71 ff 00 a9 5e 85 87 9b d4 dd bd d7 e4 5a e7 6e f6 9d e2 22 3f 34 33 f4 6b 5b 03 aa 6f b8 63 64 90 5c f3 b5 96 68 0e e3 f4 59 66 df 6f bb f7 d3 63 96 12 35 6b e5 8a 60 5e 87 c9 f2 17 7d 5c fa c4 c3 0e e9 39 ad ff 00 d0 7b 3f f2 08 6e e8 9d 69 9f 4f a7 e5 37 e3 45 83 fe f8 bd da 08 e0 90 94 d8 38 71 fb ca 97 85 8b 8b c1 f0 47 74 fc f6 fd 2c 5b 9b f1 ad e3 fe fa 85 65 37 56 26 ca de c0 74 05 cd 73 75 fe d0 5e fc 6c b8 7e 7b bf ce 2b 8f ff 00 19 9b df f5 7e 92 e7 39 c1 b9 43 92 4f 35 5c 91 8a 84 ac be 5b 25 34 94 e5 32 6a e7 ff d0 f3 0f 1f 9a 90 Data Ascii: Oc'717y/:N(p^F\ jk}lo=+ T5/r}io=#0)q^Zn"?43k[ocd\hYfoc5k`^}\9{?niO7E8qGt,[e7V&tsu^l~{+~9CO5\[%42j
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 79 1d c1 f4 a1 f3 84 2b f3 0e b8 38 cf b6 2a b0 98 82 46 08 5e 7e f1 18 06 9c 6e 00 6c b0 e4 90 72 38 c7 a7 1e 94 d2 d7 51 ea 48 5d d8 2f ca 48 27 84 3c 1c fd 68 a8 da 63 e6 e0 8d f9 20 15 3d 87 b7 bd 14 be 42 20 91 7e 46 55 e5 72 3a 93 d7 d7 da 9a 98 11 86 c6 0f 7e c3 18 eb f5 a9 2e 11 98 67 6f 39 e0 e7 9a 8e 34 26 17 2c 0b 05 e7 3d 05 65 73 66 b4 19 1b 60 e0 60 91 c8 e7 f9 73 4a c4 85 38 05 5b a6 07 63 42 c2 43 02 0e 01 e3 2b f9 d3 a4 95 40 3c 93 83 eb d6 90 b7 62 80 c2 25 e0 f3 c1 1d c5 44 81 92 50 a3 a8 3c 8e b9 f7 cd 4c 19 9d 06 3e 55 3d 3b 9a 8e dc 85 97 2a 70 48 3c 13 cd 01 72 79 5f e7 0d ce d3 e8 31 cf 7a 6c 4e 5a 7e a7 07 9d a4 f0 45 2c cb be 45 60 49 5c 60 82 71 b4 7e 7c d3 44 3b db 07 e4 3d 09 3c e0 55 8f d4 49 e3 1e 58 63 93 cf 18 f5 fa d4 4f Data Ascii: y+8F^~nlr8QH]/H'<hc =B ~FUr:~.go94&,=esf``sJ8[cBC+@<b%DP<L>U=;pH<ry_1zlNZ~E,E`I\`q~\|D;=<UIXcO
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: eb 50 39 dd 01 3f 30 c7 04 e7 9c 7a 56 0b 43 4d b7 11 5b 25 73 87 23 80 08 1c 9e dc d4 44 32 ab 29 00 80 48 07 af b5 3c 3f 04 81 9e 81 46 79 1f 5a 69 c1 52 a0 8c f5 c9 27 22 9d 82 e4 91 c8 42 9c 21 dc 40 38 f4 3d 09 14 cb 5f 98 e5 89 03 38 e4 f5 a5 40 44 7c f2 07 25 7a f3 ef ed d2 8b 4f 9d f6 8c e4 e7 00 9c 03 f5 a6 ee 82 c4 cc ad b8 60 f4 07 07 38 07 bd 24 80 89 30 aa 08 20 13 91 c2 fa fb d3 8e c7 76 c2 10 71 d3 39 00 f1 ef d2 a2 2e 14 8c 1c 8c e0 10 0f 03 bd 17 19 21 19 51 d4 f6 c7 af f5 aa e5 00 94 2e ec 8c e0 36 71 53 39 cc 20 22 90 f9 c9 07 9f c3 35 5e 32 c5 b2 1b 0c 09 c9 ce 71 48 07 a3 e4 ae 30 73 9c e7 bf d7 9a b9 6a 06 f0 dc 92 3a 85 fa 7f 8d 53 1d 19 81 c9 3c 1c 9e de a2 ae d9 0d 9b b2 87 e6 c8 04 f0 3b 1f 5a 4c 65 87 61 b4 86 2c 06 31 ce 0e 7f Data Ascii: P9?0zVCM[%s#D2)H<?FyZiR'"B!@8=_8@D\|%zO`8$0 vq9.!Q.6qS9 "5^2qH0sj:S<;ZLea,1
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: d8 34 bd 42 35 da 08 c5 a4 83 3e e3 8f d6 bf 6f 7e c1 08 0f fb 95 21 b2 72 57 38 a6 ff 00 65 da 90 09 b6 89 d8 1c 86 74 ce 29 7b 24 0b 14 fb 1f 87 ed a6 5f 42 09 1a 7d ee 01 fe 2b 77 07 ea 38 a0 59 5d 79 8f fe 89 72 71 cf 10 b1 c7 e9 ef 5f b7 73 69 36 b3 03 be da 16 38 23 1b 06 2a bc 9a 16 9e f1 c6 a2 ce 2f 90 ee 5c 20 04 50 e8 c5 94 ab df a1 f8 8b 24 33 23 32 c9 0b 44 48 ce c9 14 ab 01 d8 e0 ff 00 3a 82 28 4c b1 e1 46 f2 38 27 a0 1e d5 f5 9f ed 95 e1 f8 c7 c7 3b c7 89 15 23 36 70 9d a8 a0 0c 90 d9 38 f7 c0 af 9f ae 74 fd 83 69 c1 e3 18 db 80 3d 38 ff 00 3d 2b 99 c1 45 d8 eb 83 e6 8a 67 20 54 a0 f9 94 31 03 bf f9 fe 75 13 8f 4d ca 71 ca e4 64 7a d6 ce ad 00 42 30 31 91 c0 1c e2 b2 42 e1 89 2d 82 4f 23 1d fd 07 bd 45 dd ac 58 c6 c1 da 3e f9 20 12 17 b7 e3 Data Ascii: 4B5>o~!rW8et){$_B}+w8Y]yrq_si68#*/\ P$3#2DH:(LF8';#6p8ti=8=+Eg T1uMqdzB01B-O#EX>
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 90 4e ea 69 95 d9 b3 9c 67 b1 eb 5d 34 eb ce 9b d1 9c 95 68 42 b2 f7 d1 f4 86 93 af 69 fe 20 b6 59 ac a7 0e a4 02 63 24 06 4f 62 2a d3 20 19 04 67 1e 87 ff 00 af 5f 36 e9 ba d5 fe 89 7a b3 d9 4c f1 38 39 04 71 9f 6f 7a f6 4f 06 fc 49 b6 f1 0c 62 0b ec 5b 5f 8e 06 38 59 39 ea 3d 0f f9 15 ef 61 b1 b0 aa b9 5e e7 ce 62 b2 f9 50 f7 e2 b4 3a b2 76 9e 78 ed 8c ff 00 f5 e8 1f 33 1f 4f 63 8c fe b5 23 47 b9 89 c1 cf 04 f3 ff 00 d7 a4 da 00 ea 7d f1 ff 00 eb af 4f 5b 5c f1 b4 1b b3 08 46 49 14 a0 1e 08 39 03 a1 ff 00 26 95 09 0c 41 fa ff 00 9e 68 3f 5c fa e7 ff 00 d7 42 d4 56 19 b3 76 00 e4 0c f7 eb fa d3 4a e0 9c 0c 9c f1 cd 4a c7 20 1e 31 9f f3 de 97 01 87 dd e4 f4 e7 ff 00 af 54 32 35 03 eb ef 9e 3f 9d 3b 69 60 40 38 1f e7 de 94 03 92 57 a9 e3 ad 29 00 67 93 bb Data Ascii: Nig]4hBi Yc$Ob* g_6zL89qozOIb[_8Y9=a^bP:vx3Oc#G}O[\FI9&Ah?\BVvJJ 1T25?;i`@8W)g
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 97 73 18 d5 f6 91 93 96 19 cf e1 5d ce 83 f0 ef 46 d4 fc 37 6b aa 5d 6a 32 58 c6 e4 83 b9 86 07 24 60 9a e7 a4 d5 34 3e 4f f6 53 93 db e6 fe 75 ea 1a 7d ce 9d 27 c3 fd 3e 5b 9b 2d d6 12 3f 96 21 03 38 25 8f 27 f5 ae 1c 4d 5a 94 e0 b9 77 37 a5 4d 49 ea 79 ef 8b 3c 27 6b e1 68 ed 2e 61 93 ed ba 7d c9 2a b7 2b 20 c0 38 e9 ef d0 d7 3e f7 16 b1 a8 ff 00 46 38 c6 73 b8 e0 73 5e bb e2 62 a9 ae e8 ba 2d dd 8c 27 4b 95 d4 26 e1 85 e3 af 1f 8e 2b 63 50 b9 d3 6c ee e6 b0 b8 58 12 d1 14 a1 84 5b e7 0b 8f 5f d6 b0 8e 35 c5 5a 4a e6 8e 8e a7 84 1b ab 70 e1 d6 dc 03 9f 42 49 ae aa d1 9a 4d 31 37 e1 4e 73 8e c0 57 57 e1 4d 47 4d bb 8a e2 28 04 31 5c c7 39 58 99 e3 05 19 33 85 c1 c5 68 68 da 37 db b5 8d 49 2f ad 62 82 58 88 65 86 3e 23 e4 fd ef d3 3f 8d 15 31 0a 4b 54 28 Data Ascii: s]F7k]j2X$`4>OSu}'>[-?!8%'MZw7MIy<'kh.a}*+ 8>F8ss^b-'K&+cPlX[_5ZJpBIM17NsWWMGM(1\9X3hh7I/bXe>#?1KT(
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 8a 80 3b fa d2 02 cc ca be 58 23 ee 81 9c e7 3c fa 0a 47 e6 0f 94 12 37 64 17 fa 7f fa e9 67 7c ae 02 a9 db c0 00 11 86 fe bc 51 3b 84 b5 3b 5b 1d cf 3c e7 3d 31 40 2d 04 88 79 80 f2 09 20 9c 75 fd 7b 52 49 81 08 27 19 e9 f2 8c 0c fe 3f 5a 2d d9 89 c1 52 55 86 4b 0e 80 7b d1 71 16 e4 04 13 b4 f2 71 cf 3e 94 ae 5d 98 29 22 06 c0 dc 71 ce e3 c9 f5 ef e9 55 e1 20 83 8f bd 93 db 8f c6 a5 54 dd 09 e0 93 82 3a 70 3d 4d 32 0f 97 aa 9d bd c1 3c fd 69 a2 4b 16 d8 0e a4 8c 0c 92 47 ff 00 5a a4 94 6e 43 c1 50 49 03 1e 9d aa bc 0b e5 49 ce ec 11 c0 3c f7 ef 53 f9 81 b0 48 c7 23 dc 7a d2 0b 16 2c c1 fb 3e 11 5b 93 cb 13 8f d2 95 b2 c1 b9 c0 ce 47 73 4b 1e d3 1b 6d e4 e4 91 93 fa d2 27 de 62 01 c8 e3 6f 24 9a 92 88 64 05 30 5b e6 e7 1f 31 c8 f7 e3 eb 55 cb 30 71 d3 19 Data Ascii: ;X#<G7dg\|Q;;[<=1@-y u{RI'?Z-RUK{qq>])"qU T:p=M2<iKGZnCPII<SH#z,>[GsKm'bo$d0[1U0q
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 9f af 4e 95 4b 49 f8 5b 67 75 15 d3 4d 77 77 e6 2b 9f 9d 24 c0 39 1d 7f 4a d7 83 52 bb 8a 50 e9 34 b9 03 9e 49 ab 13 cb 77 a7 b7 ef 18 a3 4c 82 46 52 7b 11 c1 3f 9d 73 5d 9d ca 4d 1c a7 89 be 1a eb 3a 2e 90 92 78 72 66 0b 0c fb 4b 24 e5 19 c3 60 64 7b 64 8c d7 09 63 f0 b3 5b d4 5e 44 32 d8 98 cd c9 87 ed 02 62 c8 af c8 e4 f7 e4 63 35 e8 de 37 f1 0e b5 0f 87 8a d9 5c c8 b3 f9 a8 ea a0 0c 92 39 07 f4 1f 90 af 30 b3 f1 ef 89 ec 26 4d 36 4b d7 86 18 24 2e 55 d1 09 57 dc 5f d3 9e 49 38 f7 34 2e 56 7a 78 7e 6e 5d 46 59 7c 35 d6 ae 2f 9e 08 92 09 59 51 64 2c 24 f9 4a b0 24 1c 9e 31 85 27 35 17 88 7c 1f ac f8 67 4d b6 bf d4 2c c4 16 97 2c 16 29 03 ab 83 c6 41 e3 d7 a8 ab d3 78 f7 5e 48 45 ab 5e 86 85 81 03 6c 6a 09 04 1f 6e 9c 9e 3d f8 a4 d5 3c 5f ad 49 a7 c5 a6 Data Ascii: NKI[guMww+$9JRP4IwLFR{?s]M:.xrfK$`d{dc[^D2bc57\90&M6K$.UW_I84.Vzx~n]FY\|5/YQd,$J$1'5\|gM,,)Ax^HE^ljn=<_I
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: e3 26 a3 3c 67 20 86 fa d3 b0 1c 8e 80 e7 b9 a3 41 08 0b 15 39 3c f5 c1 eb f8 52 85 e9 eb 8e 72 4f 14 e6 20 b6 72 7d c9 eb f8 52 6e 5c 00 3e 6e 39 24 d0 d5 98 2d 46 32 f2 06 47 a7 1e b4 16 eb c0 1d b3 dc d2 f6 c6 3e be b9 a1 86 50 1e 9d 4f 34 fc 80 14 f0 0e 47 07 80 69 f9 c1 1d c6 71 c9 a8 c6 49 27 77 7c 0a 79 c8 23 b0 3c 66 90 d8 38 23 b1 c7 fb 5d 28 00 8c e4 0c fa 7b d0 3e 5c 67 91 df 3c d3 91 d4 32 b0 1c 1e d9 ef 40 80 e7 3c 71 9f c8 d1 93 81 9e d9 c7 3d 29 cc 4b 31 c8 c9 eb 80 69 be bc 8c d0 03 54 e7 9e 07 6f 7a 5c 28 dc 73 92 38 c6 4d 2e 72 01 ce 7d fb 8a 51 8e 4f 7c 7a e3 34 ee 02 84 2a 99 fc 80 c9 a7 a8 dc 46 4e 0f 24 f1 c6 29 a7 80 39 e0 9f 5a 17 1b ba f2 0e 33 48 01 9c 0d b9 24 af 23 d3 3f 8d 7e af 7e c7 ab 9f d9 bb c1 04 1f f9 76 97 d3 8f df 3d Data Ascii: &<g A9<RrO r}Rn\>n9$-F2G>PO4GiqI'w\|y#<f8#]({>\g<2@<q=)K1iToz\(s8M.r}QO\|z4*FN$)9Z3H$#?~~v=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49809	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:59 UTC	390	OUT	GET /wp-content/uploads/2021/01/NLI_Logo_COD_F_GY.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:59 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:59 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:19:09 GMT Accept-Ranges: bytes Content-Length: 39487 Connection: close Content-Type: image/png
2024-05-02 14:32:59 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 52 00 00 01 b8 08 06 00 00 00 4f 66 d6 ca 00 00 00 09 70 48 59 73 00 00 2c 4b 00 00 2c 4b 01 a5 3d 96 a9 00 00 20 00 49 44 41 54 78 01 ec bd 4d 72 dc b8 97 ee ed 72 d4 b8 3a 2b e2 8e e5 f4 06 54 e9 71 47 4b e9 51 cf 64 79 dc 11 fa d8 80 2d 6f 40 0a 79 03 96 bd 01 a5 15 d1 63 a7 3d bb 23 d1 ea f8 8f 9d f6 06 9c d6 b8 23 2a df 5a c0 ad f7 79 54 a4 9c a2 f8 05 10 24 41 f0 41 04 94 24 78 70 70 ce 0f cc 24 0e 01 52 bf fc fd f7 df 0f fe fd df ff 63 f4 e0 c1 83 09 72 9d b4 fa d7 bf fe 67 61 ab 00 36 8c 51 97 b9 6a 5a a0 bd 55 55 e1 aa 72 b1 1d 53 c8 3f 41 26 13 e6 df 90 f3 d2 5f 38 40 bf 23 e4 2f b0 69 8e cf 5e 26 f8 3e 85 e1 4f 91 e9 f3 08 79 0b b9 2c 5d 41 60 89 fc 05 79 0e ff b9 6d 94 1c 9d 7f 46 6d 5a Data Ascii: PNGIHDRROfpHYs,K,K= IDATxMrr:+TqGKQdy-o@yc=##*ZyT$AA$xpp$Rcrga6QjZUUrS?A&_8@#/i^&>Oy,]A`ymFmZ
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 20 33 c8 b3 49 ec bb a7 4d da 68 63 94 ea d8 11 c0 60 7f 84 9a 9c 15 65 00 ad e4 96 00 5f 40 b1 eb 56 a5 b4 89 80 19 81 2e 02 a9 99 99 89 cd 48 c7 17 a9 27 d0 ce 8b 56 93 e9 35 da da 6f b2 81 aa ba 63 9f 39 c0 e6 20 a6 e9 c4 36 5e a1 cd 3a 77 c3 9b b6 31 57 3f ee 02 db fc 38 73 00 d7 44 b2 d1 3b 6d c2 10 e9 f4 9e c0 27 58 c8 00 ea 51 fc 7d af 6d 30 f4 f0 26 c8 36 f2 45 6d 65 ff 28 b8 c2 07 ed 5b 54 d1 b7 d6 3e eb d5 4d fc 4d 6a fc f7 98 36 23 93 d9 53 64 f6 49 95 f4 0d 42 49 df 45 55 2a 48 a6 17 04 8a 66 27 7b e1 80 e7 46 be 8f 67 fc 3c 37 53 e6 85 4a a0 d5 a5 7d 84 c8 0b 0c 06 a9 bc b0 ec 74 0d 15 b6 f0 42 fe 08 f6 1c e0 f3 14 79 03 d9 55 e2 45 9f cb 47 2a 0d 16 5c 35 5a a6 07 f6 70 a9 c8 23 c8 bd 42 3e 42 76 7d 97 ec 2f e8 3c 43 7e c3 be c6 67 5f 13 07 Data Ascii: 3IMhc`e_@V.H'V5oc9 6^:w1W?8sD;m'XQ}m0&6Eme([T>MMj6#SdIBIEUHf'{Fg<7SJ}tByUEG\5Zp#B>Bv}/<C~g_
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 44 40 04 7a 4b 60 d2 23 cb c7 3d b2 55 a6 06 4a 00 41 c6 1c f9 0f b8 f7 04 f9 35 f2 55 40 ae 5e c3 b7 99 2f fe 04 1f 48 c5 a0 43 9e 95 3a d6 eb d0 7d f9 3a c9 0e 11 10 01 11 10 81 06 08 f4 29 90 e2 ff 90 52 12 01 2f 08 20 e0 58 20 73 f6 86 b3 54 0c aa 42 78 6f c0 89 17 70 63 23 82 0c a4 d2 6f b4 8b ff 41 ef b5 4f e0 1d db f2 d6 b1 3e a9 13 01 11 10 01 11 10 01 5f 08 fc ee 8b 21 15 ec d8 c3 52 c4 3e 05 7e 15 5c 92 48 08 04 18 54 c1 0f e6 be a7 b9 4f 0e 04 19 48 e5 00 f6 2a 82 cd b1 d1 b6 78 27 1d 3c da 2a 52 3d 11 10 01 11 10 01 11 10 81 5a 04 3e 2b 98 aa c5 4f 95 9b 23 b0 6a 4e 75 2b 9a af 10 10 7a e5 c3 90 02 29 46 b0 21 4c 69 e6 9d a9 9a 95 ca 23 a3 72 11 10 01 11 10 01 11 68 8f 00 9f 5f d6 bf 28 69 8f b7 5a aa 4e 60 51 5d d4 4b c9 c8 37 ab 06 13 48 c5 Data Ascii: D@zK`#=UJA5U@^/HC:}:)R/ X sTBxopc#oAO>_!R>~\HTOHx'<R=Z>+O#jNu+z)F!Li#rh_(iZN`Q]K7H
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 01 d2 1c 65 9c 9d ba 4a 1f eb d1 fe b2 47 b6 0e d1 d4 68 88 4e 3b f4 79 d7 a1 2e 13 55 49 10 b5 48 57 c2 ef 06 cb ba ba 49 bf 87 e0 72 9c b6 a9 ed 7d 05 52 6d 13 ef b0 3d cc 4a f1 42 d9 e7 8b 64 87 f4 d4 b4 08 88 80 08 04 41 80 77 b4 39 3b 35 49 7b c3 bb cd c8 db 28 7f 9d 3e d6 87 7d d8 be ec 83 9d 03 b6 d1 c7 d7 d3 af 7a d4 1f 5d cc c0 30 48 e2 4c 14 03 a6 bc 14 e5 1d 68 a1 fc b4 85 36 0a 9b 50 20 55 88 27 c8 83 27 41 7a 25 a7 44 40 04 44 40 04 aa 12 d8 80 e0 17 04 53 07 59 15 30 68 e2 75 e2 29 b2 96 fa 65 01 52 99 2d 01 de cc f5 2d 5d fa 66 50 81 3d 6d 2f eb fb 06 5b fe 28 09 a2 68 ee 87 02 9b 9b 3e d4 f9 ac 94 02 a9 a6 bb d8 33 fd 98 95 8a 60 d2 85 67 66 c9 1c 11 10 01 11 10 81 f6 09 9c 23 98 7a 9f b3 d4 2f 82 39 7f 20 73 30 a5 24 02 b5 09 c4 33 86 be Data Ascii: eJGhN;y.UIHWIr}Rm=JBdAw9;5I{(>}z]0HLh6P U''Az%D@D@SY0hu)eR--]fP=m/[(h>3`gf#z/9 s0$3
2024-05-02 14:32:59 UTC	7502	IN	Data Raw: 93 b9 ef 40 e4 cb d7 1d 02 a6 79 ad 10 40 3f dd 85 c3 3e 81 eb 61 e2 3e dd 25 4e db 50 fe 09 fe 3e 4d 64 84 f8 9c 25 d2 35 06 35 a3 99 13 d1 46 19 00 f9 1d 99 0b a1 14 89 7a b8 90 66 bf 9e 42 9a 5a df 9b 42 9b f8 ce b3 be 7c eb 8e 89 76 4a f4 08 8b cf 14 cf 63 a6 00 95 2b f4 d1 93 dd 3f e7 7d 1f e8 e8 0d e4 96 81 32 2b f6 90 85 d4 58 4f a5 7c 1f b2 75 0a 60 62 da 72 8a 32 3b a8 54 ca c5 94 ef 62 fa 11 02 08 df 7e 35 45 dc ad 4e e1 08 9c 06 88 ac 5b df ba 4a b8 98 7a 09 5d b3 00 ac c6 cc 3a 8a 53 29 d7 36 9f 00 94 cf 42 3e 04 4f ea e3 f8 9b 22 78 0b b1 db 15 af 9d 4a 75 85 6c 9c 5e df f9 78 3b d1 02 22 ce cb 9e a4 70 0a 94 c3 94 f6 3f 90 7c 31 ab f5 1a 38 ce 40 60 5c 25 25 6d 41 27 c9 8e 89 f6 3a c0 19 be d6 fe 53 00 ff 37 ac 21 0b 29 0a 8e 66 07 8e ce b8 Data Ascii: @y@?>a>%NP>Md%55FzfBZB\|vJc+?}2+XO\|u`br2;Tb~5EN[Jz]:S)6B>O"xJul^x;"p?\|18@`\%%mA':S7!)f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49810	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:59 UTC	636	OUT	GET /wp-content/uploads/2021/11/Home-Green-Desk-1280x914.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:59 UTC	209	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:59 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:18:08 GMT Accept-Ranges: bytes Content-Length: 469792 Connection: close Content-Type: image/jpeg
2024-05-02 14:32:59 UTC	7983	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 26 a1 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 0f 2f 00 00 01 01 00 03 00 00 00 01 08 20 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 30 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 31 3a 31 31 3a 30 32 20 31 Data Ascii: JFIF``&ExifMM*/ (1!2i$``Adobe Photoshop 23.0 (Macintosh)2021:11:02 1
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: b9 23 d0 ce c5 b2 bf a3 75 36 ba bc 4c 8a bd bf a1 58 7d 5a bc ac 5a eb ea 98 d6 6d 6d 6e 6d 4e a3 71 26 b0 d1 14 d3 60 77 f3 98 af a7 fa 1d 9f 9f 8d ea 63 ff 00 da 75 7f a2 75 3b b1 f2 32 c3 c9 36 e2 3d ad a1 f2 0b 9b 03 f5 7b 3f 3d 96 3d 96 53 ff 00 5d f7 a5 d6 2e a5 be a8 04 bd 97 d3 6b 6d ac c3 61 c0 0c 90 d6 38 7b 7f 40 ff 00 d2 e3 bb f7 2e 46 36 25 af f2 0a a7 9d c9 b7 18 c3 5e 09 c7 70 df 8e 41 97 d6 d7 eb e9 b5 c7 f9 c6 37 f7 1f fe 12 bb 18 ab ee 7f f3 6e 70 b5 9e 72 64 7f 25 df ce 35 33 74 63 03 84 80 74 3d 8c fd 36 a5 02 24 f2 0c ed 8e 14 f4 ca 23 4c db 07 49 d0 70 0f 29 8b 1e 24 34 f3 06 3b 18 e1 44 1d a3 43 3d f5 46 0e 80 43 a0 19 83 1f dd ff 00 90 49 9a 24 6c 4d 57 54 94 64 57 43 6a c8 aa d7 55 9b 55 a1 cd 11 a0 db ef ae ea ac fe 4b db ee 63 Data Ascii: #u6LX}ZZmmnmNq&`wcuu;26={?==S].kma8{@.F6%^pA7nprd%53tct=6$#LIp)$4;DC=FCI$lMWTdWCjUUKc
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 83 4e 9a 74 b9 10 c9 7d a3 53 e6 d4 1c 5d 92 d2 d5 53 fb bd 3e cd 14 b3 af e5 ca 1d 80 72 7d 14 0b 11 db 1f 43 f4 dd 3a 8e 91 df 6c 68 2e 4d d6 96 b3 d9 ed 7f 0c 27 0f 09 a6 ac cb 52 1e 54 53 48 8f e1 2e 0a 96 47 6e b7 bd fc b6 c5 18 9c 92 ff 00 f9 97 6d 3e 3f 06 bf 6d c9 59 88 71 9f b0 5e 29 59 e4 aa e1 de 1f 89 f2 c8 50 88 da 0a de 6c 93 a8 bf e6 15 6b 10 48 fd 23 1b f1 7a a6 09 4b 66 ee 4a a5 8b ca 33 8a 8a bf c3 68 d6 0a 29 1f 98 54 19 98 ec c8 dd 0a db cc 1c 68 86 27 92 6e 59 3a f0 66 db cf 20 56 2f d4 b1 23 d4 e3 6a 49 70 41 ea 2a a9 e8 e7 8e a6 17 2b 2c 4c 1d 1b f8 48 37 07 02 49 3f 8b e8 36 6a f9 1f 1d cf 9c 9c b3 35 cc e6 59 67 a2 90 34 aa 90 88 d4 69 37 50 2d d4 90 2e 4f ae 31 69 34 71 d3 4e 6e 3d 32 2b bb ec 13 4d 1c 95 a6 5c c2 a5 cb 4b 34 ad Data Ascii: Nt}S]S>r}C:lh.M'RTSH.Gnm>?mYq^)YPlkH#zKfJ3h)Th'nY:f V/#jIpA*+,LH7I?6j5Yg4i7P-.O1i4qNn=2+M\K4
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: ab e4 a6 15 54 b4 ae c0 bc 8f d0 22 37 90 20 dc f5 18 ab dd 8e a7 e5 19 5c 57 1c 03 6c 5f 28 cf b8 97 87 73 cc 8f 3a 69 ab e0 34 95 0e e5 c2 ab ea d0 41 b5 ad d4 00 7c f1 d2 c5 ed b8 7b 6b c0 76 35 ca 39 c2 f9 49 e2 8c ed f2 f9 25 68 aa 6a 79 93 2b 2b 05 e7 38 05 b9 60 5a d7 36 36 b5 b7 c0 d4 46 51 8d c0 18 ea 52 a6 19 cb 16 2c a1 f3 15 a4 68 5a 9e 4a 71 22 0c c1 8b da 50 45 82 81 be ab 5e c4 da db df 1c c9 67 79 12 52 5c 9b 1e 9d c5 5f 82 e7 9a e5 99 2e 61 c3 b9 6f 15 70 c0 96 b2 55 7e 45 65 20 8c 3c 70 9d 3d fe 6c 4d 99 b6 e8 30 20 a2 e3 2c 33 e1 b3 3f b7 19 3b a2 91 c5 0d 99 65 35 23 2f ab aa a9 2f 24 2b 24 b1 bb 9d 08 09 25 54 2f 41 61 f6 37 b6 3a ba 0c 50 9c 54 bc 2e 0a 27 3d bc 44 d2 a7 c8 1a 6f 60 10 cf 55 59 22 d5 e5 bf fd 4e 95 99 cd e1 60 fb 20 Data Ascii: T"7 \Wl_(s:i4A\|{kv59I%hjy++8`Z66FQR,hZJq"PE^gyR\_.aopU~Ee <p=lM0 ,3?;e5#//$+$%T/Aa7:PT.'=Do`UY"N`
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 29 37 22 66 7b c4 19 7e 57 1c 95 35 f5 31 c1 4b 0e f7 63 bb 1f 21 e7 8c da 3d 16 5c cd 47 14 6e 4c 1b 77 33 31 cf 7d b6 d1 06 71 95 65 f2 cf 21 ff 00 a9 39 d0 9f 61 be 3d 76 8f fd 2b 93 bc f3 af e0 75 81 f9 28 39 c7 1e f1 0e 7b a9 6a 2b de 28 4f fd 1a 73 cb 41 f6 eb f5 c7 a7 d2 7a 3e 93 4d cc 23 6f ed f2 cb a3 8d 47 a0 73 63 a4 82 36 4e 08 51 ec 40 12 68 68 9e b2 50 8b dc e1 65 2d a8 88 d1 f8 63 d9 e3 d4 d9 d8 ec 3a dc 62 88 e7 dd c1 62 c6 c2 3c 4f c2 90 e5 f4 12 15 51 75 1d 70 e3 b8 52 b3 3e cb e2 3e f2 40 f3 c3 d9 51 72 86 22 f4 a4 1f e1 c0 6c 94 0c 92 9b 4a b1 ed 6c 22 90 12 2b d5 9f e2 30 c3 ae 88 37 10 bb a8 c4 21 b3 fb 35 c9 6f 4a 92 3c 84 13 be 31 64 ca 94 a8 b6 11 6d 59 77 cf b2 88 a6 cb dc 34 8d f0 e1 5e 54 58 a2 cc 20 52 9c b7 8a 8c 6d 7d 05 88 Data Ascii: )7"f{~W51Kc!=\GnLw31}qe!9a=v+u(9{j+(OsAz>M#oGsc6NQ@hhPe-c:bb<OQupR>>@Qr"lJl"+07!5oJ<1dmYw4^TX Rm}
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: 25 20 45 19 1d 54 74 27 0d a9 83 c7 cc dd c8 a3 3c db 64 cc d7 34 68 10 c3 0b 90 c4 5d 98 76 f9 63 0e 9f 4e a4 f7 48 ca 95 b0 54 04 fc 4c 6e cd b9 63 8d ef 1b 97 08 b1 ab 06 d7 46 9c e9 1d 81 16 de f8 dd 87 1c b6 a8 a2 cc 7c f4 56 ea ea 9a a5 cf 8b f2 c1 f0 af 4c 76 71 62 50 5c 76 6d 82 a2 43 ec 30 c8 61 96 04 b6 08 51 22 9a 30 4d 88 c5 72 90 02 90 22 c5 62 bb 1c 50 e4 40 ad 2e 66 d1 0b 6a 37 c5 0e 23 26 7a 5a be 6b 5d 98 9f ae 1e 2a 86 bb 08 e5 75 49 0a df cf 19 b3 58 09 b2 e6 71 05 b0 3b e2 94 a4 4b 44 79 33 05 68 98 5c 7d f0 d1 8b be 49 68 ae 54 4a 1e a0 9f 5c 74 31 ae 09 68 7a 42 bc bc 45 d9 2c 25 92 55 bc 1b 2b 5b 19 35 11 b2 5d 06 aa 33 69 5a 36 5d 64 ed 8c 30 c6 4d c5 2f 33 73 24 e5 89 c7 67 07 11 a1 45 51 31 74 d2 5b 06 7c 06 c9 f4 c8 61 f1 23 1b Data Ascii: % ETt'<d4h]vcNHTLncF\|VLvqbP\vmC0aQ"0Mr"bP@.fj7#&zZk]*uIXq;KDy3h\}IhTJ\t1hzBE,%U+[5]3iZ6]d0M/3s$gEQ1t[\|a#
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: 88 50 5c d8 11 71 f6 c7 6b d3 a7 09 67 8c 25 d3 0c 25 6e 8c b6 aa b2 a2 a8 7e 74 d2 4b 63 7b 33 12 31 ed e1 83 16 3f db 14 6b 4a ba 22 6e 2e 48 c5 c9 a1 b9 3a 4e 0d 82 83 2b 46 c0 92 31 97 78 07 42 ba 0b 5b 09 64 14 15 88 e8 71 2d 10 e8 85 fb 8c 0d c8 87 44 2f e4 71 37 22 0a 11 b8 ed 81 b9 00 ef 26 46 e8 0e 26 e4 41 49 4f 25 fa 1c 07 34 41 f5 a4 76 1b 03 8a fd c5 61 10 32 f7 d7 d0 e1 d6 64 14 4e 8a 89 c2 db 49 c5 2f 22 b2 0a 14 f2 8d 80 db 03 7a 20 b5 a4 90 f6 c2 3c 88 14 28 65 ac c6 f6 c0 f7 bc 04 76 2c b8 a8 f8 70 af 2d 90 7b dd d9 05 b4 e1 77 a0 8d 35 2c 8d d0 1c 15 91 12 85 c7 97 c8 7a 83 f6 c4 f7 51 28 92 b4 13 01 f0 9c 27 ba 89 42 1b 2f 95 b7 b7 4f 4c 05 99 22 50 f4 19 64 83 7d f0 25 99 13 6b 24 0c b1 ba 93 8a bd e4 4d ac 7e 3a 59 10 74 38 57 91 12 Data Ascii: P\qkg%%n~tKc{31?kJ"n.H:N+F1xB[dq-D/q7"&F&AIO%4Ava2dNI/"z <(ev,p-{w5,zQ('B/OL"Pd}%k$M~:Yt8W
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: 37 f5 23 1e fb 47 a8 59 34 f2 8c 1f 4c 90 8e de 09 79 67 00 e7 59 a5 6b 55 55 44 f4 94 4e e6 45 2d b3 38 ed 6f 2d ad 8c 7a af 59 d3 63 8e d8 bb 91 27 2f 09 17 5a 4e 17 a8 e5 47 49 15 47 bc ca 54 6c 4d c2 2d ec 09 3d 85 fb e3 ce cf 58 a6 dc f6 d2 06 3c 13 c8 e9 20 d4 3e cb e9 33 4a 29 29 a1 e2 43 4b 5e cb 67 58 23 52 50 f9 02 4f ef 8c 4f d7 e5 a6 c8 a6 f0 ee 87 db 3a 98 fd 2e a3 72 7c 98 4f 1b fb 38 e2 5e 0e a9 67 ce a8 a5 31 3b 95 4a c5 6e 64 72 79 78 bb 1f 9d b1 f4 7f 4a f5 cd 26 ba 35 82 7c fd 74 d1 46 4c 32 c7 df 45 57 93 62 48 df 1d ad c5 24 9a 5c ae b6 bb 6a 5a 4a 99 cd ed f9 31 33 ef f4 18 49 e6 84 3f 73 48 29 30 fa ce 07 43 8c 9e d8 e8 50 ac 2b d0 e0 38 04 58 ad b8 c0 f6 e8 9c 1e f7 c5 1d 4e 07 b6 1b 16 95 e3 cf f7 c2 fb 61 b1 e1 5c 46 f7 c0 f6 89 Data Ascii: 7#GY4LygYkUUDNE-8o-zYc'/ZNGIGTlM-=X< >3J))CK^gX#RPOO:.r\|O8^g1;JndryxJ&5\|tFL2EWbH$\jZJ13I?sH)0CP+8XNa\F
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: 64 60 6e 46 e3 16 29 58 bb 42 49 c2 f9 94 d9 14 d9 d4 6f 00 a5 82 45 8e 44 e6 7e 6f 88 d8 36 9f e1 be d7 c5 7e f4 77 6d 1b 63 db b8 8f 97 e5 95 55 b3 c7 1c 0a 58 bb 69 d7 fa 57 6b 9b 9e db 0b e1 73 67 86 38 b7 20 42 ed 57 67 d0 3c 33 92 72 27 c9 e5 ab a7 a1 e2 09 a8 a9 5e 04 a9 23 78 12 e1 d1 88 3e 47 52 83 eb 8f 01 eb 9e a2 b2 e9 e5 0c 73 70 e5 7f 93 d0 e3 d2 d5 4a 44 ca 0c d2 b2 a7 32 5a da 1a ee 62 09 1a 29 62 1e 16 8d c1 e8 41 c7 03 51 a3 c7 8f 4e 96 45 cb 56 75 b0 e7 c7 34 e0 5d b3 88 aa b3 1a 3a 73 1a 38 a8 d0 75 16 ba a8 1d fd 31 e7 b4 db 71 ca 5b bf 6d 99 f1 4a 31 9b 6f a2 b7 c2 99 15 53 d4 c9 34 86 49 4d cd 8a 9e a2 fe 78 e9 7a 86 ab 1e d5 08 f0 74 b2 e7 82 81 74 cc b2 da 8a fa 14 8a 2d 68 db 06 d6 c2 da 7d 71 c4 d3 e7 8e 29 b9 48 e5 43 2a 8c ac Data Ascii: d`nF)XBIoED~o6~wmcUXiWksg8 BWg<3r'^#x>GRspJD2Zb)bAQNEVu4]:s8u1q[mJ1oS4IMxztt-h}q)HC*
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: 46 d8 a9 e9 b1 c6 77 92 9d 95 fb 96 8a be 70 63 c8 e8 72 d1 4f a1 e4 ab 8d e6 76 12 6a fd 45 40 61 d8 f8 4e de b8 ec 62 84 f9 73 7c 0f b1 35 65 df d9 67 0a af b4 0a 5a da 69 f3 2f 70 14 ae 92 e8 58 b5 f3 14 a9 b9 02 fb 30 db 73 e7 8a de 9d 39 ee 2d 50 8b 54 8d 5d 38 7f 24 e1 fe 1e cc 61 e1 ba 08 33 2a 91 22 c3 2c cd 2a b4 ea c4 78 24 2d fa 50 12 2f 6d 85 bb e3 46 d5 08 d9 6e 38 ab a4 66 52 65 23 21 71 55 4f ef 2b 55 50 5a 4e 7e dc b6 56 24 95 1b 59 87 f4 ea 31 76 8e 10 cd 16 9d 7f e4 93 84 21 fb 4b 67 b2 3e 23 c8 78 77 30 ce e6 e2 09 a0 ca a1 a9 8a 3e 55 4b d9 10 95 2d a9 40 f5 bf 4f 4c 5b 97 0a 9c 5a 7d 20 43 9b b2 45 2f b2 5c 93 36 aa cc b3 0c a7 3b a5 cc 32 aa a8 66 7c be 38 18 89 22 94 8b 80 c0 75 0b 72 6d 6b d8 74 c6 38 61 8b 9b 8a 5f e4 55 86 36 55 Data Ascii: FwpcrOvjE@aNbs\|5egZi/pX0s9-PT]8$a3",x$-P/mFn8fRe#!qUO+UPZN~V$Y1v!Kg>#xw0>UK-@OL[Z} CE/\6;2f\|8"urmkt8a_U6U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49811	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:59 UTC	386	OUT	GET /wp-content/uploads/2019/08/Home-Prof-Dev.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:59 UTC	209	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:59 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:25:38 GMT Accept-Ranges: bytes Content-Length: 617827 Connection: close Content-Type: image/jpeg
2024-05-02 14:32:59 UTC	7983	IN	Data Raw: ff d8 ff e1 1b e5 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 0f 2f 00 00 01 01 00 03 00 00 00 01 08 20 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 24 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d8 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 39 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 31 39 3a 30 38 3a 30 37 20 31 35 3a 31 33 3a 30 38 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*/ (1$2i$''Adobe Photoshop CC 2019 (Macintosh)2019:08:07 15:13:08
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 00 00 00 00 00 00 0c 63 72 6f 70 52 65 63 74 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 0d 63 72 6f 70 52 65 63 74 52 69 67 68 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 63 72 6f 70 52 65 63 74 54 6f 70 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 60 00 00 00 01 00 01 00 60 00 00 00 01 00 01 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 01 38 42 49 4d 03 f5 00 00 00 00 00 48 00 2f 66 66 00 01 00 6c 66 66 00 06 00 00 00 00 00 01 00 2f 66 66 00 01 00 a1 99 9a 00 06 00 00 00 00 00 01 00 Data Ascii: cropRectLeftlongcropRectRightlongcropRectToplong8BIM``8BIM&?8BIM8BIM8BIM8BIM'8BIMH/fflff/ff
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: f3 0f 7a ef f5 85 d3 f4 df e8 5d 3b e9 7f 42 b7 e8 fd 1f cc fa 4b c6 d2 55 f0 ee cf cd fc 9f cb b3 eb bd 2f fe 5b bf f9 de 0f f3 5f d1 be 87 fd af ff 00 bb 9f b9 fc 85 a5 47 f3 94 7c 6c fe 8f f4 38 fc ef f8 55 e2 09 29 3a ad 9f cb 1f ee 0f ca 4f 4b f5 eb fe 55 1f d0 3f 3b fa 0f d3 e4 7f 4f ff 00 bb 0b 9d 6a 82 4a d4 7e 50 d4 96 ed ac 3f e9 74 fd 1f a6 df a7 f4 79 fc e4 6c af e7 9f f4 be 91 fa 5f 4b 9f cf fe 5a cf 49 12 a6 d7 64 c5 56 49 05 27 3c 8f 88 e3 9f ec ff 00 29 13 33 f9 e1 fc ef d1 6f f3 ff 00 4f 8f fa 8f dc 55 12 4e e8 84 a3 83 f0 5d 5f 4e ff 00 91 9b f4 3f 9b 6f f3 df 43 8f ce 5c 7a 49 b2 d9 23 77 ff d9 00 38 42 49 4d 04 21 00 00 00 00 00 5d 00 00 00 01 01 00 00 00 0f 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 Data Ascii: z];BKU/[_G\|l8U):OKU?;OjJ~P?tyl_KZIdVI'<)3oOUN]_N?oC\zI#w8BIM!]Adobe Photosh
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: ca 40 a7 b9 eb f5 35 6e f8 ed 89 38 f9 85 68 ae c9 29 7f 08 03 d3 14 8b fe b9 47 eb 42 f0 be d4 13 92 31 da ac 0b 76 79 dc 7e ee 3d 73 55 b5 32 c6 62 42 86 e3 a8 35 62 d3 19 38 20 63 ae e1 d6 aa ea 0c 0c ad 85 2b b9 3b f1 83 9a 95 a8 99 cb de 03 f6 86 c0 df b0 fc e1 7f 86 ab b6 31 9e 09 3e 95 2d cf 99 e7 b0 54 56 2c 72 17 76 0b 54 12 03 8e df 87 6a cd 92 30 10 17 00 7e 34 8c 32 3e f2 f1 ea 69 07 20 7a 7a d2 38 05 71 81 c7 a8 ac de a3 4c 69 65 38 df f2 e7 a1 1d 0d 2b 70 c4 1c 0f 6a 41 d3 1c 0a 43 f2 f1 8c d4 8c 56 fe 2e 98 d8 4f 5e 6a 00 c1 ba 64 70 3e f5 4a 48 23 a0 53 ed d7 f3 a6 15 0c ea c4 f0 3a e4 e6 93 18 d0 72 3d 08 a4 ce f8 c8 ef 4b 20 2c 70 78 c5 35 87 1c 75 ef 52 02 76 c7 7a 61 e0 7b d3 81 27 ad 07 1d 29 80 8a 41 1e f4 a0 6e e3 a0 1d 8d 26 46 de Data Ascii: @5n8h)GB1vy~=sU2bB5b8 c+;1>-TV,rvTj0~42>i zz8qLie8+pjACV.O^jdp>JH#S:r=K ,px5uRvza{')An&F
2024-05-02 14:32:59 UTC	8000	IN	Data Raw: 4e 3a d4 68 e0 34 84 80 06 d2 70 06 2a 18 d5 a5 80 61 49 52 01 63 9f e5 4a 5b 2e ab c8 cf 0c 09 cd 7c 8d dd db 47 e8 36 ee 5b 13 08 4a 05 2f d3 7f 2f df d2 a2 17 27 70 65 39 62 a7 3b b2 09 39 f5 1d 7f 1a 63 ca 58 c5 90 10 2e 49 63 c6 7d 31 49 01 46 da 46 ee a4 e1 fa 63 26 9a 94 87 6b 74 2a eb f2 2b fd 99 3e 74 2a db c0 da 0f 24 60 fb 56 4c 4e 23 54 22 55 58 8e 41 54 e4 36 09 1c 9e 9f 95 68 6b 52 6f da cd 95 8e 26 c9 75 3c 7b 71 59 51 20 0c 51 70 b1 36 5b 01 70 bc f3 c0 ae e8 3d 37 31 71 d7 62 55 9d 94 10 a5 95 8a 9c 82 db bb f1 fa 53 e3 b8 30 a0 da db 41 00 90 7a 1f f1 aa ab 80 09 50 15 48 2b f8 e6 a3 0c 37 1c 9c a2 81 d6 b5 4d f7 13 8a ea 8b b3 c8 67 98 e7 70 18 db c9 c8 fd 6a 95 ce 9f 64 ea a2 7b 6b 59 b9 eb 24 4a d9 1e 84 63 a5 2a b1 da ed f7 94 e4 96 Data Ascii: N:h4paIRcJ[.\|G6[J//'pe9b;9cX.Ic}1IFFc&kt+>t$`VLN#T"UXAT6hkRo&u<{qYQ Qp6[p=71qbUS0AzPH+7Mgpjd{kY$Jc
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: b5 c6 e5 39 f2 f2 08 cf 5c 8a ab b3 7a 60 2e 7d ea d5 b3 32 17 c8 0a 02 75 eb 42 02 1b 95 2a c4 63 69 cf 4a 80 9c 9c 73 c7 40 4f 15 62 70 36 2e d3 9f 7a 83 03 7e 69 80 8e db 55 46 00 03 d2 a3 6c 0e 99 c7 bd 49 37 2b d8 67 b8 eb 4c 38 c0 e4 9f a9 a5 61 32 32 db 40 3b 72 4d 56 ba 07 21 bb d5 bd db 41 ee 3d 6a b4 df 7d 41 e9 4e 22 45 69 30 e7 df bd 35 5b b7 f3 a5 18 5c 93 d6 93 3b ba 56 88 96 21 39 71 e8 3a d0 47 ca 54 11 83 d7 77 f4 a4 fe 02 28 3c 7b fb 55 19 f5 13 b1 1c e0 fa d3 c3 70 0f a0 c6 3d e9 99 cf 3f ce 97 24 ae d0 3b ee cf bd 54 40 93 80 a0 63 9f 7a 17 ef 03 d8 75 a6 85 e3 9c e4 9a 5f e1 da 3b f5 a2 da 80 e0 00 39 cd 39 47 24 d3 4e 18 e7 34 8f c0 5c 50 03 b9 df 9e f4 bc 31 c1 cf 14 1e 39 a7 06 05 45 57 40 02 77 10 3b 8a 71 4c e0 70 48 ea 69 87 e5 Data Ascii: 9\z`.}2uB*ciJs@Obp6.z~iUFlI7+gL8a22@;rMV!A=j}AN"Ei05[\;V!9q:GTw(<{Up=?$;T@czu_;99G$N4\P19EW@w;qLpHi
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: f5 a8 16 50 02 9f ee e0 e3 d4 e2 a4 b6 61 96 77 23 cb 53 c9 db 93 93 cd 71 5a e7 65 ec 62 f8 ee e1 e0 b4 b6 95 1d f0 26 ec 73 c6 cc 1e 3f 3a e7 b4 f5 86 78 12 75 c0 91 ba e7 a3 1f 52 6b 57 e2 44 cc 9a 75 b2 2a 91 fb fc 92 07 24 15 e3 8a e1 f4 a9 24 b6 bd 88 46 d9 0e 30 e7 9e 32 32 3d ab d3 c3 5f 90 e2 a9 67 33 a9 1a 7a 82 24 92 18 77 80 58 09 3e 75 63 9e 08 a8 06 99 03 2b 87 8a 27 6c 7d e6 8d 49 39 e7 b8 f7 a7 45 74 24 88 03 26 03 0c 02 79 29 e9 4f fb 47 9a db 9a 75 dc 17 69 da bc 12 38 15 ba 72 bd 84 a2 91 5d b4 3b 77 11 34 90 c4 1d 09 28 23 8c 74 c6 0e 71 55 df c3 56 2a 88 8f 65 6e 55 b8 26 43 90 47 b7 bd 68 3c c5 c3 2e f0 d2 22 65 42 0c 16 f5 cd 44 58 a0 56 56 8d d7 66 3a 1c 64 fb 7a d6 aa 4c 1a 46 5c 9e 14 d2 98 00 2c e1 4c 02 a4 20 c8 23 dc 77 a8 57 Data Ascii: Paw#SqZeb&s?:xuRkWDu$$F022=_g3z$wX>uc+'l}I9Et$&y)OGui8r];w4(#tqUVenU&CGh<."eBDXVVf:dzLF\,L #wW
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: 0e 4e 0e 7b 57 73 3e 98 63 60 0a 0e 9e 95 c8 6a b6 f8 bb 63 83 b0 9f 9b 15 f4 8d 5f 54 78 b1 95 f7 30 c4 18 60 0e 49 27 d6 b7 ad 21 11 db ba 0e 1b 19 0d 9c fa 55 28 6c e4 69 47 cb 9f 73 5b 31 c2 51 40 2b 81 d3 3f 5a f2 ab c5 f3 1e 8d 16 ac 79 8f 8c 4e cf 11 5e 28 e3 ee 13 5e 4f f1 45 fe cf e0 5d 75 87 19 b2 95 94 15 e1 8f 03 83 dd bd bd ab d7 fc 5b 6a 4e b3 76 f8 dd ba 4c f1 fd dc 7f 8d 78 bf c5 c8 f1 e0 4d 64 6e 09 2a 44 47 ef 10 30 60 54 8c 2f 1c 7c d8 e7 af b5 79 18 ba 6e 30 6d 9f 45 97 cb 9a ac 57 99 f3 7e 99 24 30 41 1a 2e d1 b5 76 bb 30 da c1 bb e7 f1 ad 05 90 16 40 41 d8 78 ce ec 8f ae 2b 3f 4d 9f fd 1e de e2 30 ca b2 22 c9 b4 31 c1 04 03 9e 30 2b 41 c6 cc 03 2b 3b 91 d0 f3 c1 39 eb f8 d7 e6 75 97 be cf d4 e0 f4 23 58 04 8e bb 72 70 4e 58 03 ea 7a Data Ascii: N{Ws>c`jc_Tx0`I'!U(liGs[1Q@+?ZyN^(^OE]u[jNvLxMdn*DG0`T/\|yn0mEW~$0A.v0@Ax+?M0"10+A+;9u#XrpNXz
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: 56 00 f2 72 15 dd 17 a6 d2 d9 fc 29 86 de 2c 82 ac 71 9c 9c 9c e3 d6 a1 94 8a f2 27 cd b9 72 1b b2 1e 86 ab 18 83 31 1f 75 7a e7 19 3b aa fc 8e 91 e4 92 00 6f ba 4f 5a af bf 6f 0d 9e 0e ec 28 fe b5 93 2d 5d 90 f9 40 ed e4 b0 5e a0 f4 63 f4 aa 37 88 44 25 11 c2 2b 02 0a 85 39 cf 63 9f e9 5a 52 4c 8e a7 e5 20 0c 93 93 c8 e6 b3 e6 7f 3b 38 6f 2d 54 64 96 6c 01 58 c9 1a 47 73 95 d1 dc 2f 88 61 2a a3 77 cc a0 37 46 3e b5 ed 5a 6c 5b af 06 d1 b6 31 6e a6 47 73 8c 70 3a 57 8b e9 41 65 d7 71 bc 14 62 08 2a 73 96 dc 47 5e dd 2b d8 f4 d9 84 b7 c5 f6 94 7f b3 88 ce fe 40 1d 78 15 f2 78 e5 fb c3 e8 30 eb dc 2c dc 8f 31 c3 e0 aa 2f 4c f1 b7 eb 54 1c 79 73 12 71 92 36 b6 3d 0d 5d b9 7c 4a 73 f3 2f f1 73 90 4d 57 c0 32 3e 71 ca ee 1f 85 70 74 3a 92 2a 4c aa d1 10 e1 80 Data Ascii: Vr),q'r1uz;oOZo(-]@^c7D%+9cZRL ;8o-TdlXGs/aw7F>Zl[1nGsp:WAeqbsG^+@xx0,1/LTysq6=]\|Js/sMW2>qpt:*L
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: 40 00 9c 83 91 eb 5f 3e 76 21 ea 0f a7 1e b5 2c 64 7e 00 e4 7d 6a 20 48 1f 74 37 e3 4f 52 58 0f 93 67 be 69 0f 72 c2 6e e4 85 c8 3c d4 89 b8 60 8c 03 dc 1a 62 15 c0 39 24 0e b4 e4 25 4f 1d e8 63 25 c0 18 c7 07 18 1f 5a b3 1a e5 46 46 0f 7f ad 55 0a 18 a8 ee 0e e0 3d ea d8 66 cf 28 32 7d eb 58 3b 33 26 4e 80 6d c1 a7 aa ed 3c 1e 29 8a 38 c9 18 3e 82 a6 42 36 f1 5e 8c 6e d1 8b 1c 08 dc 3b 01 d6 9e bf 7b de 90 2e e0 47 4f 5a 7a 0d c0 76 35 d0 90 87 10 33 c9 c7 a6 3b d3 94 16 e7 67 eb 46 3d 79 34 aa a0 77 ad 51 9b 1e 0b 0c 81 f2 e2 80 dc 73 d6 83 8c 0e f4 bb 03 73 cd 68 85 70 0d 87 5c 74 3d 68 8b 90 79 f5 a0 af 19 1f 85 28 38 5c 0e bd e9 b0 b8 2f 20 f6 fa d2 8c 85 fa d2 6d c0 00 9a 70 e7 af 4a 9b 5c 08 b6 e0 f1 4e 27 23 24 63 de 9c 7d ba 52 0e 7d 4f b1 a4 d5 Data Ascii: @_>v!,d~}j Ht7ORXgirn<`b9$%Oc%ZFFU=f(2}X;3&Nm<)8>B6^n;{.GOZzv53;gF=y4wQsshp\t=hy(8\/ mpJ\N'#$c}R}O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49812	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:59 UTC	635	OUT	GET /wp-content/uploads/2021/11/Home-Prog-Proj-1280x914.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:32:59 UTC	209	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:59 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:18:08 GMT Accept-Ranges: bytes Content-Length: 438408 Connection: close Content-Type: image/jpeg
2024-05-02 14:32:59 UTC	7983	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 21 49 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 0f 2f 00 00 01 01 00 03 00 00 00 01 08 20 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 30 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 31 3a 31 31 3a 30 32 20 31 Data Ascii: JFIF``!IExifMM*/ (1!2i$``Adobe Photoshop 23.0 (Macintosh)2021:11:02 1
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: de 01 44 af 7b a0 91 22 78 74 c1 f9 ad 4c 0e 9c 6e b1 8e b2 b0 ea c8 0d 21 dc 72 76 ea d1 bd 9e cf ce 5b 3f b2 70 0d 60 32 ba ea 3a 87 38 17 07 48 fe 4f bb 6f b7 df ff 00 a8 d4 33 e6 23 1d 17 08 93 ab cf 57 99 5d 0f 2e b2 a1 73 bb 37 e8 b1 bf e6 ab 03 a9 d7 97 6b 1a 71 a7 42 d1 b4 eb fd 9f cd 5a 4c fa bd d3 ec b6 5e e7 10 d3 1b 47 b7 77 f2 b7 3b f9 5f c9 5a 38 f8 b8 58 d5 86 d1 58 0e 1a 6e 89 f2 f7 6e 50 cf 36 3e 80 99 7d 89 1c 43 47 2a de 8a fb 06 e8 65 73 a8 61 3b bc 61 d1 f4 9b ed fd e5 2c 6e 86 ca 6c dd 7b 85 81 d3 1b 75 1f 2f fc c1 6c 38 b1 c4 ec 0d 2e 3a 9e 03 81 e4 39 c3 e9 bf fc c5 58 bd cd 64 81 5e ce ee 03 92 4e cd 1c 0e d6 ed fd c6 28 fd d9 91 bd 04 90 37 aa 7f ff d6 e9 6a fe 79 9c 7f 6f f9 bf a4 7f f0 55 72 ae 59 cf 03 e1 cf fd 5a f9 e5 25 45 Data Ascii: D{"xtLn!rv[?p`2:8HOo3#W].s7kqBZL^Gw;_Z8XXnnP6>}CG*esa;a,nl{u/l8.:9Xd^N(7jyoUrYZ%E
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: 5d ef b1 b6 39 21 e7 c1 e3 72 96 a8 54 86 b9 97 56 e5 b4 59 17 c7 66 69 2c 4a c9 a8 20 52 c5 88 dc 5a d8 ee c2 9c d2 94 7d 99 ce bb 11 fe 1f fe 24 65 f9 e5 14 eb 20 74 ac f1 a4 7f 02 34 66 f2 9d c1 bf 1c 63 ab 27 8e f4 e3 d0 b8 f2 5a d9 e7 fd 4d 9c 47 d5 d9 c5 4e 7b 0d 26 6b 0c d4 93 53 c5 49 33 c7 a2 0a 54 d5 bc 8e 7b 82 6f b7 a6 2d 8e 0e 31 ad 13 9e f7 47 b0 e5 5d 63 94 d7 57 26 53 4d 5c b5 d5 89 08 92 67 a7 5d 51 a7 6b b1 1b 0b 9e d8 e4 9e 19 a5 c9 e8 bc 66 9e 83 f3 8c e2 3c bb 2a a9 ad 8c ac af 1c 2d 2c 71 8d cc 96 17 d8 0d cf 6e 30 90 83 93 a0 b9 52 03 e8 be a6 5e ab c8 a0 cc c4 62 26 71 67 4b 8b ab 0e 76 e4 6f d8 ef 86 cb 8f e3 97 13 42 56 ac 6d 2e 61 4f 14 90 c6 f2 0d 53 b9 48 c0 df 53 00 4d bf 60 70 94 c3 61 01 86 00 40 f3 5c a6 8f 39 a3 7a 3a e8 Data Ascii: ]9!rTVYfi,J RZ}$e t4fc'ZMGN{&kSI3T{o-1G]cW&SM\g]Qkf<*-,qn0R^b&qgKvoBVm.aOSHSM`pa@\9z:
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: d2 cd 96 a6 59 94 c9 57 2d 66 ab 56 bb 39 2b b0 d2 c3 51 dc 80 77 c2 e7 9f 15 56 6c 71 6f b4 25 e8 ba 49 29 74 fc 43 2f 80 2d 21 89 f8 76 b5 81 db 63 eb be 3c f8 65 9f 2a 97 45 9e 3f d1 2c d6 4c a8 e6 b4 b1 53 52 46 66 59 0c 73 10 e4 69 56 1c 9e c3 7b 6f 86 cb 92 33 74 81 14 f7 63 ec 91 64 e9 ca 59 73 ec b5 85 32 16 f0 a6 89 ce a6 78 c7 70 3b 5b 9e 71 78 49 42 36 b6 23 8a 93 a3 2b d6 df 88 f5 95 b0 51 d3 d0 d4 f8 f9 8c 66 f1 c3 0b 96 72 2e 75 6a 23 6b 10 38 e7 7c 32 cb 29 49 52 29 0c 09 26 9b 11 f4 bc f5 19 e7 55 9c ef a9 32 d9 66 8a 29 3c d4 53 1f 08 2d c1 d2 57 51 f3 ec 07 f4 c7 54 61 27 2e c5 93 49 51 a2 ea be b0 c9 28 3c 52 28 55 e4 89 8b a2 bc 64 98 39 1a 40 24 82 7d 3b 63 66 c9 0f e2 b6 4f 1c 24 f6 79 c4 b3 d2 56 c2 b9 ad 39 2d 57 53 21 8c dd 77 51 Data Ascii: YW-fV9+QwVlqo%I)tC/-!vc<e*E?,LSRFfYsiV{o3tcdYs2xp;[qxIB6#+Qfr.uj#k8\|2)IR)&U2f)<S-WQTa'.IQ(<R(Ud9@$};cfO$yV9-WS!wQ
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: cf a1 63 06 c6 72 ff 00 e2 22 8b 2e a5 49 62 a8 97 c7 0f 79 29 0c 44 5b d4 06 e3 56 fd f0 f7 82 4a c0 a1 3f 46 77 ac ff 00 f1 26 3a 8b 29 9f 2c a4 a3 9e 29 25 5b 2c da f4 14 36 f4 07 7c 2a f8 e1 b8 21 e3 8e 4d fd cf 30 cb 73 97 a4 59 67 69 5a 49 65 3a d9 9c de e6 fb 1d fb e3 cc cd 97 24 dd 59 54 97 48 4d 98 c9 57 55 3c b5 32 16 60 ee 49 76 b0 b9 e7 15 8c 64 d5 b2 a9 97 64 b9 c5 66 4d 3f 89 01 86 37 36 de 58 83 ee 0d c5 af 86 84 dc 7a 04 a3 6c 06 b2 a2 4a 8a a9 26 94 27 88 ed a9 b4 ad 81 3f 41 84 73 6d d8 52 45 94 74 93 d5 b1 11 00 2d ce a3 a6 d8 5b 6f b3 51 68 a7 94 ab 4a c8 da 10 e9 63 6b 0b fa 5f 1b 8b 5b 15 f7 47 a4 fe 1c 7e 27 e5 bd 03 94 66 11 cd 96 c5 5f 57 52 63 78 d5 d0 1d 25 78 b9 3b 7f 9c 75 c7 24 78 24 df 44 a5 19 37 48 5f d6 5f 8b 72 75 a9 58 Data Ascii: cr".Iby)D[VJ?Fw&:),)%[,6\|*!M0sYgiZIe:$YTHMWU<2`IvddfM?76XzlJ&'?AsmREt-[oQhJck_[G~'f_WRcx%x;u$x$D7H__ruX
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: 39 ea 47 04 9d f6 79 7f 5b e5 95 f9 e7 4c 55 34 f9 ab 4d 5b 4d 63 34 06 22 a5 22 2d 6d 24 9b 5c ea b1 db d3 07 3c 75 f5 d0 f8 5a 4c f1 1c c3 2f af a6 9f 45 40 75 90 36 92 1c ef 73 dc 7a f1 ce 38 1d ae ce 8a 4c 22 2c de 09 28 a6 a0 ad a8 a9 3e 5b c4 e0 dc 46 f7 3b d8 f2 08 db 02 59 39 2a 32 85 0d ff 00 0f 73 ca 3a 1c c6 7c b6 ba 81 6b e0 cc a1 6a 58 c4 8f 65 8d d8 82 1e c7 6e 40 bd f1 5f 1f 2a 94 3e 3e 81 3b 4b 45 f4 b4 d5 b5 b9 73 50 7c 5d 12 d4 45 2c af 75 f2 90 a9 70 51 5b ff 00 53 d8 0d ed 8a cf 1a 92 a4 85 b6 b6 7d 95 65 ef 0b 51 bf 50 53 cb 4b 40 e8 92 34 f4 c7 5b 22 71 a8 8d f7 dc 7b 80 71 e7 e3 f1 54 24 f9 22 bf 25 c7 46 f6 87 ad a5 cb b2 cc ba 5f 1d 66 ae 86 63 05 14 bc 3d 94 d8 6b b1 b1 52 bb 10 7d 8e 3d 38 4a d7 16 4b 8b 7b 3d 2b 2e eb dc 9f 31 Data Ascii: 9Gy[LU4M[Mc4""-m$\<uZL/E@u6sz8L",(>[F;Y92s:\|kjXen@_>>;KEsP\|]E,upQ[S}eQPSK@4["q{qT$"%F_fc=kR}=8JK{=+.1
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: c0 21 b7 37 bf 6b 63 ce c1 e1 c3 0c 1c a4 0e 7b d1 cc db a8 eb 72 cc b1 f2 68 ea aa 56 94 d4 19 fc 15 61 a2 27 22 c7 4f 7b 1d ce 3a 70 de 58 d5 69 03 9d 99 b9 ea fc 0a 59 52 07 95 12 62 8b 28 27 77 ee 7e db 63 a2 30 5c ba e8 07 72 3a 09 33 0a da 78 16 a2 9e 98 bb 69 49 aa 49 11 06 02 e0 12 06 dc 63 64 c8 a2 34 51 55 5c 1a a6 90 33 c4 c4 36 90 10 92 b2 10 48 b8 3e f6 db 1a 32 b5 68 c9 94 a4 d2 c1 2d d5 16 eb b0 04 5b 4e 1e 0e 82 4a 93 34 ae a0 92 4f 84 7f 87 35 11 35 3b 04 5f 99 1b 95 fb f1 8b c6 eb 8a 14 26 9b a5 f3 9c ca 93 31 af 87 2f 99 29 b2 e8 7c 6a 87 95 0c 61 16 e0 6d 71 b9 df 8c 37 06 95 b0 50 b0 c2 3c ad ca ed 89 b9 06 28 ea c7 16 af 21 3a 81 e0 f0 70 d8 d3 7d 82 52 fd 13 14 da 8b 3b 5f d0 d8 5c df 14 aa 15 bf 60 72 9d 2e 58 6a 37 ee 47 36 c0 b4 Data Ascii: !7kc{rhVa'"O{:pXiYRb('w~c0\r:3xiIIcd4QU\36H>2h-[NJ4O55;_&1/)\|jamq7P<(!:p}R;_\`r.Xj7G6
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: 2c 1a 41 95 dc 2f 97 b8 20 fc d8 b6 34 e2 b9 d6 c6 95 30 7a 2e a9 7c c7 32 6c d7 38 8a 29 21 b5 92 61 78 c1 65 bd 94 0f d5 db bf 7c 55 ad f3 6b 64 78 47 d1 af e8 3f c4 fe a4 76 9e 67 a5 86 a3 2d 33 2c 29 14 4c 7c 44 27 60 55 49 dc 6e 2f be 3b e1 25 3d 48 8b 8d 3b 4c 71 f8 99 15 67 52 74 5d 35 6e 67 2c 19 65 5d 1b 3c f4 8d 22 87 a8 92 55 e1 2e be 50 0f a0 bf 03 0e 94 21 2f ae c6 52 93 d1 e5 5d 13 d5 3d 5b d6 1f 8a b4 75 29 5b 15 36 6f 55 1b d2 99 e4 8f cb 0a ac 64 13 a6 fc 8b 5e de b8 7e 51 e2 f5 a0 b8 a5 d8 a3 f1 47 2f cc 72 2e b2 cc 28 b3 67 96 a2 a5 9b c6 f8 89 9f 53 4a 87 86 db 6e dc 76 c4 25 4d da 12 d2 d0 aa 86 76 34 e5 19 a4 4a 70 bb 10 a5 89 3d ac 07 38 e5 9c 6d d0 61 1b 7b 1b 64 d9 e6 57 90 64 b5 94 5f 03 9e c1 57 35 3b 78 ae ac b1 a3 b1 27 46 a0 Data Ascii: ,A/ 40z.\|2l8)!axe\|UkdxG?vg-3,)L\|D'`UIn/;%=H;LqgRt]5ng,e]<"U.P!/R]=[u)[6oUd^~QG/r.(gSJnv%Mv4Jp=8ma{dWd_W5;x'F
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: a4 ac ab ab ca 2b 66 ca a3 cc 08 32 f8 4d 71 23 6e 35 96 6b f9 88 e4 8f 4c 4f fd 42 ba 0f c3 17 d9 a1 e8 6c 83 a2 7a 9a ad 65 ea cc ff 00 36 ac ae 97 53 4a 50 e8 8d 2d d8 bb 5c 9b e3 a3 97 3d ad ff 00 9f ff 00 a1 37 37 1d 24 7b 27 4a e5 7d 29 0b 7c 37 4d f4 a4 30 4a b0 4e e2 a6 54 1a 4d c8 d1 e6 7b dc ed c7 6b 7b e3 4a 32 8d f2 7a fe 89 bc 8d f6 63 a8 ea f2 aa 3e af cc 2a 73 19 72 0f 1e 1d 32 a2 34 06 67 81 d8 79 88 0a 07 70 2e 3b 72 31 5e 37 0d 0b c9 fa 62 fc 9b a8 3a 32 a3 a9 66 cc 66 cc 69 f2 b6 cb ed 2d 2d 45 42 32 c9 2b 15 dc 2a da da 2f 7b 83 c8 38 46 d5 52 0f 16 b6 08 ff 00 89 1d 13 98 d1 8c ba b7 a5 a3 9e 96 19 4d 4d 2c 4a ee 52 09 af e7 20 de fa 1e c1 ad ea 4e 21 2c aa 2f 92 96 c6 fb 23 7b d0 bd 77 41 f8 80 d3 f4 f2 f4 ee 5d 0b 34 06 48 e3 3f ee Data Ascii: +f2Mq#n5kLOBlze6SJP-\=77${'J})\|7M0JNTM{k{J2zc>sr24gyp.;r1^7b:2ffi--EB2+/{8FRMM,JR N!,/#{wA]4H?
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: 77 dc 8b fb e3 4d f2 8b 8f ec 2d 25 a6 69 72 9f c4 ca 9e 9c ab af 9b 2b a2 a5 8a 0c d2 8c 53 d5 52 ce a0 c2 65 b9 fc d5 4e 07 37 03 12 c3 8e 58 e0 d4 b7 fa 0f 37 d1 96 ce f2 64 a2 41 5b 42 67 9b 2d 77 31 47 58 ca 14 49 20 dd ac 07 03 d3 0b 87 33 93 71 97 63 3b ab 66 d7 f0 d7 a9 3a 72 a7 2c cd 32 3e a7 93 2d a3 4a b2 b2 c5 59 51 42 25 01 c0 b5 9a c4 10 2c 2f b7 7c 7a 38 31 42 ba b7 fe 48 4f 92 d9 a8 fc 3d fc 04 8f 31 8a 1c ee bf aa a3 86 9d 47 c4 24 79 71 bc e6 3d 44 2b 03 fa 49 fe 98 12 ff 00 6e 57 14 1f e5 ab 3c c7 ac ba 86 bb 31 ce 2b a1 cc 24 a8 a9 9a 9a 77 a6 8e 6a 89 6e e9 02 12 a2 22 17 cb ee 4f ae 0e 49 af f8 99 2e 3a 13 52 66 75 34 50 d4 47 49 53 34 70 55 28 49 e3 53 60 e0 1b 80 7d 40 3b e2 2e 4d 2a 0a 48 ea cd 3f 8f 1b a1 91 e7 66 05 19 09 d5 ab Data Ascii: wM-%ir+SReN7X7dA[Bg-w1GXI 3qc;f:r,2>-JYQB%,/\|z81BHO=1G$yq=D+InW<1+$wjn"OI.:Rfu4PGIS4pU(IS`}@;.M*H?f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49813	104.22.74.115	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:59 UTC	617	OUT	GET /accounts_resources/base/f6d965115c2786.json HTTP/1.1 Host: cdn.sender.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://naturalearning.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:00 UTC	533	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:00 GMT Content-Type: application/json Content-Length: 3841 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "bb871d4ddae01385568227781287c751" Last-Modified: Mon, 01 Apr 2024 20:01:43 GMT Vary: Origin, Accept-Encoding CF-Cache-Status: DYNAMIC referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 87d8b94ead333a0a-YYZ alt-svc: h3=":443"; ma=86400
2024-05-02 14:33:00 UTC	836	IN	Data Raw: 7b 22 66 6f 72 6d 73 22 3a 5b 7b 22 69 64 22 3a 22 64 52 4e 38 4b 64 22 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 64 65 6c 61 79 22 3a 74 72 75 65 2c 22 74 69 74 6c 65 22 3a 22 3c 70 3e 53 75 62 73 63 72 69 62 65 20 74 6f 20 74 68 65 20 4e 4c 49 20 4e 65 77 73 6c 65 74 74 65 72 3c 5c 2f 70 3e 22 2c 22 6c 61 79 6f 75 74 22 3a 22 45 6d 62 65 64 64 65 64 4c 61 79 6f 75 74 32 22 2c 22 73 63 72 6f 6c 6c 22 3a 66 61 6c 73 65 2c 22 63 74 61 54 65 78 74 22 3a 6e 75 6c 6c 2c 22 68 61 73 68 5f 69 64 22 3a 22 64 52 4e 38 4b 64 22 2c 22 65 78 69 74 54 65 78 74 22 3a 22 43 6c 6f 73 65 22 2c 22 73 75 62 74 69 74 6c 65 22 3a 22 3c 70 20 3e 53 75 62 73 63 72 69 62 65 20 66 6f 72 20 74 68 65 20 6c 61 74 65 73 74 20 6e 65 77 73 21 3c 5c 2f 70 3e 22 2c 22 73 68 6f 77 5f 67 Data Ascii: {"forms":[{"id":"dRN8Kd","rtl":false,"delay":true,"title":"<p>Subscribe to the NLI Newsletter<\/p>","layout":"EmbeddedLayout2","scroll":false,"ctaText":null,"hash_id":"dRN8Kd","exitText":"Close","subtitle":"<p >Subscribe for the latest news!<\/p>","show_g
2024-05-02 14:33:00 UTC	1369	IN	Data Raw: 48 4f 50 50 49 4e 47 22 2c 22 64 6f 75 62 6c 65 5f 6f 70 74 5f 69 6e 22 3a 66 61 6c 73 65 2c 22 66 6f 72 6d 5f 73 65 6c 65 63 74 6f 72 22 3a 22 2e 73 65 6e 64 65 72 2d 66 6f 72 6d 2d 62 6f 78 22 2c 22 72 65 73 6f 75 72 63 65 5f 70 61 74 68 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 64 6e 2e 73 65 6e 64 65 72 2e 6e 65 74 5c 2f 61 63 63 6f 75 6e 74 73 5f 72 65 73 6f 75 72 63 65 73 5c 2f 66 6f 72 6d 73 5c 2f 35 34 36 31 39 5c 2f 36 30 34 37 32 5c 2f 33 31 61 39 65 33 38 34 62 38 39 64 65 31 39 63 76 50 62 5a 47 2e 68 74 6d 6c 22 2c 22 72 65 73 6f 75 72 63 65 5f 74 79 70 65 22 3a 22 65 6d 62 65 64 22 2c 22 73 63 68 65 64 75 6c 65 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 73 65 74 74 69 6e 67 73 5f 70 61 74 68 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 64 6e Data Ascii: HOPPING","double_opt_in":false,"form_selector":".sender-form-box","resource_path":"https:\/\/cdn.sender.net\/accounts_resources\/forms\/54619\/60472\/31a9e384b89de19cvPbZG.html","resource_type":"embed","schedule_type":"none","settings_path":"https:\/\/cdn
2024-05-02 14:33:00 UTC	1369	IN	Data Raw: 61 70 74 63 68 61 22 2c 22 6f 75 74 4f 66 52 61 6e 67 65 22 3a 7b 22 6f 76 65 72 22 3a 22 50 6c 65 61 73 65 20 73 65 6c 65 63 74 20 61 20 76 61 6c 75 65 20 74 68 61 74 20 69 73 20 6e 6f 20 6d 6f 72 65 20 74 68 61 6e 20 7b 6d 61 78 7d 2e 22 2c 22 75 6e 64 65 72 22 3a 22 50 6c 65 61 73 65 20 73 65 6c 65 63 74 20 61 20 76 61 6c 75 65 20 74 68 61 74 20 69 73 20 6e 6f 20 6c 65 73 73 20 74 68 61 6e 20 7b 6d 69 6e 7d 2e 22 7d 2c 22 77 72 6f 6e 67 4c 65 6e 67 74 68 22 3a 7b 22 6f 76 65 72 22 3a 22 50 6c 65 61 73 65 20 73 68 6f 72 74 65 6e 20 74 68 69 73 20 74 65 78 74 20 74 6f 20 6e 6f 20 6d 6f 72 65 20 74 68 61 6e 20 7b 6d 61 78 4c 65 6e 67 74 68 7d 20 63 68 61 72 61 63 74 65 72 73 2e 20 59 6f 75 20 61 72 65 20 63 75 72 72 65 6e 74 6c 79 20 75 73 69 6e 67 20 7b Data Ascii: aptcha","outOfRange":{"over":"Please select a value that is no more than {max}.","under":"Please select a value that is no less than {min}."},"wrongLength":{"over":"Please shorten this text to no more than {maxLength} characters. You are currently using {
2024-05-02 14:33:00 UTC	267	IN	Data Raw: 22 3a 6e 75 6c 6c 2c 22 73 68 6f 77 5f 73 75 63 63 65 73 73 5f 73 75 62 74 69 74 6c 65 22 3a 74 72 75 65 2c 22 62 75 74 74 6f 6e 54 65 78 74 44 75 72 69 6e 67 53 75 62 6d 69 74 22 3a 22 53 65 6e 64 69 6e 67 2e 2e 2e 22 2c 22 70 6f 70 75 70 5f 66 72 65 71 75 65 6e 63 79 5f 61 6d 6f 75 6e 74 22 3a 33 30 2c 22 70 6f 70 75 70 5f 66 72 65 71 75 65 6e 63 79 5f 6d 69 6e 75 74 65 73 22 3a 34 33 32 30 30 2c 22 72 65 63 61 70 74 63 68 61 5f 65 6c 65 6d 65 6e 74 5f 63 6c 61 73 73 22 3a 22 73 65 6e 64 65 72 2d 66 6f 72 6d 2d 72 65 63 61 70 74 63 68 61 22 2c 22 72 65 63 61 70 74 63 68 61 5f 70 72 65 70 65 6e 64 5f 73 65 6c 65 63 74 6f 72 22 3a 22 2e 72 65 63 61 70 74 63 68 61 2d 70 72 65 76 69 65 77 2d 77 72 61 70 22 7d 5d 2c 22 6c 61 6e 64 69 6e 67 73 22 3a 5b 5d 2c Data Ascii: ":null,"show_success_subtitle":true,"buttonTextDuringSubmit":"Sending...","popup_frequency_amount":30,"popup_frequency_minutes":43200,"recaptcha_element_class":"sender-form-recaptcha","recaptcha_prepend_selector":".recaptcha-preview-wrap"}],"landings":[],

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49814	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:32:59 UTC	588	OUT	GET /wp-content/plugins/dg-blog-carousel/scripts/swiper.min.js?ver=5.2.1 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:00 UTC	214	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:32:59 GMT Server: Apache Last-Modified: Thu, 19 Nov 2020 00:56:09 GMT Accept-Ranges: bytes Content-Length: 138474 Connection: close Content-Type: text/javascript
2024-05-02 14:33:00 UTC	7978	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 53 77 69 70 65 72 20 35 2e 32 2e 31 0d 0a 20 2a 20 4d 6f 73 74 20 6d 6f 64 65 72 6e 20 6d 6f 62 69 6c 65 20 74 6f 75 63 68 20 73 6c 69 64 65 72 20 61 6e 64 20 66 72 61 6d 65 77 6f 72 6b 20 77 69 74 68 20 68 61 72 64 77 61 72 65 20 61 63 63 65 6c 65 72 61 74 65 64 20 74 72 61 6e 73 69 74 69 6f 6e 73 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 77 69 70 65 72 6a 73 2e 63 6f 6d 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2d 32 30 31 39 20 56 6c 61 64 69 6d 69 72 20 4b 68 61 72 6c 61 6d 70 69 64 69 0d 0a 20 2a 0d 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 0d 0a 20 2a 0d 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 6f 6e 3a 20 4e 6f 76 65 6d 62 65 72 20 31 36 2c 20 Data Ascii: /** * Swiper 5.2.1 * Most modern mobile touch slider and framework with hardware accelerated transitions * http://swiperjs.com * * Copyright 2014-2019 Vladimir Kharlampidi * * Released under the MIT License * * Released on: November 16,
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: 3b 66 6f 72 28 72 3d 73 28 61 29 2c 6e 3d 30 3b 6e 3c 72 2e 6c 65 6e 67 74 68 3b 6e 2b 3d 31 29 69 66 28 72 5b 6e 5d 3d 3d 3d 6f 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 69 66 28 61 3d 3d 3d 65 29 72 65 74 75 72 6e 20 6f 3d 3d 3d 65 3b 69 66 28 61 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6f 3d 3d 3d 74 3b 69 66 28 61 2e 6e 6f 64 65 54 79 70 65 7c 7c 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 69 29 7b 66 6f 72 28 72 3d 61 2e 6e 6f 64 65 54 79 70 65 3f 5b 61 5d 3a 61 2c 6e 3d 30 3b 6e 3c 72 2e 6c 65 6e 67 74 68 3b 6e 2b 3d 31 29 69 66 28 72 5b 6e 5d 3d 3d 3d 6f 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 31 7d 2c 69 6e 64 65 78 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 74 68 69 73 5b 30 5d 3b 69 66 Data Ascii: ;for(r=s(a),n=0;n<r.length;n+=1)if(r[n]===o)return!0;return!1}if(a===e)return o===e;if(a===t)return o===t;if(a.nodeType\|\|a instanceof i){for(r=a.nodeType?[a]:a,n=0;n<r.length;n+=1)if(r[n]===o)return!0;return!1}return!1},index:function(){var e,t=this[0];if
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: 65 79 73 28 65 2e 73 74 61 74 69 63 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 5b 74 5d 3d 65 2e 73 74 61 74 69 63 5b 74 5d 7d 29 29 2c 65 2e 69 6e 73 74 61 6c 6c 26 26 65 2e 69 6e 73 74 61 6c 6c 2e 61 70 70 6c 79 28 73 2c 74 29 2c 73 7d 2c 6c 2e 75 73 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 31 3b 69 2d 2d 20 3e 30 3b 29 74 5b 69 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 69 2b 31 5d 3b 76 61 72 20 73 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 28 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 2e 69 6e 73 74 61 6c 6c 4d 6f 64 75 6c 65 28 65 29 7d Data Ascii: eys(e.static).forEach((function(t){s[t]=e.static[t]})),e.install&&e.install.apply(s,t),s},l.use=function(e){for(var t=[],i=arguments.length-1;i-- >0;)t[i]=arguments[i+1];var s=this;return Array.isArray(e)?(e.forEach((function(e){return s.installModule(e)}
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: 67 72 65 73 73 22 2c 61 29 7d 2c 75 70 64 61 74 65 53 6c 69 64 65 73 43 6c 61 73 73 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 74 68 69 73 2e 73 6c 69 64 65 73 2c 69 3d 74 68 69 73 2e 70 61 72 61 6d 73 2c 73 3d 74 68 69 73 2e 24 77 72 61 70 70 65 72 45 6c 2c 61 3d 74 68 69 73 2e 61 63 74 69 76 65 49 6e 64 65 78 2c 72 3d 74 68 69 73 2e 72 65 61 6c 49 6e 64 65 78 2c 6e 3d 74 68 69 73 2e 76 69 72 74 75 61 6c 26 26 69 2e 76 69 72 74 75 61 6c 2e 65 6e 61 62 6c 65 64 3b 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2e 73 6c 69 64 65 41 63 74 69 76 65 43 6c 61 73 73 2b 22 20 22 2b 69 2e 73 6c 69 64 65 4e 65 78 74 43 6c 61 73 73 2b 22 20 22 2b 69 2e 73 6c 69 64 65 50 72 65 76 43 6c 61 73 73 2b 22 20 22 2b 69 2e 73 6c 69 64 65 44 75 70 6c 69 Data Ascii: gress",a)},updateSlidesClasses:function(){var e,t=this.slides,i=this.params,s=this.$wrapperEl,a=this.activeIndex,r=this.realIndex,n=this.virtual&&i.virtual.enabled;t.removeClass(i.slideActiveClass+" "+i.slideNextClass+" "+i.slidePrevClass+" "+i.slideDupli
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: 69 74 69 6f 6e 45 6e 64 7c 7c 28 72 2e 6f 6e 53 6c 69 64 65 54 6f 57 72 61 70 70 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 26 26 21 72 2e 64 65 73 74 72 6f 79 65 64 26 26 65 2e 74 61 72 67 65 74 3d 3d 3d 74 68 69 73 26 26 28 72 2e 24 77 72 61 70 70 65 72 45 6c 5b 30 5d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 72 2e 6f 6e 53 6c 69 64 65 54 6f 57 72 61 70 70 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 29 2c 72 2e 24 77 72 61 70 70 65 72 45 6c 5b 30 5d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 72 2e 6f 6e 53 6c 69 64 65 54 6f 57 72 61 70 70 65 72 54 72 61 6e Data Ascii: itionEnd\|\|(r.onSlideToWrapperTransitionEnd=function(e){r&&!r.destroyed&&e.target===this&&(r.$wrapperEl[0].removeEventListener("transitionend",r.onSlideToWrapperTransitionEnd),r.$wrapperEl[0].removeEventListener("webkitTransitionEnd",r.onSlideToWrapperTran
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: 6d 65 3d 67 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 63 68 72 6f 6d 65 22 29 3e 3d 30 29 2c 28 54 7c 7c 53 7c 7c 45 29 26 26 28 62 2e 6f 73 3d 22 69 6f 73 22 2c 62 2e 69 6f 73 3d 21 30 29 2c 53 26 26 21 45 26 26 28 62 2e 6f 73 56 65 72 73 69 6f 6e 3d 53 5b 32 5d 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2e 22 29 2c 62 2e 69 70 68 6f 6e 65 3d 21 30 29 2c 54 26 26 28 62 2e 6f 73 56 65 72 73 69 6f 6e 3d 54 5b 32 5d 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2e 22 29 2c 62 2e 69 70 61 64 3d 21 30 29 2c 45 26 26 28 62 2e 6f 73 56 65 72 73 69 6f 6e 3d 45 5b 33 5d 3f 45 5b 33 5d 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2e 22 29 3a 6e 75 6c 6c 2c 62 2e 69 70 6f 64 3d 21 30 29 2c 62 2e 69 6f 73 26 26 62 2e 6f 73 56 65 72 73 Data Ascii: me=g.toLowerCase().indexOf("chrome")>=0),(T\|\|S\|\|E)&&(b.os="ios",b.ios=!0),S&&!E&&(b.osVersion=S[2].replace(/_/g,"."),b.iphone=!0),T&&(b.osVersion=T[2].replace(/_/g,"."),b.ipad=!0),E&&(b.osVersion=E[3]?E[3].replace(/_/g,"."):null,b.ipod=!0),b.ios&&b.osVers
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: 74 65 28 29 2b 53 29 2c 78 3d 74 2e 6d 69 6e 54 72 61 6e 73 6c 61 74 65 28 29 2c 45 3d 21 30 2c 69 2e 61 6c 6c 6f 77 4d 6f 6d 65 6e 74 75 6d 42 6f 75 6e 63 65 3d 21 30 29 3a 79 3d 74 2e 6d 69 6e 54 72 61 6e 73 6c 61 74 65 28 29 2c 73 2e 6c 6f 6f 70 26 26 73 2e 63 65 6e 74 65 72 65 64 53 6c 69 64 65 73 26 26 28 54 3d 21 30 29 3b 65 6c 73 65 20 69 66 28 73 2e 66 72 65 65 4d 6f 64 65 53 74 69 63 6b 79 29 7b 66 6f 72 28 76 61 72 20 43 2c 4d 3d 30 3b 4d 3c 64 2e 6c 65 6e 67 74 68 3b 4d 2b 3d 31 29 69 66 28 64 5b 4d 5d 3e 2d 79 29 7b 43 3d 4d 3b 62 72 65 61 6b 7d 79 3d 2d 28 79 3d 4d 61 74 68 2e 61 62 73 28 64 5b 43 5d 2d 79 29 3c 4d 61 74 68 2e 61 62 73 28 64 5b 43 2d 31 5d 2d 79 29 7c 7c 22 6e 65 78 74 22 3d 3d 3d 74 2e 73 77 69 70 65 44 69 72 65 63 74 69 6f Data Ascii: te()+S),x=t.minTranslate(),E=!0,i.allowMomentumBounce=!0):y=t.minTranslate(),s.loop&&s.centeredSlides&&(T=!0);else if(s.freeModeSticky){for(var C,M=0;M<d.length;M+=1)if(d[M]>-y){C=M;break}y=-(y=Math.abs(d[C]-y)<Math.abs(d[C-1]-y)\|\|"next"===t.swipeDirectio
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: 3a 7b 73 65 74 42 72 65 61 6b 70 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 61 63 74 69 76 65 49 6e 64 65 78 2c 74 3d 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a 65 64 2c 69 3d 74 68 69 73 2e 6c 6f 6f 70 65 64 53 6c 69 64 65 73 3b 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 30 29 3b 76 61 72 20 73 3d 74 68 69 73 2e 70 61 72 61 6d 73 2c 61 3d 74 68 69 73 2e 24 65 6c 2c 72 3d 73 2e 62 72 65 61 6b 70 6f 69 6e 74 73 3b 69 66 28 72 26 26 28 21 72 7c 7c 30 21 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 29 2e 6c 65 6e 67 74 68 29 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 67 65 74 42 72 65 61 6b 70 6f 69 6e 74 28 72 29 3b 69 66 28 6f 26 26 74 68 69 73 2e 63 75 72 72 65 6e 74 42 72 65 61 6b 70 6f 69 6e 74 21 3d 3d 6f 29 7b 76 61 Data Ascii: :{setBreakpoint:function(){var e=this.activeIndex,t=this.initialized,i=this.loopedSlides;void 0===i&&(i=0);var s=this.params,a=this.$el,r=s.breakpoints;if(r&&(!r\|\|0!==Object.keys(r).length)){var o=this.getBreakpoint(r);if(o&&this.currentBreakpoint!==o){va
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: 69 73 2e 70 61 72 61 6d 73 2e 77 61 74 63 68 4f 76 65 72 66 6c 6f 77 26 26 74 68 69 73 2e 63 68 65 63 6b 4f 76 65 72 66 6c 6f 77 28 29 2c 74 68 69 73 2e 70 61 72 61 6d 73 2e 67 72 61 62 43 75 72 73 6f 72 26 26 74 68 69 73 2e 73 65 74 47 72 61 62 43 75 72 73 6f 72 28 29 2c 74 68 69 73 2e 70 61 72 61 6d 73 2e 70 72 65 6c 6f 61 64 49 6d 61 67 65 73 26 26 74 68 69 73 2e 70 72 65 6c 6f 61 64 49 6d 61 67 65 73 28 29 2c 74 68 69 73 2e 70 61 72 61 6d 73 2e 6c 6f 6f 70 3f 74 68 69 73 2e 73 6c 69 64 65 54 6f 28 74 68 69 73 2e 70 61 72 61 6d 73 2e 69 6e 69 74 69 61 6c 53 6c 69 64 65 2b 74 68 69 73 2e 6c 6f 6f 70 65 64 53 6c 69 64 65 73 2c 30 2c 74 68 69 73 2e 70 61 72 61 6d 73 2e 72 75 6e 43 61 6c 6c 62 61 63 6b 73 4f 6e 49 6e 69 74 29 3a 74 68 69 73 2e 73 6c 69 64 Data Ascii: is.params.watchOverflow&&this.checkOverflow(),this.params.grabCursor&&this.setGrabCursor(),this.params.preloadImages&&this.preloadImages(),this.params.loop?this.slideTo(this.params.initialSlide+this.loopedSlides,0,this.params.runCallbacksOnInit):this.slid
2024-05-02 14:33:00 UTC	8000	IN	Data Raw: 70 61 72 65 6e 74 73 28 22 2e 22 2b 74 68 69 73 2e 70 61 72 61 6d 73 2e 73 6c 69 64 65 43 6c 61 73 73 29 2e 6c 65 6e 67 74 68 3e 30 26 26 30 3d 3d 3d 74 68 69 73 2e 24 65 6c 2e 70 61 72 65 6e 74 73 28 22 2e 22 2b 74 68 69 73 2e 70 61 72 61 6d 73 2e 73 6c 69 64 65 41 63 74 69 76 65 43 6c 61 73 73 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 3b 76 61 72 20 6f 3d 74 2e 69 6e 6e 65 72 57 69 64 74 68 2c 6c 3d 74 2e 69 6e 6e 65 72 48 65 69 67 68 74 2c 64 3d 74 68 69 73 2e 24 65 6c 2e 6f 66 66 73 65 74 28 29 3b 73 26 26 28 64 2e 6c 65 66 74 2d 3d 74 68 69 73 2e 24 65 6c 5b 30 5d 2e 73 63 72 6f 6c 6c 4c 65 66 74 29 3b 66 6f 72 28 76 61 72 20 68 3d 5b 5b 64 2e 6c 65 66 74 2c 64 2e 74 6f 70 5d 2c 5b 64 2e 6c 65 66 74 2b 74 68 69 73 2e 77 69 64 74 68 2c 64 2e 74 6f Data Ascii: parents("."+this.params.slideClass).length>0&&0===this.$el.parents("."+this.params.slideActiveClass).length)return;var o=t.innerWidth,l=t.innerHeight,d=this.$el.offset();s&&(d.left-=this.$el[0].scrollLeft);for(var h=[[d.left,d.top],[d.left+this.width,d.to

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49820	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:01 UTC	629	OUT	GET /wp-content/uploads/2018/06/US-Forest-Service.svg HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:01 UTC	211	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:01 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:24:22 GMT Accept-Ranges: bytes Content-Length: 23665 Connection: close Content-Type: image/svg+xml
2024-05-02 14:33:01 UTC	7981	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 20 68 65 69 67 68 74 3d 22 31 39 38 2e 33 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 32 20 31 39 38 2e 33 39 34 37 39 22 20 77 69 64 74 68 3d 22 31 38 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3a 63 63 3d 22 68 74 74 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns="http://www.w3.org/2000/svg" xml:space="preserve" height="198.39" viewBox="0 0 182 198.39479" width="182" version="1.1" xmlns:cc="htt
2024-05-02 14:33:01 UTC	8000	IN	Data Raw: 30 2e 30 34 37 20 30 2e 32 31 33 2d 30 2e 31 31 35 2d 30 2e 30 32 36 2d 31 2e 30 37 37 20 30 2e 30 34 37 2d 32 2e 32 30 31 2d 30 2e 30 34 37 2d 33 2e 32 35 32 7a 6d 36 2e 34 34 39 20 30 2e 30 30 36 63 30 2e 33 31 33 20 30 20 30 2e 36 32 33 20 30 2e 30 35 33 20 30 2e 38 39 31 20 30 2e 31 36 20 32 2e 31 39 36 20 31 2e 37 35 33 20 31 2e 39 36 32 20 35 2e 30 37 32 20 31 2e 32 38 35 20 37 2e 35 37 2d 30 2e 35 31 35 20 31 2e 38 37 33 2d 31 2e 38 34 36 20 33 2e 39 35 34 2d 33 2e 39 32 38 20 34 2e 33 32 38 2d 30 2e 38 38 39 20 30 2e 31 38 38 2d 31 2e 35 36 37 2d 30 2e 34 34 36 2d 32 2e 30 30 39 2d 31 2e 31 32 33 2d 31 2e 34 35 32 2d 33 2e 32 39 34 2d 30 2e 36 37 37 2d 37 2e 34 35 36 20 31 2e 37 32 38 2d 31 30 2e 30 35 32 6c 31 2e 31 32 33 2d 30 2e 37 32 33 63 30 Data Ascii: 0.047 0.213-0.115-0.026-1.077 0.047-2.201-0.047-3.252zm6.449 0.006c0.313 0 0.623 0.053 0.891 0.16 2.196 1.753 1.962 5.072 1.285 7.57-0.515 1.873-1.846 3.954-3.928 4.328-0.889 0.188-1.567-0.446-2.009-1.123-1.452-3.294-0.677-7.456 1.728-10.052l1.123-0.723c0
2024-05-02 14:33:01 UTC	7684	IN	Data Raw: 36 39 6c 30 2e 31 32 37 20 31 2e 34 39 63 30 2e 31 37 35 20 30 2e 39 31 2d 30 2e 34 31 37 20 31 2e 35 37 2d 31 2e 38 32 36 20 31 2e 37 36 2d 31 2e 30 39 38 20 30 2e 31 35 2d 31 2e 37 39 39 2d 30 2e 32 36 2d 32 2e 32 34 36 2d 31 2e 33 39 6c 2d 30 2e 33 39 36 2d 31 2e 34 34 20 34 2e 33 34 31 2d 30 2e 34 32 7a 6d 33 2e 34 32 20 34 2e 32 36 6c 2d 30 2e 31 38 37 20 30 2e 31 32 63 30 2e 30 37 32 20 30 2e 31 38 2d 30 2e 30 31 36 20 30 2e 33 2d 30 2e 31 39 39 20 30 2e 34 33 2d 30 2e 31 32 34 20 30 2e 30 39 2d 30 2e 33 31 35 20 30 2e 31 37 2d 30 2e 34 30 39 20 30 2e 32 6c 2d 31 31 2e 30 37 20 34 2e 31 39 63 2d 30 2e 36 36 34 20 30 2e 32 36 2d 30 2e 38 30 35 20 30 2e 32 32 2d 30 2e 39 37 31 20 30 2e 30 35 6c 2d 30 2e 31 38 33 20 30 2e 31 33 20 31 2e 37 38 35 20 32 Data Ascii: 69l0.127 1.49c0.175 0.91-0.417 1.57-1.826 1.76-1.098 0.15-1.799-0.26-2.246-1.39l-0.396-1.44 4.341-0.42zm3.42 4.26l-0.187 0.12c0.072 0.18-0.016 0.3-0.199 0.43-0.124 0.09-0.315 0.17-0.409 0.2l-11.07 4.19c-0.664 0.26-0.805 0.22-0.971 0.05l-0.183 0.13 1.785 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49821	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:01 UTC	392	OUT	GET /wp-content/uploads/2017/03/leafy-background-25.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:01 UTC	208	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:01 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:18:26 GMT Accept-Ranges: bytes Content-Length: 227378 Connection: close Content-Type: image/png
2024-05-02 14:33:01 UTC	7984	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 c2 00 00 01 c2 08 06 00 00 00 7c 18 c9 45 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0a 89 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 32 2d 63 30 30 31 20 36 33 2e 31 33 39 34 33 39 2c 20 32 30 31 30 2f 31 30 2f 31 32 2d 30 38 3a 34 35 3a 33 30 20 20 Data Ascii: PNGIHDR\|EtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.2-c001 63.139439, 2010/10/12-08:45:30
2024-05-02 14:33:01 UTC	8000	IN	Data Raw: 7c 9f f9 99 9f 79 49 88 61 39 82 13 44 31 17 ee a3 84 1b 01 8c 48 59 37 b9 17 cc df 7a 69 a4 34 cf 25 8c 5c 7f 84 34 a2 da 3a b8 65 00 21 4c 4c 2f 46 91 db a1 4c bd e0 76 5f c1 71 16 6b 8a c6 ee 5b 84 f8 77 f1 3a e3 73 65 10 63 d4 2c 7a 38 04 5e 08 91 96 6f df b6 a4 26 eb 9e 22 53 8a ff 69 09 c3 15 0c 76 b3 ed 4e 26 40 c9 ca fa 5b d7 6a cf b0 5f 98 b7 bd 41 94 27 cc 4e 8b ec 4e e2 85 09 4b 78 e9 19 2c 12 78 54 b6 35 fc 8a 76 4e cd d9 5f 0c 7b 53 c6 97 49 16 63 26 68 d0 34 5c c8 ca 2d 4e 47 48 a2 f1 be cb 62 34 ae 77 eb 8c 11 51 02 d0 3c 1a c5 e8 ed 89 7d f2 1b 7a 5d 8b c6 b3 09 42 8a b4 fb d1 8f 7b 3c 97 bb 13 33 f3 ce ad bb 19 91 f1 a8 b5 8e 7c a6 e0 89 b3 4b 8a f9 9c cf f9 9c 9b 2f fc c2 2f bc c4 d8 29 46 f8 0c 66 2b 63 34 2b d7 da b9 47 fd 1e dc 3c 23 Data Ascii: \|yIa9D1HY7zi4%\4:e!LL/FLv_qk[w:sec,z8^o&"SivN&@[j_A'NNKx,xT5vN_{SIc&h4\-NGHb4wQ<}z]B{<3\|K//)Ff+c4+G<#
2024-05-02 14:33:01 UTC	8000	IN	Data Raw: 96 51 e7 33 18 60 1e 11 ca 6a 5d f6 c7 7a 30 0a d7 6d bf c5 9e 63 ad f6 0d b3 c2 50 21 34 c4 3d 0f 50 5e 01 78 f6 93 2d 63 f1 a1 0f 7d e8 25 6e e2 ec ca 55 32 d2 30 d5 03 b1 48 20 be a2 6c e3 bc e1 1b be e1 e5 5a da f7 d6 41 ad 76 17 3e d9 b3 75 fd 64 b1 b0 2a 79 23 5c b7 87 2f 1b 37 b7 f3 5a 96 9d 19 88 48 73 cf 8a b9 52 b8 8a b7 6d 06 e1 d9 1b f4 5c 7f 8c c9 7d 14 46 38 d2 89 21 7b 84 94 f9 55 d6 b3 31 8d 3b e9 f5 18 03 35 66 87 fe c2 a5 ca 3f fc ed ec bf 33 ab 6e 2d 50 f3 b2 4e 4c 88 1b ac ef 83 57 34 19 63 49 9b 87 1b eb ba ac 0f 2e 45 63 9b 3a 2c ae c3 6b 30 5e 8b a8 c4 27 f7 d4 46 d1 5f e3 77 e4 18 7c ac 09 7a ef 5a c4 51 7a ec 29 a1 ce e2 c5 cc 68 f9 f5 aa f4 7f b4 dd e9 37 67 9f 51 74 b9 ed e6 cc 8f 37 a2 ce 33 29 78 75 c5 ea 5a cf 46 f7 60 d3 b1 Data Ascii: Q3`j]z0mcP!4=P^x-c}%nU20H lZAv>ud*y#\/7ZHsRm\}F8!{U1;5f?3n-PNLW4cI.Ec:,k0^'F_w\|zZQz)h7gQt73)xuZF`
2024-05-02 14:33:01 UTC	8000	IN	Data Raw: 66 56 fd a6 9e d7 62 2c 4b 1a dd f5 3b 9c a0 60 50 40 b7 73 c7 3e 7f 0f bc dd f3 ef b6 3f 64 82 a9 c4 28 73 a3 3c 82 1b c5 98 70 b6 0f e0 d6 c9 2d b9 65 b7 95 e1 32 f8 92 5e 28 65 0a bc 83 d9 26 f5 14 7b 2e 49 a2 38 52 f1 c5 5e 04 e5 66 22 e7 e9 c8 52 2f 3e e7 3a cc 3e 9c 6e 4e 0b fb 4d 66 0a 36 5d 5b f3 7a 2e 7a 4a b6 f5 db e3 bc 37 3c 4c f0 d4 81 d5 e8 95 80 a7 78 54 9a e4 b9 14 88 68 70 9b e9 7b a6 79 ee 11 42 14 7c fc 02 ef c9 5b 82 c7 5a 57 65 4f d6 8a 1f d8 f3 4d 7c 22 7c c0 29 a5 9b 77 06 dd a1 41 bf c3 7d e3 cb e4 2e 8c e2 9a cd 3a dd 98 bf 39 4b 74 59 41 92 75 25 0c c0 cb 65 bf ce fa 52 30 c0 5b 72 9b ae 1b 14 0e c4 0b ca fe 06 63 ca 95 79 2f 8f dc ae 34 67 13 78 2f 0a af 67 a2 f5 e4 52 09 33 94 77 fb 7e b6 5b 4c 2e dc 73 6a a4 1e 90 fb 92 79 99 Data Ascii: fVb,K;`P@s>?d(s<p-e2^(e&{.I8R^f"R/>:>nNMf6][z.zJ7<LxThp{yB\|[ZWeOM\|"\|)wA}.:9KtYAu%eR0[rcy/4gx/gR3w~[L.sjy
2024-05-02 14:33:01 UTC	8000	IN	Data Raw: f8 e5 db 76 d2 36 cd c0 a9 05 31 03 63 21 56 ae 1c 9a 37 cb 70 2d a5 b3 d3 c4 9e 71 d5 31 4c 98 72 d9 70 69 24 6a a3 68 e8 62 58 12 12 b2 02 6c 4a 1b 0a 29 8d 51 3b b4 53 2b 2b b3 2c 0d 6b 85 a1 7d 2b ae b3 0c 78 0b 57 21 c6 99 ad 5a 9c 62 dd 17 90 8c 76 87 31 d7 c1 07 b2 8a 0b 62 52 67 4d 28 21 a0 66 13 03 c2 3c ea 2e 74 2d 13 b4 8c b3 1a 2d 18 97 40 46 00 e0 42 cb 26 cc b7 fe 6f e3 05 11 a9 a6 da ee 63 55 74 38 a8 f8 04 26 05 9e 5b d6 90 70 5f 98 ee 89 24 29 1c 62 2c de e1 d3 32 8d da e7 55 3b b9 5d 99 c4 6a 3a 48 74 5d bd 67 26 b0 97 fd c6 a0 4f 2b c7 f5 95 db d4 e8 62 35 7a 30 a5 64 a6 88 9e dd 59 78 5f 24 6e 10 7a 94 da b2 9f a3 b3 75 c1 5f 53 ec 6e f7 3a b3 27 6b f0 2d 5b db 38 6f f1 16 6f 71 2b e6 bb bc e4 1c 63 f3 04 d0 88 fb 58 a8 62 44 94 5b d9 Data Ascii: v61c!V7p-q1Lrpi$jhbXlJ)Q;S++,k}+xW!Zbv1bRgM(!f<.t--@FB&ocUt8&[p_$)b,2U;]j:Ht]g&O+b5z0dYx_$nzu_Sn:'k-[8ooq+cXbD[
2024-05-02 14:33:01 UTC	8000	IN	Data Raw: 66 12 6f 7d 75 2e db 4d ee 29 11 8f 2c c4 83 e8 03 28 15 7a c2 87 de 43 e6 ac 02 8d 76 36 a9 f1 e6 09 54 7f 9b 72 66 e5 65 15 46 63 e9 05 f9 01 ca 1f 80 7d b2 8b 81 43 57 6c c6 fb 36 bf f0 c5 eb c9 e2 de 58 fd 2f 7f f3 9b df fc 84 e0 a0 50 88 3a 64 52 92 c0 ab 30 f7 b6 27 2a 55 1d 51 54 5a b0 6e 12 ef e5 b7 45 04 4c d9 7c c5 77 ea c0 eb 0b 1a c8 e5 88 78 b8 28 b9 37 7f b4 56 e6 d5 85 de f3 71 63 b8 66 23 46 b6 38 d3 37 a1 d2 94 e5 fa 6a 36 c2 a7 22 72 68 45 40 37 97 65 d9 74 c5 b7 d6 d5 e0 39 30 8a cf 6e c2 ca ab 70 fd 3e cf 66 de 12 98 dc 43 dc 44 8d a8 a1 88 7d 13 06 98 c7 b3 21 a4 b2 b7 9c 09 81 d2 18 1b 88 c8 b7 bf 97 05 68 7d 10 b7 18 9c 9f bb a6 d0 67 40 c1 39 58 47 93 13 5e 8d 8f 6f b3 84 15 24 b7 83 c9 6b ce dc 12 f1 ba 68 42 b0 f6 1b b3 71 8d 8a Data Ascii: fo}u.M),(zCv6TrfeFc}CWl6X/P:dR0'*UQTZnEL\|wx(7Vqcf#F87j6"rhE@7et90np>fCD}!h}g@9XG^o$khBq
2024-05-02 14:33:01 UTC	8000	IN	Data Raw: 0e 2a 8c 4e 5b 3b 7c 0c c8 2c e5 06 d8 ee 28 a5 74 57 9c b9 13 b5 a1 f7 db 16 6d bb cf 6f 9d 8d 0d 25 a0 f9 db 7d b9 9f 6c 2d e8 be 7b a4 8c 7a a6 88 af 0e 09 4b 30 b7 78 f9 35 7d bc 22 da 04 64 9f c5 1c 65 53 95 0a 5c a2 c9 26 2c 78 3f bf b5 c3 27 bc 8a 19 26 14 ad 07 a2 f1 45 90 dd 16 6f ee 4d b8 63 40 4a 88 35 0d fd d9 7f 44 1d 0a 86 f2 3d 23 7f b9 02 73 c5 a6 18 15 63 ba 87 7d c0 58 98 b0 be 8e 14 6f 13 0f 10 4f 4c ef 3a a5 8f 43 c5 14 36 30 e5 be 3e c3 ba b5 e6 92 89 36 63 34 df bf 75 43 f2 88 99 12 74 1f 0c 59 ef ca 2c f7 00 59 f1 6a c9 06 9e 9b b7 21 17 33 c6 c8 e5 b6 80 27 a0 e1 b3 80 06 65 8f 16 12 6a 10 b7 ff f3 54 60 62 fb 57 5a b9 bf 39 db db 2b 33 26 83 2c 29 8d 5c ac af 69 ec d6 ad 1c 05 9f 2d 08 e8 7d ce 97 85 60 1f d4 15 3a 97 66 a4 6d 71 Data Ascii: *N[;\|,(tWmo%}l-{zK0x5}"deS\&,x?'&EoMc@J5D=#sc}XoOL:C60>6c4uCtY,Yj!3'ejT`bWZ9+3&,)\i-}`:fmq
2024-05-02 14:33:01 UTC	8000	IN	Data Raw: d0 cf 3c 20 5f 13 28 09 9b 2b e8 37 63 f4 53 97 94 98 d3 22 ca da 69 8e da 2b 86 e4 33 6e da 48 a2 4d c9 75 88 12 0d 58 9f 18 a8 69 e1 11 35 a5 e6 de d5 2f 25 b4 57 69 40 bd 7e 27 44 dc df a1 b1 d6 10 41 93 d8 d7 2f bf 5d 5e 2e 52 b9 8c 78 83 f7 ed 07 45 1f 41 6f 2d 60 13 28 58 3c 04 12 24 ea b9 9a 99 97 fb 63 c1 40 96 9f fd 49 99 50 22 dc 31 0e b9 ae ff b7 bf ea 2b 41 a0 b1 49 9b 72 5c 1d 53 0a b4 04 07 82 0b fa 4c c1 20 90 86 72 ae fb 90 80 25 d0 24 c3 c8 d8 64 ed f9 3b 77 18 37 15 85 78 1b 32 bb 86 6b af a0 59 d7 93 6f 28 57 02 d0 af 7e f5 ab af a0 81 75 69 0f c4 02 b5 92 a2 68 d6 42 dc 31 60 b7 8d dd 2a 87 3d 8b db dd e8 d6 79 2e 70 c9 fd e2 35 eb e0 15 b9 13 48 52 e6 92 c7 ec 83 b5 49 ba 70 2d f4 90 3b b2 fe 88 ce 1a 5d 12 64 a1 da 46 cd ec b9 be 12 Data Ascii: < _(+7cS"i+3nHMuXi5/%Wi@~'DA/]^.RxEAo-`(X<$c@IP"1+AIr\SL r%$d;w7x2kYo(W~uihB1`*=y.p5HRIp-;]dF
2024-05-02 14:33:01 UTC	8000	IN	Data Raw: 0a 74 94 4c 79 35 c5 d8 eb 79 36 f4 4f 4e da bb 40 bc 9f 74 12 7e 60 38 e0 07 7a a2 18 fe ad 5f df 38 24 c0 07 f8 f3 fa 15 2f bc c9 77 95 9b 29 6f e2 f5 00 0c d1 e1 17 0b ca ed 56 6a 72 ae 86 ed da be 0c 18 e3 62 7e ca 29 3f 3d 42 a3 58 28 3e 49 08 d0 b1 bf 15 07 6c a2 f2 9a fe 36 03 a1 42 4f ee 83 d9 ea ea 5f 33 5a 48 c3 e7 28 1f c8 dd 9a 08 8d f5 13 df be a2 29 c0 98 e2 5a 88 75 d1 80 98 05 f0 f9 a7 ad 79 fb 12 de ba ac 02 cc 9b 08 b2 07 6d 5f b8 6d f5 59 24 44 6d f0 df ff fd df 7f ab 53 da d6 42 9b 64 b0 d9 b7 de 27 a1 01 18 60 a9 db 8b 84 6d ee b2 84 79 a3 59 80 89 f6 81 55 e2 db 9a 3c 53 0d 72 c5 3d 6a 33 c6 62 af 2e 29 97 f1 15 08 cb 14 db 37 f5 4e 7c ff 51 66 74 3d c4 9c 45 f8 8a 87 bc ac c2 8d 21 c5 b4 cb 00 5e 83 42 21 bb 8d 51 be 06 49 af 02 56 Data Ascii: tLy5y6ON@t~`8z_8$/w)oVjrb~)?=BX(>Il6BO_3ZH()Zuym_mY$DmSBd'`myYU<Sr=j3b.)7N\|Qft=E!^B!QIV
2024-05-02 14:33:01 UTC	8000	IN	Data Raw: c8 20 ff d7 bd 1e b1 d7 a1 c6 c1 fa 7b 47 7b f4 b3 96 4d 1a e6 2d 40 ae 60 94 36 c8 ba a1 3d d2 e2 f3 03 6f 0b 30 7f 03 0c 41 20 de 44 4b 50 fa 01 99 69 41 8b b4 69 1c 34 2b 0a 80 a4 1b d6 64 19 6a 98 18 8b 8e 6b 13 3c 3a 84 e2 40 21 45 f5 2b 34 a9 06 ea 82 77 2d df ea 84 b0 b1 b9 67 03 5f 3b e8 90 89 56 4d 20 48 66 89 21 97 41 bb 33 d5 4a 78 40 9c 04 27 e4 b3 87 04 77 ee 43 70 73 2e 04 7e c2 6f 09 c7 7b dc 4d 60 b1 c5 e0 1b 03 58 26 e6 2c e0 51 e5 01 eb 9a c9 12 5a 86 5d 42 08 eb 88 e5 b0 4c 99 f5 5c 07 1f f7 21 28 29 3e 11 ea c6 1e 2a b0 76 4f 4a c6 d6 92 ba d6 39 23 5a 5a b8 17 fc ee bb 7e 6f a0 5e 8d 6c 0a 03 4d 9f ab 6e b3 95 97 d1 45 bc 3b 6c 14 9e 79 0e 06 09 cf fd a0 01 c2 1c 93 2a 03 33 9c 49 19 04 1f 16 8e 44 0d 34 28 a6 8b 01 d4 0d 04 0d 12 00 Data Ascii: {G{M-@`6=o0A DKPiAi4+djk<:@!E+4w-g_;VM Hf!A3Jx@'wCps.~o{M`X&,QZ]BL\!()>vOJ9#ZZ~o^lMnE;ly3ID4(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49818	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:01 UTC	629	OUT	GET /wp-content/uploads/2021/01/NLI_Logo_COD_F_WH.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:01 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:01 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:18:35 GMT Accept-Ranges: bytes Content-Length: 38438 Connection: close Content-Type: image/png
2024-05-02 14:33:01 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 52 00 00 01 b9 08 06 00 00 00 84 3a 05 6f 00 00 00 09 70 48 59 73 00 00 2c 4b 00 00 2c 4b 01 a5 3d 96 a9 00 00 20 00 49 44 41 54 78 01 ec 9d 4d 72 d4 4a b7 ae f7 26 be f6 fe 8a 88 db 06 31 01 53 4c c0 c8 ad d3 03 d3 3e 11 76 79 02 60 26 80 c3 4c 00 c3 04 28 3b e2 b4 31 f4 6e cb b2 27 40 6d 26 80 70 fb 44 ec fa 18 c0 e5 be 2f 54 81 5c a4 7e 52 4a 49 a9 d4 bb 22 96 4b ca 9f 95 2b 9f ac 92 72 29 25 f9 cf 6f df be fd 21 31 12 88 91 1a 41 ef ad 3e b9 bd 29 29 12 a8 9f a1 8b 95 e2 63 d0 32 81 f7 d3 95 de c6 67 b4 52 7c dc 90 25 f6 d8 e7 7f 56 9f 09 3e 25 22 20 02 e5 04 66 28 c2 e3 8a 0b f9 08 23 eb df 22 3f 25 cd 09 cc 60 c2 34 3e 3c ce cf a1 12 11 10 01 11 10 01 11 f8 4e e0 cf 55 20 35 c5 de eb 86 4c 78 Data Ascii: PNGIHDRR:opHYs,K,K= IDATxMrJ&1SL>vy`&L(;1n'@m&pD/T\~RJI"K+r)%o!1A>))c2gR\|%V>%" f(#"?%`4><NU 5Lx
2024-05-02 14:33:01 UTC	8000	IN	Data Raw: d0 ba 92 a2 e2 43 e8 14 ca 63 75 0c 2d 3b 76 5d a1 0c db 9e 43 e9 7f 55 79 69 28 98 1a d2 aa 24 b1 de 49 95 82 0e ca 98 be 5b d9 ef 4b dd 26 4c 3c ea da 1a 45 3d 4c ee 23 74 f4 fd 28 3a db 7f 27 f7 c0 fb 02 ff 63 6a de bf 2b f2 60 6c 04 fe fc f6 ed db d8 fa 5c a5 bf 3c 51 c7 50 5e 21 8c a0 14 de 32 b2 29 eb c9 73 8a 8c 8f d0 04 ba 80 0e 4d 26 70 38 86 b2 bf fc a4 90 81 69 82 b4 ee 33 cb 24 d0 7f 56 9f 43 ec 37 5c 97 88 80 08 38 20 10 1b 6c 24 86 b4 36 92 22 18 a5 66 85 c7 a3 65 36 61 a0 db 11 fc fe 6c f0 fd 4f 43 9a 92 3c 22 80 89 fd 25 dc 31 cd 1b 3c f2 32 28 57 78 d1 e6 3e 82 a9 34 a8 5e a9 33 de 13 50 20 e5 fd 10 c9 41 11 10 01 11 10 81 91 12 88 d1 6f d3 8a 92 02 29 8f bf 10 08 a2 8e e1 de 0b 8f 5d 0c d5 b5 4f 08 a4 ee 87 da 39 f5 cb 4f 02 b7 fc 74 4b Data Ascii: Ccu-;v]CUyi($I[K&L<E=L#t(:'cj+`l\<QP^!2)sM&p8i3$VC7\8 l$6"fe6alOC<"%1<2(Wx>4^3P Ao)]O9OtK
2024-05-02 14:33:01 UTC	8000	IN	Data Raw: fd 93 5e 52 90 88 80 08 88 80 08 0c 89 40 95 7f 69 e2 4b 7f be c2 91 b9 2f ce c8 0f 11 10 81 76 09 84 1a 48 d5 a1 36 86 55 a9 3d bd 0e bd ce 57 43 75 44 40 04 44 40 04 7a 22 c0 3b 4c ac 2e 8e f6 e4 e7 ba d9 7d 6c 2c d7 3b fa 14 01 11 08 9b 80 02 a9 d5 f8 ae 56 a5 78 25 29 74 d1 aa 54 e8 23 ac fe 89 80 08 88 40 38 04 86 f4 7c ef 07 60 3f 0f 07 bd 7a 22 02 22 50 46 40 81 d4 4d 42 27 37 77 83 dc db c6 aa d4 6e 90 3d 53 a7 44 40 04 44 40 04 42 22 30 41 67 0e 07 d4 21 3d 1b 35 a0 c1 92 ab 22 e0 82 80 02 a9 9b 14 5f 61 77 0c ab 52 fa 27 bd 37 c7 5d 7b 22 20 02 22 20 02 fe 11 38 85 4b 7c eb ac 44 04 44 40 04 bc 24 a0 40 2a 33 2c b8 bd 6f 89 dd 93 4c 52 a8 9b 77 b0 2a 35 a4 ab 7c a1 8e 83 fa 25 02 22 20 02 22 60 26 c0 73 d4 23 73 96 b7 a9 43 ba 0d d1 5b 88 72 4c Data Ascii: ^R@iK/vH6U=WCuD@D@z";L.}l,;Vx%)tT#@8\|`?z""PF@MB'7wn=SD@D@B"0Ag!=5"_awR'7]{" " 8K\|DD@$@3,oLRw5\|%" "`&s#sC[rL
2024-05-02 14:33:01 UTC	8000	IN	Data Raw: 28 9b d0 d5 b6 6e ed eb 8a f4 00 da c1 aa 54 82 b7 32 f1 6a 42 17 27 c3 01 10 91 8b 22 20 02 22 20 02 2b 02 1f 78 8e 28 a0 71 5a 90 e7 32 6b 1b c6 b8 02 b2 74 69 34 20 5b bb e8 cb 13 e8 14 ba 65 e8 17 ef 3c 49 a0 17 99 3c b2 64 f9 07 ab cf 08 9f 9c 98 ae 85 75 c8 7d 53 18 3c 3d dd 4c 1c d8 7e 0c 7f 93 81 f9 dc a6 bb 8b 86 c6 cf 51 bf e8 82 4b 43 f3 85 d5 23 e4 a6 85 25 5a c8 54 20 d5 02 d4 81 9b e4 3d a6 0a a4 06 3e 88 72 5f 04 44 40 04 1c 12 e0 73 49 fb 05 f6 0e 91 67 9a 68 17 54 69 94 b5 8b da f3 46 16 c2 a9 1c a1 2b 31 74 07 4a 2e 0c 6e 8a 84 e3 44 7d 51 54 68 23 af cb b1 dd 68 ba d5 5d 7e af 93 56 5b 18 9e f1 65 43 97 59 bf af 0b f2 53 b4 9d 34 f4 df ba fa 2d eb 1a aa 10 34 01 5c 71 4c d1 c1 37 41 77 52 9d 13 01 11 10 01 11 b0 21 b0 8f 73 43 de 04 8b Data Ascii: (nT2jB'" " +x(qZ2kti4 [e<I<du}S<=L~QKC#%ZT =>r_D@sIghTiF+1tJ.nD}QTh#h]~V[eCYS4-4\qL7AwR!sC
2024-05-02 14:33:01 UTC	6453	IN	Data Raw: 0e 99 a2 97 0b 38 4b 11 08 c4 2e a4 68 aa ab a0 71 af 5a 58 c4 b1 13 49 bb c0 da 84 bc c9 83 7c cf 1f 2b 68 8e 40 11 f0 67 cd 35 6d 6a 40 5f 99 a0 e4 68 b3 34 e8 ae c9 44 39 c8 90 31 ef 24 02 52 40 d3 c6 21 49 b6 2f 30 38 a1 d6 fc 9e 26 74 ae b7 38 92 b0 0e a5 aa 67 18 6f 52 62 53 ea bd fb 2c 36 30 a5 d8 47 de 1b 8c a7 5c 14 07 25 c8 5c 42 e0 93 22 34 a6 8d c8 f7 4a 5d 8d 9c 18 01 9e a4 40 e5 e3 06 6a f7 25 1e 6b cf e1 61 08 86 c0 7d 0a 7e ed 14 3b 0f d1 69 bc df 10 68 b2 90 e2 80 da 57 10 d4 3a 11 03 82 94 86 38 81 91 fc dd 17 9a b6 23 32 8d 00 42 6b eb 9f a1 53 9a 38 3e 29 16 63 11 a6 4d 64 cc 08 a0 5f 1c a0 7e d2 a4 36 07 fd 8b 80 c1 e0 26 a5 98 4c af e0 ef 42 f0 99 a4 ef 15 7a 08 99 18 9c 86 08 0c 9c b7 ed 98 78 a6 d4 9f 63 d9 4f 0a 8f 44 7e 21 11 0b Data Ascii: 8K.hqZXI\|+h@g5mj@_h4D91$R@!I/08&t8goRbS,60G\%\B"4J]@j%ka}~;ihW:8#2BkS8>)cMd_~6&LBzxcOD~!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49819	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:01 UTC	387	OUT	GET /wp-content/uploads/2019/08/Home-Resources.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:01 UTC	209	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:01 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:25:44 GMT Accept-Ranges: bytes Content-Length: 313198 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:01 UTC	7983	IN	Data Raw: ff d8 ff e1 13 04 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 05 e8 00 00 01 01 00 03 00 00 00 01 05 e8 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 24 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d8 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 39 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 31 39 3a 30 38 3a 30 37 20 31 35 3a 31 32 3a 34 35 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*(1$2i$''Adobe Photoshop CC 2019 (Macintosh)2019:08:07 15:12:45
2024-05-02 14:33:01 UTC	8000	IN	Data Raw: 4f e9 ab 9d 63 aa 9c 27 37 13 14 31 f9 b6 37 79 2f 8d b5 b3 b3 9c d3 f4 ed 7f f8 3a ff 00 eb 8a 4e 28 70 f1 5e 8a 02 46 5c 20 6a f9 6b be a4 7d 6c 6f 3d 2b 20 ff 00 54 35 df f5 2f 72 1b be a8 7d 69 6f 3d 23 30 fc 29 71 ff 00 a9 5e 85 87 9b d4 dd bd d7 e4 5a e7 6e f6 9d e2 22 3f 34 33 f4 6b 5b 03 aa 6f b8 63 64 90 5c f3 b5 96 68 0e e3 f4 59 66 df 6f bb f7 d3 63 96 12 35 6b e5 8a 60 5e 87 c9 f2 17 7d 5c fa c4 c3 0e e9 39 ad ff 00 d0 7b 3f f2 08 6e e8 9d 69 9f 4f a7 e5 37 e3 45 83 fe f8 bd da 08 e0 90 94 d8 38 71 fb ca 97 85 8b 8b c1 f0 47 74 fc f6 fd 2c 5b 9b f1 ad e3 fe fa 85 65 37 56 26 ca de c0 74 05 cd 73 75 fe d0 5e fc 6c b8 7e 7b bf ce 2b 8f ff 00 19 9b df f5 7e 92 e7 39 c1 b9 43 92 4f 35 5c 91 8a 84 ac be 5b 25 34 94 e5 32 6a e7 ff d0 f3 0f 1f 9a 90 Data Ascii: Oc'717y/:N(p^F\ jk}lo=+ T5/r}io=#0)q^Zn"?43k[ocd\hYfoc5k`^}\9{?niO7E8qGt,[e7V&tsu^l~{+~9CO5\[%42j
2024-05-02 14:33:01 UTC	8000	IN	Data Raw: 79 1d c1 f4 a1 f3 84 2b f3 0e b8 38 cf b6 2a b0 98 82 46 08 5e 7e f1 18 06 9c 6e 00 6c b0 e4 90 72 38 c7 a7 1e 94 d2 d7 51 ea 48 5d d8 2f ca 48 27 84 3c 1c fd 68 a8 da 63 e6 e0 8d f9 20 15 3d 87 b7 bd 14 be 42 20 91 7e 46 55 e5 72 3a 93 d7 d7 da 9a 98 11 86 c6 0f 7e c3 18 eb f5 a9 2e 11 98 67 6f 39 e0 e7 9a 8e 34 26 17 2c 0b 05 e7 3d 05 65 73 66 b4 19 1b 60 e0 60 91 c8 e7 f9 73 4a c4 85 38 05 5b a6 07 63 42 c2 43 02 0e 01 e3 2b f9 d3 a4 95 40 3c 93 83 eb d6 90 b7 62 80 c2 25 e0 f3 c1 1d c5 44 81 92 50 a3 a8 3c 8e b9 f7 cd 4c 19 9d 06 3e 55 3d 3b 9a 8e dc 85 97 2a 70 48 3c 13 cd 01 72 79 5f e7 0d ce d3 e8 31 cf 7a 6c 4e 5a 7e a7 07 9d a4 f0 45 2c cb be 45 60 49 5c 60 82 71 b4 7e 7c d3 44 3b db 07 e4 3d 09 3c e0 55 8f d4 49 e3 1e 58 63 93 cf 18 f5 fa d4 4f Data Ascii: y+8F^~nlr8QH]/H'<hc =B ~FUr:~.go94&,=esf``sJ8[cBC+@<b%DP<L>U=;pH<ry_1zlNZ~E,E`I\`q~\|D;=<UIXcO
2024-05-02 14:33:01 UTC	8000	IN	Data Raw: eb 50 39 dd 01 3f 30 c7 04 e7 9c 7a 56 0b 43 4d b7 11 5b 25 73 87 23 80 08 1c 9e dc d4 44 32 ab 29 00 80 48 07 af b5 3c 3f 04 81 9e 81 46 79 1f 5a 69 c1 52 a0 8c f5 c9 27 22 9d 82 e4 91 c8 42 9c 21 dc 40 38 f4 3d 09 14 cb 5f 98 e5 89 03 38 e4 f5 a5 40 44 7c f2 07 25 7a f3 ef ed d2 8b 4f 9d f6 8c e4 e7 00 9c 03 f5 a6 ee 82 c4 cc ad b8 60 f4 07 07 38 07 bd 24 80 89 30 aa 08 20 13 91 c2 fa fb d3 8e c7 76 c2 10 71 d3 39 00 f1 ef d2 a2 2e 14 8c 1c 8c e0 10 0f 03 bd 17 19 21 19 51 d4 f6 c7 af f5 aa e5 00 94 2e ec 8c e0 36 71 53 39 cc 20 22 90 f9 c9 07 9f c3 35 5e 32 c5 b2 1b 0c 09 c9 ce 71 48 07 a3 e4 ae 30 73 9c e7 bf d7 9a b9 6a 06 f0 dc 92 3a 85 fa 7f 8d 53 1d 19 81 c9 3c 1c 9e de a2 ae d9 0d 9b b2 87 e6 c8 04 f0 3b 1f 5a 4c 65 87 61 b4 86 2c 06 31 ce 0e 7f Data Ascii: P9?0zVCM[%s#D2)H<?FyZiR'"B!@8=_8@D\|%zO`8$0 vq9.!Q.6qS9 "5^2qH0sj:S<;ZLea,1
2024-05-02 14:33:01 UTC	8000	IN	Data Raw: d8 34 bd 42 35 da 08 c5 a4 83 3e e3 8f d6 bf 6f 7e c1 08 0f fb 95 21 b2 72 57 38 a6 ff 00 65 da 90 09 b6 89 d8 1c 86 74 ce 29 7b 24 0b 14 fb 1f 87 ed a6 5f 42 09 1a 7d ee 01 fe 2b 77 07 ea 38 a0 59 5d 79 8f fe 89 72 71 cf 10 b1 c7 e9 ef 5f b7 73 69 36 b3 03 be da 16 38 23 1b 06 2a bc 9a 16 9e f1 c6 a2 ce 2f 90 ee 5c 20 04 50 e8 c5 94 ab df a1 f8 8b 24 33 23 32 c9 0b 44 48 ce c9 14 ab 01 d8 e0 ff 00 3a 82 28 4c b1 e1 46 f2 38 27 a0 1e d5 f5 9f ed 95 e1 f8 c7 c7 3b c7 89 15 23 36 70 9d a8 a0 0c 90 d9 38 f7 c0 af 9f ae 74 fd 83 69 c1 e3 18 db 80 3d 38 ff 00 3d 2b 99 c1 45 d8 eb 83 e6 8a 67 20 54 a0 f9 94 31 03 bf f9 fe 75 13 8f 4d ca 71 ca e4 64 7a d6 ce ad 00 42 30 31 91 c0 1c e2 b2 42 e1 89 2d 82 4f 23 1d fd 07 bd 45 dd ac 58 c6 c1 da 3e f9 20 12 17 b7 e3 Data Ascii: 4B5>o~!rW8et){$_B}+w8Y]yrq_si68#*/\ P$3#2DH:(LF8';#6p8ti=8=+Eg T1uMqdzB01B-O#EX>
2024-05-02 14:33:01 UTC	8000	IN	Data Raw: 90 4e ea 69 95 d9 b3 9c 67 b1 eb 5d 34 eb ce 9b d1 9c 95 68 42 b2 f7 d1 f4 86 93 af 69 fe 20 b6 59 ac a7 0e a4 02 63 24 06 4f 62 2a d3 20 19 04 67 1e 87 ff 00 af 5f 36 e9 ba d5 fe 89 7a b3 d9 4c f1 38 39 04 71 9f 6f 7a f6 4f 06 fc 49 b6 f1 0c 62 0b ec 5b 5f 8e 06 38 59 39 ea 3d 0f f9 15 ef 61 b1 b0 aa b9 5e e7 ce 62 b2 f9 50 f7 e2 b4 3a b2 76 9e 78 ed 8c ff 00 f5 e8 1f 33 1f 4f 63 8c fe b5 23 47 b9 89 c1 cf 04 f3 ff 00 d7 a4 da 00 ea 7d f1 ff 00 eb af 4f 5b 5c f1 b4 1b b3 08 46 49 14 a0 1e 08 39 03 a1 ff 00 26 95 09 0c 41 fa ff 00 9e 68 3f 5c fa e7 ff 00 d7 42 d4 56 19 b3 76 00 e4 0c f7 eb fa d3 4a e0 9c 0c 9c f1 cd 4a c7 20 1e 31 9f f3 de 97 01 87 dd e4 f4 e7 ff 00 af 54 32 35 03 eb ef 9e 3f 9d 3b 69 60 40 38 1f e7 de 94 03 92 57 a9 e3 ad 29 00 67 93 bb Data Ascii: Nig]4hBi Yc$Ob* g_6zL89qozOIb[_8Y9=a^bP:vx3Oc#G}O[\FI9&Ah?\BVvJJ 1T25?;i`@8W)g
2024-05-02 14:33:01 UTC	8000	IN	Data Raw: 97 73 18 d5 f6 91 93 96 19 cf e1 5d ce 83 f0 ef 46 d4 fc 37 6b aa 5d 6a 32 58 c6 e4 83 b9 86 07 24 60 9a e7 a4 d5 34 3e 4f f6 53 93 db e6 fe 75 ea 1a 7d ce 9d 27 c3 fd 3e 5b 9b 2d d6 12 3f 96 21 03 38 25 8f 27 f5 ae 1c 4d 5a 94 e0 b9 77 37 a5 4d 49 ea 79 ef 8b 3c 27 6b e1 68 ed 2e 61 93 ed ba 7d c9 2a b7 2b 20 c0 38 e9 ef d0 d7 3e f7 16 b1 a8 ff 00 46 38 c6 73 b8 e0 73 5e bb e2 62 a9 ae e8 ba 2d dd 8c 27 4b 95 d4 26 e1 85 e3 af 1f 8e 2b 63 50 b9 d3 6c ee e6 b0 b8 58 12 d1 14 a1 84 5b e7 0b 8f 5f d6 b0 8e 35 c5 5a 4a e6 8e 8e a7 84 1b ab 70 e1 d6 dc 03 9f 42 49 ae aa d1 9a 4d 31 37 e1 4e 73 8e c0 57 57 e1 4d 47 4d bb 8a e2 28 04 31 5c c7 39 58 99 e3 05 19 33 85 c1 c5 68 68 da 37 db b5 8d 49 2f ad 62 82 58 88 65 86 3e 23 e4 fd ef d3 3f 8d 15 31 0a 4b 54 28 Data Ascii: s]F7k]j2X$`4>OSu}'>[-?!8%'MZw7MIy<'kh.a}*+ 8>F8ss^b-'K&+cPlX[_5ZJpBIM17NsWWMGM(1\9X3hh7I/bXe>#?1KT(
2024-05-02 14:33:01 UTC	8000	IN	Data Raw: 8a 80 3b fa d2 02 cc ca be 58 23 ee 81 9c e7 3c fa 0a 47 e6 0f 94 12 37 64 17 fa 7f fa e9 67 7c ae 02 a9 db c0 00 11 86 fe bc 51 3b 84 b5 3b 5b 1d cf 3c e7 3d 31 40 2d 04 88 79 80 f2 09 20 9c 75 fd 7b 52 49 81 08 27 19 e9 f2 8c 0c fe 3f 5a 2d d9 89 c1 52 55 86 4b 0e 80 7b d1 71 16 e4 04 13 b4 f2 71 cf 3e 94 ae 5d 98 29 22 06 c0 dc 71 ce e3 c9 f5 ef e9 55 e1 20 83 8f bd 93 db 8f c6 a5 54 dd 09 e0 93 82 3a 70 3d 4d 32 0f 97 aa 9d bd c1 3c fd 69 a2 4b 16 d8 0e a4 8c 0c 92 47 ff 00 5a a4 94 6e 43 c1 50 49 03 1e 9d aa bc 0b e5 49 ce ec 11 c0 3c f7 ef 53 f9 81 b0 48 c7 23 dc 7a d2 0b 16 2c c1 fb 3e 11 5b 93 cb 13 8f d2 95 b2 c1 b9 c0 ce 47 73 4b 1e d3 1b 6d e4 e4 91 93 fa d2 27 de 62 01 c8 e3 6f 24 9a 92 88 64 05 30 5b e6 e7 1f 31 c8 f7 e3 eb 55 cb 30 71 d3 19 Data Ascii: ;X#<G7dg\|Q;;[<=1@-y u{RI'?Z-RUK{qq>])"qU T:p=M2<iKGZnCPII<SH#z,>[GsKm'bo$d0[1U0q
2024-05-02 14:33:01 UTC	8000	IN	Data Raw: 9f af 4e 95 4b 49 f8 5b 67 75 15 d3 4d 77 77 e6 2b 9f 9d 24 c0 39 1d 7f 4a d7 83 52 bb 8a 50 e9 34 b9 03 9e 49 ab 13 cb 77 a7 b7 ef 18 a3 4c 82 46 52 7b 11 c1 3f 9d 73 5d 9d ca 4d 1c a7 89 be 1a eb 3a 2e 90 92 78 72 66 0b 0c fb 4b 24 e5 19 c3 60 64 7b 64 8c d7 09 63 f0 b3 5b d4 5e 44 32 d8 98 cd c9 87 ed 02 62 c8 af c8 e4 f7 e4 63 35 e8 de 37 f1 0e b5 0f 87 8a d9 5c c8 b3 f9 a8 ea a0 0c 92 39 07 f4 1f 90 af 30 b3 f1 ef 89 ec 26 4d 36 4b d7 86 18 24 2e 55 d1 09 57 dc 5f d3 9e 49 38 f7 34 2e 56 7a 78 7e 6e 5d 46 59 7c 35 d6 ae 2f 9e 08 92 09 59 51 64 2c 24 f9 4a b0 24 1c 9e 31 85 27 35 17 88 7c 1f ac f8 67 4d b6 bf d4 2c c4 16 97 2c 16 29 03 ab 83 c6 41 e3 d7 a8 ab d3 78 f7 5e 48 45 ab 5e 86 85 81 03 6c 6a 09 04 1f 6e 9c 9e 3d f8 a4 d5 3c 5f ad 49 a7 c5 a6 Data Ascii: NKI[guMww+$9JRP4IwLFR{?s]M:.xrfK$`d{dc[^D2bc57\90&M6K$.UW_I84.Vzx~n]FY\|5/YQd,$J$1'5\|gM,,)Ax^HE^ljn=<_I
2024-05-02 14:33:01 UTC	8000	IN	Data Raw: e3 26 a3 3c 67 20 86 fa d3 b0 1c 8e 80 e7 b9 a3 41 08 0b 15 39 3c f5 c1 eb f8 52 85 e9 eb 8e 72 4f 14 e6 20 b6 72 7d c9 eb f8 52 6e 5c 00 3e 6e 39 24 d0 d5 98 2d 46 32 f2 06 47 a7 1e b4 16 eb c0 1d b3 dc d2 f6 c6 3e be b9 a1 86 50 1e 9d 4f 34 fc 80 14 f0 0e 47 07 80 69 f9 c1 1d c6 71 c9 a8 c6 49 27 77 7c 0a 79 c8 23 b0 3c 66 90 d8 38 23 b1 c7 fb 5d 28 00 8c e4 0c fa 7b d0 3e 5c 67 91 df 3c d3 91 d4 32 b0 1c 1e d9 ef 40 80 e7 3c 71 9f c8 d1 93 81 9e d9 c7 3d 29 cc 4b 31 c8 c9 eb 80 69 be bc 8c d0 03 54 e7 9e 07 6f 7a 5c 28 dc 73 92 38 c6 4d 2e 72 01 ce 7d fb 8a 51 8e 4f 7c 7a e3 34 ee 02 84 2a 99 fc 80 c9 a7 a8 dc 46 4e 0f 24 f1 c6 29 a7 80 39 e0 9f 5a 17 1b ba f2 0e 33 48 01 9c 0d b9 24 af 23 d3 3f 8d 7e af 7e c7 ab 9f d9 bb c1 04 1f f9 76 97 d3 8f df 3d Data Ascii: &<g A9<RrO r}Rn\>n9$-F2G>PO4GiqI'w\|y#<f8#]({>\g<2@<q=)K1iToz\(s8M.r}QO\|z4*FN$)9Z3H$#?~~v=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49822	104.22.75.115	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:01 UTC	381	OUT	GET /accounts_resources/base/f6d965115c2786.json HTTP/1.1 Host: cdn.sender.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:02 UTC	493	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:02 GMT Content-Type: application/json Content-Length: 3841 Connection: close Accept-Ranges: bytes ETag: "bb871d4ddae01385568227781287c751" Last-Modified: Mon, 01 Apr 2024 20:01:43 GMT Vary: Accept-Encoding CF-Cache-Status: DYNAMIC referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 87d8b95b5d4f38e4-YYZ alt-svc: h3=":443"; ma=86400
2024-05-02 14:33:02 UTC	876	IN	Data Raw: 7b 22 66 6f 72 6d 73 22 3a 5b 7b 22 69 64 22 3a 22 64 52 4e 38 4b 64 22 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 64 65 6c 61 79 22 3a 74 72 75 65 2c 22 74 69 74 6c 65 22 3a 22 3c 70 3e 53 75 62 73 63 72 69 62 65 20 74 6f 20 74 68 65 20 4e 4c 49 20 4e 65 77 73 6c 65 74 74 65 72 3c 5c 2f 70 3e 22 2c 22 6c 61 79 6f 75 74 22 3a 22 45 6d 62 65 64 64 65 64 4c 61 79 6f 75 74 32 22 2c 22 73 63 72 6f 6c 6c 22 3a 66 61 6c 73 65 2c 22 63 74 61 54 65 78 74 22 3a 6e 75 6c 6c 2c 22 68 61 73 68 5f 69 64 22 3a 22 64 52 4e 38 4b 64 22 2c 22 65 78 69 74 54 65 78 74 22 3a 22 43 6c 6f 73 65 22 2c 22 73 75 62 74 69 74 6c 65 22 3a 22 3c 70 20 3e 53 75 62 73 63 72 69 62 65 20 66 6f 72 20 74 68 65 20 6c 61 74 65 73 74 20 6e 65 77 73 21 3c 5c 2f 70 3e 22 2c 22 73 68 6f 77 5f 67 Data Ascii: {"forms":[{"id":"dRN8Kd","rtl":false,"delay":true,"title":"<p>Subscribe to the NLI Newsletter<\/p>","layout":"EmbeddedLayout2","scroll":false,"ctaText":null,"hash_id":"dRN8Kd","exitText":"Close","subtitle":"<p >Subscribe for the latest news!<\/p>","show_g
2024-05-02 14:33:02 UTC	1369	IN	Data Raw: 65 63 74 6f 72 22 3a 22 2e 73 65 6e 64 65 72 2d 66 6f 72 6d 2d 62 6f 78 22 2c 22 72 65 73 6f 75 72 63 65 5f 70 61 74 68 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 64 6e 2e 73 65 6e 64 65 72 2e 6e 65 74 5c 2f 61 63 63 6f 75 6e 74 73 5f 72 65 73 6f 75 72 63 65 73 5c 2f 66 6f 72 6d 73 5c 2f 35 34 36 31 39 5c 2f 36 30 34 37 32 5c 2f 33 31 61 39 65 33 38 34 62 38 39 64 65 31 39 63 76 50 62 5a 47 2e 68 74 6d 6c 22 2c 22 72 65 73 6f 75 72 63 65 5f 74 79 70 65 22 3a 22 65 6d 62 65 64 22 2c 22 73 63 68 65 64 75 6c 65 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 73 65 74 74 69 6e 67 73 5f 70 61 74 68 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 64 6e 2e 73 65 6e 64 65 72 2e 6e 65 74 5c 2f 61 63 63 6f 75 6e 74 73 5f 72 65 73 6f 75 72 63 65 73 5c 2f 62 61 73 65 5c 2f 66 Data Ascii: ector":".sender-form-box","resource_path":"https:\/\/cdn.sender.net\/accounts_resources\/forms\/54619\/60472\/31a9e384b89de19cvPbZG.html","resource_type":"embed","schedule_type":"none","settings_path":"https:\/\/cdn.sender.net\/accounts_resources\/base\/f
2024-05-02 14:33:02 UTC	1369	IN	Data Raw: 65 63 74 20 61 20 76 61 6c 75 65 20 74 68 61 74 20 69 73 20 6e 6f 20 6d 6f 72 65 20 74 68 61 6e 20 7b 6d 61 78 7d 2e 22 2c 22 75 6e 64 65 72 22 3a 22 50 6c 65 61 73 65 20 73 65 6c 65 63 74 20 61 20 76 61 6c 75 65 20 74 68 61 74 20 69 73 20 6e 6f 20 6c 65 73 73 20 74 68 61 6e 20 7b 6d 69 6e 7d 2e 22 7d 2c 22 77 72 6f 6e 67 4c 65 6e 67 74 68 22 3a 7b 22 6f 76 65 72 22 3a 22 50 6c 65 61 73 65 20 73 68 6f 72 74 65 6e 20 74 68 69 73 20 74 65 78 74 20 74 6f 20 6e 6f 20 6d 6f 72 65 20 74 68 61 6e 20 7b 6d 61 78 4c 65 6e 67 74 68 7d 20 63 68 61 72 61 63 74 65 72 73 2e 20 59 6f 75 20 61 72 65 20 63 75 72 72 65 6e 74 6c 79 20 75 73 69 6e 67 20 7b 6c 65 6e 67 74 68 7d 20 63 68 61 72 61 63 74 65 72 73 2e 22 2c 22 75 6e 64 65 72 22 3a 22 50 6c 65 61 73 65 20 6c 65 6e Data Ascii: ect a value that is no more than {max}.","under":"Please select a value that is no less than {min}."},"wrongLength":{"over":"Please shorten this text to no more than {maxLength} characters. You are currently using {length} characters.","under":"Please len
2024-05-02 14:33:02 UTC	227	IN	Data Raw: 74 6f 6e 54 65 78 74 44 75 72 69 6e 67 53 75 62 6d 69 74 22 3a 22 53 65 6e 64 69 6e 67 2e 2e 2e 22 2c 22 70 6f 70 75 70 5f 66 72 65 71 75 65 6e 63 79 5f 61 6d 6f 75 6e 74 22 3a 33 30 2c 22 70 6f 70 75 70 5f 66 72 65 71 75 65 6e 63 79 5f 6d 69 6e 75 74 65 73 22 3a 34 33 32 30 30 2c 22 72 65 63 61 70 74 63 68 61 5f 65 6c 65 6d 65 6e 74 5f 63 6c 61 73 73 22 3a 22 73 65 6e 64 65 72 2d 66 6f 72 6d 2d 72 65 63 61 70 74 63 68 61 22 2c 22 72 65 63 61 70 74 63 68 61 5f 70 72 65 70 65 6e 64 5f 73 65 6c 65 63 74 6f 72 22 3a 22 2e 72 65 63 61 70 74 63 68 61 2d 70 72 65 76 69 65 77 2d 77 72 61 70 22 7d 5d 2c 22 6c 61 6e 64 69 6e 67 73 22 3a 5b 5d 2c 22 70 6f 70 75 70 73 22 3a 5b 5d 7d Data Ascii: tonTextDuringSubmit":"Sending...","popup_frequency_amount":30,"popup_frequency_minutes":43200,"recaptcha_element_class":"sender-form-recaptcha","recaptcha_prepend_selector":".recaptcha-preview-wrap"}],"landings":[],"popups":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49824	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:02 UTC	713	OUT	GET /wp-content/plugins/download-monitor/assets/js/dlm-xhr.min.js?ver=4.9.13 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.382778281.1714660381; _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1
2024-05-02 14:33:02 UTC	213	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:02 GMT Server: Apache Last-Modified: Tue, 16 Apr 2024 01:43:32 GMT Accept-Ranges: bytes Content-Length: 10256 Connection: close Content-Type: text/javascript
2024-05-02 14:33:02 UTC	7979	IN	Data Raw: 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 65 77 20 44 4c 4d 5f 58 48 52 5f 44 6f 77 6e 6c 6f 61 64 7d 29 3b 63 6c 61 73 73 20 44 4c 4d 5f 58 48 52 5f 44 6f 77 6e 6c 6f 61 64 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 28 64 6c 6d 58 48 52 69 6e 73 74 61 6e 63 65 3d 74 68 69 73 29 2e 69 6e 69 74 28 29 7d 69 6e 69 74 28 29 7b 64 6c 6d 58 48 52 69 6e 73 74 61 6e 63 65 2e 61 74 74 61 63 68 42 75 74 74 6f 6e 45 76 65 6e 74 28 29 7d 61 74 74 61 63 68 42 75 74 74 6f 6e 45 76 65 6e 74 28 29 7b 6a 51 75 65 72 79 28 22 68 74 6d 6c 2c 20 62 6f 64 79 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 64 6c 6d 2d 6e 6f 2d 61 63 63 65 73 73 2d 6d 6f 64 61 6c 2d 6f 76 65 72 6c 61 79 2c 20 2e 64 6c 6d 2d 6e 6f 2d 61 63 63 65 73 73 2d 6d 6f 64 61 6c 2d 63 Data Ascii: jQuery(function(e){new DLM_XHR_Download});class DLM_XHR_Download{constructor(){(dlmXHRinstance=this).init()}init(){dlmXHRinstance.attachButtonEvent()}attachButtonEvent(){jQuery("html, body").on("click",".dlm-no-access-modal-overlay, .dlm-no-access-modal-c
2024-05-02 14:33:02 UTC	2277	IN	Data Raw: 77 6e 6c 6f 61 64 28 6f 2c 6c 2c 74 2c 72 2c 6e 29 7b 63 6f 6e 73 74 20 61 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 74 2e 61 74 74 72 28 22 74 61 72 67 65 74 22 29 3b 6c 65 74 20 73 3d 74 2e 61 74 74 72 28 22 63 6c 61 73 73 22 29 2c 69 2c 65 3d 22 22 3b 76 6f 69 64 20 30 21 3d 3d 6f 5b 22 64 6c 6d 2d 65 78 74 65 72 6e 61 6c 2d 64 6f 77 6e 6c 6f 61 64 22 5d 26 26 28 65 3d 6f 5b 22 64 6c 6d 2d 65 78 74 65 72 6e 61 6c 2d 64 6f 77 6e 6c 6f 61 64 22 5d 29 2c 76 6f 69 64 20 30 21 3d 3d 6f 5b 22 78 2d 64 6c 6d 2d 65 78 74 65 72 6e 61 6c 2d 64 6f 77 6e 6c 6f 61 64 22 5d 26 26 28 65 3d 6f 5b 22 78 2d 64 6c 6d 2d 65 78 74 65 72 6e 61 6c 2d 64 6f 77 6e 6c 6f 61 64 22 5d 29 2c 73 3d 76 6f 69 64 20 30 21 3d 3d 73 26 26 22 22 21 3d 3d 73 3f 73 2e 72 Data Ascii: wnload(o,l,t,r,n){const a=new XMLHttpRequest;t.attr("target");let s=t.attr("class"),i,e="";void 0!==o["dlm-external-download"]&&(e=o["dlm-external-download"]),void 0!==o["x-dlm-external-download"]&&(e=o["x-dlm-external-download"]),s=void 0!==s&&""!==s?s.r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49828	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:02 UTC	628	OUT	GET /wp-content/uploads/2019/10/facebook_3225194.svg HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:02 UTC	209	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:02 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:25:06 GMT Accept-Ranges: bytes Content-Length: 680 Connection: close Content-Type: image/svg+xml
2024-05-02 14:33:02 UTC	680	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 73 74 79 6c 65 3d 22 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 65 77 20 30 20 30 20 31 30 30 30 20 31 30 30 30 3b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 30 30 20 31 30 30 30 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 09 2e 73 74 30 7b 66 69 6c Data Ascii: <?xml version="1.0" ?><svg id="Layer_1" style="enable-background:new 0 0 1000 1000;" version="1.1" viewBox="0 0 1000 1000" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><style type="text/css">.st0{fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49830	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:02 UTC	693	OUT	GET /wp-content/themes/Divi/js/scripts.min.js?ver=4.25.0 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.382778281.1714660381; _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1
2024-05-02 14:33:02 UTC	214	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:02 GMT Server: Apache Last-Modified: Sat, 20 Apr 2024 13:43:59 GMT Accept-Ranges: bytes Content-Length: 274331 Connection: close Content-Type: text/javascript
2024-05-02 14:33:02 UTC	7978	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 73 63 72 69 70 74 73 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 69 66 28 65 5b 69 5d 29 72 65 74 75 72 6e 20 65 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 65 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 69 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 61 2e 6c 3d 21 30 2c 61 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 Data Ascii: /! For license information please see scripts.min.js.LICENSE.txt /!function(t){var e={};function n(i){if(e[i])return e[i].exports;var a=e[i]={i:i,l:!1,exports:{}};return t[i].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=t,n.c=e,n.d=function(t,e,i
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 6d 65 6e 74 3d 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 77 69 6e 64 6f 77 3f 61 2e 76 69 65 77 70 6f 72 74 57 69 64 74 68 28 29 3a 74 68 69 73 2e 61 64 61 70 74 65 72 2e 69 6e 6e 65 72 57 69 64 74 68 28 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 5b 65 5d 29 74 2e 70 75 73 68 28 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 5b 65 5d 5b 6e 5d 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 2c 61 3d 74 2e 6c 65 6e 67 74 68 3b 61 3e 69 3b 69 2b 2b 29 74 5b 69 5d 2e 64 65 73 74 72 6f 79 28 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 Data Ascii: ment==this.element.window?a.viewportWidth():this.adapter.innerWidth()},e.prototype.destroy=function(){var t=[];for(var e in this.waypoints)for(var n in this.waypoints[e])t.push(this.waypoints[e][n]);for(var i=0,a=t.length;a>i;i++)t[i].destroy()},e.prototy
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 72 72 61 79 28 74 2e 73 69 7a 65 29 3b 72 65 74 75 72 6e 20 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 5b 2b 2b 65 5d 3d 74 7d 29 29 2c 6e 7d 7d 2c 31 33 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 69 3d 22 6f 62 6a 65 63 74 22 3d 3d 6e 28 65 29 26 26 65 26 26 65 2e 4f 62 6a 65 63 74 3d 3d 3d 4f 62 6a 65 63 74 26 26 65 3b 74 2e 65 78 70 6f 72 74 73 3d 69 7d 29 2e 63 61 6c 6c 28 74 68 69 73 2c 69 28 38 38 29 29 7d 2c 31 33 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 29 Data Ascii: rray(t.size);return t.forEach((function(t){n[++e]=t})),n}},138:function(t,e,i){(function(e){var i="object"==n(e)&&e&&e.Object===Object&&e;t.exports=i}).call(this,i(88))},139:function(t,e){var n=Function.prototype.toString;t.exports=function(t){if(null!=t)
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 74 74 72 28 22 68 72 65 66 22 29 29 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 6e 28 74 2e 74 61 72 67 65 74 29 2c 72 3d 6f 2e 63 6c 6f 73 65 73 74 28 22 2e 6d 65 6e 75 2d 69 74 65 6d 22 29 2e 73 69 62 6c 69 6e 67 73 28 22 2e 65 74 2d 74 6f 75 63 68 2d 68 6f 76 65 72 22 29 3b 69 66 28 6f 2e 63 6c 6f 73 65 73 74 28 22 2e 65 74 2d 74 6f 75 63 68 2d 68 6f 76 65 72 22 29 2e 6c 65 6e 67 74 68 3c 31 26 26 77 69 6e 64 6f 77 2e 65 74 5f 70 62 5f 74 6f 67 67 6c 65 5f 6e 61 76 5f 6d 65 6e 75 28 6e 28 22 2e 65 74 2d 68 6f 76 65 72 22 29 2c 22 63 6c 6f 73 65 22 2c 30 29 2c 69 2e 61 64 64 43 6c 61 73 73 28 22 65 74 2d 74 6f 75 63 68 2d 68 6f 76 65 72 22 29 2c 72 2e 6c 65 6e 67 74 68 3e 30 29 7b 76 61 72 20 73 3d 72 2e 66 69 6e 64 28 22 2e 65 74 2d 74 6f 75 63 68 2d 68 6f 76 Data Ascii: ttr("href"));else{var o=n(t.target),r=o.closest(".menu-item").siblings(".et-touch-hover");if(o.closest(".et-touch-hover").length<1&&window.et_pb_toggle_nav_menu(n(".et-hover"),"close",0),i.addClass("et-touch-hover"),r.length>0){var s=r.find(".et-touch-hov
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 6f 28 74 29 2c 5f 3d 21 6e 26 26 61 28 74 29 2c 64 3d 21 6e 26 26 21 5f 26 26 72 28 74 29 2c 70 3d 21 6e 26 26 21 5f 26 26 21 64 26 26 63 28 74 29 2c 75 3d 6e 7c 7c 5f 7c 7c 64 7c 7c 70 2c 66 3d 75 3f 69 28 74 2e 6c 65 6e 67 74 68 2c 53 74 72 69 6e 67 29 3a 5b 5d 2c 68 3d 66 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 76 61 72 20 62 20 69 6e 20 74 29 21 65 26 26 21 6c 2e 63 61 6c 6c 28 74 2c 62 29 7c 7c 75 26 26 28 22 6c 65 6e 67 74 68 22 3d 3d 62 7c 7c 64 26 26 28 22 6f 66 66 73 65 74 22 3d 3d 62 7c 7c 22 70 61 72 65 6e 74 22 3d 3d 62 29 7c 7c 70 26 26 28 22 62 75 66 66 65 72 22 3d 3d 62 7c 7c 22 62 79 74 65 4c 65 6e 67 74 68 22 3d 3d 62 7c 7c 22 62 79 74 65 4f 66 66 73 65 74 22 3d 3d 62 29 7c 7c 73 Data Ascii: =function(t,e){var n=o(t),_=!n&&a(t),d=!n&&!_&&r(t),p=!n&&!_&&!d&&c(t),u=n\|\|_\|\|d\|\|p,f=u?i(t.length,String):[],h=f.length;for(var b in t)!e&&!l.call(t,b)\|\|u&&("length"==b\|\|d&&("offset"==b\|\|"parent"==b)\|\|p&&("buffer"==b\|\|"byteLength"==b\|\|"byteOffset"==b)\|\|s
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 61 74 61 5f 5f 2e 67 65 74 28 74 29 7d 7d 2c 32 34 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 2e 68 61 73 28 74 29 7d 7d 2c 32 34 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 37 36 29 2c 61 3d 6e 28 39 37 29 2c 6f 3d 6e 28 31 30 30 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 69 29 7b 76 61 72 20 72 3d 6e 2e 5f 5f 64 61 74 61 5f 5f 3b 69 66 28 21 61 7c 7c 72 2e 6c 65 6e 67 74 68 3c 31 39 39 29 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 5b 74 2c 65 5d 29 2c Data Ascii: ata__.get(t)}},248:function(t,e){t.exports=function(t){return this.__data__.has(t)}},249:function(t,e,n){var i=n(76),a=n(97),o=n(100);t.exports=function(t,e){var n=this.__data__;if(n instanceof i){var r=n.__data__;if(!a\|\|r.length<199)return r.push([t,e]),
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 26 26 61 28 74 2e 6c 65 6e 67 74 68 29 26 26 21 69 28 74 29 7d 7d 2c 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 34 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 32 30 31 29 2c 61 3d 6e 28 32 32 32 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 61 28 74 2c 65 29 3b 72 65 74 75 72 6e 20 69 28 6e 29 3f 6e 3a 76 6f 69 64 20 30 7d 7d 2c 34 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2d 31 2c Data Ascii: s=function(t){return null!=t&&a(t.length)&&!i(t)}},4:function(t,e){var n=Array.isArray;t.exports=n},44:function(t,e,n){var i=n(201),a=n(222);t.exports=function(t,e){var n=a(t,e);return i(n)?n:void 0}},45:function(t,e){t.exports=function(t,e){for(var n=-1,
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 73 65 49 6e 74 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 74 3b 69 66 28 6f 28 74 29 29 72 65 74 75 72 6e 20 4e 61 4e 3b 69 66 28 61 28 74 29 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 76 61 6c 75 65 4f 66 3f 74 2e 76 61 6c 75 65 4f 66 28 29 3a 74 3b 74 3d 61 28 65 29 3f 65 2b 22 22 3a 65 7d 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 30 3d 3d 3d 74 3f 74 3a 2b 74 3b 74 3d 69 28 74 29 3b 76 61 72 20 6e 3d 73 2e 74 65 73 74 28 74 29 3b 72 65 74 75 72 6e 20 6e 7c 7c 63 2e 74 65 73 74 28 74 29 3f 6c 28 74 2e 73 6c 69 63 65 28 32 29 2c 6e 3f 32 3a 38 29 3a 72 2e Data Ascii: seInt;t.exports=function(t){if("number"==typeof t)return t;if(o(t))return NaN;if(a(t)){var e="function"==typeof t.valueOf?t.valueOf():t;t=a(e)?e+"":e}if("string"!=typeof t)return 0===t?t:+t;t=i(t);var n=s.test(t);return n\|\|c.test(t)?l(t.slice(2),n?2:8):r.
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 29 7b 6e 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 22 2e 65 74 2d 66 62 2d 70 6f 70 6f 76 65 72 2d 74 69 6e 79 6d 63 65 22 29 2e 6c 65 6e 67 74 68 7c 7c 6e 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 22 2e 65 74 2d 66 62 2d 65 64 69 74 61 62 6c 65 2d 65 6c 65 6d 65 6e 74 22 29 2e 6c 65 6e 67 74 68 7c 7c 73 2e 65 74 5f 73 6c 69 64 65 72 5f 6d 6f 76 65 5f 74 6f 28 22 6e 65 78 74 22 29 7d 29 29 2c 73 2e 6f 6e 28 22 73 77 69 70 65 72 69 67 68 74 2e 65 74 5f 70 62 5f 73 69 6d 70 6c 65 5f 73 6c 69 64 65 72 22 2c 72 2e 73 6c 69 64 65 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 22 2e 65 74 2d 66 62 2d 70 6f 70 6f 76 65 72 2d 74 69 6e 79 6d 63 65 22 29 2e Data Ascii: nction(t){n(t.target).closest(".et-fb-popover-tinymce").length\|\|n(t.target).closest(".et-fb-editable-element").length\|\|s.et_slider_move_to("next")})),s.on("swiperight.et_pb_simple_slider",r.slide,(function(t){n(t.target).closest(".et-fb-popover-tinymce").
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 66 6e 2e 6d 65 64 69 61 65 6c 65 6d 65 6e 74 70 6c 61 79 65 72 26 26 28 65 3d 22 2e 65 74 5f 61 75 64 69 6f 5f 63 6f 6e 74 61 69 6e 65 72 22 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 65 3d 6e 28 65 29 29 2c 65 2e 6e 6f 74 28 22 23 65 74 2d 66 62 2d 61 70 70 20 2a 22 29 29 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 65 2e 66 69 6e 64 28 22 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2e 66 69 72 73 74 28 29 2e 6c 65 6e 67 74 68 3e 30 7c 7c 65 2e 66 69 6e 64 28 22 61 75 64 69 6f 22 29 2e 6d 65 64 69 61 65 6c 65 6d 65 6e 74 70 6c 61 79 65 72 28 77 69 6e 64 6f 77 2e 5f 77 70 6d 65 6a 73 53 65 74 74 69 6e 67 73 29 7d 29 29 7d 6e 2e 65 74 5f 70 62 5f 73 69 6d 70 6c 65 5f 63 61 72 Data Ascii: fn.mediaelementplayer&&(e=".et_audio_container","string"==typeof e&&(e=n(e)),e.not("#et-fb-app *")).each((function(){var e=t(this);e.find(".mejs-container").first().length>0\|\|e.find("audio").mediaelementplayer(window._wpmejsSettings)}))}n.et_pb_simple_car

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49831	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:02 UTC	724	OUT	GET /wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-prereq.js?ver=4761 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.382778281.1714660381; _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1
2024-05-02 14:33:02 UTC	213	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:02 GMT Server: Apache Last-Modified: Tue, 23 Apr 2024 13:08:49 GMT Accept-Ranges: bytes Content-Length: 20084 Connection: close Content-Type: text/javascript
2024-05-02 14:33:02 UTC	7979	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 57 50 44 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 57 50 44 3f 77 69 6e 64 6f 77 2e 57 50 44 3a 7b 7d 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 50 44 2e 64 6f 6d 29 72 65 74 75 72 6e 21 31 3b 57 50 44 2e 64 6f 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 57 50 44 2e 64 6f 6d 2e 66 6e 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 57 50 44 2e 64 6f 6d 2e 66 6e 2e 61 29 57 50 44 2e 64 6f 6d 2e 66 6e 3d 7b 61 3a 5b 5d 2c 69 73 5f 77 70 64 5f 64 6f 6d 3a 21 30 2c 6c 65 6e 67 74 68 3a 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 Data Ascii: (function(){window.WPD="undefined"!==typeof window.WPD?window.WPD:{};if("undefined"!=typeof WPD.dom)return!1;WPD.dom=function(){if("undefined"==typeof WPD.dom.fn\|\|"undefined"==typeof WPD.dom.fn.a)WPD.dom.fn={a:[],is_wpd_dom:!0,length:0,get:function(a){ret
2024-05-02 14:33:02 UTC	8000	IN	Data Raw: 2c 74 72 69 67 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 63 3d 63 7c 7c 21 31 3b 64 3d 64 7c 7c 21 31 3b 74 68 69 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 66 3d 21 31 3b 64 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 5f 64 61 74 61 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 5f 64 61 74 61 28 65 2c 22 65 76 65 6e 74 73 22 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 5f 64 61 74 61 28 65 2c 22 65 76 65 6e 74 73 22 29 5b 61 5d 26 26 0a 28 6a 51 75 65 72 79 28 65 29 2e 74 72 69 67 67 65 Data Ascii: ,trigger:function(a,b,c,d){c=c\|\|!1;d=d\|\|!1;this.forEach(function(e){var f=!1;d&&"undefined"!=typeof jQuery&&"undefined"!=typeof jQuery._data&&"undefined"!=typeof jQuery._data(e,"events")&&"undefined"!=typeof jQuery._data(e,"events")[a]&&(jQuery(e).trigge
2024-05-02 14:33:02 UTC	4105	IN	Data Raw: 65 66 74 2c 68 3d 65 2e 72 69 67 68 74 3b 6e 75 6c 6c 3d 3d 62 26 26 28 62 3d 77 69 6e 64 6f 77 29 3b 62 3d 3d 3d 77 69 6e 64 6f 77 3f 28 65 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 7c 7c 30 2c 64 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 30 29 3a 28 65 3d 62 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 64 3d 62 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 2c 62 3d 62 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2c 63 2d 3d 62 2e 74 6f 70 2c 66 2d 3d 62 2e 74 6f 70 2c 67 2d 3d 62 2e 6c 65 66 74 2c 68 2d 3d 62 2e 6c 65 66 74 29 3b 0a 61 3d 7e 7e 4d 61 74 68 2e 72 6f 75 6e 64 28 70 61 72 73 65 46 6c 6f 61 74 28 61 29 29 3b 72 65 74 75 72 6e 20 30 3e 3d 68 7c 7c 67 3e 3d 65 3f 21 31 3a 30 3c 61 3f 63 3e 3d 61 Data Ascii: eft,h=e.right;null==b&&(b=window);b===window?(e=window.innerWidth\|\|0,d=window.innerHeight\|\|0):(e=b.clientWidth,d=b.clientHeight,b=b.getBoundingClientRect(),c-=b.top,f-=b.top,g-=b.left,h-=b.left);a=~~Math.round(parseFloat(a));return 0>=h\|\|g>=e?!1:0<a?c>=a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49832	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:02 UTC	722	OUT	GET /wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-core.js?ver=4761 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.382778281.1714660381; _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1
2024-05-02 14:33:02 UTC	213	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:02 GMT Server: Apache Last-Modified: Tue, 23 Apr 2024 13:08:49 GMT Accept-Ranges: bytes Content-Length: 39679 Connection: close Content-Type: text/javascript
2024-05-02 14:33:02 UTC	7979	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 57 50 44 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 57 50 44 3f 77 69 6e 64 6f 77 2e 57 50 44 3a 7b 7d 3b 77 69 6e 64 6f 77 2e 57 50 44 2e 61 6a 61 78 73 65 61 72 63 68 6c 69 74 65 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 72 65 76 53 74 61 74 65 3d 6e 75 6c 6c 3b 74 68 69 73 2e 66 69 72 73 74 49 74 65 72 61 74 69 6f 6e 3d 21 30 3b 74 68 69 73 2e 68 65 6c 70 65 72 73 3d 7b 7d 3b 74 68 69 73 2e 70 6c 75 67 69 6e 3d 7b 7d 3b 74 68 69 73 2e 61 64 64 6f 6e 73 3d 7b 61 64 64 6f 6e 73 3a 5b 5d 2c 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 2d 31 3d 3d 74 68 69 73 2e 61 64 64 6f 6e 73 2e 69 6e 64 65 78 4f 66 28 64 29 26 26 28 64 3d 74 Data Ascii: (function(){window.WPD="undefined"!==typeof window.WPD?window.WPD:{};window.WPD.ajaxsearchlite=new function(){this.prevState=null;this.firstIteration=!0;this.helpers={};this.plugin={};this.addons={addons:[],add:function(d){-1==this.addons.indexOf(d)&&(d=t
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 65 66 22 29 29 3b 22 22 21 3d 63 26 26 28 22 73 61 6d 65 22 3d 3d 61 3f 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 63 3a 62 2e 6f 70 65 6e 49 6e 4e 65 77 54 61 62 28 63 29 2c 0a 74 68 69 73 2e 68 69 64 65 4c 6f 61 64 65 72 28 29 2c 74 68 69 73 2e 68 69 64 65 52 65 73 75 6c 74 73 28 29 29 3b 72 65 74 75 72 6e 21 31 7d 2c 64 6f 52 65 64 69 72 65 63 74 54 6f 52 65 73 75 6c 74 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6c 65 74 20 63 3b 63 3d 22 63 6c 69 63 6b 22 3d 3d 61 3f 74 68 69 73 2e 6f 2e 74 72 69 67 67 65 72 2e 63 6c 69 63 6b 5f 6c 6f 63 61 74 69 6f 6e 3a 74 68 69 73 2e 6f 2e 74 72 69 67 67 65 72 2e 72 65 74 75 72 6e 5f 6c 6f 63 61 74 69 6f 6e 3b 61 3d 74 68 69 73 2e 67 65 74 52 65 64 69 72 65 63 74 55 52 4c 28 61 29 3b 69 66 28 74 68 69 73 2e 6f 2e 6f Data Ascii: ef"));""!=c&&("same"==a?location.href=c:b.openInNewTab(c),this.hideLoader(),this.hideResults());return!1},doRedirectToResults:function(a){let c;c="click"==a?this.o.trigger.click_location:this.o.trigger.return_location;a=this.getRedirectURL(a);if(this.o.o
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 74 61 3d 31 26 22 2b 64 28 22 66 6f 72 6d 22 2c 74 68 69 73 2e 6e 28 22 73 65 61 72 63 68 73 65 74 74 69 6e 67 73 22 29 29 2e 73 65 72 69 61 6c 69 7a 65 28 29 7d 2c 72 65 73 65 74 53 65 61 72 63 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 73 65 74 53 65 61 72 63 68 46 69 6c 74 65 72 73 28 29 7d 2c 66 69 6c 74 65 72 73 49 6e 69 74 69 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 3d 3d 74 68 69 73 2e 6e 28 22 73 65 61 72 63 68 73 65 74 74 69 6e 67 73 22 29 2e 66 69 6e 64 28 22 69 6e 70 75 74 5b 6e 61 6d 65 3d 66 69 6c 74 65 72 73 5f 69 6e 69 74 69 61 6c 5d 22 29 2e 76 61 6c 28 29 7d 2c 0a 66 69 6c 74 65 72 73 43 68 61 6e 67 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 3d 3d 74 68 69 73 2e 6e 28 22 73 Data Ascii: ta=1&"+d("form",this.n("searchsettings")).serialize()},resetSearch:function(){this.resetSearchFilters()},filtersInitial:function(){return 1==this.n("searchsettings").find("input[name=filters_initial]").val()},filtersChanged:function(){return 1==this.n("s
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 2e 64 6f 52 65 64 69 72 65 63 74 54 6f 46 69 72 73 74 52 65 73 75 6c 74 28 29 3a 62 2e 6e 28 22 70 72 6f 63 6c 6f 73 65 22 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 22 62 6c 6f 63 6b 22 29 7d 2c 62 2e 6f 2e 74 72 69 67 67 65 72 2e 64 65 6c 61 79 29 7d 29 7d 7d 29 7d 29 28 57 50 44 2e 64 6f 6d 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 6c 65 74 20 62 3d 77 69 6e 64 6f 77 2e 57 50 44 2e 61 6a 61 78 73 65 61 72 63 68 6c 69 74 65 2e 68 65 6c 70 65 72 73 3b 64 2e 66 6e 2e 65 78 74 65 6e 64 28 77 69 6e 64 6f 77 2e 57 50 44 2e 61 6a 61 78 73 65 61 72 63 68 6c 69 74 65 2e 70 6c 75 67 69 6e 2c 7b 69 6e 69 74 49 6e 70 75 74 45 76 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 61 3d 74 68 69 73 2c 63 3d 21 31 2c 66 3d 66 75 6e 63 74 69 6f 6e Data Ascii: .doRedirectToFirstResult():b.n("proclose").css("display","block")},b.o.trigger.delay)})}})})(WPD.dom);(function(d){let b=window.WPD.ajaxsearchlite.helpers;d.fn.extend(window.WPD.ajaxsearchlite.plugin,{initInputEvents:function(){let a=this,c=!1,f=function
2024-05-02 14:33:03 UTC	7700	IN	Data Raw: 73 75 6c 74 5f 75 72 6c 3a 64 28 74 68 69 73 29 2e 66 69 6e 64 28 22 61 2e 61 73 6c 5f 72 65 73 5f 75 72 6c 22 29 2e 61 74 74 72 28 22 68 72 65 66 22 29 7d 29 7d 29 7d 7d 29 7d 29 28 57 50 44 2e 64 6f 6d 29 3b 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 2e 66 6e 2e 65 78 74 65 6e 64 28 77 69 6e 64 6f 77 2e 57 50 44 2e 61 6a 61 78 73 65 61 72 63 68 6c 69 74 65 2e 70 6c 75 67 69 6e 2c 7b 6d 6f 6e 69 74 6f 72 54 6f 75 63 68 4d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 62 3d 74 68 69 73 3b 62 2e 64 72 61 67 67 69 6e 67 3d 21 31 3b 64 28 22 62 6f 64 79 22 29 2e 6f 6e 28 22 74 6f 75 63 68 6d 6f 76 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 64 72 61 67 67 69 6e 67 3d 21 30 7d 29 2e 6f 6e 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 66 75 6e 63 74 Data Ascii: sult_url:d(this).find("a.asl_res_url").attr("href")})})}})})(WPD.dom);(function(d){d.fn.extend(window.WPD.ajaxsearchlite.plugin,{monitorTouchMove:function(){let b=this;b.dragging=!1;d("body").on("touchmove",function(){b.dragging=!0}).on("touchstart",funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49837	172.253.63.155	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:02 UTC	793	OUT	POST /g/collect?v=2&tid=G-M1MYBR9H42&cid=382778281.1714660381&gtm=45je44t0v889670875za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://naturalearning.org X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:02 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://naturalearning.org Date: Thu, 02 May 2024 14:33:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49833	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:02 UTC	781	OUT	GET /wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-settings.js?ver=4761 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:02 UTC	212	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:02 GMT Server: Apache Last-Modified: Tue, 23 Apr 2024 13:08:49 GMT Accept-Ranges: bytes Content-Length: 5595 Connection: close Content-Type: text/javascript
2024-05-02 14:33:02 UTC	5595	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 2e 66 6e 2e 65 78 74 65 6e 64 28 77 69 6e 64 6f 77 2e 57 50 44 2e 61 6a 61 78 73 65 61 72 63 68 6c 69 74 65 2e 70 6c 75 67 69 6e 2c 7b 73 68 6f 77 53 65 74 74 69 6e 67 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 62 3b 6e 75 6c 6c 3d 3d 28 62 3d 74 68 69 73 2e 69 6e 69 74 53 65 74 74 69 6e 67 73 29 7c 7c 62 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 68 69 73 2e 6e 28 22 73 65 61 72 63 68 73 65 74 74 69 6e 67 73 22 29 2e 63 73 73 28 74 68 69 73 2e 73 65 74 74 41 6e 69 6d 2e 73 68 6f 77 43 53 53 29 3b 74 68 69 73 2e 6e 28 22 73 65 61 72 63 68 73 65 74 74 69 6e 67 73 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 73 65 74 74 41 6e 69 6d 2e 68 69 64 65 43 6c 61 73 73 29 2e 61 64 64 43 6c 61 73 73 28 74 Data Ascii: (function(c){c.fn.extend(window.WPD.ajaxsearchlite.plugin,{showSettings:function(){let b;null==(b=this.initSettings)\|\|b.call(this);this.n("searchsettings").css(this.settAnim.showCSS);this.n("searchsettings").removeClass(this.settAnim.hideClass).addClass(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49834	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:02 UTC	789	OUT	GET /wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-results-vertical.js?ver=4761 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:02 UTC	212	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:02 GMT Server: Apache Last-Modified: Tue, 23 Apr 2024 13:08:49 GMT Accept-Ranges: bytes Content-Length: 1382 Connection: close Content-Type: text/javascript
2024-05-02 14:33:02 UTC	1382	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6e 2e 65 78 74 65 6e 64 28 77 69 6e 64 6f 77 2e 57 50 44 2e 61 6a 61 78 73 65 61 72 63 68 6c 69 74 65 2e 70 6c 75 67 69 6e 2c 7b 73 68 6f 77 56 65 72 74 69 63 61 6c 52 65 73 75 6c 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 68 6f 77 52 65 73 75 6c 74 73 42 6f 78 28 29 3b 69 66 28 30 3c 74 68 69 73 2e 6e 28 22 69 74 65 6d 73 22 29 2e 6c 65 6e 67 74 68 29 7b 6c 65 74 20 62 3d 74 68 69 73 2e 6e 28 22 69 74 65 6d 73 22 29 2e 6c 65 6e 67 74 68 3c 74 68 69 73 2e 6f 2e 69 74 65 6d 73 63 6f 75 6e 74 3f 74 68 69 73 2e 6e 28 22 69 74 65 6d 73 22 29 2e 6c 65 6e 67 74 68 3a 74 68 69 73 2e 6f 2e 69 74 65 6d 73 63 6f 75 6e 74 3b 62 3d 30 3e 3d 62 3f 39 39 39 39 3a 62 3b 6c 65 74 20 68 3d 61 28 22 2e 61 73 Data Ascii: (function(a){a.fn.extend(window.WPD.ajaxsearchlite.plugin,{showVerticalResults:function(){this.showResultsBox();if(0<this.n("items").length){let b=this.n("items").length<this.o.itemscount?this.n("items").length:this.o.itemscount;b=0>=b?9999:b;let h=a(".as

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49835	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:02 UTC	785	OUT	GET /wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-autocomplete.js?ver=4761 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:02 UTC	212	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:02 GMT Server: Apache Last-Modified: Tue, 23 Apr 2024 13:08:49 GMT Accept-Ranges: bytes Content-Length: 1664 Connection: close Content-Type: text/javascript
2024-05-02 14:33:02 UTC	1664	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 2e 66 6e 2e 65 78 74 65 6e 64 28 77 69 6e 64 6f 77 2e 57 50 44 2e 61 6a 61 78 73 65 61 72 63 68 6c 69 74 65 2e 70 6c 75 67 69 6e 2c 7b 61 75 74 6f 63 6f 6d 70 6c 65 74 65 47 6f 6f 67 6c 65 4f 6e 6c 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 61 3d 74 68 69 73 2c 64 3d 61 2e 6e 28 22 74 65 78 74 22 29 2e 76 61 6c 28 29 3b 69 66 28 22 22 3d 3d 61 2e 6e 28 22 74 65 78 74 22 29 2e 76 61 6c 28 29 29 61 2e 6e 28 22 74 65 78 74 41 75 74 6f 63 6f 6d 70 6c 65 74 65 22 29 2e 76 61 6c 28 22 22 29 3b 65 6c 73 65 7b 76 61 72 20 65 3d 61 2e 6e 28 22 74 65 78 74 41 75 74 6f 63 6f 6d 70 6c 65 74 65 22 29 2e 76 61 6c 28 29 3b 69 66 28 22 22 3d 3d 65 7c 7c 30 21 3d 65 2e 69 6e 64 65 78 4f 66 28 64 29 29 7b 61 2e 6e 28 22 74 Data Ascii: (function(c){c.fn.extend(window.WPD.ajaxsearchlite.plugin,{autocompleteGoogleOnly:function(){let a=this,d=a.n("text").val();if(""==a.n("text").val())a.n("textAutocomplete").val("");else{var e=a.n("textAutocomplete").val();if(""==e\|\|0!=e.indexOf(d)){a.n("t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49838	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:02 UTC	573	OUT	GET /wp-content/uploads/2021/11/Home-Green-Desk-1280x914.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:03 UTC	209	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:02 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:18:08 GMT Accept-Ranges: bytes Content-Length: 469792 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:03 UTC	7983	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 26 a1 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 0f 2f 00 00 01 01 00 03 00 00 00 01 08 20 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 30 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 31 3a 31 31 3a 30 32 20 31 Data Ascii: JFIF``&ExifMM*/ (1!2i$``Adobe Photoshop 23.0 (Macintosh)2021:11:02 1
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: b9 23 d0 ce c5 b2 bf a3 75 36 ba bc 4c 8a bd bf a1 58 7d 5a bc ac 5a eb ea 98 d6 6d 6d 6e 6d 4e a3 71 26 b0 d1 14 d3 60 77 f3 98 af a7 fa 1d 9f 9f 8d ea 63 ff 00 da 75 7f a2 75 3b b1 f2 32 c3 c9 36 e2 3d ad a1 f2 0b 9b 03 f5 7b 3f 3d 96 3d 96 53 ff 00 5d f7 a5 d6 2e a5 be a8 04 bd 97 d3 6b 6d ac c3 61 c0 0c 90 d6 38 7b 7f 40 ff 00 d2 e3 bb f7 2e 46 36 25 af f2 0a a7 9d c9 b7 18 c3 5e 09 c7 70 df 8e 41 97 d6 d7 eb e9 b5 c7 f9 c6 37 f7 1f fe 12 bb 18 ab ee 7f f3 6e 70 b5 9e 72 64 7f 25 df ce 35 33 74 63 03 84 80 74 3d 8c fd 36 a5 02 24 f2 0c ed 8e 14 f4 ca 23 4c db 07 49 d0 70 0f 29 8b 1e 24 34 f3 06 3b 18 e1 44 1d a3 43 3d f5 46 0e 80 43 a0 19 83 1f dd ff 00 90 49 9a 24 6c 4d 57 54 94 64 57 43 6a c8 aa d7 55 9b 55 a1 cd 11 a0 db ef ae ea ac fe 4b db ee 63 Data Ascii: #u6LX}ZZmmnmNq&`wcuu;26={?==S].kma8{@.F6%^pA7nprd%53tct=6$#LIp)$4;DC=FCI$lMWTdWCjUUKc
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 83 4e 9a 74 b9 10 c9 7d a3 53 e6 d4 1c 5d 92 d2 d5 53 fb bd 3e cd 14 b3 af e5 ca 1d 80 72 7d 14 0b 11 db 1f 43 f4 dd 3a 8e 91 df 6c 68 2e 4d d6 96 b3 d9 ed 7f 0c 27 0f 09 a6 ac cb 52 1e 54 53 48 8f e1 2e 0a 96 47 6e b7 bd fc b6 c5 18 9c 92 ff 00 f9 97 6d 3e 3f 06 bf 6d c9 59 88 71 9f b0 5e 29 59 e4 aa e1 de 1f 89 f2 c8 50 88 da 0a de 6c 93 a8 bf e6 15 6b 10 48 fd 23 1b f1 7a a6 09 4b 66 ee 4a a5 8b ca 33 8a 8a bf c3 68 d6 0a 29 1f 98 54 19 98 ec c8 dd 0a db cc 1c 68 86 27 92 6e 59 3a f0 66 db cf 20 56 2f d4 b1 23 d4 e3 6a 49 70 41 ea 2a a9 e8 e7 8e a6 17 2b 2c 4c 1d 1b f8 48 37 07 02 49 3f 8b e8 36 6a f9 1f 1d cf 9c 9c b3 35 cc e6 59 67 a2 90 34 aa 90 88 d4 69 37 50 2d d4 90 2e 4f ae 31 69 34 71 d3 4e 6e 3d 32 2b bb ec 13 4d 1c 95 a6 5c c2 a5 cb 4b 34 ad Data Ascii: Nt}S]S>r}C:lh.M'RTSH.Gnm>?mYq^)YPlkH#zKfJ3h)Th'nY:f V/#jIpA*+,LH7I?6j5Yg4i7P-.O1i4qNn=2+M\K4
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: ab e4 a6 15 54 b4 ae c0 bc 8f d0 22 37 90 20 dc f5 18 ab dd 8e a7 e5 19 5c 57 1c 03 6c 5f 28 cf b8 97 87 73 cc 8f 3a 69 ab e0 34 95 0e e5 c2 ab ea d0 41 b5 ad d4 00 7c f1 d2 c5 ed b8 7b 6b c0 76 35 ca 39 c2 f9 49 e2 8c ed f2 f9 25 68 aa 6a 79 93 2b 2b 05 e7 38 05 b9 60 5a d7 36 36 b5 b7 c0 d4 46 51 8d c0 18 ea 52 a6 19 cb 16 2c a1 f3 15 a4 68 5a 9e 4a 71 22 0c c1 8b da 50 45 82 81 be ab 5e c4 da db df 1c c9 67 79 12 52 5c 9b 1e 9d c5 5f 82 e7 9a e5 99 2e 61 c3 b9 6f 15 70 c0 96 b2 55 7e 45 65 20 8c 3c 70 9d 3d fe 6c 4d 99 b6 e8 30 20 a2 e3 2c 33 e1 b3 3f b7 19 3b a2 91 c5 0d 99 65 35 23 2f ab aa a9 2f 24 2b 24 b1 bb 9d 08 09 25 54 2f 41 61 f6 37 b6 3a ba 0c 50 9c 54 bc 2e 0a 27 3d bc 44 d2 a7 c8 1a 6f 60 10 cf 55 59 22 d5 e5 bf fd 4e 95 99 cd e1 60 fb 20 Data Ascii: T"7 \Wl_(s:i4A\|{kv59I%hjy++8`Z66FQR,hZJq"PE^gyR\_.aopU~Ee <p=lM0 ,3?;e5#//$+$%T/Aa7:PT.'=Do`UY"N`
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 29 37 22 66 7b c4 19 7e 57 1c 95 35 f5 31 c1 4b 0e f7 63 bb 1f 21 e7 8c da 3d 16 5c cd 47 14 6e 4c 1b 77 33 31 cf 7d b6 d1 06 71 95 65 f2 cf 21 ff 00 a9 39 d0 9f 61 be 3d 76 8f fd 2b 93 bc f3 af e0 75 81 f9 28 39 c7 1e f1 0e 7b a9 6a 2b de 28 4f fd 1a 73 cb 41 f6 eb f5 c7 a7 d2 7a 3e 93 4d cc 23 6f ed f2 cb a3 8d 47 a0 73 63 a4 82 36 4e 08 51 ec 40 12 68 68 9e b2 50 8b dc e1 65 2d a8 88 d1 f8 63 d9 e3 d4 d9 d8 ec 3a dc 62 88 e7 dd c1 62 c6 c2 3c 4f c2 90 e5 f4 12 15 51 75 1d 70 e3 b8 52 b3 3e cb e2 3e f2 40 f3 c3 d9 51 72 86 22 f4 a4 1f e1 c0 6c 94 0c 92 9b 4a b1 ed 6c 22 90 12 2b d5 9f e2 30 c3 ae 88 37 10 bb a8 c4 21 b3 fb 35 c9 6f 4a 92 3c 84 13 be 31 64 ca 94 a8 b6 11 6d 59 77 cf b2 88 a6 cb dc 34 8d f0 e1 5e 54 58 a2 cc 20 52 9c b7 8a 8c 6d 7d 05 88 Data Ascii: )7"f{~W51Kc!=\GnLw31}qe!9a=v+u(9{j+(OsAz>M#oGsc6NQ@hhPe-c:bb<OQupR>>@Qr"lJl"+07!5oJ<1dmYw4^TX Rm}
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 25 20 45 19 1d 54 74 27 0d a9 83 c7 cc dd c8 a3 3c db 64 cc d7 34 68 10 c3 0b 90 c4 5d 98 76 f9 63 0e 9f 4e a4 f7 48 ca 95 b0 54 04 fc 4c 6e cd b9 63 8d ef 1b 97 08 b1 ab 06 d7 46 9c e9 1d 81 16 de f8 dd 87 1c b6 a8 a2 cc 7c f4 56 ea ea 9a a5 cf 8b f2 c1 f0 af 4c 76 71 62 50 5c 76 6d 82 a2 43 ec 30 c8 61 96 04 b6 08 51 22 9a 30 4d 88 c5 72 90 02 90 22 c5 62 bb 1c 50 e4 40 ad 2e 66 d1 0b 6a 37 c5 0e 23 26 7a 5a be 6b 5d 98 9f ae 1e 2a 86 bb 08 e5 75 49 0a df cf 19 b3 58 09 b2 e6 71 05 b0 3b e2 94 a4 4b 44 79 33 05 68 98 5c 7d f0 d1 8b be 49 68 ae 54 4a 1e a0 9f 5c 74 31 ae 09 68 7a 42 bc bc 45 d9 2c 25 92 55 bc 1b 2b 5b 19 35 11 b2 5d 06 aa 33 69 5a 36 5d 64 ed 8c 30 c6 4d c5 2f 33 73 24 e5 89 c7 67 07 11 a1 45 51 31 74 d2 5b 06 7c 06 c9 f4 c8 61 f1 23 1b Data Ascii: % ETt'<d4h]vcNHTLncF\|VLvqbP\vmC0aQ"0Mr"bP@.fj7#&zZk]*uIXq;KDy3h\}IhTJ\t1hzBE,%U+[5]3iZ6]d0M/3s$gEQ1t[\|a#
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 88 50 5c d8 11 71 f6 c7 6b d3 a7 09 67 8c 25 d3 0c 25 6e 8c b6 aa b2 a2 a8 7e 74 d2 4b 63 7b 33 12 31 ed e1 83 16 3f db 14 6b 4a ba 22 6e 2e 48 c5 c9 a1 b9 3a 4e 0d 82 83 2b 46 c0 92 31 97 78 07 42 ba 0b 5b 09 64 14 15 88 e8 71 2d 10 e8 85 fb 8c 0d c8 87 44 2f e4 71 37 22 0a 11 b8 ed 81 b9 00 ef 26 46 e8 0e 26 e4 41 49 4f 25 fa 1c 07 34 41 f5 a4 76 1b 03 8a fd c5 61 10 32 f7 d7 d0 e1 d6 64 14 4e 8a 89 c2 db 49 c5 2f 22 b2 0a 14 f2 8d 80 db 03 7a 20 b5 a4 90 f6 c2 3c 88 14 28 65 ac c6 f6 c0 f7 bc 04 76 2c b8 a8 f8 70 af 2d 90 7b dd d9 05 b4 e1 77 a0 8d 35 2c 8d d0 1c 15 91 12 85 c7 97 c8 7a 83 f6 c4 f7 51 28 92 b4 13 01 f0 9c 27 ba 89 42 1b 2f 95 b7 b7 4f 4c 05 99 22 50 f4 19 64 83 7d f0 25 99 13 6b 24 0c b1 ba 93 8a bd e4 4d ac 7e 3a 59 10 74 38 57 91 12 Data Ascii: P\qkg%%n~tKc{31?kJ"n.H:N+F1xB[dq-D/q7"&F&AIO%4Ava2dNI/"z <(ev,p-{w5,zQ('B/OL"Pd}%k$M~:Yt8W
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 37 f5 23 1e fb 47 a8 59 34 f2 8c 1f 4c 90 8e de 09 79 67 00 e7 59 a5 6b 55 55 44 f4 94 4e e6 45 2d b3 38 ed 6f 2d ad 8c 7a af 59 d3 63 8e d8 bb 91 27 2f 09 17 5a 4e 17 a8 e5 47 49 15 47 bc ca 54 6c 4d c2 2d ec 09 3d 85 fb e3 ce cf 58 a6 dc f6 d2 06 3c 13 c8 e9 20 d4 3e cb e9 33 4a 29 29 a1 e2 43 4b 5e cb 67 58 23 52 50 f9 02 4f ef 8c 4f d7 e5 a6 c8 a6 f0 ee 87 db 3a 98 fd 2e a3 72 7c 98 4f 1b fb 38 e2 5e 0e a9 67 ce a8 a5 31 3b 95 4a c5 6e 64 72 79 78 bb 1f 9d b1 f4 7f 4a f5 cd 26 ba 35 82 7c fd 74 d1 46 4c 32 c7 df 45 57 93 62 48 df 1d ad c5 24 9a 5c ae b6 bb 6a 5a 4a 99 cd ed f9 31 33 ef f4 18 49 e6 84 3f 73 48 29 30 fa ce 07 43 8c 9e d8 e8 50 ac 2b d0 e0 38 04 58 ad b8 c0 f6 e8 9c 1e f7 c5 1d 4e 07 b6 1b 16 95 e3 cf f7 c2 fb 61 b1 e1 5c 46 f7 c0 f6 89 Data Ascii: 7#GY4LygYkUUDNE-8o-zYc'/ZNGIGTlM-=X< >3J))CK^gX#RPOO:.r\|O8^g1;JndryxJ&5\|tFL2EWbH$\jZJ13I?sH)0CP+8XNa\F
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 64 60 6e 46 e3 16 29 58 bb 42 49 c2 f9 94 d9 14 d9 d4 6f 00 a5 82 45 8e 44 e6 7e 6f 88 d8 36 9f e1 be d7 c5 7e f4 77 6d 1b 63 db b8 8f 97 e5 95 55 b3 c7 1c 0a 58 bb 69 d7 fa 57 6b 9b 9e db 0b e1 73 67 86 38 b7 20 42 ed 57 67 d0 3c 33 92 72 27 c9 e5 ab a7 a1 e2 09 a8 a9 5e 04 a9 23 78 12 e1 d1 88 3e 47 52 83 eb 8f 01 eb 9e a2 b2 e9 e5 0c 73 70 e5 7f 93 d0 e3 d2 d5 4a 44 ca 0c d2 b2 a7 32 5a da 1a ee 62 09 1a 29 62 1e 16 8d c1 e8 41 c7 03 51 a3 c7 8f 4e 96 45 cb 56 75 b0 e7 c7 34 e0 5d b3 88 aa b3 1a 3a 73 1a 38 a8 d0 75 16 ba a8 1d fd 31 e7 b4 db 71 ca 5b bf 6d 99 f1 4a 31 9b 6f a2 b7 c2 99 15 53 d4 c9 34 86 49 4d cd 8a 9e a2 fe 78 e9 7a 86 ab 1e d5 08 f0 74 b2 e7 82 81 74 cc b2 da 8a fa 14 8a 2d 68 db 06 d6 c2 da 7d 71 c4 d3 e7 8e 29 b9 48 e5 43 2a 8c ac Data Ascii: d`nF)XBIoED~o6~wmcUXiWksg8 BWg<3r'^#x>GRspJD2Zb)bAQNEVu4]:s8u1q[mJ1oS4IMxztt-h}q)HC*
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 46 d8 a9 e9 b1 c6 77 92 9d 95 fb 96 8a be 70 63 c8 e8 72 d1 4f a1 e4 ab 8d e6 76 12 6a fd 45 40 61 d8 f8 4e de b8 ec 62 84 f9 73 7c 0f b1 35 65 df d9 67 0a af b4 0a 5a da 69 f3 2f 70 14 ae 92 e8 58 b5 f3 14 a9 b9 02 fb 30 db 73 e7 8a de 9d 39 ee 2d 50 8b 54 8d 5d 38 7f 24 e1 fe 1e cc 61 e1 ba 08 33 2a 91 22 c3 2c cd 2a b4 ea c4 78 24 2d fa 50 12 2f 6d 85 bb e3 46 d5 08 d9 6e 38 ab a4 66 52 65 23 21 71 55 4f ef 2b 55 50 5a 4e 7e dc b6 56 24 95 1b 59 87 f4 ea 31 76 8e 10 cd 16 9d 7f e4 93 84 21 fb 4b 67 b2 3e 23 c8 78 77 30 ce e6 e2 09 a0 ca a1 a9 8a 3e 55 4b d9 10 95 2d a9 40 f5 bf 4f 4c 5b 97 0a 9c 5a 7d 20 43 9b b2 45 2f b2 5c 93 36 aa cc b3 0c a7 3b a5 cc 32 aa a8 66 7c be 38 18 89 22 94 8b 80 c0 75 0b 72 6d 6b d8 74 c6 38 61 8b 9b 8a 5f e4 55 86 36 55 Data Ascii: FwpcrOvjE@aNbs\|5egZi/pX0s9-PT]8$a3",x$-P/mFn8fRe#!qUO+UPZN~V$Y1v!Kg>#xw0>UK-@OL[Z} CE/\6;2f\|8"urmkt8a_U6U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49839	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:02 UTC	566	OUT	GET /wp-content/uploads/2021/01/NLI_Logo_COD_F_WH.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:03 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:02 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:18:35 GMT Accept-Ranges: bytes Content-Length: 38438 Connection: close Content-Type: image/png
2024-05-02 14:33:03 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 52 00 00 01 b9 08 06 00 00 00 84 3a 05 6f 00 00 00 09 70 48 59 73 00 00 2c 4b 00 00 2c 4b 01 a5 3d 96 a9 00 00 20 00 49 44 41 54 78 01 ec 9d 4d 72 d4 4a b7 ae f7 26 be f6 fe 8a 88 db 06 31 01 53 4c c0 c8 ad d3 03 d3 3e 11 76 79 02 60 26 80 c3 4c 00 c3 04 28 3b e2 b4 31 f4 6e cb b2 27 40 6d 26 80 70 fb 44 ec fa 18 c0 e5 be 2f 54 81 5c a4 7e 52 4a 49 a9 d4 bb 22 96 4b ca 9f 95 2b 9f ac 92 72 29 25 f9 cf 6f df be fd 21 31 12 88 91 1a 41 ef ad 3e b9 bd 29 29 12 a8 9f a1 8b 95 e2 63 d0 32 81 f7 d3 95 de c6 67 b4 52 7c dc 90 25 f6 d8 e7 7f 56 9f 09 3e 25 22 20 02 e5 04 66 28 c2 e3 8a 0b f9 08 23 eb df 22 3f 25 cd 09 cc 60 c2 34 3e 3c ce cf a1 12 11 10 01 11 10 01 11 f8 4e e0 cf 55 20 35 c5 de eb 86 4c 78 Data Ascii: PNGIHDRR:opHYs,K,K= IDATxMrJ&1SL>vy`&L(;1n'@m&pD/T\~RJI"K+r)%o!1A>))c2gR\|%V>%" f(#"?%`4><NU 5Lx
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: d0 ba 92 a2 e2 43 e8 14 ca 63 75 0c 2d 3b 76 5d a1 0c db 9e 43 e9 7f 55 79 69 28 98 1a d2 aa 24 b1 de 49 95 82 0e ca 98 be 5b d9 ef 4b dd 26 4c 3c ea da 1a 45 3d 4c ee 23 74 f4 fd 28 3a db 7f 27 f7 c0 fb 02 ff 63 6a de bf 2b f2 60 6c 04 fe fc f6 ed db d8 fa 5c a5 bf 3c 51 c7 50 5e 21 8c a0 14 de 32 b2 29 eb c9 73 8a 8c 8f d0 04 ba 80 0e 4d 26 70 38 86 b2 bf fc a4 90 81 69 82 b4 ee 33 cb 24 d0 7f 56 9f 43 ec 37 5c 97 88 80 08 38 20 10 1b 6c 24 86 b4 36 92 22 18 a5 66 85 c7 a3 65 36 61 a0 db 11 fc fe 6c f0 fd 4f 43 9a 92 3c 22 80 89 fd 25 dc 31 cd 1b 3c f2 32 28 57 78 d1 e6 3e 82 a9 34 a8 5e a9 33 de 13 50 20 e5 fd 10 c9 41 11 10 01 11 10 81 91 12 88 d1 6f d3 8a 92 02 29 8f bf 10 08 a2 8e e1 de 0b 8f 5d 0c d5 b5 4f 08 a4 ee 87 da 39 f5 cb 4f 02 b7 fc 74 4b Data Ascii: Ccu-;v]CUyi($I[K&L<E=L#t(:'cj+`l\<QP^!2)sM&p8i3$VC7\8 l$6"fe6alOC<"%1<2(Wx>4^3P Ao)]O9OtK
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: fd 93 5e 52 90 88 80 08 88 80 08 0c 89 40 95 7f 69 e2 4b 7f be c2 91 b9 2f ce c8 0f 11 10 81 76 09 84 1a 48 d5 a1 36 86 55 a9 3d bd 0e bd ce 57 43 75 44 40 04 44 40 04 7a 22 c0 3b 4c ac 2e 8e f6 e4 e7 ba d9 7d 6c 2c d7 3b fa 14 01 11 08 9b 80 02 a9 d5 f8 ae 56 a5 78 25 29 74 d1 aa 54 e8 23 ac fe 89 80 08 88 40 38 04 86 f4 7c ef 07 60 3f 0f 07 bd 7a 22 02 22 50 46 40 81 d4 4d 42 27 37 77 83 dc db c6 aa d4 6e 90 3d 53 a7 44 40 04 44 40 04 42 22 30 41 67 0e 07 d4 21 3d 1b 35 a0 c1 92 ab 22 e0 82 80 02 a9 9b 14 5f 61 77 0c ab 52 fa 27 bd 37 c7 5d 7b 22 20 02 22 20 02 fe 11 38 85 4b 7c eb ac 44 04 44 40 04 bc 24 a0 40 2a 33 2c b8 bd 6f 89 dd 93 4c 52 a8 9b 77 b0 2a 35 a4 ab 7c a1 8e 83 fa 25 02 22 20 02 22 60 26 c0 73 d4 23 73 96 b7 a9 43 ba 0d d1 5b 88 72 4c Data Ascii: ^R@iK/vH6U=WCuD@D@z";L.}l,;Vx%)tT#@8\|`?z""PF@MB'7wn=SD@D@B"0Ag!=5"_awR'7]{" " 8K\|DD@$@3,oLRw5\|%" "`&s#sC[rL
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 28 9b d0 d5 b6 6e ed eb 8a f4 00 da c1 aa 54 82 b7 32 f1 6a 42 17 27 c3 01 10 91 8b 22 20 02 22 20 02 2b 02 1f 78 8e 28 a0 71 5a 90 e7 32 6b 1b c6 b8 02 b2 74 69 34 20 5b bb e8 cb 13 e8 14 ba 65 e8 17 ef 3c 49 a0 17 99 3c b2 64 f9 07 ab cf 08 9f 9c 98 ae 85 75 c8 7d 53 18 3c 3d dd 4c 1c d8 7e 0c 7f 93 81 f9 dc a6 bb 8b 86 c6 cf 51 bf e8 82 4b 43 f3 85 d5 23 e4 a6 85 25 5a c8 54 20 d5 02 d4 81 9b e4 3d a6 0a a4 06 3e 88 72 5f 04 44 40 04 1c 12 e0 73 49 fb 05 f6 0e 91 67 9a 68 17 54 69 94 b5 8b da f3 46 16 c2 a9 1c a1 2b 31 74 07 4a 2e 0c 6e 8a 84 e3 44 7d 51 54 68 23 af cb b1 dd 68 ba d5 5d 7e af 93 56 5b 18 9e f1 65 43 97 59 bf af 0b f2 53 b4 9d 34 f4 df ba fa 2d eb 1a aa 10 34 01 5c 71 4c d1 c1 37 41 77 52 9d 13 01 11 10 01 11 b0 21 b0 8f 73 43 de 04 8b Data Ascii: (nT2jB'" " +x(qZ2kti4 [e<I<du}S<=L~QKC#%ZT =>r_D@sIghTiF+1tJ.nD}QTh#h]~V[eCYS4-4\qL7AwR!sC
2024-05-02 14:33:03 UTC	6453	IN	Data Raw: 0e 99 a2 97 0b 38 4b 11 08 c4 2e a4 68 aa ab a0 71 af 5a 58 c4 b1 13 49 bb c0 da 84 bc c9 83 7c cf 1f 2b 68 8e 40 11 f0 67 cd 35 6d 6a 40 5f 99 a0 e4 68 b3 34 e8 ae c9 44 39 c8 90 31 ef 24 02 52 40 d3 c6 21 49 b6 2f 30 38 a1 d6 fc 9e 26 74 ae b7 38 92 b0 0e a5 aa 67 18 6f 52 62 53 ea bd fb 2c 36 30 a5 d8 47 de 1b 8c a7 5c 14 07 25 c8 5c 42 e0 93 22 34 a6 8d c8 f7 4a 5d 8d 9c 18 01 9e a4 40 e5 e3 06 6a f7 25 1e 6b cf e1 61 08 86 c0 7d 0a 7e ed 14 3b 0f d1 69 bc df 10 68 b2 90 e2 80 da 57 10 d4 3a 11 03 82 94 86 38 81 91 fc dd 17 9a b6 23 32 8d 00 42 6b eb 9f a1 53 9a 38 3e 29 16 63 11 a6 4d 64 cc 08 a0 5f 1c a0 7e d2 a4 36 07 fd 8b 80 c1 e0 26 a5 98 4c af e0 ef 42 f0 99 a4 ef 15 7a 08 99 18 9c 86 08 0c 9c b7 ed 98 78 a6 d4 9f 63 d9 4f 0a 8f 44 7e 21 11 0b Data Ascii: 8K.hqZXI\|+h@g5mj@_h4D91$R@!I/08&t8goRbS,60G\%\B"4J]@j%ka}~;ihW:8#2BkS8>)cMd_~6&LBzxcOD~!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49841	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:02 UTC	566	OUT	GET /wp-content/uploads/2018/06/US-Forest-Service.svg HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:03 UTC	211	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:02 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:24:22 GMT Accept-Ranges: bytes Content-Length: 23665 Connection: close Content-Type: image/svg+xml
2024-05-02 14:33:03 UTC	7981	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 20 68 65 69 67 68 74 3d 22 31 39 38 2e 33 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 32 20 31 39 38 2e 33 39 34 37 39 22 20 77 69 64 74 68 3d 22 31 38 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3a 63 63 3d 22 68 74 74 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns="http://www.w3.org/2000/svg" xml:space="preserve" height="198.39" viewBox="0 0 182 198.39479" width="182" version="1.1" xmlns:cc="htt
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 30 2e 30 34 37 20 30 2e 32 31 33 2d 30 2e 31 31 35 2d 30 2e 30 32 36 2d 31 2e 30 37 37 20 30 2e 30 34 37 2d 32 2e 32 30 31 2d 30 2e 30 34 37 2d 33 2e 32 35 32 7a 6d 36 2e 34 34 39 20 30 2e 30 30 36 63 30 2e 33 31 33 20 30 20 30 2e 36 32 33 20 30 2e 30 35 33 20 30 2e 38 39 31 20 30 2e 31 36 20 32 2e 31 39 36 20 31 2e 37 35 33 20 31 2e 39 36 32 20 35 2e 30 37 32 20 31 2e 32 38 35 20 37 2e 35 37 2d 30 2e 35 31 35 20 31 2e 38 37 33 2d 31 2e 38 34 36 20 33 2e 39 35 34 2d 33 2e 39 32 38 20 34 2e 33 32 38 2d 30 2e 38 38 39 20 30 2e 31 38 38 2d 31 2e 35 36 37 2d 30 2e 34 34 36 2d 32 2e 30 30 39 2d 31 2e 31 32 33 2d 31 2e 34 35 32 2d 33 2e 32 39 34 2d 30 2e 36 37 37 2d 37 2e 34 35 36 20 31 2e 37 32 38 2d 31 30 2e 30 35 32 6c 31 2e 31 32 33 2d 30 2e 37 32 33 63 30 Data Ascii: 0.047 0.213-0.115-0.026-1.077 0.047-2.201-0.047-3.252zm6.449 0.006c0.313 0 0.623 0.053 0.891 0.16 2.196 1.753 1.962 5.072 1.285 7.57-0.515 1.873-1.846 3.954-3.928 4.328-0.889 0.188-1.567-0.446-2.009-1.123-1.452-3.294-0.677-7.456 1.728-10.052l1.123-0.723c0
2024-05-02 14:33:03 UTC	7684	IN	Data Raw: 36 39 6c 30 2e 31 32 37 20 31 2e 34 39 63 30 2e 31 37 35 20 30 2e 39 31 2d 30 2e 34 31 37 20 31 2e 35 37 2d 31 2e 38 32 36 20 31 2e 37 36 2d 31 2e 30 39 38 20 30 2e 31 35 2d 31 2e 37 39 39 2d 30 2e 32 36 2d 32 2e 32 34 36 2d 31 2e 33 39 6c 2d 30 2e 33 39 36 2d 31 2e 34 34 20 34 2e 33 34 31 2d 30 2e 34 32 7a 6d 33 2e 34 32 20 34 2e 32 36 6c 2d 30 2e 31 38 37 20 30 2e 31 32 63 30 2e 30 37 32 20 30 2e 31 38 2d 30 2e 30 31 36 20 30 2e 33 2d 30 2e 31 39 39 20 30 2e 34 33 2d 30 2e 31 32 34 20 30 2e 30 39 2d 30 2e 33 31 35 20 30 2e 31 37 2d 30 2e 34 30 39 20 30 2e 32 6c 2d 31 31 2e 30 37 20 34 2e 31 39 63 2d 30 2e 36 36 34 20 30 2e 32 36 2d 30 2e 38 30 35 20 30 2e 32 32 2d 30 2e 39 37 31 20 30 2e 30 35 6c 2d 30 2e 31 38 33 20 30 2e 31 33 20 31 2e 37 38 35 20 32 Data Ascii: 69l0.127 1.49c0.175 0.91-0.417 1.57-1.826 1.76-1.098 0.15-1.799-0.26-2.246-1.39l-0.396-1.44 4.341-0.42zm3.42 4.26l-0.187 0.12c0.072 0.18-0.016 0.3-0.199 0.43-0.124 0.09-0.315 0.17-0.409 0.2l-11.07 4.19c-0.664 0.26-0.805 0.22-0.971 0.05l-0.183 0.13 1.785 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49840	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:02 UTC	572	OUT	GET /wp-content/uploads/2021/11/Home-Prog-Proj-1280x914.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:03 UTC	209	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:02 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:18:08 GMT Accept-Ranges: bytes Content-Length: 438408 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:03 UTC	7983	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 21 49 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 0f 2f 00 00 01 01 00 03 00 00 00 01 08 20 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 30 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 31 3a 31 31 3a 30 32 20 31 Data Ascii: JFIF``!IExifMM*/ (1!2i$``Adobe Photoshop 23.0 (Macintosh)2021:11:02 1
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: de 01 44 af 7b a0 91 22 78 74 c1 f9 ad 4c 0e 9c 6e b1 8e b2 b0 ea c8 0d 21 dc 72 76 ea d1 bd 9e cf ce 5b 3f b2 70 0d 60 32 ba ea 3a 87 38 17 07 48 fe 4f bb 6f b7 df ff 00 a8 d4 33 e6 23 1d 17 08 93 ab cf 57 99 5d 0f 2e b2 a1 73 bb 37 e8 b1 bf e6 ab 03 a9 d7 97 6b 1a 71 a7 42 d1 b4 eb fd 9f cd 5a 4c fa bd d3 ec b6 5e e7 10 d3 1b 47 b7 77 f2 b7 3b f9 5f c9 5a 38 f8 b8 58 d5 86 d1 58 0e 1a 6e 89 f2 f7 6e 50 cf 36 3e 80 99 7d 89 1c 43 47 2a de 8a fb 06 e8 65 73 a8 61 3b bc 61 d1 f4 9b ed fd e5 2c 6e 86 ca 6c dd 7b 85 81 d3 1b 75 1f 2f fc c1 6c 38 b1 c4 ec 0d 2e 3a 9e 03 81 e4 39 c3 e9 bf fc c5 58 bd cd 64 81 5e ce ee 03 92 4e cd 1c 0e d6 ed fd c6 28 fd d9 91 bd 04 90 37 aa 7f ff d6 e9 6a fe 79 9c 7f 6f f9 bf a4 7f f0 55 72 ae 59 cf 03 e1 cf fd 5a f9 e5 25 45 Data Ascii: D{"xtLn!rv[?p`2:8HOo3#W].s7kqBZL^Gw;_Z8XXnnP6>}CG*esa;a,nl{u/l8.:9Xd^N(7jyoUrYZ%E
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 5d ef b1 b6 39 21 e7 c1 e3 72 96 a8 54 86 b9 97 56 e5 b4 59 17 c7 66 69 2c 4a c9 a8 20 52 c5 88 dc 5a d8 ee c2 9c d2 94 7d 99 ce bb 11 fe 1f fe 24 65 f9 e5 14 eb 20 74 ac f1 a4 7f 02 34 66 f2 9d c1 bf 1c 63 ab 27 8e f4 e3 d0 b8 f2 5a d9 e7 fd 4d 9c 47 d5 d9 c5 4e 7b 0d 26 6b 0c d4 93 53 c5 49 33 c7 a2 0a 54 d5 bc 8e 7b 82 6f b7 a6 2d 8e 0e 31 ad 13 9e f7 47 b0 e5 5d 63 94 d7 57 26 53 4d 5c b5 d5 89 08 92 67 a7 5d 51 a7 6b b1 1b 0b 9e d8 e4 9e 19 a5 c9 e8 bc 66 9e 83 f3 8c e2 3c bb 2a a9 ad 8c ac af 1c 2d 2c 71 8d cc 96 17 d8 0d cf 6e 30 90 83 93 a0 b9 52 03 e8 be a6 5e ab c8 a0 cc c4 62 26 71 67 4b 8b ab 0e 76 e4 6f d8 ef 86 cb 8f e3 97 13 42 56 ac 6d 2e 61 4f 14 90 c6 f2 0d 53 b9 48 c0 df 53 00 4d bf 60 70 94 c3 61 01 86 00 40 f3 5c a6 8f 39 a3 7a 3a e8 Data Ascii: ]9!rTVYfi,J RZ}$e t4fc'ZMGN{&kSI3T{o-1G]cW&SM\g]Qkf<*-,qn0R^b&qgKvoBVm.aOSHSM`pa@\9z:
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: d2 cd 96 a6 59 94 c9 57 2d 66 ab 56 bb 39 2b b0 d2 c3 51 dc 80 77 c2 e7 9f 15 56 6c 71 6f b4 25 e8 ba 49 29 74 fc 43 2f 80 2d 21 89 f8 76 b5 81 db 63 eb be 3c f8 65 9f 2a 97 45 9e 3f d1 2c d6 4c a8 e6 b4 b1 53 52 46 66 59 0c 73 10 e4 69 56 1c 9e c3 7b 6f 86 cb 92 33 74 81 14 f7 63 ec 91 64 e9 ca 59 73 ec b5 85 32 16 f0 a6 89 ce a6 78 c7 70 3b 5b 9e 71 78 49 42 36 b6 23 8a 93 a3 2b d6 df 88 f5 95 b0 51 d3 d0 d4 f8 f9 8c 66 f1 c3 0b 96 72 2e 75 6a 23 6b 10 38 e7 7c 32 cb 29 49 52 29 0c 09 26 9b 11 f4 bc f5 19 e7 55 9c ef a9 32 d9 66 8a 29 3c d4 53 1f 08 2d c1 d2 57 51 f3 ec 07 f4 c7 54 61 27 2e c5 93 49 51 a2 ea be b0 c9 28 3c 52 28 55 e4 89 8b a2 bc 64 98 39 1a 40 24 82 7d 3b 63 66 c9 0f e2 b6 4f 1c 24 f6 79 c4 b3 d2 56 c2 b9 ad 39 2d 57 53 21 8c dd 77 51 Data Ascii: YW-fV9+QwVlqo%I)tC/-!vc<e*E?,LSRFfYsiV{o3tcdYs2xp;[qxIB6#+Qfr.uj#k8\|2)IR)&U2f)<S-WQTa'.IQ(<R(Ud9@$};cfO$yV9-WS!wQ
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: cf a1 63 06 c6 72 ff 00 e2 22 8b 2e a5 49 62 a8 97 c7 0f 79 29 0c 44 5b d4 06 e3 56 fd f0 f7 82 4a c0 a1 3f 46 77 ac ff 00 f1 26 3a 8b 29 9f 2c a4 a3 9e 29 25 5b 2c da f4 14 36 f4 07 7c 2a f8 e1 b8 21 e3 8e 4d fd cf 30 cb 73 97 a4 59 67 69 5a 49 65 3a d9 9c de e6 fb 1d fb e3 cc cd 97 24 dd 59 54 97 48 4d 98 c9 57 55 3c b5 32 16 60 ee 49 76 b0 b9 e7 15 8c 64 d5 b2 a9 97 64 b9 c5 66 4d 3f 89 01 86 37 36 de 58 83 ee 0d c5 af 86 84 dc 7a 04 a3 6c 06 b2 a2 4a 8a a9 26 94 27 88 ed a9 b4 ad 81 3f 41 84 73 6d d8 52 45 94 74 93 d5 b1 11 00 2d ce a3 a6 d8 5b 6f b3 51 68 a7 94 ab 4a c8 da 10 e9 63 6b 0b fa 5f 1b 8b 5b 15 f7 47 a4 fe 1c 7e 27 e5 bd 03 94 66 11 cd 96 c5 5f 57 52 63 78 d5 d0 1d 25 78 b9 3b 7f 9c 75 c7 24 78 24 df 44 a5 19 37 48 5f d6 5f 8b 72 75 a9 58 Data Ascii: cr".Iby)D[VJ?Fw&:),)%[,6\|*!M0sYgiZIe:$YTHMWU<2`IvddfM?76XzlJ&'?AsmREt-[oQhJck_[G~'f_WRcx%x;u$x$D7H__ruX
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 39 ea 47 04 9d f6 79 7f 5b e5 95 f9 e7 4c 55 34 f9 ab 4d 5b 4d 63 34 06 22 a5 22 2d 6d 24 9b 5c ea b1 db d3 07 3c 75 f5 d0 f8 5a 4c f1 1c c3 2f af a6 9f 45 40 75 90 36 92 1c ef 73 dc 7a f1 ce 38 1d ae ce 8a 4c 22 2c de 09 28 a6 a0 ad a8 a9 3e 5b c4 e0 dc 46 f7 3b d8 f2 08 db 02 59 39 2a 32 85 0d ff 00 0f 73 ca 3a 1c c6 7c b6 ba 81 6b e0 cc a1 6a 58 c4 8f 65 8d d8 82 1e c7 6e 40 bd f1 5f 1f 2a 94 3e 3e 81 3b 4b 45 f4 b4 d5 b5 b9 73 50 7c 5d 12 d4 45 2c af 75 f2 90 a9 70 51 5b ff 00 53 d8 0d ed 8a cf 1a 92 a4 85 b6 b6 7d 95 65 ef 0b 51 bf 50 53 cb 4b 40 e8 92 34 f4 c7 5b 22 71 a8 8d f7 dc 7b 80 71 e7 e3 f1 54 24 f9 22 bf 25 c7 46 f6 87 ad a5 cb b2 cc ba 5f 1d 66 ae 86 63 05 14 bc 3d 94 d8 6b b1 b1 52 bb 10 7d 8e 3d 38 4a d7 16 4b 8b 7b 3d 2b 2e eb dc 9f 31 Data Ascii: 9Gy[LU4M[Mc4""-m$\<uZL/E@u6sz8L",(>[F;Y92s:\|kjXen@_>>;KEsP\|]E,upQ[S}eQPSK@4["q{qT$"%F_fc=kR}=8JK{=+.1
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: c0 21 b7 37 bf 6b 63 ce c1 e1 c3 0c 1c a4 0e 7b d1 cc db a8 eb 72 cc b1 f2 68 ea aa 56 94 d4 19 fc 15 61 a2 27 22 c7 4f 7b 1d ce 3a 70 de 58 d5 69 03 9d 99 b9 ea fc 0a 59 52 07 95 12 62 8b 28 27 77 ee 7e db 63 a2 30 5c ba e8 07 72 3a 09 33 0a da 78 16 a2 9e 98 bb 69 49 aa 49 11 06 02 e0 12 06 dc 63 64 c8 a2 34 51 55 5c 1a a6 90 33 c4 c4 36 90 10 92 b2 10 48 b8 3e f6 db 1a 32 b5 68 c9 94 a4 d2 c1 2d d5 16 eb b0 04 5b 4e 1e 0e 82 4a 93 34 ae a0 92 4f 84 7f 87 35 11 35 3b 04 5f 99 1b 95 fb f1 8b c6 eb 8a 14 26 9b a5 f3 9c ca 93 31 af 87 2f 99 29 b2 e8 7c 6a 87 95 0c 61 16 e0 6d 71 b9 df 8c 37 06 95 b0 50 b0 c2 3c ad ca ed 89 b9 06 28 ea c7 16 af 21 3a 81 e0 f0 70 d8 d3 7d 82 52 fd 13 14 da 8b 3b 5f d0 d8 5c df 14 aa 15 bf 60 72 9d 2e 58 6a 37 ee 47 36 c0 b4 Data Ascii: !7kc{rhVa'"O{:pXiYRb('w~c0\r:3xiIIcd4QU\36H>2h-[NJ4O55;_&1/)\|jamq7P<(!:p}R;_\`r.Xj7G6
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 2c 1a 41 95 dc 2f 97 b8 20 fc d8 b6 34 e2 b9 d6 c6 95 30 7a 2e a9 7c c7 32 6c d7 38 8a 29 21 b5 92 61 78 c1 65 bd 94 0f d5 db bf 7c 55 ad f3 6b 64 78 47 d1 af e8 3f c4 fe a4 76 9e 67 a5 86 a3 2d 33 2c 29 14 4c 7c 44 27 60 55 49 dc 6e 2f be 3b e1 25 3d 48 8b 8d 3b 4c 71 f8 99 15 67 52 74 5d 35 6e 67 2c 19 65 5d 1b 3c f4 8d 22 87 a8 92 55 e1 2e be 50 0f a0 bf 03 0e 94 21 2f ae c6 52 93 d1 e5 5d 13 d5 3d 5b d6 1f 8a b4 75 29 5b 15 36 6f 55 1b d2 99 e4 8f cb 0a ac 64 13 a6 fc 8b 5e de b8 7e 51 e2 f5 a0 b8 a5 d8 a3 f1 47 2f cc 72 2e b2 cc 28 b3 67 96 a2 a5 9b c6 f8 89 9f 53 4a 87 86 db 6e dc 76 c4 25 4d da 12 d2 d0 aa 86 76 34 e5 19 a4 4a 70 bb 10 a5 89 3d ac 07 38 e5 9c 6d d0 61 1b 7b 1b 64 d9 e6 57 90 64 b5 94 5f 03 9e c1 57 35 3b 78 ae ac b1 a3 b1 27 46 a0 Data Ascii: ,A/ 40z.\|2l8)!axe\|UkdxG?vg-3,)L\|D'`UIn/;%=H;LqgRt]5ng,e]<"U.P!/R]=[u)[6oUd^~QG/r.(gSJnv%Mv4Jp=8ma{dWd_W5;x'F
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: a4 ac ab ab ca 2b 66 ca a3 cc 08 32 f8 4d 71 23 6e 35 96 6b f9 88 e4 8f 4c 4f fd 42 ba 0f c3 17 d9 a1 e8 6c 83 a2 7a 9a ad 65 ea cc ff 00 36 ac ae 97 53 4a 50 e8 8d 2d d8 bb 5c 9b e3 a3 97 3d ad ff 00 9f ff 00 a1 37 37 1d 24 7b 27 4a e5 7d 29 0b 7c 37 4d f4 a4 30 4a b0 4e e2 a6 54 1a 4d c8 d1 e6 7b dc ed c7 6b 7b e3 4a 32 8d f2 7a fe 89 bc 8d f6 63 a8 ea f2 aa 3e af cc 2a 73 19 72 0f 1e 1d 32 a2 34 06 67 81 d8 79 88 0a 07 70 2e 3b 72 31 5e 37 0d 0b c9 fa 62 fc 9b a8 3a 32 a3 a9 66 cc 66 cc 69 f2 b6 cb ed 2d 2d 45 42 32 c9 2b 15 dc 2a da da 2f 7b 83 c8 38 46 d5 52 0f 16 b6 08 ff 00 89 1d 13 98 d1 8c ba b7 a5 a3 9e 96 19 4d 4d 2c 4a ee 52 09 af e7 20 de fa 1e c1 ad ea 4e 21 2c aa 2f 92 96 c6 fb 23 7b d0 bd 77 41 f8 80 d3 f4 f2 f4 ee 5d 0b 34 06 48 e3 3f ee Data Ascii: +f2Mq#n5kLOBlze6SJP-\=77${'J})\|7M0JNTM{k{J2zc>sr24gyp.;r1^7b:2ffi--EB2+/{8FRMM,JR N!,/#{wA]4H?
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 77 dc 8b fb e3 4d f2 8b 8f ec 2d 25 a6 69 72 9f c4 ca 9e 9c ab af 9b 2b a2 a5 8a 0c d2 8c 53 d5 52 ce a0 c2 65 b9 fc d5 4e 07 37 03 12 c3 8e 58 e0 d4 b7 fa 0f 37 d1 96 ce f2 64 a2 41 5b 42 67 9b 2d 77 31 47 58 ca 14 49 20 dd ac 07 03 d3 0b 87 33 93 71 97 63 3b ab 66 d7 f0 d7 a9 3a 72 a7 2c cd 32 3e a7 93 2d a3 4a b2 b2 c5 59 51 42 25 01 c0 b5 9a c4 10 2c 2f b7 7c 7a 38 31 42 ba b7 fe 48 4f 92 d9 a8 fc 3d fc 04 8f 31 8a 1c ee bf aa a3 86 9d 47 c4 24 79 71 bc e6 3d 44 2b 03 fa 49 fe 98 12 ff 00 6e 57 14 1f e5 ab 3c c7 ac ba 86 bb 31 ce 2b a1 cc 24 a8 a9 9a 9a 77 a6 8e 6a 89 6e e9 02 12 a2 22 17 cb ee 4f ae 0e 49 af f8 99 2e 3a 13 52 66 75 34 50 d4 47 49 53 34 70 55 28 49 e3 53 60 e0 1b 80 7d 40 3b e2 2e 4d 2a 0a 48 ea cd 3f 8f 1b a1 91 e7 66 05 19 09 d5 ab Data Ascii: wM-%ir+SReN7X7dA[Bg-w1GXI 3qc;f:r,2>-JYQB%,/\|z81BHO=1G$yq=D+InW<1+$wjn"OI.:Rfu4PGIS4pU(IS`}@;.M*H?f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49843	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:02 UTC	567	OUT	GET /wp-content/uploads/2019/08/Home-Page-FULL-RES.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:03 UTC	209	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:02 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:25:36 GMT Accept-Ranges: bytes Content-Length: 940648 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:03 UTC	7983	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 32 0a ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 05 55 08 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82C!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$U"
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 8c 3f 0c ca 70 c1 7b e0 fa 9e 9f 9d 49 4b 40 10 5a 58 da e9 f1 b4 76 96 f1 c0 8c 41 2a 83 19 e0 0f e9 53 38 26 37 0a 06 e2 a4 0c f4 ce 3b d0 68 cd 03 be b7 3c b2 7f 85 d7 13 6b ad 6c 66 92 78 3c 86 95 ee 58 e3 74 84 30 51 f9 81 f8 0a 92 e3 c2 da 96 97 e1 04 12 5d c7 65 72 81 e2 9a ee 6f f9 75 b6 dc 72 89 8e 4b 31 39 e3 93 d2 bd 40 1a f3 2f 16 cd aa 6a 5a cd cb dd 5b 4e 74 7b 19 42 bb 83 f2 a6 de bb 47 f1 39 00 f3 db 3d b1 5c 55 29 42 92 72 8c 75 66 ca 4e 7d 0e 02 ca cb 53 44 bc 83 4a 77 b7 d3 ae 24 24 dd 3a 85 b9 99 00 e1 49 ce 55 78 ce 06 3a f2 4d 75 1f 05 f5 68 74 eb fb bd 32 ea 39 05 c4 e0 05 9d b9 55 00 9c 26 7b 67 3d 3d aa 1f 07 a7 fc 24 97 63 49 8d 1a dc 6d 91 c3 27 fc b3 40 3e 5f d4 a8 ac 7d 32 eb 5e d0 75 6b e8 b4 f4 36 d3 4f 1e 1e 3f 2b 71 65 07 Data Ascii: ?p{IK@ZXvA*S8&7;h<klfx<Xt0Q]erourK19@/jZ[Nt{BG9=\U)BrufN}SDJw$$:IUx:Muht29U&{g==$cIm'@>_}2^uk6O?+qe
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 04 36 f3 cd 7a a6 87 f0 fe ff 00 44 65 89 3c 5f ab cb 64 bc 08 1f 04 81 e8 18 e4 8f c2 b2 3e 0e 68 32 5b c7 aa eb 97 0b 89 2f ee 18 a1 ff 00 64 b6 e3 fa 9a f4 93 55 4e 3c aa e8 ad 2d 66 97 dc 36 34 58 d1 51 06 15 46 00 aa 1e 24 d5 17 43 f0 fe a1 a9 36 3f d1 ad de 41 ee 71 c7 eb 8a d0 ae 2b e3 3d c3 c1 e0 0b c4 43 83 3c 91 c5 f8 16 c9 fe 55 52 76 57 25 ec 72 ff 00 b3 d6 8e cd 69 ab 78 8a e1 49 9a ee 6f 29 1c f7 03 e6 6f cc 91 f9 57 a9 6a 57 b6 70 ec b6 b8 9c 24 b3 11 e5 22 fd f2 d9 e0 81 ec 6b 9f f8 59 62 ba 5f c3 ed 29 76 95 dd 13 4e de a7 73 13 fc b1 5e 71 1f c5 3b 9d 73 5e 8e ee 7b 68 ed 9e d8 b8 b5 65 07 28 0e 70 58 1f bc 7f 2c d6 73 a8 a1 15 72 67 2b 74 3d ac 5e 88 ac a4 b8 9c 04 68 93 73 80 72 3a 67 83 e8 6b cb f5 0d 54 dc cd 24 92 37 cc c4 b1 ab 72 Data Ascii: 6zDe<_d>h2[/dUN<-f64XQF$C6?Aq+=C<URvW%rixIo)oWjWp$"kYb_)vNs^q;s^{he(pX,srg+t=^hsr:gkT$7r
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: b4 97 db fc 4c e1 49 27 f2 35 91 a7 68 ba 26 99 f0 b3 58 ba d5 ec d2 eb 57 b9 bd 36 f6 ae 8d fb f8 25 51 c0 2b fd dc 83 9c 66 ab 59 f8 b4 5e 78 12 1b 49 5c 19 6c 67 42 57 be ce 47 1f 98 fd 6b 4a d4 9c 14 6c 27 24 a2 e2 bc 8a fe 3b 8b c3 7f f0 84 78 76 6b 3b 88 bf b5 ed 2e a4 82 e6 14 52 a4 46 59 d8 33 67 a9 ce 30 7d 0e 2b b0 f1 6e 9b 61 a9 78 26 ea e6 33 70 f7 4d 6c b2 87 f3 98 ab 63 07 95 ce 31 c7 4a e4 7c 66 ba 3e bf e1 21 77 6d f6 38 b5 7b 69 a3 41 1d ba ed fb 44 24 10 5d b2 7e f8 3b 72 06 38 39 e7 3c 3f c3 5e 2e 78 74 75 d3 f5 58 f0 81 0c 41 b2 39 18 c5 55 66 dd 9a 17 33 69 9c 1e 92 66 69 d2 1f 3f cb 81 f3 bf 3d 00 1d 78 ef f4 ae e7 c2 3a 46 9f a9 47 ad 5a 6a 57 1f 65 bc b3 b7 fb 45 b9 1f 76 55 1d 7a 9e 98 21 b8 e7 19 ac ff 00 07 de da 78 5b c4 16 d7 Data Ascii: LI'5h&XW6%Q+fY^xI\lgBWGkJl'$;xvk;.RFY3g0}+nax&3pMlc1J\|f>!wm8{iAD$]~;r89<?^.xtuXA9Uf3ifi?=x:FGZjWeEvUz!x[
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: d0 f2 8a 55 4e 7f 4a c0 f1 27 c4 a1 aa e9 f6 d6 d1 44 de 65 b4 9b e3 95 94 70 38 c0 f7 e9 5c 5e a7 7d 7d aa ce f7 77 8e d2 b3 72 59 ab ae 94 1a d7 61 4a a7 34 54 52 d2 e6 3e 99 33 c7 29 8f 3c 1a ec ec 34 4b bd 5f 4c bb 48 62 33 4d 19 12 15 1c 93 c5 71 08 c6 2b c0 00 e8 df a5 7a b6 81 a7 cd 36 95 fb 99 25 86 49 76 07 64 62 0e 38 f4 f6 a7 8c 97 2c 54 8d 29 24 de a5 e3 e1 8b ad 3f 46 86 e2 e2 d9 a2 06 21 8d c3 07 a5 71 ba ac fa 9d 95 b9 48 64 26 ce 47 24 aa 0c ed 61 c7 3e 9d 6b d4 7c 47 79 6b 63 65 1d a5 bb c9 e4 ca b8 68 d9 c9 50 f8 e1 80 3d 3a 60 e3 d6 bc ba ee f2 ff 00 4b 0e 42 24 b0 3c 85 c1 3d 79 ac b0 ba cd b6 61 36 9b d3 63 00 7d ac c6 ec 91 48 f0 f5 61 b7 81 ef 53 69 af 0a 39 76 50 ce 70 13 3d 01 ad c4 d7 a0 b8 b1 16 cc 1a 3c ee 67 18 ef d8 55 23 a1 Data Ascii: UNJ'Dep8\^}}wrYaJ4TR>3)<4K_LHb3Mq+z6%Ivdb8,T)$?F!qHd&G$a>k\|GykcehP=:`KB$<=ya6c}HaSi9vPp=<gU#
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: c0 b7 1a 6e b9 e1 8b 37 6f b3 ba a1 88 92 e4 b0 ef ff 00 02 19 ad fd 03 c4 fa 7c 1a 7c 7a 7e 95 a6 cf a4 da 44 30 8a e9 cb 7a 92 c3 3c 9f 5a c1 f1 67 8a 6f ed a4 9e 08 24 77 48 76 80 e3 95 52 c0 11 cf af 0d 58 d7 cf 29 a9 fb 3a 31 72 7d fa 15 4a 0d ab 3d bb 1e 8f 6d af 41 71 6b 14 de 5c a1 9d 03 32 15 c1 43 dc 1f 71 50 cd e2 54 80 96 6b 39 da 30 3e f4 64 31 fc ab c8 74 ff 00 89 17 fa 65 a1 86 4b 0f 3c 86 ca cc 5f f3 c8 eb d6 a1 bb f1 8e af 06 96 f6 53 07 49 0e d7 8e 51 95 78 fb e3 df 35 e7 cb 33 cc 79 b9 92 56 1c 68 42 d6 d4 d4 f8 a5 e2 74 d4 af 8c 10 ea b2 47 6f 0a af 97 6e b1 ba 86 7c 12 5d 89 18 c8 e9 c6 7f ad 51 d1 7e 36 6b 56 3a 04 5a 15 86 8d a7 06 89 49 69 a5 76 20 e3 b9 1c 0c fe 35 9e be 2e 87 c4 7a 75 d5 b6 bf 02 b4 f1 c4 cd 05 d2 a7 21 bb 03 8e Data Ascii: n7o\|\|z~D0z<Zgo$wHvRX):1r}J=mAqk\2CqPTk90>d1teK<_SIQx53yVhBtGon\|]Q~6kV:ZIiv 5.zu!
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 83 2c 36 af a6 07 7f 7c 74 ab de 1e fe d0 5d 3a fe e6 cf 53 7b 70 01 13 db c8 e0 a5 c0 23 1b 42 9e ad d7 9e c0 75 e2 ba 63 49 28 5a c4 25 aa 3d 43 c3 17 1e 6b da db 42 00 55 18 03 d3 8c 7f 2a ce d5 75 38 e1 b3 d7 2c 97 69 8a de c5 63 97 23 8f 32 49 c1 fd 15 6a 4f 85 fa 95 98 d4 49 bc 93 6b 98 8a c4 bd 77 37 a0 f7 c0 35 ce 6a 52 4d fd 85 ab 6a 73 85 b7 6d 43 55 0f b6 51 8c 46 99 ed f5 70 3f 0a f3 30 f4 9a 4e fd 4a 8e c6 7e 9b 75 75 76 2d 6c ad e6 63 a2 ef 2f 70 18 06 42 e9 9d 87 07 b9 19 1e 9f 30 f4 ad 59 34 9d 32 f0 ab de da 35 cc 77 72 19 a2 2a e1 06 7a 04 1b 47 03 8e 95 9b a0 41 a6 dc ca d6 7a 45 fb ac b3 a1 94 a9 8d b6 c4 e0 b0 61 91 9e c1 48 27 8e 6a ce 84 5a de f8 48 f3 c7 7f 0c 21 ed e1 61 37 cb 14 8c 07 ce 3b 0f a8 ae ea ae 49 72 b7 6b 6c 42 d3 54 Data Ascii: ,6\|t]:S{p#BucI(Z%=CkBUu8,ic#2IjOIkw75jRMjsmCUQFp?0NJ~uuv-lc/pB0Y425wrzGAzEaH'jZH!a7;IrklBT
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: c1 66 dd b6 6c 61 97 18 18 fa 57 88 6a 4f 68 da ed ac 28 64 86 dd 5d 55 d9 be 66 55 24 02 7f 0e 6b d0 16 e2 df 47 ba 93 4a b6 90 cf 6b 6f 23 aa 5c 6d c0 95 43 1f 9b f1 aa b7 2c 2d 63 48 de da 33 aa d2 34 35 f1 2a cf 34 ca 5a 0f 31 a3 cf fb bd 7f 5e 3f 03 5c 9d e5 fd 8c 43 51 b5 d2 2c a1 96 38 57 cd 13 1f 99 dc 23 00 40 3d bb 9f 71 5d ae b9 ad c7 a6 fc 26 86 e3 4d 22 3b 9d 41 da d9 0f 4d a4 96 2c df 90 3f 9d 79 a7 82 a6 4f b4 dc db 4f 8c 49 01 51 c7 51 91 9f d2 b3 57 bd c7 39 74 5b 16 6d 3c 57 25 ed ea de b4 84 2b 20 8d 01 e0 ee cf 4f ce a0 d5 56 6b 96 81 56 16 31 ca ce d1 22 0c e0 93 96 5f fb e8 93 f8 d6 1d b4 0d 1e 97 90 e0 3c 73 60 71 d7 e7 af 46 f0 33 9b 99 a4 13 84 4b 48 51 e4 59 40 05 c4 bf 2e 14 02 79 1c 64 fd 2a aa de 52 b5 c8 8c 52 d4 ca f0 e6 95 Data Ascii: flaWjOh(d]UfU$kGJko#\mC,-cH3454Z1^?\CQ,8W#@=q]&M";AM,?yOOIQQW9t[m<W%+ OVkV1"_<s`qF3KHQY@.ydRR
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: 7d eb 8a d3 24 4d 16 fe 0d 57 4b 48 ae 03 31 30 c6 41 62 87 b8 20 fa 76 ab 77 71 e6 9b d4 27 28 a7 64 b6 2c 78 b6 f3 36 5a 7d 8a 43 14 53 2a 28 94 20 c0 ce 3b fb 93 9a cf 83 1a 74 12 a5 c2 46 37 b8 8e 20 70 c5 4e 32 48 27 a7 6f ce a5 d5 ed 35 5d 7b 53 b7 66 b4 b9 0d b8 ca 63 40 42 83 d8 9a d5 f1 1e 99 05 b5 a5 a5 e5 ec 71 4a f1 8f 2d ad 92 60 ad bc 8c e4 8c 67 b7 e9 58 ad 52 8f 71 ad 9c e5 a1 89 a6 f8 aa eb 47 bc 75 7b 64 b9 8a 6f 90 ee 03 72 e7 8c 7a 11 ec 6b 76 f2 c3 c3 57 3e 12 90 4d 01 8b 55 57 de a6 37 db df a1 53 ed e9 5c 22 4a e9 9f 39 ca 48 a4 14 38 3c f3 5b f7 fe 28 b8 f1 08 88 5d da 5a cb 7f b1 61 17 0d 84 18 1d 09 1d 33 ef 5b 4a 2e 36 b2 32 d7 64 3e cf c3 96 4f 60 97 32 49 22 e0 9c 8d c0 2f e3 59 37 97 11 4b 32 c3 03 13 6f 16 42 e4 e7 eb 50 5e Data Ascii: }$MWKH10Ab vwq'(d,x6Z}CS*( ;tF7 pN2H'o5]{Sfc@BqJ-`gXRqGu{dorzkvW>MUW7S\"J9H8<[(]Za3[J.62d>O`2I"/Y7K2oBP^
2024-05-02 14:33:03 UTC	8000	IN	Data Raw: de ef 6c 93 de dc 01 31 48 ae 00 58 54 92 70 4e 09 ce 31 d7 eb de b1 75 25 b5 bc b9 69 2c 62 9a 28 70 3f d7 b8 66 1e a4 90 3a 57 57 a1 78 16 09 a1 12 5f 4e 2e 23 dd 94 68 b2 15 c7 b1 23 38 35 67 51 f0 7c 4f 67 2a e9 2c 58 f9 98 78 1d c6 c2 07 51 9f 63 ea 6b cc af 98 a7 2e 46 28 ab ee ce 5e 0f 13 6a 9a 75 bc 76 b1 5c 93 69 02 f9 68 8a 42 e4 92 79 cf 53 c9 ab d7 3e 29 fb 4e 99 16 f5 99 67 57 da 02 48 42 32 8e e7 d4 f6 ac 89 74 9b af 21 a5 b5 12 4c b0 e5 e5 8f ca f9 62 04 e0 64 d4 31 b4 4e 82 2f 34 49 26 ed c1 13 3b 63 18 f9 b8 3d f8 fd 2b 4f ab c2 a2 bc 63 60 e4 92 e8 3f 50 d5 61 96 e1 43 42 ec 99 c9 5d d8 cf d3 d3 f9 d4 f1 34 77 5a 77 d9 ed 2d 94 6a 46 40 0b e4 e4 a6 3a 8f 4c f7 a6 35 ae 97 e5 24 a2 e2 49 e7 cb 6e 8d 53 85 03 be 69 f3 eb 7a 75 ad bc 03 4f Data Ascii: l1HXTpN1u%i,b(p?f:WWx_N.#h#85gQ\|Og*,XxQck.F(^juv\ihByS>)NgWHB2t!Lbd1N/4I&;c=+Oc`?PaCB]4wZw-jF@:L5$InSizuO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49842	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:02 UTC	565	OUT	GET /wp-content/uploads/2019/10/facebook_3225194.svg HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:03 UTC	209	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:02 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:25:06 GMT Accept-Ranges: bytes Content-Length: 680 Connection: close Content-Type: image/svg+xml
2024-05-02 14:33:03 UTC	680	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 73 74 79 6c 65 3d 22 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 65 77 20 30 20 30 20 31 30 30 30 20 31 30 30 30 3b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 30 30 20 31 30 30 30 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 09 2e 73 74 30 7b 66 69 6c Data Ascii: <?xml version="1.0" ?><svg id="Layer_1" style="enable-background:new 0 0 1000 1000;" version="1.1" viewBox="0 0 1000 1000" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><style type="text/css">.st0{fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49844	142.251.40.98	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:02 UTC	948	OUT	GET /td/ga/rul?tid=G-M1MYBR9H42&gacid=382778281.1714660381&gtm=45je44t0v889670875za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&z=1509789436 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:03 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 02-May-2024 14:48:03 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-02 14:33:03 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-05-02 14:33:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49848	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:03 UTC	777	OUT	GET /wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-load.js?ver=4761 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:03 UTC	210	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:03 GMT Server: Apache Last-Modified: Tue, 23 Apr 2024 13:08:49 GMT Accept-Ranges: bytes Content-Length: 71 Connection: close Content-Type: text/javascript
2024-05-02 14:33:03 UTC	71	IN	Data Raw: 57 50 44 2e 64 6f 6d 2e 5f 66 6e 2e 70 6c 75 67 69 6e 28 22 61 6a 61 78 73 65 61 72 63 68 6c 69 74 65 22 2c 77 69 6e 64 6f 77 2e 57 50 44 2e 61 6a 61 78 73 65 61 72 63 68 6c 69 74 65 2e 70 6c 75 67 69 6e 29 3b 0a Data Ascii: WPD.dom._fn.plugin("ajaxsearchlite",window.WPD.ajaxsearchlite.plugin);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49849	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:03 UTC	780	OUT	GET /wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-wrapper.js?ver=4761 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:03 UTC	212	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:03 GMT Server: Apache Last-Modified: Tue, 23 Apr 2024 13:08:49 GMT Accept-Ranges: bytes Content-Length: 5294 Connection: close Content-Type: text/javascript
2024-05-02 14:33:03 UTC	5294	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 41 53 4c 5f 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 64 3d 57 50 44 2e 64 6f 6d 3b 77 69 6e 64 6f 77 2e 41 53 4c 2e 69 6e 73 74 61 6e 63 65 73 3d 7b 69 6e 73 74 61 6e 63 65 73 3a 5b 5d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 74 68 69 73 2e 63 6c 65 61 6e 28 29 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 62 7c 7c 30 3d 3d 62 29 72 65 74 75 72 6e 20 74 68 69 73 2e 69 6e 73 74 61 6e 63 65 73 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 61 29 7b 61 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 74 68 69 73 2e 69 6e 73 74 61 6e 63 65 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 74 68 69 73 2e 69 6e 73 74 61 6e 63 65 73 5b 63 5d 2e 6f 2e 69 Data Ascii: window._ASL_load=function(){let d=WPD.dom;window.ASL.instances={instances:[],get:function(b,a){this.clean();if("undefined"===typeof b\|\|0==b)return this.instances;if("undefined"===typeof a){a=[];for(var c=0;c<this.instances.length;c++)this.instances[c].o.i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49850	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:03 UTC	798	OUT	GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.25.0 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:03 UTC	212	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:03 GMT Server: Apache Last-Modified: Sat, 20 Apr 2024 13:43:59 GMT Accept-Ranges: bytes Content-Length: 3349 Connection: close Content-Type: text/javascript
2024-05-02 14:33:03 UTC	3349	IN	Data Raw: 2f 2a 6a 73 68 69 6e 74 20 62 72 6f 77 73 65 72 3a 74 72 75 65 20 2a 2f 0a 2f 2a 21 0a 2a 20 46 69 74 56 69 64 73 20 31 2e 31 0a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2c 20 43 68 72 69 73 20 43 6f 79 69 65 72 20 2d 20 68 74 74 70 3a 2f 2f 63 73 73 2d 74 72 69 63 6b 73 2e 63 6f 6d 20 2b 20 44 61 76 65 20 52 75 70 65 72 74 20 2d 20 68 74 74 70 3a 2f 2f 64 61 76 65 72 75 70 65 72 74 2e 63 6f 6d 0a 2a 20 43 72 65 64 69 74 20 74 6f 20 54 68 69 65 72 72 79 20 4b 6f 62 6c 65 6e 74 7a 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 6c 69 73 74 61 70 61 72 74 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 73 2f 63 72 65 61 74 69 6e 67 2d 69 6e 74 72 69 6e 73 69 63 2d 72 61 74 69 6f 73 2d 66 6f 72 2d 76 69 64 65 6f 2f 0a 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 Data Ascii: /jshint browser:true //! FitVids 1.1** Copyright 2013, Chris Coyier - http://css-tricks.com + Dave Rupert - http://daverupert.com* Credit to Thierry Koblentz - http://www.alistapart.com/articles/creating-intrinsic-ratios-for-video/* Released und

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49851	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:03 UTC	797	OUT	GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.mobile.js?ver=4.25.0 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:03 UTC	212	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:03 GMT Server: Apache Last-Modified: Sat, 20 Apr 2024 13:43:59 GMT Accept-Ranges: bytes Content-Length: 7960 Connection: close Content-Type: text/javascript
2024-05-02 14:33:03 UTC	7960	IN	Data Raw: 2f 2a 21 0a 2a 20 6a 51 75 65 72 79 20 4d 6f 62 69 6c 65 20 76 31 2e 34 2e 35 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 30 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 0a 2a 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 2a 0a 2a 20 4d 6f 64 69 66 69 65 64 20 74 6f 20 61 64 61 70 74 20 74 68 65 20 6c 61 74 65 73 74 20 6a 51 75 65 72 79 20 76 65 72 73 69 6f 6e 20 28 76 33 20 61 62 6f 76 65 29 20 69 6e 63 6c 75 64 65 64 20 6f 6e 20 57 6f 72 64 50 72 65 73 73 20 35 2e 36 3a 0a 2a 20 2d 20 28 32 30 32 30 2d 31 32 2d 31 31 29 20 2d 20 54 72 79 20 74 6f 20 61 63 63 65 73 73 20 60 2e 63 6f 6e 63 61 74 60 20 6f 66 20 75 6e 64 65 66 69 6e 65 64 20 60 24 2e 65 76 65 6e 74 2e 70 72 6f 70 73 60 20 2d 20 Data Ascii: /! jQuery Mobile v1.4.5* Copyright 2010, 2014 jQuery Foundation, Inc.* jquery.org/license** Modified to adapt the latest jQuery version (v3 above) included on WordPress 5.6:* - (2020-12-11) - Try to access `.concat` of undefined `$.event.props` -

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49852	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:03 UTC	796	OUT	GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/easypiechart.js?ver=4.25.0 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:03 UTC	212	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:03 GMT Server: Apache Last-Modified: Sat, 20 Apr 2024 13:43:59 GMT Accept-Ranges: bytes Content-Length: 9318 Connection: close Content-Type: text/javascript
2024-05-02 14:33:03 UTC	7980	IN	Data Raw: 2f 2a 21 0a 2a 20 65 61 73 79 50 69 65 43 68 61 72 74 0a 2a 20 4c 69 67 68 74 77 65 69 67 68 74 20 70 6c 75 67 69 6e 20 74 6f 20 72 65 6e 64 65 72 20 73 69 6d 70 6c 65 2c 20 61 6e 69 6d 61 74 65 64 20 61 6e 64 20 72 65 74 69 6e 61 20 6f 70 74 69 6d 69 7a 65 64 20 70 69 65 20 63 68 61 72 74 73 0a 2a 0a 2a 20 40 61 75 74 68 6f 72 20 52 6f 62 65 72 74 20 46 6c 65 69 73 63 68 6d 61 6e 6e 20 3c 72 65 6e 64 72 6f 38 37 40 67 6d 61 69 6c 2e 63 6f 6d 3e 20 28 68 74 74 70 3a 2f 2f 72 6f 62 65 72 74 2d 66 6c 65 69 73 63 68 6d 61 6e 6e 2e 64 65 29 0a 2a 20 40 76 65 72 73 69 6f 6e 20 32 2e 31 2e 35 0a 2a 0a 2a 20 4d 6f 64 69 66 69 65 64 20 74 6f 20 61 64 61 70 74 20 74 68 65 20 6c 61 74 65 73 74 20 6a 51 75 65 72 79 20 76 65 72 73 69 6f 6e 20 28 76 33 20 61 62 6f 76 Data Ascii: /! easyPieChart* Lightweight plugin to render simple, animated and retina optimized pie charts** @author Robert Fleischmann <rendro87@gmail.com> (http://robert-fleischmann.de)* @version 2.1.5** Modified to adapt the latest jQuery version (v3 abov
2024-05-02 14:33:03 UTC	1338	IN	Data Raw: 6c 2e 64 61 74 61 73 65 74 20 26 26 20 65 6c 2e 64 61 74 61 73 65 74 2e 70 65 72 63 65 6e 74 29 20 7b 0a 09 09 09 74 68 69 73 2e 75 70 64 61 74 65 28 70 61 72 73 65 46 6c 6f 61 74 28 65 6c 2e 64 61 74 61 73 65 74 2e 70 65 72 63 65 6e 74 29 29 3b 0a 09 09 7d 20 65 6c 73 65 20 69 66 20 28 65 6c 2e 67 65 74 41 74 74 72 69 62 75 74 65 20 26 26 20 65 6c 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 70 65 72 63 65 6e 74 27 29 29 20 7b 0a 09 09 09 74 68 69 73 2e 75 70 64 61 74 65 28 70 61 72 73 65 46 6c 6f 61 74 28 65 6c 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 70 65 72 63 65 6e 74 27 29 29 29 3b 0a 09 09 7d 0a 09 7d 2e 62 69 6e 64 28 74 68 69 73 29 3b 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 55 70 64 61 74 65 20 74 68 65 20 76 61 6c 75 Data Ascii: l.dataset && el.dataset.percent) {this.update(parseFloat(el.dataset.percent));} else if (el.getAttribute && el.getAttribute('data-percent')) {this.update(parseFloat(el.getAttribute('data-percent')));}}.bind(this);/** * Update the valu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49853	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:03 UTC	794	OUT	GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/salvattore.js?ver=4.25.0 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:03 UTC	212	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:03 GMT Server: Apache Last-Modified: Sat, 20 Apr 2024 13:43:59 GMT Accept-Ranges: bytes Content-Length: 8574 Connection: close Content-Type: text/javascript
2024-05-02 14:33:03 UTC	7980	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 61 6c 76 61 74 74 6f 72 65 20 31 2e 30 2e 35 20 62 79 20 40 72 6e 6d 70 20 61 6e 64 20 40 70 70 6f 6c 64 0a 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 72 6e 6d 70 2f 73 61 6c 76 61 74 74 6f 72 65 0a 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 2d 32 30 31 34 20 52 6f 6c 61 6e 64 6f 20 4d 75 72 69 6c 6c 6f 20 61 6e 64 20 47 69 6f 72 67 69 6f 20 4c 65 76 65 72 6f 6e 69 0a 2a 2f 0a 0a 2f 2a 0a 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 Data Ascii: /! Salvattore 1.0.5 by @rnmp and @ppold* https://github.com/rnmp/salvattore* Licensed under the MIT license.* Copyright (c) 2013-2014 Rolando Murillo and Giorgio Leveroni//Permission is hereby granted, free of charge, to any person obtaining
2024-05-02 14:33:03 UTC	594	IN	Data Raw: 63 6f 6c 75 6d 6e 73 5d 3a 3a 62 65 66 6f 72 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 70 78 3b 7d 22 2c 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 3b 76 61 72 20 72 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 64 61 74 61 2d 63 6f 6c 75 6d 6e 73 5d 22 29 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 72 2c 6e 2e 72 65 67 69 73 74 65 72 47 72 69 64 29 2c 6e 2e 73 63 61 6e 4d 65 64 69 61 51 75 65 72 69 65 73 28 29 7d 2c 6e 2e 69 6e 69 74 28 29 2c 7b 61 70 70 65 6e 64 45 6c 65 6d 65 6e 74 73 3a 6e 2e 61 70 70 65 6e 64 45 6c 65 6d 65 6e 74 73 2c 70 72 65 70 65 6e 64 45 6c Data Ascii: columns]::before{visibility:hidden;position:absolute;font-size:1px;}",t.head.appendChild(e);var r=t.querySelectorAll("[data-columns]");Array.prototype.forEach.call(r,n.registerGrid),n.scanMediaQueries()},n.init(),{appendElements:n.appendElements,prependEl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49854	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:03 UTC	774	OUT	GET /wp-content/plugins/dg-blog-carousel/scripts/frontend-bundle.min.js?ver=1.0.12 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:03 UTC	212	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:03 GMT Server: Apache Last-Modified: Thu, 19 Nov 2020 00:56:09 GMT Accept-Ranges: bytes Content-Length: 3949 Connection: close Content-Type: text/javascript
2024-05-02 14:33:03 UTC	3949	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 6e 2e 6c 3d 21 30 2c 6e 2e 65 78 70 6f 72 74 73 7d 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6f 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c Data Ascii: !function(e){var t={};function o(r){if(t[r])return t[r].exports;var n=t[r]={i:r,l:!1,exports:{}};return e[r].call(n.exports,n,n.exports,o),n.l=!0,n.exports}o.m=e,o.c=t,o.d=function(e,t,r){o.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerable:!0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49855	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:03 UTC	769	OUT	GET /wp-content/plugins/dg-carousel/scripts/frontend-bundle.min.js?ver=2.0.26 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:03 UTC	212	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:03 GMT Server: Apache Last-Modified: Wed, 07 Sep 2022 13:43:26 GMT Accept-Ranges: bytes Content-Length: 9646 Connection: close Content-Type: text/javascript
2024-05-02 14:33:03 UTC	7980	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 69 66 28 74 5b 61 5d 29 72 65 74 75 72 6e 20 74 5b 61 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 74 5b 61 5d 3d 7b 69 3a 61 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 61 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 6e 2e 6c 3d 21 30 2c 6e 2e 65 78 70 6f 72 74 73 7d 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 6f 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c Data Ascii: !function(e){var t={};function o(a){if(t[a])return t[a].exports;var n=t[a]={i:a,l:!1,exports:{}};return e[a].call(n.exports,n,n.exports,o),n.l=!0,n.exports}o.m=e,o.c=t,o.d=function(e,t,a){o.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerable:!0,
2024-05-02 14:33:03 UTC	1666	IN	Data Raw: 61 63 65 42 65 74 77 65 65 6e 3a 6b 7d 7d 2c 73 69 6d 75 6c 61 74 65 54 6f 75 63 68 3a 22 6f 6e 22 21 3d 3d 63 2e 73 69 6d 75 6c 61 74 65 74 6f 75 63 68 2c 61 6c 6c 6f 77 54 6f 75 63 68 4d 6f 76 65 3a 22 6f 6e 22 21 3d 3d 63 2e 61 6c 6c 6f 77 74 6f 75 63 68 6d 6f 76 65 7d 29 3b 69 66 28 22 6f 6e 22 3d 3d 3d 63 2e 68 61 73 68 4e 61 76 69 67 61 74 69 6f 6e 26 26 45 2e 73 6c 69 64 65 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6f 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 64 69 63 61 2d 69 74 65 6d 22 29 2e 64 61 74 61 73 65 74 2e 68 61 73 68 3b 74 2e 64 61 74 61 73 65 74 2e 68 61 73 68 3d 6f 7d 29 2c 22 6f 6e 22 3d 3d 4e 26 26 22 6f 6e 22 3d 3d 75 29 7b 45 2e 66 72 65 65 4d 6f 64 65 3d 21 30 2c 45 2e 61 75 74 6f Data Ascii: aceBetween:k}},simulateTouch:"on"!==c.simulatetouch,allowTouchMove:"on"!==c.allowtouchmove});if("on"===c.hashNavigation&&E.slides.each(function(e,t){var o=t.querySelector(".dica-item").dataset.hash;t.dataset.hash=o}),"on"==N&&"on"==u){E.freeMode=!0,E.auto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49856	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:03 UTC	798	OUT	GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/magnific-popup.js?ver=4.25.0 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:03 UTC	213	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:03 GMT Server: Apache Last-Modified: Sat, 20 Apr 2024 13:43:59 GMT Accept-Ranges: bytes Content-Length: 22786 Connection: close Content-Type: text/javascript
2024-05-02 14:33:03 UTC	7979	IN	Data Raw: 2f 2a 21 0a 2a 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 76 31 2e 30 2e 31 20 62 79 20 44 6d 69 74 72 79 20 53 65 6d 65 6e 6f 76 0a 2a 20 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4d 49 54 29 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 2d 32 30 31 35 20 44 6d 69 74 72 79 20 53 65 6d 65 6e 6f 76 2c 20 68 74 74 70 3a 2f 2f 64 69 6d 73 65 6d 65 6e 6f 76 2e 63 6f 6d 0a 2a 20 68 74 74 70 3a 2f 2f 62 69 74 2e 6c 79 2f 6d 61 67 6e 69 66 69 63 2d 70 6f 70 75 70 23 62 75 69 6c 64 3d 69 6e 6c 69 6e 65 2b 69 6d 61 67 65 2b 61 6a 61 78 2b 69 66 72 61 6d 65 2b 67 61 6c 6c 65 72 79 2b 72 65 74 69 6e 61 2b 69 6d 61 67 65 7a 6f 6f 6d 2b 66 61 73 74 63 6c 69 63 6b 0a 2a 0a 2a 20 4d 6f 64 69 66 69 65 64 20 74 6f 20 61 64 61 70 74 20 74 68 Data Ascii: /! Magnific Popup v1.0.1 by Dmitry Semenov* The MIT License (MIT)* Copyright (c) 2014-2015 Dmitry Semenov, http://dimsemenov.com* http://bit.ly/magnific-popup#build=inline+image+ajax+iframe+gallery+retina+imagezoom+fastclick** Modified to adapt th
2024-05-02 14:33:04 UTC	8000	IN	Data Raw: 6c 65 6d 65 6e 74 50 61 72 73 65 22 2c 65 29 2c 62 2e 69 74 65 6d 73 5b 63 5d 7d 2c 61 64 64 47 72 6f 75 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 2e 6d 66 70 45 6c 3d 74 68 69 73 2c 62 2e 5f 6f 70 65 6e 43 6c 69 63 6b 28 64 2c 61 2c 63 29 7d 3b 63 7c 7c 28 63 3d 7b 7d 29 3b 76 61 72 20 65 3d 22 63 6c 69 63 6b 2e 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 22 3b 63 2e 6d 61 69 6e 45 6c 3d 61 2c 63 2e 69 74 65 6d 73 3f 28 63 2e 69 73 4f 62 6a 3d 21 30 2c 61 2e 6f 66 66 28 65 29 2e 6f 6e 28 65 2c 64 29 29 3a 28 63 2e 69 73 4f 62 6a 3d 21 31 2c 63 2e 64 65 6c 65 67 61 74 65 3f 61 2e 6f 66 66 28 65 29 2e 6f 6e 28 65 2c 63 2e 64 65 6c 65 67 61 74 65 2c 64 29 3a 28 63 2e 69 74 65 6d 73 3d 61 2c 61 2e 6f Data Ascii: lementParse",e),b.items[c]},addGroup:function(a,c){var d=function(d){d.mfpEl=this,b._openClick(d,a,c)};c\|\|(c={});var e="click.magnificPopup";c.mainEl=a,c.items?(c.isObj=!0,a.off(e).on(e,d)):(c.isObj=!1,c.delegate?a.off(e).on(e,c.delegate,d):(c.items=a,a.o
2024-05-02 14:33:04 UTC	6807	IN	Data Raw: 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 22 29 2e 73 74 79 6c 65 2e 4d 6f 7a 54 72 61 6e 73 66 6f 72 6d 29 2c 4e 7d 3b 61 2e 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 2e 72 65 67 69 73 74 65 72 4d 6f 64 75 6c 65 28 22 7a 6f 6f 6d 22 2c 7b 6f 70 74 69 6f 6e 73 3a 7b 65 6e 61 62 6c 65 64 3a 21 31 2c 65 61 73 69 6e 67 3a 22 65 61 73 65 2d 69 6e 2d 6f 75 74 22 2c 64 75 72 61 74 69 6f 6e 3a 33 30 30 2c 6f 70 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 69 73 28 22 69 6d 67 22 29 3f 61 3a 61 2e 66 69 6e 64 28 22 69 6d 67 22 29 7d 7d 2c 70 72 6f 74 6f 3a 7b 69 6e 69 74 5a 6f 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 63 3d 62 2e 73 74 2e 7a 6f 6f 6d 2c 64 3d 22 2e 7a 6f 6f 6d 22 3b 69 66 28 63 2e 65 6e Data Ascii: t.createElement("p").style.MozTransform),N};a.magnificPopup.registerModule("zoom",{options:{enabled:!1,easing:"ease-in-out",duration:300,opener:function(a){return a.is("img")?a:a.find("img")}},proto:{initZoom:function(){var a,c=b.st.zoom,d=".zoom";if(c.en

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49859	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:03 UTC	754	OUT	GET /wp-content/themes/Divi/core/admin/js/common.js?ver=4.25.0 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:04 UTC	212	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:04 GMT Server: Apache Last-Modified: Sat, 20 Apr 2024 13:43:59 GMT Accept-Ranges: bytes Content-Length: 1343 Connection: close Content-Type: text/javascript
2024-05-02 14:33:04 UTC	1343	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 09 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 76 61 72 20 75 73 65 72 5f 61 67 65 6e 74 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3b 0a 09 09 76 61 72 20 69 73 5f 6f 70 65 72 61 5f 65 64 67 65 3b 0a 09 09 76 61 72 20 62 72 6f 77 73 65 72 20 3d 20 75 73 65 72 5f 61 67 65 6e 74 2e 6d 61 74 63 68 28 2f 28 6f 70 65 72 61 7c 63 68 72 6f 6d 65 7c 73 61 66 61 72 69 7c 66 69 72 65 66 6f 78 7c 6d 73 69 65 7c 74 72 69 64 65 6e 74 28 3f 3d 5c 2f 29 29 2f 69 29 20 7c 7c 20 5b 5d 3b 0a 09 09 76 61 72 20 62 72 6f 77 73 65 72 5f 6e 61 6d 65 20 3d 20 27 27 3b 0a 09 09 76 61 72 20 62 72 6f 77 73 65 72 5f 63 6c 61 73 73 20 3d 20 27 27 3b 0a 0a 09 09 69 66 20 28 20 2f 74 72 69 64 65 6e 74 2f 69 2e 74 65 Data Ascii: (function($){$(function(){var user_agent = navigator.userAgent;var is_opera_edge;var browser = user_agent.match(/(opera\|chrome\|safari\|firefox\|msie\|trident(?=\/))/i) \|\| [];var browser_name = '';var browser_class = '';if ( /trident/i.te

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49857	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:03 UTC	751	OUT	GET /wp-content/uploads/wtfdivi/wp_footer.js?ver=1635256086 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:04 UTC	211	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:04 GMT Server: Apache Last-Modified: Thu, 29 Feb 2024 19:22:48 GMT Accept-Ranges: bytes Content-Length: 236 Connection: close Content-Type: text/javascript
2024-05-02 14:33:04 UTC	236	IN	Data Raw: 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 24 28 27 23 66 6f 6f 74 65 72 2d 69 6e 66 6f 27 29 2e 68 74 6d 6c 28 22 26 63 6f 70 79 3b 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 64 69 76 69 62 6f 6f 73 74 65 72 5f 79 65 61 72 5c 22 3e 3c 5c 2f 73 70 61 6e 3e 3c 73 63 72 69 70 74 3e 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 24 28 5c 22 2e 64 69 76 69 62 6f 6f 73 74 65 72 5f 79 65 61 72 5c 22 29 2e 74 65 78 74 28 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 29 3b 7d 29 3b 3c 5c 2f 73 63 72 69 70 74 3e 20 4e 43 20 53 74 61 74 65 20 55 6e 69 76 65 72 73 69 74 79 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 22 29 3b 7d 29 3b Data Ascii: jQuery(function($){$('#footer-info').html("© <span class=\"divibooster_year\"><\/span><script>jQuery(function($){$(\".divibooster_year\").text(new Date().getFullYear());});<\/script> NC State University. All rights reserved. ");});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49860	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:04 UTC	766	OUT	GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:04 UTC	214	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:04 GMT Server: Apache Last-Modified: Thu, 03 Nov 2022 17:52:47 GMT Accept-Ranges: bytes Content-Length: 158005 Connection: close Content-Type: text/javascript
2024-05-02 14:33:04 UTC	7978	IN	Data Raw: 2f 2a 21 0a 20 2a 20 4d 65 64 69 61 45 6c 65 6d 65 6e 74 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 65 6c 65 6d 65 6e 74 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 57 72 61 70 70 65 72 20 74 68 61 74 20 6d 69 6d 69 63 73 20 6e 61 74 69 76 65 20 48 54 4d 4c 35 20 4d 65 64 69 61 45 6c 65 6d 65 6e 74 20 28 61 75 64 69 6f 20 61 6e 64 20 76 69 64 65 6f 29 0a 20 2a 20 75 73 69 6e 67 20 61 20 76 61 72 69 65 74 79 20 6f 66 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 28 70 75 72 65 20 4a 61 76 61 53 63 72 69 70 74 2c 20 46 6c 61 73 68 2c 20 69 66 72 61 6d 65 29 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 30 2d 32 30 31 37 2c 20 4a 6f 68 6e 20 44 79 65 72 20 28 68 74 74 70 3a 2f 2f 6a 2e 68 6e 2f 29 0a 20 2a 20 4c 69 63 65 6e Data Ascii: /! MediaElement.js * http://www.mediaelementjs.com/ * * Wrapper that mimics native HTML5 MediaElement (audio and video) * using a variety of technologies (pure JavaScript, Flash, iframe) * * Copyright 2010-2017, John Dyer (http://j.hn/) * Licen
2024-05-02 14:33:04 UTC	8000	IN	Data Raw: 65 6e 74 73 5b 30 5d 29 25 31 30 30 29 3f 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 3d 32 3f 76 6f 69 64 20 30 3a 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 3d 33 3f 76 6f 69 64 20 30 3a 61 72 67 75 6d 65 6e 74 73 5b 33 5d 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 3d 30 3f 76 6f 69 64 20 30 3a 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 25 31 30 30 3d 3d 31 3f 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 3d 32 3f 76 6f 69 64 20 30 3a 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 3d 30 3f 76 6f 69 64 20 30 3a 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 25 31 30 30 3d 3d 32 3f 61 72 67 75 6d Data Ascii: ents[0])%100)?arguments.length<=2?void 0:arguments[2]:arguments.length<=3?void 0:arguments[3]},function(){return(arguments.length<=0?void 0:arguments[0])%100==1?arguments.length<=2?void 0:arguments[2]:(arguments.length<=0?void 0:arguments[0])%100==2?argum
2024-05-02 14:33:04 UTC	8000	IN	Data Raw: 72 6e 28 69 3d 72 2e 63 72 65 61 74 65 28 6e 2e 6d 65 64 69 61 45 6c 65 6d 65 6e 74 2c 75 2c 74 29 29 2e 6e 61 6d 65 3d 65 2c 6e 2e 6d 65 64 69 61 45 6c 65 6d 65 6e 74 2e 72 65 6e 64 65 72 65 72 73 5b 72 2e 6e 61 6d 65 5d 3d 69 2c 6e 2e 6d 65 64 69 61 45 6c 65 6d 65 6e 74 2e 72 65 6e 64 65 72 65 72 3d 69 2c 6e 2e 6d 65 64 69 61 45 6c 65 6d 65 6e 74 2e 72 65 6e 64 65 72 65 72 4e 61 6d 65 3d 65 2c 69 2e 73 68 6f 77 28 29 2c 21 30 7d 7d 72 65 74 75 72 6e 21 31 7d 2c 66 2e 6d 65 64 69 61 45 6c 65 6d 65 6e 74 2e 73 65 74 53 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 6f 69 64 20 30 21 3d 3d 66 2e 6d 65 64 69 61 45 6c 65 6d 65 6e 74 2e 72 65 6e 64 65 72 65 72 26 26 6e 75 6c 6c 21 3d 3d 66 2e 6d 65 64 69 61 45 6c 65 6d 65 6e 74 2e 72 65 6e 64 65 72 Data Ascii: rn(i=r.create(n.mediaElement,u,t)).name=e,n.mediaElement.renderers[r.name]=i,n.mediaElement.renderer=i,n.mediaElement.rendererName=e,i.show(),!0}}return!1},f.mediaElement.setSize=function(e,t){void 0!==f.mediaElement.renderer&&null!==f.mediaElement.render
2024-05-02 14:33:04 UTC	8000	IN	Data Raw: 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 6e 29 26 26 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 74 2e 64 65 66 61 75 6c 74 3d 65 2c 74 7d 7d 28 65 28 32 35 29 29 2c 68 3d 65 28 32 37 29 2c 76 3d 65 28 32 36 29 2c 67 3d 65 28 32 38 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 6f 2e 63 6f 6e 66 69 67 2c 7b 75 73 65 50 6c 75 67 69 6e 46 75 6c 6c 53 63 72 65 65 6e 3a 21 30 2c 66 75 6c 6c 73 63 72 65 65 6e 54 65 78 74 3a 6e 75 6c 6c 2c 75 73 65 46 61 6b 65 46 75 6c 6c 73 63 72 65 65 6e 3a 21 31 7d 29 2c 4f 62 6a 65 63 74 2e 61 73 Data Ascii: ct.prototype.hasOwnProperty.call(e,n)&&(t[n]=e[n]);return t.default=e,t}}(e(25)),h=e(27),v=e(26),g=e(28);function a(e){return e&&e.__esModule?e:{default:e}}Object.assign(o.config,{usePluginFullScreen:!0,fullscreenText:null,useFakeFullscreen:!1}),Object.as
2024-05-02 14:33:04 UTC	8000	IN	Data Raw: 36 3a 32 36 2c 32 37 3a 32 37 2c 35 3a 35 7d 5d 2c 31 31 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 70 3d 72 28 65 28 32 29 29 2c 6f 3d 65 28 31 36 29 2c 69 3d 72 28 6f 29 2c 6d 3d 72 28 65 28 35 29 29 2c 79 3d 65 28 32 35 29 2c 45 3d 65 28 33 30 29 2c 62 3d 65 28 32 36 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 6f 2e 63 6f 6e 66 69 67 2c 7b 65 6e 61 62 6c 65 50 72 6f 67 72 65 73 73 54 6f 6f 6c 74 69 70 3a 21 30 2c 75 73 65 53 6d 6f 6f 74 68 48 6f 76 65 72 3a 21 30 2c 66 6f 72 63 65 4c 69 76 65 3a 21 31 7d 29 2c 4f 62 6a 65 63 74 2e 61 73 Data Ascii: 6:26,27:27,5:5}],11:[function(e,t,n){"use strict";var p=r(e(2)),o=e(16),i=r(o),m=r(e(5)),y=e(25),E=e(30),b=e(26);function r(e){return e&&e.__esModule?e:{default:e}}Object.assign(o.config,{enableProgressTooltip:!0,useSmoothHover:!0,forceLive:!1}),Object.as
2024-05-02 14:33:04 UTC	8000	IN	Data Raw: 20 61 3d 70 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 29 3b 61 2e 63 6c 61 73 73 4e 61 6d 65 3d 67 2e 6f 70 74 69 6f 6e 73 2e 63 6c 61 73 73 50 72 65 66 69 78 2b 22 62 72 6f 61 64 63 61 73 74 22 2c 61 2e 69 6e 6e 65 72 54 65 78 74 3d 6d 2e 64 65 66 61 75 6c 74 2e 74 28 22 6d 65 6a 73 2e 6c 69 76 65 2d 62 72 6f 61 64 63 61 73 74 22 29 2c 67 2e 73 6c 69 64 65 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 67 2e 72 61 69 6c 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 65 6c 73 65 20 72 26 26 28 67 2e 73 6c 69 64 65 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 22 2c 72 2e 72 65 6d 6f 76 65 28 29 29 2c 68 2e 73 65 74 50 72 6f 67 72 65 73 73 52 61 69 6c 28 65 29 2c 67 2e 66 6f 72 63 Data Ascii: a=p.default.createElement("span");a.className=g.options.classPrefix+"broadcast",a.innerText=m.default.t("mejs.live-broadcast"),g.slider.style.display="none",g.rail.appendChild(a)}}else r&&(g.slider.style.display="",r.remove()),h.setProgressRail(e),g.forc
2024-05-02 14:33:04 UTC	8000	IN	Data Raw: 2d 6c 61 79 65 72 20 22 2b 69 2e 6f 70 74 69 6f 6e 73 2e 63 6c 61 73 73 50 72 65 66 69 78 2b 22 6c 61 79 65 72 22 2c 6f 2e 63 61 70 74 69 6f 6e 73 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2b 69 2e 6f 70 74 69 6f 6e 73 2e 63 6c 61 73 73 50 72 65 66 69 78 2b 22 63 61 70 74 69 6f 6e 73 2d 70 6f 73 69 74 69 6f 6e 20 22 2b 69 2e 6f 70 74 69 6f 6e 73 2e 63 6c 61 73 73 50 72 65 66 69 78 2b 27 63 61 70 74 69 6f 6e 73 2d 70 6f 73 69 74 69 6f 6e 2d 68 6f 76 65 72 22 27 2b 72 2b 27 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 27 2b 69 2e 6f 70 74 69 6f 6e 73 2e 63 6c 61 73 73 50 72 65 66 69 78 2b 27 63 61 70 74 69 6f 6e 73 2d 74 65 78 74 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 27 2c 6f 2e 63 61 70 74 69 6f 6e 73 2e 73 74 79 6c 65 Data Ascii: -layer "+i.options.classPrefix+"layer",o.captions.innerHTML='<div class="'+i.options.classPrefix+"captions-position "+i.options.classPrefix+'captions-position-hover"'+r+'><span class="'+i.options.classPrefix+'captions-text"></span></div>',o.captions.style
2024-05-02 14:33:04 UTC	8000	IN	Data Raw: 76 65 6e 74 29 28 22 63 6c 69 63 6b 22 2c 6f 29 3b 6f 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6c 29 7d 7d 7d 2c 72 65 6d 6f 76 65 54 72 61 63 6b 42 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 4c 2e 64 65 66 61 75 6c 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 22 2b 65 29 3b 69 66 28 74 29 7b 76 61 72 20 6e 3d 74 2e 63 6c 6f 73 65 73 74 28 22 6c 69 22 29 3b 6e 26 26 6e 2e 72 65 6d 6f 76 65 28 29 7d 7d 2c 61 64 64 54 72 61 63 6b 42 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 74 68 69 73 3b 22 22 3d 3d 3d 6e 26 26 28 6e 3d 46 2e 64 65 66 61 75 6c 74 2e 74 28 64 2e 64 65 66 61 75 6c 74 2e 6c 61 6e 67 75 61 67 65 2e 63 6f 64 65 73 5b 74 5d 29 7c 7c 74 29 2c 6f 2e 63 61 70 74 69 Data Ascii: vent)("click",o);o.dispatchEvent(l)}}},removeTrackButton:function(e){var t=L.default.getElementById(""+e);if(t){var n=t.closest("li");n&&n.remove()}},addTrackButton:function(e,t,n){var o=this;""===n&&(n=F.default.t(d.default.language.codes[t])\|\|t),o.capti
2024-05-02 14:33:04 UTC	8000	IN	Data Raw: 65 3a 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 76 69 64 65 6f 56 6f 6c 75 6d 65 3a 22 76 65 72 74 69 63 61 6c 22 2c 73 74 61 72 74 56 6f 6c 75 6d 65 3a 2e 38 7d 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 69 2e 64 65 66 61 75 6c 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 62 75 69 6c 64 76 6f 6c 75 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 6f 29 7b 69 66 28 21 50 2e 49 53 5f 41 4e 44 52 4f 49 44 26 26 21 50 2e 49 53 5f 49 4f 53 7c 7c 21 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 68 69 64 65 56 6f 6c 75 6d 65 4f 6e 54 6f 75 63 68 44 65 76 69 63 65 73 29 7b 76 61 72 20 61 3d 74 68 69 73 2c 73 3d 61 2e 69 73 56 69 64 65 6f 3f 61 2e 6f 70 74 69 6f 6e 73 2e 76 69 64 65 6f 56 6f 6c 75 6d 65 3a 61 2e 6f 70 74 69 6f 6e 73 2e 61 75 64 69 6f 56 6f 6c 75 6d 65 Data Ascii: e:"horizontal",videoVolume:"vertical",startVolume:.8}),Object.assign(i.default.prototype,{buildvolume:function(e,t,n,o){if(!P.IS_ANDROID&&!P.IS_IOS\|\|!this.options.hideVolumeOnTouchDevices){var a=this,s=a.isVideo?a.options.videoVolume:a.options.audioVolume
2024-05-02 14:33:04 UTC	8000	IN	Data Raw: 2f 67 65 74 2e 61 64 6f 62 65 2e 63 6f 6d 2f 66 6c 61 73 68 70 6c 61 79 65 72 2f 22 2c 22 6d 65 6a 73 2e 66 75 6c 6c 73 63 72 65 65 6e 22 3a 22 46 75 6c 6c 73 63 72 65 65 6e 22 2c 22 6d 65 6a 73 2e 70 6c 61 79 22 3a 22 50 6c 61 79 22 2c 22 6d 65 6a 73 2e 70 61 75 73 65 22 3a 22 50 61 75 73 65 22 2c 22 6d 65 6a 73 2e 74 69 6d 65 2d 73 6c 69 64 65 72 22 3a 22 54 69 6d 65 20 53 6c 69 64 65 72 22 2c 22 6d 65 6a 73 2e 74 69 6d 65 2d 68 65 6c 70 2d 74 65 78 74 22 3a 22 55 73 65 20 4c 65 66 74 2f 52 69 67 68 74 20 41 72 72 6f 77 20 6b 65 79 73 20 74 6f 20 61 64 76 61 6e 63 65 20 6f 6e 65 20 73 65 63 6f 6e 64 2c 20 55 70 2f 44 6f 77 6e 20 61 72 72 6f 77 73 20 74 6f 20 61 64 76 61 6e 63 65 20 74 65 6e 20 73 65 63 6f 6e 64 73 2e 22 2c 22 6d 65 6a 73 2e 6c 69 76 65 Data Ascii: /get.adobe.com/flashplayer/","mejs.fullscreen":"Fullscreen","mejs.play":"Play","mejs.pause":"Pause","mejs.time-slider":"Time Slider","mejs.time-help-text":"Use Left/Right Arrow keys to advance one second, Up/Down arrows to advance ten seconds.","mejs.live

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49861	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:04 UTC	762	OUT	GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.5.2 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:04 UTC	212	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:04 GMT Server: Apache Last-Modified: Mon, 06 Jun 2022 15:41:31 GMT Accept-Ranges: bytes Content-Length: 1191 Connection: close Content-Type: text/javascript
2024-05-02 14:33:04 UTC	1191	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 6d 65 6a 73 2e 70 6c 75 67 69 6e 73 26 26 28 6d 65 6a 73 2e 70 6c 75 67 69 6e 73 3d 7b 7d 2c 6d 65 6a 73 2e 70 6c 75 67 69 6e 73 2e 73 69 6c 76 65 72 6c 69 67 68 74 3d 5b 5d 2c 6d 65 6a 73 2e 70 6c 75 67 69 6e 73 2e 73 69 6c 76 65 72 6c 69 67 68 74 2e 70 75 73 68 28 7b 74 79 70 65 73 3a 5b 5d 7d 29 29 2c 6d 65 6a 73 2e 48 74 6d 6c 4d 65 64 69 61 45 6c 65 6d 65 6e 74 53 68 69 6d 3d 6d 65 6a 73 2e 48 74 6d 6c 4d 65 64 69 61 45 6c 65 6d 65 6e 74 53 68 69 6d 7c 7c 7b 67 65 74 54 79 70 65 46 72 6f 6d 46 69 6c 65 3a 6d 65 6a 73 2e 55 74 69 6c 73 2e 67 65 74 54 79 70 65 46 72 6f 6d 46 69 6c 65 7d 2c 76 6f 69 64 20 30 3d 3d 3d 6d 65 6a 73 2e 4d 65 64 69 61 46 65 61 74 75 72 65 73 26 26 28 6d 65 6a Data Ascii: !function(a){void 0===mejs.plugins&&(mejs.plugins={},mejs.plugins.silverlight=[],mejs.plugins.silverlight.push({types:[]})),mejs.HtmlMediaElementShim=mejs.HtmlMediaElementShim\|\|{getTypeFromFile:mejs.Utils.getTypeFromFile},void 0===mejs.MediaFeatures&&(mej

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49862	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:04 UTC	757	OUT	GET /wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.5.2 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:04 UTC	212	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:04 GMT Server: Apache Last-Modified: Tue, 04 Apr 2023 13:00:24 GMT Accept-Ranges: bytes Content-Length: 1107 Connection: close Content-Type: text/javascript
2024-05-02 14:33:04 UTC	1107	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 65 2e 77 70 3d 65 2e 77 70 7c 7c 7b 7d 2c 65 2e 77 70 2e 6d 65 64 69 61 65 6c 65 6d 65 6e 74 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 7d 3b 72 65 74 75 72 6e 7b 69 6e 69 74 69 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 5b 5d 3b 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 5f 77 70 6d 65 6a 73 53 65 74 74 69 6e 67 73 3f 6e 2e 65 78 74 65 6e 64 28 21 30 2c 7b 7d 2c 5f 77 70 6d 65 6a 73 53 65 74 74 69 6e 67 73 29 3a 74 29 2e 63 6c 61 73 73 50 72 65 66 69 78 3d 22 6d 65 6a 73 2d 22 2c 74 2e 73 75 63 63 65 73 73 3d 74 2e 73 75 63 63 65 73 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 65 2e 72 65 6e 64 65 72 65 72 4e Data Ascii: !function(e,n){e.wp=e.wp\|\|{},e.wp.mediaelement=new function(){var t={};return{initialize:function(){var e=[];(t="undefined"!=typeof _wpmejsSettings?n.extend(!0,{},_wpmejsSettings):t).classPrefix="mejs-",t.success=t.success\|\|function(e){var t,n;e.rendererN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49863	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:04 UTC	799	OUT	GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/sticky-elements.js?ver=4.25.0 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:04 UTC	214	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:04 GMT Server: Apache Last-Modified: Sat, 20 Apr 2024 13:43:59 GMT Accept-Ranges: bytes Content-Length: 209048 Connection: close Content-Type: text/javascript
2024-05-02 14:33:04 UTC	7978	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 65 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=fun
2024-05-02 14:33:04 UTC	8000	IN	Data Raw: 3d 3d 74 26 26 76 6f 69 64 20 30 21 3d 3d 74 26 26 21 31 21 3d 3d 74 26 26 21 28 30 2c 6c 2e 64 65 66 61 75 6c 74 29 28 74 29 7d 3b 65 2e 68 61 73 56 61 6c 75 65 3d 76 3b 76 61 72 20 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 76 28 74 29 3f 74 3a 65 7d 3b 65 2e 67 65 74 3d 6d 3b 65 2e 69 73 4a 73 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 28 30 2c 72 2e 64 65 66 61 75 6c 74 29 28 4a 53 4f 4e 2e 70 61 72 73 65 28 74 29 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3b 65 2e 69 73 56 61 6c 69 64 48 74 6d 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 5b 22 61 72 65 61 22 2c 22 62 61 73 65 22 2c 22 62 72 22 2c 22 63 6f 6c 22 2c 22 65 6d 62 65 64 22 2c 22 68 72 22 2c 22 69 Data Ascii: ==t&&void 0!==t&&!1!==t&&!(0,l.default)(t)};e.hasValue=v;var m=function(t,e){return v(t)?t:e};e.get=m;e.isJson=function(t){try{return(0,r.default)(JSON.parse(t))}catch(t){return!1}};e.isValidHtml=function(t){var e=["area","base","br","col","embed","hr","i
2024-05-02 14:33:04 UTC	8000	IN	Data Raw: 74 28 77 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 65 2d 28 74 2d 70 29 3b 72 65 74 75 72 6e 20 76 3f 75 28 6e 2c 6c 2d 28 74 2d 67 29 29 3a 6e 7d 28 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 74 29 7b 72 65 74 75 72 6e 20 64 3d 76 6f 69 64 20 30 2c 6d 26 26 63 3f 79 28 74 29 3a 28 63 3d 73 3d 76 6f 69 64 20 30 2c 66 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 29 7b 76 61 72 20 74 3d 6f 28 29 2c 6e 3d 5f 28 74 29 3b 69 66 28 63 3d 61 72 67 75 6d 65 6e 74 73 2c 73 3d 74 68 69 73 2c 70 3d 74 2c 6e 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 64 29 72 65 74 75 72 6e 20 62 28 70 29 3b 69 66 28 76 29 72 65 74 75 72 6e 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 64 29 2c 64 3d 73 65 74 54 69 6d 65 6f 75 74 28 77 2c 65 29 2c 79 28 70 29 7d 72 65 74 75 72 Data Ascii: t(w,function(t){var n=e-(t-p);return v?u(n,l-(t-g)):n}(t))}function x(t){return d=void 0,m&&c?y(t):(c=s=void 0,f)}function P(){var t=o(),n=_(t);if(c=arguments,s=this,p=t,n){if(void 0===d)return b(p);if(v)return clearTimeout(d),d=setTimeout(w,e),y(p)}retur
2024-05-02 14:33:04 UTC	8000	IN	Data Raw: 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 65 77 20 41 72 72 61 79 28 74 2e 6c 65 6e 67 74 68 29 2c 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 2b 2b 6e 29 65 5b 6e 5d 3d 74 5b 6e 5d 2e 6c 69 73 74 65 6e 65 72 7c 7c 74 5b 6e 5d 3b 72 65 74 75 72 6e 20 65 7d 28 6f 29 3a 76 28 6f 2c 6f 2e 6c 65 6e 67 74 68 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 7b 76 61 72 20 6e 3d 65 5b 74 5d 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 31 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 6c 65 6e 67 74 68 7d 72 65 74 75 72 6e 20 30 7d 66 75 6e 63 74 69 6f 6e 20 76 28 74 2c 65 29 7b 66 6f Data Ascii: n(t){for(var e=new Array(t.length),n=0;n<e.length;++n)e[n]=t[n].listener\|\|t[n];return e}(o):v(o,o.length)}function h(t){var e=this._events;if(void 0!==e){var n=e[t];if("function"==typeof n)return 1;if(void 0!==n)return n.length}return 0}function v(t,e){fo
2024-05-02 14:33:04 UTC	8000	IN	Data Raw: 28 74 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 74 72 79 7b 72 65 74 75 72 6e 20 74 2b 22 22 7d 63 61 74 63 68 28 74 29 7b 7d 7d 72 65 74 75 72 6e 22 22 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 30 36 29 2c 6f 3d 6e 28 31 34 39 29 2c 69 3d 6e 28 31 30 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 61 2c 75 2c 63 29 7b 76 61 72 20 73 3d 31 26 6e 2c 6c 3d 74 2e 6c 65 6e 67 74 68 2c 66 3d 65 2e 6c 65 6e 67 74 68 3b 69 66 28 6c 21 3d 66 26 26 21 28 73 26 26 66 3e 6c 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 64 3d 63 2e 67 65 74 28 74 29 2c 70 3d 63 2e 67 65 74 28 65 29 3b 69 66 28 64 26 Data Ascii: (t){if(null!=t){try{return n.call(t)}catch(t){}try{return t+""}catch(t){}}return""}},function(t,e,n){var r=n(106),o=n(149),i=n(107);t.exports=function(t,e,n,a,u,c){var s=1&n,l=t.length,f=e.length;if(l!=f&&!(s&&f>l))return!1;var d=c.get(t),p=c.get(e);if(d&
2024-05-02 14:33:04 UTC	8000	IN	Data Raw: 76 61 72 20 69 3d 72 28 74 2c 38 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 65 3d 6e 3f 76 6f 69 64 20 30 3a 65 29 3b 72 65 74 75 72 6e 20 69 2e 70 6c 61 63 65 68 6f 6c 64 65 72 3d 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2c 69 7d 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 3d 7b 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 6f 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 36 29 2c 6f 3d 6e 28 38 33 29 2c 69 3d 6e 28 33 29 2c 61 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 75 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 63 3d 61 2e 74 6f 53 74 72 69 6e 67 2c 73 3d 75 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6c 3d 63 2e 63 61 6c 6c 28 4f 62 6a 65 Data Ascii: var i=r(t,8,void 0,void 0,void 0,void 0,void 0,e=n?void 0:e);return i.placeholder=o.placeholder,i}o.placeholder={},t.exports=o},function(t,e,n){var r=n(6),o=n(83),i=n(3),a=Function.prototype,u=Object.prototype,c=a.toString,s=u.hasOwnProperty,l=c.call(Obje
2024-05-02 14:33:04 UTC	8000	IN	Data Raw: 7b 74 5b 75 5d 3d 76 6f 69 64 20 30 3b 76 61 72 20 72 3d 21 30 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 6f 3d 61 2e 63 61 6c 6c 28 74 29 3b 72 65 74 75 72 6e 20 72 26 26 28 65 3f 74 5b 75 5d 3d 6e 3a 64 65 6c 65 74 65 20 74 5b 75 5d 29 2c 6f 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 74 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3d 3d 74 26 26 28 76 6f 69 64 20 30 21 3d 3d 6e 26 26 28 74 3d 74 3c 3d 6e 3f 74 3a 6e 29 2c 76 6f 69 64 Data Ascii: {t[u]=void 0;var r=!0}catch(t){}var o=a.call(t);return r&&(e?t[u]=n:delete t[u]),o}},function(t,e){var n=Object.prototype.toString;t.exports=function(t){return n.call(t)}},function(t,e){t.exports=function(t,e,n){return t==t&&(void 0!==n&&(t=t<=n?t:n),void
2024-05-02 14:33:04 UTC	8000	IN	Data Raw: 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6f 28 74 29 2c 6e 3d 65 2e 6c 65 6e 67 74 68 3b 6e 2d 2d 3b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 2c 61 3d 74 5b 69 5d 3b 65 5b 6e 5d 3d 5b 69 2c 61 2c 72 28 61 29 5d 7d 72 65 74 75 72 6e 20 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 38 37 29 2c 6f 3d 6e 28 38 29 2c 69 3d 6e 28 31 35 33 29 2c 61 3d 6e 28 37 31 29 2c 75 3d 6e 28 31 31 34 29 2c 63 3d 6e 28 31 31 35 29 2c 73 3d 6e 28 31 39 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 61 28 74 29 26 26 75 28 65 29 3f 63 28 73 28 74 29 2c 65 29 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 61 3d 6f 28 6e 2c 74 29 3b 72 65 74 75 72 6e 20 Data Ascii: rts=function(t){for(var e=o(t),n=e.length;n--;){var i=e[n],a=t[i];e[n]=[i,a,r(a)]}return e}},function(t,e,n){var r=n(87),o=n(8),i=n(153),a=n(71),u=n(114),c=n(115),s=n(19);t.exports=function(t,e){return a(t)&&u(e)?c(s(t),e):function(n){var a=o(n,t);return
2024-05-02 14:33:04 UTC	8000	IN	Data Raw: 50 61 73 73 3a 22 6f 76 65 72 45 76 65 72 79 22 2c 61 6c 77 61 79 73 3a 22 63 6f 6e 73 74 61 6e 74 22 2c 61 6e 79 3a 22 73 6f 6d 65 22 2c 61 6e 79 50 61 73 73 3a 22 6f 76 65 72 53 6f 6d 65 22 2c 61 70 70 6c 79 3a 22 73 70 72 65 61 64 22 2c 61 73 73 6f 63 3a 22 73 65 74 22 2c 61 73 73 6f 63 50 61 74 68 3a 22 73 65 74 22 2c 63 6f 6d 70 6c 65 6d 65 6e 74 3a 22 6e 65 67 61 74 65 22 2c 63 6f 6d 70 6f 73 65 3a 22 66 6c 6f 77 52 69 67 68 74 22 2c 63 6f 6e 74 61 69 6e 73 3a 22 69 6e 63 6c 75 64 65 73 22 2c 64 69 73 73 6f 63 3a 22 75 6e 73 65 74 22 2c 64 69 73 73 6f 63 50 61 74 68 3a 22 75 6e 73 65 74 22 2c 64 72 6f 70 4c 61 73 74 3a 22 64 72 6f 70 52 69 67 68 74 22 2c 64 72 6f 70 4c 61 73 74 57 68 69 6c 65 3a 22 64 72 6f 70 52 69 67 68 74 57 68 69 6c 65 22 2c 65 Data Ascii: Pass:"overEvery",always:"constant",any:"some",anyPass:"overSome",apply:"spread",assoc:"set",assocPath:"set",complement:"negate",compose:"flowRight",contains:"includes",dissoc:"unset",dissocPath:"unset",dropLast:"dropRight",dropLastWhile:"dropRightWhile",e
2024-05-02 14:33:04 UTC	8000	IN	Data Raw: 5c 6e 5c 2f 5c 2a 20 5c 5b 77 72 61 70 70 65 64 20 77 69 74 68 20 28 2e 2b 29 5c 5d 20 5c 2a 2f 2c 72 3d 2f 2c 3f 20 26 20 2f 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 6d 61 74 63 68 28 6e 29 3b 72 65 74 75 72 6e 20 65 3f 65 5b 31 5d 2e 73 70 6c 69 74 28 72 29 3a 5b 5d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 2f 5c 7b 28 3f 3a 5c 6e 5c 2f 5c 2a 20 5c 5b 77 72 61 70 70 65 64 20 77 69 74 68 20 2e 2b 5c 5d 20 5c 2a 5c 2f 29 3f 5c 6e 3f 2f 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 65 2e 6c 65 6e 67 74 68 3b 69 66 28 21 72 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 6f 3d 72 2d 31 3b 72 65 74 75 72 6e 20 65 5b 6f 5d 3d 28 72 3e 31 3f Data Ascii: \n\/\* \[wrapped with (.+)\] \/,r=/,? & /;t.exports=function(t){var e=t.match(n);return e?e[1].split(r):[]}},function(t,e){var n=/\{(?:\n\/\ \[wrapped with .+\] \*\/)?\n?/;t.exports=function(t,e){var r=e.length;if(!r)return t;var o=r-1;return e[o]=(r>1?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49864	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:04 UTC	805	OUT	GET /wp-content/uploads/2019/12/instagram_3225191.svg HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:04 UTC	210	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:04 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:26:02 GMT Accept-Ranges: bytes Content-Length: 3043 Connection: close Content-Type: image/svg+xml
2024-05-02 14:33:04 UTC	3043	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 73 74 79 6c 65 3d 22 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 65 77 20 30 20 30 20 31 30 30 30 20 31 30 30 30 3b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 30 30 20 31 30 30 30 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 09 2e 73 74 30 7b 66 69 6c Data Ascii: <?xml version="1.0" ?><svg id="Layer_1" style="enable-background:new 0 0 1000 1000;" version="1.1" viewBox="0 0 1000 1000" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><style type="text/css">.st0{fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49865	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:04 UTC	803	OUT	GET /wp-content/uploads/2019/10/youtube_3225180.svg HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:04 UTC	209	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:04 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:25:04 GMT Accept-Ranges: bytes Content-Length: 860 Connection: close Content-Type: image/svg+xml
2024-05-02 14:33:04 UTC	860	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 73 74 79 6c 65 3d 22 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 65 77 20 30 20 30 20 31 30 30 30 20 31 30 30 30 3b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 30 30 20 31 30 30 30 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 09 2e 73 74 30 7b 66 69 6c Data Ascii: <?xml version="1.0" ?><svg id="Layer_1" style="enable-background:new 0 0 1000 1000;" version="1.1" viewBox="0 0 1000 1000" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><style type="text/css">.st0{fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49866	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:05 UTC	798	OUT	GET /wp-content/uploads/2020/10/Give-VRT-W.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:06 UTC	206	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:06 GMT Server: Apache Last-Modified: Wed, 18 Jan 2023 16:54:18 GMT Accept-Ranges: bytes Content-Length: 6362 Connection: close Content-Type: image/png
2024-05-02 14:33:06 UTC	6362	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c6 00 00 00 c1 08 03 00 00 00 a3 40 3f d7 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 02 fd 50 4c 54 45 47 70 4c fd b8 13 ff ff ff fd b8 13 ff ff ff fd b8 13 ff ff ff fd b8 13 ff ff ff fd b8 13 c1 ce a4 ff ff ff ff ff ff bc 92 6f fd b8 13 fd b8 13 ff ff ff c1 ce a4 c1 ce a4 bc 92 6f ff ff ff ff ff ff c1 ce a4 fd b8 13 c1 ce a4 c1 ce a4 bc 92 6f c1 ce a4 fd b8 13 c1 ce a4 ff ff ff fd b8 13 c1 ce a4 c1 ce a4 ff ff ff c1 ce a4 fd b8 13 fd b8 13 ff ff ff ff ff ff 37 ae 45 ff ff ff fd b8 13 c1 ce a4 c1 ce a4 bc 92 6f c1 ce a4 9d 7f 6a fd b8 13 36 a8 42 bc 92 6f bc 92 6f bc 92 6f bc 92 6f ba 90 6e 36 a8 41 d9 db 97 d8 db 96 39 b5 4a bc 92 6f d9 db 97 bc 92 6f 9c 7e 6a 9d 7f 6a d9 Data Ascii: PNGIHDR@?pHYsPLTEGpLooo7Eoj6Boooon6A9Joo~jj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49867	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:06 UTC	816	OUT	GET /wp-content/uploads/2022/10/Map-Thumbnail-e1666124343834.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:06 UTC	209	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:06 GMT Server: Apache Last-Modified: Tue, 18 Oct 2022 20:19:58 GMT Accept-Ranges: bytes Content-Length: 554826 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:06 UTC	7983	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 52 68 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 25 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 00 1c 02 05 00 11 57 41 59 46 49 4e 44 49 4e 47 20 74 6f 20 4e 4c 49 00 38 42 49 4d 04 25 00 00 00 00 00 10 ed 8a d0 60 12 25 ea 4c d0 40 20 ed 6e 7d b4 d8 38 42 49 4d 04 3a 00 00 00 00 01 15 00 00 00 10 00 00 00 01 00 00 00 00 00 0b 70 72 69 6e 74 4f 75 74 70 75 74 00 00 00 05 00 00 00 00 50 73 74 53 62 6f 6f 6c 01 00 00 00 00 49 6e 74 65 65 6e 75 6d 00 00 00 00 49 6e 74 65 00 00 00 00 43 6c 72 6d 00 00 00 0f 70 72 69 6e 74 53 69 78 74 65 65 6e 42 69 74 62 6f 6f 6c 00 00 00 00 0b 70 72 69 6e 74 65 72 4e 61 6d 65 54 45 58 54 00 00 00 19 00 6e 00 6c 00 69 00 2d 00 62 Data Ascii: JFIFRhPhotoshop 3.08BIM%Z%GWAYFINDING to NLI8BIM%`%L@ n}8BIM:printOutputPstSboolInteenumInteClrmprintSixteenBitboolprinterNameTEXTnli-b
2024-05-02 14:33:06 UTC	8000	IN	Data Raw: 92 8f 61 64 d9 1f 58 b7 4f 5c e8 99 1f a1 e9 8d 0c bd a4 39 d6 9b 1e f2 2b 80 c7 30 6e 68 6b 1c eb 3d de a3 3d ff 00 e0 d7 43 f5 12 bc 76 75 6c 88 73 cd df 67 32 36 90 c0 c2 fa f6 9d ff 00 9b 63 bf d1 af 32 fa 9b 90 68 eb 32 da 85 c5 d5 b8 0a c9 2d d7 9d c1 cc f7 6e 62 f5 7f aa 14 32 ae a5 73 98 e6 92 ea 08 7e db 4b a5 cd 7b 37 3d f5 bf df bf dd fc ef bd 2a a9 04 19 5c 0f 93 ff d6 f4 bc ac 9a 31 b1 ed c9 c8 25 b5 63 b1 d6 58 62 48 6b 06 e7 6d 85 c9 7d 63 cf bb a7 74 9a 31 6e 21 b9 fd 56 ef b5 e7 88 0f da d0 58 e7 53 b7 70 df e9 6d c6 c1 af dc cf 52 9c 75 d0 67 0f b5 e6 e3 74 de 6a 61 19 99 7e 1b 2b 77 ea 95 3b fe 3f 31 be b7 fc 56 15 eb 8e ea 78 59 df 58 73 2c ea cd b6 aa b1 b2 49 ab a7 32 e2 f0 5f 45 4e 14 32 dd d5 d7 63 31 ea c8 be dd d5 3e f7 7e 91 f7 Data Ascii: adXO\9+0nhk==Cvulsg26c2h2-nb2s~K{7=*\1%cXbHkm}ct1n!VXSpmRugtja~+w;?1VxYXs,I2_EN2c1>~
2024-05-02 14:33:06 UTC	8000	IN	Data Raw: 96 92 48 6e d6 9f 96 87 73 b6 a9 31 97 82 dd f7 1d b2 37 37 68 6c c7 d2 fe 53 50 e1 58 31 f8 fe 0c df ad 84 7c 14 b4 03 c9 00 67 62 9d 7d 56 86 99 20 99 1a 0f 8a 2b ad ad af ad 8e 3e eb 67 63 75 33 03 73 b8 fc cf e5 a7 32 33 02 1a 1a 79 e4 a7 4b 9d 79 51 73 a0 24 a5 d2 4c d7 6e f2 21 3a 4a 7f ff d3 f4 f3 00 1d a4 cf 1f ea 15 4e a7 9d 8d 85 87 6d 97 da 58 05 56 3d be 90 dd 6c 31 bb ac b2 9a da db 7f 9a fd fd 9e 9b 3f c2 22 e4 3b 28 7a 46 8a d9 61 f5 1a 2d 2e 71 61 15 19 f5 1f 5c 03 ba d6 7f a3 fc f5 c3 fd 6e cc ea d8 e3 27 26 ca f1 83 5a eb 01 a9 97 5f 6d 97 57 55 42 f7 e2 d9 47 d9 f1 e8 fb 33 30 9f 66 4f e9 2d fd 4e db ae cc c7 fd 6d 25 3d a6 06 6e 3e 66 3b 1d 5d be ab c3 18 5e 5e d3 5b fd ed dc c7 be 97 6d 75 7e af d2 67 e6 7f a3 56 00 70 ef a9 d0 2e 1f Data Ascii: Hns177hlSPX1\|gb}V +>gcu3s23yKyQs$Ln!:JNmXV=l1?";(zFa-.qa\n'&Z_mWUBG30fO-Nm%=n>f;]^^[mu~gVp.
2024-05-02 14:33:06 UTC	8000	IN	Data Raw: 1f 16 8a bd 46 87 31 bb c0 3b a1 a0 69 f4 a3 8f a1 a2 22 47 6a 5c 25 8c 00 2c 9e 8e 83 2e a6 cd 2a b1 b6 88 98 04 3b 49 db b9 bf da 51 b3 1e 9b 08 36 0d c2 20 1d c4 69 f4 b6 9d a4 24 2a aa 9b 0f a5 5b 6b f3 68 03 43 af 64 42 34 29 e3 c5 32 ab d2 eb c5 83 2a ad 8e 2e 6c c9 d0 cb 9c ef fa b7 39 4d 20 d0 ee c2 39 29 fb 47 6f 04 50 b8 88 83 c7 68 ec 9c 16 8e 09 f8 c2 64 92 53 ff d2 f4 a7 be d0 77 55 b4 d9 b6 1b bc c0 d5 cc 1a 94 c3 27 30 96 93 43 1a cd 45 87 d4 07 61 05 cd 6e ef e4 bb d8 a3 92 c0 5b b0 8a 9d b8 48 17 7d 03 0e 69 d7 fe fa 80 71 eb dd 60 15 e1 ec 30 58 dd c7 dc 5b 3b 7d 66 c6 df cf 7a 4a 6d 37 27 37 52 ec 60 00 0e 23 f4 8d d6 03 8b 07 f6 e1 a9 86 5e 63 8b 80 c6 69 2d 30 47 aa d9 98 0e db 11 f4 fd ca ab 31 ab ad cd 73 2b c2 10 c2 0e dd 0e e3 ed Data Ascii: F1;i"Gj\%,.;IQ6 i$[khCdB4)2*.l9M 9)GoPhdSwU'0CEan[H}iq`0X[;}fzJm7'7R`#^ci-0G1s+
2024-05-02 14:33:06 UTC	8000	IN	Data Raw: 65 86 40 0d 73 7d cd fa 7b 2b 6f bf 77 fc 5a 2f 51 de cc 5b 1d 55 77 da fd ba 33 15 cd 17 1f 73 3f 9a 7d ae 65 7f d7 f7 a5 6f ad eb d8 40 ca 68 31 fc d9 61 6e ad 1f 9a ff 00 fb e6 f4 7a 6f f4 5d 67 84 0d 6a c9 df d3 fe 2a 37 0e 8e 18 5a 29 73 da c3 b9 c0 31 e4 b1 ae 6f f3 90 46 f6 d4 e6 d3 fe 0d 5c c0 6e 33 68 9c 5a cd 55 b9 c4 96 b9 a5 a6 78 9d af f7 2a 2e f5 dc 09 fd 71 db 5c 5b 2d 2c 6b db 22 98 63 9b 3e 9d cd 77 bb f4 df e0 bf 48 9d ed bb 70 81 98 09 63 5b ed 70 fd d3 a3 b7 03 5f b5 df 4e e6 7e 93 7f fc 1a 0b 5d 64 1c 83 1e 9e b1 ee ff 00 be bd 67 39 d7 92 43 86 6b aa 7b 5a ea dc dd 81 c0 91 bb 73 a3 67 d0 df fc cb d9 ff 00 81 ab 62 b7 d5 5b 6c 75 8f b4 bb dd b6 d2 d1 1e c7 9d 9e d6 b1 8d 49 4b b9 ad 71 f7 b4 13 e3 c1 ff 00 3b e9 21 7d 99 b2 4b 5d 1b Data Ascii: e@s}{+owZ/Q[Uw3s?}eo@h1anzo]gj7Z)s1oF\n3hZUx.q\[-,k"c>wHpc[p_N~]dg9Ck{Zsgb[luIKq;!}K]
2024-05-02 14:33:06 UTC	8000	IN	Data Raw: b7 19 dd 1a 04 1a 2a 1a 51 1a 77 1a 9e 1a c5 1a ec 1b 14 1b 3b 1b 63 1b 8a 1b b2 1b da 1c 02 1c 2a 1c 52 1c 7b 1c a3 1c cc 1c f5 1d 1e 1d 47 1d 70 1d 99 1d c3 1d ec 1e 16 1e 40 1e 6a 1e 94 1e be 1e e9 1f 13 1f 3e 1f 69 1f 94 1f bf 1f ea 20 15 20 41 20 6c 20 98 20 c4 20 f0 21 1c 21 48 21 75 21 a1 21 ce 21 fb 22 27 22 55 22 82 22 af 22 dd 23 0a 23 38 23 66 23 94 23 c2 23 f0 24 1f 24 4d 24 7c 24 ab 24 da 25 09 25 38 25 68 25 97 25 c7 25 f7 26 27 26 57 26 87 26 b7 26 e8 27 18 27 49 27 7a 27 ab 27 dc 28 0d 28 3f 28 71 28 a2 28 d4 29 06 29 38 29 6b 29 9d 29 d0 2a 02 2a 35 2a 68 2a 9b 2a cf 2b 02 2b 36 2b 69 2b 9d 2b d1 2c 05 2c 39 2c 6e 2c a2 2c d7 2d 0c 2d 41 2d 76 2d ab 2d e1 2e 16 2e 4c 2e 82 2e b7 2e ee 2f 24 2f 5a 2f 91 2f c7 2f fe 30 35 30 6c 30 a4 30 db Data Ascii: Qw;cR{Gp@j>i A l !!H!u!!!"'"U"""##8#f###$$M$\|$$%%8%h%%%&'&W&&&''I'z''((?(q(())8)k))*5h**++6+i++,,9,n,,--A-v--..L.../$/Z///050l00
2024-05-02 14:33:06 UTC	8000	IN	Data Raw: 75 af 6d f6 49 b3 2e 3e 35 be cb 43 7f 5d 02 d0 00 01 09 8a 23 b2 28 94 ab 2c 98 00 00 00 01 4e 70 5c b0 13 80 b8 20 00 23 24 63 31 95 00 00 0c 64 53 2b 04 ac d6 8c 6d b5 ee 59 00 00 00 00 00 21 46 d0 d0 de 64 6a 6d ea a4 a1 7a a8 c6 c0 d6 6c 40 ad 2c 0c e2 25 f2 d5 91 b0 00 18 31 ac 8c e9 09 61 24 3a e1 8c 8d 5d 9c 80 10 46 33 b0 2f 1f 19 c7 3f 28 00 71 bb de 6f 6b 7d fb 59 e2 2e fb 98 e2 0e de 78 63 b9 f3 2f 63 13 b3 67 17 07 6b 3c 41 da 97 0c 76 dc 41 d9 f9 37 d0 47 4e ee 36 0e d3 8a 3b 4e 28 ed 38 a3 b4 e2 8e d3 8a 3b 4e 28 ed 38 a3 b4 e2 8e d3 8a 3b 4e 28 ed 38 a3 b4 e2 8e d3 8a 3b 4e 28 ed 38 a3 b4 e2 8e d3 8a 3b 4e 28 ed 38 a3 b4 e2 8e d3 8a 2f e8 79 af 42 cc 87 3f 38 09 44 b9 9d 6a ce 32 5c 57 7f 37 38 ce f0 05 a0 00 00 0d 5d ae 6e 71 b3 b2 5d 05 Data Ascii: umI.>5C]#(,Np\ #$c1dS+mY!Fdjmzl@,%1a$:]F3/?(qok}Y.xc/cgk<AvA7GN6;N(8;N(8;N(8;N(8;N(8/yB?8Dj2\W78]nq]
2024-05-02 14:33:06 UTC	8000	IN	Data Raw: ab e0 39 7a bb db dd 1c ef 8f cd 7b be 96 1c fd 9c 3e bf 9f ab 3b f6 15 f9 4f 3e 7d 3f 5e fa 7d 3f 2e c9 c2 63 19 c1 91 34 d7 b6 a4 a9 9c 58 ba 9b 8c b3 92 a9 5e 2a b7 19 94 54 57 5d b5 d9 8c 67 06 e9 4c 9a 1d 6d 2d dc e0 37 d1 a3 bc 93 98 d8 d7 e7 c0 10 06 71 93 43 7b 4b 77 39 0d 68 00 00 00 00 16 57 6a f4 35 76 75 ba 7a 2f ce 24 a9 46 46 b0 a0 00 67 19 2d 84 e0 93 10 14 00 00 01 56 de ae d4 ac 67 06 71 9a 0a ef 8c ac 00 00 00 00 00 31 8c 66 23 66 33 40 23 2c 11 bf 5b 66 35 2f aa 75 20 00 00 00 00 00 14 c7 25 84 b2 00 e2 fa 5f 35 e9 61 e1 fd c7 88 3d bb c3 d6 7b c7 27 cc 1e f7 c4 74 38 a7 d0 5e 43 54 f7 2f 33 e9 81 e0 cf 78 f0 7d 73 99 ee 3c 40 f6 ef 9f fb 33 75 e3 76 cf 4e f9 f7 a4 3b af 09 13 de 9c 03 be f1 5d 93 b8 f1 d6 1a 8c e0 f7 07 97 3d 43 c6 6d Data Ascii: 9z{>;O>}?^}?.c4X^*TW]gLm-7qC{Kw9hWj5vuz/$FFg-Vgq1f#f3@#,[f5/u %_5a={'t8^CT/3x}s<@3uvN;]=Cm
2024-05-02 14:33:06 UTC	8000	IN	Data Raw: 4f 5f 59 f1 14 79 fe 6f 0f 57 ab bb c5 5b 2f a3 78 1a fa f1 f6 f2 f0 d8 b9 f7 37 7c f6 d3 e9 15 78 d7 3e de d3 1e 22 59 df d1 bb df 34 f5 fd b8 7a b9 f1 2f df 1e 6f 9e ab c3 e3 7e e6 cf 9b ca 5f a1 ed fc b3 b3 9d fb 5c f8 2b 26 fd d4 bc 04 8f 71 8f 09 83 dd 55 e2 29 d7 2f a2 76 fe 4d e9 f5 3e 89 3f 2d 76 b3 e8 79 5a dc 58 dc d5 f1 9a 3c fd 1f 51 ee fc b3 d8 39 f5 e1 e1 28 9b f7 39 f0 18 b8 f7 ff 00 42 f8 2f dc b5 8d cd bd 5d ad e5 a9 74 12 fc ea 17 6e a9 c8 d4 6d c1 20 ae 35 70 00 00 00 00 01 ad b3 e6 4f 9a 47 ec 3e 56 5f 78 2c 00 06 32 21 1b 46 b6 6e c1 3d 78 4c c5 b2 a8 bd ab 61 70 00 00 00 00 46 42 ac 5c 29 67 04 e7 48 9d 72 b4 00 06 32 2a 86 c6 0a 92 81 8b e8 dd 21 19 6b cb 8f 2d ea be 67 c3 e9 76 fe 7f e9 fc b7 5f 17 d3 fd 87 07 bd ae 4f 09 ee fc 21 Data Ascii: O_YyoW[/x7\|x>"Y4z/o~_\+&qU)/vM>?-vyZX<Q9(9B/]tnm 5pOG>V_x,2!Fn=xLapFB\)gHr2*!k-gv_O!
2024-05-02 14:33:06 UTC	8000	IN	Data Raw: a9 6a e6 af ae 75 b3 f3 4e b7 1f 6e fa 27 1b 6f df cf 87 53 53 a7 ac dd 1d 78 72 d6 c7 0f 73 53 1f 43 cf f5 79 9d 1e be 4f 65 bb a7 b3 d3 17 66 35 71 ed 73 5a 75 b3 8d 75 6a f1 3d 47 9d c7 5f 25 af ea b9 59 f6 72 63 27 a3 e2 44 2e 31 9c 46 19 59 d7 d9 d3 d8 c7 6f 53 d3 85 98 de 7a 30 b7 a7 3d 9a a7 a1 c3 be 7a 3c 3e b1 e8 f4 a8 e5 5c 7a 9f 53 f2 8f a8 f7 f3 ee 0d e0 0c 63 38 95 5d 82 95 d0 48 4a 38 2f 51 95 b9 8c 80 35 af f2 1b df cf 7d 67 85 fb 77 b7 e9 ee dc 78 3e 40 11 f8 a7 d0 7e 69 2c 5e a6 a3 cd b3 80 c7 a6 3c d3 af c8 00 00 00 00 1d 03 9e f5 3c 73 9c 00 0f 49 e6 c3 a7 a0 56 00 00 3d 06 c1 e5 db 3a c0 00 74 bd 9f 9f f3 27 d9 7c 7f 90 f5 9c bd 9f 43 97 37 1d 3c dd 49 7c 97 ea 7c bd 76 71 ba de 43 dd f3 b4 7d d7 9f f4 7b 97 0f 2e c0 00 0a f5 77 87 97 Data Ascii: juNn'oSSxrsSCyOef5qsZuuj=G_%Yrc'D.1FYoSz0=z<>\zSc8]HJ8/Q5}gwx>@~i,^<<sIV=:t'\|C7<I\|\|vqC}{.w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49868	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:06 UTC	797	OUT	GET /wp-content/uploads/2020/11/pnc_color.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:06 UTC	208	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:06 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:26:36 GMT Accept-Ranges: bytes Content-Length: 40604 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:06 UTC	7984	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 77 04 65 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF,,;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CCwe"
2024-05-02 14:33:06 UTC	8000	IN	Data Raw: ca 48 ce d3 a8 c7 91 ed c1 a6 4f fb 04 fc 61 86 3d c9 a3 d8 4e 73 8d 91 ea 50 83 ff 00 8f 10 2b 93 fb 53 03 ff 00 3f a3 f7 a3 bb fb 1f 31 df d8 4b ee 67 cf 14 57 ab f8 8b f6 54 f8 b5 e1 75 2d 7b e0 4d 52 55 1d 4e 9e ab 79 ff 00 a2 59 eb cb ef f4 fb ad 2e ea 4b 6b db 79 ad 2e 63 38 78 67 8c a3 a9 f7 07 91 5d b4 ab d2 ae af 4a 6a 5e 8d 3f c8 f3 ea e1 ab 61 dd ab 41 c7 d5 35 f9 90 51 45 25 6c 73 0f 8e 46 8a 45 74 62 8e a7 72 b2 9c 10 47 71 5e cf f0 d3 f6 c0 f8 9d f0 c9 e2 8a df 5f 7d 73 4d 4c 0f ec fd 6f 37 29 81 d0 2b 93 e6 2e 3d 15 80 f6 38 af 16 a2 b0 ad 87 a3 88 8f 25 68 29 2f 34 75 50 c5 57 c2 cb 9e 84 dc 5f 93 3f 4d 7e 0d 7e de 3e 08 f8 8b 2c 3a 77 88 97 fe 10 cd 65 fe 55 fb 64 a1 ec e5 3f ec cd 81 b4 fb 38 51 d0 06 63 5f 4c a3 ac 8a ac ac 19 18 64 30 Data Ascii: HOa=NsP+S?1KgWTu-{MRUNyY.Kky.c8xg]Jj^?aA5QE%lsFEtbrGq^_}sMLo7)+.=8%h)/4uPW_?M~~>,:weUd?8Qc_Ld0
2024-05-02 14:33:06 UTC	8000	IN	Data Raw: 0e aa d8 f9 9f fe 02 3f 52 be b5 f1 73 31 76 2c c4 b3 13 92 4f 52 6b f2 de 32 cd b9 22 b2 ea 4f 57 ac bd 3a 2f 9e ff 00 77 73 f5 2e 0c ca 79 e4 f3 1a ab 45 a4 7d 7a bf 96 cb e7 d8 5a 28 a2 bf 24 3f 5e 0a fb 07 e0 17 c4 3f f8 4d bc 20 b6 b7 72 ef d5 74 cd b0 cd bb ac 89 fc 0f f8 81 83 ee a4 f7 af 8f ab a9 f8 65 e3 89 be 1f f8 be cf 54 42 cd 6f 9f 2a ea 25 ff 00 96 91 12 37 0f a8 e0 8f 70 2b e9 78 7f 34 79 56 36 33 93 f7 25 a4 bd 3b fc bf 2b 9f 33 c4 39 52 cd 70 4e 11 5e fc 75 8f af 6f 9e de b6 ec 7d cf 45 41 65 79 0e a1 69 0d d5 b4 8b 35 bc c8 24 8e 45 39 0c a4 64 11 f8 1a 9e bf a1 d3 4d 5d 1f ce cd 34 ec c2 8a 28 a6 20 a2 8a 28 00 a2 8a 28 02 8e af a3 58 6b f6 12 59 6a 56 90 de da 49 f7 a2 9d 43 29 f7 f6 3e f5 f3 ef c4 5f d9 86 5b 7f 32 f7 c2 72 99 a3 e5 Data Ascii: ?Rs1v,ORk2"OW:/ws.yE}zZ($?^?M rteTBo*%7p+x4yV63%;+39RpN^uo}EAeyi5$E9dM]4( ((XkYjVIC)>_[2r
2024-05-02 14:33:06 UTC	8000	IN	Data Raw: 00 eb ce d7 ff 00 43 92 b8 b3 ef f9 16 d5 f9 7e 68 ef e1 bf f9 1a d1 f9 ff 00 e9 2c fb f2 8a 28 af c6 0f dd 82 bf 3a 7f e0 a5 1a 7b 45 f1 67 c3 37 c7 3b 66 d0 d6 01 f5 49 e5 27 ff 00 46 0a fd 16 af 88 3f e0 a6 7a 1f 99 a5 f8 0f 58 55 00 45 35 dd a4 8d dc ef 58 d9 07 e1 b1 ff 00 3a fa 4e 1e 9f 26 63 05 de eb f0 67 cb 71 35 3f 69 96 54 6b a5 9f e2 8f 83 a8 a2 8a fd 84 fc 34 28 a2 8a 00 7c 32 b4 12 a4 88 70 e8 c1 94 fb 8a fd c2 d2 f5 08 b5 6d 32 ce fa 1e 61 ba 85 26 4e 41 f9 59 41 1c 8f 63 5f 87 55 fb 1d fb 3e eb c3 c4 bf 03 bc 0b a8 02 59 9f 47 b6 8e 42 49 39 74 8c 23 f2 7f da 53 5f 05 c5 90 bd 3a 35 3b 36 be fb 7f 91 fa 4f 06 54 b5 4a f4 fb a4 fe eb ff 00 99 e8 54 51 45 7e 6e 7e a4 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 Data Ascii: C~h,(:{Eg7;fI'F?zXUE5X:N&cgq5?iTk4(\|2pm2a&NAYAc_U>YGBI9t#S_:5;6OTJTQE~n~QEQEQEQEQEQE
2024-05-02 14:33:06 UTC	8000	IN	Data Raw: 0a b0 38 22 a0 af aa 3e 3f 7c 1f 3e 2b b3 6d 7f 47 83 3a c5 b2 7e fe 14 1c dc c6 3d 3d 5d 7b 7a 8e 3b 0a f9 58 f5 e6 bf 9d b3 8c aa ae 53 89 74 67 ac 5e b1 7d d7 f9 ae bf e5 63 fa 2f 27 cd a9 66 f8 65 5a 1a 49 7c 4b b3 ff 00 27 d3 fe 1c 5a 28 a2 bc 33 dd 0a 28 a2 80 3e a7 fd 96 34 31 63 e0 8b ed 49 86 25 bf ba 20 1f 54 8c 60 7f e3 c5 eb da 6b 87 f8 29 66 2c 3e 16 78 76 30 36 ee b7 32 e3 3f df 76 7f fd 9a bb 8a fe 93 c9 68 2c 3e 5d 42 9a fe 54 fe 6f 57 f8 b3 f9 a7 3a ae f1 19 8d 7a 8f f9 9a f9 2d 17 e0 82 8a 28 af 68 f1 42 8a 28 a0 02 8a 29 92 48 90 c6 d2 48 ca 91 a8 2c cc c7 00 01 d4 93 46 c0 3e a8 eb 1a cd 8e 81 61 25 ee a5 77 15 95 a4 7f 7a 59 9c 2a 8f 6f 73 ed d6 bc 97 e2 1f ed 29 a4 f8 7f cd b3 f0 fa 26 b3 7e 38 33 e7 fd 1a 33 f5 1c bf e1 c7 bf 6a f9 Data Ascii: 8">?\|>+mG:~==]{z;XStg^}c/'feZI\|K'Z(3(>41cI% T`k)f,>xv062?vh,>]BToW:z-(hB()HH,F>a%wzY*os)&~833j
2024-05-02 14:33:06 UTC	620	IN	Data Raw: 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 Data Ascii: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49869	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:06 UTC	811	OUT	GET /wp-content/uploads/2017/09/USDAlogo-e1508354968125.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:06 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:06 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:22:05 GMT Accept-Ranges: bytes Content-Length: 17172 Connection: close Content-Type: image/png
2024-05-02 14:33:06 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f8 00 00 00 aa 08 06 00 00 00 80 97 82 f7 00 00 20 00 49 44 41 54 78 9c ed bd 7b 94 5c f5 75 e7 fb d9 45 4f a3 2b 2b 4a 8f 46 4b a3 a8 ca 1a 45 a3 60 06 13 42 08 21 a8 c3 25 c4 26 04 63 aa 20 36 c6 0e 76 62 c7 dd d8 61 6c 16 8b 71 9c 35 b3 7c bd 62 2f c7 93 dc 9b 49 32 36 e3 38 98 2a 9c 78 32 7e e2 07 55 f8 11 c7 21 d8 21 80 1d 4c 7c 31 21 04 2b b2 22 57 2b 5a ba 2c 5d 8d a2 ab 51 94 a6 be f7 8f f3 a8 df f9 9d df a9 47 77 55 77 21 6a af d5 5d e7 fc 1e fb bb 7f ef fd 7b ed 63 4c 69 e4 b4 e3 65 1f a4 34 33 8b 50 e4 50 82 a5 7b 17 d7 57 a8 29 ad 19 95 6b f5 19 13 6f 6a b7 16 7f 6f bd 65 b1 f5 16 e0 b9 4e e5 5a 7d 23 e2 12 33 bb 04 f4 62 b0 dd a0 1d c8 36 0b cd 00 1d cc 4e 98 78 46 e8 10 c6 01 e0 6f c0 Data Ascii: PNGIHDR IDATx{\uEO++JFKE`B!%&c 6vbalq5\|b/I268*x2~U!!L\|1!+"W+Z,]QGwUw!j]{cLie43PP{W)kojoeNZ}#3b6NxFo
2024-05-02 14:33:06 UTC	8000	IN	Data Raw: dd 58 80 ed a6 07 8c 43 98 de de be 77 b8 d1 1b 9c b6 e2 f0 eb 96 97 e7 66 e3 6f e3 95 6a 83 72 ad 7e 85 d0 c3 18 77 08 36 85 d2 9c ae 31 a6 b2 2b 39 bf f4 0d b0 bd ed d6 c2 e0 5b 85 00 b2 37 09 6d c8 a4 3d c5 d4 ca ec 9d 8f 98 84 dd 89 59 27 94 ee bc cc 99 72 ac 98 ec 15 21 9e 85 0d fc 7b f7 de 0c d8 cd 88 a7 bb 77 64 fa ff c9 28 09 fe b0 52 6b bc f5 85 d7 dd 3d c2 e4 a7 5b 62 9f 16 bc d1 c5 74 64 eb 18 76 6b bb b5 d8 ef f4 5a 4a 8a 57 d1 0b d2 f2 3a b0 cf 97 57 fa d1 81 02 2a d7 ea 97 08 e2 fd 8d 3e 79 2a 96 11 bf d0 6e 2e f6 3e 53 5f 48 83 97 5d f4 37 9e 26 be a3 d6 98 29 57 1b d7 0a fe cc 64 7f 86 d9 c5 83 cb 64 44 7b d4 f6 df 04 3f b5 d4 5a 68 0f 83 5d a9 d5 67 05 6f 29 e0 fb b4 c9 06 d9 6d 19 3b 95 ac f4 2d e0 91 80 8c 14 95 63 28 29 f5 aa 00 00 20 Data Ascii: XCwfojr~w61+9[7m=Y'r!{wd(Rk=[btdvkZJW:W>yn.>S_H]7&)WddD{?Zh]go)m;-c()
2024-05-02 14:33:06 UTC	1187	IN	Data Raw: f4 e9 35 b2 58 41 98 7e 3c 02 61 83 1a 47 2f 3e bd b0 7b e0 04 71 21 67 38 22 28 47 28 c0 4a 35 9a 71 61 0f 38 af 4b 47 9e 61 ca ae df 68 35 c5 1e 37 f6 4c d6 dd eb f5 33 6d c2 9c b8 f1 43 12 27 71 cf f0 4e 2a a1 79 da be 15 68 2d 4e e4 dc f9 6a cb e2 26 bf fe 0d 34 f7 e6 8d 2b 7b 2f ec 4c 9e f8 9d 80 11 3e 66 e8 06 73 65 f6 f9 b9 51 42 d8 9a 00 6c cb ba f9 fc f0 cb 25 09 e7 6b 01 05 d8 b9 5b 82 2e db 29 f6 d8 b0 e3 c1 cf db 26 73 47 00 79 9d 87 b2 cf e9 8f c8 9d 87 76 fd 7b 86 51 26 78 5e 8c 02 be b9 c0 3e 9f 18 6f 10 ec 1c 5b 2f 23 73 7e 05 f2 a4 5b 58 ca fa a7 ce 05 bd f6 ba 63 3b 71 13 ec c2 f0 ae 7b 20 8c bb 8d 97 d9 86 2c 2a f3 29 f6 f8 b0 23 72 56 d1 cd 1b 24 ac e0 77 90 e7 5e 73 88 5e fc 86 e1 3b 6a 3e fd de 87 e5 33 ac ff 7a 61 f7 93 61 14 98 83 Data Ascii: 5XA~<aG/>{q!g8"(G(J5qa8KGah57L3mC'qNyh-Nj&4+{/L>fseQBl%k[.)&sGyv{Q&x^>o[/#s~[Xc;q{ ,)#rV$w^s^;j>3zaa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49870	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:07 UTC	827	OUT	GET /wp-content/uploads/2017/05/502px-us-fishandwildlifeservice-logosvg.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:07 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:07 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:21:18 GMT Accept-Ranges: bytes Content-Length: 55987 Connection: close Content-Type: image/png
2024-05-02 14:33:07 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f6 00 00 02 57 08 06 00 00 00 61 43 76 6a 00 00 da 7a 49 44 41 54 78 da ec dd 6f 68 95 55 1c 07 f0 83 88 88 88 f8 c2 17 bd e8 45 2f 62 44 f5 22 b8 82 db 73 9e d9 a2 e1 bc 7b ce b9 2e eb ce ba ab 3d e7 b9 d3 8b cd 39 97 b6 30 6b b5 d2 29 3a 45 b7 a4 f9 87 d6 62 ce 69 33 d4 62 d9 52 49 53 d3 65 6b 6c a3 30 56 0c 93 59 11 22 21 23 22 e4 d7 73 c6 88 08 a4 d4 3d f7 9e 7b ef f7 0b 1f ee eb e7 39 87 7b 38 7f 9e df 61 d9 9c 44 28 34 35 1e e1 39 4a f0 62 57 d8 95 4a d8 db 7c 9d be 1e 5f af 12 d6 b0 12 7c d4 77 dd 37 e6 23 00 00 48 89 9b be eb 13 46 7d 03 be 93 be 83 9e b0 9b 3c c9 6b ca 85 5d 52 1e c9 7b 24 21 43 33 18 92 f9 51 05 05 d3 dd 62 6b be 72 f8 3a dd 11 5c c1 87 fc df 3f 0c e9 b0 00 00 30 79 6e ea Data Ascii: PNGIHDRWaCvjzIDATxohUE/bD"s{.=90k):Ebi3bRISekl0VY"!#"s={9{8aD(459JbWJ\|_\|w7#HF}<k]R{$!C3Qbkr:\?0yn
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: 26 fb a0 f9 6e 5a 6d fb fc 0e 65 b6 63 56 82 21 03 25 ab f2 fc 2a 7f 17 4e 44 20 db b1 88 d0 3e 80 7e 95 26 c3 71 71 e3 c0 57 13 06 47 fa 14 bf 29 6d 8d be 45 fb 78 70 df 20 ce 82 84 a4 79 9d 0b 33 29 db 21 1c 8b 23 1a 13 14 da 97 29 6c 59 c8 89 8f f3 28 0e 5a 47 ef b9 99 6b 1a 9e e3 ce 72 b9 84 8d f2 be 89 69 66 6c 20 3e 9c f6 52 64 1d 62 8f 96 df 8f 77 96 0d 45 e5 1e 78 1f 64 ba a4 9f f9 de 07 8b 04 4a eb f2 dc 4c aa 58 49 12 ce ca ca dc 36 11 32 c5 9f df 0d 27 3f 57 ae 04 73 e1 c0 35 c8 e5 c0 58 8a 65 ca 1c 27 78 1f 4c 90 7d cf 85 55 86 e7 e6 b7 6b c7 0f 85 eb f3 1b 02 e3 0a 4e 91 be d7 e6 dd 31 49 63 9c e4 b7 e4 99 98 08 e2 70 8b c5 94 df ab 68 12 2c 61 8f 41 d8 47 52 73 4a 10 34 c4 3a ae 8d 89 30 77 55 81 f0 e0 a1 ff dc e1 5d a4 bd 65 a6 9c 15 6a 42 Data Ascii: &nZmecV!%*ND >~&qqWG)mExp y3)!#)lY(ZGkrifl >RdbwExdJLXI62'?Ws5Xe'xL}UkN1Icph,aAGRsJ4:0wU]ejB
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: b7 e0 14 c2 22 c6 a4 74 20 76 3d e4 26 cd 87 d8 ad 04 d7 e9 76 f0 8b 50 6c f2 6c e0 94 4a 63 16 07 d0 d9 5d 9f 89 68 9f 39 4c 58 ae bd bb f5 46 ce 1b e9 c8 f6 11 76 d9 27 af cd 9b 23 43 94 6a 81 8b b9 1c 7a 4d c4 58 54 0b 10 3b c4 6e 53 78 db d3 fb f3 16 59 6c 12 bd cf 2d 91 82 62 a7 88 68 ab 29 94 e4 7e aa ea 7c f0 7a f6 b1 6b be f0 8d 9e 80 39 19 c2 54 03 e7 ee 27 da ff ae 88 b1 a8 26 20 76 88 dd 66 24 6f fc de 6a 01 61 1f cc 5f cc 19 db 44 b4 db 08 38 7a 5c 84 8c 94 a4 89 6b 22 47 c4 9b bc 4f bd ae 63 9a 88 76 98 ca 03 ee b1 32 a4 29 19 8e 3f 28 6e 8d a5 77 88 1d 62 57 13 e1 1b 9c ac be e7 98 9f db 17 66 8f 14 d1 7e 43 b8 b2 67 10 35 f3 88 13 21 23 25 e9 3e 67 a9 49 fd c1 8f 55 fe cf 7d bd 88 36 98 43 7b ff 20 19 f2 94 ca f9 7b 88 0e 76 13 31 06 d5 0a Data Ascii: "t v=&vPllJc]h9LXFv'#CjzMXT;nSxYl-bh)~\|zk9T'& vf$oja_D8z\k"GOcv2)?(nwbWf~Cg5!#%>gIU}6C{ {v1
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: 10 9d 30 59 e7 a3 78 cc e2 f5 79 50 16 89 05 5e 1f 96 24 8e 27 61 73 4a fc 8f 5f 11 89 b9 d1 85 f7 22 0e bc 90 5d 0e 5b ea c1 2a f8 95 4f a9 f0 ad 90 61 fa 30 73 49 dd 28 ce f0 e7 25 ec e8 8c ce e8 3c 67 6e a7 21 ec e6 bb 58 3a db bd 2a 8a 9b 21 a6 8e ec 2b 9d ef 37 de 41 78 b8 0b 9a cd d6 74 5b ad 8b 61 7e f2 28 ad d7 df cd eb 62 b0 29 69 cf 66 5b 92 b0 39 15 f0 8b da 2b f3 e9 d7 0e c0 74 b1 13 d7 9c 83 fb 8f eb 40 dd ee d6 3e 85 11 f9 95 3a fd fe c8 85 11 24 ec cd 83 da bc 0f e5 37 84 ab a3 49 26 5d d3 b1 00 8c a5 86 b0 2b f2 58 3a 2b 4e f7 e3 66 08 9f 89 76 d2 c9 73 02 ed f5 f7 70 2f 13 1e ee a6 ca 9d bc 2e da 16 43 dc c9 4b fe ce ad bc cf c0 32 38 95 c4 a2 af 23 58 dd 8e 84 bd 29 71 3e 47 41 62 6e e4 18 90 79 02 4b b1 be 20 e8 1e 9b 2e c1 af 7d 4b 75 Data Ascii: 0YxyP^$'asJ_"][Oa0sI(%<gn!X:!+7Axt[a~(b)if[9+t@>:$7I&]+X:+Nfvsp/.CK28#X)q>GAbnyK .}Ku
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: c5 cb ae bd 70 3a b5 4c 10 d0 71 32 82 07 35 f9 50 5c bb 9b 1c af 87 ce 34 c8 84 6c bf ff ec 94 c3 62 c0 eb ef 08 56 f1 61 32 52 f6 66 c6 3a 56 f4 2f c9 36 4a 02 b9 9d a1 ee 36 e1 8d f7 cc a4 31 a1 78 3e 79 f5 6f 77 dc 20 fb d6 5f cc 73 6d 1d ea 72 a3 a6 de b9 7e 59 5b 6d f4 be 2d ab a8 cb b4 33 fb 0a b6 3b 0d e2 de 5d 58 cc a7 17 a9 1b 09 8b 49 8a d9 01 7e 2f a8 7f ab aa 81 04 f4 d7 16 0c 12 1d eb 96 b1 3d 06 2b f7 a3 9b d4 a4 38 1b 5c 66 77 15 ca 25 cb 55 fb 6b a1 78 e9 b5 17 4e 27 b8 1f b8 f4 b1 88 97 11 30 59 d1 3e d4 2b dc 29 7a 18 da 5c 8c 1a b5 12 c8 48 49 22 1e c6 4a 1b 11 9a e3 32 45 1f 8d a1 3c 68 26 b0 31 4a 07 50 ba 02 ae 43 31 ce 64 4c 56 e2 72 ef 7f 21 5b 2c 11 a9 19 bd f3 62 a0 fb 7d b4 6e 6f e5 78 3c b4 53 6d d7 55 34 6d 70 e6 ee ab ed 4b Data Ascii: p:Lq25P\4lbVa2Rf:V/6J61x>yow _smr~Y[m-3;]XI~/=+8\fw%UkxN'0Y>+)z\HI"J2E<h&1JPC1dLVr![,b}nox<SmU4mpK
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: b4 24 fa 30 10 f0 b6 d4 bd f0 c7 1b 86 94 ab c3 fd a1 dd cd 76 42 48 56 03 c2 1b f3 b6 2b e9 4b 4f 90 ad 5c 98 ed 65 3c 35 af 96 55 c1 95 f6 37 b0 44 46 bf b9 d9 11 d2 42 2d d3 e0 83 a7 64 aa 14 f2 22 1b ba 7b d5 68 02 36 a5 52 ef 9d 47 fe fd 22 ed d8 11 6d c1 58 cf 12 25 ee 83 8b 37 a0 87 43 bf a3 f2 65 18 d5 bd be 68 51 ed 25 d5 04 80 97 11 6e 63 07 cd e1 62 d6 3a bc 77 a7 56 25 f7 e1 1e dc 53 2b a4 89 07 f4 ca 3d 91 ce ca cb 1c c8 a0 15 35 28 47 5d 7d c1 91 cb 4e 00 b2 50 5c 5b 5e 1c 31 9a dc c6 ea 38 6d ce 71 91 32 f3 a8 e8 f3 da db 22 de f6 9e 7c 3e 90 df 18 ea 70 79 34 da cf 1c 09 62 cc ef c0 a4 3d b6 1d 11 b4 c7 b9 aa c3 99 b7 47 b8 25 11 8d 01 2b 17 79 0a ea 8c 93 5e 08 68 20 90 a1 7c a9 e4 8b 37 c4 b9 28 71 8e eb dd 50 b4 4b 4f fe ba 37 bd 0e 74 Data Ascii: $0vBHV+KO\e<5U7DFB-d"{h6RG"mX%7CehQ%ncb:wV%S+=5(G]}NP\[^18mq2"\|>py4b=G%+y^h \|7(qPKO7t
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: e3 50 5b 43 56 d6 40 fa 52 16 50 a3 e7 dd fb 67 e5 3e 9a 21 4d e9 fb 9e a5 55 4e 13 cf b7 cb 14 4f 8f de 21 9e 9f 7a 44 a4 cd 39 2e 6a 2c 3c 29 ea 2f 39 2d 08 dc 99 52 f9 6c e6 fe f7 51 5d 43 de 54 93 cb 14 32 bb 7b f7 ae d8 bf 63 83 c8 ea d9 cc 6f c6 c8 e8 52 f1 b5 42 df b3 6a 34 b4 af fc 1b a0 29 dd 24 80 d6 c8 a8 b1 72 37 24 57 f9 ad 82 c3 f1 73 ae 7e ce 93 f6 5a 03 2d 1f 4b a0 dc e6 6a 2f 3f ae 05 5d b4 25 de d0 73 97 2f e5 6d e9 22 56 4c 75 d9 99 6d bc 90 c6 d0 13 ef a9 7e 47 1b 1a 01 f9 c0 ba f1 39 7f 5f 3e b5 a7 f9 b8 8e ed 32 c8 c9 1a b5 3b b3 da 1b 83 90 55 41 2a 7a 2d f9 f9 a3 3b 1a 4a 77 be 9c 41 7b 70 c7 7a 62 d3 ca f9 e2 93 8f 75 1f 7a 61 36 82 f9 d1 bd db c4 e4 a1 9d 45 93 ca cf fb 7e b7 28 7d 8d eb dd 50 d6 b5 27 e7 f9 5d 27 1b 37 bc 0b c0 Data Ascii: P[CV@RPg>!MUNO!zD9.j,<)/9-RlQ]CT2{coRBj4)$r7$Ws~Z-Kj/?]%s/m"VLum~G9_>2;UA*z-;JwA{pzbuza6E~(}P']'7
2024-05-02 14:33:07 UTC	2	IN	Data Raw: 60 82 Data Ascii: `

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49871	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:07 UTC	769	OUT	GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:07 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:07 GMT Server: Apache Last-Modified: Mon, 08 Apr 2024 18:29:56 GMT Accept-Ranges: bytes Content-Length: 113381 Connection: close Content-Type: text/css
2024-05-02 14:33:07 UTC	7985	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-a
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 61 75 74 68 6f 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 61 75 74 68 6f 72 20 2e 61 76 61 74 61 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 2e 35 65 6d 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 68 65 69 67 68 74 3a 32 2e 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 37 35 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 3b 77 69 64 74 68 3a 32 2e 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 61 75 74 68 6f 72 20 63 69 74 65 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e Data Ascii: ments .comment-author{line-height:1.5}.wp-block-post-comments .comment-author .avatar{border-radius:1.5em;display:block;float:left;height:2.5em;margin-right:.75em;margin-top:.5em;width:2.5em}.wp-block-post-comments .comment-author cite{font-style:normal}.
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 Data Ascii: -background-dim.has-background-dim-70 .wp-block-cover__gradient-background,.wp-block-cover-image.has-background-dim.has-background-dim-70:not(.has-background-gradient):before,.wp-block-cover.has-background-dim.has-background-dim-70 .wp-block-cover__backgr
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 69 73 2d 70 6f 73 69 74 69 6f 6e 2d 74 6f 70 2d 72 69 67 68 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 69 73 2d 70 6f 73 69 74 69 6f 6e 2d 74 6f 70 2d 72 69 67 68 74 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 69 73 2d 70 6f 73 69 74 69 6f 6e 2d 63 65 6e 74 65 72 2d 6c 65 66 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 69 73 2d 70 6f 73 69 74 69 6f 6e 2d 63 65 6e 74 65 72 2d 6c 65 66 74 7b Data Ascii: tems:flex-start;justify-content:center}.wp-block-cover-image.is-position-top-right,.wp-block-cover.is-position-top-right{align-items:flex-start;justify-content:flex-end}.wp-block-cover-image.is-position-center-left,.wp-block-cover.is-position-center-left{
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 6c 61 62 65 6c 2e 69 73 2d 6c 61 62 65 6c 2d 69 6e 6c 69 6e 65 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 67 61 70 3a 2e 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 6c 61 62 65 6c 2e 69 73 2d 6c 61 62 65 6c 2d 69 6e Data Ascii: ;text-decoration:none}.wp-block-form-input__label{display:flex;flex-direction:column;gap:.25em;margin-bottom:.5em;width:100%}.wp-block-form-input__label.is-label-inline{align-items:center;flex-direction:row;gap:.5em}.wp-block-form-input__label.is-label-in
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: 6f 66 2d 74 79 70 65 28 36 6e 29 2c 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 37 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 37 6e 29 2c 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 37 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 37 6e 29 2c 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 38 20 2e 62 6c Data Ascii: of-type(6n),.blocks-gallery-grid:not(.has-nested-images).columns-7 .blocks-gallery-image:nth-of-type(7n),.blocks-gallery-grid:not(.has-nested-images).columns-7 .blocks-gallery-item:nth-of-type(7n),.blocks-gallery-grid:not(.has-nested-images).columns-8 .bl
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: 75 6d 6e 73 2d 64 65 66 61 75 6c 74 20 66 69 67 75 72 65 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 3a 6e 6f 74 28 23 69 6e 64 69 76 69 64 75 61 6c 2d 69 6d 61 67 65 29 3a 66 69 72 73 74 2d 63 68 69 6c 64 3a 6e 74 68 2d 6c 61 73 74 2d 63 68 69 6c 64 28 32 29 7e 66 69 67 75 72 65 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 3a 6e 6f 74 28 23 69 6e 64 69 76 69 64 75 61 6c 2d 69 6d 61 67 65 29 7b 77 69 64 74 68 3a 63 61 6c 63 28 35 30 25 20 2d 20 76 61 72 28 2d 2d 77 70 2d 2d 73 74 79 6c 65 2d 2d 75 6e 73 74 61 62 6c 65 2d 67 61 6c 6c 65 72 79 2d 67 61 70 2c 20 31 36 70 78 29 2a 2e 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 2e 63 6f 6c 75 6d 6e 73 2d 64 65 66 61 75 6c 74 20 66 69 67 75 Data Ascii: umns-default figure.wp-block-image:not(#individual-image):first-child:nth-last-child(2)~figure.wp-block-image:not(#individual-image){width:calc(50% - var(--wp--style--unstable-gallery-gap, 16px)*.5)}.wp-block-gallery.has-nested-images.columns-default figu
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: 79 66 72 61 6d 65 73 20 6c 69 67 68 74 62 6f 78 2d 7a 6f 6f 6d 2d 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 63 61 6c 63 28 28 2d 31 30 30 76 77 20 2b 20 76 61 72 28 2d 2d 77 70 2d 2d 6c 69 67 68 74 62 6f 78 2d 73 63 72 6f 6c 6c 62 61 72 2d 77 69 64 74 68 29 29 2f 32 20 2b 20 76 61 72 28 2d 2d 77 70 2d 2d 6c 69 67 68 74 62 6f 78 2d 69 6e 69 74 69 61 6c 2d 6c 65 66 74 2d 70 6f 73 69 74 69 6f 6e 29 29 2c 63 61 6c 63 28 2d 35 30 76 68 20 2b 20 76 61 72 28 2d 2d 77 70 2d 2d 6c 69 67 68 74 62 6f 78 2d 69 6e 69 74 69 61 6c 2d 74 6f 70 2d 70 6f 73 69 74 69 6f 6e 29 29 29 20 73 63 61 6c 65 28 76 61 72 28 2d 2d 77 70 2d 2d 6c 69 67 68 74 62 6f 78 2d 73 63 61 6c 65 29 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c Data Ascii: yframes lightbox-zoom-in{0%{transform:translate(calc((-100vw + var(--wp--lightbox-scrollbar-width))/2 + var(--wp--lightbox-initial-left-position)),calc(-50vh + var(--wp--lightbox-initial-top-position))) scale(var(--wp--lightbox-scale))}to{transform:transl
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 6a 75 73 74 69 66 79 3a 69 6e 69 74 69 61 6c 3b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 61 6c 69 67 6e 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6e 6f 2d 77 72 61 70 7b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 77 72 61 70 3a 6e 6f 77 72 61 70 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 69 74 65 6d 73 2d 6a 75 73 74 69 66 69 65 64 2d 63 65 6e 74 65 72 7b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 6a 75 73 74 69 66 69 63 61 74 69 6f 6e 2d 73 65 74 74 69 6e 67 3a 63 65 6e 74 65 72 3b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 6a 75 73 74 69 66 79 3a 63 65 6e 74 Data Ascii: vigation-layout-justify:initial;--navigation-layout-align:flex-start}.wp-block-navigation.no-wrap{--navigation-layout-wrap:nowrap}.wp-block-navigation.items-justified-center{--navigation-layout-justification-setting:center;--navigation-layout-justify:cent
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 6a 75 73 74 69 66 79 2c 69 6e 69 74 69 61 6c 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 69 73 2d 6d 65 6e 75 2d 6f 70 65 6e 2e 69 73 2d 6d 65 6e 75 2d 6f 70 65 6e 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 2e 69 73 2d 6d 65 6e 75 2d 6f 70 65 6e 7b 61 6e 69 6d 61 74 69 6f 6e 3a 6f 76 65 72 6c 61 79 2d 6d 65 6e 75 5f 5f 66 61 64 65 Data Ascii: --navigation-layout-justify,initial)}.wp-block-navigation__responsive-container:not(.is-menu-open.is-menu-open){background-color:inherit!important;color:inherit!important}.wp-block-navigation__responsive-container.is-menu-open{animation:overlay-menu__fade

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49876	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:07 UTC	809	OUT	GET /wp-content/uploads/2018/02/social-inovation-fund.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:07 UTC	206	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:07 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:23:31 GMT Accept-Ranges: bytes Content-Length: 9240 Connection: close Content-Type: image/png
2024-05-02 14:33:07 UTC	7986	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e1 00 00 00 e1 08 03 00 00 00 09 6d 22 48 00 00 00 ff 50 4c 54 45 ff ff ff 00 00 00 ef 3e 36 00 5b aa c9 c9 c9 35 35 35 fc fc fc 9c 9c 9c f8 f8 f8 44 44 44 f5 f5 f5 d6 d6 d6 f4 f4 f4 f1 f1 f1 ee ee ee e4 e4 e4 db db db e7 e7 e7 b3 b3 b3 bb bb bb d0 d0 d0 e0 3d 35 c2 c2 c2 57 57 57 07 08 07 ef 3a 31 8b 8b 8b df df df ef 61 5a fe f8 f7 79 79 79 bf bf bf 97 97 97 ee 24 18 2a 2a 2a 49 56 97 6a 6a 6a 5f 5f 5f 9b 9b 9b 7a 7a 7a 82 82 82 52 52 52 3b 3b 3b a7 a7 a7 65 65 65 1a 1a 1a 8c 8c 8c 23 23 23 00 51 a6 4a 4a 4a 1c 1c 1c a7 be dd 12 12 12 00 54 a7 00 4c a4 ef 33 29 d0 dd ed de e7 f3 f0 50 49 ae b6 cd f4 c6 c3 fd e8 e6 f6 bc b8 3e 4c 92 fb df dc b3 c6 de f2 a0 9c f0 aa a6 ed 66 5f de 29 1c f7 9f 9a ec Data Ascii: PNGIHDRm"HPLTE>6[555DDD=5WWW:1aZyyy$***IVjjj___zzzRRR;;;eee###QJJJTL3)PI>Lf_)
2024-05-02 14:33:07 UTC	1254	IN	Data Raw: d8 69 27 d6 b0 d2 8e b6 f5 29 bb b4 e1 44 63 20 19 80 a2 b7 7e 03 69 7c ba 06 7e 07 a2 c5 18 38 8a 6f 23 29 52 4b 57 3f d4 6f 2e f0 7e b4 24 48 74 72 7c 25 30 ee 8f c8 51 1d 77 b9 95 4d c4 12 2a 64 4e 4d fe 34 d1 cc 5b f2 04 e4 92 38 1e de 0b 8f 04 0d 45 1a 17 3b 06 fc 11 49 a4 ec c8 15 db 31 4b 3e e7 29 bb 8c 9a 52 5b 73 be 2e 07 31 03 b0 b9 f8 d0 78 db f0 af ef 44 c8 bd ec c1 5b 11 ad 07 8d 82 68 dc e5 86 73 ea c9 8e 64 6b cf 03 c0 fb d1 39 c0 41 4e bc 94 fa 56 d2 10 7b 86 c0 3c 7b 40 66 e4 7b bc 17 05 ed 0e 3e c4 a0 2a 1b 93 39 dd 21 87 c4 ef c9 2e 93 b6 a4 04 66 40 43 b1 8c 20 66 52 c4 bc 61 f2 00 5c 1d 38 15 de 19 7b 93 f4 fc 7f e3 dc d7 d4 08 48 42 1b af 65 57 00 4c 5e fd d0 c6 86 42 20 ec af 59 0b 98 0c 68 68 02 2c d5 d3 4f 1f 03 cb ce d6 23 d9 d1 Data Ascii: i')Dc ~i\|~8o#)RKW?o.~$Htr\|%0QwMdNM4[8E;I1K>)R[s.1xD[hsdk9ANV{<{@f{>9!.f@C fRa\8{HBeWL^B Yhh,O#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49877	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:07 UTC	796	OUT	GET /wp-content/uploads/2018/06/NSF_Logo.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:07 UTC	209	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:07 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:24:32 GMT Accept-Ranges: bytes Content-Length: 1899601 Connection: close Content-Type: image/png
2024-05-02 14:33:07 UTC	7983	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 ba 00 00 06 c3 08 06 00 00 00 be 46 f4 81 00 00 20 00 49 44 41 54 78 01 ec bd 0d 98 24 59 59 e7 9b 59 dd d3 d3 d3 0c 4d 33 0c e3 30 0e cd 80 c3 f0 e1 38 b2 b3 2c e2 2c 8b ec 2c d7 65 11 15 01 61 c4 8f 45 16 01 15 54 14 17 f1 ae fa b0 2e 7e ac d7 c7 c7 55 fc b8 5e af eb 17 c8 65 41 58 44 45 3e e5 63 44 96 45 04 45 44 9c 45 64 47 60 59 44 18 66 ba ab 2a 33 ef ff ff be e7 44 44 56 65 55 57 75 57 55 67 64 fe a2 3b f2 9c 38 71 e2 c4 89 5f 64 bc 15 f9 fe e3 3d 31 9c 4c 26 03 26 08 40 00 02 10 80 00 04 20 00 01 08 40 00 02 10 80 00 04 20 00 01 08 40 00 02 10 80 00 04 20 00 01 08 f4 8d c0 4a df 3a 4c 7f 21 00 01 08 40 00 02 10 80 00 04 20 00 01 08 40 00 02 10 80 00 04 20 00 01 08 40 00 02 10 80 00 04 20 60 Data Ascii: PNGIHDRF IDATx$YYYM308,,,eaET.~U^eAXDE>cDEEDEdG`YDf*3DDVeUWuWUgd;8q_d=1L&&@ @ @ J:L!@ @ @ `
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: 6f f6 06 01 08 40 00 02 10 80 00 04 20 00 81 dd 11 b0 a8 71 e8 42 09 1b 1a ce 10 c1 6b 77 ec 76 50 5b 02 91 df cd 95 c3 fe 59 55 0a 79 69 f3 86 6d bc d6 86 75 8d b0 d5 11 bb 5c 65 c3 e2 86 ad 62 b1 19 9e 70 d6 4a 95 79 fd 17 5e ff f5 29 6c 29 1f c3 16 46 79 47 f8 52 97 a3 9d e1 e0 06 a5 0c 5f b8 05 cb 9d 16 7b a8 c2 f1 78 55 d5 77 70 02 77 da 28 f5 20 00 01 08 40 00 02 10 80 00 04 20 00 81 7d 25 80 d0 b5 af 78 69 1c 02 10 80 00 04 20 00 01 08 40 00 02 7b 41 a0 0a 30 4e 71 c0 ef 05 51 b7 f1 0f ff eb 7d 2b 52 89 ae 97 40 e4 38 a9 a6 d9 10 8e 9a a5 8d 19 f3 cf 73 50 c5 af d0 ba a2 68 e3 b9 d9 b8 bc b1 ad ce b2 05 cd da 05 a5 b5 3f 2e 6a a2 b9 5c ae 39 97 9b f7 73 95 b2 e1 35 5a e5 e8 34 a6 b3 20 30 99 8c 11 b8 ce 82 1b 9b 40 00 02 10 80 00 04 12 0f b9 6f 00 Data Ascii: o@ qBkwvP[YUyimu\ebpJy^)l)FyGR_{xUwpw( @ }%xi @{A0NqQ}+R@8sPh?.j\9s5Z4 0@o
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: d7 ab a2 cc a5 65 5d 18 1c d7 cd 9a 75 eb 5a af 59 de a3 cc 76 51 5d a9 68 59 b5 d3 b1 14 81 2b a3 bb bc 73 75 50 8e 6c f7 db d6 b9 44 7a 3d f6 f7 5f f9 fd 3f f3 a8 c7 fe c8 2d 7b d4 bd f3 dc 4c 39 27 e7 b9 17 ec be 2f 04 7c cd 7b 76 34 39 93 6c c3 f5 72 9e 3f a1 92 98 b2 71 2e d4 7d 97 e7 14 94 47 83 95 c3 7a d7 99 cb 6c 55 c2 0e 6a 5d 91 d1 b3 6e b9 1e b5 ae b6 75 e7 4b 34 ba 75 d9 e6 ef ff ee 2d 72 d2 3b 92 cb 42 57 89 e2 5a ef 44 6e 55 a1 6b 43 59 1d 9e 3a 4d ef e4 77 64 13 df 5d fb 4c 0a 81 e5 20 a0 07 56 fc 30 e0 fa ed cb 71 b8 1c 25 04 20 00 81 73 24 e0 df 3e 4c 10 80 00 04 20 00 01 08 40 60 26 01 89 4a 2b 9a 6f d0 7c 7f bd 4b e1 f0 58 8e 8a 78 67 96 1d 16 f1 6e 05 bf 5f 41 ef d2 2a ef cf ca f5 25 f2 aa 46 60 75 d2 5a 37 eb ab 2d b5 33 d2 b6 47 ef Data Ascii: e]uZYvQ]hY+suPlDz=_?-{L9'/\|{v49lr?q.}GzlUj]nuK4u-r;BWZDnUkCY:Mwd]L V0q% s$>L @`&J+o\|KXxgn_A*%F`uZ7-3G
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: 79 ba 0a 01 08 40 60 01 09 20 74 2d e0 49 e5 90 20 00 01 08 40 00 02 07 4d 40 ce d0 f7 6b fe 98 9d a2 ed d4 2e d8 89 5a a7 8f ff d5 af d5 ac 52 97 b7 eb da 15 b3 ca da b5 b3 72 9d 5d 84 77 36 5a d6 87 a3 13 aa 53 d7 75 72 78 ae a8 a2 75 76 ec 96 79 30 7c ac 72 1e c6 90 09 02 10 98 4b 02 c3 17 aa 5b 37 b6 5d ab 8e 53 3b 73 ab f3 b6 38 76 23 92 6b 34 38 7a fc 9e aa 5e 05 ad ac 1f ce df 22 2c ab 44 5e d8 f8 df 71 ea 6a 13 7b 67 17 76 2a 43 16 56 db 17 76 71 30 e8 0e 69 68 85 2b ec b6 d2 92 7f 96 6c 69 33 5c e4 c2 a2 e1 c0 20 d0 1f 02 3f a0 ae 3e b4 76 b7 8a 50 69 d0 d2 0e 86 ad 53 14 d7 c0 f6 50 b3 a3 b9 a2 5e a8 4f 69 17 5d 3f ec a0 3f c3 ee d5 e5 da f2 74 5a 2d 63 4d bd 36 05 2c a7 6e 2d 53 67 fc 5e 2e 47 70 b5 eb 9d 9f 6e 4f 4b 9f d0 fc c1 4d a5 14 40 60 Data Ascii: y@` t-I @M@k.ZRr]w6ZSurxuvy0\|rK[7]S;s8v#k48z^",D^qj{gv*CVvq0ih+li3\ ?>vPiSP^Oi]??tZ-cM6,n-Sg^.GpnOKM@`
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: 00 dc f5 fe bf 83 83 eb 2a 7d c1 d4 2f 78 f3 d1 7f 69 c4 9c 4e 19 e2 66 7d 11 4d e3 4f a6 b3 e1 ea 9c 5d 18 66 f3 9f 0d b4 61 a4 e5 f1 85 71 24 2d ee 2d 1e 67 e8 fc a3 e5 20 7b c5 15 ef 7f c6 03 67 4b 2e 6a 21 b0 bd 10 90 73 6b 4e f1 22 8d 5a 0e ae 91 4e de 2c 9e 1d 86 57 ad 21 1b 6f 55 ea 1c 56 da 06 c8 fb 71 85 3c 9e b0 19 73 39 cd d5 1c 5e c7 df fe 74 1b a5 30 4c 85 53 4b 69 3a b5 ec ec 0a 63 2e b2 bd 4a cd 97 eb 95 34 e2 a4 df 65 b3 f6 93 c1 5c 6e 81 21 0c 46 b3 ba 6c 07 62 e2 9b cd c2 d9 15 a5 a8 f3 75 82 9f 79 0f 8e 93 ef fc 7d a3 93 cf fa 3e 4d 8d 08 26 52 d1 2a 53 a4 d3 21 48 e4 87 e5 8e f1 0c ed ad 3f a0 12 8f 7e 7b df 8d d7 bc f7 67 14 cf 50 dc db 71 54 a6 10 d8 42 08 8c f7 9f b1 4f c3 f9 3d c5 67 29 ca 8b af a0 75 90 4e ae ee 47 00 87 75 72 e1 Data Ascii: }/xiNf}MO]faq$--g {gK.j!skN"ZN,W!oUVq<s9^t0LSKi:c.J4e\n!Flbuy}>M&RS!H?~{gPqTBO=g)uNGur
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: 4b a6 18 a7 9a e1 06 5b d4 78 50 c6 b4 13 06 1d cc 3e 43 83 68 18 b9 e2 e4 16 46 54 82 5a eb ff 29 e7 3c 72 14 ce 2e 68 32 0d d9 48 b6 47 79 de af 04 4e 18 ca 28 bb 37 a5 19 a6 cb 49 ef d2 b3 d5 f8 3f c4 58 47 1f 14 f5 b2 1b fe e9 d2 f7 aa fc 1e 39 bd ae 38 e5 ac 07 d7 49 af 0e aa f5 cf dc 7a db 37 99 cf 13 d4 d3 85 9a 83 87 29 c5 20 fb 70 cd eb 19 4a 35 bb cc e7 54 b0 21 74 50 27 a3 a9 9d 02 66 8d 13 03 b1 9e 66 38 b7 7c a2 40 ba 83 a1 d5 46 58 9c 5e f0 cd 8f 38 bd 85 54 0c ad f9 78 42 f2 9d 51 96 da 65 1d 5c 74 1e 6d 3d 66 e4 9b 12 34 17 06 f7 12 e3 0b 6a 5d 0b 81 0e 81 6e df b4 36 05 19 7d 24 e7 0b 7a e6 1d 30 d4 8d 52 a3 c7 df 09 18 c5 df 35 c0 b9 d5 68 16 a0 0a 55 76 34 f3 8d 46 27 de f1 1e 48 f2 63 0d e3 f1 b1 54 68 4f 96 1e 53 8e 11 70 6d 74 74 39 Data Ascii: K[xP>ChFTZ)<r.h2HGyN(7I?XG98Iz7) pJ5T!tP'ff8\|@FX^8TxBQe\tm=f4j]n6}$z0R5hUv4F'HcThOSpmtt9
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: 95 71 c7 ae 0b 1a fd e4 5e 9c 3c ee bb 6b 6f 0e 93 c4 d9 d2 2c 4e 95 27 6b 77 6e 89 79 6f f8 a4 0e 85 0e c7 49 2e fe 56 75 4e 2f 58 15 43 55 c6 e7 0a 14 1e 5f 58 8e 2e 81 b0 fd 83 3e c7 77 a7 b8 58 0b 87 5f ef db ff 9e eb 0e 0a 81 42 a0 10 28 04 b6 2a 02 e5 e8 da aa 33 53 e3 2a 04 0a 81 42 60 17 23 50 ce ae 1d 34 f9 e3 39 5e 98 71 00 33 5a 67 3c 4a e3 88 53 ee 75 3c 3a 78 e7 87 29 5d de 58 b4 7c 0d ed b7 67 48 53 c0 d2 7b 4b 93 63 6f 7c c4 88 94 06 a5 34 2a 86 51 0f 63 2d 92 c4 db 04 19 eb 66 68 e8 8c a9 e6 10 9f 78 c3 f8 47 0b ca aa 48 c3 69 96 81 33 85 89 e6 d1 b4 39 73 1b ea 09 ee 57 b5 dd 0d 74 99 a8 0f e1 39 dc 46 1b 26 74 4e 98 6e 17 d4 a3 bf 2e 95 e7 31 76 86 d2 69 c9 f0 f7 6d 8c 6b 7f 53 ad 2e ef 73 c0 2b 1e 63 d9 89 8b 53 02 51 14 1f f5 c8 8d ce Data Ascii: q^<ko,N'kwnyoI.VuN/XCU_X.>wX_B(3SB`#P49^q3Zg<JSu<:x)]X\|gHS{Kco\|4*Qc-fhxGHi39sWt9F&tNn.1vimkS.s+cSQ
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: b2 0b 47 58 3a b8 70 90 71 fa eb 0c 45 4e 85 dd 59 f1 1c 45 1c 64 38 c3 70 92 e1 1c c3 19 b6 aa c0 da 99 e7 a2 09 1e fb 34 97 9c 58 ed f1 86 43 47 17 ef c4 d3 7f bd 1b 8f 93 37 cd b9 25 c2 f0 94 d7 1e b5 7f e7 a5 7f 1d 8e 2f d5 3d 10 a7 97 64 a7 6f 8a 6e 70 6a cd b1 37 4b 96 fe 2b 72 45 c7 a8 6b 34 7d 30 e0 11 a5 e8 8f 69 ba 30 42 73 9a 46 ae 85 ac c8 72 a5 9b 8e 80 67 47 17 e6 34 03 f3 e8 b2 32 cc 26 65 f4 89 0b 7f 86 e7 98 73 95 cd 27 8e 39 e9 99 ff 3c 2f 8e 1e a0 e2 85 e2 bc 2c 65 55 ba 7e 08 2c 75 70 31 49 83 89 5c bf ae 4b 72 21 50 08 14 02 85 40 21 b0 ee 08 94 a3 6b dd 21 ae 0e 0a 81 42 a0 10 28 04 b6 0a 02 f5 28 c3 0d 9b 09 1c 5d e7 fa e7 e2 9c c6 f2 77 e8 d5 7c 89 86 67 8a 6f 68 45 d9 b0 e1 57 47 47 84 c0 d4 94 0d db ca ac e5 62 4e e3 d0 28 6e 43 Data Ascii: GX:pqENYEd8p4XCG7%/=donpj7K+rEk4}0i0BsFrgG42&es'9</,eU~,up1I\Kr!P@!k!B((]w\|gohEWGGbN(nC
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: 81 88 c4 b5 6d 51 0f 44 c1 bd 90 8e 80 23 e0 08 38 02 8e 40 5f 23 e0 44 57 5f 37 8f 17 ce 11 70 04 1c 01 47 60 b0 10 c0 63 78 fa 48 3f 58 25 ef a4 b4 10 43 3c 1e f5 7c 72 dd 3d 7c 66 37 45 81 77 d0 3b ad 79 24 7c 8d 46 d1 07 7b 25 52 28 18 0f 37 64 16 89 6b c9 b8 b9 b0 08 a8 b0 5b 1b 45 09 2d 36 87 1e 51 58 8b 8f 2a a4 1f dd d0 24 b9 be 3e f7 9d 5c 77 21 87 0f 41 3f e3 e4 f7 7d e9 eb d0 53 0b 5b 63 cf ad 3b 08 28 01 da 9d b4 ca 53 01 c9 85 a3 ce c6 af 1e 13 92 8b df e2 d2 63 0b 33 72 8b 8f 36 a6 39 1f 07 45 49 69 dd dc 0c bf 28 8a 45 1d 66 b3 38 dd ea 3c 2c 43 bc ae da 46 30 44 01 1c ab d7 46 ee 2e 58 47 ac 01 ba 80 d8 30 25 31 36 5e b9 0a 44 c6 d9 42 68 60 d8 06 42 43 4c fa 51 d9 d0 35 53 7d ed 1a f7 1f da 63 b7 c5 69 d3 4c d7 20 6d c6 f7 68 73 47 40 1a Data Ascii: mQD#8@_#DW_7pG`cxH?X%C<\|r=\|f7Ew;y$\|F{%R(7dk[E-6QX*$>\w!A?}S[c;(Sc3r69EIi(Ef8<,CF0DF.XG0%16^DBh`BCLQ5S}ciL mhsG@
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: b1 a4 06 cd f1 8e d7 2e 54 c7 1d 78 18 1a c9 eb 50 8a 80 cc 9e b9 fe db 7c 3e 15 b2 4b fa 47 36 0f ea b8 a7 9b 73 1b 85 ea 1a 46 b7 74 b0 24 79 1d cc 53 6f bd fe b3 fe cd ae d2 96 f0 00 47 60 7e 08 8c a5 44 17 c9 2e ee ec c2 f1 85 e1 a5 06 1d 97 58 66 84 63 0c b3 31 cb 3c 6d bc ce 2f 7f bf db 11 70 04 86 1f 81 a1 78 58 19 fe 66 f2 1a 3a 02 8e 80 23 e0 08 38 02 73 43 00 3b b9 8e c2 9d 5f 85 16 92 4b de 8d 95 dd 58 10 12 88 d0 20 90 58 24 b7 b0 7b 2b e1 2e ae ea b4 e8 ec bb 5c 14 96 43 f3 3e 11 9c 1b d9 05 37 d3 80 56 91 03 af aa 73 f2 08 f8 ba ea 7f 04 4c e6 23 22 1f 5c 28 04 aa 40 fa 6d 02 70 23 bb 74 57 17 c9 ae 31 0a c4 c7 60 ae ef cf da 49 4d 50 34 23 bd fa b3 94 bd 29 15 c7 2b c7 b4 8e cc de e4 b1 28 a9 2e 43 ae 78 fd 17 8a 1d 96 42 70 b3 07 53 84 97 Data Ascii: .TxP\|>KG6sFt$ySoG`~D.Xfc1<m/pxXf:#8sC;_KX X${+.\C>7VsL#"\(@mp#tW1`IMP4#)+(.CxBpS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49878	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:07 UTC	820	OUT	GET /wp-content/uploads/2020/11/NCR-Logo-Vertical-Color-White-BG.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:07 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:07 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:26:37 GMT Accept-Ranges: bytes Content-Length: 22918 Connection: close Content-Type: image/png
2024-05-02 14:33:07 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a4 00 00 02 86 08 06 00 00 00 05 c0 ef 95 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 01 ed 9d 0b f8 55 55 9d f7 37 f3 92 ca 4d 11 49 81 4c 49 05 35 50 10 29 25 6f 8c e5 0c 24 d5 58 5e 50 46 67 74 cc b4 a7 c1 ca 4b 6f 45 cd 3b 45 f4 78 a1 46 a6 37 cd 31 34 29 45 a5 2c 2f c1 93 65 5e f0 d6 20 a2 42 12 08 2f 25 a1 19 81 17 d0 a8 a6 79 cf 77 e7 fe cf 3e fb ec b5 cf 5a e7 ec 75 ce 3a ff f3 59 cf 03 ff 7d 59 97 df fa ac 7d d6 77 af cb 5e ab cf 85 d7 fc fb 13 9b b7 bf 3a 32 c2 41 00 02 10 80 00 04 da 44 60 e8 80 41 1b fa 4a 8c 56 6c d9 3c b8 4d 36 90 2c 04 20 00 01 08 40 20 1a 1f 45 23 ff 0a 0e 10 80 00 04 20 00 81 10 08 20 48 21 94 02 36 40 00 02 10 80 40 84 Data Ascii: PNGIHDRpHYs.#.#x?v IDATxUU7MILI5P)%o$X^PFgtKoE;ExF714)E,/e^ B/%yw>Zu:Y}Y}w^:2AD`AJVl<M6, @ E# H!6@@
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: 30 ef 6b d7 c9 86 3b 1f 79 b0 27 6d ad 35 e7 6b 93 3c ed 8d 94 5e d7 ae 27 d1 9c 03 6d d9 e0 b2 e6 5f 4e 14 56 97 b4 ce e0 8f 97 3d 16 ad 7d 61 53 b4 ee c5 17 aa c2 8c ab 6c cf 3e 6a c4 de 4e 5b b2 57 45 50 70 92 65 f1 be 49 c7 58 af 6f 58 10 6d e1 ad ec de 4c da 54 b0 51 97 7d 6e 5c 9e d5 b4 1d 3e 9f 37 ed bd b5 76 d3 c6 9e 2c b6 82 71 4f 62 1c 58 11 40 90 ac 30 f9 f5 a4 c5 20 af ba eb f6 48 fb 05 99 dc 3d cf 6d 88 b4 97 8e 76 63 3d fb f8 bf f1 b6 30 a7 c4 48 e9 24 4e ab 54 bf 67 e2 11 75 17 0f 4d fc bb fc 5d f2 d4 f2 c2 3c 57 c5 f5 86 4d be f2 2f 21 5a 70 cf e2 68 e1 93 8f 57 ed e1 94 b6 21 2e 9f c7 a3 68 de 4f 16 47 e7 bc eb b8 52 85 3a cb 42 02 3c 72 d8 b0 74 f2 a5 1f a7 cb 59 91 37 23 48 5a f0 37 1d 9f 38 de 7d f1 2c ab e7 26 1d 4e e5 eb eb 05 48 3b Data Ascii: 0k;y'm5k<^'m_NV=}aSl>jN[WEPpeIXoXmLTQ}n\>7v,qObX@0 H=mvc=0H$NTguM]<WM/!ZphW!.hOGR:B<rtY7#HZ78},&NH;
2024-05-02 14:33:07 UTC	6933	IN	Data Raw: 5e 3c 4e 99 78 64 da ab f1 58 a2 65 b2 43 ad 08 4d 99 0f d1 c9 ee ef 9c ff f1 aa 32 d6 4b 98 5a 44 c9 cb 98 9e 77 75 bf 6a 5c 2e 11 67 3d ff 69 51 4a 6f f0 17 62 3e 7b a3 4d 7d 66 cc 9d b3 75 c5 96 cd 83 5d 32 b7 72 f6 5c 17 ef f8 cd 10 30 cd 2c b2 99 49 a4 2d ac 5f 79 6d 7b 26 c6 a8 aa 4b a2 e6 66 ea 82 29 ed 5d fb 0f e8 f9 61 a6 bc 1b 0f cb 8a 27 49 c0 14 df 5b 86 ee e5 ed bb 17 8d b1 2c ab cc 1a 7b 7e eb 96 d8 8c e7 5f de 1a 25 53 c4 87 ef 3e 24 9a 78 d0 98 52 d2 56 3a bf de fc 9b 24 ab 3d 7f 8b 98 9b c2 24 81 eb 75 97 15 85 b7 79 ce 92 74 ca 88 c7 f4 cc 26 69 d8 fc 75 b1 39 1d 9f ec 4f 97 b1 ee 69 a3 c8 22 7e 12 f3 81 fd fa d7 ed be 4e a7 c3 71 2d 81 b1 b3 2e aa bd 58 70 65 fc 90 a1 2f 21 48 05 80 b8 05 01 08 40 00 02 8d 11 68 44 90 e8 b2 6b 8c 35 a1 Data Ascii: ^<NxdXeCM2KZDwuj\.g=iQJob>{M}fu]2r\0,I-_ym{&Kf)]a'I[,{~_%S>$xRV:$=$uyt&iu9Oi"~Nq-.Xpe/!H@hDk5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49879	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:07 UTC	796	OUT	GET /wp-content/uploads/2018/06/NWF-Logo.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:07 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:07 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:24:29 GMT Accept-Ranges: bytes Content-Length: 13282 Connection: close Content-Type: image/png
2024-05-02 14:33:07 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 18 00 00 01 18 08 06 00 00 00 87 8e e9 8c 00 00 33 a9 49 44 41 54 78 da ec 9d 5f 8b 1b 55 18 c6 a7 7f 74 15 2c 2c 15 69 05 95 45 4b 95 0a 9a 8b b2 28 54 ba 94 5a 44 c1 2e b8 45 f0 a2 04 54 c4 bb b5 f4 4a 6f ba b6 b7 25 60 c1 db 60 bf c0 62 bf 40 d8 4f 10 fb 09 b2 df 20 fd 06 c7 fd b1 73 96 49 27 33 67 4e 66 ce e4 24 79 1e 78 61 8d 3b 99 49 9a f7 77 9e f7 7d cf 64 13 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 96 5c 67 d7 d6 3a 47 b1 95 89 8d 44 92 24 29 03 89 f5 14 0e db 47 b1 97 46 ff 28 06 69 0c 8f c2 34 10 83 4c f4 ec b9 2c 9c 12 49 92 16 57 69 22 77 49 ea 2c 38 22 0c ae 6d 9f eb 4c a1 d7 49 24 49 8a 43 19 47 b2 97 26 ea 28 12 70 d4 8d 61 ea ac 76 e5 78 24 a9 25 d1 f7 48 9d 49 3f 62 57 12 Data Ascii: PNGIHDR3IDATx_Ut,,iEK(TZD.ETJo%``b@O sI'3gNf$yxa;Iw}dI$I$I$I$I$I\g:GD$)GF(i4L,IWi"wI,8"mLI$ICG&(pavx$%HI?bW
2024-05-02 14:33:07 UTC	5297	IN	Data Raw: 1b a9 78 cd 8d 12 00 23 6f 76 dc 2b b2 7b d2 17 60 b0 d7 33 7f 0e ea 9b 5d 2c 25 2e 5e 83 c1 6c b1 9c 43 94 0b bc f3 cf 3f 5a db 30 a7 d3 c0 64 17 b1 2b d3 a0 9c 9a bd d6 a5 9b d4 50 64 67 37 0f e0 26 b1 87 b6 f6 87 8b bb a9 9f 0e 6e d9 60 c0 01 88 d8 84 c1 6c 98 34 6e b6 33 fa 97 be 6e da ab 4b 60 2f 17 6e 18 00 d2 07 00 f4 37 82 8e 99 b2 b4 42 dd 8b 1b e5 3a c5 8d 06 a6 a3 10 55 33 fc cf 7d 32 9d 1f e6 7e 2f c0 3c 32 ec 18 5f 51 4d 57 3b 3d 89 96 c3 d7 97 af 69 1a e8 fa 92 2f 16 bd a0 fd a7 12 d9 2d 80 8c 00 15 51 a3 94 57 66 bb 64 31 b7 99 29 07 a3 18 f3 37 9b 4a 00 e6 ad 86 6a 5e 25 24 b2 08 b8 ba d1 91 d7 f0 67 12 ab 91 99 24 4e 09 17 0b 4a b0 17 cc 32 4a e9 22 3c 64 17 3b 61 50 f7 7d 2c 46 03 39 df 77 b1 0e d2 83 e3 fe fd fb c9 ea 9d b2 d9 94 28 74 Data Ascii: x#ov+{`3],%.^lC?Z0d+Pdg7&n`l4n3nK`/n7B:U3}2~/<2_QMW;=i/-QWfd1)7Jj^%$g$NJ2J"<d;aP},F9w(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49880	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:07 UTC	566	OUT	GET /wp-content/uploads/2019/12/instagram_3225191.svg HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:07 UTC	210	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:07 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:26:02 GMT Accept-Ranges: bytes Content-Length: 3043 Connection: close Content-Type: image/svg+xml
2024-05-02 14:33:07 UTC	3043	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 73 74 79 6c 65 3d 22 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 65 77 20 30 20 30 20 31 30 30 30 20 31 30 30 30 3b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 30 30 20 31 30 30 30 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 09 2e 73 74 30 7b 66 69 6c Data Ascii: <?xml version="1.0" ?><svg id="Layer_1" style="enable-background:new 0 0 1000 1000;" version="1.1" viewBox="0 0 1000 1000" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><style type="text/css">.st0{fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49881	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:07 UTC	564	OUT	GET /wp-content/uploads/2019/10/youtube_3225180.svg HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:07 UTC	209	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:07 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:25:04 GMT Accept-Ranges: bytes Content-Length: 860 Connection: close Content-Type: image/svg+xml
2024-05-02 14:33:07 UTC	860	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 73 74 79 6c 65 3d 22 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 65 77 20 30 20 30 20 31 30 30 30 20 31 30 30 30 3b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 30 30 20 31 30 30 30 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 09 2e 73 74 30 7b 66 69 6c Data Ascii: <?xml version="1.0" ?><svg id="Layer_1" style="enable-background:new 0 0 1000 1000;" version="1.1" viewBox="0 0 1000 1000" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><style type="text/css">.st0{fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49882	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:07 UTC	559	OUT	GET /wp-content/uploads/2020/10/Give-VRT-W.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:07 UTC	206	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:07 GMT Server: Apache Last-Modified: Wed, 18 Jan 2023 16:54:18 GMT Accept-Ranges: bytes Content-Length: 6362 Connection: close Content-Type: image/png
2024-05-02 14:33:07 UTC	6362	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c6 00 00 00 c1 08 03 00 00 00 a3 40 3f d7 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 02 fd 50 4c 54 45 47 70 4c fd b8 13 ff ff ff fd b8 13 ff ff ff fd b8 13 ff ff ff fd b8 13 ff ff ff fd b8 13 c1 ce a4 ff ff ff ff ff ff bc 92 6f fd b8 13 fd b8 13 ff ff ff c1 ce a4 c1 ce a4 bc 92 6f ff ff ff ff ff ff c1 ce a4 fd b8 13 c1 ce a4 c1 ce a4 bc 92 6f c1 ce a4 fd b8 13 c1 ce a4 ff ff ff fd b8 13 c1 ce a4 c1 ce a4 ff ff ff c1 ce a4 fd b8 13 fd b8 13 ff ff ff ff ff ff 37 ae 45 ff ff ff fd b8 13 c1 ce a4 c1 ce a4 bc 92 6f c1 ce a4 9d 7f 6a fd b8 13 36 a8 42 bc 92 6f bc 92 6f bc 92 6f bc 92 6f ba 90 6e 36 a8 41 d9 db 97 d8 db 96 39 b5 4a bc 92 6f d9 db 97 bc 92 6f 9c 7e 6a 9d 7f 6a d9 Data Ascii: PNGIHDR@?pHYsPLTEGpLooo7Eoj6Boooon6A9Joo~jj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49884	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:07 UTC	558	OUT	GET /wp-content/uploads/2020/11/pnc_color.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:07 UTC	208	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:07 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:26:36 GMT Accept-Ranges: bytes Content-Length: 40604 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:07 UTC	7984	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 77 04 65 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF,,;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CCwe"
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: ca 48 ce d3 a8 c7 91 ed c1 a6 4f fb 04 fc 61 86 3d c9 a3 d8 4e 73 8d 91 ea 50 83 ff 00 8f 10 2b 93 fb 53 03 ff 00 3f a3 f7 a3 bb fb 1f 31 df d8 4b ee 67 cf 14 57 ab f8 8b f6 54 f8 b5 e1 75 2d 7b e0 4d 52 55 1d 4e 9e ab 79 ff 00 a2 59 eb cb ef f4 fb ad 2e ea 4b 6b db 79 ad 2e 63 38 78 67 8c a3 a9 f7 07 91 5d b4 ab d2 ae af 4a 6a 5e 8d 3f c8 f3 ea e1 ab 61 dd ab 41 c7 d5 35 f9 90 51 45 25 6c 73 0f 8e 46 8a 45 74 62 8e a7 72 b2 9c 10 47 71 5e cf f0 d3 f6 c0 f8 9d f0 c9 e2 8a df 5f 7d 73 4d 4c 0f ec fd 6f 37 29 81 d0 2b 93 e6 2e 3d 15 80 f6 38 af 16 a2 b0 ad 87 a3 88 8f 25 68 29 2f 34 75 50 c5 57 c2 cb 9e 84 dc 5f 93 3f 4d 7e 0d 7e de 3e 08 f8 8b 2c 3a 77 88 97 fe 10 cd 65 fe 55 fb 64 a1 ec e5 3f ec cd 81 b4 fb 38 51 d0 06 63 5f 4c a3 ac 8a ac ac 19 18 64 30 Data Ascii: HOa=NsP+S?1KgWTu-{MRUNyY.Kky.c8xg]Jj^?aA5QE%lsFEtbrGq^_}sMLo7)+.=8%h)/4uPW_?M~~>,:weUd?8Qc_Ld0
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: 0e aa d8 f9 9f fe 02 3f 52 be b5 f1 73 31 76 2c c4 b3 13 92 4f 52 6b f2 de 32 cd b9 22 b2 ea 4f 57 ac bd 3a 2f 9e ff 00 77 73 f5 2e 0c ca 79 e4 f3 1a ab 45 a4 7d 7a bf 96 cb e7 d8 5a 28 a2 bf 24 3f 5e 0a fb 07 e0 17 c4 3f f8 4d bc 20 b6 b7 72 ef d5 74 cd b0 cd bb ac 89 fc 0f f8 81 83 ee a4 f7 af 8f ab a9 f8 65 e3 89 be 1f f8 be cf 54 42 cd 6f 9f 2a ea 25 ff 00 96 91 12 37 0f a8 e0 8f 70 2b e9 78 7f 34 79 56 36 33 93 f7 25 a4 bd 3b fc bf 2b 9f 33 c4 39 52 cd 70 4e 11 5e fc 75 8f af 6f 9e de b6 ec 7d cf 45 41 65 79 0e a1 69 0d d5 b4 8b 35 bc c8 24 8e 45 39 0c a4 64 11 f8 1a 9e bf a1 d3 4d 5d 1f ce cd 34 ec c2 8a 28 a6 20 a2 8a 28 00 a2 8a 28 02 8e af a3 58 6b f6 12 59 6a 56 90 de da 49 f7 a2 9d 43 29 f7 f6 3e f5 f3 ef c4 5f d9 86 5b 7f 32 f7 c2 72 99 a3 e5 Data Ascii: ?Rs1v,ORk2"OW:/ws.yE}zZ($?^?M rteTBo*%7p+x4yV63%;+39RpN^uo}EAeyi5$E9dM]4( ((XkYjVIC)>_[2r
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: 00 eb ce d7 ff 00 43 92 b8 b3 ef f9 16 d5 f9 7e 68 ef e1 bf f9 1a d1 f9 ff 00 e9 2c fb f2 8a 28 af c6 0f dd 82 bf 3a 7f e0 a5 1a 7b 45 f1 67 c3 37 c7 3b 66 d0 d6 01 f5 49 e5 27 ff 00 46 0a fd 16 af 88 3f e0 a6 7a 1f 99 a5 f8 0f 58 55 00 45 35 dd a4 8d dc ef 58 d9 07 e1 b1 ff 00 3a fa 4e 1e 9f 26 63 05 de eb f0 67 cb 71 35 3f 69 96 54 6b a5 9f e2 8f 83 a8 a2 8a fd 84 fc 34 28 a2 8a 00 7c 32 b4 12 a4 88 70 e8 c1 94 fb 8a fd c2 d2 f5 08 b5 6d 32 ce fa 1e 61 ba 85 26 4e 41 f9 59 41 1c 8f 63 5f 87 55 fb 1d fb 3e eb c3 c4 bf 03 bc 0b a8 02 59 9f 47 b6 8e 42 49 39 74 8c 23 f2 7f da 53 5f 05 c5 90 bd 3a 35 3b 36 be fb 7f 91 fa 4f 06 54 b5 4a f4 fb a4 fe eb ff 00 99 e8 54 51 45 7e 6e 7e a4 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 Data Ascii: C~h,(:{Eg7;fI'F?zXUE5X:N&cgq5?iTk4(\|2pm2a&NAYAc_U>YGBI9t#S_:5;6OTJTQE~n~QEQEQEQEQEQE
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 0a b0 38 22 a0 af aa 3e 3f 7c 1f 3e 2b b3 6d 7f 47 83 3a c5 b2 7e fe 14 1c dc c6 3d 3d 5d 7b 7a 8e 3b 0a f9 58 f5 e6 bf 9d b3 8c aa ae 53 89 74 67 ac 5e b1 7d d7 f9 ae bf e5 63 fa 2f 27 cd a9 66 f8 65 5a 1a 49 7c 4b b3 ff 00 27 d3 fe 1c 5a 28 a2 bc 33 dd 0a 28 a2 80 3e a7 fd 96 34 31 63 e0 8b ed 49 86 25 bf ba 20 1f 54 8c 60 7f e3 c5 eb da 6b 87 f8 29 66 2c 3e 16 78 76 30 36 ee b7 32 e3 3f df 76 7f fd 9a bb 8a fe 93 c9 68 2c 3e 5d 42 9a fe 54 fe 6f 57 f8 b3 f9 a7 3a ae f1 19 8d 7a 8f f9 9a f9 2d 17 e0 82 8a 28 af 68 f1 42 8a 28 a0 02 8a 29 92 48 90 c6 d2 48 ca 91 a8 2c cc c7 00 01 d4 93 46 c0 3e a8 eb 1a cd 8e 81 61 25 ee a5 77 15 95 a4 7f 7a 59 9c 2a 8f 6f 73 ed d6 bc 97 e2 1f ed 29 a4 f8 7f cd b3 f0 fa 26 b3 7e 38 33 e7 fd 1a 33 f5 1c bf e1 c7 bf 6a f9 Data Ascii: 8">?\|>+mG:~==]{z;XStg^}c/'feZI\|K'Z(3(>41cI% T`k)f,>xv062?vh,>]BToW:z-(hB()HH,F>a%wzY*os)&~833j
2024-05-02 14:33:08 UTC	620	IN	Data Raw: 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 Data Ascii: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49883	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:07 UTC	572	OUT	GET /wp-content/uploads/2017/09/USDAlogo-e1508354968125.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:07 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:07 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:22:05 GMT Accept-Ranges: bytes Content-Length: 17172 Connection: close Content-Type: image/png
2024-05-02 14:33:07 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f8 00 00 00 aa 08 06 00 00 00 80 97 82 f7 00 00 20 00 49 44 41 54 78 9c ed bd 7b 94 5c f5 75 e7 fb d9 45 4f a3 2b 2b 4a 8f 46 4b a3 a8 ca 1a 45 a3 60 06 13 42 08 21 a8 c3 25 c4 26 04 63 aa 20 36 c6 0e 76 62 c7 dd d8 61 6c 16 8b 71 9c 35 b3 7c bd 62 2f c7 93 dc 9b 49 32 36 e3 38 98 2a 9c 78 32 7e e2 07 55 f8 11 c7 21 d8 21 80 1d 4c 7c 31 21 04 2b b2 22 57 2b 5a ba 2c 5d 8d a2 ab 51 94 a6 be f7 8f f3 a8 df f9 9d df a9 47 77 55 77 21 6a af d5 5d e7 fc 1e fb bb 7f ef fd 7b ed 63 4c 69 e4 b4 e3 65 1f a4 34 33 8b 50 e4 50 82 a5 7b 17 d7 57 a8 29 ad 19 95 6b f5 19 13 6f 6a b7 16 7f 6f bd 65 b1 f5 16 e0 b9 4e e5 5a 7d 23 e2 12 33 bb 04 f4 62 b0 dd a0 1d c8 36 0b cd 00 1d cc 4e 98 78 46 e8 10 c6 01 e0 6f c0 Data Ascii: PNGIHDR IDATx{\uEO++JFKE`B!%&c 6vbalq5\|b/I268*x2~U!!L\|1!+"W+Z,]QGwUw!j]{cLie43PP{W)kojoeNZ}#3b6NxFo
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: dd 58 80 ed a6 07 8c 43 98 de de be 77 b8 d1 1b 9c b6 e2 f0 eb 96 97 e7 66 e3 6f e3 95 6a 83 72 ad 7e 85 d0 c3 18 77 08 36 85 d2 9c ae 31 a6 b2 2b 39 bf f4 0d b0 bd ed d6 c2 e0 5b 85 00 b2 37 09 6d c8 a4 3d c5 d4 ca ec 9d 8f 98 84 dd 89 59 27 94 ee bc cc 99 72 ac 98 ec 15 21 9e 85 0d fc 7b f7 de 0c d8 cd 88 a7 bb 77 64 fa ff c9 28 09 fe b0 52 6b bc f5 85 d7 dd 3d c2 e4 a7 5b 62 9f 16 bc d1 c5 74 64 eb 18 76 6b bb b5 d8 ef f4 5a 4a 8a 57 d1 0b d2 f2 3a b0 cf 97 57 fa d1 81 02 2a d7 ea 97 08 e2 fd 8d 3e 79 2a 96 11 bf d0 6e 2e f6 3e 53 5f 48 83 97 5d f4 37 9e 26 be a3 d6 98 29 57 1b d7 0a fe cc 64 7f 86 d9 c5 83 cb 64 44 7b d4 f6 df 04 3f b5 d4 5a 68 0f 83 5d a9 d5 67 05 6f 29 e0 fb b4 c9 06 d9 6d 19 3b 95 ac f4 2d e0 91 80 8c 14 95 63 28 29 f5 aa 00 00 20 Data Ascii: XCwfojr~w61+9[7m=Y'r!{wd(Rk=[btdvkZJW:W>yn.>S_H]7&)WddD{?Zh]go)m;-c()
2024-05-02 14:33:07 UTC	1187	IN	Data Raw: f4 e9 35 b2 58 41 98 7e 3c 02 61 83 1a 47 2f 3e bd b0 7b e0 04 71 21 67 38 22 28 47 28 c0 4a 35 9a 71 61 0f 38 af 4b 47 9e 61 ca ae df 68 35 c5 1e 37 f6 4c d6 dd eb f5 33 6d c2 9c b8 f1 43 12 27 71 cf f0 4e 2a a1 79 da be 15 68 2d 4e e4 dc f9 6a cb e2 26 bf fe 0d 34 f7 e6 8d 2b 7b 2f ec 4c 9e f8 9d 80 11 3e 66 e8 06 73 65 f6 f9 b9 51 42 d8 9a 00 6c cb ba f9 fc f0 cb 25 09 e7 6b 01 05 d8 b9 5b 82 2e db 29 f6 d8 b0 e3 c1 cf db 26 73 47 00 79 9d 87 b2 cf e9 8f c8 9d 87 76 fd 7b 86 51 26 78 5e 8c 02 be b9 c0 3e 9f 18 6f 10 ec 1c 5b 2f 23 73 7e 05 f2 a4 5b 58 ca fa a7 ce 05 bd f6 ba 63 3b 71 13 ec c2 f0 ae 7b 20 8c bb 8d 97 d9 86 2c 2a f3 29 f6 f8 b0 23 72 56 d1 cd 1b 24 ac e0 77 90 e7 5e 73 88 5e fc 86 e1 3b 6a 3e fd de 87 e5 33 ac ff 7a 61 f7 93 61 14 98 83 Data Ascii: 5XA~<aG/>{q!g8"(G(J5qa8KGah57L3mC'qNyh-Nj&4+{/L>fseQBl%k[.)&sGyv{Q&x^>o[/#s~[Xc;q{ ,)#rV$w^s^;j>3zaa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49885	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:07 UTC	577	OUT	GET /wp-content/uploads/2022/10/Map-Thumbnail-e1666124343834.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:07 UTC	209	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:07 GMT Server: Apache Last-Modified: Tue, 18 Oct 2022 20:19:58 GMT Accept-Ranges: bytes Content-Length: 554826 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:07 UTC	7983	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 52 68 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 25 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 00 1c 02 05 00 11 57 41 59 46 49 4e 44 49 4e 47 20 74 6f 20 4e 4c 49 00 38 42 49 4d 04 25 00 00 00 00 00 10 ed 8a d0 60 12 25 ea 4c d0 40 20 ed 6e 7d b4 d8 38 42 49 4d 04 3a 00 00 00 00 01 15 00 00 00 10 00 00 00 01 00 00 00 00 00 0b 70 72 69 6e 74 4f 75 74 70 75 74 00 00 00 05 00 00 00 00 50 73 74 53 62 6f 6f 6c 01 00 00 00 00 49 6e 74 65 65 6e 75 6d 00 00 00 00 49 6e 74 65 00 00 00 00 43 6c 72 6d 00 00 00 0f 70 72 69 6e 74 53 69 78 74 65 65 6e 42 69 74 62 6f 6f 6c 00 00 00 00 0b 70 72 69 6e 74 65 72 4e 61 6d 65 54 45 58 54 00 00 00 19 00 6e 00 6c 00 69 00 2d 00 62 Data Ascii: JFIFRhPhotoshop 3.08BIM%Z%GWAYFINDING to NLI8BIM%`%L@ n}8BIM:printOutputPstSboolInteenumInteClrmprintSixteenBitboolprinterNameTEXTnli-b
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: 92 8f 61 64 d9 1f 58 b7 4f 5c e8 99 1f a1 e9 8d 0c bd a4 39 d6 9b 1e f2 2b 80 c7 30 6e 68 6b 1c eb 3d de a3 3d ff 00 e0 d7 43 f5 12 bc 76 75 6c 88 73 cd df 67 32 36 90 c0 c2 fa f6 9d ff 00 9b 63 bf d1 af 32 fa 9b 90 68 eb 32 da 85 c5 d5 b8 0a c9 2d d7 9d c1 cc f7 6e 62 f5 7f aa 14 32 ae a5 73 98 e6 92 ea 08 7e db 4b a5 cd 7b 37 3d f5 bf df bf dd fc ef bd 2a a9 04 19 5c 0f 93 ff d6 f4 bc ac 9a 31 b1 ed c9 c8 25 b5 63 b1 d6 58 62 48 6b 06 e7 6d 85 c9 7d 63 cf bb a7 74 9a 31 6e 21 b9 fd 56 ef b5 e7 88 0f da d0 58 e7 53 b7 70 df e9 6d c6 c1 af dc cf 52 9c 75 d0 67 0f b5 e6 e3 74 de 6a 61 19 99 7e 1b 2b 77 ea 95 3b fe 3f 31 be b7 fc 56 15 eb 8e ea 78 59 df 58 73 2c ea cd b6 aa b1 b2 49 ab a7 32 e2 f0 5f 45 4e 14 32 dd d5 d7 63 31 ea c8 be dd d5 3e f7 7e 91 f7 Data Ascii: adXO\9+0nhk==Cvulsg26c2h2-nb2s~K{7=*\1%cXbHkm}ct1n!VXSpmRugtja~+w;?1VxYXs,I2_EN2c1>~
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: 96 92 48 6e d6 9f 96 87 73 b6 a9 31 97 82 dd f7 1d b2 37 37 68 6c c7 d2 fe 53 50 e1 58 31 f8 fe 0c df ad 84 7c 14 b4 03 c9 00 67 62 9d 7d 56 86 99 20 99 1a 0f 8a 2b ad ad af ad 8e 3e eb 67 63 75 33 03 73 b8 fc cf e5 a7 32 33 02 1a 1a 79 e4 a7 4b 9d 79 51 73 a0 24 a5 d2 4c d7 6e f2 21 3a 4a 7f ff d3 f4 f3 00 1d a4 cf 1f ea 15 4e a7 9d 8d 85 87 6d 97 da 58 05 56 3d be 90 dd 6c 31 bb ac b2 9a da db 7f 9a fd fd 9e 9b 3f c2 22 e4 3b 28 7a 46 8a d9 61 f5 1a 2d 2e 71 61 15 19 f5 1f 5c 03 ba d6 7f a3 fc f5 c3 fd 6e cc ea d8 e3 27 26 ca f1 83 5a eb 01 a9 97 5f 6d 97 57 55 42 f7 e2 d9 47 d9 f1 e8 fb 33 30 9f 66 4f e9 2d fd 4e db ae cc c7 fd 6d 25 3d a6 06 6e 3e 66 3b 1d 5d be ab c3 18 5e 5e d3 5b fd ed dc c7 be 97 6d 75 7e af d2 67 e6 7f a3 56 00 70 ef a9 d0 2e 1f Data Ascii: Hns177hlSPX1\|gb}V +>gcu3s23yKyQs$Ln!:JNmXV=l1?";(zFa-.qa\n'&Z_mWUBG30fO-Nm%=n>f;]^^[mu~gVp.
2024-05-02 14:33:07 UTC	8000	IN	Data Raw: 1f 16 8a bd 46 87 31 bb c0 3b a1 a0 69 f4 a3 8f a1 a2 22 47 6a 5c 25 8c 00 2c 9e 8e 83 2e a6 cd 2a b1 b6 88 98 04 3b 49 db b9 bf da 51 b3 1e 9b 08 36 0d c2 20 1d c4 69 f4 b6 9d a4 24 2a aa 9b 0f a5 5b 6b f3 68 03 43 af 64 42 34 29 e3 c5 32 ab d2 eb c5 83 2a ad 8e 2e 6c c9 d0 cb 9c ef fa b7 39 4d 20 d0 ee c2 39 29 fb 47 6f 04 50 b8 88 83 c7 68 ec 9c 16 8e 09 f8 c2 64 92 53 ff d2 f4 a7 be d0 77 55 b4 d9 b6 1b bc c0 d5 cc 1a 94 c3 27 30 96 93 43 1a cd 45 87 d4 07 61 05 cd 6e ef e4 bb d8 a3 92 c0 5b b0 8a 9d b8 48 17 7d 03 0e 69 d7 fe fa 80 71 eb dd 60 15 e1 ec 30 58 dd c7 dc 5b 3b 7d 66 c6 df cf 7a 4a 6d 37 27 37 52 ec 60 00 0e 23 f4 8d d6 03 8b 07 f6 e1 a9 86 5e 63 8b 80 c6 69 2d 30 47 aa d9 98 0e db 11 f4 fd ca ab 31 ab ad cd 73 2b c2 10 c2 0e dd 0e e3 ed Data Ascii: F1;i"Gj\%,.;IQ6 i$[khCdB4)2*.l9M 9)GoPhdSwU'0CEan[H}iq`0X[;}fzJm7'7R`#^ci-0G1s+
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 65 86 40 0d 73 7d cd fa 7b 2b 6f bf 77 fc 5a 2f 51 de cc 5b 1d 55 77 da fd ba 33 15 cd 17 1f 73 3f 9a 7d ae 65 7f d7 f7 a5 6f ad eb d8 40 ca 68 31 fc d9 61 6e ad 1f 9a ff 00 fb e6 f4 7a 6f f4 5d 67 84 0d 6a c9 df d3 fe 2a 37 0e 8e 18 5a 29 73 da c3 b9 c0 31 e4 b1 ae 6f f3 90 46 f6 d4 e6 d3 fe 0d 5c c0 6e 33 68 9c 5a cd 55 b9 c4 96 b9 a5 a6 78 9d af f7 2a 2e f5 dc 09 fd 71 db 5c 5b 2d 2c 6b db 22 98 63 9b 3e 9d cd 77 bb f4 df e0 bf 48 9d ed bb 70 81 98 09 63 5b ed 70 fd d3 a3 b7 03 5f b5 df 4e e6 7e 93 7f fc 1a 0b 5d 64 1c 83 1e 9e b1 ee ff 00 be bd 67 39 d7 92 43 86 6b aa 7b 5a ea dc dd 81 c0 91 bb 73 a3 67 d0 df fc cb d9 ff 00 81 ab 62 b7 d5 5b 6c 75 8f b4 bb dd b6 d2 d1 1e c7 9d 9e d6 b1 8d 49 4b b9 ad 71 f7 b4 13 e3 c1 ff 00 3b e9 21 7d 99 b2 4b 5d 1b Data Ascii: e@s}{+owZ/Q[Uw3s?}eo@h1anzo]gj7Z)s1oF\n3hZUx.q\[-,k"c>wHpc[p_N~]dg9Ck{Zsgb[luIKq;!}K]
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: b7 19 dd 1a 04 1a 2a 1a 51 1a 77 1a 9e 1a c5 1a ec 1b 14 1b 3b 1b 63 1b 8a 1b b2 1b da 1c 02 1c 2a 1c 52 1c 7b 1c a3 1c cc 1c f5 1d 1e 1d 47 1d 70 1d 99 1d c3 1d ec 1e 16 1e 40 1e 6a 1e 94 1e be 1e e9 1f 13 1f 3e 1f 69 1f 94 1f bf 1f ea 20 15 20 41 20 6c 20 98 20 c4 20 f0 21 1c 21 48 21 75 21 a1 21 ce 21 fb 22 27 22 55 22 82 22 af 22 dd 23 0a 23 38 23 66 23 94 23 c2 23 f0 24 1f 24 4d 24 7c 24 ab 24 da 25 09 25 38 25 68 25 97 25 c7 25 f7 26 27 26 57 26 87 26 b7 26 e8 27 18 27 49 27 7a 27 ab 27 dc 28 0d 28 3f 28 71 28 a2 28 d4 29 06 29 38 29 6b 29 9d 29 d0 2a 02 2a 35 2a 68 2a 9b 2a cf 2b 02 2b 36 2b 69 2b 9d 2b d1 2c 05 2c 39 2c 6e 2c a2 2c d7 2d 0c 2d 41 2d 76 2d ab 2d e1 2e 16 2e 4c 2e 82 2e b7 2e ee 2f 24 2f 5a 2f 91 2f c7 2f fe 30 35 30 6c 30 a4 30 db Data Ascii: Qw;cR{Gp@j>i A l !!H!u!!!"'"U"""##8#f###$$M$\|$$%%8%h%%%&'&W&&&''I'z''((?(q(())8)k))*5h**++6+i++,,9,n,,--A-v--..L.../$/Z///050l00
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 75 af 6d f6 49 b3 2e 3e 35 be cb 43 7f 5d 02 d0 00 01 09 8a 23 b2 28 94 ab 2c 98 00 00 00 01 4e 70 5c b0 13 80 b8 20 00 23 24 63 31 95 00 00 0c 64 53 2b 04 ac d6 8c 6d b5 ee 59 00 00 00 00 00 21 46 d0 d0 de 64 6a 6d ea a4 a1 7a a8 c6 c0 d6 6c 40 ad 2c 0c e2 25 f2 d5 91 b0 00 18 31 ac 8c e9 09 61 24 3a e1 8c 8d 5d 9c 80 10 46 33 b0 2f 1f 19 c7 3f 28 00 71 bb de 6f 6b 7d fb 59 e2 2e fb 98 e2 0e de 78 63 b9 f3 2f 63 13 b3 67 17 07 6b 3c 41 da 97 0c 76 dc 41 d9 f9 37 d0 47 4e ee 36 0e d3 8a 3b 4e 28 ed 38 a3 b4 e2 8e d3 8a 3b 4e 28 ed 38 a3 b4 e2 8e d3 8a 3b 4e 28 ed 38 a3 b4 e2 8e d3 8a 3b 4e 28 ed 38 a3 b4 e2 8e d3 8a 3b 4e 28 ed 38 a3 b4 e2 8e d3 8a 2f e8 79 af 42 cc 87 3f 38 09 44 b9 9d 6a ce 32 5c 57 7f 37 38 ce f0 05 a0 00 00 0d 5d ae 6e 71 b3 b2 5d 05 Data Ascii: umI.>5C]#(,Np\ #$c1dS+mY!Fdjmzl@,%1a$:]F3/?(qok}Y.xc/cgk<AvA7GN6;N(8;N(8;N(8;N(8;N(8/yB?8Dj2\W78]nq]
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: ab e0 39 7a bb db dd 1c ef 8f cd 7b be 96 1c fd 9c 3e bf 9f ab 3b f6 15 f9 4f 3e 7d 3f 5e fa 7d 3f 2e c9 c2 63 19 c1 91 34 d7 b6 a4 a9 9c 58 ba 9b 8c b3 92 a9 5e 2a b7 19 94 54 57 5d b5 d9 8c 67 06 e9 4c 9a 1d 6d 2d dc e0 37 d1 a3 bc 93 98 d8 d7 e7 c0 10 06 71 93 43 7b 4b 77 39 0d 68 00 00 00 00 16 57 6a f4 35 76 75 ba 7a 2f ce 24 a9 46 46 b0 a0 00 67 19 2d 84 e0 93 10 14 00 00 01 56 de ae d4 ac 67 06 71 9a 0a ef 8c ac 00 00 00 00 00 31 8c 66 23 66 33 40 23 2c 11 bf 5b 66 35 2f aa 75 20 00 00 00 00 00 14 c7 25 84 b2 00 e2 fa 5f 35 e9 61 e1 fd c7 88 3d bb c3 d6 7b c7 27 cc 1e f7 c4 74 38 a7 d0 5e 43 54 f7 2f 33 e9 81 e0 cf 78 f0 7d 73 99 ee 3c 40 f6 ef 9f fb 33 75 e3 76 cf 4e f9 f7 a4 3b af 09 13 de 9c 03 be f1 5d 93 b8 f1 d6 1a 8c e0 f7 07 97 3d 43 c6 6d Data Ascii: 9z{>;O>}?^}?.c4X^*TW]gLm-7qC{Kw9hWj5vuz/$FFg-Vgq1f#f3@#,[f5/u %_5a={'t8^CT/3x}s<@3uvN;]=Cm
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 4f 5f 59 f1 14 79 fe 6f 0f 57 ab bb c5 5b 2f a3 78 1a fa f1 f6 f2 f0 d8 b9 f7 37 7c f6 d3 e9 15 78 d7 3e de d3 1e 22 59 df d1 bb df 34 f5 fd b8 7a b9 f1 2f df 1e 6f 9e ab c3 e3 7e e6 cf 9b ca 5f a1 ed fc b3 b3 9d fb 5c f8 2b 26 fd d4 bc 04 8f 71 8f 09 83 dd 55 e2 29 d7 2f a2 76 fe 4d e9 f5 3e 89 3f 2d 76 b3 e8 79 5a dc 58 dc d5 f1 9a 3c fd 1f 51 ee fc b3 d8 39 f5 e1 e1 28 9b f7 39 f0 18 b8 f7 ff 00 42 f8 2f dc b5 8d cd bd 5d ad e5 a9 74 12 fc ea 17 6e a9 c8 d4 6d c1 20 ae 35 70 00 00 00 00 01 ad b3 e6 4f 9a 47 ec 3e 56 5f 78 2c 00 06 32 21 1b 46 b6 6e c1 3d 78 4c c5 b2 a8 bd ab 61 70 00 00 00 00 46 42 ac 5c 29 67 04 e7 48 9d 72 b4 00 06 32 2a 86 c6 0a 92 81 8b e8 dd 21 19 6b cb 8f 2d ea be 67 c3 e9 76 fe 7f e9 fc b7 5f 17 d3 fd 87 07 bd ae 4f 09 ee fc 21 Data Ascii: O_YyoW[/x7\|x>"Y4z/o~_\+&qU)/vM>?-vyZX<Q9(9B/]tnm 5pOG>V_x,2!Fn=xLapFB\)gHr2*!k-gv_O!
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: a9 6a e6 af ae 75 b3 f3 4e b7 1f 6e fa 27 1b 6f df cf 87 53 53 a7 ac dd 1d 78 72 d6 c7 0f 73 53 1f 43 cf f5 79 9d 1e be 4f 65 bb a7 b3 d3 17 66 35 71 ed 73 5a 75 b3 8d 75 6a f1 3d 47 9d c7 5f 25 af ea b9 59 f6 72 63 27 a3 e2 44 2e 31 9c 46 19 59 d7 d9 d3 d8 c7 6f 53 d3 85 98 de 7a 30 b7 a7 3d 9a a7 a1 c3 be 7a 3c 3e b1 e8 f4 a8 e5 5c 7a 9f 53 f2 8f a8 f7 f3 ee 0d e0 0c 63 38 95 5d 82 95 d0 48 4a 38 2f 51 95 b9 8c 80 35 af f2 1b df cf 7d 67 85 fb 77 b7 e9 ee dc 78 3e 40 11 f8 a7 d0 7e 69 2c 5e a6 a3 cd b3 80 c7 a6 3c d3 af c8 00 00 00 00 1d 03 9e f5 3c 73 9c 00 0f 49 e6 c3 a7 a0 56 00 00 3d 06 c1 e5 db 3a c0 00 74 bd 9f 9f f3 27 d9 7c 7f 90 f5 9c bd 9f 43 97 37 1d 3c dd 49 7c 97 ea 7c bd 76 71 ba de 43 dd f3 b4 7d d7 9f f4 7b 97 0f 2e c0 00 0a f5 77 87 97 Data Ascii: juNn'oSSxrsSCyOef5qsZuuj=G_%Yrc'D.1FYoSz0=z<>\zSc8]HJ8/Q5}gwx>@~i,^<<sIV=:t'\|C7<I\|\|vqC}{.w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49886	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:07 UTC	803	OUT	GET /wp-content/uploads/2018/06/Head-Start-Logo.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:07 UTC	209	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:07 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:24:34 GMT Accept-Ranges: bytes Content-Length: 112839 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:07 UTC	7983	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 32 0a ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 04 a4 08 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82C!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$"
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 3e 30 78 7b e1 d5 b1 4b a9 85 de a4 c3 f7 76 30 b6 5c fb b1 fe 11 f5 af 93 bc 7f f1 3f c4 5f 11 6f 8c ba ad ce cb 45 62 61 b3 8b 88 a2 1d b8 fe 23 ee 6a 6e 34 8f 55 f8 9d fb 4d cd 76 25 d2 fc 16 0c 30 9c ac 9a 8c 8b f3 b0 ff 00 a6 6a 7a 7d 4f e5 5e 05 75 75 3d ed c4 97 37 53 49 3c f2 b6 e7 92 46 2c cc 7d 49 35 10 e2 8a 9b 94 90 51 45 14 0c 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 b1 61 a7 5e ea b7 49 69 a7 d9 dc 5d dc 3f 0b 0c 11 97 63 f8 0a f5 cf 07 fe cc 3e 2a d7 36 4f ae 4b 1e 89 6c dc ed 7c 49 36 3f dd 1c 0f c4 d3 be 12 7c 70 d0 3e 1f 68 e9 a7 5d 78 5f f7 e3 3e 65 f5 ab 29 92 6c 92 72 db bd 06 07 5c 71 5e b1 65 fb 4f 7c 3f b9 03 cf 9b 51 b4 63 d7 cc b5 62 07 e2 b9 a7 64 27 73 5b c1 df 01 7c 15 e0 f3 1c a9 a7 9d 4a ed 7f Data Ascii: >0x{Kv0\?_oEba#jn4UMv%0jz}O^uu=7SI<F,}I5QE((((((a^Ii]?c>*6OKl\|I6?\|p>h]x_>e)lr\q^eO\|?Qcbd's[\|J
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 Data Ascii: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 40 09 8a f2 2f da 39 71 e1 ad 34 ff 00 d3 e7 fe c8 d5 eb d5 e4 7f b4 77 fc 8b 3a 6f fd 7e 7f ec 8d 5d 18 5f e2 c4 ca bf c0 cf 9f 28 a2 8a fa 43 cb 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a cf d7 65 f2 b4 c9 79 e5 f0 9f 9d 68 56 1f 8a 26 c4 50 44 3b b1 63 5c f8 a9 f2 52 6c d6 84 6f 34 8e 78 51 45 15 f2 e7 b0 14 51 45 00 14 51 45 00 14 8c 32 a4 7b 52 d1 40 1f a0 1e 08 d4 c6 af e0 fd 16 fc 1d c6 7b 28 5c 9f 7d 83 3f ae 6b 72 bc f3 e0 25 f1 bf f8 55 a1 b1 62 4c 51 b4 3f f7 cb 11 5e 87 56 8c c2 8a 28 a6 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 07 c5 9f b4 45 d1 b9 f8 af ab 02 72 22 58 a3 1e df 20 3f d6 bc da bb 5f 8d 37 1f 69 f8 a7 e2 37 ce 76 dd 6c fc 94 0f e9 5c 55 66 5a 0a 28 a2 81 85 14 51 40 05 2a 9c 3a 9f 42 29 28 3c 73 40 1f a2 3a 4b 6e d2 ec db d6 Data Ascii: @/9q4w:o~]_(C(((eyhV&PD;c\Rlo4xQEQEQE2{R@{(\}?kr%UbLQ?^V(EPEPEPEPEr"X ?_7i7vl\UfZ(Q@*:B)(<s@:Kn
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 00 1d ff 00 e4 05 a7 ff 00 d7 cf fe c8 d5 86 23 f8 6c f5 32 5f f7 ea 7e a7 89 d1 45 15 e1 9f ac 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 1e b1 f0 13 fe 3e b5 6f f7 23 fe 66 bd 91 7a 57 8d fc 04 ff 00 8f ad 5b fd c8 ff 00 99 af 64 5e 95 ec e1 3f 84 8f cb b8 8b fd fe 7f 2f c8 5a 28 a2 ba 8f 10 28 a2 8a 00 69 eb 5e 37 f1 93 c6 85 e6 6f 0e d8 c8 42 ae 0d d3 29 ea 7a 84 fe a6 bd 17 c6 fe 25 8f c2 fa 05 cd f3 60 cd b7 64 2b fd e7 3c 0f f1 af 99 ee 6e 25 ba b8 96 e2 77 2f 2c ac 5d 98 f7 27 ad 70 e3 2b 72 ae 44 7d 57 0c e5 9e da a3 c4 54 5e ec 76 f5 23 a2 8a 2b ca 3f 42 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 4f ad 2f 5e 3b d7 b2 7c 3a f8 Data Ascii: #l2_~EQ@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@>o#fzW[d^?/Z((i^7oB)z%`d+<n%w/,]'p+rD}WT^v#+?B(((O/^;\|:
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: a9 45 14 57 a4 7c 30 86 be 7a f8 c8 0f fc 27 37 07 fe 98 c5 fc ab e8 53 5f 3e fc 69 4d be 36 73 fd eb 78 db f5 22 b9 31 bf c3 3e 93 85 9d b1 bf 27 fa 1c 25 2d 25 2d 79 0c fd 22 d6 0a 28 a2 90 05 14 51 40 05 14 51 40 05 25 2d 25 00 7d 1d f0 a0 6d f0 36 9d ee 18 ff 00 e3 c6 bb 0a e3 fe 13 b0 6f 02 e9 de c1 87 fe 3c 6b b0 af 7e 97 c0 8f c7 b1 ff 00 ef 35 3d 5f e6 14 51 45 68 72 05 14 51 40 1e 77 f1 c3 fe 45 18 ff 00 eb e5 3f ad 78 2d 7b d7 c6 ff 00 f9 14 63 ff 00 af 94 fe b5 e0 b5 e4 63 3f 88 7e 8f c2 df ee 7f 36 2d 14 51 5c 67 d2 85 14 51 40 05 14 51 40 05 14 51 40 08 7a 57 d3 be 00 ff 00 91 3b 47 ff 00 af 64 fe 55 f3 11 af a7 7c 01 ff 00 22 76 8f ff 00 5e c9 fc ab bf 01 f1 33 e4 38 bb f8 34 fd 7f 43 a1 a2 8a 2b d4 3e 08 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 Data Ascii: EW\|0z'7S_>iM6sx"1>'%-%-y"(Q@Q@%-%}m6o<k~5=_QEhrQ@wE?x-{cc?~6-Q\gQ@Q@Q@zW;GdU\|"v^384C+>(((
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 6e e1 58 5e 2c f1 c6 83 e0 ab 06 bc d7 35 18 6d 53 9d a8 4e 5e 4f 65 5e a6 be 66 f8 95 fb 47 eb 5e 29 f3 74 ff 00 0e 79 da 3e 9a d9 53 20 6c 5c 4a 3d c8 fb a3 d8 7e 75 2d 8d 23 db 3e 24 7c 76 f0 d7 80 c4 96 91 c9 fd a7 aa 81 f2 da c0 dc 21 ff 00 6d ba 2f d3 af b5 7c bd e3 bf 8a 9e 26 f8 83 70 c7 55 bd 68 ec c1 fd dd 94 3f 2c 48 3d c7 f1 1f 73 5c 8b 33 3b 16 62 4b 13 92 c4 e4 9f c6 92 95 ca b0 51 45 14 86 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 41 a0 0e bb 45 b8 37 3a 74 4c e7 2c b9 53 f8 55 fa ca f0 ea e3 4d 53 ea e4 d6 ad 7d 56 19 b7 49 36 78 d5 ac a6 c2 8a 28 ad 8c c2 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 91 ba 1a 5a 54 5d ee Data Ascii: ((((((nX^,5mSN^Oe^fG^)ty>S l\J=~u-#>$\|v!m/\|&pUh?,H=s\3;bKQEQEQEQEQEQEQAE7:tL,SUMS}VI6x((((((ZT]
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 0d 49 5a a9 27 b3 33 69 a0 a2 8a 2a 80 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 91 88 51 93 d0 73 49 bb 02 57 39 2d 76 4f 33 53 97 fd 9c 2f e9 54 2a 4b 99 7c fb 99 65 fe fb 93 f8 66 a3 af 94 ac f9 a7 26 7b 54 d5 a2 90 51 45 15 99 61 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 1d 6b a3 f0 6f c3 ef 11 78 f2 f0 5b e8 76 0f 2a 03 89 2e 1f 2b 14 7e ec df d3 ad 00 73 95 e9 5f 0e 7e 03 f8 9b c7 8d 1d dc d1 36 97 a4 93 cd cc eb 86 90 7f b0 bd 4f d4 f1 5e e5 f0 e3 f6 72 f0 ff 00 84 bc ab ed 68 47 ac ea 6b c8 32 2f ee 62 3f ec a9 eb f5 35 eb a9 18 40 15 40 50 38 00 55 24 4d ce 4f c0 5f 0c 3c 39 f0 f6 d0 45 a4 d8 af da 0a e2 5b b9 7e 69 65 3e e7 b0 f6 18 15 d7 63 da 96 8a a2 42 8a 28 a0 02 8a 28 a0 Data Ascii: IZ'3i(((((QsIW9-vO3S/TK\|ef&{TQEaEPEPEPEPEPEPEPEPEkox[v*.+~s_~6O^rhGk2/b?5@@P8U$MO_<9E[~ie>cB((
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 78 c7 ed 24 df f1 2c d1 17 fe 9b c8 7f f1 d1 5e 0f 5e e9 fb 4a 1f f4 3d 08 7f d3 59 8f e8 b5 e1 75 ef e5 ff 00 c1 47 9b 88 f8 d8 51 45 15 da 60 14 51 45 00 14 51 45 00 14 51 45 02 3b 8f 82 bf f2 51 f4 bf a4 bf fa 03 57 d4 f5 f2 c7 c1 5f f9 28 fa 67 d2 5f fd 01 ab ea 7a f0 b3 2f e2 fc 8f 47 0d f0 b0 a2 8a 2b 80 e9 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a f9 13 f6 a6 ba 13 7c 4b 8e 10 7f d4 58 44 a7 ea 4b 1f ea 2b eb ba f8 c3 f6 90 9f ce f8 b9 aa af fc f2 8a dd 3f f2 18 3f d6 a6 43 89 e6 54 51 45 49 61 45 14 50 01 45 14 50 01 Data Ascii: QEQEQEQEQEQEQEQEQEQEQEQEx$,^^J=YuGQE`QEQEQE;QW_(g_z/G+(((((((((((\|KXDK+??CTQEIaEPEP
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 27 fd 7a 27 f2 ae 94 74 ae 6b e1 bf fc 88 ba 27 fd 7a 27 f2 ae 94 57 ca d4 f8 df a9 eb 43 64 2d 14 51 52 58 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 57 c3 3f 1b 3f e4 ac 78 9b fe be ff 00 f6 45 af b9 ab e1 9f 8d 9c fc 57 f1 37 fd 7d e3 ff 00 1c 5a 99 15 13 89 a2 8a 2a 4a 0a 28 a2 80 0a 28 a2 80 0a 43 c0 34 b4 62 93 d8 69 5d a4 7a a6 91 10 87 4b b4 8c 0f bb 12 ff 00 2a b7 51 db 80 b6 f1 28 e8 11 7f 95 49 5e 1c fe 26 7e c3 87 8f 2d 28 af 24 14 51 45 49 b0 51 45 14 00 51 45 14 00 51 45 14 03 3d d7 e0 85 82 db f8 5a 4b bc 7c d7 33 b1 cf b2 fc a3 f9 57 a3 28 c5 72 5f 0a ed c5 bf 81 b4 c5 ee e8 ce 7f 16 27 fa d7 5c 0d 7b d4 15 a9 a4 7e 43 99 d4 e7 c5 d4 97 9b 16 8a 28 ad 4e 10 a2 8a 28 00 a2 8a 28 00 a6 b1 Data Ascii: 'z'tk'z'WCd-QRXQEQEQEQEQEQEQEQEW??xEW7}ZJ((C4bi]zKQ(I^&~-($QEIQEQEQE=ZK\|3W(r_'\{~C(N((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49887	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:07 UTC	850	OUT	GET /wp-content/uploads/2023/12/Bugs-Inside_banner_image_reduced-scaled-e1702935745913-400x250.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:08 UTC	208	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:07 GMT Server: Apache Last-Modified: Mon, 18 Dec 2023 21:42:40 GMT Accept-Ranges: bytes Content-Length: 27934 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:08 UTC	7984	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 fa 01 90 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CC"
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: f8 67 2d d5 ee 92 b1 5c 4d f3 79 91 af dd de bf 79 6b b3 da 4b 94 a8 c2 22 78 17 c3 f6 1e 11 f0 ac d6 53 d9 4b 63 b2 3d cc db 37 33 ed 5f 99 97 fd dd bf 76 bc af e2 16 9b 3c d6 77 8f a3 78 82 6b ed 8b e6 cb 66 b6 4b e6 2a 7f 7b 6f de 65 ff 00 75 5a b8 df 1d 7e d8 da b5 c6 87 33 db cb 6d 1a bb 79 ea de 5e ef 95 bf bb fe cd 78 9f c4 6f 8b 1a 96 9b 70 ba e5 85 c2 da c7 24 09 2f d9 e3 ff 00 59 6f 24 8a ac ab fe e7 cd ff 00 a1 6e ff 00 6a 61 19 48 af 87 e2 3a ef f8 58 97 fa 5f cd e5 58 6a 56 aa db 9b cb 8d 7e ef fb db 55 a3 a8 6e 3e 2f 59 2d d3 2d bd d0 92 35 f9 9a 1b 8d be 62 ff 00 db 45 ff 00 7a bc 5f 52 f8 ad 3f 8c 23 5b db a7 7b 79 15 57 cf 5b 7f bd fd df 31 57 ee b7 fb 5f fa 15 70 3a f5 d5 ca df 4d 13 bf 97 71 13 32 b2 c6 db 55 be 6f e1 ae e8 61 e3 2f 8c Data Ascii: g-\MyykK"xSKc=73_v<wxkfK*{oeuZ~3my^xop$/Yo$njaH:X_XjV~Un>/Y--5bEz_R?#[{yW[1W_p:Mq2Uoa/
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 2b 7c bf 77 6b 7f e8 55 a5 0a fc 8f c8 ce 46 96 ad 32 2c d6 ba 8e 89 7f b6 65 5f 2d 6d 64 6f dd bf f0 ee dd fd ef 97 76 da b0 b1 cf 67 67 70 67 b8 2d 71 ff 00 3e f1 ae ef e1 6f 9b 6f cc df c2 b5 46 4d 59 1b 54 92 f2 58 2d bc b8 99 7c bb 78 77 6d 76 55 da ab f2 d4 37 5e 20 ba 92 c6 e9 75 4b 04 b5 66 da ca bb b6 b7 cd fd df 97 ff 00 66 ae 14 f9 b7 91 a2 34 9a c6 5b 3b 88 dd d5 6e 26 f2 b7 45 0a c7 bb 6c 9f 77 e6 dd fe cf f1 7c d5 5e 6b 7d 4e 6f f4 7f b1 db c3 1c aa b2 34 93 49 f2 b3 7c db 7f f1 df ee d4 d6 f1 de 5b e9 ff 00 6a f3 57 f7 7f ea d9 7e 6d ab f7 bf dd fe ed 57 f3 a7 66 df 3c e9 22 aa fc b1 f9 ac aa cd bb ee ed a2 1c b1 f7 80 2d 64 b2 b1 5d f6 bf 2b 45 2f 98 ad 1c 6d 26 df ee ed f9 aa e5 f5 e5 93 34 97 52 bb 47 75 23 6e f9 95 be 7f 9b e6 6f fc 7a Data Ascii: +\|wkUF2,e_-mdovggpg-q>ooFMYTX-\|xwmvU7^ uKff4[;n&Elw\|^k}No4I\|[jW~mWf<"-d]+E/m&4RGu#noz
2024-05-02 14:33:08 UTC	3950	IN	Data Raw: 4f e1 5f 99 6a d4 6a d2 33 31 fb b5 34 3d d9 11 21 bb 3d aa 3f e2 f9 6a c3 7f bb 51 ed da df 76 bd 88 d4 32 1a ab b7 ef 35 5e b7 55 91 7f 89 97 f8 5a a9 c7 1b 6e fb b5 34 2c eb 26 d5 dc df ec d6 8f 96 5b 0e 27 a1 7c 31 b7 82 ea ea e9 27 8a 39 24 5d ad 1b 32 ab 32 fd e5 f9 6b 9b f8 c1 e1 56 5b c8 f5 16 89 a4 85 7f 75 3a ed dd b5 5b f8 ab 53 e1 fe b8 da 2e b1 33 cb e6 ad bc 91 32 ce b1 ff 00 ac 68 ff 00 ba ad fc 2d 5e 9d a9 69 f6 ba c5 af 94 cd 1d c2 c9 17 9a cb 0f cc b1 47 fc 31 c9 5f 33 8a 7e ce b4 a2 7e 65 9f a9 47 17 7e 63 c6 7e 0d f8 aa d7 c2 fa 0c da 24 b7 b6 ed 37 da 7e 5f b3 c7 27 9c 8b b9 99 7e 6d bb 59 5b fb bb ab db 34 3d 59 61 66 7b 87 bb 92 4f 32 4f 2a f2 38 15 bf 74 cb 22 aa ed dd b5 5b ff 00 8a fb ab 5e 43 ae 78 0e e3 45 99 6e 2d 63 fb 45 ba Data Ascii: O_jj314=!=?jQv25^UZn4,&['\|1'9$]22kV[u:[S.32h-^iG1_3~~eG~c~$7~_'~mY[4=Yaf{O2O*8t"[^CxEn-cE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49888	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:07 UTC	835	OUT	GET /wp-content/uploads/2023/12/FEELC_photos_for_newsletter_cover_image-400x250.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:08 UTC	208	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:08 GMT Server: Apache Last-Modified: Fri, 15 Dec 2023 16:17:44 GMT Accept-Ranges: bytes Content-Length: 26931 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:08 UTC	7984	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 00 fa 01 90 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90C%# , #&')*)-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 71 d4 76 8c 6d 0a eb 1c a7 74 5a 5f cd 0a 1b ef 28 35 fc 97 46 ae 67 b8 c4 22 74 8c 8f d3 d1 57 40 f6 01 57 70 3a 20 18 e2 b9 a2 0e ca c6 0f 43 c6 37 0a 77 1c 23 65 3c 60 aa 9a 72 8a 0e d9 1d ee 88 59 b2 6b a6 6e a0 8b 76 57 cb 8e 55 25 9e ad bb 22 e8 2d 64 58 1e a8 1a 41 7b ac 02 ad ec 8d 4c 41 54 86 d3 1d 11 71 2e fa 27 6a 02 6a 8d d0 31 7a 95 01 d5 11 f2 a3 b9 e8 55 1a 8d a1 d9 b2 65 04 bc 60 2d 22 dc b5 d8 ec 81 fc 3e dc a5 e8 83 56 25 ce 85 5e a3 79 1c e9 03 75 e9 eb 1d d0 6e a5 16 be a5 b0 16 98 d2 a1 ba 6d c2 9c 8d c8 0a 5a 65 6c 4f 52 a4 3a 67 32 11 7c 5c 6c 50 bf a5 72 9e 6e d8 5e 21 10 1d 94 01 2e 07 64 1a d3 3b 94 e9 db 6f 24 aa b2 d2 88 9f 65 ee a0 98 3e 4e 53 85 26 c9 d3 84 1a d5 2d 2a 13 4f 35 8c d9 78 ad 98 ca d8 09 5a 87 0e ca 71 16 27 aa Data Ascii: qvmtZ_(5Fg"tW@Wp: C7w#e<`rYknvWU%"-dXA{LATq.'jj1zUe`-">V%^yunmZelOR:g2\|\lPrn^!.d;o$e>NS&-*O5xZq'
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: ce e1 75 2c 1f 88 98 27 f8 39 2e 43 b3 f0 a3 d5 ec 06 b0 4f 90 7d c6 4f dc b7 ac db 6b 0f ef c7 8d a3 64 30 48 fb 9f e5 4f 5b 42 64 60 78 8f 46 07 c8 4e 4d b2 c7 bc 89 20 18 49 9e 5a c1 b7 d1 60 23 02 7f 03 9f 03 bd 8b ee d0 ec 1d 9f 72 73 b2 0d d7 18 bf eb 3b 06 f4 f8 08 db fc 61 91 61 f2 4f af b9 6f 25 fc 0d ed ad e3 e3 8a 46 b0 f0 41 90 b2 55 db 8e 78 4d e7 0b 3b 17 8b 3a 3e ed 09 4f 97 27 61 fb b4 c6 e9 df 83 ef cb 03 b6 1e c2 3c b9 86 13 c9 f5 90 37 ee 5d 0f bb 74 b8 12 b0 fd 91 f0 1d 92 75 60 e4 83 1e c3 a1 2f a9 67 f0 c6 72 18 f0 91 21 b6 ef e9 02 f5 f3 c9 0e 4f 0b 5e 5c 4e 6c f6 3c d8 5b 32 1b d8 60 f2 55 22 04 b4 19 3f 27 a4 36 4c 86 b3 36 65 64 85 ff 00 4d 02 75 f6 e3 b3 9e db 0e f2 75 c8 64 8d cf b2 7e 5f 52 54 33 bb a4 3d b0 fd 47 d1 3b 03 3a Data Ascii: u,'9.CO}Okd0HO[Bd`xFNM IZ`#rs;aaOo%FAUxM;:>O'a<7]tu`/gr!O^\Nl<[2`U"?'6L6edMuud~_RT3=G;:
2024-05-02 14:33:08 UTC	2947	IN	Data Raw: 1c 88 41 0d 3a ab 0d 07 5e 70 a3 bc 1d 12 a0 95 e8 e6 fe f2 ad 44 1a 38 e8 3f 35 7e 31 48 84 bb 0c 9a 3c 57 14 ce ca 90 50 14 9b d7 c6 53 8c 83 c1 00 f9 37 6e 75 8c b7 77 35 b9 a7 e8 c3 4b 10 77 30 70 3a d0 f8 30 f3 68 9e c2 0d e4 4d 1b c3 04 0e 97 3a 02 34 6a 5f 8c 14 ad 36 89 2a 15 1a 68 d6 2b 05 4a 56 d0 de 1a 05 1c 6e ea 06 00 2c 11 02 9e a6 5d 2d 30 74 ec 75 b1 66 31 2a 8c 91 20 54 37 2c df 59 13 af a4 c7 71 81 7a 78 a6 5a 72 6d e4 fa b7 f5 94 29 a0 04 d1 9f 1f ef 17 8a 84 0d 08 1f c9 87 ca b3 5b 1f 5e 32 00 ef 9b 9a 35 18 18 7d fe bf 39 4c 0e a0 74 73 80 0e 5c 21 fd 60 c9 9f 63 8f 4d 4f bc 6d 79 6f 65 5f 78 cb 41 60 5c 66 ca 84 2a ae 2c e7 92 8a a0 c4 2e 17 bc 07 60 b8 90 53 fb df ce 48 d0 23 d2 6c a0 f8 c1 79 11 d6 13 48 7d 19 43 cb ac 57 0e f0 5b Data Ascii: A:^pD8?5~1H<WPS7nuw5Kw0p:0hM:4j_6h+JVn,]-0tuf1 T7,YqzxZrm)[^25}9Lts\!`cMOmyoe_xA`\f*,.`SH#lyH}CW[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49889	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:07 UTC	826	OUT	GET /wp-content/uploads/2023/10/DCDEE_newsletter_article_image-400x250.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:08 UTC	208	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:08 GMT Server: Apache Last-Modified: Mon, 30 Oct 2023 19:18:07 GMT Accept-Ranges: bytes Content-Length: 31533 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:08 UTC	7984	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 00 fa 01 90 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90C!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$"
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 5b 1f 31 a3 b3 e5 ca 40 dc b3 dc 93 43 e1 5f 27 2e 6f 88 5f 25 f5 7e ff 00 4d de c6 a1 99 6c 7d 0f 38 b6 90 5c 69 47 aa 46 71 ed 5e c6 84 ec 54 89 92 5b 53 48 1c 20 28 60 ad 5e d4 e0 a8 2b e3 b9 91 7d 9a bd 46 ac ad b9 db 9f e0 0f 91 34 ad 3d f1 53 56 b4 da 23 c1 9a df 87 1d 21 3f 2c e0 00 e0 7a 7a d3 b5 ab 56 23 59 ac ae 64 64 46 98 de 32 e0 e3 c4 1e 95 84 b0 e2 d2 3e 65 0a 52 56 80 0e 40 ad 13 43 ea c8 f2 de 42 66 00 a7 5b 4e d6 c9 ed 93 42 9c c4 6a 94 83 e9 dd c8 3d 1f fc c6 cb 95 c2 14 09 0f 29 c6 dd 59 dd c0 57 18 23 d2 96 af 5a 8a 6e a1 90 d3 49 19 d8 a0 50 84 8c e5 5e a6 99 af f1 d9 79 83 32 42 39 48 01 47 b6 3d 68 3c 97 2d ad 45 6d b8 ce 36 43 84 15 29 23 06 91 6a 39 38 ce 04 f9 db 91 d5 f6 13 81 2b c7 9d 29 0c 94 cf 68 78 60 ed 50 ce 7f f6 a6 2d Data Ascii: [1@C_'.o_%~Ml}8\iGFq^T[SH (`^+}F4=SV#!?,zzV#YddF2>eRV@CBf[NBj=)YW#ZnIP^y2B9HG=h<-Em6C)#j98+)hx`P-
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 50 42 8a 09 1f bb 4f f3 22 3f 6c 7a 90 da 59 07 6f 3b 46 31 fb d9 c7 6f b5 25 4e 6d 50 35 4a 83 2a 05 b2 3c b9 e7 19 ea 3e b5 a0 a6 02 5e 42 50 d2 92 55 b4 29 2a c7 2a c7 35 93 39 e4 d4 32 23 b5 20 3a a4 0c 15 0c f2 a4 e4 9e bf 7a eb 0e 22 a6 82 dc e0 e5 9e 7b 92 58 dc d2 10 40 6c af 09 c0 19 e9 ea 7d 68 6d 88 2d 88 6d 03 d9 01 45 38 e8 3d 2b 84 b9 f3 b6 62 d2 46 14 e2 92 97 08 ee 9c e4 d4 86 e1 2e 36 c4 c7 6a 33 84 a7 03 73 79 23 e9 fe f5 c0 78 84 0f c4 92 5c 96 16 fa 42 95 c2 d3 b0 15 71 83 db 8f e5 43 d6 b4 f8 48 61 08 5e d4 03 ca cf e6 20 ff 00 9a 8e 6c 67 1d 71 dd cb 4a 76 20 2b 93 8e 49 39 fb f1 50 33 70 75 c9 0a 52 90 a7 52 94 ed 00 0e 47 fe 64 d7 09 cc 70 3f 33 ab a3 f2 a3 db 1b 69 32 08 79 c2 54 ce 14 41 e3 a9 c0 ff 00 35 0b 9f 11 a6 31 19 51 64 Data Ascii: PBO"?lzYo;F1o%NmP5J<>^BPU)*592# :z"{X@l}hm-mE8=+bF.6j3sy#x\BqCHa^ lgqJv +I9P3puRRGdp?3i2yTA51Qd
2024-05-02 14:33:08 UTC	7549	IN	Data Raw: 69 0e 21 f6 8a 15 b8 72 9c 1c e4 7b f1 53 ad 64 1d 86 4c 53 6b e2 7d 0d 6d be db 6d d6 d7 87 cb 38 14 10 47 94 52 16 af 6e 3d ea ce 42 92 97 1d 8e a1 21 b4 91 9c 94 f3 8f b8 ac ed 7a b1 c0 c0 8e cb 8f 06 77 65 47 71 c9 ab 2a bc cc 0c 89 29 92 52 d9 00 27 70 eb 57 e9 5b d1 24 3f 46 31 ab db d1 94 f5 4d ba 3c 1b b2 1e 8a 07 cb c9 40 7d 29 1d 06 7a 8a 74 f8 6b 70 f9 f6 e5 5b 5d da 96 40 2b 08 cf 63 d4 0a ce 24 ca 5c 92 9f 11 7b 8a 0e d1 ec 3d 29 9b 43 5a ff 00 69 4b 92 d8 90 b6 16 19 25 0b 4a b0 41 cf 14 75 1c 5d 95 e8 c1 61 c6 63 6d eb 48 42 f1 1c 71 12 de 0d 63 96 f2 38 15 5e 44 c6 63 78 61 c6 d6 5a c0 e5 59 19 15 17 8f 77 42 bf 65 dc 4a 4b dd 10 e8 57 e7 4f a9 a2 72 9d 87 16 0f cb 4c 29 94 e9 4e 03 60 65 47 8f 4f ef 43 66 95 8b 6f a9 ca fe 3c 41 cb 30 c1 Data Ascii: i!r{SdLSk}mm8GRn=B!zweGq*)R'pW[$?F1M<@})ztkp[]@+c$\{=)CZiK%JAu]acmHBqc8^DcxaZYwBeJKWOrL)N`eGOCfo<A0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49890	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:08 UTC	793	OUT	GET /wp-content/uploads/2020/11/niehs.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:08 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:08 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:26:37 GMT Accept-Ranges: bytes Content-Length: 25935 Connection: close Content-Type: image/png
2024-05-02 14:33:08 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 68 00 00 01 84 08 06 00 00 00 1b 63 ba 2c 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 01 ed bd 0d dc 54 d5 75 ef af d6 0f e5 5a 4a ad a5 5c fe 84 d0 27 94 50 6a 88 21 94 10 63 0c 31 c4 10 35 c4 20 46 e2 7b 08 be bf bf c7 58 6b bc 86 7a 8d f1 5d f1 25 6a 8c 1a 83 c6 17 6a 88 31 c6 50 82 84 10 63 08 a1 d4 52 4a 29 79 2e a5 5e 4b b9 94 70 b9 5c cb a5 f8 ff fe 86 73 86 3d fb d9 33 73 ce 99 99 33 67 9e 59 eb f3 59 73 f6 5e 7b ad bd d7 fe ed bd d7 d9 73 e6 9c 33 fb be fd f6 db fb 18 19 02 86 80 21 60 08 14 0f 81 fd 8a e7 92 79 64 08 18 02 86 80 21 20 04 2c 40 db 3c 30 04 0c 01 43 a0 a0 08 58 80 2e e8 c0 98 5b 86 80 21 60 08 58 80 b6 39 60 08 18 02 86 40 41 11 Data Ascii: PNGIHDRhc,pHYs IDATxTuZJ\'Pj!c15 F{Xkz]%jj1PcRJ)y.^Kp\s=3s3gYYs^{s3!`yd! ,@<0CX.[!`X9`@A
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 43 33 d8 35 62 b2 8c e0 3c bf 91 0a 3a c1 d6 02 74 27 8c 92 f9 68 08 b4 1e 01 bd d8 7e 5e da 66 d8 3d 0f c7 e6 f2 b4 76 4d d0 ef e8 7f 4a 49 da 7f 0b d0 49 91 32 3d 43 a0 7f 23 90 f5 a1 14 5d da 38 20 67 68 fa e5 43 29 21 0c 2d 40 87 50 31 99 21 d0 5d 08 2c e0 d2 c6 92 b4 5d 66 f7 7c 08 36 b3 d3 da 35 a8 df 6f 1f 4a 09 e1 62 01 3a 84 8a c9 0c 81 ee 41 60 37 5d bd 2a 63 77 ed 9f 52 32 02 97 d4 cc 02 74 52 a4 4c cf 10 e8 9f 08 3c c0 ee 79 6d da ae b1 7b 9e 8a cd 91 69 ed 1a d4 df 8c 7d bf f8 a7 94 a4 38 58 80 4e 8a 94 e9 19 02 fd 0f 81 ed 74 29 cb 43 29 8a 1b ed d8 3d f7 eb 87 52 42 d3 cb 02 74 08 15 93 19 02 dd 81 c0 4d ec 9e 37 65 e8 ea 2c 6c c6 65 b0 6b c4 44 bb fc 07 1a a9 a0 13 6d 2d 40 77 e2 a8 99 cf 86 40 e3 08 6c a4 8a db d3 56 c3 a5 0d dd b1 d1 8e Data Ascii: C35b<:t'h~^f=vMJII2=C#]8 ghC)!-@P1!],]f\|65oJb:A`7]*cwR2tRL<ym{i}8XNt)C)=RBtM7e,lekDm-@w@lV
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 24 e4 47 c0 ba 0e f8 ef f0 6a 74 5e e6 58 93 b0 1b 80 c2 99 f0 7f 8d 14 7f c3 f1 71 6c 37 73 db 92 f0 3c 3b 2a 93 7f 9b e0 47 d9 59 73 d8 43 d8 1f 43 4a 77 a7 fc 17 58 3a f7 61 5b ba f4 43 99 7c 3f 0f 3e 1c 1e 4a fe 32 ca ee 24 5d 26 64 3a a9 4a ef 78 58 bf c0 ab df 6a 57 d7 0f 75 39 e8 55 f8 39 ec 74 ac 4a d4 a3 7e c8 d7 3f 84 ff 03 9e 8f cd 1a 8e 0a 12 c3 38 a8 ec 68 78 34 2c dd 2d f0 32 58 58 56 c5 09 db 59 e8 bc 0b 56 9d 6f c0 c2 66 37 72 92 a5 b1 fb 3c 47 f5 6f 08 bc 11 56 5d b7 c5 6d 93 2e 11 fa ea 97 b0 98 0a cb 07 f5 51 f5 2d 87 bf 03 3f 8f 0d 87 fa 44 5d 47 a2 a5 3b 16 0e 83 7b 60 7d d3 79 13 56 5d cf c0 0b e4 23 c7 20 31 ae e3 28 50 1d f2 41 b6 f3 18 53 e1 b1 0f 65 9a 47 17 c0 93 61 dd 5a aa 7a 34 0e 0b e1 7b d0 53 3b 65 c2 17 e9 7f 0a 1e 04 9f Data Ascii: $Gjt^Xql7s<;*GYsCCJwX:a[C\|?>J2$]&d:JxXjWu9U9tJ~?8hx4,-2XXVYVof7r<GoV]m.Q-?D]G;{`}yV]# 1(PASeGaZz4{S;e
2024-05-02 14:33:08 UTC	1950	IN	Data Raw: f6 0c b4 8e 86 79 b2 8a 2c e5 43 60 05 d5 78 1d fd 86 fc ec 48 e9 8b 1c ff 19 fe 75 c4 ff 42 d9 e8 a8 ac cf 81 71 d7 89 f7 9e 3e 05 26 28 21 90 74 51 15 01 ae df f3 9c f8 86 97 1f 45 5e 3f 44 05 89 49 a2 af 86 5a 40 13 1d 85 5e d2 da 95 88 76 ee 39 94 3f 47 60 33 a4 9c f3 12 94 69 e2 8b d3 52 d2 00 7d 40 da 8a 73 d2 2f 5d b3 f7 da 52 80 d4 7f 0c fa 27 b9 0a 35 ca 8f 40 10 5a 8c 2f 38 8a cf 92 de ee e4 95 3c 17 db 49 9e ac 94 45 2e 9c ee 0d 94 3d 17 90 05 45 d1 89 f8 45 af f0 6c ea 9e e8 c9 ca 59 ca 0e 27 33 07 76 d7 50 e2 36 cb 15 a5 4b 84 b0 b9 12 5f dc 5d 75 b9 46 e4 fa a6 a2 df 49 5c da 4d 66 a1 23 f0 d7 d1 20 ca be 8d 6d 70 9e 22 57 7f bf 0d ab ff 31 a9 ce 97 a2 8c 02 ae 4b 1a 1f d5 a7 6f 1a d5 e8 1d d5 0a ba 5d ee ef 64 3a 09 0f 4d d6 95 f0 78 c7 69 Data Ascii: y,C`xHuBq>&(!tQE^?DIZ@^v9?G`3iR}@s/]R'5@Z/8<IE.=EElY'3vP6K_]uFI\Mf# mp"W1Ko]d:Mxi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49892	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:08 UTC	588	OUT	GET /wp-content/uploads/2017/05/502px-us-fishandwildlifeservice-logosvg.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:08 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:08 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:21:18 GMT Accept-Ranges: bytes Content-Length: 55987 Connection: close Content-Type: image/png
2024-05-02 14:33:08 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f6 00 00 02 57 08 06 00 00 00 61 43 76 6a 00 00 da 7a 49 44 41 54 78 da ec dd 6f 68 95 55 1c 07 f0 83 88 88 88 f8 c2 17 bd e8 45 2f 62 44 f5 22 b8 82 db 73 9e d9 a2 e1 bc 7b ce b9 2e eb ce ba ab 3d e7 b9 d3 8b cd 39 97 b6 30 6b b5 d2 29 3a 45 b7 a4 f9 87 d6 62 ce 69 33 d4 62 d9 52 49 53 d3 65 6b 6c a3 30 56 0c 93 59 11 22 21 23 22 e4 d7 73 c6 88 08 a4 d4 3d f7 9e 7b ef f7 0b 1f ee eb e7 39 87 7b 38 7f 9e df 61 d9 9c 44 28 34 35 1e e1 39 4a f0 62 57 d8 95 4a d8 db 7c 9d be 1e 5f af 12 d6 b0 12 7c d4 77 dd 37 e6 23 00 00 48 89 9b be eb 13 46 7d 03 be 93 be 83 9e b0 9b 3c c9 6b ca 85 5d 52 1e c9 7b 24 21 43 33 18 92 f9 51 05 05 d3 dd 62 6b be 72 f8 3a dd 11 5c c1 87 fc df 3f 0c e9 b0 00 00 30 79 6e ea Data Ascii: PNGIHDRWaCvjzIDATxohUE/bD"s{.=90k):Ebi3bRISekl0VY"!#"s={9{8aD(459JbWJ\|_\|w7#HF}<k]R{$!C3Qbkr:\?0yn
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 26 fb a0 f9 6e 5a 6d fb fc 0e 65 b6 63 56 82 21 03 25 ab f2 fc 2a 7f 17 4e 44 20 db b1 88 d0 3e 80 7e 95 26 c3 71 71 e3 c0 57 13 06 47 fa 14 bf 29 6d 8d be 45 fb 78 70 df 20 ce 82 84 a4 79 9d 0b 33 29 db 21 1c 8b 23 1a 13 14 da 97 29 6c 59 c8 89 8f f3 28 0e 5a 47 ef b9 99 6b 1a 9e e3 ce 72 b9 84 8d f2 be 89 69 66 6c 20 3e 9c f6 52 64 1d 62 8f 96 df 8f 77 96 0d 45 e5 1e 78 1f 64 ba a4 9f f9 de 07 8b 04 4a eb f2 dc 4c aa 58 49 12 ce ca ca dc 36 11 32 c5 9f df 0d 27 3f 57 ae 04 73 e1 c0 35 c8 e5 c0 58 8a 65 ca 1c 27 78 1f 4c 90 7d cf 85 55 86 e7 e6 b7 6b c7 0f 85 eb f3 1b 02 e3 0a 4e 91 be d7 e6 dd 31 49 63 9c e4 b7 e4 99 98 08 e2 70 8b c5 94 df ab 68 12 2c 61 8f 41 d8 47 52 73 4a 10 34 c4 3a ae 8d 89 30 77 55 81 f0 e0 a1 ff dc e1 5d a4 bd 65 a6 9c 15 6a 42 Data Ascii: &nZmecV!%*ND >~&qqWG)mExp y3)!#)lY(ZGkrifl >RdbwExdJLXI62'?Ws5Xe'xL}UkN1Icph,aAGRsJ4:0wU]ejB
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: b7 e0 14 c2 22 c6 a4 74 20 76 3d e4 26 cd 87 d8 ad 04 d7 e9 76 f0 8b 50 6c f2 6c e0 94 4a 63 16 07 d0 d9 5d 9f 89 68 9f 39 4c 58 ae bd bb f5 46 ce 1b e9 c8 f6 11 76 d9 27 af cd 9b 23 43 94 6a 81 8b b9 1c 7a 4d c4 58 54 0b 10 3b c4 6e 53 78 db d3 fb f3 16 59 6c 12 bd cf 2d 91 82 62 a7 88 68 ab 29 94 e4 7e aa ea 7c f0 7a f6 b1 6b be f0 8d 9e 80 39 19 c2 54 03 e7 ee 27 da ff ae 88 b1 a8 26 20 76 88 dd 66 24 6f fc de 6a 01 61 1f cc 5f cc 19 db 44 b4 db 08 38 7a 5c 84 8c 94 a4 89 6b 22 47 c4 9b bc 4f bd ae 63 9a 88 76 98 ca 03 ee b1 32 a4 29 19 8e 3f 28 6e 8d a5 77 88 1d 62 57 13 e1 1b 9c ac be e7 98 9f db 17 66 8f 14 d1 7e 43 b8 b2 67 10 35 f3 88 13 21 23 25 e9 3e 67 a9 49 fd c1 8f 55 fe cf 7d bd 88 36 98 43 7b ff 20 19 f2 94 ca f9 7b 88 0e 76 13 31 06 d5 0a Data Ascii: "t v=&vPllJc]h9LXFv'#CjzMXT;nSxYl-bh)~\|zk9T'& vf$oja_D8z\k"GOcv2)?(nwbWf~Cg5!#%>gIU}6C{ {v1
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 10 9d 30 59 e7 a3 78 cc e2 f5 79 50 16 89 05 5e 1f 96 24 8e 27 61 73 4a fc 8f 5f 11 89 b9 d1 85 f7 22 0e bc 90 5d 0e 5b ea c1 2a f8 95 4f a9 f0 ad 90 61 fa 30 73 49 dd 28 ce f0 e7 25 ec e8 8c ce e8 3c 67 6e a7 21 ec e6 bb 58 3a db bd 2a 8a 9b 21 a6 8e ec 2b 9d ef 37 de 41 78 b8 0b 9a cd d6 74 5b ad 8b 61 7e f2 28 ad d7 df cd eb 62 b0 29 69 cf 66 5b 92 b0 39 15 f0 8b da 2b f3 e9 d7 0e c0 74 b1 13 d7 9c 83 fb 8f eb 40 dd ee d6 3e 85 11 f9 95 3a fd fe c8 85 11 24 ec cd 83 da bc 0f e5 37 84 ab a3 49 26 5d d3 b1 00 8c a5 86 b0 2b f2 58 3a 2b 4e f7 e3 66 08 9f 89 76 d2 c9 73 02 ed f5 f7 70 2f 13 1e ee a6 ca 9d bc 2e da 16 43 dc c9 4b fe ce ad bc cf c0 32 38 95 c4 a2 af 23 58 dd 8e 84 bd 29 71 3e 47 41 62 6e e4 18 90 79 02 4b b1 be 20 e8 1e 9b 2e c1 af 7d 4b 75 Data Ascii: 0YxyP^$'asJ_"][Oa0sI(%<gn!X:!+7Axt[a~(b)if[9+t@>:$7I&]+X:+Nfvsp/.CK28#X)q>GAbnyK .}Ku
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: c5 cb ae bd 70 3a b5 4c 10 d0 71 32 82 07 35 f9 50 5c bb 9b 1c af 87 ce 34 c8 84 6c bf ff ec 94 c3 62 c0 eb ef 08 56 f1 61 32 52 f6 66 c6 3a 56 f4 2f c9 36 4a 02 b9 9d a1 ee 36 e1 8d f7 cc a4 31 a1 78 3e 79 f5 6f 77 dc 20 fb d6 5f cc 73 6d 1d ea 72 a3 a6 de b9 7e 59 5b 6d f4 be 2d ab a8 cb b4 33 fb 0a b6 3b 0d e2 de 5d 58 cc a7 17 a9 1b 09 8b 49 8a d9 01 7e 2f a8 7f ab aa 81 04 f4 d7 16 0c 12 1d eb 96 b1 3d 06 2b f7 a3 9b d4 a4 38 1b 5c 66 77 15 ca 25 cb 55 fb 6b a1 78 e9 b5 17 4e 27 b8 1f b8 f4 b1 88 97 11 30 59 d1 3e d4 2b dc 29 7a 18 da 5c 8c 1a b5 12 c8 48 49 22 1e c6 4a 1b 11 9a e3 32 45 1f 8d a1 3c 68 26 b0 31 4a 07 50 ba 02 ae 43 31 ce 64 4c 56 e2 72 ef 7f 21 5b 2c 11 a9 19 bd f3 62 a0 fb 7d b4 6e 6f e5 78 3c b4 53 6d d7 55 34 6d 70 e6 ee ab ed 4b Data Ascii: p:Lq25P\4lbVa2Rf:V/6J61x>yow _smr~Y[m-3;]XI~/=+8\fw%UkxN'0Y>+)z\HI"J2E<h&1JPC1dLVr![,b}nox<SmU4mpK
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: b4 24 fa 30 10 f0 b6 d4 bd f0 c7 1b 86 94 ab c3 fd a1 dd cd 76 42 48 56 03 c2 1b f3 b6 2b e9 4b 4f 90 ad 5c 98 ed 65 3c 35 af 96 55 c1 95 f6 37 b0 44 46 bf b9 d9 11 d2 42 2d d3 e0 83 a7 64 aa 14 f2 22 1b ba 7b d5 68 02 36 a5 52 ef 9d 47 fe fd 22 ed d8 11 6d c1 58 cf 12 25 ee 83 8b 37 a0 87 43 bf a3 f2 65 18 d5 bd be 68 51 ed 25 d5 04 80 97 11 6e 63 07 cd e1 62 d6 3a bc 77 a7 56 25 f7 e1 1e dc 53 2b a4 89 07 f4 ca 3d 91 ce ca cb 1c c8 a0 15 35 28 47 5d 7d c1 91 cb 4e 00 b2 50 5c 5b 5e 1c 31 9a dc c6 ea 38 6d ce 71 91 32 f3 a8 e8 f3 da db 22 de f6 9e 7c 3e 90 df 18 ea 70 79 34 da cf 1c 09 62 cc ef c0 a4 3d b6 1d 11 b4 c7 b9 aa c3 99 b7 47 b8 25 11 8d 01 2b 17 79 0a ea 8c 93 5e 08 68 20 90 a1 7c a9 e4 8b 37 c4 b9 28 71 8e eb dd 50 b4 4b 4f fe ba 37 bd 0e 74 Data Ascii: $0vBHV+KO\e<5U7DFB-d"{h6RG"mX%7CehQ%ncb:wV%S+=5(G]}NP\[^18mq2"\|>py4b=G%+y^h \|7(qPKO7t
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: e3 50 5b 43 56 d6 40 fa 52 16 50 a3 e7 dd fb 67 e5 3e 9a 21 4d e9 fb 9e a5 55 4e 13 cf b7 cb 14 4f 8f de 21 9e 9f 7a 44 a4 cd 39 2e 6a 2c 3c 29 ea 2f 39 2d 08 dc 99 52 f9 6c e6 fe f7 51 5d 43 de 54 93 cb 14 32 bb 7b f7 ae d8 bf 63 83 c8 ea d9 cc 6f c6 c8 e8 52 f1 b5 42 df b3 6a 34 b4 af fc 1b a0 29 dd 24 80 d6 c8 a8 b1 72 37 24 57 f9 ad 82 c3 f1 73 ae 7e ce 93 f6 5a 03 2d 1f 4b a0 dc e6 6a 2f 3f ae 05 5d b4 25 de d0 73 97 2f e5 6d e9 22 56 4c 75 d9 99 6d bc 90 c6 d0 13 ef a9 7e 47 1b 1a 01 f9 c0 ba f1 39 7f 5f 3e b5 a7 f9 b8 8e ed 32 c8 c9 1a b5 3b b3 da 1b 83 90 55 41 2a 7a 2d f9 f9 a3 3b 1a 4a 77 be 9c 41 7b 70 c7 7a 62 d3 ca f9 e2 93 8f 75 1f 7a 61 36 82 f9 d1 bd db c4 e4 a1 9d 45 93 ca cf fb 7e b7 28 7d 8d eb dd 50 d6 b5 27 e7 f9 5d 27 1b 37 bc 0b c0 Data Ascii: P[CV@RPg>!MUNO!zD9.j,<)/9-RlQ]CT2{coRBj4)$r7$Ws~Z-Kj/?]%s/m"VLum~G9_>2;UA*z-;JwA{pzbuza6E~(}P']'7
2024-05-02 14:33:08 UTC	2	IN	Data Raw: 60 82 Data Ascii: `

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49891	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:08 UTC	570	OUT	GET /wp-content/uploads/2018/02/social-inovation-fund.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:08 UTC	206	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:08 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:23:31 GMT Accept-Ranges: bytes Content-Length: 9240 Connection: close Content-Type: image/png
2024-05-02 14:33:08 UTC	7986	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e1 00 00 00 e1 08 03 00 00 00 09 6d 22 48 00 00 00 ff 50 4c 54 45 ff ff ff 00 00 00 ef 3e 36 00 5b aa c9 c9 c9 35 35 35 fc fc fc 9c 9c 9c f8 f8 f8 44 44 44 f5 f5 f5 d6 d6 d6 f4 f4 f4 f1 f1 f1 ee ee ee e4 e4 e4 db db db e7 e7 e7 b3 b3 b3 bb bb bb d0 d0 d0 e0 3d 35 c2 c2 c2 57 57 57 07 08 07 ef 3a 31 8b 8b 8b df df df ef 61 5a fe f8 f7 79 79 79 bf bf bf 97 97 97 ee 24 18 2a 2a 2a 49 56 97 6a 6a 6a 5f 5f 5f 9b 9b 9b 7a 7a 7a 82 82 82 52 52 52 3b 3b 3b a7 a7 a7 65 65 65 1a 1a 1a 8c 8c 8c 23 23 23 00 51 a6 4a 4a 4a 1c 1c 1c a7 be dd 12 12 12 00 54 a7 00 4c a4 ef 33 29 d0 dd ed de e7 f3 f0 50 49 ae b6 cd f4 c6 c3 fd e8 e6 f6 bc b8 3e 4c 92 fb df dc b3 c6 de f2 a0 9c f0 aa a6 ed 66 5f de 29 1c f7 9f 9a ec Data Ascii: PNGIHDRm"HPLTE>6[555DDD=5WWW:1aZyyy$***IVjjj___zzzRRR;;;eee###QJJJTL3)PI>Lf_)
2024-05-02 14:33:08 UTC	1254	IN	Data Raw: d8 69 27 d6 b0 d2 8e b6 f5 29 bb b4 e1 44 63 20 19 80 a2 b7 7e 03 69 7c ba 06 7e 07 a2 c5 18 38 8a 6f 23 29 52 4b 57 3f d4 6f 2e f0 7e b4 24 48 74 72 7c 25 30 ee 8f c8 51 1d 77 b9 95 4d c4 12 2a 64 4e 4d fe 34 d1 cc 5b f2 04 e4 92 38 1e de 0b 8f 04 0d 45 1a 17 3b 06 fc 11 49 a4 ec c8 15 db 31 4b 3e e7 29 bb 8c 9a 52 5b 73 be 2e 07 31 03 b0 b9 f8 d0 78 db f0 af ef 44 c8 bd ec c1 5b 11 ad 07 8d 82 68 dc e5 86 73 ea c9 8e 64 6b cf 03 c0 fb d1 39 c0 41 4e bc 94 fa 56 d2 10 7b 86 c0 3c 7b 40 66 e4 7b bc 17 05 ed 0e 3e c4 a0 2a 1b 93 39 dd 21 87 c4 ef c9 2e 93 b6 a4 04 66 40 43 b1 8c 20 66 52 c4 bc 61 f2 00 5c 1d 38 15 de 19 7b 93 f4 fc 7f e3 dc d7 d4 08 48 42 1b af 65 57 00 4c 5e fd d0 c6 86 42 20 ec af 59 0b 98 0c 68 68 02 2c d5 d3 4f 1f 03 cb ce d6 23 d9 d1 Data Ascii: i')Dc ~i\|~8o#)RKW?o.~$Htr\|%0QwMdNM4[8E;I1K>)R[s.1xD[hsdk9ANV{<{@f{>9!.f@C fRa\8{HBeWL^B Yhh,O#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49893	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:08 UTC	557	OUT	GET /wp-content/uploads/2018/06/NWF-Logo.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:08 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:08 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:24:29 GMT Accept-Ranges: bytes Content-Length: 13282 Connection: close Content-Type: image/png
2024-05-02 14:33:08 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 18 00 00 01 18 08 06 00 00 00 87 8e e9 8c 00 00 33 a9 49 44 41 54 78 da ec 9d 5f 8b 1b 55 18 c6 a7 7f 74 15 2c 2c 15 69 05 95 45 4b 95 0a 9a 8b b2 28 54 ba 94 5a 44 c1 2e b8 45 f0 a2 04 54 c4 bb b5 f4 4a 6f ba b6 b7 25 60 c1 db 60 bf c0 62 bf 40 d8 4f 10 fb 09 b2 df 20 fd 06 c7 fd b1 73 96 49 27 33 67 4e 66 ce e4 24 79 1e 78 61 8d 3b 99 49 9a f7 77 9e f7 7d cf 64 13 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 96 5c 67 d7 d6 3a 47 b1 95 89 8d 44 92 24 29 03 89 f5 14 0e db 47 b1 97 46 ff 28 06 69 0c 8f c2 34 10 83 4c f4 ec b9 2c 9c 12 49 92 16 57 69 22 77 49 ea 2c 38 22 0c ae 6d 9f eb 4c a1 d7 49 24 49 8a 43 19 47 b2 97 26 ea 28 12 70 d4 8d 61 ea ac 76 e5 78 24 a9 25 d1 f7 48 9d 49 3f 62 57 12 Data Ascii: PNGIHDR3IDATx_Ut,,iEK(TZD.ETJo%``b@O sI'3gNf$yxa;Iw}dI$I$I$I$I$I\g:GD$)GF(i4L,IWi"wI,8"mLI$ICG&(pavx$%HI?bW
2024-05-02 14:33:08 UTC	5297	IN	Data Raw: 1b a9 78 cd 8d 12 00 23 6f 76 dc 2b b2 7b d2 17 60 b0 d7 33 7f 0e ea 9b 5d 2c 25 2e 5e 83 c1 6c b1 9c 43 94 0b bc f3 cf 3f 5a db 30 a7 d3 c0 64 17 b1 2b d3 a0 9c 9a bd d6 a5 9b d4 50 64 67 37 0f e0 26 b1 87 b6 f6 87 8b bb a9 9f 0e 6e d9 60 c0 01 88 d8 84 c1 6c 98 34 6e b6 33 fa 97 be 6e da ab 4b 60 2f 17 6e 18 00 d2 07 00 f4 37 82 8e 99 b2 b4 42 dd 8b 1b e5 3a c5 8d 06 a6 a3 10 55 33 fc cf 7d 32 9d 1f e6 7e 2f c0 3c 32 ec 18 5f 51 4d 57 3b 3d 89 96 c3 d7 97 af 69 1a e8 fa 92 2f 16 bd a0 fd a7 12 d9 2d 80 8c 00 15 51 a3 94 57 66 bb 64 31 b7 99 29 07 a3 18 f3 37 9b 4a 00 e6 ad 86 6a 5e 25 24 b2 08 b8 ba d1 91 d7 f0 67 12 ab 91 99 24 4e 09 17 0b 4a b0 17 cc 32 4a e9 22 3c 64 17 3b 61 50 f7 7d 2c 46 03 39 df 77 b1 0e d2 83 e3 fe fd fb c9 ea 9d b2 d9 94 28 74 Data Ascii: x#ov+{`3],%.^lC?Z0d+Pdg7&n`l4n3nK`/n7B:U3}2~/<2_QMW;=i/-QWfd1)7Jj^%$g$NJ2J"<d;aP},F9w(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49894	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:08 UTC	581	OUT	GET /wp-content/uploads/2020/11/NCR-Logo-Vertical-Color-White-BG.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:08 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:08 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:26:37 GMT Accept-Ranges: bytes Content-Length: 22918 Connection: close Content-Type: image/png
2024-05-02 14:33:08 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a4 00 00 02 86 08 06 00 00 00 05 c0 ef 95 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 01 ed 9d 0b f8 55 55 9d f7 37 f3 92 ca 4d 11 49 81 4c 49 05 35 50 10 29 25 6f 8c e5 0c 24 d5 58 5e 50 46 67 74 cc b4 a7 c1 ca 4b 6f 45 cd 3b 45 f4 78 a1 46 a6 37 cd 31 34 29 45 a5 2c 2f c1 93 65 5e f0 d6 20 a2 42 12 08 2f 25 a1 19 81 17 d0 a8 a6 79 cf 77 e7 fe cf 3e fb ec b5 cf 5a e7 ec 75 ce 3a ff f3 59 cf 03 ff 7d 59 97 df fa ac 7d d6 77 af cb 5e ab cf 85 d7 fc fb 13 9b b7 bf 3a 32 c2 41 00 02 10 80 00 04 da 44 60 e8 80 41 1b fa 4a 8c 56 6c d9 3c b8 4d 36 90 2c 04 20 00 01 08 40 20 1a 1f 45 23 ff 0a 0e 10 80 00 04 20 00 81 10 08 20 48 21 94 02 36 40 00 02 10 80 40 84 Data Ascii: PNGIHDRpHYs.#.#x?v IDATxUU7MILI5P)%o$X^PFgtKoE;ExF714)E,/e^ B/%yw>Zu:Y}Y}w^:2AD`AJVl<M6, @ E# H!6@@
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 30 ef 6b d7 c9 86 3b 1f 79 b0 27 6d ad 35 e7 6b 93 3c ed 8d 94 5e d7 ae 27 d1 9c 03 6d d9 e0 b2 e6 5f 4e 14 56 97 b4 ce e0 8f 97 3d 16 ad 7d 61 53 b4 ee c5 17 aa c2 8c ab 6c cf 3e 6a c4 de 4e 5b b2 57 45 50 70 92 65 f1 be 49 c7 58 af 6f 58 10 6d e1 ad ec de 4c da 54 b0 51 97 7d 6e 5c 9e d5 b4 1d 3e 9f 37 ed bd b5 76 d3 c6 9e 2c b6 82 71 4f 62 1c 58 11 40 90 ac 30 f9 f5 a4 c5 20 af ba eb f6 48 fb 05 99 dc 3d cf 6d 88 b4 97 8e 76 63 3d fb f8 bf f1 b6 30 a7 c4 48 e9 24 4e ab 54 bf 67 e2 11 75 17 0f 4d fc bb fc 5d f2 d4 f2 c2 3c 57 c5 f5 86 4d be f2 2f 21 5a 70 cf e2 68 e1 93 8f 57 ed e1 94 b6 21 2e 9f c7 a3 68 de 4f 16 47 e7 bc eb b8 52 85 3a cb 42 02 3c 72 d8 b0 74 f2 a5 1f a7 cb 59 91 37 23 48 5a f0 37 1d 9f 38 de 7d f1 2c ab e7 26 1d 4e e5 eb eb 05 48 3b Data Ascii: 0k;y'm5k<^'m_NV=}aSl>jN[WEPpeIXoXmLTQ}n\>7v,qObX@0 H=mvc=0H$NTguM]<WM/!ZphW!.hOGR:B<rtY7#HZ78},&NH;
2024-05-02 14:33:08 UTC	6933	IN	Data Raw: 5e 3c 4e 99 78 64 da ab f1 58 a2 65 b2 43 ad 08 4d 99 0f d1 c9 ee ef 9c ff f1 aa 32 d6 4b 98 5a 44 c9 cb 98 9e 77 75 bf 6a 5c 2e 11 67 3d ff 69 51 4a 6f f0 17 62 3e 7b a3 4d 7d 66 cc 9d b3 75 c5 96 cd 83 5d 32 b7 72 f6 5c 17 ef f8 cd 10 30 cd 2c b2 99 49 a4 2d ac 5f 79 6d 7b 26 c6 a8 aa 4b a2 e6 66 ea 82 29 ed 5d fb 0f e8 f9 61 a6 bc 1b 0f cb 8a 27 49 c0 14 df 5b 86 ee e5 ed bb 17 8d b1 2c ab cc 1a 7b 7e eb 96 d8 8c e7 5f de 1a 25 53 c4 87 ef 3e 24 9a 78 d0 98 52 d2 56 3a bf de fc 9b 24 ab 3d 7f 8b 98 9b c2 24 81 eb 75 97 15 85 b7 79 ce 92 74 ca 88 c7 f4 cc 26 69 d8 fc 75 b1 39 1d 9f ec 4f 97 b1 ee 69 a3 c8 22 7e 12 f3 81 fd fa d7 ed be 4e a7 c3 71 2d 81 b1 b3 2e aa bd 58 70 65 fc 90 a1 2f 21 48 05 80 b8 05 01 08 40 00 02 8d 11 68 44 90 e8 b2 6b 8c 35 a1 Data Ascii: ^<NxdXeCM2KZDwuj\.g=iQJob>{M}fu]2r\0,I-_ym{&Kf)]a'I[,{~_%S>$xRV:$=$uyt&iu9Oi"~Nq-.Xpe/!H@hDk5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49895	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:08 UTC	801	OUT	GET /wp-content/uploads/2020/11/NAAEE_Logo_VT.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:08 UTC	208	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:08 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:26:38 GMT Accept-Ranges: bytes Content-Length: 72736 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:08 UTC	7984	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 03 21 03 64 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CC!d"
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 62 b7 6f 46 23 fc fe 55 cf 81 5d 30 f8 4e 4a 8b de 1a 14 01 4a 00 a7 05 fc 29 c1 79 aa b9 16 19 8a 50 bc 54 9b 69 42 d0 03 02 d3 82 d3 c2 93 4e f2 c0 eb d6 90 c8 c0 f6 a7 6c cf 5a 78 02 97 06 80 b0 d0 80 7e 15 f0 cf ed c5 f1 25 35 ff 00 1a d8 f8 4e ce 50 f6 ba 2a 79 97 25 7a 1b 99 00 3b 7d f6 a6 df c5 d8 1e 95 f6 bf 89 b5 75 f0 e7 86 75 6d 5e 42 bb 2c 2c e6 ba 6d dd 30 88 5b 9f 6e 2b f2 5f 52 d4 6e 75 8d 46 ea fa f2 66 b8 bb ba 95 a7 9a 67 fb ce ec 49 66 3e e4 93 5f 41 93 d0 53 a8 eb 3f b3 f9 b3 f3 fe 31 c7 3a 18 68 61 21 bd 4d fd 15 bf 37 f9 32 b5 3a 91 7a 52 d7 d8 9f 8e 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 27 7a 4d d5 d3 fc 30 f0 a4 1e 3a f8 87 e1 ef 0f dc dc 9b 3b 7d 4a f6 2b 69 26 18 dc aa cc 01 db 9e 37 1e 83 dc 8a 99 49 42 Data Ascii: boF#U]0NJJ)yPTiBNlZx~%5NP*y%z;}uum^B,,m0[n+_RnuFfgIf>_AS?1:ha!M72:zRQ@Q@Q@Q@Q@'zM0:;}J+i&7IB
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: d9 4f e9 5f 19 b3 16 62 49 24 93 92 4d 1d 6b e6 6a f1 0e 26 6f f7 71 51 5f 7b fe be 47 04 b1 d5 1f c2 ac 7d 49 77 fb 66 d9 a6 7e cd e1 69 e6 1d bc db d1 1f f2 46 aa df f0 da 5f f5 27 7f e5 53 ff 00 b4 d7 cc 94 57 13 ce f1 ef fe 5e 7e 0b fc 8c 7e b7 5b f9 bf 04 7d 59 65 fb 64 e9 52 30 fb 5f 86 ef 20 5e e6 0b 84 90 fe a1 6b ad d1 3f 6a 3f 01 6a cc ab 35 ed d6 94 c7 80 b7 b6 cd fc d3 70 1f 89 af 89 a8 ad 69 e7 d8 d8 3f 79 a9 7a af f2 b1 6b 1b 55 6f a9 fa 43 a1 78 a3 47 f1 3c 1e 76 93 a9 da ea 31 81 92 6d a6 57 db f5 00 f1 f8 d6 ad 7e 68 d8 df 5c e9 d7 09 71 69 71 2d ad c2 1c ac b0 b9 46 53 ea 08 e4 57 ae 78 23 f6 a1 f1 6f 86 1e 38 75 37 4f 10 d8 ae 01 5b b3 b6 60 3d a5 1c 93 ee c1 ab dc c3 71 15 29 be 5a f1 e5 f3 5a af f3 fc ce ba 78 e8 bd 26 ac 7d a5 45 70 Data Ascii: O_bI$Mkj&oqQ_{G}Iwf~iF_'SW^~~[}YedR0_ ^k?j?j5pi?yzkUoCxG<v1mW~h\qiq-FSWx#o8u7O[`=q)ZZx&}Ep
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 1f 75 1d cd 7c 76 7d 80 53 87 d6 a9 ad 56 fe 6b bf cb f2 f4 3c bc 6d 1b af 69 1d fa 9f 3b 70 71 45 07 ad 15 f0 67 8c 5a d3 35 2b 8d 23 51 b5 bf b3 94 c1 75 6d 2a cd 14 8b d5 59 4e 41 fd 2b f4 2f c0 5e 2d 83 c7 3e 10 d2 f5 c8 00 55 bb 84 33 c6 a7 21 24 1c 3a fe 0c 08 fc 2b f3 aa be a1 fd 8e fc 5c 65 b5 d6 bc 35 33 e4 c4 45 f5 ba 93 d8 e1 64 c7 b0 3e 59 ff 00 81 1a fa 7c 83 15 ec b1 1e c5 ed 3f cd 1e 86 0a a7 2d 4e 47 b3 3e 95 a2 93 34 57 e8 c7 ba 2d 14 51 40 1f 92 3f b4 3f fc 97 5f 1e ff 00 d8 66 e7 ff 00 46 1a f3 da f4 2f da 1f fe 4b af 8f 7f ec 33 73 ff 00 a3 0d 79 ed 7e a9 43 f8 30 f4 5f 91 fc bb 8e ff 00 7b ab fe 29 7e 6c 29 3b d2 d2 77 ad ce 13 f5 b3 f6 76 ff 00 92 15 e0 3f fb 03 5b 7f e8 02 bd 16 bc eb f6 76 ff 00 92 15 e0 3f fb 03 5b 7f e8 02 bd 16 Data Ascii: u\|v}SVk<mi;pqEgZ5+#Qum*YNA+/^->U3!$:+\e53Ed>Y\|?-NG>4W-Q@??_fF/K3sy~C0_{)~l);wv?[v?[
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 9c 13 c6 be 22 f1 bc 25 bf 7a f6 b6 ae ab ea 03 c8 09 ff 00 c7 87 e7 5f 75 d7 e7 d9 c4 9b c5 c9 3e 89 7e 47 ef dc 23 08 c7 29 83 8e ed c9 bf 5b db f2 48 28 a2 8a f1 4f b2 0a 28 a2 80 0a 28 a2 80 13 ad 7c 9f ff 00 05 14 1f f1 6c 3c 33 ff 00 61 81 ff 00 a2 24 af ac 6b e4 ef f8 28 b7 3f 0b fc 35 ff 00 61 81 ff 00 a2 24 af 4b 2d ff 00 7b a7 ea 7c df 11 ff 00 c8 a6 bf a7 ea 8f 80 28 a2 8a fd 24 fe 73 12 be bd ff 00 82 72 7f c8 ed e3 0f fb 07 c5 ff 00 a3 2b e4 2a fa f7 fe 09 c9 ff 00 23 b7 8c 3f ec 1f 17 fe 8c af 2f 33 ff 00 73 a9 fd 75 47 d3 70 d7 fc 8d e8 7a bf c9 9f 7a 51 45 15 f9 c1 fd 14 21 af 80 be 35 78 6c f8 57 e2 87 88 2c 82 6c 89 ee 5a e6 1c 0e 36 49 f3 80 3d 86 ec 7f c0 6b ef ea f9 a3 f6 c1 f0 63 49 0e 91 e2 98 13 3e 5f fa 0d d1 1d 81 25 a3 3f 4c ef Data Ascii: "%z_u>~G#)[H(O((\|l<3a$k(?5a$K-{\|($sr+*#?/3suGpzzQE!5xlW,lZ6I=kcI>_%?L
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 55 f3 5f af 5f 11 7e 0d 78 37 e2 b5 b0 8b c4 fa 15 be a1 2a ae d8 ee 80 31 dc 44 3f d9 91 70 c0 67 9c 67 1e a2 be 69 f1 af fc 13 a6 c6 77 92 6f 09 f8 aa 6b 40 4e 56 d3 56 80 4a 3e 9e 6a 60 81 f5 53 f5 af ae a1 9d 50 a8 ad 57 dd 7f 7a 3f 27 c7 70 6e 3b 0e db c3 35 52 3f 73 fb 9e 9f 73 3e 1a e3 d0 d0 78 f5 af a3 75 7f d8 2b e2 8e 9a ec 2d a3 d2 35 55 cf 0d 6b 7b b3 3f f7 f1 52 b9 f6 fd 8b fe 31 82 47 fc 22 1b b0 7a 8d 4e cf 9f fc 8d 5e 9c 71 b8 69 2b fb 45 f7 a3 e6 a7 92 e6 50 76 78 79 fc a2 df e4 78 96 ea 5a fa 13 4b fd 84 be 2b 6a 0e a2 7b 1d 37 4d 07 f8 ae af d1 80 fa f9 7b 8d 7a 47 84 ff 00 e0 9c b7 d2 3a 3f 89 bc 5f 6f 02 0c 6f 83 49 b7 69 09 f5 02 49 36 e3 eb b0 fd 2b 39 e6 38 4a 6a ee a2 f9 6b f9 1d 34 78 77 35 ae ed 1a 0d 7a e9 f9 d8 f8 c7 15 eb ff Data Ascii: U__~x7*1D?pggiwok@NVVJ>j`SPWz?'pn;5R?ss>xu+-5Uk{?R1G"zN^qi+EPvxyxZK+j{7M{zG:?_ooIiI6+98Jjk4xw5z
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: fe d6 d1 a7 7f f4 72 78 04 9c 2b a7 5c 67 18 e7 ad 3b 21 1f a4 94 d6 75 4f bc 40 fa 9a f9 77 f6 58 fd a7 6e fc 6d 7d 1f 84 3c 5b 3a c9 ab 94 ff 00 40 d4 4e 14 dc e0 73 1b f6 df 81 90 7f 8b 07 3c f5 ea 7f 6b cf 85 7e 24 f8 af e1 3d 02 cb c3 5a 7a 6a 37 36 9a 81 9e 64 79 e3 8b 6a 79 4e b9 cb 90 0f 24 74 a5 6d 46 7b c7 9d 1f f7 d7 f3 a6 cf 71 15 b4 4d 2c d2 24 51 28 cb 3b b0 0a 07 a9 35 f9 39 e3 1f 04 ea 9f 0f 3c 45 2e 8b ae d9 a5 a6 a5 6e 12 47 85 64 49 00 07 91 f3 29 23 f5 af 5b b1 f0 e7 c5 df da 75 2d db 12 ff 00 c2 3d 6e ab 0c 3e 73 9b 7b 08 c2 80 01 55 ff 00 96 8c 31 c9 c3 1f a0 e2 9d 85 73 ee 4b 2f 8a 5e 0d d4 b5 11 a7 da 78 b7 44 b9 bf 2d b4 5b 43 a8 c2 d2 13 e9 b4 36 73 5d 4d 7e 68 7c 5f fd 9c bc 53 f0 67 4e b3 d4 35 69 2c af b4 fb 89 3c af b4 e9 ee Data Ascii: rx+\g;!uO@wXnm}<[:@Ns<k~$=Zzj76dyjyN$tmF{qM,$Q(;59<E.nGdI)#[u-=n>s{U1sK/^xD-[C6s]M~h\|_SgN5i,<
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: d9 c4 b1 41 12 43 12 f0 12 35 0a a3 f0 14 ee 2b 1e 5b f0 93 e0 ed b7 c1 0f 86 97 f6 56 72 9b 9d 6a 78 5e e2 ee f5 17 e6 92 60 87 68 51 fd d5 e8 07 f8 d7 c1 fe 2d f1 4f c4 bf 88 16 76 f6 de 24 7f 10 6b 36 f6 ee 64 8a 3b 8d 3d 80 46 23 04 8d b1 8e d5 fa 8f 45 2b 81 f9 8f e0 0f 18 7c 4d f0 4b 59 e9 7a 1c de 20 d2 b4 c9 2f 11 e4 b7 87 4f 6d 87 73 80 c4 ee 8c 9e 47 bd 7d c5 fb 40 fc 24 97 e3 1f c3 53 a6 db 48 b1 6b 16 c5 6e ec de 5e 15 a4 0b 82 8c 7b 06 07 af a8 15 ea d4 94 5c 67 e7 27 c3 cf 8c be 39 fd 98 ef 6f f4 6b cd 23 6d a4 92 97 97 4d d5 15 a3 55 93 18 dd 1c 83 d7 03 38 c8 38 ae de 6f 8e 9f 17 7f 68 c7 fe c0 f0 ae 92 ba 2d 8d c8 db 71 73 65 bf 6a a1 18 25 ae 18 0d ab d7 ee 8c f2 05 7d b1 7f a3 d8 6a a1 45 ed 95 bd e6 df bb f6 88 95 f1 f4 c8 a9 ac ec ad Data Ascii: AC5+[Vrjx^`hQ-Ov$k6d;=F#E+\|MKYz /OmsG}@$SHkn^{\g'9ok#mMU88oh-qsej%}jE
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 14 60 48 99 fb c0 8c 74 e8 6b d8 f5 4d 5a cb 45 b2 96 f3 50 bb 86 ca d6 25 2c f3 4e e1 15 40 ea 49 35 23 3e 32 fd be 74 5b 6b 7f 14 78 5f 54 8d 55 6e ae 6d 64 82 52 06 37 2a 30 2a 4f a9 f9 88 cf b0 af 6c fd 8e f5 19 6f fe 03 68 6b 33 17 36 f2 4f 0a b1 39 f9 44 ac 40 fc 33 8f c2 be 4c fd a7 3e 2d 45 f1 8f e2 2c 47 46 59 27 d2 6c 10 59 59 60 1c dc 39 6e 5c 0f f6 89 00 7b 01 5f 6d fc 0f f0 87 fc 2a ff 00 84 1a 06 93 a8 3a 5b 4d 6f 6f e7 5d 34 ac 14 24 92 31 77 04 f4 e0 b1 1f 85 53 d8 5d 4f 1d fd bf ff 00 e4 44 f0 a7 fd 85 9b ff 00 44 49 5a 7f b0 8e 99 1d b7 c2 ad 4a f1 53 12 5d ea 72 07 6f 5d 8a aa 3f 2a c0 fd bc 75 8b 0d 4f c0 fe 17 5b 4b eb 6b b6 4d 58 96 58 26 57 20 79 12 72 40 3d 2b a1 fd 8a 35 cd 3b 4e f8 30 63 bb d4 2d 6d 64 3a 95 c3 6c 9a 75 46 c7 cb Data Ascii: `HtkMZEP%,N@I5#>2t[kx_TUnmdR70Olohk36O9D@3L>-E,GFY'lYY`9n\{_m:[Moo]4$1wS]ODDIZJS]ro]?uO[KkMXX&W yr@=+5;N0c-md:luF
2024-05-02 14:33:08 UTC	752	IN	Data Raw: a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a Data Ascii: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49896	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:08 UTC	611	OUT	GET /wp-content/uploads/2023/12/Bugs-Inside_banner_image_reduced-scaled-e1702935745913-400x250.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:08 UTC	208	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:08 GMT Server: Apache Last-Modified: Mon, 18 Dec 2023 21:42:40 GMT Accept-Ranges: bytes Content-Length: 27934 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:08 UTC	7984	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 fa 01 90 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CC"
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: f8 67 2d d5 ee 92 b1 5c 4d f3 79 91 af dd de bf 79 6b b3 da 4b 94 a8 c2 22 78 17 c3 f6 1e 11 f0 ac d6 53 d9 4b 63 b2 3d cc db 37 33 ed 5f 99 97 fd dd bf 76 bc af e2 16 9b 3c d6 77 8f a3 78 82 6b ed 8b e6 cb 66 b6 4b e6 2a 7f 7b 6f de 65 ff 00 75 5a b8 df 1d 7e d8 da b5 c6 87 33 db cb 6d 1a bb 79 ea de 5e ef 95 bf bb fe cd 78 9f c4 6f 8b 1a 96 9b 70 ba e5 85 c2 da c7 24 09 2f d9 e3 ff 00 59 6f 24 8a ac ab fe e7 cd ff 00 a1 6e ff 00 6a 61 19 48 af 87 e2 3a ef f8 58 97 fa 5f cd e5 58 6a 56 aa db 9b cb 8d 7e ef fb db 55 a3 a8 6e 3e 2f 59 2d d3 2d bd d0 92 35 f9 9a 1b 8d be 62 ff 00 db 45 ff 00 7a bc 5f 52 f8 ad 3f 8c 23 5b db a7 7b 79 15 57 cf 5b 7f bd fd df 31 57 ee b7 fb 5f fa 15 70 3a f5 d5 ca df 4d 13 bf 97 71 13 32 b2 c6 db 55 be 6f e1 ae e8 61 e3 2f 8c Data Ascii: g-\MyykK"xSKc=73_v<wxkfK*{oeuZ~3my^xop$/Yo$njaH:X_XjV~Un>/Y--5bEz_R?#[{yW[1W_p:Mq2Uoa/
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 2b 7c bf 77 6b 7f e8 55 a5 0a fc 8f c8 ce 46 96 ad 32 2c d6 ba 8e 89 7f b6 65 5f 2d 6d 64 6f dd bf f0 ee dd fd ef 97 76 da b0 b1 cf 67 67 70 67 b8 2d 71 ff 00 3e f1 ae ef e1 6f 9b 6f cc df c2 b5 46 4d 59 1b 54 92 f2 58 2d bc b8 99 7c bb 78 77 6d 76 55 da ab f2 d4 37 5e 20 ba 92 c6 e9 75 4b 04 b5 66 da ca bb b6 b7 cd fd df 97 ff 00 66 ae 14 f9 b7 91 a2 34 9a c6 5b 3b 88 dd d5 6e 26 f2 b7 45 0a c7 bb 6c 9f 77 e6 dd fe cf f1 7c d5 5e 6b 7d 4e 6f f4 7f b1 db c3 1c aa b2 34 93 49 f2 b3 7c db 7f f1 df ee d4 d6 f1 de 5b e9 ff 00 6a f3 57 f7 7f ea d9 7e 6d ab f7 bf dd fe ed 57 f3 a7 66 df 3c e9 22 aa fc b1 f9 ac aa cd bb ee ed a2 1c b1 f7 80 2d 64 b2 b1 5d f6 bf 2b 45 2f 98 ad 1c 6d 26 df ee ed f9 aa e5 f5 e5 93 34 97 52 bb 47 75 23 6e f9 95 be 7f 9b e6 6f fc 7a Data Ascii: +\|wkUF2,e_-mdovggpg-q>ooFMYTX-\|xwmvU7^ uKff4[;n&Elw\|^k}No4I\|[jW~mWf<"-d]+E/m&4RGu#noz
2024-05-02 14:33:08 UTC	3950	IN	Data Raw: 4f e1 5f 99 6a d4 6a d2 33 31 fb b5 34 3d d9 11 21 bb 3d aa 3f e2 f9 6a c3 7f bb 51 ed da df 76 bd 88 d4 32 1a ab b7 ef 35 5e b7 55 91 7f 89 97 f8 5a a9 c7 1b 6e fb b5 34 2c eb 26 d5 dc df ec d6 8f 96 5b 0e 27 a1 7c 31 b7 82 ea ea e9 27 8a 39 24 5d ad 1b 32 ab 32 fd e5 f9 6b 9b f8 c1 e1 56 5b c8 f5 16 89 a4 85 7f 75 3a ed dd b5 5b f8 ab 53 e1 fe b8 da 2e b1 33 cb e6 ad bc 91 32 ce b1 ff 00 ac 68 ff 00 ba ad fc 2d 5e 9d a9 69 f6 ba c5 af 94 cd 1d c2 c9 17 9a cb 0f cc b1 47 fc 31 c9 5f 33 8a 7e ce b4 a2 7e 65 9f a9 47 17 7e 63 c6 7e 0d f8 aa d7 c2 fa 0c da 24 b7 b6 ed 37 da 7e 5f b3 c7 27 9c 8b b9 99 7e 6d bb 59 5b fb bb ab db 34 3d 59 61 66 7b 87 bb 92 4f 32 4f 2a f2 38 15 bf 74 cb 22 aa ed dd b5 5b ff 00 8a fb ab 5e 43 ae 78 0e e3 45 99 6e 2d 63 fb 45 ba Data Ascii: O_jj314=!=?jQv25^UZn4,&['\|1'9$]22kV[u:[S.32h-^iG1_3~~eG~c~$7~_'~mY[4=Yaf{O2O*8t"[^CxEn-cE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49897	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:08 UTC	797	OUT	GET /wp-content/uploads/2020/11/RWJF-logo.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:08 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:08 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:26:34 GMT Accept-Ranges: bytes Content-Length: 68120 Connection: close Content-Type: image/png
2024-05-02 14:33:08 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 54 00 00 00 c8 08 06 00 00 00 b7 41 19 39 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 01 ec 5d 07 60 53 f5 f6 3e d9 bb 49 d3 34 dd 83 b2 a1 20 43 91 25 a2 08 0a 2a 2a 02 22 8a 7b cf e7 f3 b9 f5 a9 cf bf 13 91 87 7b 0f dc 38 01 65 ef bd 77 a1 85 2e ba 67 9a 34 a3 d9 fd 7f e7 86 4a 81 42 5b 9f 0b b9 3f 0d 4d 6e ee f8 dd 93 7b bf 7b e6 77 24 1f bf ff 36 75 ea 98 41 e5 a5 a5 b4 71 fd 3a 9a 78 d5 14 4a 4a 49 a6 7d 7b f7 92 db e9 22 87 c3 41 25 25 c5 a4 50 c8 29 3e 3e 81 9c f5 0e d2 a8 15 94 5f 50 48 12 a9 9c 86 0c 3a 9d 42 a1 30 85 c3 61 3a 7a 84 43 41 32 99 63 a9 a6 d6 41 c5 a5 e5 54 58 90 47 d6 18 23 75 e9 79 1a 9d de bf 1f 05 83 41 6a 6c 6c 3c 7a 33 32 9b Data Ascii: PNGIHDRTA9pHYs+ IDATx]`S>I4 C%**"{{8ew.g4JB[?Mn{{w$6uAq:xJJI}{"A%%P)>>_PH:B0a:zCA2cATXG#uyAjll<z32
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: f9 49 56 0b 15 16 14 c8 af ba ef bf 8b bf fb 69 dd 70 3d c8 45 b4 30 bd 99 20 84 b5 bd f6 0d 36 b5 c1 de 54 52 49 d1 16 03 fd eb ae 1b af 1d da b7 eb cc 8a 5a 3b 34 53 1b 75 e9 d8 91 1a 83 0e 2a 2c 2e 11 6a ec 55 4a 25 72 4a a3 a9 a6 d1 ab fd f0 9b 85 d3 17 6d cd bf a5 01 5d 4a 2d 88 ea 33 5b 7f c4 57 da b6 19 c8 00 92 0d a8 ba aa 07 b9 c9 d0 11 7d 97 bc f8 e0 cd 17 6b d4 6a 2f f7 9e 8a 42 40 0c 48 1a c1 4e f6 01 6b 4c f8 dc 48 35 15 95 f0 c9 02 58 4f 70 9a 46 8b 48 8e d2 b6 5f 40 5c 4b 94 c0 29 2a 01 d6 f8 58 2f 4b 8e d3 22 d1 3d 94 f1 f4 ab 5f ce 3d 78 b0 b6 47 34 02 44 c8 2c 12 aa 91 da 0b a6 70 6d 02 2c c3 54 83 46 7a dd 32 d3 2a ae b9 64 f8 25 67 9e d6 63 d3 c1 92 12 32 22 32 9f 92 18 4f 51 e8 29 dd e0 e1 76 28 41 21 92 9f 01 bf e8 9a cd db c6 bd 35 Data Ascii: IVip=E0 6TRIZ;4Su,.jUJ%rJm]J-3[W}kj/B@HNkLH5XOpFH_@\K)X/K"=_=xG4D,pm,TFz2*d%gc2"2OQ)v(A!5
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: af ac b6 87 d7 09 e6 31 e4 d3 c6 22 f5 89 0f cd 47 8f 3c d0 18 d8 5b 19 82 79 2f a1 1a a4 63 b1 bb 6b f8 a0 6e 4b ae b8 68 f0 63 6a 89 72 53 8d dd 8d 34 2d 87 90 b7 da ca 5e da fd b5 08 a8 ed 16 d9 df 77 03 be 21 24 48 4f e1 98 ef 2f a3 0d d7 ee 2f eb fe 96 6f f8 ee 39 74 ec c8 cd 1c d9 39 df 50 7e 54 c8 d4 c1 54 95 29 62 28 21 3e 8a a4 f5 b8 69 b0 32 6b 5f 3c bc 5e 3f e9 95 ba 60 7a 5a dc 0b 09 f1 a6 2f d0 3e e5 89 7a 87 f7 06 2f 4a 57 95 d0 6e 39 a2 8d c7 08 d6 e4 83 b4 34 18 72 f9 0e f6 93 8e 19 8c 00 36 25 d5 b5 63 8a 2a 1a c7 c4 59 62 de 07 37 c0 f3 e6 68 75 be f7 38 1d 17 5a da e3 ff ba 4c 00 13 ec 24 d1 6a 02 f0 38 86 3e 05 30 6d f0 49 f4 b1 c8 31 e5 f3 e0 87 cd 2f 02 6b 7e 30 6c c8 5a 1a 97 58 72 7a 90 2e 4a 4d 37 dd 7a f9 0b 53 2e 1d f1 88 cf d3 Data Ascii: 1"G<[y/cknKhcjrS4-^w!$HO//o9t9P~TT)b(!>i2k_<^?`zZ/>z/JWn94r6%c*Yb7hu8ZL$j8>0mI1/k~0lZXrz.JM7zS.
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 99 96 1a 1e 04 a6 d4 03 21 0a f2 69 68 47 8c b6 4f cf 78 aa 8a 0a b3 aa 40 a3 f9 5f dd 1d 75 3a bd 31 ba 02 84 79 2b c0 0f 50 3a 31 e1 29 c2 39 b2 70 ac 91 f0 1f e8 6f f0 cb 81 59 0a 7e 3b 82 f1 69 1f 47 20 bd 73 61 c0 e6 e5 eb 53 20 60 71 83 d6 4f 98 50 9f 6a fb c9 26 f1 d4 b1 33 c0 a1 82 b2 0e 2e 03 17 b0 98 3e 24 12 64 26 1b c5 d5 8b 8b c4 92 e2 74 a1 99 9a fd d8 60 67 97 c3 e3 8d 73 6d 3b 76 e6 a3 4f 6e 3f f0 19 c0 c0 50 4c 31 1e 66 fd 14 d2 2c 47 10 80 d1 89 65 8b 32 f6 6e 5c 56 f2 4c 41 8c 3a c1 a4 37 6e 3a d3 d5 7f cd 2f ff b4 db 35 19 16 7e f3 d1 ba d6 8d 0e c7 98 96 6c 5b 90 f0 42 ab 53 e3 71 c0 55 00 6e 06 27 fd 1c 9e 19 94 6f 8e 40 a0 2a 81 55 3f 5b cc 1a 55 43 4a 5c e2 a9 95 ab 4a aa aa eb eb ab 84 d2 e0 7b e8 2b 1f 14 3f fa bf c7 44 5e 49 19 Data Ascii: !ihGOx@_u:1y+P:1)9poY~;iG saS `qOPj&3.>$d&t`gsm;vOn?PL1f,Ge2n\VLA:7n:/5~l[BSqUn'o@*U?[UCJ\J{+?D^I
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: ab bd d5 90 90 98 24 cb 6a 28 00 ef e9 68 05 db 12 36 ae c0 ec 9a 07 2b 97 4e 8a f1 91 c1 ab 77 ed 78 7e 53 42 b2 05 98 4b 1d ea d9 37 83 91 a9 07 99 26 39 db 1c f6 c1 ef 39 5d 80 0b f9 27 af 3d 5d 7d 78 7d 38 16 44 8c c9 8c 85 3a 2b ec fd 3d a2 db da 21 96 ae dd b8 bd bb 77 e0 41 56 28 9d 6f 5c d0 4a 68 b3 a1 45 0d f2 11 f4 33 17 37 1b b5 31 6a be c9 29 a9 d0 f2 16 3e dd fc b7 df f8 37 ad 0b 6e 88 93 98 0b b4 a0 f8 b7 8c c0 9f ed 29 5e 7b 5e e0 ce 9f 49 0d e1 d5 d7 df 9f dc d7 6d 5b 85 b9 80 aa 25 2c c7 41 4d d3 34 95 91 91 89 02 81 e8 eb 05 8d 9b 7a 6b 6b ab 68 a8 af c7 dc 81 ef 70 41 a3 26 3f 3b 3b 53 39 3b ed fd 7f d8 26 c0 78 15 14 83 83 88 a0 e3 fa 54 d6 d4 28 61 d2 d3 6d 13 bd 83 03 6d 91 7a e3 7d 61 0b 04 cf 1c fa 80 16 11 ca a9 88 b6 f6 66 61 87 Data Ascii: $j(h6+Nwx~SBK7&99]'=]}x}8D:+=!wAV(o\JhE371j)>7n)^{^Im[%,AM4zkkhpA&?;;S9;&xT(ammz}afa
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 1f ee e8 ec fc 11 b5 0c 68 92 00 6c 47 ef 4a 48 b1 fc 6f 4c 5c fc 83 31 e6 f8 ff 89 4f 4c 7e d0 3f 17 e6 1a 9b f4 c9 12 0f 2c f3 20 7f e0 03 1a f3 60 12 23 fb 27 13 fe 32 4c 46 61 81 df 75 fe 87 7f 93 e4 a3 a8 6c c9 8f 8d 46 f8 e1 30 52 c3 4e a7 b1 7f a0 fb 96 18 2c 48 25 98 3c e2 61 49 24 03 d8 9e 8c 89 8b c5 6f 02 ed 21 7c d2 5a 04 ca ba 0a ac 6d 2d 9b 34 30 a7 a6 20 0c 19 d4 83 68 00 38 5e 07 e0 fe d0 87 9c c0 61 96 55 ae fc 76 6a 4e 21 84 53 16 4c 82 08 e5 e1 fd bb 5e 9c 74 43 eb 28 2c 3d 0a 90 ff 5d 40 da d2 ef 26 c7 84 9a 04 c9 46 d6 ac 59 15 f8 97 2f df 73 65 4c 7c 92 2f 12 9b 5e 5f 8f f5 bb fd bd 7d 79 c9 30 a1 dd 48 9f 1d c1 79 f7 be f0 dc ad c7 0f ee bb 43 8f a0 ca 96 1b 6f bc e1 aa 2b 37 36 50 83 85 ff 5a ba 5a a0 61 20 cf 7e 1c e7 ba ec e9 ec Data Ascii: hlGJHoL\1OL~?, `#'2LFaulF0RN,H%<aI$o!\|Zm-40 h8^aUvjN!SL^tC(,=]@&FY/seL\|/^_}y0HyCo+76PZZa ~
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: ab 56 af fd d1 c2 45 c5 a2 74 e7 36 d1 dd 6d d0 47 44 c5 3e d3 de 54 f7 55 5a 2b 88 06 3f 98 91 b9 e0 56 06 0d a9 89 13 24 de a1 d5 e2 f9 84 8a 2b ae bc 1a 3e 64 10 9a 97 9f f9 96 65 62 0c 25 70 d2 6a 2e 5d 7f cd 41 23 20 3e 0c 82 85 84 84 3f 04 80 ed 7a 30 61 89 bd bb b6 fe 5a ad 76 db 07 93 9b 84 23 52 f8 d2 a4 0e 84 19 ca 92 26 cd 8d 75 5f c1 4d 4b f7 8a d1 38 a8 aa 47 61 48 f0 15 40 80 90 71 ff 9c f2 ca bb c6 58 73 81 aa bd 51 08 11 82 93 20 f2 0b 24 2e c7 18 d6 0c d2 39 1d be 1f cc 4f 6c 14 d3 28 b5 6e 45 c2 86 2c c3 12 15 11 f1 22 7c d8 bf 87 b0 f7 e9 d5 eb 0a 94 6e 8a 75 2b 57 5f b2 e7 ad 5d 6f 42 2b 23 42 c4 c1 6b 81 4b 89 48 68 f6 86 be be dc c1 7e 43 91 09 6e 86 55 59 59 ff 77 d9 9a 75 16 f2 22 90 ac 1a 4a 9a 17 e3 03 c0 c7 a0 ef ae 13 ee 6a 37 Data Ascii: VEt6mGD>TUZ+?V$+>deb%pj.]A# >?z0aZv#R&u_MK8GaH@qXsQ $.9Ol(nE,"\|nu+W_]oB+#BkKHh~CnUYYwu"Jj7
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 17 f7 85 df e1 f3 24 39 32 5d 28 f4 79 bf 1f 36 96 3e 73 f6 9f cf 96 e7 63 0e 3d ca 30 4b 36 2b 15 92 11 cc 28 6d ed 78 ce e7 38 29 01 15 22 01 32 0b f6 45 46 84 a1 4a 2e 78 4d 41 c9 38 8e 28 38 69 e9 24 c0 1a 82 8a cf 92 98 4e 6e 4a e0 d5 70 10 8c 63 b3 92 7d bb c8 5a 78 bf fb 9c ff 6c 7e 04 fe 19 46 40 89 7a d6 c5 34 6a bd 3c bd 06 60 0e a2 7a a2 1b 73 4b 59 b4 0b 41 50 97 69 2c 2e d6 4f b2 43 9c 6a b0 af d3 e9 66 c7 31 76 30 36 a9 51 18 2e 48 e1 a6 6c 43 68 df f4 0e e0 14 b4 17 88 1c 99 09 45 78 0a 17 23 73 ce c9 3f 3a 8c 40 8b 3b b4 19 3d e8 ef 20 09 64 95 50 16 a9 64 06 0e b5 04 0a 1f 6f 08 26 52 93 91 50 7a f5 8a 12 d1 05 fe c4 91 49 bb 08 89 88 12 8d b5 d5 22 2a 2e 12 68 04 7f 10 fc 56 c9 7a 45 4e 6d 53 16 94 c3 b5 e8 62 a0 60 e0 b9 de de 0a f0 9a Data Ascii: $92](y6>sc=0K6+(mx8)"2EFJ.xMA8(8i$NnJpc}Zxl~F@z4j<`zsKYAPi,.OCjf1v06Q.HlChEx#s?:@;= dPdo&RPzI"*.hVzENmSb`
2024-05-02 14:33:08 UTC	4135	IN	Data Raw: fe fc c4 63 88 98 8f 8a c5 8b 16 89 ab ae be 5a 0a 1b 98 de 8e 72 2e f2 aa 3c eb 9c 26 55 32 fc 87 7e ca 9f 39 1f 51 40 a8 61 36 27 24 24 8a b1 a1 01 23 b1 9e 6c 87 0f 1f 0e e2 fd 90 07 95 02 d5 07 7c a9 49 49 09 f4 0f ce f9 f6 85 2f 69 6a b3 bc 08 37 0a 26 06 68 b5 1d f9 d5 55 67 ee 6e a8 ad be 05 fe 69 6b 58 44 d8 4b f0 05 6f ea 1f 1c 5e d9 d3 d1 f2 17 f2 93 22 ed 4a 69 c4 66 17 82 8d 87 6e 0a 9a ae 74 6b 50 b8 b1 61 5c 95 bc 3e 85 3e 9c 23 18 1b 04 08 21 b8 b8 39 bd 57 43 36 17 4d 7c 94 28 71 33 51 6b a6 d6 8f 41 4c f2 f0 0d 82 a5 82 d0 15 de 63 60 0f 6e 09 24 0f 4c 12 98 2f 9f 21 cf c7 32 d5 78 4f 41 61 1b e4 13 24 0e 1f 3d 62 ad aa a9 11 dc 90 39 1e 10 d9 3c ec 73 d9 38 0f d9 47 7d 97 4e 34 d4 54 8b c5 52 4b 85 8f 7e de 99 fa b9 7c 5e ff cc 9d 52 5e Data Ascii: cZr.<&U2~9Q@a6'$$#l\|II/ij7&hUgnikXDKo^"JifntkPa\>>#!9WC6M\|(q3QkALc`n$L/!2xOAa$=b9<s8G}N4TRK~\|^R^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49898	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:08 UTC	824	OUT	GET /wp-content/uploads/2017/09/BCBSNC-Foundation-Logo-800px-768x599.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:08 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:08 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:22:19 GMT Accept-Ranges: bytes Content-Length: 52315 Connection: close Content-Type: image/png
2024-05-02 14:33:08 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 00 00 00 02 57 08 06 00 00 00 24 7d 33 75 00 00 cc 22 49 44 41 54 78 da ec d9 31 4a 03 41 14 80 e1 57 59 89 58 a4 10 4f 90 03 78 02 2b 6b 4f 60 65 65 21 e2 55 3c 80 07 98 b9 40 0a b1 b4 b2 f0 1c ce 94 22 12 f4 25 ac 58 c4 46 70 93 40 be 0f 7e de db 59 98 7a 61 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRW$}3u"IDATx1JAWYXOx+kO`ee!U<@"%XFp@~Yza
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 6d 10 78 66 dc 64 ef 8f 50 9f f7 b6 64 79 37 e0 06 e4 48 54 94 69 7d 82 ef 43 8b 52 6a 55 4c 77 aa e9 ef 94 08 6e 21 76 0f 3f 52 47 e1 33 6a 22 de e4 e7 46 8b a3 a2 5f 98 6f 66 fc 9d 3b 35 ca e4 aa db 4e 4d c0 bc f2 bf 1c 7c 7b 04 04 02 81 40 20 10 74 21 04 5d 3c 00 e6 b9 43 4c b1 bb 82 e2 ca 7f 24 a8 a2 8c fc e9 bc 8b f2 af a0 f1 e9 04 f2 6b f0 00 f8 6a 00 9c 88 e7 ae 75 95 1f 9e a1 97 9a 78 97 de 1f 62 97 be 77 55 a8 7c e3 8f 71 bf 0b a1 30 75 3b 72 d4 23 c2 a5 a2 13 3b 2f c0 e9 3b c6 63 e6 b6 9c 3a 75 62 d4 45 7e d7 e6 5f 20 f7 6e c1 dd f0 7e 43 1a e2 cc 40 a9 40 0e c4 f1 35 11 76 3d e3 1f d4 72 b4 1e 04 02 81 40 20 10 74 31 8c e0 9d 80 4b af 48 e2 ae 84 b9 f1 1f 3a 3d ae be 85 78 f7 6f 21 de fb 5a 54 bf 19 3a 25 aa 2e c0 2e e4 99 50 44 4e 1a 1f 41 d7 Data Ascii: mxfdPdy7HTi}CRjULwn!v?RG3j"F_of;5NM\|{@ t!]<CL$kjuxbwU\|q0u;r#;/;c:ubE~_ n~C@@5v=r@ t1KH:=xo!ZT:%..PDNA
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 29 a7 f5 49 47 1d 84 30 24 aa fa 73 ce 0c 3c bf b2 3d f3 cb af fd 22 3c 1b e8 66 cd 3c 4a 3f 58 98 b4 24 92 bb 78 00 5a 70 fe 28 bc 0e 12 fb 2f 10 08 04 02 c1 5e 0d 8f 06 80 49 9a 8f bb ce ee fc bb 43 79 b9 0c 3b ed 31 33 e6 9f 60 d9 fd ff 38 89 dd 58 f3 9e 47 16 a6 10 8a c3 2b 04 4d d9 92 a3 b8 7a 3f e5 3f 08 bb ab 1b e8 59 16 63 83 3a fa 5e 34 3d b6 eb 5e da f9 fd dd 8a 94 6a 0b d3 a1 18 5e 08 af 45 f7 4e 36 fe 3c 09 58 1b 14 f8 84 00 59 fa 40 be 20 e4 c8 79 90 9f f2 2f 26 61 ce 01 8b 22 3e 7c 43 86 92 65 7d 19 1f d0 21 e0 85 aa 3e e4 09 b0 01 7b 7e 24 47 61 39 ea 28 dc d7 be f9 35 3b 5c ff 05 fc 12 39 ab 01 b2 31 6e a8 53 26 b0 c4 67 27 63 a0 1e 74 66 40 20 10 08 04 02 c1 5e 8e 42 08 90 a5 1e ba e5 dc 56 69 00 69 9c 78 49 42 f6 b9 64 fe 38 ef 06 23 e0 Data Ascii: )IG0$s<="<f<J?X$xZp(/^ICy;13`8XG+Mz??Yc:^4=^j^EN6<XY@ y/&a">\|Ce}!>{~$Ga9(5;\91nS&g'ctf@ ^BViixIBd8#
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: d2 00 84 40 b7 42 bc 43 10 03 e1 3c 19 80 2e f0 14 8c 29 30 ce 9c 98 b3 b8 21 35 0a 06 6d c4 7c c9 98 8f 5d fa 55 99 db 3c a6 79 2e c0 b7 99 d7 27 20 65 b8 c9 74 0b 2c d2 70 0d 30 cf af d8 35 00 0a ec 82 d7 ac 33 95 6e 98 6a 0f 0c 40 88 86 a9 8f 63 bc 00 36 4d 6a d4 57 b0 c2 e3 79 c4 fa 54 64 63 31 1f b3 59 a3 5f b2 66 fe c6 76 ec 2a c4 3e ef 61 bc 77 60 9d b5 76 cf 50 8b f6 0d 39 f1 91 73 c3 43 d6 fa 22 1f 1b 80 0a ce 2d 4f d8 4f 9f c0 8a 81 25 8e f3 73 f6 61 8d 18 00 91 13 03 b0 6e e3 ac 54 2f d8 b1 78 0c 79 9c c5 03 f2 d4 00 94 31 89 33 0e f8 15 84 72 14 ff 71 87 31 9f 3a f8 42 85 e9 e4 a7 c0 1a 38 33 c4 db e7 c2 69 1a 4c 82 d7 2c d2 a9 ac 7b 2d 36 58 d8 5b 6d 2c 82 a6 14 8f 69 1e 94 82 7c e8 21 8f 6f 26 47 8e 64 1c 30 6d 58 6c de 06 0b 86 3e ce e6 98 Data Ascii: @BC<.)0!5m\|]U<y.' et,p053nj@c6MjWyTdc1Y_fv*>aw`vP9sC"-OO%sanT/xy13rq1:B83iL,{-6X[m,i\|!o&Gd0mXl>
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 24 12 89 44 79 a7 12 f2 1b 04 f5 27 6a d0 80 7f 1b 43 af cf 2b c0 81 fa f7 14 80 e0 3b f9 3a 82 b6 74 d4 80 91 85 45 1b c7 f1 5b 5c ef 93 fb 8c f4 35 ed 70 1d 3f 91 7e 92 bc 63 f3 f7 cf e4 eb 86 c8 4f 00 78 6f c9 e3 1f e4 63 4d f9 ef 92 5b 8d f3 a5 22 f2 03 f2 0a f9 c0 fa 9c c2 27 c8 a3 77 e4 6e f4 d2 3e 25 7f c0 bf 1f b9 40 c1 3e 79 9e fc 0f f9 a2 04 74 39 af 66 cb 73 b1 82 32 fc 4f e3 ef e4 92 34 7e 6b 8e 9c b0 ab 73 f8 db 45 43 24 12 89 44 79 a5 12 f2 92 43 e3 7e 0c 30 28 25 87 30 4a f0 58 81 00 2b 08 ec 9d a1 37 c8 44 fa 45 36 5e c0 6f 78 f1 2a b9 c3 48 4f 51 87 eb b8 a6 40 d1 2b 9b bf 47 a5 17 d5 77 59 eb c4 55 f2 2f 4d d9 af 93 6f 18 e7 47 ed 78 46 8f 6d 7a f9 53 00 9e 7e 72 0d f2 28 02 78 0a 91 c3 4a 1e 5e 22 f7 22 7f fe 73 78 86 4f 00 04 13 e4 26 Data Ascii: $Dy'jC+;:tE[\5p?~cOxocM["'wn>%@>yt9fs2O4~ksEC$DyC~0(%0JX+7DE6^ox*HOQ@+GwYU/MoGxFmzS~r(xJ^""sxO&
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: dd 6a 45 1d 31 00 10 e1 01 30 de 80 01 30 a6 36 2b fc 1c c0 2b 75 df 01 00 80 48 69 f8 00 30 13 ea 77 06 00 22 3c 00 46 d4 66 3d 07 80 99 52 cf 4b fc fc cd be 7a a2 7a 1c 00 00 88 94 37 35 00 da d5 03 f5 9a 01 80 88 0e 80 ac ca d7 7b 00 98 31 75 4f ad ab 82 fd 79 93 5f 9c 06 00 40 34 35 7a 00 f8 a6 d4 36 03 00 0c 80 ba 0e 00 5f 42 f5 a8 98 03 00 00 91 55 8f 01 10 53 09 95 54 ad ae bc 41 b5 c1 00 00 03 a0 ca 00 00 00 00 68 f2 01 90 50 ef aa 39 35 e6 ca 6b 53 8f d5 b1 37 00 42 c7 45 5a f5 a8 ac ea 55 dd 2a c5 88 38 91 56 95 54 17 54 d6 2b 6d 1f 6b 84 16 95 52 1d 4d 32 00 5a ec 58 52 ce ae 2f af 8c 4a ab 14 03 a0 a2 a4 4a 79 d7 55 af ea b2 bf 8f bb e6 11 b7 73 9d b1 63 cc 5a 3d 7c 6b 14 00 e0 ac ab c7 00 e8 f0 7e 73 eb 92 ab 6c 51 ed a8 2b 15 6e de 63 f6 d8 Data Ascii: jE1006++uHi0w"<Ff=RKzz75{1uOy_@45z6_BUSTAhP95kS7BEZU*8VTT+mkRM2ZXR/JJyUscZ=\|k~slQ+nc
2024-05-02 14:33:08 UTC	4330	IN	Data Raw: b0 69 da b9 cd df dd ae 5d 39 f7 97 17 00 f8 c9 16 89 b8 38 e4 51 6c ef 91 f7 aa 1d 9b 49 ae cf 4d f2 e3 1b 12 c6 0a 14 42 e7 b6 00 40 bf 9f 91 b3 d0 d8 df 72 d7 5c e9 ae e2 73 1c c4 00 f6 35 3e da 69 cf 43 96 77 c4 45 5d 82 38 9c a7 af 46 cf fb 93 2c 26 6e fe c2 02 60 c8 b3 30 1c 75 0a 80 76 ec 38 8c dd ec 38 27 78 ef 7a 58 01 80 de 26 39 a6 89 c1 43 16 e4 dc 76 92 91 02 a0 96 76 17 88 15 37 bf ed a3 c7 b0 05 68 67 3a 05 00 ed ff e9 c4 59 2b 7e 3f 86 dd 5d 3f 38 c2 0f b2 18 f3 1b 62 b2 d5 e7 a7 4e 01 d0 8f 9f e6 21 6f d2 70 7e 9e 59 5c bd b2 05 40 60 7c 01 39 62 c9 5e c0 40 f7 9d 19 d8 03 b0 c2 e2 67 d2 6c 30 3d 66 61 94 93 c1 02 60 8c 9c 7d c7 fa 8a b9 80 34 8f 0d c2 28 60 de 5c 45 ce 33 16 b1 39 4e fc 1e 31 46 4b 31 f1 c5 02 ce 5f 00 10 8b 87 cc 33 25 Data Ascii: i]98QlIMB@r\s5>iCwE]8F,&n`0uv88'xzX&9Cvv7hg:Y+~?]?8bN!op~Y\@`\|9b^@gl0=fa`}4(`\E39N1FK1_3%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49899	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:08 UTC	808	OUT	GET /wp-content/uploads/2018/02/PlayCoreNewTag_FINAL.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:08 UTC	208	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:08 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:23:49 GMT Accept-Ranges: bytes Content-Length: 91184 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:08 UTC	7984	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 32 0a ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 02 1e 08 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82C!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$"
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: a2 be 76 9f cc 1f 6a f4 20 43 00 41 04 1a f3 2a 52 9d 37 cb 35 66 6c a4 9e a8 5a 28 a2 b3 18 51 45 14 00 51 45 14 01 53 50 d5 b4 fd 26 35 97 51 be b5 b3 8d ce d5 6b 89 56 30 c7 d0 12 7a d5 1f f8 4d 3c 31 ff 00 43 16 8f ff 00 81 91 ff 00 f1 55 e5 bf b5 37 fc 8a 7a 47 fd 7f ff 00 ed 36 af 99 eb d8 c1 e5 91 c4 52 f6 8e 56 39 ea 56 71 95 ac 7d d5 ff 00 09 a7 86 3f e8 62 d1 ff 00 f0 32 3f fe 2a 8f f8 4d 3c 31 ff 00 43 16 8f ff 00 81 91 ff 00 f1 55 f0 b5 25 75 7f 61 c7 f9 df dc 47 d6 5f 63 ee af f8 4d 3c 31 ff 00 43 16 8f ff 00 81 91 ff 00 f1 54 7f c2 69 e1 8f fa 18 b4 7f fc 0c 8f ff 00 8a af 85 a8 a3 fb 0e 3f ce fe e0 fa cb ec 7d d3 ff 00 09 a7 86 3f e8 62 d1 ff 00 f0 32 3f fe 2a 8f f8 4d 3c 31 ff 00 43 16 8f ff 00 81 91 ff 00 f1 55 f0 b5 25 1f d8 71 fe 77 f7 Data Ascii: vj CAR75flZ(QEQESP&5QkV0zM<1CU7zG6RV9Vq}?b2?M<1CU%uaG_cM<1CTi?}?b2?*M<1CU%qw
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 82 1a d7 fd fd 8f ff 00 88 a3 fb 5f 0f e7 f7 07 d5 e6 7c bd 49 5f 51 7f c3 2f f8 3f fe 82 1a d7 fd fd 8f ff 00 88 a3 fe 19 7f c1 ff 00 f4 10 d6 bf ef ec 7f fc 45 1f da f8 7e ef ee 0f ab cc f9 76 be f9 d2 bf e4 17 67 ff 00 5c 13 ff 00 41 15 e5 1f f0 cb fe 0f ff 00 a0 86 b5 ff 00 7f 63 ff 00 e2 2b d7 6d e1 5b 7b 78 a0 52 4a c6 81 06 7a e0 0c 57 95 99 e3 29 e2 39 7d 9f 4b fe 86 f4 69 b8 5e e4 95 1d c5 bc 37 70 49 04 f1 24 b1 48 a5 1d 1c 02 ac 0f 50 47 71 52 51 5e 49 b9 e5 57 bf 03 5b 4c bf 96 ff 00 c1 1e 26 d4 3c 34 f2 9d cf 6c 99 92 06 3f 4c 8e 3e b9 a8 65 f8 3b e2 9f 10 e2 1f 16 7c 42 bf bd b1 fe 3b 5b 58 bc a1 20 f7 39 c7 e6 a6 bd 6e 8a ea 58 ca bd f5 ef 65 7f bf 72 3d 9c 4c af 0d 78 5f 49 f0 96 96 9a 66 8f 66 96 b6 c9 ce 17 96 76 ee cc 4f 24 fb 9a d5 a2 Data Ascii: _\|I_Q/?E~vg\Ac+m[{xRJzW)9}Ki^7pI$HPGqRQ^IW[L&<4l?L>e;\|B;[X 9nXer=Lx_IffvO$
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 75 2b 4d 23 7a b3 1c fe 55 4e be db 0d 4b d9 52 8d 3e c7 9d 39 73 36 c5 a4 a2 8a dc 91 6b eb 3f d9 d3 4e 36 3f 0c ed a6 65 c1 bc b9 9a 7f c3 76 cf fd 92 be 4d 44 69 1d 51 14 b3 31 00 00 39 26 be e8 f0 6e 86 3c 37 e1 5d 2b 48 c0 0d 69 6b 1c 6f 8e ef 8f 98 fe 79 af 17 3a a9 6a 51 87 77 f9 1d 18 75 ef 5c d9 a2 8a 2b e6 8e c3 c5 3f 6a 6f f9 14 f4 8f fa ff 00 ff 00 da 6d 5f 34 57 d2 ff 00 b5 37 fc 8a 5a 47 fd 7f ff 00 ed 36 af 99 eb ea f2 8f f7 75 ea ce 1a ff 00 18 b4 52 51 5e a1 88 f8 bf d6 27 d4 57 df b1 7f ab 5f f7 45 7c 05 17 fa c4 fa 8a fb f6 2f f5 6b fe e8 af 9f cf 3e c7 cf f4 3a b0 dd 47 d1 45 15 e0 1d 41 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 Data Ascii: u+M#zUNKR>9s6k?N6?evMDiQ19&n<7]+Hikoy:jQwu\+?jom_4W7ZG6uRQ^'W_E\|/k>:GEAEPEPEPEPEPEPEPEPEPEPEPEPE
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 7f ff 00 ed 36 af 99 eb e9 8f da 9b fe 45 2d 23 fe bf ff 00 f6 9b 57 cd 15 f5 99 47 fb b2 f5 67 0d 7f 8c 4a 29 68 af 4c c4 74 5f eb 13 ea 2b ef d8 bf d5 af fb a2 be 02 8b fd 62 7d 45 7d fb 17 fa b5 ff 00 74 57 cf e7 9f 63 e7 fa 1d 58 6e a3 eb e1 ef 88 bf f2 3f 78 8b fe c2 37 1f fa 30 d7 dc 35 f1 ff 00 8e fe 1e f8 ba fb c6 ba ed d5 af 86 f5 59 a0 9a fe 77 8e 44 b6 62 ae a5 c9 04 1c 72 2b 1c 9a 71 8d 49 73 3b 68 56 21 36 95 8f 3c a2 ba 6f f8 56 5e 35 ff 00 a1 5b 59 ff 00 c0 57 ff 00 0a 3f e1 59 78 d7 fe 85 6d 67 ff 00 01 5f fc 2b e8 7d bd 3f e6 5f 79 cb ca fb 1c cd 15 d3 7f c2 b2 f1 af fd 0a da cf fe 02 bf f8 51 ff 00 0a cb c6 bf f4 2b 6b 3f f8 0a ff 00 e1 47 b7 a7 fc cb ef 0e 57 d8 e6 68 ae 9b fe 15 97 8d 7f e8 56 d6 7f f0 15 ff 00 c2 8f f8 56 5e 35 ff 00 Data Ascii: 6E-#WGgJ)hLt_+b}E}tWcXn?x705YwDbr+qIs;hV!6<oV^5[YW?Yxmg_+}?_yQ+k?GWhVV^5
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 7c 62 b8 f0 15 d2 e9 9a 9b 49 3e 85 33 72 a3 96 b5 63 fc 68 3d 3d 57 f1 1c f5 fa b3 4e d4 6d 35 6b 28 6f ac 6e 23 b9 b6 9d 43 c7 2c 67 2a c0 f7 15 f1 f8 cc 1c f0 f3 b3 db a3 3b e9 d4 53 45 8a 28 a2 b9 0d 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 27 14 00 67 15 f3 87 c7 ff 00 8b 4b a9 c9 2f 84 74 39 f3 6b 1b 62 fa e2 33 c4 ac 3f e5 98 3f dd 07 af a9 e3 b1 ce a7 c6 af 8e 49 02 4f e1 af 0a dd 06 98 e6 3b bb e8 cf 08 3b a4 67 d7 d5 bb 76 e7 91 f3 c5 7b f9 66 5c ee ab 55 5e 8b f5 39 6b 55 fb 31 0a 29 28 af a0 39 45 a2 8a 9a c6 c6 e7 53 bd 82 ca ce 26 9a e6 e1 d6 28 a3 51 cb 31 38 02 93 76 d5 81 e9 5f b3 f7 81 cf 8a 3c 60 ba 9d cc 7b ac 34 82 b3 b6 47 0f 37 f0 2f e6 37 7f c0 7d eb eb 20 31 5c bf c3 7f 05 5b f8 0b c2 b6 9a 44 7b 5a 7c Data Ascii: \|bI>3rch==WNm5k(on#C,g*;SE((((((('gK/t9kb3??IO;;gv{f\U^9kU1)(9ES&(Q18v_<`{4G7/7} 1\[D{Z\|
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 10 59 5b af f0 c6 b8 2c 7d 58 f5 63 ee 6b 4b 15 f3 d8 bc d2 a5 6f 76 1a 2f c4 ea a7 41 47 56 00 62 8a 28 af 28 dc 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 2b e7 6f da b3 fe 42 1e 1c ff 00 ae 57 1f cd 2b e8 9a f0 4f da 6b 41 d5 b5 9b ed 01 b4 cd 2e f6 f8 45 14 e1 cd bc 0d 26 cc 94 c6 70 0e 3a 1a ef cb 1a 58 98 b7 e7 f9 19 56 f8 19 f3 c5 15 b7 ff 00 08 37 8a bf e8 5a d6 7f f0 0a 4f f0 a3 fe 10 6f 15 7f d0 b5 ac ff 00 e0 14 9f e1 5f 59 ed 61 fc cb ef 38 79 59 89 4f 83 fd 7c 7f ef 0f e7 5b 1f f0 83 78 ab fe 85 ad 67 ff 00 00 a4 ff 00 0a 7c 3e 07 f1 48 99 09 f0 de b2 00 61 ff 00 2e 52 7a fd 29 3a b0 b7 c4 83 95 9f 70 41 fe a5 3f dd 15 25 47 08 c4 48 08 fe 11 52 57 c2 9e 98 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 47 e1 45 00 14 51 45 00 14 51 45 00 14 51 Data Ascii: Y[,}XckKov/AGVb(((((+oBW+OkA.E&p:XV7ZOo_Ya8yYO\|[xg\|>Ha.Rz):pA?%GHRWQEQEQEQEQGEQEQEQ
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 Data Ascii: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 39 ed e3 2a 7f 20 0f e4 6b da 7e 17 7c 77 b0 f1 bd cc 7a 46 ad 02 69 ba b3 8c 47 b5 b3 15 c1 f4 5c f2 ad fe c9 cf b1 ed 5e 15 f1 33 e1 5e a9 f0 d6 ee 01 71 3a 5e d8 5c e4 41 74 8b b7 24 75 56 5e 76 9f c4 e7 f3 ae 36 da e6 6b 3b 88 ae 6d e4 68 a6 85 c3 c6 ea 70 55 81 c8 23 f1 ad 2a 60 b0 d8 9a 7c d4 d2 5d 9a 12 a9 38 3b 33 ef ee d5 e3 1f 1a 3e 30 78 87 e1 ef 89 6d 34 cd 26 0d 3a 48 26 b3 5b 86 37 31 33 36 e2 ee bc 61 87 18 51 5e a5 e1 5d 5c eb fe 1a d2 f5 62 00 6b cb 58 a7 60 3a 02 ca 09 1f 9e 6b e7 5f da 8f fe 47 9d 37 fe c1 89 ff 00 a3 65 af 0f 2e a3 19 e2 39 2a 2b ee 74 d5 93 50 ba 34 7c 1d fb 43 78 b7 5f f1 5e 91 a4 dd 5a e8 eb 6f 7b 77 14 12 18 e0 70 c1 59 80 38 25 cf 3c fa 57 a4 fc 6a f8 81 ab 7c 3c d0 ac 2f f4 88 ac e4 96 e2 eb c9 71 72 8c ca 17 63 Data Ascii: 9* k~\|wzFiG\^3^q:^\At$uV^v6k;mhpU#`\|]8;3>0xm4&:H&[7136aQ^]\bkX`:k_G7e.9+tP4\|Cx_^Zo{wpY8%<Wj\|</qrc
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 41 40 1f 77 76 af 85 3f 6b 3d 49 b5 7f 8d 37 76 71 9d e6 ca d6 da d5 40 f5 2b e6 63 f3 92 be eb ed 5f 01 eb df f1 5b 7e d3 53 43 fe b2 3b af 12 a5 b1 3d 7f 76 93 04 27 fe f9 5a 00 fb b3 c3 ba 6a e8 da 06 9b a6 a0 c2 d9 da c5 6e 07 b2 20 5f e9 5f 20 7e d9 de 29 9b 51 f1 f6 9f e1 e5 90 fd 9b 4a b4 12 14 cf 1e 6c a7 24 ff 00 df 21 3f 5a fb 3e be 0d fd ac 2d a5 b6 f8 db aa 4b 22 fc b3 db da cb 1e 7b a8 89 57 f9 a9 a0 0f ae be 0b 78 2a df c0 7f 0d b4 4d 2a 28 82 5c 3d ba dc dd 36 39 79 e4 01 9f 3e b8 ce d1 ec a2 bb 8a a3 a1 5f 41 a9 e8 9a 7d f5 b3 06 82 e6 da 39 a3 61 d0 ab 28 23 f4 35 7a 80 0a 28 a2 80 3e 70 fd b6 f4 f8 24 f0 5f 87 ef d9 47 da 20 d4 5a 14 6e fb 5e 36 2c 3f 38 d7 f2 ad 7f d8 db 4a fb 17 c2 b9 ef 4a e1 af f5 29 64 07 d5 55 51 07 ea ad 5e 7f fb Data Ascii: A@wv?k=I7vq@+c_[~SC;=v'Zjn __ ~)QJl$!?Z>-K"{WxM(\=69y>_A}9a(#5z(>p$_G Zn^6,?8JJ)dUQ^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49900	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:08 UTC	596	OUT	GET /wp-content/uploads/2023/12/FEELC_photos_for_newsletter_cover_image-400x250.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:08 UTC	208	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:08 GMT Server: Apache Last-Modified: Fri, 15 Dec 2023 16:17:44 GMT Accept-Ranges: bytes Content-Length: 26931 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:08 UTC	7984	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 00 fa 01 90 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90C%# , #&')*)-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 71 d4 76 8c 6d 0a eb 1c a7 74 5a 5f cd 0a 1b ef 28 35 fc 97 46 ae 67 b8 c4 22 74 8c 8f d3 d1 57 40 f6 01 57 70 3a 20 18 e2 b9 a2 0e ca c6 0f 43 c6 37 0a 77 1c 23 65 3c 60 aa 9a 72 8a 0e d9 1d ee 88 59 b2 6b a6 6e a0 8b 76 57 cb 8e 55 25 9e ad bb 22 e8 2d 64 58 1e a8 1a 41 7b ac 02 ad ec 8d 4c 41 54 86 d3 1d 11 71 2e fa 27 6a 02 6a 8d d0 31 7a 95 01 d5 11 f2 a3 b9 e8 55 1a 8d a1 d9 b2 65 04 bc 60 2d 22 dc b5 d8 ec 81 fc 3e dc a5 e8 83 56 25 ce 85 5e a3 79 1c e9 03 75 e9 eb 1d d0 6e a5 16 be a5 b0 16 98 d2 a1 ba 6d c2 9c 8d c8 0a 5a 65 6c 4f 52 a4 3a 67 32 11 7c 5c 6c 50 bf a5 72 9e 6e d8 5e 21 10 1d 94 01 2e 07 64 1a d3 3b 94 e9 db 6f 24 aa b2 d2 88 9f 65 ee a0 98 3e 4e 53 85 26 c9 d3 84 1a d5 2d 2a 13 4f 35 8c d9 78 ad 98 ca d8 09 5a 87 0e ca 71 16 27 aa Data Ascii: qvmtZ_(5Fg"tW@Wp: C7w#e<`rYknvWU%"-dXA{LATq.'jj1zUe`-">V%^yunmZelOR:g2\|\lPrn^!.d;o$e>NS&-*O5xZq'
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: ce e1 75 2c 1f 88 98 27 f8 39 2e 43 b3 f0 a3 d5 ec 06 b0 4f 90 7d c6 4f dc b7 ac db 6b 0f ef c7 8d a3 64 30 48 fb 9f e5 4f 5b 42 64 60 78 8f 46 07 c8 4e 4d b2 c7 bc 89 20 18 49 9e 5a c1 b7 d1 60 23 02 7f 03 9f 03 bd 8b ee d0 ec 1d 9f 72 73 b2 0d d7 18 bf eb 3b 06 f4 f8 08 db fc 61 91 61 f2 4f af b9 6f 25 fc 0d ed ad e3 e3 8a 46 b0 f0 41 90 b2 55 db 8e 78 4d e7 0b 3b 17 8b 3a 3e ed 09 4f 97 27 61 fb b4 c6 e9 df 83 ef cb 03 b6 1e c2 3c b9 86 13 c9 f5 90 37 ee 5d 0f bb 74 b8 12 b0 fd 91 f0 1d 92 75 60 e4 83 1e c3 a1 2f a9 67 f0 c6 72 18 f0 91 21 b6 ef e9 02 f5 f3 c9 0e 4f 0b 5e 5c 4e 6c f6 3c d8 5b 32 1b d8 60 f2 55 22 04 b4 19 3f 27 a4 36 4c 86 b3 36 65 64 85 ff 00 4d 02 75 f6 e3 b3 9e db 0e f2 75 c8 64 8d cf b2 7e 5f 52 54 33 bb a4 3d b0 fd 47 d1 3b 03 3a Data Ascii: u,'9.CO}Okd0HO[Bd`xFNM IZ`#rs;aaOo%FAUxM;:>O'a<7]tu`/gr!O^\Nl<[2`U"?'6L6edMuud~_RT3=G;:
2024-05-02 14:33:08 UTC	2947	IN	Data Raw: 1c 88 41 0d 3a ab 0d 07 5e 70 a3 bc 1d 12 a0 95 e8 e6 fe f2 ad 44 1a 38 e8 3f 35 7e 31 48 84 bb 0c 9a 3c 57 14 ce ca 90 50 14 9b d7 c6 53 8c 83 c1 00 f9 37 6e 75 8c b7 77 35 b9 a7 e8 c3 4b 10 77 30 70 3a d0 f8 30 f3 68 9e c2 0d e4 4d 1b c3 04 0e 97 3a 02 34 6a 5f 8c 14 ad 36 89 2a 15 1a 68 d6 2b 05 4a 56 d0 de 1a 05 1c 6e ea 06 00 2c 11 02 9e a6 5d 2d 30 74 ec 75 b1 66 31 2a 8c 91 20 54 37 2c df 59 13 af a4 c7 71 81 7a 78 a6 5a 72 6d e4 fa b7 f5 94 29 a0 04 d1 9f 1f ef 17 8a 84 0d 08 1f c9 87 ca b3 5b 1f 5e 32 00 ef 9b 9a 35 18 18 7d fe bf 39 4c 0e a0 74 73 80 0e 5c 21 fd 60 c9 9f 63 8f 4d 4f bc 6d 79 6f 65 5f 78 cb 41 60 5c 66 ca 84 2a ae 2c e7 92 8a a0 c4 2e 17 bc 07 60 b8 90 53 fb df ce 48 d0 23 d2 6c a0 f8 c1 79 11 d6 13 48 7d 19 43 cb ac 57 0e f0 5b Data Ascii: A:^pD8?5~1H<WPS7nuw5Kw0p:0hM:4j_6h+JVn,]-0tuf1 T7,YqzxZrm)[^25}9Lts\!`cMOmyoe_xA`\f*,.`SH#lyH}CW[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49901	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:08 UTC	794	OUT	GET /wp-content/uploads/2020/11/NCDENR.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:08 UTC	209	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:08 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:26:35 GMT Accept-Ranges: bytes Content-Length: 118683 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:08 UTC	7983	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 90 00 90 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 03 55 05 56 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CCUV"
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: c3 e2 ee 99 e2 8b 7f 36 7d 29 ff 00 d1 75 6b 18 cf fc 7c da b1 1b 80 07 f8 94 80 eb d3 e6 50 33 82 6b c8 a8 ac aa d2 85 68 3a 73 57 4f 42 e3 27 06 a4 8f e8 cf 41 d7 74 ff 00 14 68 9a 7e b1 a4 dd c7 7f a6 6a 16 e9 75 6b 75 09 ca 4b 13 a8 65 61 ec 41 06 b4 2b f3 83 fe 09 6b fb 4c 99 16 7f 83 fe 20 bb cb 28 92 f3 c3 d2 4a dc 91 cb 4d 6a 3e 9c c8 a3 fe ba 73 f7 45 7e 8f d7 e3 78 ec 1c b0 35 e5 46 5f 27 dd 74 67 d4 d1 aa ab 41 49 05 14 51 5c 06 e1 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 Data Ascii: 6})uk\|P3kh:sWOB'Ath~jukuKeaA+kL (JMj>sE~x5F_'tgAIQ\EPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPE
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 5f 2e ff 00 c1 40 3f 69 4f f8 50 bf 08 24 d3 b4 8b b3 0f 8c 7c 4a b2 59 e9 e6 36 c3 db 45 8c 4d 71 c7 42 a1 82 a9 eb b9 d4 8c ed 35 d1 87 a1 3c 4d 58 d1 a7 bb 33 9c d5 38 b9 4b a1 f0 c7 fc 14 6b f6 95 ff 00 85 cb f1 58 f8 57 46 ba f3 3c 25 e1 69 1e dd 1a 36 ca 5d 5e 74 9a 6f 42 17 1e 5a f5 e8 c4 1c 3d 7c 8b 45 15 fb 36 1b 0f 0c 2d 18 d1 a7 b2 fe ae 7c ad 4a 8e a4 9c df 50 a2 8a 2b a8 c8 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 92 de e2 5b 49 e2 9e 09 5e 19 e2 60 f1 c9 1b 15 64 60 72 08 23 a1 07 9c d7 ee 27 ec 61 fb 45 45 fb 46 7c 19 b1 d5 2e e6 43 e2 7d 2f 6d 86 b3 10 c0 26 75 51 89 80 1d 16 45 f9 b8 18 07 7a 8f bb 5f 86 f5 ef 9f b1 67 ed 15 2f ec e7 f1 9a c7 53 bc 9a Data Ascii: QEQEQEQ_.@?iOP$\|JY6EMqB5<MX38KkXWF<%i6]^toBZ=\|E6-\|JP+((((((([I^`d`r#'aEEF\|.C}/m&uQEz_g/S
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: dc b5 b6 8d 68 c5 6d a2 1d 89 1f c6 ff 00 ed b6 4f 27 18 1c 57 3b f1 63 e2 9e b9 f1 8f c6 d7 de 25 d7 a7 f3 2e 67 3b 61 81 0f ee ed a1 04 ec 89 07 65 5c 9f 72 49 27 24 93 5c 7d 4d cf c5 73 9c fa b6 63 37 4e 9b e5 a4 ba 77 f3 7f e4 14 51 45 23 e5 02 ba 3f 01 7c 43 f1 17 c3 2f 11 41 ad f8 6b 54 9f 4b d4 22 38 df 11 f9 64 5c f2 8e a7 87 53 e8 c0 8a e7 28 a0 b8 4e 54 e4 a7 07 66 ba a3 f5 7b f6 63 fd a9 34 9f 8f da 3b 5a 5c 24 7a 5f 8b ec e2 0f 79 a7 a9 3b 24 5c e3 cd 84 9e 4a f4 c8 3c a9 38 39 18 27 dd 6b f1 13 c2 5e 2c d5 7c 0b e2 4d 3f 5e d1 2e de c7 54 b0 94 4d 04 e9 d8 8e c4 77 52 32 08 3c 10 48 3c 1a fd 76 f8 0b f1 8a c3 e3 8f c3 8d 3f c4 b6 6a b6 f7 47 f7 17 d6 6a d9 fb 35 c2 81 bd 3e 87 21 97 fd 96 1d ea 91 fb 17 0f 67 6f 30 87 b0 ae ff 00 79 1f c5 77 Data Ascii: hmO'W;c%.g;ae\rI'$\}Msc7NwQE#?\|C/AkTK"8d\S(NTf{c4;Z\$z_y;$\J<89'k^,\|M?^.TMwR2<H<v?jGj5>!go0yw
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 52 be 35 ff 00 82 92 fe cc e9 f1 63 e1 99 f1 ce 89 6a 1b c5 7e 16 81 a4 94 46 bf 3d dd 80 cb 49 1f b9 8f 26 45 f6 f3 00 e5 85 7d 46 45 98 fd 56 b7 b0 a8 fd c9 7e 0f bf cf 66 79 d8 ca 1e d2 3c f1 dd 1f 90 d4 51 45 7e a0 7c e8 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 01 fa a3 ff 00 04 bd fd a5 3f e1 31 f0 74 df 0b 75 db ad da ce 83 11 9b 49 92 46 e6 7b 1c 8c c4 33 d4 c4 c7 8f f6 19 40 18 43 5f 79 57 f3 cb f0 bf e2 36 af f0 93 e2 06 87 e2 fd 0a 6f 27 54 d2 6e 56 78 f2 7e 59 17 a3 c6 df ec ba 96 52 3d 18 d7 ef 57 c2 5f 89 da 3f c6 4f 87 5a 17 8c 74 29 37 e9 da ad b8 98 21 20 b4 2f d2 48 9f 1f c4 8c 19 4f b8 af cc 73 fc 07 d5 ab 7b 78 2f 76 7f 83 ff 00 83 bf de 7d 0e 0a b7 3c 39 1e eb f2 3b 0a 28 a2 be 54 f4 82 8a 28 a0 02 8a 28 a0 02 8a 28 a0 Data Ascii: R5cj~F=I&E}FEV~fy<QE~\|QEQEQEQEQE?1tuIF{3@C_yW6o'TnVx~YR=W_?OZt)7! /HOs{x/v}<9;(T(((
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: a0 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 ad 4f 0c f8 5f 57 f1 a6 bd 67 a2 e8 3a 6d d6 af ab 5e 3f 97 6f 67 67 11 92 59 0f 5e 14 7a 00 49 3d 00 04 9e 05 65 d7 ea cf fc 12 8b e1 7e 8f a5 7c 23 d5 fc 75 e5 47 3e bf ab 5f c9 62 6e 08 cb 41 6d 10 4c 46 3d 37 39 2c 7d 7e 4f 4a f3 33 1c 6a c0 61 dd 6b 5d ec bd 4e 9a 14 bd b4 f9 4f 9d bc 11 ff 00 04 a8 f8 b3 e2 2b 28 ae b5 bd 47 40 f0 a8 90 02 6d 6e 6e 1e e2 e1 3e a2 25 29 f9 3d 7a 0e 9d ff 00 04 7c d5 65 d9 f6 ff 00 8a 16 76 d9 1f 37 d9 f4 57 9b 07 d0 66 64 cf e9 5f a6 54 57 e7 b3 cf f1 f2 77 52 4b d1 2f d6 e7 b6 b0 54 56 ea e7 e7 76 9d ff 00 04 7d d2 63 f2 fe dd f1 3a f6 e7 19 df f6 7d 19 21 dd e9 8c cc f8 ed eb 5d 3e 97 ff 00 04 8e f8 6f 06 df ed 2f 18 78 a6 f3 ae 7e cc d6 d0 03 cf 1d 62 7f f3 e9 5f Data Ascii: ((((O_Wg:m^?oggY^zI=e~\|#uG>_bnAmLF=79,}~OJ3jak]NO+(G@mnn>%)=z\|ev7Wfd_TWwRK/TVv}c:}!]>o/x~b_
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 00 c1 44 ff 00 69 4f f8 5d 9f 16 9b c3 9a 3d d7 9b e1 1f 0b 49 25 ac 0d 1b 65 2e ae ba 4d 37 1c 10 08 d8 a7 9e 14 91 f7 cd 7c 99 45 15 fb 2e 1b 0f 0c 2d 18 d1 a7 b2 3e 52 a4 dd 49 39 cb a8 51 45 15 d4 66 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 7e b3 ff 00 c1 2f ff 00 68 3f f8 58 1f 0c 27 f8 79 ab 5d 19 75 df 0a a8 36 7e 63 65 a6 d3 d8 e1 31 eb e5 31 d9 ec ad 10 af b7 2b f0 1f f6 72 f8 cb 79 f0 13 e3 1f 87 7c 65 6b e6 3d bd 9c fe 5d f5 bc 67 fe 3e 2d 1f e5 99 31 d0 9d a4 95 cf 46 55 3d ab f7 af 47 d5 Data Ascii: DiO]=I%e.M7\|E.->RI9QEfQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQE~/h?X'y]u6~ce11+ry\|ek=]g>-1FU=G
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: a4 e5 4e 2d ef 60 a2 8a 2b 8c d4 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 bc 37 e2 7f ed ad f0 6f e1 34 93 5b eb 1e 34 b3 bd d4 a2 24 1d 3f 47 06 f6 60 c3 aa b7 97 95 43 ec ec b5 b5 2a 35 2b cb 96 94 5c 9f 92 b9 32 9c 60 af 27 63 dc a8 af cf 0f 1d 7f c1 5e 74 7b 77 92 2f 07 78 02 f6 fd 73 85 ba d6 af 12 df 1e fe 54 61 f3 ff 00 7d 8a f0 9f 14 ff 00 c1 52 be 35 eb c5 c6 9a fa 07 86 d3 90 a6 c3 4e f3 58 7a 64 ce d2 02 7f 01 f4 af 72 96 41 8e ab ab 8a 8f ab ff 00 2b 9c 72 c6 d1 8f 5b 9f b0 b4 57 e1 6e b5 fb 6f 7c 74 d7 d9 9a e7 e2 56 b1 11 63 93 f6 2f 2e d4 75 cf 1e 52 2e 3f 0f a5 73 32 fe d3 7f 18 26 95 a4 6f 8a 9e 34 0c c7 24 27 88 2e d4 7e 00 48 00 fc 2b d0 8f 0c e2 2d ef 54 5f 89 83 Data Ascii: N-`+((((((((((7o4[4$?G`C*5+\2`'c^t{w/xsTa}R5NXzdrA+r[Wno\|tVc/.uR.?s2&o4$'.~H+-T_
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 1e 15 ff 00 82 5b 7c 14 d0 36 36 a5 1e bf e2 56 18 2c 35 0d 47 ca 46 3d f0 20 58 c8 07 eb 9f 7a f5 6f 0f fe c6 1f 03 fc 32 a8 2c fe 19 e8 33 04 e9 fd a1 01 bd fc fc e2 f9 fc 6b da 68 af 26 a6 3f 17 57 e3 ab 2f bd 9d 31 a3 4e 3b 45 1c ae 91 f0 a7 c1 3e 1f 08 34 bf 07 68 1a 68 4e 54 59 e9 70 45 8e 31 c6 d5 18 e3 8a e9 2d 6d 20 b2 84 45 6f 0c 70 44 33 88 e2 50 aa 3f 01 53 51 5c 52 94 a5 f1 3b 9a a4 96 c1 59 5a 97 85 b4 5d 60 bf db f4 8b 0b ed e4 16 fb 4d b2 49 b8 8e 84 e4 1a d5 a2 92 6d 6a 82 d7 3c b7 5f fd 96 fe 10 78 99 0a ea 1f 0d 3c 2e ec dd 65 87 4b 86 09 0f 4f e3 8d 55 bb 7a d7 8f f8 cb fe 09 8d f0 3f c4 eb 21 d3 f4 cd 5b c2 d3 36 4f 99 a5 6a 2e e3 3f ee cf e6 0c 7b 0c 7b 62 be b2 a2 bb 29 e3 71 54 7e 0a 8d 7c d9 94 a8 d3 96 f1 47 e6 1f c4 4f f8 24 5e Data Ascii: [\|66V,5GF= Xzo2,3kh&?W/1N;E>4hhNTYpE1-m EopD3P?SQ\R;YZ]`MImj<_x<.eKOUz?![6Oj.?{{b)qT~\|GO$^
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 80 fe 57 f7 b3 4f af 56 ee 7e 9a 6a ff 00 f0 58 1d 1e 15 ff 00 89 5f c3 3b eb b6 c0 ff 00 8f bd 5d 20 00 f7 fb b1 3f b5 79 b7 89 3f e0 ae 1f 10 ef 83 2e 87 e0 ff 00 0e 69 2a 7a 35 e1 9e e9 c0 f6 21 e3 19 e9 d4 1f a5 7c 29 45 6f 0c 93 01 0d 55 3b fa b6 ff 00 52 1e 32 b3 fb 47 d0 de 32 fd bf be 3b 78 cd 5e 39 7c 73 71 a4 db b0 23 ca d1 ad e2 b4 23 3e 92 22 89 3f f1 ea f0 ef 11 f8 b7 5c f1 85 e9 bd d7 b5 9d 43 5b bc e7 fd 23 52 ba 92 e2 4e 7a fc ce 49 ac aa 2b d4 a5 86 a3 43 f8 50 51 f4 49 1c d2 a9 39 fc 4e e1 45 14 57 49 98 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 01 d1 78 3f e2 37 8a be 1e dd fd a7 c2 fe 25 d5 bc 3d 39 6d cc fa 65 ec 96 e5 bf de d8 c3 3e 98 35 ee de 10 ff 00 82 8c fc 76 f0 9a Data Ascii: WOV~jX_;] ?y?.i*z5!\|)EoU;R2G2;x^9\|sq##>"?\C[#RNzI+CPQI9NEWIQEQEQEQEQEQEQEQEQEx?7%=9me>5v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49902	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:08 UTC	564	OUT	GET /wp-content/uploads/2018/06/Head-Start-Logo.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:08 UTC	209	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:08 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:24:34 GMT Accept-Ranges: bytes Content-Length: 112839 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:08 UTC	7983	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 32 0a ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 04 a4 08 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82C!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$"
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 3e 30 78 7b e1 d5 b1 4b a9 85 de a4 c3 f7 76 30 b6 5c fb b1 fe 11 f5 af 93 bc 7f f1 3f c4 5f 11 6f 8c ba ad ce cb 45 62 61 b3 8b 88 a2 1d b8 fe 23 ee 6a 6e 34 8f 55 f8 9d fb 4d cd 76 25 d2 fc 16 0c 30 9c ac 9a 8c 8b f3 b0 ff 00 a6 6a 7a 7d 4f e5 5e 05 75 75 3d ed c4 97 37 53 49 3c f2 b6 e7 92 46 2c cc 7d 49 35 10 e2 8a 9b 94 90 51 45 14 0c 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 b1 61 a7 5e ea b7 49 69 a7 d9 dc 5d dc 3f 0b 0c 11 97 63 f8 0a f5 cf 07 fe cc 3e 2a d7 36 4f ae 4b 1e 89 6c dc ed 7c 49 36 3f dd 1c 0f c4 d3 be 12 7c 70 d0 3e 1f 68 e9 a7 5d 78 5f f7 e3 3e 65 f5 ab 29 92 6c 92 72 db bd 06 07 5c 71 5e b1 65 fb 4f 7c 3f b9 03 cf 9b 51 b4 63 d7 cc b5 62 07 e2 b9 a7 64 27 73 5b c1 df 01 7c 15 e0 f3 1c a9 a7 9d 4a ed 7f Data Ascii: >0x{Kv0\?_oEba#jn4UMv%0jz}O^uu=7SI<F,}I5QE((((((a^Ii]?c>*6OKl\|I6?\|p>h]x_>e)lr\q^eO\|?Qcbd's[\|J
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 Data Ascii: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 40 09 8a f2 2f da 39 71 e1 ad 34 ff 00 d3 e7 fe c8 d5 eb d5 e4 7f b4 77 fc 8b 3a 6f fd 7e 7f ec 8d 5d 18 5f e2 c4 ca bf c0 cf 9f 28 a2 8a fa 43 cb 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a cf d7 65 f2 b4 c9 79 e5 f0 9f 9d 68 56 1f 8a 26 c4 50 44 3b b1 63 5c f8 a9 f2 52 6c d6 84 6f 34 8e 78 51 45 15 f2 e7 b0 14 51 45 00 14 51 45 00 14 8c 32 a4 7b 52 d1 40 1f a0 1e 08 d4 c6 af e0 fd 16 fc 1d c6 7b 28 5c 9f 7d 83 3f ae 6b 72 bc f3 e0 25 f1 bf f8 55 a1 b1 62 4c 51 b4 3f f7 cb 11 5e 87 56 8c c2 8a 28 a6 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 07 c5 9f b4 45 d1 b9 f8 af ab 02 72 22 58 a3 1e df 20 3f d6 bc da bb 5f 8d 37 1f 69 f8 a7 e2 37 ce 76 dd 6c fc 94 0f e9 5c 55 66 5a 0a 28 a2 81 85 14 51 40 05 2a 9c 3a 9f 42 29 28 3c 73 40 1f a2 3a 4b 6e d2 ec db d6 Data Ascii: @/9q4w:o~]_(C(((eyhV&PD;c\Rlo4xQEQEQE2{R@{(\}?kr%UbLQ?^V(EPEPEPEPEr"X ?_7i7vl\UfZ(Q@*:B)(<s@:Kn
2024-05-02 14:33:08 UTC	8000	IN	Data Raw: 00 1d ff 00 e4 05 a7 ff 00 d7 cf fe c8 d5 86 23 f8 6c f5 32 5f f7 ea 7e a7 89 d1 45 15 e1 9f ac 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 1e b1 f0 13 fe 3e b5 6f f7 23 fe 66 bd 91 7a 57 8d fc 04 ff 00 8f ad 5b fd c8 ff 00 99 af 64 5e 95 ec e1 3f 84 8f cb b8 8b fd fe 7f 2f c8 5a 28 a2 ba 8f 10 28 a2 8a 00 69 eb 5e 37 f1 93 c6 85 e6 6f 0e d8 c8 42 ae 0d d3 29 ea 7a 84 fe a6 bd 17 c6 fe 25 8f c2 fa 05 cd f3 60 cd b7 64 2b fd e7 3c 0f f1 af 99 ee 6e 25 ba b8 96 e2 77 2f 2c ac 5d 98 f7 27 ad 70 e3 2b 72 ae 44 7d 57 0c e5 9e da a3 c4 54 5e ec 76 f5 23 a2 8a 2b ca 3f 42 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 4f ad 2f 5e 3b d7 b2 7c 3a f8 Data Ascii: #l2_~EQ@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@>o#fzW[d^?/Z((i^7oB)z%`d+<n%w/,]'p+rD}WT^v#+?B(((O/^;\|:
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: a9 45 14 57 a4 7c 30 86 be 7a f8 c8 0f fc 27 37 07 fe 98 c5 fc ab e8 53 5f 3e fc 69 4d be 36 73 fd eb 78 db f5 22 b9 31 bf c3 3e 93 85 9d b1 bf 27 fa 1c 25 2d 25 2d 79 0c fd 22 d6 0a 28 a2 90 05 14 51 40 05 14 51 40 05 25 2d 25 00 7d 1d f0 a0 6d f0 36 9d ee 18 ff 00 e3 c6 bb 0a e3 fe 13 b0 6f 02 e9 de c1 87 fe 3c 6b b0 af 7e 97 c0 8f c7 b1 ff 00 ef 35 3d 5f e6 14 51 45 68 72 05 14 51 40 1e 77 f1 c3 fe 45 18 ff 00 eb e5 3f ad 78 2d 7b d7 c6 ff 00 f9 14 63 ff 00 af 94 fe b5 e0 b5 e4 63 3f 88 7e 8f c2 df ee 7f 36 2d 14 51 5c 67 d2 85 14 51 40 05 14 51 40 05 14 51 40 08 7a 57 d3 be 00 ff 00 91 3b 47 ff 00 af 64 fe 55 f3 11 af a7 7c 01 ff 00 22 76 8f ff 00 5e c9 fc ab bf 01 f1 33 e4 38 bb f8 34 fd 7f 43 a1 a2 8a 2b d4 3e 08 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 Data Ascii: EW\|0z'7S_>iM6sx"1>'%-%-y"(Q@Q@%-%}m6o<k~5=_QEhrQ@wE?x-{cc?~6-Q\gQ@Q@Q@zW;GdU\|"v^384C+>(((
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 6e e1 58 5e 2c f1 c6 83 e0 ab 06 bc d7 35 18 6d 53 9d a8 4e 5e 4f 65 5e a6 be 66 f8 95 fb 47 eb 5e 29 f3 74 ff 00 0e 79 da 3e 9a d9 53 20 6c 5c 4a 3d c8 fb a3 d8 7e 75 2d 8d 23 db 3e 24 7c 76 f0 d7 80 c4 96 91 c9 fd a7 aa 81 f2 da c0 dc 21 ff 00 6d ba 2f d3 af b5 7c bd e3 bf 8a 9e 26 f8 83 70 c7 55 bd 68 ec c1 fd dd 94 3f 2c 48 3d c7 f1 1f 73 5c 8b 33 3b 16 62 4b 13 92 c4 e4 9f c6 92 95 ca b0 51 45 14 86 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 41 a0 0e bb 45 b8 37 3a 74 4c e7 2c b9 53 f8 55 fa ca f0 ea e3 4d 53 ea e4 d6 ad 7d 56 19 b7 49 36 78 d5 ac a6 c2 8a 28 ad 8c c2 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 91 ba 1a 5a 54 5d ee Data Ascii: ((((((nX^,5mSN^Oe^fG^)ty>S l\J=~u-#>$\|v!m/\|&pUh?,H=s\3;bKQEQEQEQEQEQEQAE7:tL,SUMS}VI6x((((((ZT]
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 0d 49 5a a9 27 b3 33 69 a0 a2 8a 2a 80 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 91 88 51 93 d0 73 49 bb 02 57 39 2d 76 4f 33 53 97 fd 9c 2f e9 54 2a 4b 99 7c fb 99 65 fe fb 93 f8 66 a3 af 94 ac f9 a7 26 7b 54 d5 a2 90 51 45 15 99 61 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 1d 6b a3 f0 6f c3 ef 11 78 f2 f0 5b e8 76 0f 2a 03 89 2e 1f 2b 14 7e ec df d3 ad 00 73 95 e9 5f 0e 7e 03 f8 9b c7 8d 1d dc d1 36 97 a4 93 cd cc eb 86 90 7f b0 bd 4f d4 f1 5e e5 f0 e3 f6 72 f0 ff 00 84 bc ab ed 68 47 ac ea 6b c8 32 2f ee 62 3f ec a9 eb f5 35 eb a9 18 40 15 40 50 38 00 55 24 4d ce 4f c0 5f 0c 3c 39 f0 f6 d0 45 a4 d8 af da 0a e2 5b b9 7e 69 65 3e e7 b0 f6 18 15 d7 63 da 96 8a a2 42 8a 28 a0 02 8a 28 a0 Data Ascii: IZ'3i(((((QsIW9-vO3S/TK\|ef&{TQEaEPEPEPEPEPEPEPEPEkox[v*.+~s_~6O^rhGk2/b?5@@P8U$MO_<9E[~ie>cB((
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 78 c7 ed 24 df f1 2c d1 17 fe 9b c8 7f f1 d1 5e 0f 5e e9 fb 4a 1f f4 3d 08 7f d3 59 8f e8 b5 e1 75 ef e5 ff 00 c1 47 9b 88 f8 d8 51 45 15 da 60 14 51 45 00 14 51 45 00 14 51 45 02 3b 8f 82 bf f2 51 f4 bf a4 bf fa 03 57 d4 f5 f2 c7 c1 5f f9 28 fa 67 d2 5f fd 01 ab ea 7a f0 b3 2f e2 fc 8f 47 0d f0 b0 a2 8a 2b 80 e9 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a f9 13 f6 a6 ba 13 7c 4b 8e 10 7f d4 58 44 a7 ea 4b 1f ea 2b eb ba f8 c3 f6 90 9f ce f8 b9 aa af fc f2 8a dd 3f f2 18 3f d6 a6 43 89 e6 54 51 45 49 61 45 14 50 01 45 14 50 01 Data Ascii: QEQEQEQEQEQEQEQEQEQEQEQEx$,^^J=YuGQE`QEQEQE;QW_(g_z/G+(((((((((((\|KXDK+??CTQEIaEPEP
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 27 fd 7a 27 f2 ae 94 74 ae 6b e1 bf fc 88 ba 27 fd 7a 27 f2 ae 94 57 ca d4 f8 df a9 eb 43 64 2d 14 51 52 58 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 57 c3 3f 1b 3f e4 ac 78 9b fe be ff 00 f6 45 af b9 ab e1 9f 8d 9c fc 57 f1 37 fd 7d e3 ff 00 1c 5a 99 15 13 89 a2 8a 2a 4a 0a 28 a2 80 0a 28 a2 80 0a 43 c0 34 b4 62 93 d8 69 5d a4 7a a6 91 10 87 4b b4 8c 0f bb 12 ff 00 2a b7 51 db 80 b6 f1 28 e8 11 7f 95 49 5e 1c fe 26 7e c3 87 8f 2d 28 af 24 14 51 45 49 b0 51 45 14 00 51 45 14 00 51 45 14 03 3d d7 e0 85 82 db f8 5a 4b bc 7c d7 33 b1 cf b2 fc a3 f9 57 a3 28 c5 72 5f 0a ed c5 bf 81 b4 c5 ee e8 ce 7f 16 27 fa d7 5c 0d 7b d4 15 a9 a4 7e 43 99 d4 e7 c5 d4 97 9b 16 8a 28 ad 4e 10 a2 8a 28 00 a2 8a 28 00 a6 b1 Data Ascii: 'z'tk'z'WCd-QRXQEQEQEQEQEQEQEQEW??xEW7}ZJ((C4bi]zKQ(I^&~-($QEIQEQEQE=ZK\|3W(r_'\{~C(N((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49903	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:08 UTC	587	OUT	GET /wp-content/uploads/2023/10/DCDEE_newsletter_article_image-400x250.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:08 UTC	208	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:08 GMT Server: Apache Last-Modified: Mon, 30 Oct 2023 19:18:07 GMT Accept-Ranges: bytes Content-Length: 31533 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:08 UTC	7984	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 00 fa 01 90 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90C!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$"
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 5b 1f 31 a3 b3 e5 ca 40 dc b3 dc 93 43 e1 5f 27 2e 6f 88 5f 25 f5 7e ff 00 4d de c6 a1 99 6c 7d 0f 38 b6 90 5c 69 47 aa 46 71 ed 5e c6 84 ec 54 89 92 5b 53 48 1c 20 28 60 ad 5e d4 e0 a8 2b e3 b9 91 7d 9a bd 46 ac ad b9 db 9f e0 0f 91 34 ad 3d f1 53 56 b4 da 23 c1 9a df 87 1d 21 3f 2c e0 00 e0 7a 7a d3 b5 ab 56 23 59 ac ae 64 64 46 98 de 32 e0 e3 c4 1e 95 84 b0 e2 d2 3e 65 0a 52 56 80 0e 40 ad 13 43 ea c8 f2 de 42 66 00 a7 5b 4e d6 c9 ed 93 42 9c c4 6a 94 83 e9 dd c8 3d 1f fc c6 cb 95 c2 14 09 0f 29 c6 dd 59 dd c0 57 18 23 d2 96 af 5a 8a 6e a1 90 d3 49 19 d8 a0 50 84 8c e5 5e a6 99 af f1 d9 79 83 32 42 39 48 01 47 b6 3d 68 3c 97 2d ad 45 6d b8 ce 36 43 84 15 29 23 06 91 6a 39 38 ce 04 f9 db 91 d5 f6 13 81 2b c7 9d 29 0c 94 cf 68 78 60 ed 50 ce 7f f6 a6 2d Data Ascii: [1@C_'.o_%~Ml}8\iGFq^T[SH (`^+}F4=SV#!?,zzV#YddF2>eRV@CBf[NBj=)YW#ZnIP^y2B9HG=h<-Em6C)#j98+)hx`P-
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 50 42 8a 09 1f bb 4f f3 22 3f 6c 7a 90 da 59 07 6f 3b 46 31 fb d9 c7 6f b5 25 4e 6d 50 35 4a 83 2a 05 b2 3c b9 e7 19 ea 3e b5 a0 a6 02 5e 42 50 d2 92 55 b4 29 2a c7 2a c7 35 93 39 e4 d4 32 23 b5 20 3a a4 0c 15 0c f2 a4 e4 9e bf 7a eb 0e 22 a6 82 dc e0 e5 9e 7b 92 58 dc d2 10 40 6c af 09 c0 19 e9 ea 7d 68 6d 88 2d 88 6d 03 d9 01 45 38 e8 3d 2b 84 b9 f3 b6 62 d2 46 14 e2 92 97 08 ee 9c e4 d4 86 e1 2e 36 c4 c7 6a 33 84 a7 03 73 79 23 e9 fe f5 c0 78 84 0f c4 92 5c 96 16 fa 42 95 c2 d3 b0 15 71 83 db 8f e5 43 d6 b4 f8 48 61 08 5e d4 03 ca cf e6 20 ff 00 9a 8e 6c 67 1d 71 dd cb 4a 76 20 2b 93 8e 49 39 fb f1 50 33 70 75 c9 0a 52 90 a7 52 94 ed 00 0e 47 fe 64 d7 09 cc 70 3f 33 ab a3 f2 a3 db 1b 69 32 08 79 c2 54 ce 14 41 e3 a9 c0 ff 00 35 0b 9f 11 a6 31 19 51 64 Data Ascii: PBO"?lzYo;F1o%NmP5J<>^BPU)*592# :z"{X@l}hm-mE8=+bF.6j3sy#x\BqCHa^ lgqJv +I9P3puRRGdp?3i2yTA51Qd
2024-05-02 14:33:09 UTC	7549	IN	Data Raw: 69 0e 21 f6 8a 15 b8 72 9c 1c e4 7b f1 53 ad 64 1d 86 4c 53 6b e2 7d 0d 6d be db 6d d6 d7 87 cb 38 14 10 47 94 52 16 af 6e 3d ea ce 42 92 97 1d 8e a1 21 b4 91 9c 94 f3 8f b8 ac ed 7a b1 c0 c0 8e cb 8f 06 77 65 47 71 c9 ab 2a bc cc 0c 89 29 92 52 d9 00 27 70 eb 57 e9 5b d1 24 3f 46 31 ab db d1 94 f5 4d ba 3c 1b b2 1e 8a 07 cb c9 40 7d 29 1d 06 7a 8a 74 f8 6b 70 f9 f6 e5 5b 5d da 96 40 2b 08 cf 63 d4 0a ce 24 ca 5c 92 9f 11 7b 8a 0e d1 ec 3d 29 9b 43 5a ff 00 69 4b 92 d8 90 b6 16 19 25 0b 4a b0 41 cf 14 75 1c 5d 95 e8 c1 61 c6 63 6d eb 48 42 f1 1c 71 12 de 0d 63 96 f2 38 15 5e 44 c6 63 78 61 c6 d6 5a c0 e5 59 19 15 17 8f 77 42 bf 65 dc 4a 4b dd 10 e8 57 e7 4f a9 a2 72 9d 87 16 0f cb 4c 29 94 e9 4e 03 60 65 47 8f 4f ef 43 66 95 8b 6f a9 ca fe 3c 41 cb 30 c1 Data Ascii: i!r{SdLSk}mm8GRn=B!zweGq*)R'pW[$?F1M<@})ztkp[]@+c$\{=)CZiK%JAu]acmHBqc8^DcxaZYwBeJKWOrL)N`eGOCfo<A0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49904	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:08 UTC	554	OUT	GET /wp-content/uploads/2020/11/niehs.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:08 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:08 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:26:37 GMT Accept-Ranges: bytes Content-Length: 25935 Connection: close Content-Type: image/png
2024-05-02 14:33:08 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 68 00 00 01 84 08 06 00 00 00 1b 63 ba 2c 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 01 ed bd 0d dc 54 d5 75 ef af d6 0f e5 5a 4a ad a5 5c fe 84 d0 27 94 50 6a 88 21 94 10 63 0c 31 c4 10 35 c4 20 46 e2 7b 08 be bf bf c7 58 6b bc 86 7a 8d f1 5d f1 25 6a 8c 1a 83 c6 17 6a 88 31 c6 50 82 84 10 63 08 a1 d4 52 4a 29 79 2e a5 5e 4b b9 94 70 b9 5c cb a5 f8 ff fe 86 73 86 3d fb d9 33 73 ce 99 99 33 67 9e 59 eb f3 59 73 f6 5e 7b ad bd d7 fe ed bd d7 d9 73 e6 9c 33 fb be fd f6 db fb 18 19 02 86 80 21 60 08 14 0f 81 fd 8a e7 92 79 64 08 18 02 86 80 21 20 04 2c 40 db 3c 30 04 0c 01 43 a0 a0 08 58 80 2e e8 c0 98 5b 86 80 21 60 08 58 80 b6 39 60 08 18 02 86 40 41 11 Data Ascii: PNGIHDRhc,pHYs IDATxTuZJ\'Pj!c15 F{Xkz]%jj1PcRJ)y.^Kp\s=3s3gYYs^{s3!`yd! ,@<0CX.[!`X9`@A
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 43 33 d8 35 62 b2 8c e0 3c bf 91 0a 3a c1 d6 02 74 27 8c 92 f9 68 08 b4 1e 01 bd d8 7e 5e da 66 d8 3d 0f c7 e6 f2 b4 76 4d d0 ef e8 7f 4a 49 da 7f 0b d0 49 91 32 3d 43 a0 7f 23 90 f5 a1 14 5d da 38 20 67 68 fa e5 43 29 21 0c 2d 40 87 50 31 99 21 d0 5d 08 2c e0 d2 c6 92 b4 5d 66 f7 7c 08 36 b3 d3 da 35 a8 df 6f 1f 4a 09 e1 62 01 3a 84 8a c9 0c 81 ee 41 60 37 5d bd 2a 63 77 ed 9f 52 32 02 97 d4 cc 02 74 52 a4 4c cf 10 e8 9f 08 3c c0 ee 79 6d da ae b1 7b 9e 8a cd 91 69 ed 1a d4 df 8c 7d bf f8 a7 94 a4 38 58 80 4e 8a 94 e9 19 02 fd 0f 81 ed 74 29 cb 43 29 8a 1b ed d8 3d f7 eb 87 52 42 d3 cb 02 74 08 15 93 19 02 dd 81 c0 4d ec 9e 37 65 e8 ea 2c 6c c6 65 b0 6b c4 44 bb fc 07 1a a9 a0 13 6d 2d 40 77 e2 a8 99 cf 86 40 e3 08 6c a4 8a db d3 56 c3 a5 0d dd b1 d1 8e Data Ascii: C35b<:t'h~^f=vMJII2=C#]8 ghC)!-@P1!],]f\|65oJb:A`7]*cwR2tRL<ym{i}8XNt)C)=RBtM7e,lekDm-@w@lV
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 24 e4 47 c0 ba 0e f8 ef f0 6a 74 5e e6 58 93 b0 1b 80 c2 99 f0 7f 8d 14 7f c3 f1 71 6c 37 73 db 92 f0 3c 3b 2a 93 7f 9b e0 47 d9 59 73 d8 43 d8 1f 43 4a 77 a7 fc 17 58 3a f7 61 5b ba f4 43 99 7c 3f 0f 3e 1c 1e 4a fe 32 ca ee 24 5d 26 64 3a a9 4a ef 78 58 bf c0 ab df 6a 57 d7 0f 75 39 e8 55 f8 39 ec 74 ac 4a d4 a3 7e c8 d7 3f 84 ff 03 9e 8f cd 1a 8e 0a 12 c3 38 a8 ec 68 78 34 2c dd 2d f0 32 58 58 56 c5 09 db 59 e8 bc 0b 56 9d 6f c0 c2 66 37 72 92 a5 b1 fb 3c 47 f5 6f 08 bc 11 56 5d b7 c5 6d 93 2e 11 fa ea 97 b0 98 0a cb 07 f5 51 f5 2d 87 bf 03 3f 8f 0d 87 fa 44 5d 47 a2 a5 3b 16 0e 83 7b 60 7d d3 79 13 56 5d cf c0 0b e4 23 c7 20 31 ae e3 28 50 1d f2 41 b6 f3 18 53 e1 b1 0f 65 9a 47 17 c0 93 61 dd 5a aa 7a 34 0e 0b e1 7b d0 53 3b 65 c2 17 e9 7f 0a 1e 04 9f Data Ascii: $Gjt^Xql7s<;*GYsCCJwX:a[C\|?>J2$]&d:JxXjWu9U9tJ~?8hx4,-2XXVYVof7r<GoV]m.Q-?D]G;{`}yV]# 1(PASeGaZz4{S;e
2024-05-02 14:33:09 UTC	1950	IN	Data Raw: f6 0c b4 8e 86 79 b2 8a 2c e5 43 60 05 d5 78 1d fd 86 fc ec 48 e9 8b 1c ff 19 fe 75 c4 ff 42 d9 e8 a8 ac cf 81 71 d7 89 f7 9e 3e 05 26 28 21 90 74 51 15 01 ae df f3 9c f8 86 97 1f 45 5e 3f 44 05 89 49 a2 af 86 5a 40 13 1d 85 5e d2 da 95 88 76 ee 39 94 3f 47 60 33 a4 9c f3 12 94 69 e2 8b d3 52 d2 00 7d 40 da 8a 73 d2 2f 5d b3 f7 da 52 80 d4 7f 0c fa 27 b9 0a 35 ca 8f 40 10 5a 8c 2f 38 8a cf 92 de ee e4 95 3c 17 db 49 9e ac 94 45 2e 9c ee 0d 94 3d 17 90 05 45 d1 89 f8 45 af f0 6c ea 9e e8 c9 ca 59 ca 0e 27 33 07 76 d7 50 e2 36 cb 15 a5 4b 84 b0 b9 12 5f dc 5d 75 b9 46 e4 fa a6 a2 df 49 5c da 4d 66 a1 23 f0 d7 d1 20 ca be 8d 6d 70 9e 22 57 7f bf 0d ab ff 31 a9 ce 97 a2 8c 02 ae 4b 1a 1f d5 a7 6f 1a d5 e8 1d d5 0a ba 5d ee ef 64 3a 09 0f 4d d6 95 f0 78 c7 69 Data Ascii: y,C`xHuBq>&(!tQE^?DIZ@^v9?G`3iR}@s/]R'5@Z/8<IE.=EElY'3vP6K_]uFI\Mf# mp"W1Ko]d:Mxi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49905	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:09 UTC	797	OUT	GET /wp-content/uploads/2018/06/DHEC-logo.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:09 UTC	208	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:09 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:24:30 GMT Accept-Ranges: bytes Content-Length: 23793 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:09 UTC	7984	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 01 90 01 90 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 08 01 02 05 06 07 03 04 ff c4 00 1b 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 05 06 02 03 04 01 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 95 20 00 00 00 Data Ascii: JFIFCC"
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: d5 86 d0 34 95 18 2d 48 27 fd 65 8f 80 82 e3 8b 2b 59 d6 4f 74 0c a8 e7 b0 6e fa b5 42 c2 05 56 a1 74 41 71 66 ab d6 7f 81 17 d7 ea 1b 37 81 4a cc 6f 69 d7 01 08 14 03 c2 cb 72 d4 99 7b 68 e0 88 bf 30 e9 5e c4 ea 1d d9 b4 63 75 ec c2 05 98 37 da c6 8c 44 7d d1 e9 8e 05 39 cc 67 b8 07 93 15 bb 79 5b 55 e1 92 ec 20 94 34 e5 4a a9 af 93 c0 37 7b a9 ed 8e 7d d8 3a 93 b6 0b 6c 04 10 9e 11 56 d8 e0 b5 d0 63 82 d7 41 8e 0b 5d 06 38 2d 74 18 e0 b5 d0 63 82 d7 41 8b 93 01 29 07 42 87 85 29 97 87 32 b5 83 0a 42 25 f2 a9 07 05 a5 43 18 ce 92 7b d4 9a c5 14 92 93 b0 ef ce 4f b5 b2 9e 13 87 54 51 c0 b7 8e d2 aa 7c 20 99 47 14 d3 9a 92 b3 54 c2 d8 79 05 0e 27 48 b1 a6 3c 4d 2b f2 61 4a 4d 01 02 ea 04 54 f7 01 2c fa bc 85 1f 87 85 e4 26 b2 8c 2b 52 94 9c d5 74 47 f4 66 Data Ascii: 4-H'e+YOtnBVtAqf7Joir{h0^cu7D}9gy[U 4J7{}:lVcA]8-tcA)B)2B%C{OTQ\| GTy'H<M+aJMT,&+RtGf
2024-05-02 14:33:09 UTC	7809	IN	Data Raw: 8f ff 00 05 3a 30 15 e9 2b f5 12 01 60 48 d3 48 5f 9b 03 52 82 5d 84 74 96 21 82 75 79 2e e6 07 08 2a 16 51 7c 23 c2 05 9f b8 85 92 ca 60 9e 22 12 c5 80 30 ce 6a 3d d2 b9 c9 20 45 b8 40 14 76 84 56 f4 c1 bb d4 90 19 b4 11 98 71 cc 61 80 0b ea 20 2f 9e 80 f7 07 51 d2 30 01 db 01 28 80 68 54 3d 00 80 44 d9 30 ff 00 85 ed 0e 0d 33 88 f9 09 e0 38 71 21 90 c5 48 40 2e e2 0e e6 62 f1 24 6c 15 de 0a a0 00 76 50 b2 34 84 f2 1c 2a 02 1f d0 c4 1c 89 31 18 82 de d2 93 54 04 6c 6f de 2f 05 85 15 64 fc c1 90 99 10 2d 71 ee 06 d0 0b d2 6d 22 4f d4 39 0d 1f 50 55 56 07 90 c7 69 55 42 20 d4 12 84 36 44 47 2c 89 62 3d 71 d3 c3 69 7e 5f 71 7b 44 76 27 b4 02 cc a9 d8 e3 c8 16 65 7c c5 c4 14 20 88 07 08 00 ea 74 c9 d3 d2 04 05 bc bb 32 9f f3 a6 f4 59 d2 62 cd 7d c8 50 ec 36 Data Ascii: :0+`HH_R]t!uy.Q\|#`"0j= E@vVqa /Q0(hT=D038q!H@.b$lvP41Tlo/d-qm"O9PUViUB 6DG,b=qi~_q{Dv'e\| t2Yb}P6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49906	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:09 UTC	562	OUT	GET /wp-content/uploads/2020/11/NAAEE_Logo_VT.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:09 UTC	208	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:09 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:26:38 GMT Accept-Ranges: bytes Content-Length: 72736 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:09 UTC	7984	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 03 21 03 64 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CC!d"
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 62 b7 6f 46 23 fc fe 55 cf 81 5d 30 f8 4e 4a 8b de 1a 14 01 4a 00 a7 05 fc 29 c1 79 aa b9 16 19 8a 50 bc 54 9b 69 42 d0 03 02 d3 82 d3 c2 93 4e f2 c0 eb d6 90 c8 c0 f6 a7 6c cf 5a 78 02 97 06 80 b0 d0 80 7e 15 f0 cf ed c5 f1 25 35 ff 00 1a d8 f8 4e ce 50 f6 ba 2a 79 97 25 7a 1b 99 00 3b 7d f6 a6 df c5 d8 1e 95 f6 bf 89 b5 75 f0 e7 86 75 6d 5e 42 bb 2c 2c e6 ba 6d dd 30 88 5b 9f 6e 2b f2 5f 52 d4 6e 75 8d 46 ea fa f2 66 b8 bb ba 95 a7 9a 67 fb ce ec 49 66 3e e4 93 5f 41 93 d0 53 a8 eb 3f b3 f9 b3 f3 fe 31 c7 3a 18 68 61 21 bd 4d fd 15 bf 37 f9 32 b5 3a 91 7a 52 d7 d8 9f 8e 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 27 7a 4d d5 d3 fc 30 f0 a4 1e 3a f8 87 e1 ef 0f dc dc 9b 3b 7d 4a f6 2b 69 26 18 dc aa cc 01 db 9e 37 1e 83 dc 8a 99 49 42 Data Ascii: boF#U]0NJJ)yPTiBNlZx~%5NP*y%z;}uum^B,,m0[n+_RnuFfgIf>_AS?1:ha!M72:zRQ@Q@Q@Q@Q@'zM0:;}J+i&7IB
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: d9 4f e9 5f 19 b3 16 62 49 24 93 92 4d 1d 6b e6 6a f1 0e 26 6f f7 71 51 5f 7b fe be 47 04 b1 d5 1f c2 ac 7d 49 77 fb 66 d9 a6 7e cd e1 69 e6 1d bc db d1 1f f2 46 aa df f0 da 5f f5 27 7f e5 53 ff 00 b4 d7 cc 94 57 13 ce f1 ef fe 5e 7e 0b fc 8c 7e b7 5b f9 bf 04 7d 59 65 fb 64 e9 52 30 fb 5f 86 ef 20 5e e6 0b 84 90 fe a1 6b ad d1 3f 6a 3f 01 6a cc ab 35 ed d6 94 c7 80 b7 b6 cd fc d3 70 1f 89 af 89 a8 ad 69 e7 d8 d8 3f 79 a9 7a af f2 b1 6b 1b 55 6f a9 fa 43 a1 78 a3 47 f1 3c 1e 76 93 a9 da ea 31 81 92 6d a6 57 db f5 00 f1 f8 d6 ad 7e 68 d8 df 5c e9 d7 09 71 69 71 2d ad c2 1c ac b0 b9 46 53 ea 08 e4 57 ae 78 23 f6 a1 f1 6f 86 1e 38 75 37 4f 10 d8 ae 01 5b b3 b6 60 3d a5 1c 93 ee c1 ab dc c3 71 15 29 be 5a f1 e5 f3 5a af f3 fc ce ba 78 e8 bd 26 ac 7d a5 45 70 Data Ascii: O_bI$Mkj&oqQ_{G}Iwf~iF_'SW^~~[}YedR0_ ^k?j?j5pi?yzkUoCxG<v1mW~h\qiq-FSWx#o8u7O[`=q)ZZx&}Ep
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 1f 75 1d cd 7c 76 7d 80 53 87 d6 a9 ad 56 fe 6b bf cb f2 f4 3c bc 6d 1b af 69 1d fa 9f 3b 70 71 45 07 ad 15 f0 67 8c 5a d3 35 2b 8d 23 51 b5 bf b3 94 c1 75 6d 2a cd 14 8b d5 59 4e 41 fd 2b f4 2f c0 5e 2d 83 c7 3e 10 d2 f5 c8 00 55 bb 84 33 c6 a7 21 24 1c 3a fe 0c 08 fc 2b f3 aa be a1 fd 8e fc 5c 65 b5 d6 bc 35 33 e4 c4 45 f5 ba 93 d8 e1 64 c7 b0 3e 59 ff 00 81 1a fa 7c 83 15 ec b1 1e c5 ed 3f cd 1e 86 0a a7 2d 4e 47 b3 3e 95 a2 93 34 57 e8 c7 ba 2d 14 51 40 1f 92 3f b4 3f fc 97 5f 1e ff 00 d8 66 e7 ff 00 46 1a f3 da f4 2f da 1f fe 4b af 8f 7f ec 33 73 ff 00 a3 0d 79 ed 7e a9 43 f8 30 f4 5f 91 fc bb 8e ff 00 7b ab fe 29 7e 6c 29 3b d2 d2 77 ad ce 13 f5 b3 f6 76 ff 00 92 15 e0 3f fb 03 5b 7f e8 02 bd 16 bc eb f6 76 ff 00 92 15 e0 3f fb 03 5b 7f e8 02 bd 16 Data Ascii: u\|v}SVk<mi;pqEgZ5+#Qum*YNA+/^->U3!$:+\e53Ed>Y\|?-NG>4W-Q@??_fF/K3sy~C0_{)~l);wv?[v?[
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 9c 13 c6 be 22 f1 bc 25 bf 7a f6 b6 ae ab ea 03 c8 09 ff 00 c7 87 e7 5f 75 d7 e7 d9 c4 9b c5 c9 3e 89 7e 47 ef dc 23 08 c7 29 83 8e ed c9 bf 5b db f2 48 28 a2 8a f1 4f b2 0a 28 a2 80 0a 28 a2 80 13 ad 7c 9f ff 00 05 14 1f f1 6c 3c 33 ff 00 61 81 ff 00 a2 24 af ac 6b e4 ef f8 28 b7 3f 0b fc 35 ff 00 61 81 ff 00 a2 24 af 4b 2d ff 00 7b a7 ea 7c df 11 ff 00 c8 a6 bf a7 ea 8f 80 28 a2 8a fd 24 fe 73 12 be bd ff 00 82 72 7f c8 ed e3 0f fb 07 c5 ff 00 a3 2b e4 2a fa f7 fe 09 c9 ff 00 23 b7 8c 3f ec 1f 17 fe 8c af 2f 33 ff 00 73 a9 fd 75 47 d3 70 d7 fc 8d e8 7a bf c9 9f 7a 51 45 15 f9 c1 fd 14 21 af 80 be 35 78 6c f8 57 e2 87 88 2c 82 6c 89 ee 5a e6 1c 0e 36 49 f3 80 3d 86 ec 7f c0 6b ef ea f9 a3 f6 c1 f0 63 49 0e 91 e2 98 13 3e 5f fa 0d d1 1d 81 25 a3 3f 4c ef Data Ascii: "%z_u>~G#)[H(O((\|l<3a$k(?5a$K-{\|($sr+*#?/3suGpzzQE!5xlW,lZ6I=kcI>_%?L
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 55 f3 5f af 5f 11 7e 0d 78 37 e2 b5 b0 8b c4 fa 15 be a1 2a ae d8 ee 80 31 dc 44 3f d9 91 70 c0 67 9c 67 1e a2 be 69 f1 af fc 13 a6 c6 77 92 6f 09 f8 aa 6b 40 4e 56 d3 56 80 4a 3e 9e 6a 60 81 f5 53 f5 af ae a1 9d 50 a8 ad 57 dd 7f 7a 3f 27 c7 70 6e 3b 0e db c3 35 52 3f 73 fb 9e 9f 73 3e 1a e3 d0 d0 78 f5 af a3 75 7f d8 2b e2 8e 9a ec 2d a3 d2 35 55 cf 0d 6b 7b b3 3f f7 f1 52 b9 f6 fd 8b fe 31 82 47 fc 22 1b b0 7a 8d 4e cf 9f fc 8d 5e 9c 71 b8 69 2b fb 45 f7 a3 e6 a7 92 e6 50 76 78 79 fc a2 df e4 78 96 ea 5a fa 13 4b fd 84 be 2b 6a 0e a2 7b 1d 37 4d 07 f8 ae af d1 80 fa f9 7b 8d 7a 47 84 ff 00 e0 9c b7 d2 3a 3f 89 bc 5f 6f 02 0c 6f 83 49 b7 69 09 f5 02 49 36 e3 eb b0 fd 2b 39 e6 38 4a 6a ee a2 f9 6b f9 1d 34 78 77 35 ae ed 1a 0d 7a e9 f9 d8 f8 c7 15 eb ff Data Ascii: U__~x7*1D?pggiwok@NVVJ>j`SPWz?'pn;5R?ss>xu+-5Uk{?R1G"zN^qi+EPvxyxZK+j{7M{zG:?_ooIiI6+98Jjk4xw5z
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: fe d6 d1 a7 7f f4 72 78 04 9c 2b a7 5c 67 18 e7 ad 3b 21 1f a4 94 d6 75 4f bc 40 fa 9a f9 77 f6 58 fd a7 6e fc 6d 7d 1f 84 3c 5b 3a c9 ab 94 ff 00 40 d4 4e 14 dc e0 73 1b f6 df 81 90 7f 8b 07 3c f5 ea 7f 6b cf 85 7e 24 f8 af e1 3d 02 cb c3 5a 7a 6a 37 36 9a 81 9e 64 79 e3 8b 6a 79 4e b9 cb 90 0f 24 74 a5 6d 46 7b c7 9d 1f f7 d7 f3 a6 cf 71 15 b4 4d 2c d2 24 51 28 cb 3b b0 0a 07 a9 35 f9 39 e3 1f 04 ea 9f 0f 3c 45 2e 8b ae d9 a5 a6 a5 6e 12 47 85 64 49 00 07 91 f3 29 23 f5 af 5b b1 f0 e7 c5 df da 75 2d db 12 ff 00 c2 3d 6e ab 0c 3e 73 9b 7b 08 c2 80 01 55 ff 00 96 8c 31 c9 c3 1f a0 e2 9d 85 73 ee 4b 2f 8a 5e 0d d4 b5 11 a7 da 78 b7 44 b9 bf 2d b4 5b 43 a8 c2 d2 13 e9 b4 36 73 5d 4d 7e 68 7c 5f fd 9c bc 53 f0 67 4e b3 d4 35 69 2c af b4 fb 89 3c af b4 e9 ee Data Ascii: rx+\g;!uO@wXnm}<[:@Ns<k~$=Zzj76dyjyN$tmF{qM,$Q(;59<E.nGdI)#[u-=n>s{U1sK/^xD-[C6s]M~h\|_SgN5i,<
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: d9 c4 b1 41 12 43 12 f0 12 35 0a a3 f0 14 ee 2b 1e 5b f0 93 e0 ed b7 c1 0f 86 97 f6 56 72 9b 9d 6a 78 5e e2 ee f5 17 e6 92 60 87 68 51 fd d5 e8 07 f8 d7 c1 fe 2d f1 4f c4 bf 88 16 76 f6 de 24 7f 10 6b 36 f6 ee 64 8a 3b 8d 3d 80 46 23 04 8d b1 8e d5 fa 8f 45 2b 81 f9 8f e0 0f 18 7c 4d f0 4b 59 e9 7a 1c de 20 d2 b4 c9 2f 11 e4 b7 87 4f 6d 87 73 80 c4 ee 8c 9e 47 bd 7d c5 fb 40 fc 24 97 e3 1f c3 53 a6 db 48 b1 6b 16 c5 6e ec de 5e 15 a4 0b 82 8c 7b 06 07 af a8 15 ea d4 94 5c 67 e7 27 c3 cf 8c be 39 fd 98 ef 6f f4 6b cd 23 6d a4 92 97 97 4d d5 15 a3 55 93 18 dd 1c 83 d7 03 38 c8 38 ae de 6f 8e 9f 17 7f 68 c7 fe c0 f0 ae 92 ba 2d 8d c8 db 71 73 65 bf 6a a1 18 25 ae 18 0d ab d7 ee 8c f2 05 7d b1 7f a3 d8 6a a1 45 ed 95 bd e6 df bb f6 88 95 f1 f4 c8 a9 ac ec ad Data Ascii: AC5+[Vrjx^`hQ-Ov$k6d;=F#E+\|MKYz /OmsG}@$SHkn^{\g'9ok#mMU88oh-qsej%}jE
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 14 60 48 99 fb c0 8c 74 e8 6b d8 f5 4d 5a cb 45 b2 96 f3 50 bb 86 ca d6 25 2c f3 4e e1 15 40 ea 49 35 23 3e 32 fd be 74 5b 6b 7f 14 78 5f 54 8d 55 6e ae 6d 64 82 52 06 37 2a 30 2a 4f a9 f9 88 cf b0 af 6c fd 8e f5 19 6f fe 03 68 6b 33 17 36 f2 4f 0a b1 39 f9 44 ac 40 fc 33 8f c2 be 4c fd a7 3e 2d 45 f1 8f e2 2c 47 46 59 27 d2 6c 10 59 59 60 1c dc 39 6e 5c 0f f6 89 00 7b 01 5f 6d fc 0f f0 87 fc 2a ff 00 84 1a 06 93 a8 3a 5b 4d 6f 6f e7 5d 34 ac 14 24 92 31 77 04 f4 e0 b1 1f 85 53 d8 5d 4f 1d fd bf ff 00 e4 44 f0 a7 fd 85 9b ff 00 44 49 5a 7f b0 8e 99 1d b7 c2 ad 4a f1 53 12 5d ea 72 07 6f 5d 8a aa 3f 2a c0 fd bc 75 8b 0d 4f c0 fe 17 5b 4b eb 6b b6 4d 58 96 58 26 57 20 79 12 72 40 3d 2b a1 fd 8a 35 cd 3b 4e f8 30 63 bb d4 2d 6d 64 3a 95 c3 6c 9a 75 46 c7 cb Data Ascii: `HtkMZEP%,N@I5#>2t[kx_TUnmdR70Olohk36O9D@3L>-E,GFY'lYY`9n\{_m:[Moo]4$1wS]ODDIZJS]ro]?uO[KkMXX&W yr@=+5;N0c-md:luF
2024-05-02 14:33:09 UTC	752	IN	Data Raw: a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a Data Ascii: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49907	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:09 UTC	805	OUT	GET /wp-content/uploads/2020/11/Texas-HHS_Logo_VT.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:09 UTC	208	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:09 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:26:36 GMT Accept-Ranges: bytes Content-Length: 98410 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:09 UTC	7984	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 03 07 02 61 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CCa"
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 78 22 f3 41 fe c8 6f 0e d9 c7 6c 10 aa bc 51 85 95 49 00 6e 0f d7 3c 0e 4f a5 7c 1f e1 7f 11 ea bf 0f 7c 55 6d a9 d9 86 b6 d4 6c 64 f9 a2 94 11 9e cc 8c 3d 0f 43 5e f5 af 7e da 17 77 ba 1c d0 69 7e 1f fb 06 a7 22 6d 5b a9 6e 04 89 11 ee c1 71 cf b6 6b 8b 22 c6 e5 b8 4c 3d 48 e2 e3 ef df aa bd d7 6f ea c6 f9 86 1f 15 5a ac 5d 07 ee fa da cf b9 f3 ef 89 f4 7f f8 47 3c 4b aa 69 8b 2a cb f6 2b 97 85 64 47 0c 0e d6 c0 20 8e bf 5a fa 57 f6 74 fd a3 3e d3 f6 6f 0a f8 aa eb 33 92 23 b1 d4 65 3f 7f d2 39 0f af a3 77 e8 6b e6 fd 0f c3 9a e7 8e f5 a9 2d f4 bb 2b 8d 57 50 99 8c b2 79 4b 93 c9 e5 98 f4 03 27 a9 ad 2f 18 fc 2d f1 4f c3 f4 8a 6d 73 48 9e ce de 46 0a 97 23 0d 19 6e 48 1b 87 43 c1 e3 da bc 4c 06 27 15 81 a8 f1 98 68 3e 4b eb a3 b5 bb 37 fa 9e 86 22 95 1c Data Ascii: x"AolQIn<O\|\|Umld=C^~wi~"m[nqk"L=HoZ]G<Ki*+dG ZWt>o3#e?9wk-+WPyK'/-OmsHF#nHCL'h>K7"
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 06 fe d3 5e 2d f8 77 7d fd 8f e3 5d 3a 7d 46 38 b0 84 ce 3c ab a8 87 1c e4 8c 3f 1e bc 9f 5a f9 c3 e1 37 ed d3 f1 17 e1 cc 90 5a ea 97 2b e2 dd 21 38 30 6a 2c 7c f5 5e 7e ec bd 7a 9e f9 e9 8a fb 4b c0 7f 17 3e 16 7e d6 9a 1a d9 4b 14 2b ac 84 3b f4 cb dc 25 dc 24 0e 4c 6c 3e f0 19 27 83 ee 45 70 47 2e 84 65 ed 32 ba ae 94 ff 00 95 eb 17 fd 7c cf 87 cc f2 9c 7e 5d 17 f5 fa 6a ad 3f e7 8f 4f 5e ab f2 f3 3d 6b c1 3f 10 b4 0f 88 5a 71 bd d0 b5 08 ee e3 5f bf 1f dd 92 33 cf 0c a7 91 d2 ba 5a f8 d7 c7 9f 02 bc 57 f0 4b 51 6f 13 78 42 fe 7b ad 3e 03 b8 cd 08 c4 f0 a9 27 87 51 f7 d7 18 c9 f7 e8 2b d6 be 09 fe d2 7a 7f c4 1f 2f 49 d7 3c 9d 2f 5e 0a 02 31 7c 45 74 7b ed cf dd 6f f6 7f 2f 4a f4 f0 79 bc bd aa c2 63 e1 ec ea f4 fe 59 7a 33 e3 ab e0 97 27 b6 c3 3e 68 Data Ascii: ^-w}]:}F8<?Z7Z+!80j,\|^~zK>~K+;%$Ll>'EpG.e2\|~]j?O^=k?Zq_3ZWKQoxB{>'Q+z/I</^1\|Et{o/JycYz3'>h
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: b5 99 18 15 01 c9 21 88 20 1e 0d 0a 9d 5c 34 95 49 2b 58 55 31 f9 67 10 d0 a9 80 a1 53 9d c9 7f 2c b4 ec db b5 95 99 f6 ff 00 ed 67 e1 69 fc 29 e3 ad 1f c6 7a 71 10 b5 cb 26 e6 4e 08 9e 2c 15 63 eb 91 81 f8 57 d3 7e 04 f1 3c 5e 33 f0 7e 91 ad 45 8d b7 96 eb 23 00 08 01 fa 30 19 ec 18 11 5e 55 e3 ab db 7f 8d 9f b3 04 3a fd b2 a3 4b 3d 84 5a 94 7f 23 7c b2 a6 0b 85 cf 3d 43 ae 7d 0e 6a 87 ec 6d e2 71 a9 78 1b 51 d1 d8 fe f7 4e ba de bd 79 49 06 47 ea 08 fc 2b 3c 3d b0 79 c4 e9 c7 e0 ad 1e 65 fe 25 bf ea cf c1 b1 10 94 f0 96 9a f7 e9 3e 57 fd 7e 07 d0 74 51 5f 1f 7f c1 48 27 f1 6f 86 3e 1e f8 7b c5 9e 15 f1 26 ab a1 0b 3b e3 69 7b 1e 9d 75 24 42 44 91 49 46 60 a7 18 52 84 64 ff 00 78 57 db e1 e8 fd 62 ac 69 5e d7 3e 72 a4 fd 9c 1c ed 7b 1f 55 f8 93 c2 9a 37 Data Ascii: ! \4I+XU1gS,gi)zq&N,cW~<^3~E#0^U:K=Z#\|=C}jmqxQNyIG+<=ye%>W~tQ_H'o>{&;i{u$BDIF`RdxWbi^>r{U7
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 4b 2f 86 1e 50 07 ca 31 1c 7b b8 fc 13 f1 af c6 c5 04 28 cf 07 15 fb 3b fb 3e bd bf 8c 3f 67 87 d2 26 f3 44 4b 0d d6 9b 39 18 ce 08 6f bb ff 00 01 71 d6 bf 1a 6f 2d 64 b1 bc 9e da 65 29 34 32 34 6e 87 aa b0 38 22 bf a3 f8 46 bf b7 c0 a7 dd 45 fd eb fe 01 f9 7e 75 4f d9 e2 1a f3 7f 99 0d 3e 39 5e 09 52 58 5d a3 96 36 0e 8e a7 05 58 1c 82 3f 1a 65 15 f7 27 cf 9f b4 ff 00 b2 67 c6 e8 3e 3b 7c 1a d2 b5 86 90 1d 66 cc 7d 87 53 84 b6 59 27 40 3e 63 df 0c 30 c0 fb fa 83 5e cf 5f 8a ff 00 b2 cf ed 19 a8 fe ce 9f 11 22 d4 d4 3d d7 87 6f 8a c1 ab 58 a0 c9 78 b3 fe b1 07 f7 d7 a8 f5 e9 5f b1 9e 0a f1 9e 91 f1 0b c2 fa 7f 88 34 2b c4 be d2 ef a3 12 c3 32 1e dd c1 f4 20 f0 45 7e 75 99 60 9e 12 ab 71 5e eb db fc 8f a6 c2 d7 55 a1 67 ba 26 f1 57 85 f4 df 1a 78 73 51 d0 Data Ascii: K/P1{(;>?g&DK9oqo-de)424n8"FE~uO>9^RX]6X?e'g>;\|f}SY'@>c0^_"=oXx_4+2 E~u`q^Ug&WxsQ
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 6a d6 7f 79 d3 0c 24 de 0f ea f5 5d df f5 6f b8 e7 7f e0 a3 ff 00 08 d7 c0 7f 1a a2 f1 2d 95 b9 8b 4b f1 3d b8 9d 8a a8 54 17 49 f2 c8 a3 1d f1 b1 8f fb d5 f2 65 7e be 7e d6 3f 0e 2d 7f 69 2f d9 ae 7d 43 46 88 5c 6a 96 90 0d 5f 4c 2b f3 36 e5 19 78 b8 e4 92 bb 86 3b 90 38 af c8 42 0a 92 18 15 60 70 41 ec 7d 2b fa af 26 c5 c7 15 85 8b 4e f6 fc ba 3f b8 fc 7b 1b 45 d1 ac ee b7 fe 98 95 f5 ef ec 27 fb 5b b7 c2 2d 6e 1f 04 78 ae f0 27 82 f5 09 89 b7 ba 9d 8e 34 e9 db be 7b 46 c7 a8 e8 09 cf 73 5f 21 51 d4 60 f4 af 53 11 87 86 26 9b a7 51 68 ce 5a 75 25 4a 4a 51 3f a0 a8 66 8e e6 24 96 27 59 22 75 0c 8e 87 2a c0 f2 08 23 a8 a9 2b f2 8f f6 4e fd ba 75 7f 83 2d 6d e1 9f 16 b4 fa df 83 78 48 64 2c 5a e3 4f 1f ec 67 ef 20 fe ef 6e d5 fa 73 e0 6f 88 5e 1c f8 95 a1 Data Ascii: jy$]o-K=TIe~~?-i/}CF\j_L+6x;8B`pA}+&N?{E'[-nx'4{Fs_!Q`S&QhZu%JJQ?f$'Y"u*#+Nu-mxHd,ZOg nso^
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: ae a3 37 68 37 bf 67 df d3 b9 b6 69 97 c7 19 4d b8 af 79 7e 2b b7 f9 1f 03 f8 bb c2 7a af 81 3c 4d a9 78 7f 5b b4 7b 1d 57 4e 99 a0 9e 09 07 42 0f 50 7b 83 d4 11 c1 15 8f 5f ac 7f b5 d7 ec c9 a4 7e d3 3e 05 83 c5 de 11 f2 64 f1 6d ac 1e 65 9d d4 2c 15 6f e1 eb e4 bf bf f7 49 e4 1e 0f b7 e5 46 ad a4 de e8 3a a5 de 9b a9 5a cb 63 a8 5a 4a d0 dc 5b 4c a5 5e 27 53 82 ac 0f 43 9a fe a9 cb f1 f4 f1 d4 94 e3 bf 5f f3 f4 67 e4 18 9c 3c b0 f3 e5 7b 14 eb d5 7e 08 7e d3 1e 3b f8 05 7e 5f c3 7a 99 93 4c 90 8f 3f 49 bc fd e5 b4 9c f5 0b fc 2d ee 3d 6b ca a8 ae fa 94 e1 56 2e 13 57 47 34 65 28 3b c5 d9 9f ad bf 04 ff 00 e0 a0 5f 0e 7e 28 5b c5 6b ae 5d 7f c2 1d af 60 06 b6 d4 4e 20 90 ff 00 d3 39 7a 7e 0d 83 f5 af a6 6c ef 6d f5 1b 75 9e d2 e2 2b 98 1b ee cb 0b 87 53 Data Ascii: 7h7giMy~+z<Mx[{WNBP{_~>dme,oIF:ZcZJ[L^'SC_g<{~~;~_zL?I-=kV.WG4e(;_~([k]`N 9z~lmu+S
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: e7 b0 5e ff 00 53 cd 7c 9e 3f 89 30 98 4b c6 93 e7 97 96 df 37 fe 57 3d 9c 36 55 5e b6 b3 f7 57 9e ff 00 71 f4 57 c5 1f da e6 c7 4b 59 b4 ff 00 07 c2 35 0b c1 f2 9d 46 61 88 53 d7 6a f5 63 d3 ae 07 d6 be 59 d7 bc 41 a9 f8 ab 53 93 50 d5 6f 26 d4 2f 65 3c cb 33 16 3f 41 e8 3d ab b0 f0 cf c0 3f 1c 78 b3 44 1a ae 9f a2 b1 b2 64 df 13 4d 2a c6 d2 8e 7e ea b1 04 f4 ae 2f 52 d2 ef 7c 3b ab 4b 65 a8 5a c9 69 7b 6b 20 12 41 28 c3 29 06 bf 3b cc f1 79 86 33 96 ae 2d 35 07 b2 b3 51 f9 77 3e 9f 09 47 0d 42 f0 a2 d3 92 df 5b b3 dd bc 2b fb 1d eb 7a d6 85 15 f6 a7 ab 43 a4 5d cc 81 d2 cc c4 64 28 08 e0 39 cf 07 a7 03 38 af 20 f1 9f 83 75 af 85 fe 2a 6d 37 51 1f 66 bf b7 2b 34 33 c2 df 2b 8c fc b2 21 fa 8f c2 be e4 f0 27 c6 4f 0a f8 b7 c2 d6 fa 8c 7a ad ad 89 8e 20 2e Data Ascii: ^S\|?0K7W=6U^WqWKY5FaSjcYASPo&/e<3?A=?xDdM~/R\|;KeZi{k A();y3-5Qw>GB[+zC]d(98 um7Qf+43+!'Oz .
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 7f 63 af 8c 1e 1d b2 7b ab 9f 05 dd 4b 12 29 66 fb 1c d1 5c b0 03 af cb 1b 31 fd 2a 39 f1 6b 5d 4e a7 84 e1 7a 9f bb 5e cb e5 25 7f c1 dc fb 5f e0 f7 ed f3 e0 6f 88 b7 50 69 ba ec 72 f8 47 55 97 01 4d e3 06 b6 76 27 01 44 a3 a1 c6 3e f0 03 9e b5 ef 7e 3b f1 ad af 81 7c 09 ac f8 a6 58 9a fa cb 4c b2 7b d6 8e dd 86 65 45 5d df 29 e9 c8 ef 5f 89 fa 8e 9b 77 a4 de 4b 67 7f 69 3d 95 d4 64 ab c1 73 19 47 52 38 20 83 ef 5e c5 e0 5f da 97 c4 be 17 f8 59 e2 7f 00 ea 8f 2e bb a1 6a 7a 64 b6 36 4b 71 21 2f 62 ee 08 05 5b a9 41 93 f2 fb 0a e9 a5 8f 92 4e 35 37 ee 7c f6 65 c1 14 65 38 56 cb df bb 75 78 b7 d2 fa f2 bf 4e ff 00 79 f5 39 ff 00 82 9a f8 40 29 3f f0 89 6b 1f f7 f6 3a fa c7 c1 9e 25 8b c6 7e 12 d1 f5 e8 21 7b 78 35 3b 48 ae d2 29 08 2c 8a ea 18 03 8e fc d7 Data Ascii: c{K)f\1*9k]Nz^%_oPirGUMv'D>~;\|XL{eE])_wKgi=dsGR8 ^_Y.jzd6Kq!/b[AN57\|ee8VuxNy9@)?k:%~!{x5;H),
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 0f 2f 94 a5 55 a6 fa 1f b2 f1 c6 1a 85 1c b6 32 a7 05 17 ce b6 49 74 91 f4 1d 15 1c f7 11 5a c4 64 9a 44 8a 31 d5 dd 82 81 f8 9a e1 be 2b 7c 64 f0 f7 c2 7f 02 ea 7e 24 bf be b6 9d 6d 63 fd d5 b4 73 ae fb 89 4f 09 1a e3 27 24 fb 74 c9 af 7e 52 51 57 67 e2 14 68 d4 c4 4e 34 e9 45 b6 dd 97 a9 e0 3f b7 d7 ed 04 be 08 f0 88 f0 26 89 76 63 d7 f5 94 0d 77 24 4d cd bd a1 c8 23 20 e4 33 91 8f a6 7d 45 7e 6e e0 01 5b de 3a f1 ae ab f1 1b c5 da a7 89 35 a9 cd c6 a5 a8 4c 65 91 89 e1 47 45 55 f4 50 00 00 7b 57 ad 7e c7 7f 06 ed 3e 2b fc 55 b6 9f 59 96 08 fc 3d a2 e2 f2 ea 39 dc 2f da 18 11 b2 30 0f 50 5b 04 fb 66 be 5a ac e5 8b ad a7 c8 fe 91 cb b0 74 38 63 2a 72 a9 bc 57 34 9f 77 d9 7e 48 fa eb f6 0e fd 9f c7 c3 9f 02 af 8c 75 78 00 f1 16 bf 10 78 83 03 9b 7b 43 82 Data Ascii: /U2ItZdD1+\|d~$mcsO'$t~RQWghN4E?&vcw$M# 3}E~n[:5LeGEUP{W~>+UY=9/0P[fZt8c*rW4w~Huxx{C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49908	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:09 UTC	558	OUT	GET /wp-content/uploads/2020/11/RWJF-logo.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:09 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:09 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:26:34 GMT Accept-Ranges: bytes Content-Length: 68120 Connection: close Content-Type: image/png
2024-05-02 14:33:09 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 54 00 00 00 c8 08 06 00 00 00 b7 41 19 39 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 01 ec 5d 07 60 53 f5 f6 3e d9 bb 49 d3 34 dd 83 b2 a1 20 43 91 25 a2 08 0a 2a 2a 02 22 8a 7b cf e7 f3 b9 f5 a9 cf bf 13 91 87 7b 0f dc 38 01 65 ef bd 77 a1 85 2e ba 67 9a 34 a3 d9 fd 7f e7 86 4a 81 42 5b 9f 0b b9 3f 0d 4d 6e ee f8 dd 93 7b bf 7b e6 77 24 1f bf ff 36 75 ea 98 41 e5 a5 a5 b4 71 fd 3a 9a 78 d5 14 4a 4a 49 a6 7d 7b f7 92 db e9 22 87 c3 41 25 25 c5 a4 50 c8 29 3e 3e 81 9c f5 0e d2 a8 15 94 5f 50 48 12 a9 9c 86 0c 3a 9d 42 a1 30 85 c3 61 3a 7a 84 43 41 32 99 63 a9 a6 d6 41 c5 a5 e5 54 58 90 47 d6 18 23 75 e9 79 1a 9d de bf 1f 05 83 41 6a 6c 6c 3c 7a 33 32 9b Data Ascii: PNGIHDRTA9pHYs+ IDATx]`S>I4 C%**"{{8ew.g4JB[?Mn{{w$6uAq:xJJI}{"A%%P)>>_PH:B0a:zCA2cATXG#uyAjll<z32
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: f9 49 56 0b 15 16 14 c8 af ba ef bf 8b bf fb 69 dd 70 3d c8 45 b4 30 bd 99 20 84 b5 bd f6 0d 36 b5 c1 de 54 52 49 d1 16 03 fd eb ae 1b af 1d da b7 eb cc 8a 5a 3b 34 53 1b 75 e9 d8 91 1a 83 0e 2a 2c 2e 11 6a ec 55 4a 25 72 4a a3 a9 a6 d1 ab fd f0 9b 85 d3 17 6d cd bf a5 01 5d 4a 2d 88 ea 33 5b 7f c4 57 da b6 19 c8 00 92 0d a8 ba aa 07 b9 c9 d0 11 7d 97 bc f8 e0 cd 17 6b d4 6a 2f f7 9e 8a 42 40 0c 48 1a c1 4e f6 01 6b 4c f8 dc 48 35 15 95 f0 c9 02 58 4f 70 9a 46 8b 48 8e d2 b6 5f 40 5c 4b 94 c0 29 2a 01 d6 f8 58 2f 4b 8e d3 22 d1 3d 94 f1 f4 ab 5f ce 3d 78 b0 b6 47 34 02 44 c8 2c 12 aa 91 da 0b a6 70 6d 02 2c c3 54 83 46 7a dd 32 d3 2a ae b9 64 f8 25 67 9e d6 63 d3 c1 92 12 32 22 32 9f 92 18 4f 51 e8 29 dd e0 e1 76 28 41 21 92 9f 01 bf e8 9a cd db c6 bd 35 Data Ascii: IVip=E0 6TRIZ;4Su,.jUJ%rJm]J-3[W}kj/B@HNkLH5XOpFH_@\K)X/K"=_=xG4D,pm,TFz2*d%gc2"2OQ)v(A!5
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: af ac b6 87 d7 09 e6 31 e4 d3 c6 22 f5 89 0f cd 47 8f 3c d0 18 d8 5b 19 82 79 2f a1 1a a4 63 b1 bb 6b f8 a0 6e 4b ae b8 68 f0 63 6a 89 72 53 8d dd 8d 34 2d 87 90 b7 da ca 5e da fd b5 08 a8 ed 16 d9 df 77 03 be 21 24 48 4f e1 98 ef 2f a3 0d d7 ee 2f eb fe 96 6f f8 ee 39 74 ec c8 cd 1c d9 39 df 50 7e 54 c8 d4 c1 54 95 29 62 28 21 3e 8a a4 f5 b8 69 b0 32 6b 5f 3c bc 5e 3f e9 95 ba 60 7a 5a dc 0b 09 f1 a6 2f d0 3e e5 89 7a 87 f7 06 2f 4a 57 95 d0 6e 39 a2 8d c7 08 d6 e4 83 b4 34 18 72 f9 0e f6 93 8e 19 8c 00 36 25 d5 b5 63 8a 2a 1a c7 c4 59 62 de 07 37 c0 f3 e6 68 75 be f7 38 1d 17 5a da e3 ff ba 4c 00 13 ec 24 d1 6a 02 f0 38 86 3e 05 30 6d f0 49 f4 b1 c8 31 e5 f3 e0 87 cd 2f 02 6b 7e 30 6c c8 5a 1a 97 58 72 7a 90 2e 4a 4d 37 dd 7a f9 0b 53 2e 1d f1 88 cf d3 Data Ascii: 1"G<[y/cknKhcjrS4-^w!$HO//o9t9P~TT)b(!>i2k_<^?`zZ/>z/JWn94r6%c*Yb7hu8ZL$j8>0mI1/k~0lZXrz.JM7zS.
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 99 96 1a 1e 04 a6 d4 03 21 0a f2 69 68 47 8c b6 4f cf 78 aa 8a 0a b3 aa 40 a3 f9 5f dd 1d 75 3a bd 31 ba 02 84 79 2b c0 0f 50 3a 31 e1 29 c2 39 b2 70 ac 91 f0 1f e8 6f f0 cb 81 59 0a 7e 3b 82 f1 69 1f 47 20 bd 73 61 c0 e6 e5 eb 53 20 60 71 83 d6 4f 98 50 9f 6a fb c9 26 f1 d4 b1 33 c0 a1 82 b2 0e 2e 03 17 b0 98 3e 24 12 64 26 1b c5 d5 8b 8b c4 92 e2 74 a1 99 9a fd d8 60 67 97 c3 e3 8d 73 6d 3b 76 e6 a3 4f 6e 3f f0 19 c0 c0 50 4c 31 1e 66 fd 14 d2 2c 47 10 80 d1 89 65 8b 32 f6 6e 5c 56 f2 4c 41 8c 3a c1 a4 37 6e 3a d3 d5 7f cd 2f ff b4 db 35 19 16 7e f3 d1 ba d6 8d 0e c7 98 96 6c 5b 90 f0 42 ab 53 e3 71 c0 55 00 6e 06 27 fd 1c 9e 19 94 6f 8e 40 a0 2a 81 55 3f 5b cc 1a 55 43 4a 5c e2 a9 95 ab 4a aa aa eb eb ab 84 d2 e0 7b e8 2b 1f 14 3f fa bf c7 44 5e 49 19 Data Ascii: !ihGOx@_u:1y+P:1)9poY~;iG saS `qOPj&3.>$d&t`gsm;vOn?PL1f,Ge2n\VLA:7n:/5~l[BSqUn'o@*U?[UCJ\J{+?D^I
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: ab bd d5 90 90 98 24 cb 6a 28 00 ef e9 68 05 db 12 36 ae c0 ec 9a 07 2b 97 4e 8a f1 91 c1 ab 77 ed 78 7e 53 42 b2 05 98 4b 1d ea d9 37 83 91 a9 07 99 26 39 db 1c f6 c1 ef 39 5d 80 0b f9 27 af 3d 5d 7d 78 7d 38 16 44 8c c9 8c 85 3a 2b ec fd 3d a2 db da 21 96 ae dd b8 bd bb 77 e0 41 56 28 9d 6f 5c d0 4a 68 b3 a1 45 0d f2 11 f4 33 17 37 1b b5 31 6a be c9 29 a9 d0 f2 16 3e dd fc b7 df f8 37 ad 0b 6e 88 93 98 0b b4 a0 f8 b7 8c c0 9f ed 29 5e 7b 5e e0 ce 9f 49 0d e1 d5 d7 df 9f dc d7 6d 5b 85 b9 80 aa 25 2c c7 41 4d d3 34 95 91 91 89 02 81 e8 eb 05 8d 9b 7a 6b 6b ab 68 a8 af c7 dc 81 ef 70 41 a3 26 3f 3b 3b 53 39 3b ed fd 7f d8 26 c0 78 15 14 83 83 88 a0 e3 fa 54 d6 d4 28 61 d2 d3 6d 13 bd 83 03 6d 91 7a e3 7d 61 0b 04 cf 1c fa 80 16 11 ca a9 88 b6 f6 66 61 87 Data Ascii: $j(h6+Nwx~SBK7&99]'=]}x}8D:+=!wAV(o\JhE371j)>7n)^{^Im[%,AM4zkkhpA&?;;S9;&xT(ammz}afa
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 1f ee e8 ec fc 11 b5 0c 68 92 00 6c 47 ef 4a 48 b1 fc 6f 4c 5c fc 83 31 e6 f8 ff 89 4f 4c 7e d0 3f 17 e6 1a 9b f4 c9 12 0f 2c f3 20 7f e0 03 1a f3 60 12 23 fb 27 13 fe 32 4c 46 61 81 df 75 fe 87 7f 93 e4 a3 a8 6c c9 8f 8d 46 f8 e1 30 52 c3 4e a7 b1 7f a0 fb 96 18 2c 48 25 98 3c e2 61 49 24 03 d8 9e 8c 89 8b c5 6f 02 ed 21 7c d2 5a 04 ca ba 0a ac 6d 2d 9b 34 30 a7 a6 20 0c 19 d4 83 68 00 38 5e 07 e0 fe d0 87 9c c0 61 96 55 ae fc 76 6a 4e 21 84 53 16 4c 82 08 e5 e1 fd bb 5e 9c 74 43 eb 28 2c 3d 0a 90 ff 5d 40 da d2 ef 26 c7 84 9a 04 c9 46 d6 ac 59 15 f8 97 2f df 73 65 4c 7c 92 2f 12 9b 5e 5f 8f f5 bb fd bd 7d 79 c9 30 a1 dd 48 9f 1d c1 79 f7 be f0 dc ad c7 0f ee bb 43 8f a0 ca 96 1b 6f bc e1 aa 2b 37 36 50 83 85 ff 5a ba 5a a0 61 20 cf 7e 1c e7 ba ec e9 ec Data Ascii: hlGJHoL\1OL~?, `#'2LFaulF0RN,H%<aI$o!\|Zm-40 h8^aUvjN!SL^tC(,=]@&FY/seL\|/^_}y0HyCo+76PZZa ~
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: ab 56 af fd d1 c2 45 c5 a2 74 e7 36 d1 dd 6d d0 47 44 c5 3e d3 de 54 f7 55 5a 2b 88 06 3f 98 91 b9 e0 56 06 0d a9 89 13 24 de a1 d5 e2 f9 84 8a 2b ae bc 1a 3e 64 10 9a 97 9f f9 96 65 62 0c 25 70 d2 6a 2e 5d 7f cd 41 23 20 3e 0c 82 85 84 84 3f 04 80 ed 7a 30 61 89 bd bb b6 fe 5a ad 76 db 07 93 9b 84 23 52 f8 d2 a4 0e 84 19 ca 92 26 cd 8d 75 5f c1 4d 4b f7 8a d1 38 a8 aa 47 61 48 f0 15 40 80 90 71 ff 9c f2 ca bb c6 58 73 81 aa bd 51 08 11 82 93 20 f2 0b 24 2e c7 18 d6 0c d2 39 1d be 1f cc 4f 6c 14 d3 28 b5 6e 45 c2 86 2c c3 12 15 11 f1 22 7c d8 bf 87 b0 f7 e9 d5 eb 0a 94 6e 8a 75 2b 57 5f b2 e7 ad 5d 6f 42 2b 23 42 c4 c1 6b 81 4b 89 48 68 f6 86 be be dc c1 7e 43 91 09 6e 86 55 59 59 ff 77 d9 9a 75 16 f2 22 90 ac 1a 4a 9a 17 e3 03 c0 c7 a0 ef ae 13 ee 6a 37 Data Ascii: VEt6mGD>TUZ+?V$+>deb%pj.]A# >?z0aZv#R&u_MK8GaH@qXsQ $.9Ol(nE,"\|nu+W_]oB+#BkKHh~CnUYYwu"Jj7
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 17 f7 85 df e1 f3 24 39 32 5d 28 f4 79 bf 1f 36 96 3e 73 f6 9f cf 96 e7 63 0e 3d ca 30 4b 36 2b 15 92 11 cc 28 6d ed 78 ce e7 38 29 01 15 22 01 32 0b f6 45 46 84 a1 4a 2e 78 4d 41 c9 38 8e 28 38 69 e9 24 c0 1a 82 8a cf 92 98 4e 6e 4a e0 d5 70 10 8c 63 b3 92 7d bb c8 5a 78 bf fb 9c ff 6c 7e 04 fe 19 46 40 89 7a d6 c5 34 6a bd 3c bd 06 60 0e a2 7a a2 1b 73 4b 59 b4 0b 41 50 97 69 2c 2e d6 4f b2 43 9c 6a b0 af d3 e9 66 c7 31 76 30 36 a9 51 18 2e 48 e1 a6 6c 43 68 df f4 0e e0 14 b4 17 88 1c 99 09 45 78 0a 17 23 73 ce c9 3f 3a 8c 40 8b 3b b4 19 3d e8 ef 20 09 64 95 50 16 a9 64 06 0e b5 04 0a 1f 6f 08 26 52 93 91 50 7a f5 8a 12 d1 05 fe c4 91 49 bb 08 89 88 12 8d b5 d5 22 2a 2e 12 68 04 7f 10 fc 56 c9 7a 45 4e 6d 53 16 94 c3 b5 e8 62 a0 60 e0 b9 de de 0a f0 9a Data Ascii: $92](y6>sc=0K6+(mx8)"2EFJ.xMA8(8i$NnJpc}Zxl~F@z4j<`zsKYAPi,.OCjf1v06Q.HlChEx#s?:@;= dPdo&RPzI"*.hVzENmSb`
2024-05-02 14:33:09 UTC	4135	IN	Data Raw: fe fc c4 63 88 98 8f 8a c5 8b 16 89 ab ae be 5a 0a 1b 98 de 8e 72 2e f2 aa 3c eb 9c 26 55 32 fc 87 7e ca 9f 39 1f 51 40 a8 61 36 27 24 24 8a b1 a1 01 23 b1 9e 6c 87 0f 1f 0e e2 fd 90 07 95 02 d5 07 7c a9 49 49 09 f4 0f ce f9 f6 85 2f 69 6a b3 bc 08 37 0a 26 06 68 b5 1d f9 d5 55 67 ee 6e a8 ad be 05 fe 69 6b 58 44 d8 4b f0 05 6f ea 1f 1c 5e d9 d3 d1 f2 17 f2 93 22 ed 4a 69 c4 66 17 82 8d 87 6e 0a 9a ae 74 6b 50 b8 b1 61 5c 95 bc 3e 85 3e 9c 23 18 1b 04 08 21 b8 b8 39 bd 57 43 36 17 4d 7c 94 28 71 33 51 6b a6 d6 8f 41 4c f2 f0 0d 82 a5 82 d0 15 de 63 60 0f 6e 09 24 0f 4c 12 98 2f 9f 21 cf c7 32 d5 78 4f 41 61 1b e4 13 24 0e 1f 3d 62 ad aa a9 11 dc 90 39 1e 10 d9 3c ec 73 d9 38 0f d9 47 7d 97 4e 34 d4 54 8b c5 52 4b 85 8f 7e de 99 fa b9 7c 5e ff cc 9d 52 5e Data Ascii: cZr.<&U2~9Q@a6'$$#l\|II/ij7&hUgnikXDKo^"JifntkPa\>>#!9WC6M\|(q3QkALc`n$L/!2xOAa$=b9<s8G}N4TRK~\|^R^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49910	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:09 UTC	585	OUT	GET /wp-content/uploads/2017/09/BCBSNC-Foundation-Logo-800px-768x599.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:09 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:09 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:22:19 GMT Accept-Ranges: bytes Content-Length: 52315 Connection: close Content-Type: image/png
2024-05-02 14:33:09 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 00 00 00 02 57 08 06 00 00 00 24 7d 33 75 00 00 cc 22 49 44 41 54 78 da ec d9 31 4a 03 41 14 80 e1 57 59 89 58 a4 10 4f 90 03 78 02 2b 6b 4f 60 65 65 21 e2 55 3c 80 07 98 b9 40 0a b1 b4 b2 f0 1c ce 94 22 12 f4 25 ac 58 c4 46 70 93 40 be 0f 7e de db 59 98 7a 61 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRW$}3u"IDATx1JAWYXOx+kO`ee!U<@"%XFp@~Yza
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 6d 10 78 66 dc 64 ef 8f 50 9f f7 b6 64 79 37 e0 06 e4 48 54 94 69 7d 82 ef 43 8b 52 6a 55 4c 77 aa e9 ef 94 08 6e 21 76 0f 3f 52 47 e1 33 6a 22 de e4 e7 46 8b a3 a2 5f 98 6f 66 fc 9d 3b 35 ca e4 aa db 4e 4d c0 bc f2 bf 1c 7c 7b 04 04 02 81 40 20 10 74 21 04 5d 3c 00 e6 b9 43 4c b1 bb 82 e2 ca 7f 24 a8 a2 8c fc e9 bc 8b f2 af a0 f1 e9 04 f2 6b f0 00 f8 6a 00 9c 88 e7 ae 75 95 1f 9e a1 97 9a 78 97 de 1f 62 97 be 77 55 a8 7c e3 8f 71 bf 0b a1 30 75 3b 72 d4 23 c2 a5 a2 13 3b 2f c0 e9 3b c6 63 e6 b6 9c 3a 75 62 d4 45 7e d7 e6 5f 20 f7 6e c1 dd f0 7e 43 1a e2 cc 40 a9 40 0e c4 f1 35 11 76 3d e3 1f d4 72 b4 1e 04 02 81 40 20 10 74 31 8c e0 9d 80 4b af 48 e2 ae 84 b9 f1 1f 3a 3d ae be 85 78 f7 6f 21 de fb 5a 54 bf 19 3a 25 aa 2e c0 2e e4 99 50 44 4e 1a 1f 41 d7 Data Ascii: mxfdPdy7HTi}CRjULwn!v?RG3j"F_of;5NM\|{@ t!]<CL$kjuxbwU\|q0u;r#;/;c:ubE~_ n~C@@5v=r@ t1KH:=xo!ZT:%..PDNA
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 29 a7 f5 49 47 1d 84 30 24 aa fa 73 ce 0c 3c bf b2 3d f3 cb af fd 22 3c 1b e8 66 cd 3c 4a 3f 58 98 b4 24 92 bb 78 00 5a 70 fe 28 bc 0e 12 fb 2f 10 08 04 02 c1 5e 0d 8f 06 80 49 9a 8f bb ce ee fc bb 43 79 b9 0c 3b ed 31 33 e6 9f 60 d9 fd ff 38 89 dd 58 f3 9e 47 16 a6 10 8a c3 2b 04 4d d9 92 a3 b8 7a 3f e5 3f 08 bb ab 1b e8 59 16 63 83 3a fa 5e 34 3d b6 eb 5e da f9 fd dd 8a 94 6a 0b d3 a1 18 5e 08 af 45 f7 4e 36 fe 3c 09 58 1b 14 f8 84 00 59 fa 40 be 20 e4 c8 79 90 9f f2 2f 26 61 ce 01 8b 22 3e 7c 43 86 92 65 7d 19 1f d0 21 e0 85 aa 3e e4 09 b0 01 7b 7e 24 47 61 39 ea 28 dc d7 be f9 35 3b 5c ff 05 fc 12 39 ab 01 b2 31 6e a8 53 26 b0 c4 67 27 63 a0 1e 74 66 40 20 10 08 04 02 c1 5e 8e 42 08 90 a5 1e ba e5 dc 56 69 00 69 9c 78 49 42 f6 b9 64 fe 38 ef 06 23 e0 Data Ascii: )IG0$s<="<f<J?X$xZp(/^ICy;13`8XG+Mz??Yc:^4=^j^EN6<XY@ y/&a">\|Ce}!>{~$Ga9(5;\91nS&g'ctf@ ^BViixIBd8#
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: d2 00 84 40 b7 42 bc 43 10 03 e1 3c 19 80 2e f0 14 8c 29 30 ce 9c 98 b3 b8 21 35 0a 06 6d c4 7c c9 98 8f 5d fa 55 99 db 3c a6 79 2e c0 b7 99 d7 27 20 65 b8 c9 74 0b 2c d2 70 0d 30 cf af d8 35 00 0a ec 82 d7 ac 33 95 6e 98 6a 0f 0c 40 88 86 a9 8f 63 bc 00 36 4d 6a d4 57 b0 c2 e3 79 c4 fa 54 64 63 31 1f b3 59 a3 5f b2 66 fe c6 76 ec 2a c4 3e ef 61 bc 77 60 9d b5 76 cf 50 8b f6 0d 39 f1 91 73 c3 43 d6 fa 22 1f 1b 80 0a ce 2d 4f d8 4f 9f c0 8a 81 25 8e f3 73 f6 61 8d 18 00 91 13 03 b0 6e e3 ac 54 2f d8 b1 78 0c 79 9c c5 03 f2 d4 00 94 31 89 33 0e f8 15 84 72 14 ff 71 87 31 9f 3a f8 42 85 e9 e4 a7 c0 1a 38 33 c4 db e7 c2 69 1a 4c 82 d7 2c d2 a9 ac 7b 2d 36 58 d8 5b 6d 2c 82 a6 14 8f 69 1e 94 82 7c e8 21 8f 6f 26 47 8e 64 1c 30 6d 58 6c de 06 0b 86 3e ce e6 98 Data Ascii: @BC<.)0!5m\|]U<y.' et,p053nj@c6MjWyTdc1Y_fv*>aw`vP9sC"-OO%sanT/xy13rq1:B83iL,{-6X[m,i\|!o&Gd0mXl>
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 24 12 89 44 79 a7 12 f2 1b 04 f5 27 6a d0 80 7f 1b 43 af cf 2b c0 81 fa f7 14 80 e0 3b f9 3a 82 b6 74 d4 80 91 85 45 1b c7 f1 5b 5c ef 93 fb 8c f4 35 ed 70 1d 3f 91 7e 92 bc 63 f3 f7 cf e4 eb 86 c8 4f 00 78 6f c9 e3 1f e4 63 4d f9 ef 92 5b 8d f3 a5 22 f2 03 f2 0a f9 c0 fa 9c c2 27 c8 a3 77 e4 6e f4 d2 3e 25 7f c0 bf 1f b9 40 c1 3e 79 9e fc 0f f9 a2 04 74 39 af 66 cb 73 b1 82 32 fc 4f e3 ef e4 92 34 7e 6b 8e 9c b0 ab 73 f8 db 45 43 24 12 89 44 79 a5 12 f2 92 43 e3 7e 0c 30 28 25 87 30 4a f0 58 81 00 2b 08 ec 9d a1 37 c8 44 fa 45 36 5e c0 6f 78 f1 2a b9 c3 48 4f 51 87 eb b8 a6 40 d1 2b 9b bf 47 a5 17 d5 77 59 eb c4 55 f2 2f 4d d9 af 93 6f 18 e7 47 ed 78 46 8f 6d 7a f9 53 00 9e 7e 72 0d f2 28 02 78 0a 91 c3 4a 1e 5e 22 f7 22 7f fe 73 78 86 4f 00 04 13 e4 26 Data Ascii: $Dy'jC+;:tE[\5p?~cOxocM["'wn>%@>yt9fs2O4~ksEC$DyC~0(%0JX+7DE6^ox*HOQ@+GwYU/MoGxFmzS~r(xJ^""sxO&
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: dd 6a 45 1d 31 00 10 e1 01 30 de 80 01 30 a6 36 2b fc 1c c0 2b 75 df 01 00 80 48 69 f8 00 30 13 ea 77 06 00 22 3c 00 46 d4 66 3d 07 80 99 52 cf 4b fc fc cd be 7a a2 7a 1c 00 00 88 94 37 35 00 da d5 03 f5 9a 01 80 88 0e 80 ac ca d7 7b 00 98 31 75 4f ad ab 82 fd 79 93 5f 9c 06 00 40 34 35 7a 00 f8 a6 d4 36 03 00 0c 80 ba 0e 00 5f 42 f5 a8 98 03 00 00 91 55 8f 01 10 53 09 95 54 ad ae bc 41 b5 c1 00 00 03 a0 ca 00 00 00 00 68 f2 01 90 50 ef aa 39 35 e6 ca 6b 53 8f d5 b1 37 00 42 c7 45 5a f5 a8 ac ea 55 dd 2a c5 88 38 91 56 95 54 17 54 d6 2b 6d 1f 6b 84 16 95 52 1d 4d 32 00 5a ec 58 52 ce ae 2f af 8c 4a ab 14 03 a0 a2 a4 4a 79 d7 55 af ea b2 bf 8f bb e6 11 b7 73 9d b1 63 cc 5a 3d 7c 6b 14 00 e0 ac ab c7 00 e8 f0 7e 73 eb 92 ab 6c 51 ed a8 2b 15 6e de 63 f6 d8 Data Ascii: jE1006++uHi0w"<Ff=RKzz75{1uOy_@45z6_BUSTAhP95kS7BEZU*8VTT+mkRM2ZXR/JJyUscZ=\|k~slQ+nc
2024-05-02 14:33:09 UTC	4330	IN	Data Raw: b0 69 da b9 cd df dd ae 5d 39 f7 97 17 00 f8 c9 16 89 b8 38 e4 51 6c ef 91 f7 aa 1d 9b 49 ae cf 4d f2 e3 1b 12 c6 0a 14 42 e7 b6 00 40 bf 9f 91 b3 d0 d8 df 72 d7 5c e9 ae e2 73 1c c4 00 f6 35 3e da 69 cf 43 96 77 c4 45 5d 82 38 9c a7 af 46 cf fb 93 2c 26 6e fe c2 02 60 c8 b3 30 1c 75 0a 80 76 ec 38 8c dd ec 38 27 78 ef 7a 58 01 80 de 26 39 a6 89 c1 43 16 e4 dc 76 92 91 02 a0 96 76 17 88 15 37 bf ed a3 c7 b0 05 68 67 3a 05 00 ed ff e9 c4 59 2b 7e 3f 86 dd 5d 3f 38 c2 0f b2 18 f3 1b 62 b2 d5 e7 a7 4e 01 d0 8f 9f e6 21 6f d2 70 7e 9e 59 5c bd b2 05 40 60 7c 01 39 62 c9 5e c0 40 f7 9d 19 d8 03 b0 c2 e2 67 d2 6c 30 3d 66 61 94 93 c1 02 60 8c 9c 7d c7 fa 8a b9 80 34 8f 0d c2 28 60 de 5c 45 ce 33 16 b1 39 4e fc 1e 31 46 4b 31 f1 c5 02 ce 5f 00 10 8b 87 cc 33 25 Data Ascii: i]98QlIMB@r\s5>iCwE]8F,&n`0uv88'xzX&9Cvv7hg:Y+~?]?8bN!op~Y\@`\|9b^@gl0=fa`}4(`\E39N1FK1_3%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49909	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:09 UTC	794	OUT	GET /wp-content/uploads/2018/02/Storer.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:09 UTC	206	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:09 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:23:32 GMT Accept-Ranges: bytes Content-Length: 6193 Connection: close Content-Type: image/png
2024-05-02 14:33:09 UTC	6193	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 18 00 00 00 b4 08 03 00 00 00 78 f9 c3 9f 00 00 00 c3 50 4c 54 45 ff ff ff 11 72 3f 6e 6f 72 69 6a 6d 69 6b 6e 9e 9f a1 a7 a7 a9 c4 c4 c5 66 67 6a fa fa fa c9 ca cb 00 6c 34 05 70 3b ea f4 ef 44 88 60 00 6e 37 d0 d0 d1 b3 cf c0 00 66 28 ed f2 ef 8c b7 9f 75 76 79 9b c0 ab d6 d7 d7 53 8d 6a f1 f1 f1 d2 df d7 8e 8f 91 87 88 8b c8 de d3 b3 b3 b5 25 82 52 81 b2 98 7f 80 83 df df e0 e7 e8 e8 de e7 e1 94 95 97 00 64 24 a7 c7 b5 7a 7b 7e b7 b8 b9 4e 92 6d ab ac ad bd d6 c8 5d 5f 62 2d 81 54 36 84 59 5f 99 78 5b 98 76 70 a3 86 84 b4 9a 00 5d 10 00 56 00 94 bc a6 60 9e 7c 45 90 68 75 a9 8d c4 d8 cd 51 97 72 39 82 59 06 77 42 80 aa 91 94 b6 a2 53 54 58 bf 24 58 25 00 00 17 29 49 44 41 54 78 da ec 9a 6b 73 e2 Data Ascii: PNGIHDRxPLTEr?norijmiknfgjl4p;D`n7f(uvySj%Rd$z{~Nm]_b-T6Y_x[vp]V`\|EhuQr9YwBSTX$X%)IDATxks

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49911	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:09 UTC	809	OUT	GET /wp-content/uploads/2020/11/John-Rex-Endowment_VT.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:09 UTC	209	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:09 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:26:37 GMT Accept-Ranges: bytes Content-Length: 189156 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:09 UTC	7983	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 90 00 90 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 07 e0 07 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CCD"
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a6 4b 2a 43 1b 49 23 2c 71 a0 2c cc c7 01 40 ea 49 a0 07 d7 2b f1 1b e2 8f 85 7e 12 78 76 5d 73 c5 ba dd ae 89 a7 26 42 bc ed f3 ca c0 67 6c 68 32 ce df ec a8 26 be 59 fd a4 ff 00 e0 a3 fe 1a f8 74 6e b4 2f 87 8b 6f e2 df 10 ae 63 7d 44 b1 3a 7d ab 74 e1 81 cc cc 3d 14 85 e7 ef 1c 11 5f 9b 3f 11 fe 29 78 ab e2 e7 88 e5 d7 3c 5b ad 5c eb 3a 8b e4 2b ce d8 48 94 9c ec 8d 06 15 17 fd 95 00 57 d4 e5 f9 0d 6c 55 aa 57 f7 21 f8 bf f2 f9 fd c7 Data Ascii: (((((((((((((((((((((((((((K*CI#,q,@I+~xv]s&Bglh2&Ytn/oc}D:}t=_?)x<[\:+HWlUW!
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 Data Ascii: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 17 c3 9f 83 be 36 f8 b7 a8 0b 3f 08 78 67 50 d7 65 07 6b c9 6f 16 21 8c ff 00 b7 2b 61 13 ea cc 2b ec af 84 df f0 4a bd 56 ff 00 c9 bc f8 8b e2 68 f4 b8 4e 0b 69 9a 18 12 ce 47 a3 4c e3 62 9f a2 b8 e7 ad 7e 8c e9 5a 4d 8e 85 a7 c1 63 a6 d9 db e9 f6 30 2e d8 ad ad 62 58 a3 8d 7d 15 54 00 07 d2 ae 57 b7 8a e2 3c 4d 6d 28 a5 05 f7 bf eb e4 79 38 7c 8e 85 3d 6a be 67 f7 23 cb 3e 14 7e cc 5f 0d 3e 0b 2c 52 78 5f c2 d6 76 fa 82 0c 7f 69 dd 03 71 76 4e 30 48 95 f2 57 3e 89 b4 7b 57 a9 d1 45 7c c5 4a b3 ad 2e 7a 92 6d f9 9e fc 29 c2 94 79 60 ac bc 82 8a 28 ac 8d 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 Data Ascii: 6?xgPeko!+a+JVhNiGLb~ZMc0.bX}TW<Mm(y8\|=jg#>~_>,Rx_viqvN0HW>{WE\|J.zm)y`((((((((((((((((((
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: fb 37 89 3c 23 3c 60 64 19 2e ae 91 89 f4 c7 d9 c8 fd 6b f5 42 8a dd 71 06 3d 6f 24 fe 48 c9 e4 d8 37 f6 5f de cf c9 2b bf f8 26 3f c6 6b 65 53 18 f0 fd d1 27 95 87 51 20 8f ae e8 c7 e9 58 97 9f f0 4e 7f 8e b6 a2 4f 2b c3 16 77 9b 0e 07 93 ab 5b 0d ff 00 4d ee bf ae 2b f6 22 8a d9 71 26 35 6e a2 fe 4f fc cc 9e 47 85 7d 5f df ff 00 00 fc 5c bb fd 83 3e 3c 59 38 59 3e 1f ce c4 8c e6 2d 42 ce 41 f9 ac c4 56 15 df ec 7f f1 a2 ca 3d f2 7c 37 d7 98 67 6e 22 b7 f3 0f e4 a4 9f c6 bf 70 28 ad 97 13 62 ba c2 3f 8f f9 99 3c 87 0f d2 4f f0 ff 00 23 f0 9e f3 f6 6b f8 b5 62 ec b2 fc 32 f1 77 ca 37 16 4d 12 e5 d4 0f f7 95 08 fd 6b 0a ef e1 27 8e 74 f5 56 ba f0 67 88 2d 95 8e 01 97 4b 9d 41 3e d9 4a fd f5 a2 b6 5c 51 57 ad 25 f7 b3 27 90 53 e9 51 fd c7 e1 0f c3 8f 1a fc Data Ascii: 7<#<`d.kBq=o$H7_+&?keS'Q XNO+w[M+"q&5nOG}_\><Y8Y>-BAV=\|7gn"p(b?<O#kb2w7Mk'tVg-KA>J\QW%'SQ
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: d4 f8 e5 ea 7c cc be 26 14 51 45 66 49 fa 89 fb 01 fc 00 d1 fc 13 f0 c3 4c f1 d5 e5 9c 77 1e 2a d7 a2 69 e3 ba 95 72 d6 b6 c4 90 89 1e 7a 6e 51 b9 88 e4 ee 03 a0 af ac ab c8 ff 00 64 a9 9e 7f d9 b7 e1 eb 48 c5 98 69 51 a8 27 d0 12 00 fc 00 02 bd 72 be df 0d 08 c2 94 54 57 43 e8 a8 c5 46 9a 48 28 a2 8a e9 36 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 Data Ascii: \|&QEfILw*irznQdHiQ'rTWCFH(6((((((((((((((((((((((((((((((((((((((
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: ab e7 ab f1 26 16 9e 94 93 97 e0 bf 1d 7f 03 d9 a3 91 e2 27 ad 46 a3 f8 bf c3 fc cf c7 bf 87 bf b2 cf c5 7f 8a 1e 53 f8 7f c0 fa ac d6 b2 60 ad e5 dc 5f 65 b7 23 d4 49 29 55 6f c0 9a fa 6f e1 ef fc 12 97 c4 ba 81 8a 7f 1a 78 c3 4f d1 a2 38 66 b4 d2 21 6b a9 48 f4 2e db 15 4f b8 0e 2b f4 c2 8a f9 da fc 47 8b ab a5 24 a0 be f7 f8 ff 00 91 ee 51 c9 30 d4 f5 a8 dc bf 05 f8 7f 99 f3 77 c3 bf f8 27 d7 c1 8f 00 79 72 cb e1 f9 7c 53 78 98 ff 00 48 f1 04 fe 78 ff 00 bf 4a 16 23 f8 a1 e9 5f 41 e8 fa 2e 9d e1 eb 08 ac 34 ab 0b 6d 32 c6 21 88 ed ac e1 58 a2 41 ec aa 00 15 7a 8a f9 ea d8 9a d8 87 7a b3 72 f5 67 b5 4a 85 2a 2a d4 e2 97 a0 51 45 15 cc 6e 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 Data Ascii: &'FS`_e#I)UooxO8f!kH.O+G$Q0w'yr\|SxHxJ#_A.4m2!XAzzrgJ**QEnQEQEQEQEQEQEQEQEQEQE
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 53 90 25 91 98 03 ed 93 55 ab 65 c2 dd eb 7f e4 bf f0 4c 9f 10 76 a5 f8 ff 00 c0 3f 7c 6f 7e 2f f8 0f 4d 6d b7 7e 36 f0 ed ab 6d df 89 b5 58 10 ed f5 e5 fa 70 6a df 84 7e 24 78 4b e2 01 ba 1e 17 f1 4e 8b e2 43 69 b7 ed 1f d9 1a 84 37 5e 4e ec ed df e5 b1 db 9d ad 8c f5 da 7d 2b f1 03 e0 d7 c0 ff 00 17 7c 78 f1 64 5a 0f 84 f4 d3 75 2e 41 b8 bc 97 29 6d 67 19 3f 7e 57 c1 da 3a f0 32 c7 18 00 9e 2b f5 fb f6 63 fd 99 3c 3f fb 33 f8 3e 7d 37 4b 9e 4d 4b 58 d4 3c b9 35 4d 56 51 b4 dc ba 06 da 15 32 42 22 ef 7c 0e 4f cc 72 4d 78 d9 96 5b 86 cb e1 cb ed 5c a7 da df 9f 63 d3 c0 e3 ab e3 65 7f 67 68 77 ff 00 23 d9 68 a2 8a f9 b3 dd 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a Data Ascii: S%UeLv?\|o~/Mm~6mXpj~$xKNCi7^N}+\|xdZu.A)mg?~W:2+c<?3>}7KMKX<5MVQ2B"\|OrMx[\ceghw#h(((((((((((
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: c4 dc 05 d3 ac 55 db 1f ef 4c 64 e7 dc 63 db 15 e5 54 ce b0 74 f6 6e 5e 8b fc ec 75 c7 03 5a 5b ab 1f a8 b5 c7 78 a3 e3 1f 81 7c 14 59 75 cf 17 e8 ba 64 ab d6 09 ef a3 12 fe 09 9d c7 f0 15 f9 13 e2 8f 8c 5e 3a f1 a8 65 d7 3c 5f ad 6a 71 37 58 67 be 90 c5 f8 26 76 8f c0 57 1d 5e 5d 4e 20 ff 00 9f 54 fe f7 fd 7e 67 5c 32 ef e6 91 fa 97 e2 8f db eb e1 17 87 b7 2d ae a7 a8 78 82 45 ea 9a 65 8b e3 3f ef 4b e5 a9 fc 09 af 25 f1 37 fc 14 de 05 2e 9e 1e f0 34 92 7f 76 7d 4e f8 2e 3e b1 a2 9f fd 0e be 0e a2 bc ba 99 de 32 7b 35 1f 45 fe 77 3a e3 81 a3 1d d5 cf a6 bc 49 ff 00 05 0b f8 af ad 6e 16 12 68 fa 02 f3 b4 d9 58 89 18 0f 73 31 70 7f 21 5e 55 e2 4f da 23 e2 6f 8b 43 0d 4f c7 3a e4 b1 b8 c3 43 0d e3 41 1b 0f 74 8c aa 9f ca bc ea 8a f3 6a 63 31 15 7e 3a 8d fc Data Ascii: ULdcTtn^uZ[x\|Yud^:e<_jq7Xg&vW^]N T~g\2-xEe?K%7.4v}N.>2{5Ew:InhXs1p!^UO#oCO:CAtjc1~:
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 23 35 69 2b 94 a4 e3 aa 67 ce 9e 24 fd 81 fe 10 6b c1 8d b6 93 7f a1 3b 0e 5f 4d bf 7e 0f a8 12 f9 8a 3f 2a f2 bf 12 ff 00 c1 32 74 e9 77 bf 87 bc 71 75 6d fd d8 75 3b 25 9b 3f 57 46 4c 7f df 26 be df a2 bc fa 99 66 0e a7 c5 4d 7c b4 fc 8e 88 e2 ab 47 69 1f 99 3e 26 ff 00 82 77 7c 52 d1 84 8f a6 cb a2 eb e8 39 54 b5 bc 31 48 df 51 2a aa 83 ff 00 02 af 27 f1 3f ec d9 f1 47 c2 1e 61 d4 fc 0b ad 24 71 fd f9 ad 6d 8d cc 6b ee 5e 2d cb 8f 7c d7 ec 75 15 e6 d4 c8 70 d2 f8 24 d7 e3 fd 7d e7 54 73 0a ab 74 99 f8 59 73 6d 35 94 ef 0d c4 52 41 32 70 d1 c8 a5 59 4f b8 35 15 7e e1 6b de 14 d1 3c 53 0f 93 ad 68 fa 7e af 0e 31 e5 df da a4 eb 8f a3 03 5e 53 e2 8f d8 d3 e0 ff 00 8a 8b 3c be 0f b7 d3 a6 3d 24 d2 e5 92 d7 6f d1 11 82 7e 6b 5e 65 4e 1f aa bf 87 34 fd 74 ff Data Ascii: #5i+g$k;_M~?2twqumu;%?WFL&fM\|Gi>&w\|R9T1HQ'?Ga$qmk^-\|up$}TstYsm5RA2pYO5~k<Sh~1^S<=$o~k^eN4t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49912	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:09 UTC	810	OUT	GET /wp-content/uploads/2020/11/NC-State-Foundation-01.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:09 UTC	208	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:09 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:26:37 GMT Accept-Ranges: bytes Content-Length: 38649 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:09 UTC	7984	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 a9 02 0d 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIFHH;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CC"
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: b0 ff 00 e8 9a fb 8e be 1c ff 00 82 56 7f c9 3e f1 cf fd 85 21 ff 00 d1 35 f7 1d 56 59 fe e7 4f fa ea 63 c7 3f f2 51 e2 fd 57 fe 92 8f c3 1f 8e 7f f2 5b 7e 21 7f d8 c5 a8 7f e9 4c 95 f5 e7 fc 12 9a 00 da ef c4 79 b1 96 4b 6b 14 07 ea d3 9f fd 96 be 43 f8 e7 ff 00 25 b7 e2 17 fd 8c 5a 87 fe 94 c9 5f 61 7f c1 28 ff 00 e4 25 f1 2f fe b8 e9 df fa 15 c5 7c 96 5f ff 00 23 08 fa bf c9 9f d0 dc 5f a7 07 d4 ff 00 05 3f fd 2a 07 e8 65 7e 56 7f c1 4c ee 5a 7f da 2e d1 09 c8 87 41 b5 41 f8 cb 33 7f 5a fd 53 af ca 3f f8 29 47 fc 9c a3 7f d8 1a d3 f9 c9 5f 47 9d 7f ba fc d1 f8 cf 86 2a f9 ff 00 fd b9 2f d0 f9 56 8d a0 f6 14 51 5f 04 7f 5b 06 07 a0 a2 8a 28 00 a2 8a 28 03 bf f8 0b f1 31 be 0f 7c 60 f0 bf 8b 88 91 ed f4 eb b0 6e 92 2e 5d ed dc 18 e6 00 77 3b 1d b1 ef 8a Data Ascii: V>!5VYOc?QW[~!LyKkC%Z_a(%/\|_#_?e~VLZ.AA3ZS?)G_G/VQ_[((1\|`n.]w;
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 6d c8 ce d4 0c d8 c8 ce 3a d7 25 5f 5f ff 00 c1 32 bc 16 9a f7 c7 3d 4f 5e 9a 13 24 5a 0e 94 ef 14 98 e1 27 99 84 6b f9 c7 e7 57 26 16 97 b7 af 0a 7d df e1 d4 fa 3e 20 cc 1e 55 95 62 31 b1 7a c2 2e df e2 da 3f 8b 47 9e 7e d6 bf b3 76 95 fb 35 6b be 1f d2 2c bc 47 73 af de 6a 56 f2 dd 4c 27 b4 58 16 18 c3 05 4c 61 9b 24 91 26 7a 63 68 eb 9e 38 2f 80 bf 0c a1 f8 c9 f1 6f c3 de 0d b8 d4 24 d2 e1 d5 64 95 1a f2 28 84 ad 1e d8 5e 41 85 24 03 92 80 75 ef 5e 83 fb 75 f8 fc f8 fb f6 95 f1 39 49 7c cb 3d 14 a6 8d 6e 33 9d be 48 3e 68 ff 00 bf cd 2d 53 fd 87 bf e4 ea bc 01 ff 00 5f 17 1f fa 4b 35 74 4e 14 a5 8d f6 70 5e ef 32 56 f9 d8 f1 30 d8 9c 7d 2e 17 78 bc 4d 4b d7 f6 52 9f 35 95 d3 e5 72 5a 5a da 68 b6 e8 7d 41 ff 00 0e a6 d2 3f e8 a2 df 7f e0 ad 3f f8 e5 1f Data Ascii: m:%__2=O^$Z'kW&}> Ub1z.?G~v5k,GsjVL'XLa$&zch8/o$d(^A$u^u9I\|=n3H>h-S_K5tNp^2V0}.xMKR5rZZh}A??
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 7f da 17 f6 e3 f1 0f ed 03 e0 14 f0 a5 d7 87 ac 74 2b 33 79 1d d4 d2 da dc 3c 8d 28 40 d8 42 18 01 8d c4 37 d5 45 7c d1 5d 59 8e 22 95 79 c6 34 7e 18 ab 1e 0f 05 e4 d8 ec af 0f 5e b6 66 bf 7f 56 7c cf 54 f4 49 5b 55 f3 0a f7 4f d8 7b fe 4e ab c0 1f f5 f1 71 ff 00 a4 b3 57 85 d7 6b f0 6b e2 6d c7 c1 bf 89 7a 27 8c ad 2c 21 d4 ee 34 b7 91 d2 d6 77 28 8e 5e 27 8f 92 bc 8c 6f cf e1 5c 18 79 aa 75 a1 39 6c 9a 7f 89 f5 d9 c6 1e a6 2f 2d c4 e1 e8 ab ca 70 9a 5e ae 2d 2f c4 fa ab fe 0a 63 e1 5d 73 c4 1f 1a 7c 37 2e 97 a2 ea 5a 94 29 e1 f8 d5 a5 b4 b3 92 54 56 fb 4c e7 05 95 48 ce 30 71 ee 3d 6b e4 4f f8 56 be 2f ff 00 a1 53 5c ff 00 c1 6c df fc 4d 7d 83 ff 00 0f 54 f1 47 fd 08 7a 47 fe 06 cb ff 00 c4 d1 ff 00 0f 54 f1 47 fd 08 7a 47 fe 06 cb ff 00 c4 d7 b1 88 58 Data Ascii: t+3y<(@B7E\|]Y"y4~^fV\|TI[UO{NqWkkmz',!4w(^'o\yu9l/-p^-/c]s\|7.Z)TVLH0q=kOV/S\lM}TGzGTGzGX
2024-05-02 14:33:09 UTC	6665	IN	Data Raw: bf 04 b1 04 a9 03 05 bf 39 22 91 e0 95 24 8d da 39 10 86 57 53 82 a4 74 20 d7 ed 0f ec 37 fb 1e 78 67 e0 c7 c3 6d 07 c4 ba c6 91 6f 7f f1 03 55 b5 4b db ab fb b8 f7 bd 90 90 07 58 22 07 84 2a a4 06 61 cb 36 ee 76 ed 00 29 d9 1f 93 de 22 f8 b1 f1 52 ea 71 7d ad f8 bf c5 cd 2c c7 2b 35 ee a3 74 37 7f ba 59 bf 95 76 ff 00 08 ff 00 6d ff 00 8c 3f 08 35 4b 79 ec fc 61 7f ae e9 c8 c0 cb a4 eb d3 3d e5 bc ab dd 46 f2 59 3e a8 ca 6b f7 2f 59 d1 34 ef 11 e9 d3 69 fa ad 85 ae a7 61 30 db 2d ad e4 2b 2c 52 0f 46 56 04 1f c6 bf 15 7f e0 a0 ff 00 00 74 9f 80 5f 1e 1a d7 c3 76 82 c7 c3 5a dd 92 6a 56 76 a8 c5 96 d9 8b 32 4b 12 92 49 c0 64 2c 07 60 e0 0e 94 02 77 3f 5c fe 00 7c 6b d2 3f 68 1f 85 5a 2f 8d 74 75 30 47 7a 85 2e 6c d9 83 3d a5 c2 f1 2c 44 f7 c1 e8 70 37 29 Data Ascii: 9"$9WSt 7xgmoUKX"*a6v)"Rq},+5t7Yvm?5Kya=FY>k/Y4ia0-+,RFVt_vZjVv2KId,`w?\\|k?hZ/tu0Gz.l=,Dp7)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49913	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:09 UTC	557	OUT	GET /wp-content/uploads/2018/06/NSF_Logo.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:09 UTC	209	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:09 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:24:32 GMT Accept-Ranges: bytes Content-Length: 1899601 Connection: close Content-Type: image/png
2024-05-02 14:33:09 UTC	7983	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 ba 00 00 06 c3 08 06 00 00 00 be 46 f4 81 00 00 20 00 49 44 41 54 78 01 ec bd 0d 98 24 59 59 e7 9b 59 dd d3 d3 d3 0c 4d 33 0c e3 30 0e cd 80 c3 f0 e1 38 b2 b3 2c e2 2c 8b ec 2c d7 65 11 15 01 61 c4 8f 45 16 01 15 54 14 17 f1 ae fa b0 2e 7e ac d7 c7 c7 55 fc b8 5e af eb 17 c8 65 41 58 44 45 3e e5 63 44 96 45 04 45 44 9c 45 64 47 60 59 44 18 66 ba ab 2a 33 ef ff ff be e7 44 44 56 65 55 57 75 57 55 67 64 fe a2 3b f2 9c 38 71 e2 c4 89 5f 64 bc 15 f9 fe e3 3d 31 9c 4c 26 03 26 08 40 00 02 10 80 00 04 20 00 01 08 40 00 02 10 80 00 04 20 00 01 08 40 00 02 10 80 00 04 20 00 01 08 f4 8d c0 4a df 3a 4c 7f 21 00 01 08 40 00 02 10 80 00 04 20 00 01 08 40 00 02 10 80 00 04 20 00 01 08 40 00 02 10 80 00 04 20 60 Data Ascii: PNGIHDRF IDATx$YYYM308,,,eaET.~U^eAXDE>cDEEDEdG`YDf*3DDVeUWuWUgd;8q_d=1L&&@ @ @ J:L!@ @ @ `
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 6f f6 06 01 08 40 00 02 10 80 00 04 20 00 81 dd 11 b0 a8 71 e8 42 09 1b 1a ce 10 c1 6b 77 ec 76 50 5b 02 91 df cd 95 c3 fe 59 55 0a 79 69 f3 86 6d bc d6 86 75 8d b0 d5 11 bb 5c 65 c3 e2 86 ad 62 b1 19 9e 70 d6 4a 95 79 fd 17 5e ff f5 29 6c 29 1f c3 16 46 79 47 f8 52 97 a3 9d e1 e0 06 a5 0c 5f b8 05 cb 9d 16 7b a8 c2 f1 78 55 d5 77 70 02 77 da 28 f5 20 00 01 08 40 00 02 10 80 00 04 20 00 81 7d 25 80 d0 b5 af 78 69 1c 02 10 80 00 04 20 00 01 08 40 00 02 7b 41 a0 0a 30 4e 71 c0 ef 05 51 b7 f1 0f ff eb 7d 2b 52 89 ae 97 40 e4 38 a9 a6 d9 10 8e 9a a5 8d 19 f3 cf 73 50 c5 af d0 ba a2 68 e3 b9 d9 b8 bc b1 ad ce b2 05 cd da 05 a5 b5 3f 2e 6a a2 b9 5c ae 39 97 9b f7 73 95 b2 e1 35 5a e5 e8 34 a6 b3 20 30 99 8c 11 b8 ce 82 1b 9b 40 00 02 10 80 00 04 12 0f b9 6f 00 Data Ascii: o@ qBkwvP[YUyimu\ebpJy^)l)FyGR_{xUwpw( @ }%xi @{A0NqQ}+R@8sPh?.j\9s5Z4 0@o
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: d7 ab a2 cc a5 65 5d 18 1c d7 cd 9a 75 eb 5a af 59 de a3 cc 76 51 5d a9 68 59 b5 d3 b1 14 81 2b a3 bb bc 73 75 50 8e 6c f7 db d6 b9 44 7a 3d f6 f7 5f f9 fd 3f f3 a8 c7 fe c8 2d 7b d4 bd f3 dc 4c 39 27 e7 b9 17 ec be 2f 04 7c cd 7b 76 34 39 93 6c c3 f5 72 9e 3f a1 92 98 b2 71 2e d4 7d 97 e7 14 94 47 83 95 c3 7a d7 99 cb 6c 55 c2 0e 6a 5d 91 d1 b3 6e b9 1e b5 ae b6 75 e7 4b 34 ba 75 d9 e6 ef ff ee 2d 72 d2 3b 92 cb 42 57 89 e2 5a ef 44 6e 55 a1 6b 43 59 1d 9e 3a 4d ef e4 77 64 13 df 5d fb 4c 0a 81 e5 20 a0 07 56 fc 30 e0 fa ed cb 71 b8 1c 25 04 20 00 81 73 24 e0 df 3e 4c 10 80 00 04 20 00 01 08 40 60 26 01 89 4a 2b 9a 6f d0 7c 7f bd 4b e1 f0 58 8e 8a 78 67 96 1d 16 f1 6e 05 bf 5f 41 ef d2 2a ef cf ca f5 25 f2 aa 46 60 75 d2 5a 37 eb ab 2d b5 33 d2 b6 47 ef Data Ascii: e]uZYvQ]hY+suPlDz=_?-{L9'/\|{v49lr?q.}GzlUj]nuK4u-r;BWZDnUkCY:Mwd]L V0q% s$>L @`&J+o\|KXxgn_A*%F`uZ7-3G
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 79 ba 0a 01 08 40 60 01 09 20 74 2d e0 49 e5 90 20 00 01 08 40 00 02 07 4d 40 ce d0 f7 6b fe 98 9d a2 ed d4 2e d8 89 5a a7 8f ff d5 af d5 ac 52 97 b7 eb da 15 b3 ca da b5 b3 72 9d 5d 84 77 36 5a d6 87 a3 13 aa 53 d7 75 72 78 ae a8 a2 75 76 ec 96 79 30 7c ac 72 1e c6 90 09 02 10 98 4b 02 c3 17 aa 5b 37 b6 5d ab 8e 53 3b 73 ab f3 b6 38 76 23 92 6b 34 38 7a fc 9e aa 5e 05 ad ac 1f ce df 22 2c ab 44 5e d8 f8 df 71 ea 6a 13 7b 67 17 76 2a 43 16 56 db 17 76 71 30 e8 0e 69 68 85 2b ec b6 d2 92 7f 96 6c 69 33 5c e4 c2 a2 e1 c0 20 d0 1f 02 3f a0 ae 3e b4 76 b7 8a 50 69 d0 d2 0e 86 ad 53 14 d7 c0 f6 50 b3 a3 b9 a2 5e a8 4f 69 17 5d 3f ec a0 3f c3 ee d5 e5 da f2 74 5a 2d 63 4d bd 36 05 2c a7 6e 2d 53 67 fc 5e 2e 47 70 b5 eb 9d 9f 6e 4f 4b 9f d0 fc c1 4d a5 14 40 60 Data Ascii: y@` t-I @M@k.ZRr]w6ZSurxuvy0\|rK[7]S;s8v#k48z^",D^qj{gv*CVvq0ih+li3\ ?>vPiSP^Oi]??tZ-cM6,n-Sg^.GpnOKM@`
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 00 dc f5 fe bf 83 83 eb 2a 7d c1 d4 2f 78 f3 d1 7f 69 c4 9c 4e 19 e2 66 7d 11 4d e3 4f a6 b3 e1 ea 9c 5d 18 66 f3 9f 0d b4 61 a4 e5 f1 85 71 24 2d ee 2d 1e 67 e8 fc a3 e5 20 7b c5 15 ef 7f c6 03 67 4b 2e 6a 21 b0 bd 10 90 73 6b 4e f1 22 8d 5a 0e ae 91 4e de 2c 9e 1d 86 57 ad 21 1b 6f 55 ea 1c 56 da 06 c8 fb 71 85 3c 9e b0 19 73 39 cd d5 1c 5e c7 df fe 74 1b a5 30 4c 85 53 4b 69 3a b5 ec ec 0a 63 2e b2 bd 4a cd 97 eb 95 34 e2 a4 df 65 b3 f6 93 c1 5c 6e 81 21 0c 46 b3 ba 6c 07 62 e2 9b cd c2 d9 15 a5 a8 f3 75 82 9f 79 0f 8e 93 ef fc 7d a3 93 cf fa 3e 4d 8d 08 26 52 d1 2a 53 a4 d3 21 48 e4 87 e5 8e f1 0c ed ad 3f a0 12 8f 7e 7b df 8d d7 bc f7 67 14 cf 50 dc db 71 54 a6 10 d8 42 08 8c f7 9f b1 4f c3 f9 3d c5 67 29 ca 8b af a0 75 90 4e ae ee 47 00 87 75 72 e1 Data Ascii: }/xiNf}MO]faq$--g {gK.j!skN"ZN,W!oUVq<s9^t0LSKi:c.J4e\n!Flbuy}>M&RS!H?~{gPqTBO=g)uNGur
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 4b a6 18 a7 9a e1 06 5b d4 78 50 c6 b4 13 06 1d cc 3e 43 83 68 18 b9 e2 e4 16 46 54 82 5a eb ff 29 e7 3c 72 14 ce 2e 68 32 0d d9 48 b6 47 79 de af 04 4e 18 ca 28 bb 37 a5 19 a6 cb 49 ef d2 b3 d5 f8 3f c4 58 47 1f 14 f5 b2 1b fe e9 d2 f7 aa fc 1e 39 bd ae 38 e5 ac 07 d7 49 af 0e aa f5 cf dc 7a db 37 99 cf 13 d4 d3 85 9a 83 87 29 c5 20 fb 70 cd eb 19 4a 35 bb cc e7 54 b0 21 74 50 27 a3 a9 9d 02 66 8d 13 03 b1 9e 66 38 b7 7c a2 40 ba 83 a1 d5 46 58 9c 5e f0 cd 8f 38 bd 85 54 0c ad f9 78 42 f2 9d 51 96 da 65 1d 5c 74 1e 6d 3d 66 e4 9b 12 34 17 06 f7 12 e3 0b 6a 5d 0b 81 0e 81 6e df b4 36 05 19 7d 24 e7 0b 7a e6 1d 30 d4 8d 52 a3 c7 df 09 18 c5 df 35 c0 b9 d5 68 16 a0 0a 55 76 34 f3 8d 46 27 de f1 1e 48 f2 63 0d e3 f1 b1 54 68 4f 96 1e 53 8e 11 70 6d 74 74 39 Data Ascii: K[xP>ChFTZ)<r.h2HGyN(7I?XG98Iz7) pJ5T!tP'ff8\|@FX^8TxBQe\tm=f4j]n6}$z0R5hUv4F'HcThOSpmtt9
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 95 71 c7 ae 0b 1a fd e4 5e 9c 3c ee bb 6b 6f 0e 93 c4 d9 d2 2c 4e 95 27 6b 77 6e 89 79 6f f8 a4 0e 85 0e c7 49 2e fe 56 75 4e 2f 58 15 43 55 c6 e7 0a 14 1e 5f 58 8e 2e 81 b0 fd 83 3e c7 77 a7 b8 58 0b 87 5f ef db ff 9e eb 0e 0a 81 42 a0 10 28 04 b6 2a 02 e5 e8 da aa 33 53 e3 2a 04 0a 81 42 60 17 23 50 ce ae 1d 34 f9 e3 39 5e 98 71 00 33 5a 67 3c 4a e3 88 53 ee 75 3c 3a 78 e7 87 29 5d de 58 b4 7c 0d ed b7 67 48 53 c0 d2 7b 4b 93 63 6f 7c c4 88 94 06 a5 34 2a 86 51 0f 63 2d 92 c4 db 04 19 eb 66 68 e8 8c a9 e6 10 9f 78 c3 f8 47 0b ca aa 48 c3 69 96 81 33 85 89 e6 d1 b4 39 73 1b ea 09 ee 57 b5 dd 0d 74 99 a8 0f e1 39 dc 46 1b 26 74 4e 98 6e 17 d4 a3 bf 2e 95 e7 31 76 86 d2 69 c9 f0 f7 6d 8c 6b 7f 53 ad 2e ef 73 c0 2b 1e 63 d9 89 8b 53 02 51 14 1f f5 c8 8d ce Data Ascii: q^<ko,N'kwnyoI.VuN/XCU_X.>wX_B(3SB`#P49^q3Zg<JSu<:x)]X\|gHS{Kco\|4*Qc-fhxGHi39sWt9F&tNn.1vimkS.s+cSQ
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: b2 0b 47 58 3a b8 70 90 71 fa eb 0c 45 4e 85 dd 59 f1 1c 45 1c 64 38 c3 70 92 e1 1c c3 19 b6 aa c0 da 99 e7 a2 09 1e fb 34 97 9c 58 ed f1 86 43 47 17 ef c4 d3 7f bd 1b 8f 93 37 cd b9 25 c2 f0 94 d7 1e b5 7f e7 a5 7f 1d 8e 2f d5 3d 10 a7 97 64 a7 6f 8a 6e 70 6a cd b1 37 4b 96 fe 2b 72 45 c7 a8 6b 34 7d 30 e0 11 a5 e8 8f 69 ba 30 42 73 9a 46 ae 85 ac c8 72 a5 9b 8e 80 67 47 17 e6 34 03 f3 e8 b2 32 cc 26 65 f4 89 0b 7f 86 e7 98 73 95 cd 27 8e 39 e9 99 ff 3c 2f 8e 1e a0 e2 85 e2 bc 2c 65 55 ba 7e 08 2c 75 70 31 49 83 89 5c bf ae 4b 72 21 50 08 14 02 85 40 21 b0 ee 08 94 a3 6b dd 21 ae 0e 0a 81 42 a0 10 28 04 b6 0a 02 f5 28 c3 0d 9b 09 1c 5d e7 fa e7 e2 9c c6 f2 77 e8 d5 7c 89 86 67 8a 6f 68 45 d9 b0 e1 57 47 47 84 c0 d4 94 0d db ca ac e5 62 4e e3 d0 28 6e 43 Data Ascii: GX:pqENYEd8p4XCG7%/=donpj7K+rEk4}0i0BsFrgG42&es'9</,eU~,up1I\Kr!P@!k!B((]w\|gohEWGGbN(nC
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: 81 88 c4 b5 6d 51 0f 44 c1 bd 90 8e 80 23 e0 08 38 02 8e 40 5f 23 e0 44 57 5f 37 8f 17 ce 11 70 04 1c 01 47 60 b0 10 c0 63 78 fa 48 3f 58 25 ef a4 b4 10 43 3c 1e f5 7c 72 dd 3d 7c 66 37 45 81 77 d0 3b ad 79 24 7c 8d 46 d1 07 7b 25 52 28 18 0f 37 64 16 89 6b c9 b8 b9 b0 08 a8 b0 5b 1b 45 09 2d 36 87 1e 51 58 8b 8f 2a a4 1f dd d0 24 b9 be 3e f7 9d 5c 77 21 87 0f 41 3f e3 e4 f7 7d e9 eb d0 53 0b 5b 63 cf ad 3b 08 28 01 da 9d b4 ca 53 01 c9 85 a3 ce c6 af 1e 13 92 8b df e2 d2 63 0b 33 72 8b 8f 36 a6 39 1f 07 45 49 69 dd dc 0c bf 28 8a 45 1d 66 b3 38 dd ea 3c 2c 43 bc ae da 46 30 44 01 1c ab d7 46 ee 2e 58 47 ac 01 ba 80 d8 30 25 31 36 5e b9 0a 44 c6 d9 42 68 60 d8 06 42 43 4c fa 51 d9 d0 35 53 7d ed 1a f7 1f da 63 b7 c5 69 d3 4c d7 20 6d c6 f7 68 73 47 40 1a Data Ascii: mQD#8@_#DW_7pG`cxH?X%C<\|r=\|f7Ew;y$\|F{%R(7dk[E-6QX*$>\w!A?}S[c;(Sc3r69EIi(Ef8<,CF0DF.XG0%16^DBh`BCLQ5S}ciL mhsG@
2024-05-02 14:33:09 UTC	8000	IN	Data Raw: b1 a4 06 cd f1 8e d7 2e 54 c7 1d 78 18 1a c9 eb 50 8a 80 cc 9e b9 fe db 7c 3e 15 b2 4b fa 47 36 0f ea b8 a7 9b 73 1b 85 ea 1a 46 b7 74 b0 24 79 1d cc 53 6f bd fe b3 fe cd ae d2 96 f0 00 47 60 7e 08 8c a5 44 17 c9 2e ee ec c2 f1 85 e1 a5 06 1d 97 58 66 84 63 0c b3 31 cb 3c 6d bc ce 2f 7f bf db 11 70 04 86 1f 81 a1 78 58 19 fe 66 f2 1a 3a 02 8e 80 23 e0 08 38 02 73 43 00 3b b9 8e c2 9d 5f 85 16 92 4b de 8d 95 dd 58 10 12 88 d0 20 90 58 24 b7 b0 7b 2b e1 2e ae ea b4 e8 ec bb 5c 14 96 43 f3 3e 11 9c 1b d9 05 37 d3 80 56 91 03 af aa 73 f2 08 f8 ba ea 7f 04 4c e6 23 22 1f 5c 28 04 aa 40 fa 6d 02 70 23 bb 74 57 17 c9 ae 31 0a c4 c7 60 ae ef cf da 49 4d 50 34 23 bd fa b3 94 bd 29 15 c7 2b c7 b4 8e cc de e4 b1 28 a9 2e 43 ae 78 fd 17 8a 1d 96 42 70 b3 07 53 84 97 Data Ascii: .TxP\|>KG6sFt$ySoG`~D.Xfc1<m/pxXf:#8sC;_KX X${+.\C>7VsL#"\(@mp#tW1`IMP4#)+(.CxBpS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49915	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:10 UTC	569	OUT	GET /wp-content/uploads/2018/02/PlayCoreNewTag_FINAL.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:10 UTC	208	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:10 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:23:49 GMT Accept-Ranges: bytes Content-Length: 91184 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:10 UTC	7984	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 32 0a ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 02 1e 08 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82C!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$"
2024-05-02 14:33:10 UTC	8000	IN	Data Raw: a2 be 76 9f cc 1f 6a f4 20 43 00 41 04 1a f3 2a 52 9d 37 cb 35 66 6c a4 9e a8 5a 28 a2 b3 18 51 45 14 00 51 45 14 01 53 50 d5 b4 fd 26 35 97 51 be b5 b3 8d ce d5 6b 89 56 30 c7 d0 12 7a d5 1f f8 4d 3c 31 ff 00 43 16 8f ff 00 81 91 ff 00 f1 55 e5 bf b5 37 fc 8a 7a 47 fd 7f ff 00 ed 36 af 99 eb d8 c1 e5 91 c4 52 f6 8e 56 39 ea 56 71 95 ac 7d d5 ff 00 09 a7 86 3f e8 62 d1 ff 00 f0 32 3f fe 2a 8f f8 4d 3c 31 ff 00 43 16 8f ff 00 81 91 ff 00 f1 55 f0 b5 25 75 7f 61 c7 f9 df dc 47 d6 5f 63 ee af f8 4d 3c 31 ff 00 43 16 8f ff 00 81 91 ff 00 f1 54 7f c2 69 e1 8f fa 18 b4 7f fc 0c 8f ff 00 8a af 85 a8 a3 fb 0e 3f ce fe e0 fa cb ec 7d d3 ff 00 09 a7 86 3f e8 62 d1 ff 00 f0 32 3f fe 2a 8f f8 4d 3c 31 ff 00 43 16 8f ff 00 81 91 ff 00 f1 55 f0 b5 25 1f d8 71 fe 77 f7 Data Ascii: vj CAR75flZ(QEQESP&5QkV0zM<1CU7zG6RV9Vq}?b2?M<1CU%uaG_cM<1CTi?}?b2?*M<1CU%qw
2024-05-02 14:33:10 UTC	8000	IN	Data Raw: 82 1a d7 fd fd 8f ff 00 88 a3 fb 5f 0f e7 f7 07 d5 e6 7c bd 49 5f 51 7f c3 2f f8 3f fe 82 1a d7 fd fd 8f ff 00 88 a3 fe 19 7f c1 ff 00 f4 10 d6 bf ef ec 7f fc 45 1f da f8 7e ef ee 0f ab cc f9 76 be f9 d2 bf e4 17 67 ff 00 5c 13 ff 00 41 15 e5 1f f0 cb fe 0f ff 00 a0 86 b5 ff 00 7f 63 ff 00 e2 2b d7 6d e1 5b 7b 78 a0 52 4a c6 81 06 7a e0 0c 57 95 99 e3 29 e2 39 7d 9f 4b fe 86 f4 69 b8 5e e4 95 1d c5 bc 37 70 49 04 f1 24 b1 48 a5 1d 1c 02 ac 0f 50 47 71 52 51 5e 49 b9 e5 57 bf 03 5b 4c bf 96 ff 00 c1 1e 26 d4 3c 34 f2 9d cf 6c 99 92 06 3f 4c 8e 3e b9 a8 65 f8 3b e2 9f 10 e2 1f 16 7c 42 bf bd b1 fe 3b 5b 58 bc a1 20 f7 39 c7 e6 a6 bd 6e 8a ea 58 ca bd f5 ef 65 7f bf 72 3d 9c 4c af 0d 78 5f 49 f0 96 96 9a 66 8f 66 96 b6 c9 ce 17 96 76 ee cc 4f 24 fb 9a d5 a2 Data Ascii: _\|I_Q/?E~vg\Ac+m[{xRJzW)9}Ki^7pI$HPGqRQ^IW[L&<4l?L>e;\|B;[X 9nXer=Lx_IffvO$
2024-05-02 14:33:10 UTC	8000	IN	Data Raw: 75 2b 4d 23 7a b3 1c fe 55 4e be db 0d 4b d9 52 8d 3e c7 9d 39 73 36 c5 a4 a2 8a dc 91 6b eb 3f d9 d3 4e 36 3f 0c ed a6 65 c1 bc b9 9a 7f c3 76 cf fd 92 be 4d 44 69 1d 51 14 b3 31 00 00 39 26 be e8 f0 6e 86 3c 37 e1 5d 2b 48 c0 0d 69 6b 1c 6f 8e ef 8f 98 fe 79 af 17 3a a9 6a 51 87 77 f9 1d 18 75 ef 5c d9 a2 8a 2b e6 8e c3 c5 3f 6a 6f f9 14 f4 8f fa ff 00 ff 00 da 6d 5f 34 57 d2 ff 00 b5 37 fc 8a 5a 47 fd 7f ff 00 ed 36 af 99 eb ea f2 8f f7 75 ea ce 1a ff 00 18 b4 52 51 5e a1 88 f8 bf d6 27 d4 57 df b1 7f ab 5f f7 45 7c 05 17 fa c4 fa 8a fb f6 2f f5 6b fe e8 af 9f cf 3e c7 cf f4 3a b0 dd 47 d1 45 15 e0 1d 41 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 Data Ascii: u+M#zUNKR>9s6k?N6?evMDiQ19&n<7]+Hikoy:jQwu\+?jom_4W7ZG6uRQ^'W_E\|/k>:GEAEPEPEPEPEPEPEPEPEPEPEPEPE
2024-05-02 14:33:11 UTC	8000	IN	Data Raw: 7f ff 00 ed 36 af 99 eb e9 8f da 9b fe 45 2d 23 fe bf ff 00 f6 9b 57 cd 15 f5 99 47 fb b2 f5 67 0d 7f 8c 4a 29 68 af 4c c4 74 5f eb 13 ea 2b ef d8 bf d5 af fb a2 be 02 8b fd 62 7d 45 7d fb 17 fa b5 ff 00 74 57 cf e7 9f 63 e7 fa 1d 58 6e a3 eb e1 ef 88 bf f2 3f 78 8b fe c2 37 1f fa 30 d7 dc 35 f1 ff 00 8e fe 1e f8 ba fb c6 ba ed d5 af 86 f5 59 a0 9a fe 77 8e 44 b6 62 ae a5 c9 04 1c 72 2b 1c 9a 71 8d 49 73 3b 68 56 21 36 95 8f 3c a2 ba 6f f8 56 5e 35 ff 00 a1 5b 59 ff 00 c0 57 ff 00 0a 3f e1 59 78 d7 fe 85 6d 67 ff 00 01 5f fc 2b e8 7d bd 3f e6 5f 79 cb ca fb 1c cd 15 d3 7f c2 b2 f1 af fd 0a da cf fe 02 bf f8 51 ff 00 0a cb c6 bf f4 2b 6b 3f f8 0a ff 00 e1 47 b7 a7 fc cb ef 0e 57 d8 e6 68 ae 9b fe 15 97 8d 7f e8 56 d6 7f f0 15 ff 00 c2 8f f8 56 5e 35 ff 00 Data Ascii: 6E-#WGgJ)hLt_+b}E}tWcXn?x705YwDbr+qIs;hV!6<oV^5[YW?Yxmg_+}?_yQ+k?GWhVV^5
2024-05-02 14:33:11 UTC	8000	IN	Data Raw: 7c 62 b8 f0 15 d2 e9 9a 9b 49 3e 85 33 72 a3 96 b5 63 fc 68 3d 3d 57 f1 1c f5 fa b3 4e d4 6d 35 6b 28 6f ac 6e 23 b9 b6 9d 43 c7 2c 67 2a c0 f7 15 f1 f8 cc 1c f0 f3 b3 db a3 3b e9 d4 53 45 8a 28 a2 b9 0d 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 27 14 00 67 15 f3 87 c7 ff 00 8b 4b a9 c9 2f 84 74 39 f3 6b 1b 62 fa e2 33 c4 ac 3f e5 98 3f dd 07 af a9 e3 b1 ce a7 c6 af 8e 49 02 4f e1 af 0a dd 06 98 e6 3b bb e8 cf 08 3b a4 67 d7 d5 bb 76 e7 91 f3 c5 7b f9 66 5c ee ab 55 5e 8b f5 39 6b 55 fb 31 0a 29 28 af a0 39 45 a2 8a 9a c6 c6 e7 53 bd 82 ca ce 26 9a e6 e1 d6 28 a3 51 cb 31 38 02 93 76 d5 81 e9 5f b3 f7 81 cf 8a 3c 60 ba 9d cc 7b ac 34 82 b3 b6 47 0f 37 f0 2f e6 37 7f c0 7d eb eb 20 31 5c bf c3 7f 05 5b f8 0b c2 b6 9a 44 7b 5a 7c Data Ascii: \|bI>3rch==WNm5k(on#C,g*;SE((((((('gK/t9kb3??IO;;gv{f\U^9kU1)(9ES&(Q18v_<`{4G7/7} 1\[D{Z\|
2024-05-02 14:33:11 UTC	8000	IN	Data Raw: 10 59 5b af f0 c6 b8 2c 7d 58 f5 63 ee 6b 4b 15 f3 d8 bc d2 a5 6f 76 1a 2f c4 ea a7 41 47 56 00 62 8a 28 af 28 dc 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 2b e7 6f da b3 fe 42 1e 1c ff 00 ae 57 1f cd 2b e8 9a f0 4f da 6b 41 d5 b5 9b ed 01 b4 cd 2e f6 f8 45 14 e1 cd bc 0d 26 cc 94 c6 70 0e 3a 1a ef cb 1a 58 98 b7 e7 f9 19 56 f8 19 f3 c5 15 b7 ff 00 08 37 8a bf e8 5a d6 7f f0 0a 4f f0 a3 fe 10 6f 15 7f d0 b5 ac ff 00 e0 14 9f e1 5f 59 ed 61 fc cb ef 38 79 59 89 4f 83 fd 7c 7f ef 0f e7 5b 1f f0 83 78 ab fe 85 ad 67 ff 00 00 a4 ff 00 0a 7c 3e 07 f1 48 99 09 f0 de b2 00 61 ff 00 2e 52 7a fd 29 3a b0 b7 c4 83 95 9f 70 41 fe a5 3f dd 15 25 47 08 c4 48 08 fe 11 52 57 c2 9e 98 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 47 e1 45 00 14 51 45 00 14 51 45 00 14 51 Data Ascii: Y[,}XckKov/AGVb(((((+oBW+OkA.E&p:XV7ZOo_Ya8yYO\|[xg\|>Ha.Rz):pA?%GHRWQEQEQEQEQGEQEQEQ
2024-05-02 14:33:11 UTC	8000	IN	Data Raw: a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 Data Ascii: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2024-05-02 14:33:11 UTC	8000	IN	Data Raw: 39 ed e3 2a 7f 20 0f e4 6b da 7e 17 7c 77 b0 f1 bd cc 7a 46 ad 02 69 ba b3 8c 47 b5 b3 15 c1 f4 5c f2 ad fe c9 cf b1 ed 5e 15 f1 33 e1 5e a9 f0 d6 ee 01 71 3a 5e d8 5c e4 41 74 8b b7 24 75 56 5e 76 9f c4 e7 f3 ae 36 da e6 6b 3b 88 ae 6d e4 68 a6 85 c3 c6 ea 70 55 81 c8 23 f1 ad 2a 60 b0 d8 9a 7c d4 d2 5d 9a 12 a9 38 3b 33 ef ee d5 e3 1f 1a 3e 30 78 87 e1 ef 89 6d 34 cd 26 0d 3a 48 26 b3 5b 86 37 31 33 36 e2 ee bc 61 87 18 51 5e a5 e1 5d 5c eb fe 1a d2 f5 62 00 6b cb 58 a7 60 3a 02 ca 09 1f 9e 6b e7 5f da 8f fe 47 9d 37 fe c1 89 ff 00 a3 65 af 0f 2e a3 19 e2 39 2a 2b ee 74 d5 93 50 ba 34 7c 1d fb 43 78 b7 5f f1 5e 91 a4 dd 5a e8 eb 6f 7b 77 14 12 18 e0 70 c1 59 80 38 25 cf 3c fa 57 a4 fc 6a f8 81 ab 7c 3c d0 ac 2f f4 88 ac e4 96 e2 eb c9 71 72 8c ca 17 63 Data Ascii: 9* k~\|wzFiG\^3^q:^\At$uV^v6k;mhpU#`\|]8;3>0xm4&:H&[7136aQ^]\bkX`:k_G7e.9+tP4\|Cx_^Zo{wpY8%<Wj\|</qrc
2024-05-02 14:33:11 UTC	8000	IN	Data Raw: 41 40 1f 77 76 af 85 3f 6b 3d 49 b5 7f 8d 37 76 71 9d e6 ca d6 da d5 40 f5 2b e6 63 f3 92 be eb ed 5f 01 eb df f1 5b 7e d3 53 43 fe b2 3b af 12 a5 b1 3d 7f 76 93 04 27 fe f9 5a 00 fb b3 c3 ba 6a e8 da 06 9b a6 a0 c2 d9 da c5 6e 07 b2 20 5f e9 5f 20 7e d9 de 29 9b 51 f1 f6 9f e1 e5 90 fd 9b 4a b4 12 14 cf 1e 6c a7 24 ff 00 df 21 3f 5a fb 3e be 0d fd ac 2d a5 b6 f8 db aa 4b 22 fc b3 db da cb 1e 7b a8 89 57 f9 a9 a0 0f ae be 0b 78 2a df c0 7f 0d b4 4d 2a 28 82 5c 3d ba dc dd 36 39 79 e4 01 9f 3e b8 ce d1 ec a2 bb 8a a3 a1 5f 41 a9 e8 9a 7d f5 b3 06 82 e6 da 39 a3 61 d0 ab 28 23 f4 35 7a 80 0a 28 a2 80 3e 70 fd b6 f4 f8 24 f0 5f 87 ef d9 47 da 20 d4 5a 14 6e fb 5e 36 2c 3f 38 d7 f2 ad 7f d8 db 4a fb 17 c2 b9 ef 4a e1 af f5 29 64 07 d5 55 51 07 ea ad 5e 7f fb Data Ascii: A@wv?k=I7vq@+c_[~SC;=v'Zjn __ ~)QJl$!?Z>-K"{WxM(\=69y>_A}9a(#5z(>p$_G Zn^6,?8JJ)dUQ^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49914	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:10 UTC	555	OUT	GET /wp-content/uploads/2020/11/NCDENR.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:10 UTC	209	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:10 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:26:35 GMT Accept-Ranges: bytes Content-Length: 118683 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:10 UTC	7983	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 90 00 90 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 03 55 05 56 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CCUV"
2024-05-02 14:33:10 UTC	8000	IN	Data Raw: c3 e2 ee 99 e2 8b 7f 36 7d 29 ff 00 d1 75 6b 18 cf fc 7c da b1 1b 80 07 f8 94 80 eb d3 e6 50 33 82 6b c8 a8 ac aa d2 85 68 3a 73 57 4f 42 e3 27 06 a4 8f e8 cf 41 d7 74 ff 00 14 68 9a 7e b1 a4 dd c7 7f a6 6a 16 e9 75 6b 75 09 ca 4b 13 a8 65 61 ec 41 06 b4 2b f3 83 fe 09 6b fb 4c 99 16 7f 83 fe 20 bb cb 28 92 f3 c3 d2 4a dc 91 cb 4d 6a 3e 9c c8 a3 fe ba 73 f7 45 7e 8f d7 e3 78 ec 1c b0 35 e5 46 5f 27 dd 74 67 d4 d1 aa ab 41 49 05 14 51 5c 06 e1 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 Data Ascii: 6})uk\|P3kh:sWOB'Ath~jukuKeaA+kL (JMj>sE~x5F_'tgAIQ\EPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPE
2024-05-02 14:33:10 UTC	8000	IN	Data Raw: 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 5f 2e ff 00 c1 40 3f 69 4f f8 50 bf 08 24 d3 b4 8b b3 0f 8c 7c 4a b2 59 e9 e6 36 c3 db 45 8c 4d 71 c7 42 a1 82 a9 eb b9 d4 8c ed 35 d1 87 a1 3c 4d 58 d1 a7 bb 33 9c d5 38 b9 4b a1 f0 c7 fc 14 6b f6 95 ff 00 85 cb f1 58 f8 57 46 ba f3 3c 25 e1 69 1e dd 1a 36 ca 5d 5e 74 9a 6f 42 17 1e 5a f5 e8 c4 1c 3d 7c 8b 45 15 fb 36 1b 0f 0c 2d 18 d1 a7 b2 fe ae 7c ad 4a 8e a4 9c df 50 a2 8a 2b a8 c8 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 92 de e2 5b 49 e2 9e 09 5e 19 e2 60 f1 c9 1b 15 64 60 72 08 23 a1 07 9c d7 ee 27 ec 61 fb 45 45 fb 46 7c 19 b1 d5 2e e6 43 e2 7d 2f 6d 86 b3 10 c0 26 75 51 89 80 1d 16 45 f9 b8 18 07 7a 8f bb 5f 86 f5 ef 9f b1 67 ed 15 2f ec e7 f1 9a c7 53 bc 9a Data Ascii: QEQEQEQ_.@?iOP$\|JY6EMqB5<MX38KkXWF<%i6]^toBZ=\|E6-\|JP+((((((([I^`d`r#'aEEF\|.C}/m&uQEz_g/S
2024-05-02 14:33:10 UTC	8000	IN	Data Raw: dc b5 b6 8d 68 c5 6d a2 1d 89 1f c6 ff 00 ed b6 4f 27 18 1c 57 3b f1 63 e2 9e b9 f1 8f c6 d7 de 25 d7 a7 f3 2e 67 3b 61 81 0f ee ed a1 04 ec 89 07 65 5c 9f 72 49 27 24 93 5c 7d 4d cf c5 73 9c fa b6 63 37 4e 9b e5 a4 ba 77 f3 7f e4 14 51 45 23 e5 02 ba 3f 01 7c 43 f1 17 c3 2f 11 41 ad f8 6b 54 9f 4b d4 22 38 df 11 f9 64 5c f2 8e a7 87 53 e8 c0 8a e7 28 a0 b8 4e 54 e4 a7 07 66 ba a3 f5 7b f6 63 fd a9 34 9f 8f da 3b 5a 5c 24 7a 5f 8b ec e2 0f 79 a7 a9 3b 24 5c e3 cd 84 9e 4a f4 c8 3c a9 38 39 18 27 dd 6b f1 13 c2 5e 2c d5 7c 0b e2 4d 3f 5e d1 2e de c7 54 b0 94 4d 04 e9 d8 8e c4 77 52 32 08 3c 10 48 3c 1a fd 76 f8 0b f1 8a c3 e3 8f c3 8d 3f c4 b6 6a b6 f7 47 f7 17 d6 6a d9 fb 35 c2 81 bd 3e 87 21 97 fd 96 1d ea 91 fb 17 0f 67 6f 30 87 b0 ae ff 00 79 1f c5 77 Data Ascii: hmO'W;c%.g;ae\rI'$\}Msc7NwQE#?\|C/AkTK"8d\S(NTf{c4;Z\$z_y;$\J<89'k^,\|M?^.TMwR2<H<v?jGj5>!go0yw
2024-05-02 14:33:11 UTC	8000	IN	Data Raw: 52 be 35 ff 00 82 92 fe cc e9 f1 63 e1 99 f1 ce 89 6a 1b c5 7e 16 81 a4 94 46 bf 3d dd 80 cb 49 1f b9 8f 26 45 f6 f3 00 e5 85 7d 46 45 98 fd 56 b7 b0 a8 fd c9 7e 0f bf cf 66 79 d8 ca 1e d2 3c f1 dd 1f 90 d4 51 45 7e a0 7c e8 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 01 fa a3 ff 00 04 bd fd a5 3f e1 31 f0 74 df 0b 75 db ad da ce 83 11 9b 49 92 46 e6 7b 1c 8c c4 33 d4 c4 c7 8f f6 19 40 18 43 5f 79 57 f3 cb f0 bf e2 36 af f0 93 e2 06 87 e2 fd 0a 6f 27 54 d2 6e 56 78 f2 7e 59 17 a3 c6 df ec ba 96 52 3d 18 d7 ef 57 c2 5f 89 da 3f c6 4f 87 5a 17 8c 74 29 37 e9 da ad b8 98 21 20 b4 2f d2 48 9f 1f c4 8c 19 4f b8 af cc 73 fc 07 d5 ab 7b 78 2f 76 7f 83 ff 00 83 bf de 7d 0e 0a b7 3c 39 1e eb f2 3b 0a 28 a2 be 54 f4 82 8a 28 a0 02 8a 28 a0 02 8a 28 a0 Data Ascii: R5cj~F=I&E}FEV~fy<QE~\|QEQEQEQEQE?1tuIF{3@C_yW6o'TnVx~YR=W_?OZt)7! /HOs{x/v}<9;(T(((
2024-05-02 14:33:11 UTC	8000	IN	Data Raw: a0 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 ad 4f 0c f8 5f 57 f1 a6 bd 67 a2 e8 3a 6d d6 af ab 5e 3f 97 6f 67 67 11 92 59 0f 5e 14 7a 00 49 3d 00 04 9e 05 65 d7 ea cf fc 12 8b e1 7e 8f a5 7c 23 d5 fc 75 e5 47 3e bf ab 5f c9 62 6e 08 cb 41 6d 10 4c 46 3d 37 39 2c 7d 7e 4f 4a f3 33 1c 6a c0 61 dd 6b 5d ec bd 4e 9a 14 bd b4 f9 4f 9d bc 11 ff 00 04 a8 f8 b3 e2 2b 28 ae b5 bd 47 40 f0 a8 90 02 6d 6e 6e 1e e2 e1 3e a2 25 29 f9 3d 7a 0e 9d ff 00 04 7c d5 65 d9 f6 ff 00 8a 16 76 d9 1f 37 d9 f4 57 9b 07 d0 66 64 cf e9 5f a6 54 57 e7 b3 cf f1 f2 77 52 4b d1 2f d6 e7 b6 b0 54 56 ea e7 e7 76 9d ff 00 04 7d d2 63 f2 fe dd f1 3a f6 e7 19 df f6 7d 19 21 dd e9 8c cc f8 ed eb 5d 3e 97 ff 00 04 8e f8 6f 06 df ed 2f 18 78 a6 f3 ae 7e cc d6 d0 03 cf 1d 62 7f f3 e9 5f Data Ascii: ((((O_Wg:m^?oggY^zI=e~\|#uG>_bnAmLF=79,}~OJ3jak]NO+(G@mnn>%)=z\|ev7Wfd_TWwRK/TVv}c:}!]>o/x~b_
2024-05-02 14:33:11 UTC	8000	IN	Data Raw: 00 c1 44 ff 00 69 4f f8 5d 9f 16 9b c3 9a 3d d7 9b e1 1f 0b 49 25 ac 0d 1b 65 2e ae ba 4d 37 1c 10 08 d8 a7 9e 14 91 f7 cd 7c 99 45 15 fb 2e 1b 0f 0c 2d 18 d1 a7 b2 3e 52 a4 dd 49 39 cb a8 51 45 15 d4 66 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 7e b3 ff 00 c1 2f ff 00 68 3f f8 58 1f 0c 27 f8 79 ab 5d 19 75 df 0a a8 36 7e 63 65 a6 d3 d8 e1 31 eb e5 31 d9 ec ad 10 af b7 2b f0 1f f6 72 f8 cb 79 f0 13 e3 1f 87 7c 65 6b e6 3d bd 9c fe 5d f5 bc 67 fe 3e 2d 1f e5 99 31 d0 9d a4 95 cf 46 55 3d ab f7 af 47 d5 Data Ascii: DiO]=I%e.M7\|E.->RI9QEfQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQE~/h?X'y]u6~ce11+ry\|ek=]g>-1FU=G
2024-05-02 14:33:11 UTC	8000	IN	Data Raw: a4 e5 4e 2d ef 60 a2 8a 2b 8c d4 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 bc 37 e2 7f ed ad f0 6f e1 34 93 5b eb 1e 34 b3 bd d4 a2 24 1d 3f 47 06 f6 60 c3 aa b7 97 95 43 ec ec b5 b5 2a 35 2b cb 96 94 5c 9f 92 b9 32 9c 60 af 27 63 dc a8 af cf 0f 1d 7f c1 5e 74 7b 77 92 2f 07 78 02 f6 fd 73 85 ba d6 af 12 df 1e fe 54 61 f3 ff 00 7d 8a f0 9f 14 ff 00 c1 52 be 35 eb c5 c6 9a fa 07 86 d3 90 a6 c3 4e f3 58 7a 64 ce d2 02 7f 01 f4 af 72 96 41 8e ab ab 8a 8f ab ff 00 2b 9c 72 c6 d1 8f 5b 9f b0 b4 57 e1 6e b5 fb 6f 7c 74 d7 d9 9a e7 e2 56 b1 11 63 93 f6 2f 2e d4 75 cf 1e 52 2e 3f 0f a5 73 32 fe d3 7f 18 26 95 a4 6f 8a 9e 34 0c c7 24 27 88 2e d4 7e 00 48 00 fc 2b d0 8f 0c e2 2d ef 54 5f 89 83 Data Ascii: N-`+((((((((((7o4[4$?G`C*5+\2`'c^t{w/xsTa}R5NXzdrA+r[Wno\|tVc/.uR.?s2&o4$'.~H+-T_
2024-05-02 14:33:11 UTC	8000	IN	Data Raw: 1e 15 ff 00 82 5b 7c 14 d0 36 36 a5 1e bf e2 56 18 2c 35 0d 47 ca 46 3d f0 20 58 c8 07 eb 9f 7a f5 6f 0f fe c6 1f 03 fc 32 a8 2c fe 19 e8 33 04 e9 fd a1 01 bd fc fc e2 f9 fc 6b da 68 af 26 a6 3f 17 57 e3 ab 2f bd 9d 31 a3 4e 3b 45 1c ae 91 f0 a7 c1 3e 1f 08 34 bf 07 68 1a 68 4e 54 59 e9 70 45 8e 31 c6 d5 18 e3 8a e9 2d 6d 20 b2 84 45 6f 0c 70 44 33 88 e2 50 aa 3f 01 53 51 5c 52 94 a5 f1 3b 9a a4 96 c1 59 5a 97 85 b4 5d 60 bf db f4 8b 0b ed e4 16 fb 4d b2 49 b8 8e 84 e4 1a d5 a2 92 6d 6a 82 d7 3c b7 5f fd 96 fe 10 78 99 0a ea 1f 0d 3c 2e ec dd 65 87 4b 86 09 0f 4f e3 8d 55 bb 7a d7 8f f8 cb fe 09 8d f0 3f c4 eb 21 d3 f4 cd 5b c2 d3 36 4f 99 a5 6a 2e e3 3f ee cf e6 0c 7b 0c 7b 62 be b2 a2 bb 29 e3 71 54 7e 0a 8d 7c d9 94 a8 d3 96 f1 47 e6 1f c4 4f f8 24 5e Data Ascii: [\|66V,5GF= Xzo2,3kh&?W/1N;E>4hhNTYpE1-m EopD3P?SQ\R;YZ]`MImj<_x<.eKOUz?![6Oj.?{{b)qT~\|GO$^
2024-05-02 14:33:11 UTC	8000	IN	Data Raw: 80 fe 57 f7 b3 4f af 56 ee 7e 9a 6a ff 00 f0 58 1d 1e 15 ff 00 89 5f c3 3b eb b6 c0 ff 00 8f bd 5d 20 00 f7 fb b1 3f b5 79 b7 89 3f e0 ae 1f 10 ef 83 2e 87 e0 ff 00 0e 69 2a 7a 35 e1 9e e9 c0 f6 21 e3 19 e9 d4 1f a5 7c 29 45 6f 0c 93 01 0d 55 3b fa b6 ff 00 52 1e 32 b3 fb 47 d0 de 32 fd bf be 3b 78 cd 5e 39 7c 73 71 a4 db b0 23 ca d1 ad e2 b4 23 3e 92 22 89 3f f1 ea f0 ef 11 f8 b7 5c f1 85 e9 bd d7 b5 9d 43 5b bc e7 fd 23 52 ba 92 e2 4e 7a fc ce 49 ac aa 2b d4 a5 86 a3 43 f8 50 51 f4 49 1c d2 a9 39 fc 4e e1 45 14 57 49 98 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 01 d1 78 3f e2 37 8a be 1e dd fd a7 c2 fe 25 d5 bc 3d 39 6d cc fa 65 ec 96 e5 bf de d8 c3 3e 98 35 ee de 10 ff 00 82 8c fc 76 f0 9a Data Ascii: WOV~jX_;] ?y?.i*z5!\|)EoU;R2G2;x^9\|sq##>"?\C[#RNzI+CPQI9NEWIQEQEQEQEQEQEQEQEQEx?7%=9me>5v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49916	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:13 UTC	818	OUT	GET /wp-content/uploads/2024/01/NLI_logo_favicon-light-150x150.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:13 UTC	206	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:13 GMT Server: Apache Last-Modified: Tue, 02 Jan 2024 13:15:26 GMT Accept-Ranges: bytes Content-Length: 4162 Connection: close Content-Type: image/png
2024-05-02 14:33:13 UTC	4162	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 03 00 00 00 0b df 81 d0 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 03 00 50 4c 54 45 fd b8 13 3f 3f 40 fe ff fe fd fd fd c0 cd a3 7f 86 74 6a 6e 61 3a 3a 3c c1 ce a4 ff ff ff 93 94 96 ba c6 a0 5b 5e 57 98 a1 87 be cb a3 6b 6f 63 41 41 42 3b 3b 3d 9c a5 8a c2 cf a6 c3 d0 a7 c4 d0 a8 c2 ce a5 fb fc f9 fc fd fb c6 d2 ab c7 d3 ad ff ff fe f3 f5 ed 40 40 42 3d 3d 3f 45 45 47 bc c9 a1 cc d6 b3 3c 3c 3e 65 68 5f c2 cf a5 fb fb f8 fd fe fc ca d5 b1 c1 c1 c2 c0 cd a4 c5 d1 aa d4 dd bf eb ef e1 e6 ec da f9 fa f6 ed f1 e4 f6 f8 f0 d7 df c3 c9 d4 af f2 f4 eb f8 f9 f5 c8 d4 ae 70 76 66 da e2 c9 f0 f3 e9 ce d8 b7 fc b8 15 ee f2 e6 df e6 d0 c5 d1 a9 f7 f9 f3 c2 ce a2 d0 Data Ascii: PNGIHDRpHYs+PLTE??@tjna::<[^WkocAAB;;=@@B==?EEG<<>eh_pvf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49917	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:14 UTC	571	OUT	GET /wp-content/uploads/2020/11/NC-State-Foundation-01.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:14 UTC	208	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:14 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:26:37 GMT Accept-Ranges: bytes Content-Length: 38649 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:14 UTC	7984	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 a9 02 0d 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIFHH;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CC"
2024-05-02 14:33:14 UTC	8000	IN	Data Raw: b0 ff 00 e8 9a fb 8e be 1c ff 00 82 56 7f c9 3e f1 cf fd 85 21 ff 00 d1 35 f7 1d 56 59 fe e7 4f fa ea 63 c7 3f f2 51 e2 fd 57 fe 92 8f c3 1f 8e 7f f2 5b 7e 21 7f d8 c5 a8 7f e9 4c 95 f5 e7 fc 12 9a 00 da ef c4 79 b1 96 4b 6b 14 07 ea d3 9f fd 96 be 43 f8 e7 ff 00 25 b7 e2 17 fd 8c 5a 87 fe 94 c9 5f 61 7f c1 28 ff 00 e4 25 f1 2f fe b8 e9 df fa 15 c5 7c 96 5f ff 00 23 08 fa bf c9 9f d0 dc 5f a7 07 d4 ff 00 05 3f fd 2a 07 e8 65 7e 56 7f c1 4c ee 5a 7f da 2e d1 09 c8 87 41 b5 41 f8 cb 33 7f 5a fd 53 af ca 3f f8 29 47 fc 9c a3 7f d8 1a d3 f9 c9 5f 47 9d 7f ba fc d1 f8 cf 86 2a f9 ff 00 fd b9 2f d0 f9 56 8d a0 f6 14 51 5f 04 7f 5b 06 07 a0 a2 8a 28 00 a2 8a 28 03 bf f8 0b f1 31 be 0f 7c 60 f0 bf 8b 88 91 ed f4 eb b0 6e 92 2e 5d ed dc 18 e6 00 77 3b 1d b1 ef 8a Data Ascii: V>!5VYOc?QW[~!LyKkC%Z_a(%/\|_#_?e~VLZ.AA3ZS?)G_G/VQ_[((1\|`n.]w;
2024-05-02 14:33:14 UTC	8000	IN	Data Raw: 6d c8 ce d4 0c d8 c8 ce 3a d7 25 5f 5f ff 00 c1 32 bc 16 9a f7 c7 3d 4f 5e 9a 13 24 5a 0e 94 ef 14 98 e1 27 99 84 6b f9 c7 e7 57 26 16 97 b7 af 0a 7d df e1 d4 fa 3e 20 cc 1e 55 95 62 31 b1 7a c2 2e df e2 da 3f 8b 47 9e 7e d6 bf b3 76 95 fb 35 6b be 1f d2 2c bc 47 73 af de 6a 56 f2 dd 4c 27 b4 58 16 18 c3 05 4c 61 9b 24 91 26 7a 63 68 eb 9e 38 2f 80 bf 0c a1 f8 c9 f1 6f c3 de 0d b8 d4 24 d2 e1 d5 64 95 1a f2 28 84 ad 1e d8 5e 41 85 24 03 92 80 75 ef 5e 83 fb 75 f8 fc f8 fb f6 95 f1 39 49 7c cb 3d 14 a6 8d 6e 33 9d be 48 3e 68 ff 00 bf cd 2d 53 fd 87 bf e4 ea bc 01 ff 00 5f 17 1f fa 4b 35 74 4e 14 a5 8d f6 70 5e ef 32 56 f9 d8 f1 30 d8 9c 7d 2e 17 78 bc 4d 4b d7 f6 52 9f 35 95 d3 e5 72 5a 5a da 68 b6 e8 7d 41 ff 00 0e a6 d2 3f e8 a2 df 7f e0 ad 3f f8 e5 1f Data Ascii: m:%__2=O^$Z'kW&}> Ub1z.?G~v5k,GsjVL'XLa$&zch8/o$d(^A$u^u9I\|=n3H>h-S_K5tNp^2V0}.xMKR5rZZh}A??
2024-05-02 14:33:14 UTC	8000	IN	Data Raw: 7f da 17 f6 e3 f1 0f ed 03 e0 14 f0 a5 d7 87 ac 74 2b 33 79 1d d4 d2 da dc 3c 8d 28 40 d8 42 18 01 8d c4 37 d5 45 7c d1 5d 59 8e 22 95 79 c6 34 7e 18 ab 1e 0f 05 e4 d8 ec af 0f 5e b6 66 bf 7f 56 7c cf 54 f4 49 5b 55 f3 0a f7 4f d8 7b fe 4e ab c0 1f f5 f1 71 ff 00 a4 b3 57 85 d7 6b f0 6b e2 6d c7 c1 bf 89 7a 27 8c ad 2c 21 d4 ee 34 b7 91 d2 d6 77 28 8e 5e 27 8f 92 bc 8c 6f cf e1 5c 18 79 aa 75 a1 39 6c 9a 7f 89 f5 d9 c6 1e a6 2f 2d c4 e1 e8 ab ca 70 9a 5e ae 2d 2f c4 fa ab fe 0a 63 e1 5d 73 c4 1f 1a 7c 37 2e 97 a2 ea 5a 94 29 e1 f8 d5 a5 b4 b3 92 54 56 fb 4c e7 05 95 48 ce 30 71 ee 3d 6b e4 4f f8 56 be 2f ff 00 a1 53 5c ff 00 c1 6c df fc 4d 7d 83 ff 00 0f 54 f1 47 fd 08 7a 47 fe 06 cb ff 00 c4 d1 ff 00 0f 54 f1 47 fd 08 7a 47 fe 06 cb ff 00 c4 d7 b1 88 58 Data Ascii: t+3y<(@B7E\|]Y"y4~^fV\|TI[UO{NqWkkmz',!4w(^'o\yu9l/-p^-/c]s\|7.Z)TVLH0q=kOV/S\lM}TGzGTGzGX
2024-05-02 14:33:14 UTC	6665	IN	Data Raw: bf 04 b1 04 a9 03 05 bf 39 22 91 e0 95 24 8d da 39 10 86 57 53 82 a4 74 20 d7 ed 0f ec 37 fb 1e 78 67 e0 c7 c3 6d 07 c4 ba c6 91 6f 7f f1 03 55 b5 4b db ab fb b8 f7 bd 90 90 07 58 22 07 84 2a a4 06 61 cb 36 ee 76 ed 00 29 d9 1f 93 de 22 f8 b1 f1 52 ea 71 7d ad f8 bf c5 cd 2c c7 2b 35 ee a3 74 37 7f ba 59 bf 95 76 ff 00 08 ff 00 6d ff 00 8c 3f 08 35 4b 79 ec fc 61 7f ae e9 c8 c0 cb a4 eb d3 3d e5 bc ab dd 46 f2 59 3e a8 ca 6b f7 2f 59 d1 34 ef 11 e9 d3 69 fa ad 85 ae a7 61 30 db 2d ad e4 2b 2c 52 0f 46 56 04 1f c6 bf 15 7f e0 a0 ff 00 00 74 9f 80 5f 1e 1a d7 c3 76 82 c7 c3 5a dd 92 6a 56 76 a8 c5 96 d9 8b 32 4b 12 92 49 c0 64 2c 07 60 e0 0e 94 02 77 3f 5c fe 00 7c 6b d2 3f 68 1f 85 5a 2f 8d 74 75 30 47 7a 85 2e 6c d9 83 3d a5 c2 f1 2c 44 f7 c1 e8 70 37 29 Data Ascii: 9"$9WSt 7xgmoUKX"*a6v)"Rq},+5t7Yvm?5Kya=FY>k/Y4ia0-+,RFVt_vZjVv2KId,`w?\\|k?hZ/tu0Gz.l=,Dp7)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49918	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:14 UTC	555	OUT	GET /wp-content/uploads/2018/02/Storer.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:14 UTC	206	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:14 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:23:32 GMT Accept-Ranges: bytes Content-Length: 6193 Connection: close Content-Type: image/png
2024-05-02 14:33:14 UTC	6193	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 18 00 00 00 b4 08 03 00 00 00 78 f9 c3 9f 00 00 00 c3 50 4c 54 45 ff ff ff 11 72 3f 6e 6f 72 69 6a 6d 69 6b 6e 9e 9f a1 a7 a7 a9 c4 c4 c5 66 67 6a fa fa fa c9 ca cb 00 6c 34 05 70 3b ea f4 ef 44 88 60 00 6e 37 d0 d0 d1 b3 cf c0 00 66 28 ed f2 ef 8c b7 9f 75 76 79 9b c0 ab d6 d7 d7 53 8d 6a f1 f1 f1 d2 df d7 8e 8f 91 87 88 8b c8 de d3 b3 b3 b5 25 82 52 81 b2 98 7f 80 83 df df e0 e7 e8 e8 de e7 e1 94 95 97 00 64 24 a7 c7 b5 7a 7b 7e b7 b8 b9 4e 92 6d ab ac ad bd d6 c8 5d 5f 62 2d 81 54 36 84 59 5f 99 78 5b 98 76 70 a3 86 84 b4 9a 00 5d 10 00 56 00 94 bc a6 60 9e 7c 45 90 68 75 a9 8d c4 d8 cd 51 97 72 39 82 59 06 77 42 80 aa 91 94 b6 a2 53 54 58 bf 24 58 25 00 00 17 29 49 44 41 54 78 da ec 9a 6b 73 e2 Data Ascii: PNGIHDRxPLTEr?norijmiknfgjl4p;D`n7f(uvySj%Rd$z{~Nm]_b-T6Y_x[vp]V`\|EhuQr9YwBSTX$X%)IDATxks

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49919	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:14 UTC	558	OUT	GET /wp-content/uploads/2018/06/DHEC-logo.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:14 UTC	208	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:14 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:24:30 GMT Accept-Ranges: bytes Content-Length: 23793 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:14 UTC	7984	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 01 90 01 90 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 08 01 02 05 06 07 03 04 ff c4 00 1b 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 05 06 02 03 04 01 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 95 20 00 00 00 Data Ascii: JFIFCC"
2024-05-02 14:33:14 UTC	8000	IN	Data Raw: d5 86 d0 34 95 18 2d 48 27 fd 65 8f 80 82 e3 8b 2b 59 d6 4f 74 0c a8 e7 b0 6e fa b5 42 c2 05 56 a1 74 41 71 66 ab d6 7f 81 17 d7 ea 1b 37 81 4a cc 6f 69 d7 01 08 14 03 c2 cb 72 d4 99 7b 68 e0 88 bf 30 e9 5e c4 ea 1d d9 b4 63 75 ec c2 05 98 37 da c6 8c 44 7d d1 e9 8e 05 39 cc 67 b8 07 93 15 bb 79 5b 55 e1 92 ec 20 94 34 e5 4a a9 af 93 c0 37 7b a9 ed 8e 7d d8 3a 93 b6 0b 6c 04 10 9e 11 56 d8 e0 b5 d0 63 82 d7 41 8e 0b 5d 06 38 2d 74 18 e0 b5 d0 63 82 d7 41 8b 93 01 29 07 42 87 85 29 97 87 32 b5 83 0a 42 25 f2 a9 07 05 a5 43 18 ce 92 7b d4 9a c5 14 92 93 b0 ef ce 4f b5 b2 9e 13 87 54 51 c0 b7 8e d2 aa 7c 20 99 47 14 d3 9a 92 b3 54 c2 d8 79 05 0e 27 48 b1 a6 3c 4d 2b f2 61 4a 4d 01 02 ea 04 54 f7 01 2c fa bc 85 1f 87 85 e4 26 b2 8c 2b 52 94 9c d5 74 47 f4 66 Data Ascii: 4-H'e+YOtnBVtAqf7Joir{h0^cu7D}9gy[U 4J7{}:lVcA]8-tcA)B)2B%C{OTQ\| GTy'H<M+aJMT,&+RtGf
2024-05-02 14:33:14 UTC	7809	IN	Data Raw: 8f ff 00 05 3a 30 15 e9 2b f5 12 01 60 48 d3 48 5f 9b 03 52 82 5d 84 74 96 21 82 75 79 2e e6 07 08 2a 16 51 7c 23 c2 05 9f b8 85 92 ca 60 9e 22 12 c5 80 30 ce 6a 3d d2 b9 c9 20 45 b8 40 14 76 84 56 f4 c1 bb d4 90 19 b4 11 98 71 cc 61 80 0b ea 20 2f 9e 80 f7 07 51 d2 30 01 db 01 28 80 68 54 3d 00 80 44 d9 30 ff 00 85 ed 0e 0d 33 88 f9 09 e0 38 71 21 90 c5 48 40 2e e2 0e e6 62 f1 24 6c 15 de 0a a0 00 76 50 b2 34 84 f2 1c 2a 02 1f d0 c4 1c 89 31 18 82 de d2 93 54 04 6c 6f de 2f 05 85 15 64 fc c1 90 99 10 2d 71 ee 06 d0 0b d2 6d 22 4f d4 39 0d 1f 50 55 56 07 90 c7 69 55 42 20 d4 12 84 36 44 47 2c 89 62 3d 71 d3 c3 69 7e 5f 71 7b 44 76 27 b4 02 cc a9 d8 e3 c8 16 65 7c c5 c4 14 20 88 07 08 00 ea 74 c9 d3 d2 04 05 bc bb 32 9f f3 a6 f4 59 d2 62 cd 7d c8 50 ec 36 Data Ascii: :0+`HH_R]t!uy.Q\|#`"0j= E@vVqa /Q0(hT=D038q!H@.b$lvP41Tlo/d-qm"O9PUViUB 6DG,b=qi~_q{Dv'e\| t2Yb}P6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49920	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:14 UTC	566	OUT	GET /wp-content/uploads/2020/11/Texas-HHS_Logo_VT.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:14 UTC	208	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:14 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:26:36 GMT Accept-Ranges: bytes Content-Length: 98410 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:14 UTC	7984	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 03 07 02 61 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CCa"
2024-05-02 14:33:14 UTC	8000	IN	Data Raw: 78 22 f3 41 fe c8 6f 0e d9 c7 6c 10 aa bc 51 85 95 49 00 6e 0f d7 3c 0e 4f a5 7c 1f e1 7f 11 ea bf 0f 7c 55 6d a9 d9 86 b6 d4 6c 64 f9 a2 94 11 9e cc 8c 3d 0f 43 5e f5 af 7e da 17 77 ba 1c d0 69 7e 1f fb 06 a7 22 6d 5b a9 6e 04 89 11 ee c1 71 cf b6 6b 8b 22 c6 e5 b8 4c 3d 48 e2 e3 ef df aa bd d7 6f ea c6 f9 86 1f 15 5a ac 5d 07 ee fa da cf b9 f3 ef 89 f4 7f f8 47 3c 4b aa 69 8b 2a cb f6 2b 97 85 64 47 0c 0e d6 c0 20 8e bf 5a fa 57 f6 74 fd a3 3e d3 f6 6f 0a f8 aa eb 33 92 23 b1 d4 65 3f 7f d2 39 0f af a3 77 e8 6b e6 fd 0f c3 9a e7 8e f5 a9 2d f4 bb 2b 8d 57 50 99 8c b2 79 4b 93 c9 e5 98 f4 03 27 a9 ad 2f 18 fc 2d f1 4f c3 f4 8a 6d 73 48 9e ce de 46 0a 97 23 0d 19 6e 48 1b 87 43 c1 e3 da bc 4c 06 27 15 81 a8 f1 98 68 3e 4b eb a3 b5 bb 37 fa 9e 86 22 95 1c Data Ascii: x"AolQIn<O\|\|Umld=C^~wi~"m[nqk"L=HoZ]G<Ki*+dG ZWt>o3#e?9wk-+WPyK'/-OmsHF#nHCL'h>K7"
2024-05-02 14:33:14 UTC	8000	IN	Data Raw: 06 fe d3 5e 2d f8 77 7d fd 8f e3 5d 3a 7d 46 38 b0 84 ce 3c ab a8 87 1c e4 8c 3f 1e bc 9f 5a f9 c3 e1 37 ed d3 f1 17 e1 cc 90 5a ea 97 2b e2 dd 21 38 30 6a 2c 7c f5 5e 7e ec bd 7a 9e f9 e9 8a fb 4b c0 7f 17 3e 16 7e d6 9a 1a d9 4b 14 2b ac 84 3b f4 cb dc 25 dc 24 0e 4c 6c 3e f0 19 27 83 ee 45 70 47 2e 84 65 ed 32 ba ae 94 ff 00 95 eb 17 fd 7c cf 87 cc f2 9c 7e 5d 17 f5 fa 6a ad 3f e7 8f 4f 5e ab f2 f3 3d 6b c1 3f 10 b4 0f 88 5a 71 bd d0 b5 08 ee e3 5f bf 1f dd 92 33 cf 0c a7 91 d2 ba 5a f8 d7 c7 9f 02 bc 57 f0 4b 51 6f 13 78 42 fe 7b ad 3e 03 b8 cd 08 c4 f0 a9 27 87 51 f7 d7 18 c9 f7 e8 2b d6 be 09 fe d2 7a 7f c4 1f 2f 49 d7 3c 9d 2f 5e 0a 02 31 7c 45 74 7b ed cf dd 6f f6 7f 2f 4a f4 f0 79 bc bd aa c2 63 e1 ec ea f4 fe 59 7a 33 e3 ab e0 97 27 b6 c3 3e 68 Data Ascii: ^-w}]:}F8<?Z7Z+!80j,\|^~zK>~K+;%$Ll>'EpG.e2\|~]j?O^=k?Zq_3ZWKQoxB{>'Q+z/I</^1\|Et{o/JycYz3'>h
2024-05-02 14:33:14 UTC	8000	IN	Data Raw: b5 99 18 15 01 c9 21 88 20 1e 0d 0a 9d 5c 34 95 49 2b 58 55 31 f9 67 10 d0 a9 80 a1 53 9d c9 7f 2c b4 ec db b5 95 99 f6 ff 00 ed 67 e1 69 fc 29 e3 ad 1f c6 7a 71 10 b5 cb 26 e6 4e 08 9e 2c 15 63 eb 91 81 f8 57 d3 7e 04 f1 3c 5e 33 f0 7e 91 ad 45 8d b7 96 eb 23 00 08 01 fa 30 19 ec 18 11 5e 55 e3 ab db 7f 8d 9f b3 04 3a fd b2 a3 4b 3d 84 5a 94 7f 23 7c b2 a6 0b 85 cf 3d 43 ae 7d 0e 6a 87 ec 6d e2 71 a9 78 1b 51 d1 d8 fe f7 4e ba de bd 79 49 06 47 ea 08 fc 2b 3c 3d b0 79 c4 e9 c7 e0 ad 1e 65 fe 25 bf ea cf c1 b1 10 94 f0 96 9a f7 e9 3e 57 fd 7e 07 d0 74 51 5f 1f 7f c1 48 27 f1 6f 86 3e 1e f8 7b c5 9e 15 f1 26 ab a1 0b 3b e3 69 7b 1e 9d 75 24 42 44 91 49 46 60 a7 18 52 84 64 ff 00 78 57 db e1 e8 fd 62 ac 69 5e d7 3e 72 a4 fd 9c 1c ed 7b 1f 55 f8 93 c2 9a 37 Data Ascii: ! \4I+XU1gS,gi)zq&N,cW~<^3~E#0^U:K=Z#\|=C}jmqxQNyIG+<=ye%>W~tQ_H'o>{&;i{u$BDIF`RdxWbi^>r{U7
2024-05-02 14:33:14 UTC	8000	IN	Data Raw: 4b 2f 86 1e 50 07 ca 31 1c 7b b8 fc 13 f1 af c6 c5 04 28 cf 07 15 fb 3b fb 3e bd bf 8c 3f 67 87 d2 26 f3 44 4b 0d d6 9b 39 18 ce 08 6f bb ff 00 01 71 d6 bf 1a 6f 2d 64 b1 bc 9e da 65 29 34 32 34 6e 87 aa b0 38 22 bf a3 f8 46 bf b7 c0 a7 dd 45 fd eb fe 01 f9 7e 75 4f d9 e2 1a f3 7f 99 0d 3e 39 5e 09 52 58 5d a3 96 36 0e 8e a7 05 58 1c 82 3f 1a 65 15 f7 27 cf 9f b4 ff 00 b2 67 c6 e8 3e 3b 7c 1a d2 b5 86 90 1d 66 cc 7d 87 53 84 b6 59 27 40 3e 63 df 0c 30 c0 fb fa 83 5e cf 5f 8a ff 00 b2 cf ed 19 a8 fe ce 9f 11 22 d4 d4 3d d7 87 6f 8a c1 ab 58 a0 c9 78 b3 fe b1 07 f7 d7 a8 f5 e9 5f b1 9e 0a f1 9e 91 f1 0b c2 fa 7f 88 34 2b c4 be d2 ef a3 12 c3 32 1e dd c1 f4 20 f0 45 7e 75 99 60 9e 12 ab 71 5e eb db fc 8f a6 c2 d7 55 a1 67 ba 26 f1 57 85 f4 df 1a 78 73 51 d0 Data Ascii: K/P1{(;>?g&DK9oqo-de)424n8"FE~uO>9^RX]6X?e'g>;\|f}SY'@>c0^_"=oXx_4+2 E~u`q^Ug&WxsQ
2024-05-02 14:33:14 UTC	8000	IN	Data Raw: 6a d6 7f 79 d3 0c 24 de 0f ea f5 5d df f5 6f b8 e7 7f e0 a3 ff 00 08 d7 c0 7f 1a a2 f1 2d 95 b9 8b 4b f1 3d b8 9d 8a a8 54 17 49 f2 c8 a3 1d f1 b1 8f fb d5 f2 65 7e be 7e d6 3f 0e 2d 7f 69 2f d9 ae 7d 43 46 88 5c 6a 96 90 0d 5f 4c 2b f3 36 e5 19 78 b8 e4 92 bb 86 3b 90 38 af c8 42 0a 92 18 15 60 70 41 ec 7d 2b fa af 26 c5 c7 15 85 8b 4e f6 fc ba 3f b8 fc 7b 1b 45 d1 ac ee b7 fe 98 95 f5 ef ec 27 fb 5b b7 c2 2d 6e 1f 04 78 ae f0 27 82 f5 09 89 b7 ba 9d 8e 34 e9 db be 7b 46 c7 a8 e8 09 cf 73 5f 21 51 d4 60 f4 af 53 11 87 86 26 9b a7 51 68 ce 5a 75 25 4a 4a 51 3f a0 a8 66 8e e6 24 96 27 59 22 75 0c 8e 87 2a c0 f2 08 23 a8 a9 2b f2 8f f6 4e fd ba 75 7f 83 2d 6d e1 9f 16 b4 fa df 83 78 48 64 2c 5a e3 4f 1f ec 67 ef 20 fe ef 6e d5 fa 73 e0 6f 88 5e 1c f8 95 a1 Data Ascii: jy$]o-K=TIe~~?-i/}CF\j_L+6x;8B`pA}+&N?{E'[-nx'4{Fs_!Q`S&QhZu%JJQ?f$'Y"u*#+Nu-mxHd,ZOg nso^
2024-05-02 14:33:14 UTC	8000	IN	Data Raw: ae a3 37 68 37 bf 67 df d3 b9 b6 69 97 c7 19 4d b8 af 79 7e 2b b7 f9 1f 03 f8 bb c2 7a af 81 3c 4d a9 78 7f 5b b4 7b 1d 57 4e 99 a0 9e 09 07 42 0f 50 7b 83 d4 11 c1 15 8f 5f ac 7f b5 d7 ec c9 a4 7e d3 3e 05 83 c5 de 11 f2 64 f1 6d ac 1e 65 9d d4 2c 15 6f e1 eb e4 bf bf f7 49 e4 1e 0f b7 e5 46 ad a4 de e8 3a a5 de 9b a9 5a cb 63 a8 5a 4a d0 dc 5b 4c a5 5e 27 53 82 ac 0f 43 9a fe a9 cb f1 f4 f1 d4 94 e3 bf 5f f3 f4 67 e4 18 9c 3c b0 f3 e5 7b 14 eb d5 7e 08 7e d3 1e 3b f8 05 7e 5f c3 7a 99 93 4c 90 8f 3f 49 bc fd e5 b4 9c f5 0b fc 2d ee 3d 6b ca a8 ae fa 94 e1 56 2e 13 57 47 34 65 28 3b c5 d9 9f ad bf 04 ff 00 e0 a0 5f 0e 7e 28 5b c5 6b ae 5d 7f c2 1d af 60 06 b6 d4 4e 20 90 ff 00 d3 39 7a 7e 0d 83 f5 af a6 6c ef 6d f5 1b 75 9e d2 e2 2b 98 1b ee cb 0b 87 53 Data Ascii: 7h7giMy~+z<Mx[{WNBP{_~>dme,oIF:ZcZJ[L^'SC_g<{~~;~_zL?I-=kV.WG4e(;_~([k]`N 9z~lmu+S
2024-05-02 14:33:14 UTC	8000	IN	Data Raw: e7 b0 5e ff 00 53 cd 7c 9e 3f 89 30 98 4b c6 93 e7 97 96 df 37 fe 57 3d 9c 36 55 5e b6 b3 f7 57 9e ff 00 71 f4 57 c5 1f da e6 c7 4b 59 b4 ff 00 07 c2 35 0b c1 f2 9d 46 61 88 53 d7 6a f5 63 d3 ae 07 d6 be 59 d7 bc 41 a9 f8 ab 53 93 50 d5 6f 26 d4 2f 65 3c cb 33 16 3f 41 e8 3d ab b0 f0 cf c0 3f 1c 78 b3 44 1a ae 9f a2 b1 b2 64 df 13 4d 2a c6 d2 8e 7e ea b1 04 f4 ae 2f 52 d2 ef 7c 3b ab 4b 65 a8 5a c9 69 7b 6b 20 12 41 28 c3 29 06 bf 3b cc f1 79 86 33 96 ae 2d 35 07 b2 b3 51 f9 77 3e 9f 09 47 0d 42 f0 a2 d3 92 df 5b b3 dd bc 2b fb 1d eb 7a d6 85 15 f6 a7 ab 43 a4 5d cc 81 d2 cc c4 64 28 08 e0 39 cf 07 a7 03 38 af 20 f1 9f 83 75 af 85 fe 2a 6d 37 51 1f 66 bf b7 2b 34 33 c2 df 2b 8c fc b2 21 fa 8f c2 be e4 f0 27 c6 4f 0a f8 b7 c2 d6 fa 8c 7a ad ad 89 8e 20 2e Data Ascii: ^S\|?0K7W=6U^WqWKY5FaSjcYASPo&/e<3?A=?xDdM~/R\|;KeZi{k A();y3-5Qw>GB[+zC]d(98 um7Qf+43+!'Oz .
2024-05-02 14:33:14 UTC	8000	IN	Data Raw: 7f 63 af 8c 1e 1d b2 7b ab 9f 05 dd 4b 12 29 66 fb 1c d1 5c b0 03 af cb 1b 31 fd 2a 39 f1 6b 5d 4e a7 84 e1 7a 9f bb 5e cb e5 25 7f c1 dc fb 5f e0 f7 ed f3 e0 6f 88 b7 50 69 ba ec 72 f8 47 55 97 01 4d e3 06 b6 76 27 01 44 a3 a1 c6 3e f0 03 9e b5 ef 7e 3b f1 ad af 81 7c 09 ac f8 a6 58 9a fa cb 4c b2 7b d6 8e dd 86 65 45 5d df 29 e9 c8 ef 5f 89 fa 8e 9b 77 a4 de 4b 67 7f 69 3d 95 d4 64 ab c1 73 19 47 52 38 20 83 ef 5e c5 e0 5f da 97 c4 be 17 f8 59 e2 7f 00 ea 8f 2e bb a1 6a 7a 64 b6 36 4b 71 21 2f 62 ee 08 05 5b a9 41 93 f2 fb 0a e9 a5 8f 92 4e 35 37 ee 7c f6 65 c1 14 65 38 56 cb df bb 75 78 b7 d2 fa f2 bf 4e ff 00 79 f5 39 ff 00 82 9a f8 40 29 3f f0 89 6b 1f f7 f6 3a fa c7 c1 9e 25 8b c6 7e 12 d1 f5 e8 21 7b 78 35 3b 48 ae d2 29 08 2c 8a ea 18 03 8e fc d7 Data Ascii: c{K)f\1*9k]Nz^%_oPirGUMv'D>~;\|XL{eE])_wKgi=dsGR8 ^_Y.jzd6Kq!/b[AN57\|ee8VuxNy9@)?k:%~!{x5;H),
2024-05-02 14:33:14 UTC	8000	IN	Data Raw: 0f 2f 94 a5 55 a6 fa 1f b2 f1 c6 1a 85 1c b6 32 a7 05 17 ce b6 49 74 91 f4 1d 15 1c f7 11 5a c4 64 9a 44 8a 31 d5 dd 82 81 f8 9a e1 be 2b 7c 64 f0 f7 c2 7f 02 ea 7e 24 bf be b6 9d 6d 63 fd d5 b4 73 ae fb 89 4f 09 1a e3 27 24 fb 74 c9 af 7e 52 51 57 67 e2 14 68 d4 c4 4e 34 e9 45 b6 dd 97 a9 e0 3f b7 d7 ed 04 be 08 f0 88 f0 26 89 76 63 d7 f5 94 0d 77 24 4d cd bd a1 c8 23 20 e4 33 91 8f a6 7d 45 7e 6e e0 01 5b de 3a f1 ae ab f1 1b c5 da a7 89 35 a9 cd c6 a5 a8 4c 65 91 89 e1 47 45 55 f4 50 00 00 7b 57 ad 7e c7 7f 06 ed 3e 2b fc 55 b6 9f 59 96 08 fc 3d a2 e2 f2 ea 39 dc 2f da 18 11 b2 30 0f 50 5b 04 fb 66 be 5a ac e5 8b ad a7 c8 fe 91 cb b0 74 38 63 2a 72 a9 bc 57 34 9f 77 d9 7e 48 fa eb f6 0e fd 9f c7 c3 9f 02 af 8c 75 78 00 f1 16 bf 10 78 83 03 9b 7b 43 82 Data Ascii: /U2ItZdD1+\|d~$mcsO'$t~RQWghN4E?&vcw$M# 3}E~n[:5LeGEUP{W~>+UY=9/0P[fZt8c*rW4w~Huxx{C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49921	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:14 UTC	570	OUT	GET /wp-content/uploads/2020/11/John-Rex-Endowment_VT.jpg HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:14 UTC	209	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:14 GMT Server: Apache Last-Modified: Wed, 03 Nov 2021 19:26:37 GMT Accept-Ranges: bytes Content-Length: 189156 Connection: close Content-Type: image/jpeg
2024-05-02 14:33:14 UTC	7983	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 90 00 90 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 07 e0 07 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CCD"
2024-05-02 14:33:14 UTC	8000	IN	Data Raw: a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a6 4b 2a 43 1b 49 23 2c 71 a0 2c cc c7 01 40 ea 49 a0 07 d7 2b f1 1b e2 8f 85 7e 12 78 76 5d 73 c5 ba dd ae 89 a7 26 42 bc ed f3 ca c0 67 6c 68 32 ce df ec a8 26 be 59 fd a4 ff 00 e0 a3 fe 1a f8 74 6e b4 2f 87 8b 6f e2 df 10 ae 63 7d 44 b1 3a 7d ab 74 e1 81 cc cc 3d 14 85 e7 ef 1c 11 5f 9b 3f 11 fe 29 78 ab e2 e7 88 e5 d7 3c 5b ad 5c eb 3a 8b e4 2b ce d8 48 94 9c ec 8d 06 15 17 fd 95 00 57 d4 e5 f9 0d 6c 55 aa 57 f7 21 f8 bf f2 f9 fd c7 Data Ascii: (((((((((((((((((((((((((((K*CI#,q,@I+~xv]s&Bglh2&Ytn/oc}D:}t=_?)x<[\:+HWlUW!
2024-05-02 14:33:14 UTC	8000	IN	Data Raw: 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 Data Ascii: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2024-05-02 14:33:14 UTC	8000	IN	Data Raw: 17 c3 9f 83 be 36 f8 b7 a8 0b 3f 08 78 67 50 d7 65 07 6b c9 6f 16 21 8c ff 00 b7 2b 61 13 ea cc 2b ec af 84 df f0 4a bd 56 ff 00 c9 bc f8 8b e2 68 f4 b8 4e 0b 69 9a 18 12 ce 47 a3 4c e3 62 9f a2 b8 e7 ad 7e 8c e9 5a 4d 8e 85 a7 c1 63 a6 d9 db e9 f6 30 2e d8 ad ad 62 58 a3 8d 7d 15 54 00 07 d2 ae 57 b7 8a e2 3c 4d 6d 28 a5 05 f7 bf eb e4 79 38 7c 8e 85 3d 6a be 67 f7 23 cb 3e 14 7e cc 5f 0d 3e 0b 2c 52 78 5f c2 d6 76 fa 82 0c 7f 69 dd 03 71 76 4e 30 48 95 f2 57 3e 89 b4 7b 57 a9 d1 45 7c c5 4a b3 ad 2e 7a 92 6d f9 9e fc 29 c2 94 79 60 ac bc 82 8a 28 ac 8d 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 Data Ascii: 6?xgPeko!+a+JVhNiGLb~ZMc0.bX}TW<Mm(y8\|=jg#>~_>,Rx_viqvN0HW>{WE\|J.zm)y`((((((((((((((((((
2024-05-02 14:33:14 UTC	8000	IN	Data Raw: fb 37 89 3c 23 3c 60 64 19 2e ae 91 89 f4 c7 d9 c8 fd 6b f5 42 8a dd 71 06 3d 6f 24 fe 48 c9 e4 d8 37 f6 5f de cf c9 2b bf f8 26 3f c6 6b 65 53 18 f0 fd d1 27 95 87 51 20 8f ae e8 c7 e9 58 97 9f f0 4e 7f 8e b6 a2 4f 2b c3 16 77 9b 0e 07 93 ab 5b 0d ff 00 4d ee bf ae 2b f6 22 8a d9 71 26 35 6e a2 fe 4f fc cc 9e 47 85 7d 5f df ff 00 00 fc 5c bb fd 83 3e 3c 59 38 59 3e 1f ce c4 8c e6 2d 42 ce 41 f9 ac c4 56 15 df ec 7f f1 a2 ca 3d f2 7c 37 d7 98 67 6e 22 b7 f3 0f e4 a4 9f c6 bf 70 28 ad 97 13 62 ba c2 3f 8f f9 99 3c 87 0f d2 4f f0 ff 00 23 f0 9e f3 f6 6b f8 b5 62 ec b2 fc 32 f1 77 ca 37 16 4d 12 e5 d4 0f f7 95 08 fd 6b 0a ef e1 27 8e 74 f5 56 ba f0 67 88 2d 95 8e 01 97 4b 9d 41 3e d9 4a fd f5 a2 b6 5c 51 57 ad 25 f7 b3 27 90 53 e9 51 fd c7 e1 0f c3 8f 1a fc Data Ascii: 7<#<`d.kBq=o$H7_+&?keS'Q XNO+w[M+"q&5nOG}_\><Y8Y>-BAV=\|7gn"p(b?<O#kb2w7Mk'tVg-KA>J\QW%'SQ
2024-05-02 14:33:14 UTC	8000	IN	Data Raw: d4 f8 e5 ea 7c cc be 26 14 51 45 66 49 fa 89 fb 01 fc 00 d1 fc 13 f0 c3 4c f1 d5 e5 9c 77 1e 2a d7 a2 69 e3 ba 95 72 d6 b6 c4 90 89 1e 7a 6e 51 b9 88 e4 ee 03 a0 af ac ab c8 ff 00 64 a9 9e 7f d9 b7 e1 eb 48 c5 98 69 51 a8 27 d0 12 00 fc 00 02 bd 72 be df 0d 08 c2 94 54 57 43 e8 a8 c5 46 9a 48 28 a2 8a e9 36 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 Data Ascii: \|&QEfILw*irznQdHiQ'rTWCFH(6((((((((((((((((((((((((((((((((((((((
2024-05-02 14:33:14 UTC	8000	IN	Data Raw: ab e7 ab f1 26 16 9e 94 93 97 e0 bf 1d 7f 03 d9 a3 91 e2 27 ad 46 a3 f8 bf c3 fc cf c7 bf 87 bf b2 cf c5 7f 8a 1e 53 f8 7f c0 fa ac d6 b2 60 ad e5 dc 5f 65 b7 23 d4 49 29 55 6f c0 9a fa 6f e1 ef fc 12 97 c4 ba 81 8a 7f 1a 78 c3 4f d1 a2 38 66 b4 d2 21 6b a9 48 f4 2e db 15 4f b8 0e 2b f4 c2 8a f9 da fc 47 8b ab a5 24 a0 be f7 f8 ff 00 91 ee 51 c9 30 d4 f5 a8 dc bf 05 f8 7f 99 f3 77 c3 bf f8 27 d7 c1 8f 00 79 72 cb e1 f9 7c 53 78 98 ff 00 48 f1 04 fe 78 ff 00 bf 4a 16 23 f8 a1 e9 5f 41 e8 fa 2e 9d e1 eb 08 ac 34 ab 0b 6d 32 c6 21 88 ed ac e1 58 a2 41 ec aa 00 15 7a 8a f9 ea d8 9a d8 87 7a b3 72 f5 67 b5 4a 85 2a 2a d4 e2 97 a0 51 45 15 cc 6e 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 Data Ascii: &'FS`_e#I)UooxO8f!kH.O+G$Q0w'yr\|SxHxJ#_A.4m2!XAzzrgJ**QEnQEQEQEQEQEQEQEQEQEQE
2024-05-02 14:33:14 UTC	8000	IN	Data Raw: 53 90 25 91 98 03 ed 93 55 ab 65 c2 dd eb 7f e4 bf f0 4c 9f 10 76 a5 f8 ff 00 c0 3f 7c 6f 7e 2f f8 0f 4d 6d b7 7e 36 f0 ed ab 6d df 89 b5 58 10 ed f5 e5 fa 70 6a df 84 7e 24 78 4b e2 01 ba 1e 17 f1 4e 8b e2 43 69 b7 ed 1f d9 1a 84 37 5e 4e ec ed df e5 b1 db 9d ad 8c f5 da 7d 2b f1 03 e0 d7 c0 ff 00 17 7c 78 f1 64 5a 0f 84 f4 d3 75 2e 41 b8 bc 97 29 6d 67 19 3f 7e 57 c1 da 3a f0 32 c7 18 00 9e 2b f5 fb f6 63 fd 99 3c 3f fb 33 f8 3e 7d 37 4b 9e 4d 4b 58 d4 3c b9 35 4d 56 51 b4 dc ba 06 da 15 32 42 22 ef 7c 0e 4f cc 72 4d 78 d9 96 5b 86 cb e1 cb ed 5c a7 da df 9f 63 d3 c0 e3 ab e3 65 7f 67 68 77 ff 00 23 d9 68 a2 8a f9 b3 dd 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a Data Ascii: S%UeLv?\|o~/Mm~6mXpj~$xKNCi7^N}+\|xdZu.A)mg?~W:2+c<?3>}7KMKX<5MVQ2B"\|OrMx[\ceghw#h(((((((((((
2024-05-02 14:33:14 UTC	8000	IN	Data Raw: c4 dc 05 d3 ac 55 db 1f ef 4c 64 e7 dc 63 db 15 e5 54 ce b0 74 f6 6e 5e 8b fc ec 75 c7 03 5a 5b ab 1f a8 b5 c7 78 a3 e3 1f 81 7c 14 59 75 cf 17 e8 ba 64 ab d6 09 ef a3 12 fe 09 9d c7 f0 15 f9 13 e2 8f 8c 5e 3a f1 a8 65 d7 3c 5f ad 6a 71 37 58 67 be 90 c5 f8 26 76 8f c0 57 1d 5e 5d 4e 20 ff 00 9f 54 fe f7 fd 7e 67 5c 32 ef e6 91 fa 97 e2 8f db eb e1 17 87 b7 2d ae a7 a8 78 82 45 ea 9a 65 8b e3 3f ef 4b e5 a9 fc 09 af 25 f1 37 fc 14 de 05 2e 9e 1e f0 34 92 7f 76 7d 4e f8 2e 3e b1 a2 9f fd 0e be 0e a2 bc ba 99 de 32 7b 35 1f 45 fe 77 3a e3 81 a3 1d d5 cf a6 bc 49 ff 00 05 0b f8 af ad 6e 16 12 68 fa 02 f3 b4 d9 58 89 18 0f 73 31 70 7f 21 5e 55 e2 4f da 23 e2 6f 8b 43 0d 4f c7 3a e4 b1 b8 c3 43 0d e3 41 1b 0f 74 8c aa 9f ca bc ea 8a f3 6a 63 31 15 7e 3a 8d fc Data Ascii: ULdcTtn^uZ[x\|Yud^:e<_jq7Xg&vW^]N T~g\2-xEe?K%7.4v}N.>2{5Ew:InhXs1p!^UO#oCO:CAtjc1~:
2024-05-02 14:33:14 UTC	8000	IN	Data Raw: 23 35 69 2b 94 a4 e3 aa 67 ce 9e 24 fd 81 fe 10 6b c1 8d b6 93 7f a1 3b 0e 5f 4d bf 7e 0f a8 12 f9 8a 3f 2a f2 bf 12 ff 00 c1 32 74 e9 77 bf 87 bc 71 75 6d fd d8 75 3b 25 9b 3f 57 46 4c 7f df 26 be df a2 bc fa 99 66 0e a7 c5 4d 7c b4 fc 8e 88 e2 ab 47 69 1f 99 3e 26 ff 00 82 77 7c 52 d1 84 8f a6 cb a2 eb e8 39 54 b5 bc 31 48 df 51 2a aa 83 ff 00 02 af 27 f1 3f ec d9 f1 47 c2 1e 61 d4 fc 0b ad 24 71 fd f9 ad 6d 8d cc 6b ee 5e 2d cb 8f 7c d7 ec 75 15 e6 d4 c8 70 d2 f8 24 d7 e3 fd 7d e7 54 73 0a ab 74 99 f8 59 73 6d 35 94 ef 0d c4 52 41 32 70 d1 c8 a5 59 4f b8 35 15 7e e1 6b de 14 d1 3c 53 0f 93 ad 68 fa 7e af 0e 31 e5 df da a4 eb 8f a3 03 5e 53 e2 8f d8 d3 e0 ff 00 8a 8b 3c be 0f b7 d3 a6 3d 24 d2 e5 92 d7 6f d1 11 82 7e 6b 5e 65 4e 1f aa bf 87 34 fd 74 ff Data Ascii: #5i+g$k;_M~?2twqumu;%?WFL&fM\|Gi>&w\|R9T1HQ'?Ga$qmk^-\|up$}TstYsm5RA2pYO5~k<Sh~1^S<=$o~k^eN4t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49922	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:14 UTC	579	OUT	GET /wp-content/uploads/2024/01/NLI_logo_favicon-light-150x150.png HTTP/1.1 Host: naturalearning.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381
2024-05-02 14:33:14 UTC	206	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:14 GMT Server: Apache Last-Modified: Tue, 02 Jan 2024 13:15:26 GMT Accept-Ranges: bytes Content-Length: 4162 Connection: close Content-Type: image/png
2024-05-02 14:33:14 UTC	4162	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 03 00 00 00 0b df 81 d0 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 03 00 50 4c 54 45 fd b8 13 3f 3f 40 fe ff fe fd fd fd c0 cd a3 7f 86 74 6a 6e 61 3a 3a 3c c1 ce a4 ff ff ff 93 94 96 ba c6 a0 5b 5e 57 98 a1 87 be cb a3 6b 6f 63 41 41 42 3b 3b 3d 9c a5 8a c2 cf a6 c3 d0 a7 c4 d0 a8 c2 ce a5 fb fc f9 fc fd fb c6 d2 ab c7 d3 ad ff ff fe f3 f5 ed 40 40 42 3d 3d 3f 45 45 47 bc c9 a1 cc d6 b3 3c 3c 3e 65 68 5f c2 cf a5 fb fb f8 fd fe fc ca d5 b1 c1 c1 c2 c0 cd a4 c5 d1 aa d4 dd bf eb ef e1 e6 ec da f9 fa f6 ed f1 e4 f6 f8 f0 d7 df c3 c9 d4 af f2 f4 eb f8 f9 f5 c8 d4 ae 70 76 66 da e2 c9 f0 f3 e9 ce d8 b7 fc b8 15 ee f2 e6 df e6 d0 c5 d1 a9 f7 f9 f3 c2 ce a2 d0 Data Ascii: PNGIHDRpHYs+PLTE??@tjna::<[^WkocAAB;;=@@B==?EEG<<>eh_pvf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49930	104.19.177.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:19 UTC	546	OUT	GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:19 UTC	815	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:19 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: zgTRIDojRJmnmBTwUyI2Vw== Last-Modified: Tue, 30 Apr 2024 06:34:30 GMT x-ms-request-id: ee6f9417-a01e-0036-1a18-9bb4f3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 82778 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87d8b9ca19af32dc-EWR
2024-05-02 14:33:19 UTC	554	IN	Data Raw: 35 32 65 65 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 52eevar OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-05-02 14:33:19 UTC	1369	IN	Data Raw: 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 43 43 54 49 44 3d 22 5b 5b 4f 6c 64 43 43 54 49 44 5d 5d 22 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 44 6f 6d 61 69 6e 49 64 3d 22 5b 5b 4e 65 77 44 6f 6d 61 69 6e 49 64 5d 5d 22 2c 74 68 Data Ascii: HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",th
2024-05-02 14:33:19 UTC	1369	IN	Data Raw: 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 73 74 79 6c 65 22 21 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 5b 74 2c 65 5d 29 2c 22 73 74 79 6c 65 Data Ascii: his.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=function(t,e){if("style"!==t.toLowerCase()&&o.apply(this,[t,e]),"style
2024-05-02 14:33:19 UTC	1369	IN	Data Raw: 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 76 61 72 20 69 3d 6e 75 6c 6c 3d 3d 28 69 3d 73 2e 77 69 6e 29 3f Data Ascii: oveGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];var i=null==(i=s.win)?
2024-05-02 14:33:19 UTC	1369	IN	Data Raw: 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 28 69 3d 6e 29 26 26 69 2e 6c 61 73 74 49 64 7c 7c 28 6e 2e 6c 61 73 74 49 64 3d 30 29 2c 6e 2e 6c 61 73 74 49 64 2b 2b 2c 6e 2e 65 76 65 6e 74 73 2e 70 Data Ascii: name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],null!=(i=n)&&i.lastId\|\|(n.lastId=0),n.lastId++,n.events.p
2024-05-02 14:33:19 UTC	1369	IN	Data Raw: 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 6e 63 65 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 6e 6f 6e 63 65 7c 7c 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c 74 68 69 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 29 7c 7c 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 Data Ascii: ce=function(){this.nonce=p.stubScriptElement.nonce\|\|p.stubScriptElement.getAttribute("nonce")\|\|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),this.crossOrigin=p.stubScriptElement.getAttribute("crossorigin")\|\|null,this.pr
2024-05-02 14:33:19 UTC	1369	IN	Data Raw: 70 6f 6e 73 65 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 2c 69 2e 73 74 61 74 65 43 6f 64 65 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 28 69 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 65 2c 69 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 Data Ascii: ponse,this.setGeoLocation(i.countryCode,i.stateCode),this.addBannerSDKScript(t)):(i=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],this.setGeoLocation(e,i),this.addBannerSDKScri
2024-05-02 14:33:19 UTC	1369	IN	Data Raw: 65 29 7b 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 74 2c 73 74 61 74 65 3a 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 65 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 74 46 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b 69 66 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 66 69 6c 65 3a 2f 2f 22 2c 22 69 22 29 2e 74 65 73 74 28 74 29 29 74 68 69 73 2e 6f Data Ascii: e){p.userLocation={country:t,state:e=void 0===e?"":e}},h.prototype.otFetch=function(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData");if(new RegExp("^file://","i").test(t))this.o
2024-05-02 14:33:19 UTC	1369	IN	Data Raw: 6f 6e 2c 6f 3d 74 2e 52 75 6c 65 53 65 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 44 65 66 61 75 6c 74 7d 29 3b 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 47 6c 6f 62 61 6c 29 6e 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 65 6c 73 65 7b 76 61 72 20 6c 3d 74 2e 52 75 Data Ascii: on,o=t.RuleSet.filter(function(t){return!0===t.Default});if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.RuleSet[u].Global)n=t.RuleSet[u];else{var l=t.Ru
2024-05-02 14:33:19 UTC	1369	IN	Data Raw: 74 43 6f 6f 6b 69 65 28 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 29 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 49 41 42 47 44 50 52 41 70 70 6c 69 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 3b 74 3f 74 68 69 73 2e 69 73 42 6f 6f 6c 65 61 6e 28 74 29 3f 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 22 74 72 75 65 22 3d 3d 3d 74 3a 70 2e 6f 6e 65 Data Ascii: tCookie(p.oneTrustIABCookieName)):p.isStubReady=!1},h.prototype.validateIABGDPRApplied=function(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split(";")[0];t?this.isBoolean(t)?p.oneTrustIABgdprAppliesGlobally="true"===t:p.one

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49934	104.19.177.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:20 UTC	635	OUT	GET /consent/0174e4ef-b832-4af5-a993-2642a1c2e41e/0174e4ef-b832-4af5-a993-2642a1c2e41e.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.qualtrics.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:20 UTC	901	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:20 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 87d8b9cda99c43bc-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 1479 Cache-Control: public, max-age=86400 Expires: Fri, 03 May 2024 14:33:20 GMT Last-Modified: Wed, 01 May 2024 12:36:40 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: /4jK5nZ0u2EoQ8zkR8T5Zw== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 8a7ab0cc-801e-008a-53d1-9b6d46000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-05-02 14:33:20 UTC	468	IN	Data Raw: 31 33 64 39 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 31 2e 32 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 30 31 37 34 Data Ascii: 13d9{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202401.2.0","OptanonDataJSON":"0174
2024-05-02 14:33:20 UTC	1369	IN	Data Raw: 22 3a 5b 7b 22 49 64 22 3a 22 30 31 38 65 63 65 34 39 2d 37 66 66 30 2d 37 39 34 63 2d 62 39 32 35 2d 31 62 62 32 39 34 30 39 66 33 37 65 22 2c 22 4e 61 6d 65 22 3a 22 47 6c 6f 62 61 6c 20 41 75 64 69 65 6e 63 65 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 70 72 22 2c 22 70 73 22 2c 22 70 77 22 2c 22 70 79 22 2c 22 71 61 22 2c 22 61 64 22 2c 22 61 65 22 2c 22 61 66 22 2c 22 61 67 22 2c 22 61 69 22 2c 22 61 6c 22 2c 22 61 6d 22 2c 22 61 6f 22 2c 22 61 71 22 2c 22 61 72 22 2c 22 61 73 22 2c 22 61 75 22 2c 22 61 77 22 2c 22 61 7a 22 2c 22 62 61 22 2c 22 62 62 22 2c 22 72 73 22 2c 22 62 64 22 2c 22 72 75 22 2c 22 62 66 22 2c 22 72 77 22 2c 22 62 68 22 2c 22 62 69 22 2c 22 62 6a 22 2c 22 62 6c 22 2c 22 62 6d 22 2c 22 62 6e 22 2c 22 62 6f 22 2c 22 73 61 22 Data Ascii: ":[{"Id":"018ece49-7ff0-794c-b925-1bb29409f37e","Name":"Global Audience","Countries":["pr","ps","pw","py","qa","ad","ae","af","ag","ai","al","am","ao","aq","ar","as","au","aw","az","ba","bb","rs","bd","ru","bf","rw","bh","bi","bj","bl","bm","bn","bo","sa"
2024-05-02 14:33:20 UTC	1369	IN	Data Raw: 75 65 2c 22 54 79 70 65 22 3a 22 47 45 4e 45 52 49 43 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 20 54 65 6d 70 6c 61 74 65 22 2c 22 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 47 43 45 6e 61 62 6c 65 22 3a 74 72 75 65 2c 22 49 73 47 50 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 4a 57 54 41 75 74 68 46 6f 72 4b 6e 6f 77 6e 55 73 65 72 73 22 3a 66 61 6c 73 65 7d 2c 7b 22 49 64 22 3a 22 30 31 38 65 63 65 34 39 2d 37 64 33 31 2d 37 30 32 63 2d 61 63 38 64 2d Data Ascii: ue,"Type":"GENERIC","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"Generic Template","Conditions":[],"GCEnable":true,"IsGPPEnabled":false,"EnableJWTAuthForKnownUsers":false},{"Id":"018ece49-7d31-702c-ac8d-
2024-05-02 14:33:20 UTC	1369	IN	Data Raw: 65 72 73 22 3a 66 61 6c 73 65 7d 5d 2c 22 49 61 62 44 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 72 65 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 35 2d 30 31 54 31 32 3a 33 36 3a 33 39 2e 38 34 31 39 30 35 33 32 37 22 2c 22 75 70 64 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 35 2d 30 31 54 31 32 3a 33 36 3a 33 39 2e 38 34 31 39 31 33 38 38 37 22 2c 22 63 6d 70 49 64 22 3a 22 32 38 22 2c 22 63 6d 70 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 53 63 72 65 65 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 4c 61 6e 67 75 61 67 65 22 3a 6e 75 6c 6c 2c 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 30 2c 22 6d 61 78 56 65 6e 64 6f 72 49 64 22 3a 30 2c 22 65 6e 63 6f 64 69 6e Data Ascii: ers":false}],"IabData":{"cookieVersion":"1","createdTime":"2024-05-01T12:36:39.841905327","updatedTime":"2024-05-01T12:36:39.841913887","cmpId":"28","cmpVersion":"1","consentScreen":"1","consentLanguage":null,"vendorListVersion":0,"maxVendorId":0,"encodin
2024-05-02 14:33:20 UTC	514	IN	Data Raw: 32 52 65 6d 6f 76 65 53 65 74 74 69 6e 67 73 49 63 6f 6e 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 42 61 6e 6e 65 72 4c 6f 67 6f 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 65 6e 65 72 61 6c 56 65 6e 64 6f 72 73 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 50 50 22 3a 74 72 75 65 7d 2c 22 49 73 53 75 70 70 72 65 73 73 42 61 6e 6e 65 72 22 3a 66 61 6c 73 65 2c 22 49 73 53 75 70 70 72 65 73 73 50 43 22 3a 66 61 6c 73 65 2c 22 50 75 62 6c 69 73 68 65 72 43 43 22 3a 22 55 53 22 2c 22 44 6f 6d 61 69 6e 22 3a 22 71 75 61 6c 74 72 69 63 73 2e 63 6f 6d 22 2c 22 54 65 6e 61 6e 74 47 75 69 64 22 3a 22 33 64 32 62 36 66 62 34 2d 36 61 32 66 2d 34 30 65 38 2d 39 31 34 32 2d 38 61 33 61 33 61 32 35 62 61 61 30 22 2c 22 45 6e 76 49 64 22 3a 22 61 70 Data Ascii: 2RemoveSettingsIcon":true,"CookieV2BannerLogo":true,"CookieV2GeneralVendors":true,"CookieV2GPP":true},"IsSuppressBanner":false,"IsSuppressPC":false,"PublisherCC":"US","Domain":"qualtrics.com","TenantGuid":"3d2b6fb4-6a2f-40e8-9142-8a3a3a25baa0","EnvId":"ap
2024-05-02 14:33:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49940	104.19.177.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:22 UTC	427	OUT	GET /consent/0174e4ef-b832-4af5-a993-2642a1c2e41e/0174e4ef-b832-4af5-a993-2642a1c2e41e.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:23 UTC	901	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:23 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 87d8b9df3a7078e8-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 1069 Cache-Control: public, max-age=86400 Expires: Fri, 03 May 2024 14:33:23 GMT Last-Modified: Wed, 01 May 2024 12:36:40 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: /4jK5nZ0u2EoQ8zkR8T5Zw== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 956a6007-f01e-0015-7ed1-9b83f0000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-05-02 14:33:23 UTC	468	IN	Data Raw: 31 33 64 39 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 31 2e 32 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 30 31 37 34 Data Ascii: 13d9{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202401.2.0","OptanonDataJSON":"0174
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 22 3a 5b 7b 22 49 64 22 3a 22 30 31 38 65 63 65 34 39 2d 37 66 66 30 2d 37 39 34 63 2d 62 39 32 35 2d 31 62 62 32 39 34 30 39 66 33 37 65 22 2c 22 4e 61 6d 65 22 3a 22 47 6c 6f 62 61 6c 20 41 75 64 69 65 6e 63 65 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 70 72 22 2c 22 70 73 22 2c 22 70 77 22 2c 22 70 79 22 2c 22 71 61 22 2c 22 61 64 22 2c 22 61 65 22 2c 22 61 66 22 2c 22 61 67 22 2c 22 61 69 22 2c 22 61 6c 22 2c 22 61 6d 22 2c 22 61 6f 22 2c 22 61 71 22 2c 22 61 72 22 2c 22 61 73 22 2c 22 61 75 22 2c 22 61 77 22 2c 22 61 7a 22 2c 22 62 61 22 2c 22 62 62 22 2c 22 72 73 22 2c 22 62 64 22 2c 22 72 75 22 2c 22 62 66 22 2c 22 72 77 22 2c 22 62 68 22 2c 22 62 69 22 2c 22 62 6a 22 2c 22 62 6c 22 2c 22 62 6d 22 2c 22 62 6e 22 2c 22 62 6f 22 2c 22 73 61 22 Data Ascii: ":[{"Id":"018ece49-7ff0-794c-b925-1bb29409f37e","Name":"Global Audience","Countries":["pr","ps","pw","py","qa","ad","ae","af","ag","ai","al","am","ao","aq","ar","as","au","aw","az","ba","bb","rs","bd","ru","bf","rw","bh","bi","bj","bl","bm","bn","bo","sa"
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 75 65 2c 22 54 79 70 65 22 3a 22 47 45 4e 45 52 49 43 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 20 54 65 6d 70 6c 61 74 65 22 2c 22 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 47 43 45 6e 61 62 6c 65 22 3a 74 72 75 65 2c 22 49 73 47 50 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 4a 57 54 41 75 74 68 46 6f 72 4b 6e 6f 77 6e 55 73 65 72 73 22 3a 66 61 6c 73 65 7d 2c 7b 22 49 64 22 3a 22 30 31 38 65 63 65 34 39 2d 37 64 33 31 2d 37 30 32 63 2d 61 63 38 64 2d Data Ascii: ue,"Type":"GENERIC","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"Generic Template","Conditions":[],"GCEnable":true,"IsGPPEnabled":false,"EnableJWTAuthForKnownUsers":false},{"Id":"018ece49-7d31-702c-ac8d-
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 65 72 73 22 3a 66 61 6c 73 65 7d 5d 2c 22 49 61 62 44 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 72 65 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 35 2d 30 31 54 31 32 3a 33 36 3a 33 39 2e 38 34 31 39 30 35 33 32 37 22 2c 22 75 70 64 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 35 2d 30 31 54 31 32 3a 33 36 3a 33 39 2e 38 34 31 39 31 33 38 38 37 22 2c 22 63 6d 70 49 64 22 3a 22 32 38 22 2c 22 63 6d 70 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 53 63 72 65 65 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 4c 61 6e 67 75 61 67 65 22 3a 6e 75 6c 6c 2c 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 30 2c 22 6d 61 78 56 65 6e 64 6f 72 49 64 22 3a 30 2c 22 65 6e 63 6f 64 69 6e Data Ascii: ers":false}],"IabData":{"cookieVersion":"1","createdTime":"2024-05-01T12:36:39.841905327","updatedTime":"2024-05-01T12:36:39.841913887","cmpId":"28","cmpVersion":"1","consentScreen":"1","consentLanguage":null,"vendorListVersion":0,"maxVendorId":0,"encodin
2024-05-02 14:33:23 UTC	514	IN	Data Raw: 32 52 65 6d 6f 76 65 53 65 74 74 69 6e 67 73 49 63 6f 6e 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 42 61 6e 6e 65 72 4c 6f 67 6f 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 65 6e 65 72 61 6c 56 65 6e 64 6f 72 73 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 50 50 22 3a 74 72 75 65 7d 2c 22 49 73 53 75 70 70 72 65 73 73 42 61 6e 6e 65 72 22 3a 66 61 6c 73 65 2c 22 49 73 53 75 70 70 72 65 73 73 50 43 22 3a 66 61 6c 73 65 2c 22 50 75 62 6c 69 73 68 65 72 43 43 22 3a 22 55 53 22 2c 22 44 6f 6d 61 69 6e 22 3a 22 71 75 61 6c 74 72 69 63 73 2e 63 6f 6d 22 2c 22 54 65 6e 61 6e 74 47 75 69 64 22 3a 22 33 64 32 62 36 66 62 34 2d 36 61 32 66 2d 34 30 65 38 2d 39 31 34 32 2d 38 61 33 61 33 61 32 35 62 61 61 30 22 2c 22 45 6e 76 49 64 22 3a 22 61 70 Data Ascii: 2RemoveSettingsIcon":true,"CookieV2BannerLogo":true,"CookieV2GeneralVendors":true,"CookieV2GPP":true},"IsSuppressBanner":false,"IsSuppressPC":false,"PublisherCC":"US","Domain":"qualtrics.com","TenantGuid":"3d2b6fb4-6a2f-40e8-9142-8a3a3a25baa0","EnvId":"ap
2024-05-02 14:33:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49941	172.64.155.119	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:22 UTC	601	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.qualtrics.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:23 UTC	370	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:23 GMT Content-Type: application/json Content-Length: 69 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87d8b9df3f398cc3-EWR
2024-05-02 14:33:23 UTC	69	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49939	104.17.71.206	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:23 UTC	547	OUT	GET /js/forms2/js/forms2.min.js HTTP/1.1 Host: success.qualtrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:23 UTC	722	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:23 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 23 Apr 2024 04:13:58 GMT ETag: W/"612e1-31af8-616bbc873ed80" Vary: Accept-Encoding X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 323 Expires: Thu, 02 May 2024 18:33:23 GMT Cache-Control: public, max-age=14400 Set-Cookie: __cf_bm=P6xkRBnbThYk9fTUADMBA6eqFapGBrLfwrgJ_vp5tPQ-1714660403-1.0.1.1-oA_4XyzWU9KqLd3yy64XOuqFpdV.ZOiA7ZWk1FxHH62raFGMsNWUyEPr3gxp_UAdEkm_sin46M3GozSXHuQJpw; path=/; expires=Thu, 02-May-24 15:03:23 GMT; domain=.success.qualtrics.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87d8b9df0f5d0c7c-EWR
2024-05-02 14:33:23 UTC	647	IN	Data Raw: 37 63 63 66 0d 0a 2f 2a 21 20 66 6f 72 6d 73 32 20 32 30 32 34 2d 30 31 2d 32 39 20 20 53 65 65 20 66 6f 72 6d 73 32 2e 6a 73 20 66 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 20 61 28 62 2c 63 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 67 2c 68 29 7b 69 66 28 21 63 5b 67 5d 29 7b 69 66 28 21 62 5b 67 5d 29 7b 76 61 72 20 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 68 26 26 69 29 72 65 74 75 72 6e 20 69 28 67 2c 21 30 29 3b 69 66 28 66 29 72 65 74 75 72 6e 20 66 28 67 2c 21 30 29 3b 76 61 72 20 6a 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 67 2b 22 27 22 29 3b 74 68 72 6f 77 Data Ascii: 7ccf/! forms2 2024-01-29 See forms2.js for license info /!function a(b,c,d){function e(g,h){if(!c[g]){if(!b[g]){var i="function"==typeof require&&require;if(!h&&i)return i(g,!0);if(f)return f(g,!0);var j=new Error("Cannot find module '"+g+"'");throw
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 6f 64 65 41 74 28 30 29 3b 72 65 74 75 72 6e 20 62 3d 3d 3d 67 7c 7c 62 3d 3d 3d 6c 3f 36 32 3a 62 3d 3d 3d 68 7c 7c 62 3d 3d 3d 6d 3f 36 33 3a 69 3e 62 3f 2d 31 3a 69 2b 31 30 3e 62 3f 62 2d 69 2b 32 36 2b 32 36 3a 6b 2b 32 36 3e 62 3f 62 2d 6b 3a 6a 2b 32 36 3e 62 3f 62 2d 6a 2b 32 36 3a 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 63 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 61 29 7b 6a 5b 6c 2b 2b 5d 3d 61 7d 76 61 72 20 64 2c 65 2c 67 2c 68 2c 69 2c 6a 3b 69 66 28 61 2e 6c 65 6e 67 74 68 25 34 3e 30 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 73 74 72 69 6e 67 2e 20 4c 65 6e 67 74 68 20 6d 75 73 74 20 62 65 20 61 20 6d 75 6c 74 69 70 6c 65 20 6f 66 20 34 22 29 3b 76 61 72 20 6b 3d 61 2e 6c 65 6e 67 74 68 3b 69 Data Ascii: odeAt(0);return b===g\|\|b===l?62:b===h\|\|b===m?63:i>b?-1:i+10>b?b-i+26+26:k+26>b?b-k:j+26>b?b-j+26:void 0}function c(a){function c(a){j[l++]=a}var d,e,g,h,i,j;if(a.length%4>0)throw new Error("Invalid string. Length must be a multiple of 4");var k=a.length;i
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 20 64 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 7d 74 72 79 7b 76 61 72 20 62 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 31 29 3b 72 65 74 75 72 6e 20 62 2e 66 6f 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 34 32 7d 2c 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 2c 34 32 3d 3d 3d 62 2e 66 6f 6f 28 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 62 2e 73 75 62 61 72 72 61 79 26 26 30 3d 3d 3d 62 2e 73 75 62 61 72 72 61 79 28 31 2c 31 29 2e 62 79 74 65 4c 65 6e 67 74 68 7d 63 61 74 63 68 28 63 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 66 2e 54 59 50 45 44 5f 41 52 52 41 59 5f 53 55 50 Data Ascii: nction d(){function a(){}try{var b=new Uint8Array(1);return b.foo=function(){return 42},b.constructor=a,42===b.foo()&&b.constructor===a&&"function"==typeof b.subarray&&0===b.subarray(1,1).byteLength}catch(c){return!1}}function e(){return f.TYPED_ARRAY_SUP
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 62 29 29 29 3a 61 3d 6c 28 61 2c 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 62 29 29 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 30 7c 71 28 62 2e 6c 65 6e 67 74 68 29 3b 61 3d 70 28 61 2c 63 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 63 3e 64 3b 64 2b 3d 31 29 61 5b 64 5d 3d 32 35 35 26 62 5b 64 5d 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 22 42 75 66 66 65 72 22 3d 3d 3d 62 2e 74 79 70 65 26 26 59 28 62 2e 64 61 74 61 29 26 26 28 63 3d 62 2e 64 61 74 61 2c 64 3d 30 7c 71 28 63 2e 6c 65 6e 67 74 68 29 29 2c 61 3d 70 28 61 2c 64 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 64 3e 65 3b 65 2b 3d 31 29 61 5b 65 5d 3d 32 Data Ascii: new Uint8Array(b))):a=l(a,new Uint8Array(b)),a}function n(a,b){var c=0\|q(b.length);a=p(a,c);for(var d=0;c>d;d+=1)a[d]=255&b[d];return a}function o(a,b){var c,d=0;"Buffer"===b.type&&Y(b.data)&&(c=b.data,d=0\|q(c.length)),a=p(a,d);for(var e=0;d>e;e+=1)a[e]=2
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 73 65 22 62 61 73 65 36 34 22 3a 72 65 74 75 72 6e 20 41 28 74 68 69 73 2c 62 2c 63 29 3b 63 61 73 65 22 75 63 73 32 22 3a 63 61 73 65 22 75 63 73 2d 32 22 3a 63 61 73 65 22 75 74 66 31 36 6c 65 22 3a 63 61 73 65 22 75 74 66 2d 31 36 6c 65 22 3a 72 65 74 75 72 6e 20 47 28 74 68 69 73 2c 62 2c 63 29 3b 64 65 66 61 75 6c 74 3a 69 66 28 64 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 55 6e 6b 6e 6f 77 6e 20 65 6e 63 6f 64 69 6e 67 3a 20 22 2b 61 29 3b 61 3d 28 61 2b 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 64 3d 21 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 2c 63 2c 64 29 7b 63 3d 4e 75 6d 62 65 72 28 63 29 7c 7c 30 3b 76 61 72 20 65 3d 61 2e 6c 65 6e 67 74 68 2d 63 3b 64 3f 28 64 3d 4e 75 6d 62 65 72 28 64 29 2c 64 Data Ascii: se"base64":return A(this,b,c);case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return G(this,b,c);default:if(d)throw new TypeError("Unknown encoding: "+a);a=(a+"").toLowerCase(),d=!0}}function u(a,b,c,d){c=Number(c)\|\|0;var e=a.length-c;d?(d=Number(d),d
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 67 3d 35 36 33 32 30 7c 31 30 32 33 26 67 29 2c 64 2e 70 75 73 68 28 67 29 2c 65 2b 3d 68 7d 72 65 74 75 72 6e 20 43 28 64 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 29 7b 76 61 72 20 62 3d 61 2e 6c 65 6e 67 74 68 3b 69 66 28 24 3e 3d 62 29 72 65 74 75 72 6e 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 53 74 72 69 6e 67 2c 61 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 30 3b 62 3e 64 3b 29 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 53 74 72 69 6e 67 2c 61 2e 73 6c 69 63 65 28 64 2c 64 2b 3d 24 29 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 44 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 22 22 3b 63 3d 4d 61 74 68 2e 6d 69 6e 28 61 2e 6c 65 6e 67 74 68 2c 63 Data Ascii: g=56320\|1023&g),d.push(g),e+=h}return C(d)}function C(a){var b=a.length;if($>=b)return String.fromCharCode.apply(String,a);for(var c="",d=0;b>d;)c+=String.fromCharCode.apply(String,a.slice(d,d+=$));return c}function D(a,b,c){var d="";c=Math.min(a.length,c
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 64 65 78 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 22 29 3b 69 66 28 30 3e 63 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 64 65 78 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 72 65 74 75 72 6e 20 65 7c 7c 4c 28 61 2c 62 2c 63 2c 34 2c 33 2e 34 30 32 38 32 33 34 36 36 33 38 35 32 38 38 36 65 33 38 2c 2d 33 2e 34 30 32 38 32 33 34 36 36 33 38 35 32 38 38 36 65 33 38 29 2c 58 2e 77 72 69 74 65 28 61 2c 62 2c 63 2c 64 2c 32 33 2c 34 29 2c 63 2b 34 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 72 65 74 75 72 6e 20 65 7c 7c 4c 28 61 2c 62 2c 63 2c 38 2c 31 2e 37 39 37 36 39 33 31 33 34 Data Ascii: new RangeError("index out of range");if(0>c)throw new RangeError("index out of range")}function M(a,b,c,d,e){return e\|\|L(a,b,c,4,3.4028234663852886e38,-3.4028234663852886e38),X.write(a,b,c,d,23,4),c+4}function N(a,b,c,d,e){return e\|\|L(a,b,c,8,1.797693134
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 63 68 61 72 43 6f 64 65 41 74 28 67 29 2c 64 3d 63 3e 3e 38 2c 65 3d 63 25 32 35 36 2c 66 2e 70 75 73 68 28 65 29 2c 66 2e 70 75 73 68 28 64 29 3b 72 65 74 75 72 6e 20 66 7d 66 75 6e 63 74 69 6f 6e 20 55 28 61 29 7b 72 65 74 75 72 6e 20 57 2e 74 6f 42 79 74 65 41 72 72 61 79 28 4f 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 56 28 61 2c 62 2c 63 2c 64 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 64 3e 65 26 26 21 28 65 2b 63 3e 3d 62 2e 6c 65 6e 67 74 68 7c 7c 65 3e 3d 61 2e 6c 65 6e 67 74 68 29 3b 65 2b 2b 29 62 5b 65 2b 63 5d 3d 61 5b 65 5d 3b 72 65 74 75 72 6e 20 65 7d 76 61 72 20 57 3d 61 28 22 62 61 73 65 36 34 2d 6a 73 22 29 2c 58 3d 61 28 22 69 65 65 65 37 35 34 22 29 2c 59 3d 61 28 22 69 73 61 72 72 61 79 22 29 3b 63 2e 42 75 66 66 65 72 3d 66 2c 63 2e Data Ascii: charCodeAt(g),d=c>>8,e=c%256,f.push(e),f.push(d);return f}function U(a){return W.toByteArray(O(a))}function V(a,b,c,d){for(var e=0;d>e&&!(e+c>=b.length\|\|e>=a.length);e++)b[e+c]=a[e];return e}var W=a("base64-js"),X=a("ieee754"),Y=a("isarray");c.Buffer=f,c.
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 30 7c 74 68 69 73 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 61 3f 22 22 3a 30 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 42 28 74 68 69 73 2c 30 2c 61 29 3a 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 65 71 75 61 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 66 2e 69 73 42 75 66 66 65 72 28 61 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 20 42 75 66 66 65 72 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 3d 3d 3d 61 3f 21 30 3a 30 3d 3d 3d 66 2e 63 6f 6d 70 61 72 65 28 74 68 69 73 2c 61 29 7d 2c 66 2e 70 72 6f 74 6f 74 Data Ascii: g=function(){var a=0\|this.length;return 0===a?"":0===arguments.length?B(this,0,a):t.apply(this,arguments)},f.prototype.equals=function(a){if(!f.isBuffer(a))throw new TypeError("Argument must be a Buffer");return this===a?!0:0===f.compare(this,a)},f.protot
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 2e 73 65 74 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2e 20 41 63 63 65 73 73 20 75 73 69 6e 67 20 61 72 72 61 79 20 69 6e 64 65 78 65 73 20 69 6e 73 74 65 61 64 2e 22 29 2c 74 68 69 73 2e 77 72 69 74 65 55 49 6e 74 38 28 61 2c 62 29 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 77 72 69 74 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 62 29 64 3d 22 75 74 66 38 22 2c 63 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 62 3d 30 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 3d 3d 3d 63 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 64 3d 62 2c 63 3d 74 68 69 73 2e 6c 65 6e 67 74 Data Ascii: pe.set=function(a,b){return console.log(".set() is deprecated. Access using array indexes instead."),this.writeUInt8(a,b)},f.prototype.write=function(a,b,c,d){if(void 0===b)d="utf8",c=this.length,b=0;else if(void 0===c&&"string"==typeof b)d=b,c=this.lengt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49944	104.17.71.206	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:23 UTC	559	OUT	GET /js/forms2/css/forms2.css HTTP/1.1 Host: success.qualtrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:23 UTC	707	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:23 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 23 Apr 2024 04:13:58 GMT ETag: W/"52009d-3437-616bbc873ed80" Vary: Accept-Encoding X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 3215 Expires: Thu, 02 May 2024 18:33:23 GMT Cache-Control: public, max-age=14400 Set-Cookie: __cf_bm=d4xvTl4bP1RVldhuRzqUuZQMMBnUf8TO5Wt7yq7FG9k-1714660403-1.0.1.1-yrJFw6N1ywrppWUhh3Uf7GTMV4p3iH__50tQvxXPQNmFXoLS5wpx0cbdOsidQGt0jK_L9_IuBrml1woyuRvaRA; path=/; expires=Thu, 02-May-24 15:03:23 GMT; domain=.success.qualtrics.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87d8b9dfdae20fa4-EWR
2024-05-02 14:33:23 UTC	662	IN	Data Raw: 33 34 33 37 0d 0a 2f 2a 20 54 68 69 73 20 69 73 20 75 73 65 64 20 74 6f 20 74 65 73 74 20 69 66 20 74 68 65 20 73 74 79 6c 65 73 68 65 65 74 20 68 61 73 20 62 65 65 6e 20 6c 6f 61 64 65 64 20 79 65 74 2a 2f 0a 23 6d 6b 74 6f 53 74 79 6c 65 4c 6f 61 64 65 64 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 31 32 33 34 35 36 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 43 6c 65 61 72 20 7b 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 20 20 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 64 69 76 2c 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 73 70 61 6e Data Ascii: 3437/* This is used to test if the stylesheet has been loaded yet*/#mktoStyleLoaded { background-color: #123456; display: none;}.mktoForm { text-align: left;}.mktoForm .mktoClear { clear: both; float: none;}.mktoForm div,.mktoForm span
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 20 6e 6f 6e 65 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 4c 61 62 65 6c 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 65 6d 3b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 2e 33 65 6d 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 46 69 65 6c 64 20 7b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 65 6d 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 50 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 4c 6f 67 69 63 61 6c 46 69 65 6c 64 20 7b 0a 20 20 66 6c 6f 61 Data Ascii: none;}.mktoForm .mktoLabel { float: left; line-height: 1.2em; padding-top: 0.3em;}.mktoForm .mktoField { line-height: 1.2em; font-size: 1em; float: left;}.mktoForm .mktoPlaceholder { float: left;}.mktoForm .mktoLogicalField { floa
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 4c 61 62 65 6c 54 6f 4c 65 66 74 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 72 69 67 68 74 3a 20 30 2e 33 65 6d 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 2e 6d 6b 74 6f 4c 61 79 6f 75 74 41 62 6f 76 65 20 2e 6d 6b 74 6f 52 65 71 75 69 72 65 64 46 69 65 6c 64 20 2e 6d 6b 74 6f 41 73 74 65 72 69 78 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 35 70 78 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 52 65 71 75 69 72 65 64 46 69 65 6c 64 20 2e 6d Data Ascii: ut[type=checkbox],.mktoForm .mktoLabelToLeft input[type=radio] { position: absolute; right: 0.3em;}.mktoForm.mktoLayoutAbove .mktoRequiredField .mktoAsterix { float: left; padding-left: 0; padding-right: 5px;}.mktoForm .mktoRequiredField .m
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 65 6d 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0a 20 20 72 65 73 69 7a 65 3a 20 6e 6f 6e 65 3b 0a 20 20 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2f 2a 20 46 69 72 65 66 6f 78 20 63 6f 6d 70 75 74 65 73 20 72 6f 77 20 68 65 69 67 68 74 20 77 72 6f 6e 67 20 66 6f 72 20 74 68 65 20 6c 61 73 74 20 31 33 20 79 65 61 72 73 2e 2e 2e 20 68 74 74 70 73 3a 2f 2f 62 75 67 7a 69 6c 6c 61 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 73 68 6f 77 5f 62 75 67 2e 63 67 69 3f 69 64 3d 33 33 36 35 34 20 2a 2f 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 74 65 78 74 61 72 65 61 5b 72 6f 77 73 3d 22 31 22 5d 20 7b 0a 20 20 68 65 69 67 68 74 3a 20 32 65 6d 3b 0a 7d 0a 2e 6d 6b 74 6f 46 Data Ascii: margin: 0; line-height: 1.2em; overflow: auto; resize: none; float: none;}/* Firefox computes row height wrong for the last 13 years... https://bugzilla.mozilla.org/show_bug.cgi?id=33654 */.mktoForm textarea[rows="1"] { height: 2em;}.mktoF
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 46 6f 72 6d 20 2e 6d 6b 74 6f 45 72 72 6f 72 20 2e 6d 6b 74 6f 45 72 72 6f 72 41 72 72 6f 77 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 35 31 62 30 30 3b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 39 66 31 33 30 30 3b 0a 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 6e 6f 6e 65 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 36 70 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 0a 20 20 74 72 61 6e 73 66 Data Ascii: Form .mktoError .mktoErrorArrow { background-color: #e51b00; border: 1px solid #9f1300; border-right: none; border-bottom: none; display: inline-block; height: 16px; -webkit-transform: rotate(45deg); -moz-transform: rotate(45deg); transf
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 20 30 2e 36 65 6d 3b 0a 20 20 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 23 39 30 31 31 30 30 20 30 20 2d 31 70 78 20 30 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 45 72 72 6f 72 20 2e 6d 6b 74 6f 45 72 72 6f 72 4d 73 67 20 2e 6d 6b 74 6f 45 72 72 6f 72 44 65 74 61 69 6c 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 62 75 74 74 6f 6e 2e 6d 6b 74 6f 42 75 74 74 6f 6e 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 62 75 74 74 6f 6e 2e 6d 6b 74 6f 42 75 74 74 6f 6e 3a 64 69 73 61 62 6c 65 64 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 35 3b 0a 20 20 2d 6d 73 2d 66 69 6c 74 65 72 3a 20 22 70 72 6f 67 Data Ascii: 0.6em; text-shadow: #901100 0 -1px 0;}.mktoForm .mktoError .mktoErrorMsg .mktoErrorDetail { display: block;}.mktoForm button.mktoButton { cursor: pointer; margin: 0;}.mktoForm button.mktoButton:disabled { opacity: 0.5; -ms-filter: "prog
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 37 64 30 34 3b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 6e 6f 6e 65 3b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 6e 6f 6e 65 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 62 6f 74 74 6f 6d 3a 20 35 70 78 3b 0a 7d 0a 2f 2a 2a 20 54 68 65 73 65 20 74 77 6f 20 73 74 79 6c 65 73 20 61 72 65 20 66 6f 72 20 62 72 6f 77 73 65 72 73 20 74 68 61 74 20 64 6f 6e 27 74 20 73 75 70 70 6f 72 74 20 63 73 73 20 74 72 61 6e 73 66 6f 72 6d 73 20 2a 2f 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 52 61 6e 67 65 46 69 65 6c 64 20 2e 6d 6b 74 6f 52 61 6e 67 65 56 61 6c 75 65 41 72 72 6f 77 57 72 61 70 2e 6d 6b 74 6f 41 72 72 6f 77 Data Ascii: ound-color: #007d04; border-left: none; border-top: none; margin-top: 5px; position: absolute; bottom: 5px;}/** These two styles are for browsers that don't support css transforms */.mktoForm .mktoRangeField .mktoRangeValueArrowWrap.mktoArrow
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 30 3b 0a 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 7a 6f 6f 6d 3a 20 31 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 35 29 3b 0a 20 20 66 69 6c 74 65 72 3a 20 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 23 38 30 30 30 30 30 30 30 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 23 38 30 30 30 30 30 30 30 29 3b 0a 20 20 2d 6d 73 2d 66 69 6c 74 65 72 3a 20 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 23 38 30 30 30 30 30 30 30 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 23 Data Ascii: 0; right: 0; zoom: 1; background: rgba(0,0,0,0.5); filter: progid:DXImageTransform.Microsoft.gradient(startColorstr=#80000000, endColorstr=#80000000); -ms-filter: "progid:DXImageTransform.Microsoft.gradient(startColorstr=#80000000, endColorstr=#
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 6f 46 6f 72 6d 20 66 69 65 6c 64 73 65 74 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 7d 0a 20 20 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 0a 20 20 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 0a 20 20 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2c 0a 20 20 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 0a 20 20 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 0a 20 20 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 0a 20 20 2e 6d 6b 74 6f 46 6f 72 6d 20 74 65 78 74 61 72 65 61 2e 6d 6b 74 6f 46 69 65 6c 64 2c 0a Data Ascii: oForm fieldset { padding: 0 10px; } .mktoForm input[type=url], .mktoForm input[type=text], .mktoForm input[type=date], .mktoForm input[type=tel], .mktoForm input[type=email], .mktoForm input[type=number], .mktoForm textarea.mktoField,
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 72 2d 62 6f 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 20 20 7d 0a 20 20 2e 6d 6b 74 6f 4d 6f 62 69 6c 65 53 68 6f 77 20 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 47 75 74 74 65 72 2c 0a 20 20 2e 6d 6b 74 6f 4d 6f 62 69 6c 65 53 68 6f 77 20 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 4f 66 66 73 65 74 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 20 20 2e 6d 6b 74 6f 4d 6f 62 69 6c 65 53 68 6f 77 20 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 46 6f 72 6d 43 6f 6c 20 2e 6d 6b 74 6f 4c 61 62 65 6c 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 7d 0a 20 20 2e 6d 6b 74 6f 4d 6f 62 69 6c 65 53 68 6f 77 20 2e 6d 6b 74 Data Ascii: r-box; padding: 10px; } .mktoMobileShow .mktoForm .mktoGutter, .mktoMobileShow .mktoForm .mktoOffset { display: none; } .mktoMobileShow .mktoForm .mktoFormCol .mktoLabel { text-align: left; width: 100%; } .mktoMobileShow .mkt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49943	104.17.71.206	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:23 UTC	571	OUT	GET /js/forms2/css/forms2-theme-plain.css HTTP/1.1 Host: success.qualtrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:23 UTC	705	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:23 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 23 Apr 2024 04:13:58 GMT ETag: W/"6129b-33c-616bbc873ed80" Vary: Accept-Encoding X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 2247 Expires: Thu, 02 May 2024 18:33:23 GMT Cache-Control: public, max-age=14400 Set-Cookie: __cf_bm=HC9C5iVS5xaJATy7UElHy1mVXPjj5Oi889oAJquUcQw-1714660403-1.0.1.1-GlmNEQttpAx68Z8FWbaFDpIPZAhb3RAmzHTalb2b2SGoo9X0Yf0JmGZVQHmGPdKSwUyfY5bXRYpgjxccPvemeQ; path=/; expires=Thu, 02-May-24 15:03:23 GMT; domain=.success.qualtrics.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87d8b9dfdf854308-EWR
2024-05-02 14:33:23 UTC	664	IN	Data Raw: 33 33 63 0d 0a 23 6d 6b 74 6f 53 74 79 6c 65 4c 6f 61 64 65 64 20 7b 0a 20 20 2f 2a 20 63 73 73 20 6c 6f 61 64 20 64 65 74 65 63 74 69 6f 6e 2c 20 64 6f 20 6e 6f 74 20 72 65 6d 6f 76 65 20 2a 2f 0a 20 20 63 6f 6c 6f 72 3a 23 31 32 33 34 35 36 3b 0a 7d 0a 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 66 69 65 6c 64 73 65 74 20 7b 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 66 69 65 6c 64 73 65 74 20 6c 65 67 65 6e 64 7b 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 0a 2e 6d 6b 74 6f 46 6f 72 Data Ascii: 33c#mktoStyleLoaded { /* css load detection, do not remove */ color:#123456;}.mktoForm fieldset {}.mktoForm fieldset legend{}.mktoForm input[type=text],.mktoForm input[type=url],.mktoForm input[type=email],.mktoForm input[type=tel],.mktoFor
2024-05-02 14:33:23 UTC	171	IN	Data Raw: 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 3a 66 6f 63 75 73 2c 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 66 6f 63 75 73 2c 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 3a 66 6f 63 75 73 2c 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 73 65 6c 65 63 74 2e 6d 6b 74 6f 46 69 65 6c 64 3a 66 6f 63 75 73 2c 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 74 65 78 74 61 72 65 61 2e 6d 6b 74 6f 46 69 65 6c 64 3a 66 6f 63 75 73 7b 7d 0a 0d 0a Data Ascii: Form input[type=tel]:focus,.mktoForm input[type=number]:focus,.mktoForm input[type=date]:focus,.mktoForm select.mktoField:focus,.mktoForm textarea.mktoField:focus{}
2024-05-02 14:33:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49953	104.19.177.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:23 UTC	559	OUT	GET /scripttemplates/202401.2.0/otBannerSdk.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:23 UTC	815	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:23 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: ekgyiOgvSPjNzcyXVUS11Q== Last-Modified: Thu, 07 Mar 2024 11:26:28 GMT x-ms-request-id: e31c6377-501e-009b-7f34-71f886000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 73954 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87d8b9e2891915bb-EWR
2024-05-02 14:33:23 UTC	554	IN	Data Raw: 37 63 37 32 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 34 30 31 2e 32 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 4e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 4e 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c72/** * onetrust-banner-sdk * v202401.2.0 * by OneTrust LLC * Copyright 2024 */!function(){"use strict";var N=function(e,t){return(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 6f 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 48 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 52 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 46 28 65 2c 73 2c 61 2c 6c 29 7b 72 65 74 75 72 6e 20 6e 65 Data Ascii: otype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function F(e,s,a,l){return ne
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 6c 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 74 3d 30 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 3c 6f 3b 74 2b 2b 29 65 2b 3d 61 72 Data Ascii: l.label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function q(){for(var e=0,t=0,o=arguments.length;t<o;t++)e+=ar
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 63 65 6f 66 20 4b 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 58 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 24 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 58 28 74 29 7d 63 61 74 63 68 28 65 29 7b 4a 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f 76 61 6c 75 65 3d 74 2c 58 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 58 28 65 29 7b 32 3d 3d 3d 65 2e 5f 73 74 61 74 65 26 26 30 3d 3d Data Ascii: ceof K)return t._state=3,t._value=e,void X(t);if("function"==typeof o)return void $((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,X(t)}catch(e){J(t,e)}var n,r}function J(e,t){e._state=2,e._value=t,X(e)}function X(e){2===e._state&&0==
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 4b 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4b 3f 74 3a 6e 65 77 20 4b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 4b 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 4b 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 28 6f 29 7d 29 7d 2c 4b 2e 72 61 63 65 3d 66 75 6e 63 Data Ascii: eturn void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},K.resolve=function(t){return t&&"object"==typeof t&&t.constructor===K?t:new K(function(e){e(t)})},K.reject=function(o){return new K(function(e,t){t(o)})},K.race=func
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 2e 73 75 62 73 74 72 69 6e 67 28 74 2d 65 2e 6c 65 6e 67 74 68 2c 74 29 3d 3d 3d 65 7d 2c 77 72 69 74 61 62 6c 65 Data Ascii: e:!0,configurable:!0})},Z.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length),this.substring(t-e.length,t)===e},writable
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 2e 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3e 3e 30 2c 72 3d 6e 3c 30 3f 4d 61 74 68 2e 6d 61 78 Data Ascii: .initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t.length>>>0,n=arguments[1]>>0,r=n<0?Math.max
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 67 73 22 2c 65 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 6f 65 3d 6f 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 3d 22 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 22 2c 28 65 3d 6e 65 3d 6e 65 7c 7c 7b 7d 29 5b 65 2e 50 75 72 70 6f Data Ascii: gs",e[e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=te=te\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=oe=oe\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateConsent="UpdateConsent",(e=ne=ne\|\|{})[e.Purpo
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 74 20 41 6c 6c 22 5d 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 2c 28 65 3d 68 65 3d 68 65 7c 7c 7b 7d 29 2e 41 63 74 69 76 65 3d 22 31 22 2c 65 2e 49 6e 41 63 74 69 76 65 3d 22 30 22 2c 28 65 3d 43 65 3d 43 65 7c 7c 7b 7d 29 2e 48 6f 73 74 3d 22 48 6f 73 74 22 2c 65 2e 47 65 6e 56 65 6e 64 6f 72 3d 22 47 65 6e 56 65 6e 22 2c 28 65 3d 79 65 3d 79 65 Data Ascii: t All"]=5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value changed",(e=he=he\|\|{}).Active="1",e.InActive="0",(e=Ce=Ce\|\|{}).Host="Host",e.GenVendor="GenVen",(e=ye=ye
2024-05-02 14:33:23 UTC	1369	IN	Data Raw: 7b 7d 29 2e 67 72 61 6e 74 65 64 3d 22 67 72 61 6e 74 65 64 22 2c 65 2e 64 65 6e 69 65 64 3d 22 64 65 6e 69 65 64 22 2c 30 2c 28 65 3d 4c 65 3d 4c 65 7c 7c 7b 7d 29 2e 4f 42 4a 45 43 54 5f 54 4f 5f 4c 49 3d 22 4f 62 6a 65 63 74 54 6f 4c 49 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 5f 65 3d 5f 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 6f 6f 6b 69 65 73 22 2c 65 2e 76 65 6e 64 6f 72 73 3d 22 76 65 6e 64 6f 72 73 22 2c 28 65 3d 45 65 3d 45 65 7c 7c 7b 7d 29 2e 47 44 50 52 3d 22 47 44 50 52 22 2c 65 2e 43 43 50 41 3d 22 43 43 50 41 22 2c 65 2e 49 41 42 32 3d 22 49 41 42 32 22 2c 65 2e 49 41 42 32 56 32 3d 22 49 41 42 32 56 32 22 Data Ascii: {}).granted="granted",e.denied="denied",0,(e=Le=Le\|\|{}).OBJECT_TO_LI="ObjectToLI",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=_e=_e\|\|{}).cookies="cookies",e.vendors="vendors",(e=Ee=Ee\|\|{}).GDPR="GDPR",e.CCPA="CCPA",e.IAB2="IAB2",e.IAB2V2="IAB2V2"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49955	104.18.32.137	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:23 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:23 UTC	249	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:23 GMT Content-Type: text/javascript Content-Length: 80 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87d8b9e30fbe7c7e-EWR
2024-05-02 14:33:23 UTC	80	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"NY","stateName":"New York","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49957	3.5.25.122	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:23 UTC	602	OUT	GET /play-px.svg HTTP/1.1 Host: qualtrics-www.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:23 UTC	495	IN	HTTP/1.1 200 OK x-amz-id-2: 5sgPMULNewwkJwkK5+orgXvog/GIfGbtezgto5oHbxsoycDpxDdpRCxam7NwPeLTJXamPctCWaQc2/Jwr7to61dXVf+gKak3ho47d5aqZ2M= x-amz-request-id: 7CT1J1K7M1MV1GS5 Date: Thu, 02 May 2024 14:33:24 GMT Last-Modified: Tue, 09 Nov 2021 22:36:31 GMT ETag: "ffaff0f0992539b7d62a7d2e0f4208d7" Cache-Control: max-age=2628000 x-amz-version-id: uqJnaw3EQraUUP5U_URK7vUXyiCT5mYE Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 364 Connection: close
2024-05-02 14:33:23 UTC	364	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 34 20 37 34 22 3e 3c 74 69 74 6c 65 3e 41 73 73 65 74 20 31 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 70 61 74 68 20 64 3d 22 4d 33 37 2c 30 41 33 37 2c 33 37 2c 30 2c 31 2c 30 2c 37 34 2c 33 37 2c 33 37 2c 33 37 2c 30 2c 30 2c 30 2c 33 37 2c 30 5a 4d 35 31 2e 38 34 2c 34 30 2e 37 35 2c 33 31 2e 32 38 2c 36 31 63 2d 31 2e 35 37 2c 31 2e 35 34 2d 32 2e 38 35 2c 31 2d 32 2e 38 35 2d 31 2e 32 56 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 74 74"><title>Asset 1</title><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path d="M37,0A37,37,0,1,0,74,37,37,37,0,0,0,37,0ZM51.84,40.75,31.28,61c-1.57,1.54-2.85,1-2.85-1.2V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49958	3.5.25.122	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:23 UTC	606	OUT	GET /quote-black.svg HTTP/1.1 Host: qualtrics-www.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:23 UTC	495	IN	HTTP/1.1 200 OK x-amz-id-2: 2so6NOuEKcM0XO6w9YXoZmNr9qZM8l1gLd6lqmLYjxdkKLfR5atGN79XOFUjAJWwoceTTx7H9i0zbSuwjEmW/xc/WYTE2YNEwVkdSpRUzpw= x-amz-request-id: 7CT4DH08FCC72DSV Date: Thu, 02 May 2024 14:33:24 GMT Last-Modified: Tue, 09 Nov 2021 22:36:32 GMT ETag: "9224eb2bf7e4792eeb3c886791b9cff8" Cache-Control: max-age=2628000 x-amz-version-id: vw0M3nvtB4uruRl3eVYad_hsQzirxKBZ Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 309 Connection: close
2024-05-02 14:33:23 UTC	309	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 39 20 35 31 2e 32 37 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 2d 32 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 2e 35 35 2c 35 31 2e 32 37 2c 31 30 2e 33 36 2c 32 38 2e 39 48 30 56 30 48 33 30 2e 37 32 56 32 36 2e 34 35 4c 31 36 2e 35 34 2c 35 31 2e 32 37 5a 6d 33 38 2e 33 37 2c 30 4c 34 38 2e 37 33 2c 32 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 69 51.27"><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><g id="Layer_1-2-2" data-name="Layer 1-2"><path d="M2.55,51.27,10.36,28.9H0V0H30.72V26.45L16.54,51.27Zm38.37,0L48.73,2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49972	52.216.38.169	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:24 UTC	369	OUT	GET /quote-black.svg HTTP/1.1 Host: qualtrics-www.s3.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:24 UTC	463	IN	HTTP/1.1 200 OK x-amz-id-2: 7osBbRe/qpaF8fUXX/li/i76I6U2YHNfCtpkajLQZj6vOWaYlje8DtdlB7qlAyMPAXh8aXxVxws= x-amz-request-id: 9RFSTR3EEW8FS671 Date: Thu, 02 May 2024 14:33:25 GMT Last-Modified: Tue, 09 Nov 2021 22:36:32 GMT ETag: "9224eb2bf7e4792eeb3c886791b9cff8" Cache-Control: max-age=2628000 x-amz-version-id: vw0M3nvtB4uruRl3eVYad_hsQzirxKBZ Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 309 Connection: close
2024-05-02 14:33:24 UTC	309	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 39 20 35 31 2e 32 37 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 2d 32 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 2e 35 35 2c 35 31 2e 32 37 2c 31 30 2e 33 36 2c 32 38 2e 39 48 30 56 30 48 33 30 2e 37 32 56 32 36 2e 34 35 4c 31 36 2e 35 34 2c 35 31 2e 32 37 5a 6d 33 38 2e 33 37 2c 30 4c 34 38 2e 37 33 2c 32 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 69 51.27"><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><g id="Layer_1-2-2" data-name="Layer 1-2"><path d="M2.55,51.27,10.36,28.9H0V0H30.72V26.45L16.54,51.27Zm38.37,0L48.73,2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49973	52.216.38.169	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:24 UTC	365	OUT	GET /play-px.svg HTTP/1.1 Host: qualtrics-www.s3.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:24 UTC	463	IN	HTTP/1.1 200 OK x-amz-id-2: pPQi3pdL0+5Wqgy3wWTpfiaxtEZ8XrRakTcvkRlCgC58epc8n1/arPoQvqHewKwQgNCJXKMZmgQ= x-amz-request-id: 9RFNRXHNXS001QQQ Date: Thu, 02 May 2024 14:33:25 GMT Last-Modified: Tue, 09 Nov 2021 22:36:31 GMT ETag: "ffaff0f0992539b7d62a7d2e0f4208d7" Cache-Control: max-age=2628000 x-amz-version-id: uqJnaw3EQraUUP5U_URK7vUXyiCT5mYE Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 364 Connection: close
2024-05-02 14:33:24 UTC	364	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 34 20 37 34 22 3e 3c 74 69 74 6c 65 3e 41 73 73 65 74 20 31 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 70 61 74 68 20 64 3d 22 4d 33 37 2c 30 41 33 37 2c 33 37 2c 30 2c 31 2c 30 2c 37 34 2c 33 37 2c 33 37 2c 33 37 2c 30 2c 30 2c 30 2c 33 37 2c 30 5a 4d 35 31 2e 38 34 2c 34 30 2e 37 35 2c 33 31 2e 32 38 2c 36 31 63 2d 31 2e 35 37 2c 31 2e 35 34 2d 32 2e 38 35 2c 31 2d 32 2e 38 35 2d 31 2e 32 56 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 74 74"><title>Asset 1</title><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path d="M37,0A37,37,0,1,0,74,37,37,37,0,0,0,37,0ZM51.84,40.75,31.28,61c-1.57,1.54-2.85,1-2.85-1.2V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49975	104.19.177.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:24 UTC	638	OUT	GET /consent/0174e4ef-b832-4af5-a993-2642a1c2e41e/018ece49-7ff0-794c-b925-1bb29409f37e/en.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.qualtrics.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:24 UTC	901	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:24 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 87d8b9e6de7f43d5-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 1483 Cache-Control: public, max-age=86400 Expires: Fri, 03 May 2024 14:33:24 GMT Last-Modified: Wed, 01 May 2024 12:36:51 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: VGk8wMv+ztDPl6hlGnBb/g== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9640fbaa-701e-0037-14d1-9be45b000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-05-02 14:33:24 UTC	468	IN	Data Raw: 37 63 31 63 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 50 72 69 76 61 63 79 20 50 72 65 Data Ascii: 7c1c{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"Privacy Pre
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 20 61 6e 64 20 69 73 20 6d 6f 73 74 6c 79 20 75 73 65 64 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 73 69 74 65 20 77 6f 72 6b 20 61 73 20 79 6f 75 20 65 78 70 65 63 74 20 69 74 20 74 6f 2e 20 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 75 73 75 61 6c 6c 79 20 64 69 72 65 63 74 6c 79 20 69 64 65 6e 74 69 66 79 20 79 6f 75 2c 20 62 75 74 20 69 74 20 63 61 6e 20 67 69 76 65 20 79 6f 75 20 61 20 6d 6f 72 65 20 70 65 72 73 6f 6e 61 6c 69 7a 65 64 20 77 65 62 20 65 78 70 65 72 69 65 6e 63 65 2e 20 42 65 63 61 75 73 65 20 77 65 20 72 65 73 70 65 63 74 20 79 6f 75 72 20 72 69 67 68 74 20 74 6f 20 70 72 69 76 61 63 79 2c 20 79 6f 75 20 63 61 6e 20 63 68 6f 6f 73 65 20 6e 6f 74 20 74 6f 20 61 6c 6c 6f 77 20 73 6f 6d 65 20 74 79 70 65 73 Data Ascii: and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 22 4c 61 73 74 52 65 63 6f 6e 73 65 6e 74 44 61 74 65 22 3a 6e 75 6c 6c 2c 22 42 61 6e 6e 65 72 54 69 74 6c 65 22 3a 22 22 2c 22 46 6f 72 63 65 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 50 61 67 65 22 3a 66 61 6c 73 65 2c 22 49 6e 61 63 74 69 76 65 54 65 78 74 22 3a 22 49 6e 61 63 74 69 76 65 22 2c 22 43 6f 6f 6b 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 73 22 2c 22 43 61 74 65 67 6f 72 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 53 75 62 67 72 6f 75 70 22 2c 22 49 73 4c 69 66 65 73 70 61 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4c 69 66 65 73 70 61 6e 54 65 78 74 22 3a 22 4c 69 66 65 73 70 61 6e 22 2c 22 56 65 6e 64 6f 72 4c 65 76 65 6c 4f 70 74 4f 75 74 22 3a 66 61 6c 73 65 2c Data Ascii: "LastReconsentDate":null,"BannerTitle":"","ForceConsent":false,"BannerPushesDownPage":false,"InactiveText":"Inactive","CookiesText":"Cookies","CategoriesText":"Cookie Subgroup","IsLifespanEnabled":false,"LifespanText":"Lifespan","VendorLevelOptOut":false,
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 62 69 6c 69 74 79 20 74 6f 20 70 72 6f 76 69 64 65 20 66 65 65 64 62 61 63 6b 3b 5c 6e 3c 6c 69 3e 41 6e 61 6c 79 7a 69 6e 67 20 79 6f 75 72 20 75 73 65 20 6f 66 20 6f 75 72 20 70 72 6f 64 75 63 74 73 2c 20 73 65 72 76 69 63 65 73 20 6f 72 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 3b 5c 6e 3c 6c 69 3e 41 73 73 69 73 74 69 6e 67 20 77 69 74 68 20 6f 75 72 20 70 72 6f 6d 6f 74 69 6f 6e 61 6c 20 61 6e 64 20 6d 61 72 6b 65 74 69 6e 67 20 65 66 66 6f 72 74 73 20 28 69 6e 63 6c 75 64 69 6e 67 20 62 65 68 61 76 69 6f 72 61 6c 20 61 64 76 65 72 74 69 73 69 6e 67 29 2e 5c 6e 5c 6e 5c 6e 3c 62 72 3e 3c 62 72 3e 3c 62 72 3e 5c 6e 5c 6e 42 65 6c 6f 77 20 69 73 20 61 20 64 65 74 61 69 6c 65 64 20 6c 69 73 74 20 6f 66 20 74 68 65 20 63 6f 6f 6b 69 65 73 20 77 65 20 75 73 Data Ascii: bility to provide feedback;\n<li>Analyzing your use of our products, services or applications;\n<li>Assisting with our promotional and marketing efforts (including behavioral advertising).\n\n\n<br><br><br>\n\nBelow is a detailed list of the cookies we us
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 65 20 62 79 20 79 6f 75 20 77 68 69 63 68 20 61 6d 6f 75 6e 74 20 74 6f 20 61 20 72 65 71 75 65 73 74 20 66 6f 72 20 73 65 72 76 69 63 65 73 2c 20 73 75 63 68 20 61 73 20 73 65 74 74 69 6e 67 20 79 6f 75 72 20 70 72 69 76 61 63 79 20 70 72 65 66 65 72 65 6e 63 65 73 2c 20 6c 6f 67 67 69 6e 67 20 69 6e 20 6f 72 20 66 69 6c 6c 69 6e 67 20 69 6e 20 66 6f 72 6d 73 2e 20 59 6f 75 20 63 61 6e 20 73 65 74 20 79 6f 75 72 20 62 72 6f 77 73 65 72 20 74 6f 20 62 6c 6f 63 6b 20 6f 72 20 61 6c 65 72 74 20 79 6f 75 20 61 62 6f 75 74 20 74 68 65 73 65 20 63 6f 6f 6b 69 65 73 2c 20 62 75 74 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 74 68 65 20 73 69 74 65 20 77 69 6c 6c 20 6e 6f 74 20 74 68 65 6e 20 77 6f 72 6b 2e 22 2c 22 47 72 6f 75 70 4e 61 6d 65 4d 6f 62 69 6c 65 Data Ascii: e by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work.","GroupNameMobile
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 6d 65 22 3a 22 63 6f 6f 6b 69 65 74 65 73 74 22 2c 22 48 6f 73 74 22 3a 22 7a 6e 38 35 6a 6f 75 35 37 78 70 68 61 78 73 6f 64 2d 71 78 6d 2e 73 69 74 65 69 6e 74 65 72 63 65 70 74 2e 71 75 61 6c 74 72 69 63 73 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 43 6f 6d 6d 6f 6e 20 63 6f 6f 6b 69 65 20 6e 61 6d 65 20 63 6f 75 6c 64 20 68 61 76 65 20 61 20 6e 75 6d 62 65 72 20 6f 66 20 64 69 66 66 65 72 65 6e 74 20 6f 72 69 67 69 6e 73 2e 20 20 57 68 65 72 65 20 74 68 69 73 20 69 73 20 66 69 72 73 74 20 70 61 72 74 79 20 61 6e 64 20 61 20 73 65 73 73 69 6f 6e 20 63 6f 6f 6b 69 65 2c 20 69 74 73 20 6d 6f 73 74 20 6c 69 6b 65 6c 79 20 74 6f 20 64 6f 20 77 69 Data Ascii: me":"cookietest","Host":"zn85jou57xphaxsod-qxm.siteintercept.qualtrics.com","IsSession":true,"Length":"0","description":"Common cookie name could have a number of different origins. Where this is first party and a session cookie, its most likely to do wi
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 75 61 6c 74 72 69 63 73 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 20 5f 5f 63 66 5f 62 6d 20 63 6f 6f 6b 69 65 20 69 73 20 61 20 63 6f 6f 6b 69 65 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 73 75 70 70 6f 72 74 20 43 6c 6f 75 64 66 6c 61 72 65 20 42 6f 74 20 4d 61 6e 61 67 65 6d 65 6e 74 2c 20 63 75 72 72 65 6e 74 6c 79 20 69 6e 20 70 72 69 76 61 74 65 20 62 65 74 61 2e 20 41 73 20 70 61 72 74 20 6f 66 20 6f 75 72 20 62 6f 74 20 6d 61 6e 61 67 65 6d 65 6e 74 20 73 65 72 76 69 63 65 2c 20 74 68 69 73 20 63 6f 6f 6b 69 65 20 68 65 6c 70 73 20 6d 61 6e 61 67 65 20 69 6e 63 6f 6d 69 6e 67 20 74 72 61 66 66 69 63 20 74 68 61 74 20 6d 61 74 Data Ascii: ualtrics.com","IsSession":false,"Length":"0","description":"The __cf_bm cookie is a cookie necessary to support Cloudflare Bot Management, currently in private beta. As part of our bot management service, this cookie helps manage incoming traffic that mat
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 65 20 75 73 65 72 20 72 65 71 75 65 73 74 73 20 61 72 65 20 72 6f 75 74 65 64 20 63 6f 6e 73 69 73 74 65 6e 74 6c 79 20 74 6f 20 74 68 65 20 63 6f 72 72 65 63 74 20 73 65 72 76 65 72 2e 20 54 68 65 20 63 6f 6d 6d 6f 6e 20 72 6f 6f 74 20 69 73 20 42 49 47 69 70 53 65 72 76 65 72 20 6d 6f 73 74 20 63 6f 6d 6d 6f 6e 6c 79 20 66 6f 6c 6c 6f 77 65 64 20 62 79 20 61 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 2c 20 75 73 75 61 6c 6c 79 20 74 68 65 20 6f 6e 65 20 74 68 61 74 20 69 74 20 69 73 20 68 6f 73 74 65 64 20 6f 6e 2c 20 62 75 74 20 6e 6f 74 20 61 6c 77 61 79 73 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 62 36 37 Data Ascii: e user requests are routed consistently to the correct server. The common root is BIGipServer most commonly followed by a domain name, usually the one that it is hosted on, but not always.","DurationType":1,"category":null,"isThirdParty":false},{"id":"b67
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 75 65 2c 22 53 68 6f 77 53 44 4b 4c 69 73 74 4c 69 6e 6b 22 3a 74 72 75 65 2c 22 4f 72 64 65 72 22 3a 22 38 22 2c 22 4f 70 74 61 6e 6f 6e 47 72 6f 75 70 49 64 22 3a 22 43 30 30 30 33 22 2c 22 50 61 72 65 6e 74 22 3a 22 22 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 54 6f 67 67 6c 65 22 3a 66 61 6c 73 65 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 65 6e 61 62 6c 65 20 74 68 65 20 77 65 62 73 69 74 65 20 74 6f 20 70 72 6f 76 69 64 65 20 65 6e 68 61 6e 63 65 64 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 6e 64 20 70 65 72 73 6f 6e 61 6c 69 7a 61 Data Ascii: ue,"ShowSDKListLink":true,"Order":"8","OptanonGroupId":"C0003","Parent":"","ShowSubgroup":true,"ShowSubGroupDescription":true,"ShowSubgroupToggle":false,"GroupDescription":"These cookies enable the website to provide enhanced functionality and personaliza
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 66 34 38 30 34 62 32 2d 61 39 36 61 2d 34 61 35 64 2d 38 62 32 34 2d 34 64 63 32 32 66 66 32 35 38 36 65 22 2c 22 4e 61 6d 65 22 3a 22 5f 67 64 5f 76 69 73 69 74 6f 72 22 2c 22 48 6f 73 74 22 3a 22 77 77 77 2e 71 75 61 6c 74 72 69 63 73 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 37 33 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 63 6f 6e 74 61 69 6e 73 20 6e 6f 20 69 64 65 6e 74 69 66 79 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6e 64 20 69 73 20 75 73 65 64 20 66 6f 72 20 64 69 61 Data Ascii: nType":1,"category":null,"isThirdParty":false},{"id":"2f4804b2-a96a-4a5d-8b24-4dc22ff2586e","Name":"_gd_visitor","Host":"www.qualtrics.com","IsSession":false,"Length":"730","description":"This cookie contains no identifying information and is used for dia

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49978	104.17.71.206	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:24 UTC	1216	OUT	GET /index.php/form/getForm?munchkinId=542-FMF-412&form=7836&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F&callback=jQuery37104990298446629253_1714660402559&_=1714660402560 HTTP/1.1 Host: success.qualtrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=HC9C5iVS5xaJATy7UElHy1mVXPjj5Oi889oAJquUcQw-1714660403-1.0.1.1-GlmNEQttpAx68Z8FWbaFDpIPZAhb3RAmzHTalb2b2SGoo9X0Yf0JmGZVQHmGPdKSwUyfY5bXRYpgjxccPvemeQ; mutiny.user.token=030fb6bc-948e-4a68-ad25-9385910456db; mutiny.user.session=a558c5cb-0047-435f-8b79-7bfaa3a87403; __gtm_campaign_url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye
2024-05-02 14:33:24 UTC	215	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:24 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 13177 Connection: close cached: true Server: cloudflare CF-RAY: 87d8b9e73d9d19ae-EWR
2024-05-02 14:33:24 UTC	1154	IN	Data Raw: 6a 51 75 65 72 79 33 37 31 30 34 39 39 30 32 39 38 34 34 36 36 32 39 32 35 33 5f 31 37 31 34 36 36 30 34 30 32 35 35 39 28 7b 22 49 64 22 3a 37 38 33 36 2c 22 56 69 64 22 3a 37 38 33 36 2c 22 53 74 61 74 75 73 22 3a 22 61 70 70 72 6f 76 65 64 22 2c 22 4e 61 6d 65 22 3a 22 55 6e 69 76 65 72 73 61 6c 20 46 6f 72 6d 22 2c 22 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 4c 61 79 6f 75 74 22 3a 22 6c 65 66 74 22 2c 22 47 75 74 74 65 72 57 69 64 74 68 22 3a 35 2c 22 4f 66 66 73 65 74 57 69 64 74 68 22 3a 35 2c 22 48 61 73 54 77 6f 42 75 74 74 6f 6e 73 22 3a 74 72 75 65 2c 22 53 75 62 6d 69 74 4c 61 62 65 6c 22 3a 22 53 75 62 6d 69 74 22 2c 22 52 65 73 65 74 4c 61 62 65 6c 22 3a 22 43 6c 65 61 72 22 2c 22 42 75 74 74 6f 6e 4c 6f 63 61 74 69 6f 6e 22 3a 22 Data Ascii: jQuery37104990298446629253_1714660402559({"Id":7836,"Vid":7836,"Status":"approved","Name":"Universal Form","Description":"","Layout":"left","GutterWidth":5,"OffsetWidth":5,"HasTwoButtons":true,"SubmitLabel":"Submit","ResetLabel":"Clear","ButtonLocation":"
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 35 2c 22 75 73 65 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 4f 6e 50 72 65 76 69 65 77 22 3a 66 61 6c 73 65 2c 22 63 73 73 22 3a 22 2e 6d 6b 74 6f 46 6f 72 6d 20 66 69 65 6c 64 73 65 74 2e 6d 6b 74 33 2d 66 6f 72 6d 45 64 69 74 6f 72 46 69 65 6c 64 43 6f 6e 74 61 69 6e 65 72 7b 62 6f 72 64 65 72 3a 20 73 6f 6c 69 64 20 31 70 78 20 67 72 61 79 3b 7d 2e 6d 6b 74 6f 46 6f 72 6d 20 66 69 65 6c 64 73 65 74 2e 6d 6b 74 33 2d 66 6f 72 6d 45 64 69 74 6f 72 46 69 65 6c 64 43 6f 6e 74 61 69 6e 65 72 20 6c 65 67 65 6e 64 7b 70 61 64 64 69 6e 67 3a 30 20 31 65 6d 3b 7d 22 2c 22 68 72 65 66 22 3a 22 63 73 73 5c 2f 66 6f 72 6d 73 32 2d 74 68 65 6d 65 2d 70 6c 61 69 6e 2e 63 73 73 22 2c 22 62 75 74 74 6f 6e 53 74 79 6c 65 49 64 22 3a 31 34 7d 2c 22 54 68 65 6d 65 53 Data Ascii: 5,"useBackgroundColorOnPreview":false,"css":".mktoForm fieldset.mkt3-formEditorFieldContainer{border: solid 1px gray;}.mktoForm fieldset.mkt3-formEditorFieldContainer legend{padding:0 1em;}","href":"css\/forms2-theme-plain.css","buttonStyleId":14},"ThemeS
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 75 74 53 6f 75 72 63 65 43 68 61 6e 6e 65 6c 22 3a 22 63 6f 6e 73 74 61 6e 74 22 2c 22 50 72 6f 66 69 6c 69 6e 67 46 69 65 6c 64 4e 75 6d 62 65 72 22 3a 30 2c 22 56 61 6c 69 64 61 74 69 6f 6e 4d 65 73 73 61 67 65 22 3a 22 4d 75 73 74 20 62 65 20 76 61 6c 69 64 20 65 6d 61 69 6c 2e 20 5c 75 30 30 33 43 73 70 61 6e 20 63 6c 61 73 73 3d 27 6d 6b 74 6f 45 72 72 6f 72 44 65 74 61 69 6c 27 5c 75 30 30 33 45 65 78 61 6d 70 6c 65 40 79 6f 75 72 64 6f 6d 61 69 6e 2e 63 6f 6d 5c 75 30 30 33 43 5c 2f 73 70 61 6e 5c 75 30 30 33 45 22 7d 5d 2c 5b 7b 22 49 64 22 3a 31 36 37 39 37 31 2c 22 4e 61 6d 65 22 3a 22 43 6f 6d 70 61 6e 79 22 2c 22 44 61 74 61 74 79 70 65 22 3a 22 73 74 72 69 6e 67 22 2c 22 4d 61 78 6c 65 6e 67 74 68 22 3a 32 35 35 2c 22 49 6e 70 75 74 4c 61 62 Data Ascii: utSourceChannel":"constant","ProfilingFieldNumber":0,"ValidationMessage":"Must be valid email. \u003Cspan class='mktoErrorDetail'\u003Eexample@yourdomain.com\u003C\/span\u003E"}],[{"Id":167971,"Name":"Company","Datatype":"string","Maxlength":255,"InputLab
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 65 61 64 5f 43 6f 6d 6d 65 6e 74 73 5f 5f 63 22 2c 22 44 61 74 61 74 79 70 65 22 3a 22 74 65 78 74 61 72 65 61 22 2c 22 4d 61 78 6c 65 6e 67 74 68 22 3a 33 32 30 30 30 2c 22 49 6e 70 75 74 4c 61 62 65 6c 22 3a 22 4c 65 61 64 20 43 6f 6d 6d 65 6e 74 73 3a 22 2c 22 49 6e 70 75 74 49 6e 69 74 69 61 6c 56 61 6c 75 65 22 3a 22 22 2c 22 49 6e 70 75 74 53 6f 75 72 63 65 43 68 61 6e 6e 65 6c 22 3a 22 63 6f 6e 73 74 61 6e 74 22 2c 22 56 69 73 69 62 6c 65 52 6f 77 73 22 3a 32 2c 22 50 72 6f 66 69 6c 69 6e 67 46 69 65 6c 64 4e 75 6d 62 65 72 22 3a 30 2c 22 56 61 6c 69 64 61 74 69 6f 6e 4d 65 73 73 61 67 65 22 3a 22 54 68 69 73 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 7d 5d 2c 5b 7b 22 49 64 22 3a 31 36 37 39 39 34 2c 22 4e 61 6d 65 22 3a 22 66 6f Data Ascii: ead_Comments__c","Datatype":"textarea","Maxlength":32000,"InputLabel":"Lead Comments:","InputInitialValue":"","InputSourceChannel":"constant","VisibleRows":2,"ProfilingFieldNumber":0,"ValidationMessage":"This field is required."}],[{"Id":167994,"Name":"fo
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 2c 22 49 6e 70 75 74 53 6f 75 72 63 65 43 68 61 6e 6e 65 6c 22 3a 22 75 72 6c 22 2c 22 49 6e 70 75 74 53 6f 75 72 63 65 53 65 6c 65 63 74 6f 72 22 3a 22 75 74 6d 5f 63 61 6d 70 61 69 67 6e 22 2c 22 50 72 6f 66 69 6c 69 6e 67 46 69 65 6c 64 4e 75 6d 62 65 72 22 3a 30 2c 22 44 69 73 61 62 6c 65 50 72 65 66 69 6c 6c 22 3a 74 72 75 65 7d 5d 2c 5b 7b 22 49 64 22 3a 31 36 37 39 37 37 2c 22 4e 61 6d 65 22 3a 22 75 74 6d 5f 63 6f 6e 74 65 6e 74 5f 5f 63 22 2c 22 44 61 74 61 74 79 70 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 4d 61 78 6c 65 6e 67 74 68 22 3a 32 35 35 2c 22 49 6e 70 75 74 4c 61 62 65 6c 22 3a 22 75 74 6d 5f 63 6f 6e 74 65 6e 74 3a 22 2c 22 49 6e 70 75 74 49 6e 69 74 69 61 6c 56 61 6c 75 65 22 3a 22 22 2c 22 49 6e 70 75 74 53 6f 75 72 63 65 43 68 61 6e Data Ascii: ,"InputSourceChannel":"url","InputSourceSelector":"utm_campaign","ProfilingFieldNumber":0,"DisablePrefill":true}],[{"Id":167977,"Name":"utm_content__c","Datatype":"hidden","Maxlength":255,"InputLabel":"utm_content:","InputInitialValue":"","InputSourceChan
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 70 75 74 49 6e 69 74 69 61 6c 56 61 6c 75 65 22 3a 22 22 2c 22 49 6e 70 75 74 53 6f 75 72 63 65 43 68 61 6e 6e 65 6c 22 3a 22 75 72 6c 22 2c 22 49 6e 70 75 74 53 6f 75 72 63 65 53 65 6c 65 63 74 6f 72 22 3a 22 75 74 6d 5f 6c 70 22 2c 22 50 72 6f 66 69 6c 69 6e 67 46 69 65 6c 64 4e 75 6d 62 65 72 22 3a 30 7d 5d 2c 5b 7b 22 49 64 22 3a 31 36 37 39 38 32 2c 22 4e 61 6d 65 22 3a 22 67 63 6c 69 64 5f 5f 63 22 2c 22 44 61 74 61 74 79 70 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 4d 61 78 6c 65 6e 67 74 68 22 3a 31 30 30 2c 22 49 6e 70 75 74 4c 61 62 65 6c 22 3a 22 67 63 6c 69 64 3a 22 2c 22 49 6e 70 75 74 49 6e 69 74 69 61 6c 56 61 6c 75 65 22 3a 22 22 2c 22 49 6e 70 75 74 53 6f 75 72 63 65 43 68 61 6e 6e 65 6c 22 3a 22 75 72 6c 22 2c 22 49 6e 70 75 74 53 6f 75 72 Data Ascii: putInitialValue":"","InputSourceChannel":"url","InputSourceSelector":"utm_lp","ProfilingFieldNumber":0}],[{"Id":167982,"Name":"gclid__c","Datatype":"hidden","Maxlength":100,"InputLabel":"gclid:","InputInitialValue":"","InputSourceChannel":"url","InputSour
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 30 2c 22 44 69 73 61 62 6c 65 50 72 65 66 69 6c 6c 22 3a 74 72 75 65 7d 5d 2c 5b 7b 22 49 64 22 3a 31 36 37 39 38 38 2c 22 4e 61 6d 65 22 3a 22 63 6f 6e 76 65 72 74 69 6e 67 50 61 67 65 50 61 74 68 5f 5f 63 22 2c 22 44 61 74 61 74 79 70 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 4d 61 78 6c 65 6e 67 74 68 22 3a 32 35 35 2c 22 49 6e 70 75 74 4c 61 62 65 6c 22 3a 22 63 6f 6e 76 65 72 74 69 6e 67 50 61 67 65 50 61 74 68 3a 22 2c 22 49 6e 70 75 74 49 6e 69 74 69 61 6c 56 61 6c 75 65 22 3a 22 22 2c 22 49 6e 70 75 74 53 6f 75 72 63 65 43 68 61 6e 6e 65 6c 22 3a 22 63 6f 6e 73 74 61 6e 74 22 2c 22 50 72 6f 66 69 6c 69 6e 67 46 69 65 6c 64 4e 75 6d 62 65 72 22 3a 30 2c 22 44 69 73 61 62 6c 65 50 72 65 66 69 6c 6c 22 3a 74 72 75 65 7d 5d 2c 5b 7b 22 49 64 22 3a 31 36 Data Ascii: 0,"DisablePrefill":true}],[{"Id":167988,"Name":"convertingPagePath__c","Datatype":"hidden","Maxlength":255,"InputLabel":"convertingPagePath:","InputInitialValue":"","InputSourceChannel":"constant","ProfilingFieldNumber":0,"DisablePrefill":true}],[{"Id":16
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 30 7d 5d 2c 5b 7b 22 49 64 22 3a 31 36 37 39 39 39 2c 22 4e 61 6d 65 22 3a 22 6b 69 63 6b 62 6f 78 44 69 73 70 6f 73 61 62 6c 65 22 2c 22 44 61 74 61 74 79 70 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 49 6e 70 75 74 4c 61 62 65 6c 22 3a 22 4b 69 63 6b 62 6f 78 20 44 69 73 70 6f 73 61 62 6c 65 3a 22 2c 22 49 6e 70 75 74 49 6e 69 74 69 61 6c 56 61 6c 75 65 22 3a 22 22 2c 22 49 6e 70 75 74 53 6f 75 72 63 65 43 68 61 6e 6e 65 6c 22 3a 22 63 6f 6e 73 74 61 6e 74 22 2c 22 50 72 6f 66 69 6c 69 6e 67 46 69 65 6c 64 4e 75 6d 62 65 72 22 3a 30 7d 5d 2c 5b 7b 22 49 64 22 3a 31 36 38 30 30 30 2c 22 4e 61 6d 65 22 3a 22 6b 69 63 6b 62 6f 78 44 6f 6d 61 69 6e 22 2c 22 44 61 74 61 74 79 70 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 4d 61 78 6c 65 6e 67 74 68 22 3a 32 35 35 2c Data Ascii: 0}],[{"Id":167999,"Name":"kickboxDisposable","Datatype":"hidden","InputLabel":"Kickbox Disposable:","InputInitialValue":"","InputSourceChannel":"constant","ProfilingFieldNumber":0}],[{"Id":168000,"Name":"kickboxDomain","Datatype":"hidden","Maxlength":255,
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 70 75 74 4c 61 62 65 6c 22 3a 22 56 65 72 69 66 69 65 64 3a 22 2c 22 49 6e 70 75 74 49 6e 69 74 69 61 6c 56 61 6c 75 65 22 3a 22 22 2c 22 49 6e 70 75 74 53 6f 75 72 63 65 43 68 61 6e 6e 65 6c 22 3a 22 63 6f 6e 73 74 61 6e 74 22 2c 22 50 72 6f 66 69 6c 69 6e 67 46 69 65 6c 64 4e 75 6d 62 65 72 22 3a 30 2c 22 56 61 6c 69 64 61 74 69 6f 6e 4d 65 73 73 61 67 65 22 3a 22 54 68 69 73 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 7d 5d 2c 5b 7b 22 49 64 22 3a 31 36 38 30 30 37 2c 22 4e 61 6d 65 22 3a 22 4a 6f 62 5f 4c 65 76 65 6c 5f 5f 63 22 2c 22 44 61 74 61 74 79 70 65 22 3a 22 73 74 72 69 6e 67 22 2c 22 4d 61 78 6c 65 6e 67 74 68 22 3a 32 35 35 2c 22 49 6e 70 75 74 4c 61 62 65 6c 22 3a 22 4a 6f 62 20 4c 65 76 65 6c 3a 22 2c 22 49 6e 70 75 74 49 Data Ascii: putLabel":"Verified:","InputInitialValue":"","InputSourceChannel":"constant","ProfilingFieldNumber":0,"ValidationMessage":"This field is required."}],[{"Id":168007,"Name":"Job_Level__c","Datatype":"string","Maxlength":255,"InputLabel":"Job Level:","InputI
2024-05-02 14:33:24 UTC	1071	IN	Data Raw: 56 69 73 69 62 6c 65 52 6f 77 73 22 3a 34 2c 22 50 72 6f 66 69 6c 69 6e 67 46 69 65 6c 64 4e 75 6d 62 65 72 22 3a 30 2c 22 56 61 6c 69 64 61 74 69 6f 6e 4d 65 73 73 61 67 65 22 3a 22 54 68 69 73 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 7d 5d 2c 5b 7b 22 49 64 22 3a 31 36 38 30 31 35 2c 22 4e 61 6d 65 22 3a 22 6d 73 63 6c 6b 69 64 22 2c 22 44 61 74 61 74 79 70 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 4d 61 78 6c 65 6e 67 74 68 22 3a 32 35 35 2c 22 49 6e 70 75 74 4c 61 62 65 6c 22 3a 22 6d 73 63 6c 6b 69 64 3a 22 2c 22 49 6e 70 75 74 49 6e 69 74 69 61 6c 56 61 6c 75 65 22 3a 22 22 2c 22 49 6e 70 75 74 53 6f 75 72 63 65 43 68 61 6e 6e 65 6c 22 3a 22 63 6f 6e 73 74 61 6e 74 22 2c 22 50 72 6f 66 69 6c 69 6e 67 46 69 65 6c 64 4e 75 6d 62 65 72 Data Ascii: VisibleRows":4,"ProfilingFieldNumber":0,"ValidationMessage":"This field is required."}],[{"Id":168015,"Name":"msclkid","Datatype":"hidden","Maxlength":255,"InputLabel":"msclkid:","InputInitialValue":"","InputSourceChannel":"constant","ProfilingFieldNumber

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49987	104.19.177.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:24 UTC	430	OUT	GET /consent/0174e4ef-b832-4af5-a993-2642a1c2e41e/018ece49-7ff0-794c-b925-1bb29409f37e/en.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:24 UTC	901	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:24 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 87d8b9ea3d7a435b-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 1056 Cache-Control: public, max-age=86400 Expires: Fri, 03 May 2024 14:33:24 GMT Last-Modified: Wed, 01 May 2024 12:36:51 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: VGk8wMv+ztDPl6hlGnBb/g== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: a87e4a93-c01e-0052-19d1-9b5c9b000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-05-02 14:33:24 UTC	468	IN	Data Raw: 37 63 31 63 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 50 72 69 76 61 63 79 20 50 72 65 Data Ascii: 7c1c{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"Privacy Pre
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 20 61 6e 64 20 69 73 20 6d 6f 73 74 6c 79 20 75 73 65 64 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 73 69 74 65 20 77 6f 72 6b 20 61 73 20 79 6f 75 20 65 78 70 65 63 74 20 69 74 20 74 6f 2e 20 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 75 73 75 61 6c 6c 79 20 64 69 72 65 63 74 6c 79 20 69 64 65 6e 74 69 66 79 20 79 6f 75 2c 20 62 75 74 20 69 74 20 63 61 6e 20 67 69 76 65 20 79 6f 75 20 61 20 6d 6f 72 65 20 70 65 72 73 6f 6e 61 6c 69 7a 65 64 20 77 65 62 20 65 78 70 65 72 69 65 6e 63 65 2e 20 42 65 63 61 75 73 65 20 77 65 20 72 65 73 70 65 63 74 20 79 6f 75 72 20 72 69 67 68 74 20 74 6f 20 70 72 69 76 61 63 79 2c 20 79 6f 75 20 63 61 6e 20 63 68 6f 6f 73 65 20 6e 6f 74 20 74 6f 20 61 6c 6c 6f 77 20 73 6f 6d 65 20 74 79 70 65 73 Data Ascii: and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 22 4c 61 73 74 52 65 63 6f 6e 73 65 6e 74 44 61 74 65 22 3a 6e 75 6c 6c 2c 22 42 61 6e 6e 65 72 54 69 74 6c 65 22 3a 22 22 2c 22 46 6f 72 63 65 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 50 61 67 65 22 3a 66 61 6c 73 65 2c 22 49 6e 61 63 74 69 76 65 54 65 78 74 22 3a 22 49 6e 61 63 74 69 76 65 22 2c 22 43 6f 6f 6b 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 73 22 2c 22 43 61 74 65 67 6f 72 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 53 75 62 67 72 6f 75 70 22 2c 22 49 73 4c 69 66 65 73 70 61 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4c 69 66 65 73 70 61 6e 54 65 78 74 22 3a 22 4c 69 66 65 73 70 61 6e 22 2c 22 56 65 6e 64 6f 72 4c 65 76 65 6c 4f 70 74 4f 75 74 22 3a 66 61 6c 73 65 2c Data Ascii: "LastReconsentDate":null,"BannerTitle":"","ForceConsent":false,"BannerPushesDownPage":false,"InactiveText":"Inactive","CookiesText":"Cookies","CategoriesText":"Cookie Subgroup","IsLifespanEnabled":false,"LifespanText":"Lifespan","VendorLevelOptOut":false,
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 62 69 6c 69 74 79 20 74 6f 20 70 72 6f 76 69 64 65 20 66 65 65 64 62 61 63 6b 3b 5c 6e 3c 6c 69 3e 41 6e 61 6c 79 7a 69 6e 67 20 79 6f 75 72 20 75 73 65 20 6f 66 20 6f 75 72 20 70 72 6f 64 75 63 74 73 2c 20 73 65 72 76 69 63 65 73 20 6f 72 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 3b 5c 6e 3c 6c 69 3e 41 73 73 69 73 74 69 6e 67 20 77 69 74 68 20 6f 75 72 20 70 72 6f 6d 6f 74 69 6f 6e 61 6c 20 61 6e 64 20 6d 61 72 6b 65 74 69 6e 67 20 65 66 66 6f 72 74 73 20 28 69 6e 63 6c 75 64 69 6e 67 20 62 65 68 61 76 69 6f 72 61 6c 20 61 64 76 65 72 74 69 73 69 6e 67 29 2e 5c 6e 5c 6e 5c 6e 3c 62 72 3e 3c 62 72 3e 3c 62 72 3e 5c 6e 5c 6e 42 65 6c 6f 77 20 69 73 20 61 20 64 65 74 61 69 6c 65 64 20 6c 69 73 74 20 6f 66 20 74 68 65 20 63 6f 6f 6b 69 65 73 20 77 65 20 75 73 Data Ascii: bility to provide feedback;\n<li>Analyzing your use of our products, services or applications;\n<li>Assisting with our promotional and marketing efforts (including behavioral advertising).\n\n\n<br><br><br>\n\nBelow is a detailed list of the cookies we us
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 65 20 62 79 20 79 6f 75 20 77 68 69 63 68 20 61 6d 6f 75 6e 74 20 74 6f 20 61 20 72 65 71 75 65 73 74 20 66 6f 72 20 73 65 72 76 69 63 65 73 2c 20 73 75 63 68 20 61 73 20 73 65 74 74 69 6e 67 20 79 6f 75 72 20 70 72 69 76 61 63 79 20 70 72 65 66 65 72 65 6e 63 65 73 2c 20 6c 6f 67 67 69 6e 67 20 69 6e 20 6f 72 20 66 69 6c 6c 69 6e 67 20 69 6e 20 66 6f 72 6d 73 2e 20 59 6f 75 20 63 61 6e 20 73 65 74 20 79 6f 75 72 20 62 72 6f 77 73 65 72 20 74 6f 20 62 6c 6f 63 6b 20 6f 72 20 61 6c 65 72 74 20 79 6f 75 20 61 62 6f 75 74 20 74 68 65 73 65 20 63 6f 6f 6b 69 65 73 2c 20 62 75 74 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 74 68 65 20 73 69 74 65 20 77 69 6c 6c 20 6e 6f 74 20 74 68 65 6e 20 77 6f 72 6b 2e 22 2c 22 47 72 6f 75 70 4e 61 6d 65 4d 6f 62 69 6c 65 Data Ascii: e by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work.","GroupNameMobile
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 6d 65 22 3a 22 63 6f 6f 6b 69 65 74 65 73 74 22 2c 22 48 6f 73 74 22 3a 22 7a 6e 38 35 6a 6f 75 35 37 78 70 68 61 78 73 6f 64 2d 71 78 6d 2e 73 69 74 65 69 6e 74 65 72 63 65 70 74 2e 71 75 61 6c 74 72 69 63 73 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 43 6f 6d 6d 6f 6e 20 63 6f 6f 6b 69 65 20 6e 61 6d 65 20 63 6f 75 6c 64 20 68 61 76 65 20 61 20 6e 75 6d 62 65 72 20 6f 66 20 64 69 66 66 65 72 65 6e 74 20 6f 72 69 67 69 6e 73 2e 20 20 57 68 65 72 65 20 74 68 69 73 20 69 73 20 66 69 72 73 74 20 70 61 72 74 79 20 61 6e 64 20 61 20 73 65 73 73 69 6f 6e 20 63 6f 6f 6b 69 65 2c 20 69 74 73 20 6d 6f 73 74 20 6c 69 6b 65 6c 79 20 74 6f 20 64 6f 20 77 69 Data Ascii: me":"cookietest","Host":"zn85jou57xphaxsod-qxm.siteintercept.qualtrics.com","IsSession":true,"Length":"0","description":"Common cookie name could have a number of different origins. Where this is first party and a session cookie, its most likely to do wi
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 75 61 6c 74 72 69 63 73 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 20 5f 5f 63 66 5f 62 6d 20 63 6f 6f 6b 69 65 20 69 73 20 61 20 63 6f 6f 6b 69 65 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 73 75 70 70 6f 72 74 20 43 6c 6f 75 64 66 6c 61 72 65 20 42 6f 74 20 4d 61 6e 61 67 65 6d 65 6e 74 2c 20 63 75 72 72 65 6e 74 6c 79 20 69 6e 20 70 72 69 76 61 74 65 20 62 65 74 61 2e 20 41 73 20 70 61 72 74 20 6f 66 20 6f 75 72 20 62 6f 74 20 6d 61 6e 61 67 65 6d 65 6e 74 20 73 65 72 76 69 63 65 2c 20 74 68 69 73 20 63 6f 6f 6b 69 65 20 68 65 6c 70 73 20 6d 61 6e 61 67 65 20 69 6e 63 6f 6d 69 6e 67 20 74 72 61 66 66 69 63 20 74 68 61 74 20 6d 61 74 Data Ascii: ualtrics.com","IsSession":false,"Length":"0","description":"The __cf_bm cookie is a cookie necessary to support Cloudflare Bot Management, currently in private beta. As part of our bot management service, this cookie helps manage incoming traffic that mat
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 65 20 75 73 65 72 20 72 65 71 75 65 73 74 73 20 61 72 65 20 72 6f 75 74 65 64 20 63 6f 6e 73 69 73 74 65 6e 74 6c 79 20 74 6f 20 74 68 65 20 63 6f 72 72 65 63 74 20 73 65 72 76 65 72 2e 20 54 68 65 20 63 6f 6d 6d 6f 6e 20 72 6f 6f 74 20 69 73 20 42 49 47 69 70 53 65 72 76 65 72 20 6d 6f 73 74 20 63 6f 6d 6d 6f 6e 6c 79 20 66 6f 6c 6c 6f 77 65 64 20 62 79 20 61 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 2c 20 75 73 75 61 6c 6c 79 20 74 68 65 20 6f 6e 65 20 74 68 61 74 20 69 74 20 69 73 20 68 6f 73 74 65 64 20 6f 6e 2c 20 62 75 74 20 6e 6f 74 20 61 6c 77 61 79 73 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 62 36 37 Data Ascii: e user requests are routed consistently to the correct server. The common root is BIGipServer most commonly followed by a domain name, usually the one that it is hosted on, but not always.","DurationType":1,"category":null,"isThirdParty":false},{"id":"b67
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 75 65 2c 22 53 68 6f 77 53 44 4b 4c 69 73 74 4c 69 6e 6b 22 3a 74 72 75 65 2c 22 4f 72 64 65 72 22 3a 22 38 22 2c 22 4f 70 74 61 6e 6f 6e 47 72 6f 75 70 49 64 22 3a 22 43 30 30 30 33 22 2c 22 50 61 72 65 6e 74 22 3a 22 22 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 54 6f 67 67 6c 65 22 3a 66 61 6c 73 65 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 65 6e 61 62 6c 65 20 74 68 65 20 77 65 62 73 69 74 65 20 74 6f 20 70 72 6f 76 69 64 65 20 65 6e 68 61 6e 63 65 64 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 6e 64 20 70 65 72 73 6f 6e 61 6c 69 7a 61 Data Ascii: ue,"ShowSDKListLink":true,"Order":"8","OptanonGroupId":"C0003","Parent":"","ShowSubgroup":true,"ShowSubGroupDescription":true,"ShowSubgroupToggle":false,"GroupDescription":"These cookies enable the website to provide enhanced functionality and personaliza
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 66 34 38 30 34 62 32 2d 61 39 36 61 2d 34 61 35 64 2d 38 62 32 34 2d 34 64 63 32 32 66 66 32 35 38 36 65 22 2c 22 4e 61 6d 65 22 3a 22 5f 67 64 5f 76 69 73 69 74 6f 72 22 2c 22 48 6f 73 74 22 3a 22 77 77 77 2e 71 75 61 6c 74 72 69 63 73 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 37 33 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 63 6f 6e 74 61 69 6e 73 20 6e 6f 20 69 64 65 6e 74 69 66 79 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6e 64 20 69 73 20 75 73 65 64 20 66 6f 72 20 64 69 61 Data Ascii: nType":1,"category":null,"isThirdParty":false},{"id":"2f4804b2-a96a-4a5d-8b24-4dc22ff2586e","Name":"_gd_visitor","Host":"www.qualtrics.com","IsSession":false,"Length":"730","description":"This cookie contains no identifying information and is used for dia

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49997	104.19.177.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:24 UTC	611	OUT	GET /scripttemplates/202401.2.0/assets/otFloatingRoundedCorner.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.qualtrics.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:24 UTC	809	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:24 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: ZH/qKk47Ag9JNNJXJ30c9Q== Last-Modified: Thu, 07 Mar 2024 11:26:23 GMT x-ms-request-id: ccbc0158-c01e-0042-0ef2-738003000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 82471 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87d8b9eabd3e4381-EWR
2024-05-02 14:33:24 UTC	560	IN	Data Raw: 32 37 61 38 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 46 6c 6f 61 74 69 6e 67 52 6f 75 6e 64 65 64 43 6f 72 6e 65 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 6d 46 75 62 6d 56 79 4c 58 4e 6b 61 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 52 6d 78 76 59 58 52 70 62 6d 64 53 62 33 56 75 5a 47 56 6b 51 32 39 79 62 6d 56 79 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 47 73 74 59 32 39 75 64 47 46 70 62 6d 56 79 49 69 42 79 62 32 78 6c 50 53 4a 68 62 47 56 79 64 47 52 70 59 57 78 76 5a 79 49 67 59 58 4a 70 59 53 31 6b 5a 58 Data Ascii: 27a8 { "name": "otFloatingRoundedCorner", "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90RmxvYXRpbmdSb3VuZGVkQ29ybmVyIj48ZGl2IGNsYXNzPSJvdC1zZGstY29udGFpbmVyIiByb2xlPSJhbGVydGRpYWxvZyIgYXJpYS1kZX
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 6c 64 48 4a 31 63 33 51 74 63 47 39 73 61 57 4e 35 4c 58 52 70 64 47 78 6c 49 6a 35 55 61 47 6c 7a 49 48 4e 70 64 47 55 67 64 58 4e 6c 63 79 42 6a 62 32 39 72 61 57 56 7a 50 43 39 6f 4d 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 62 6d 56 30 63 6e 56 7a 64 43 31 77 62 32 78 70 59 33 6b 74 64 47 56 34 64 43 49 2b 64 47 6c 30 62 47 55 38 59 53 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 77 62 32 78 70 59 33 6b 38 4c 32 45 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 64 47 6c 30 62 47 55 69 50 6a 77 76 61 44 4d 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 Data Ascii: ldHJ1c3QtcG9saWN5LXRpdGxlIj5UaGlzIHNpdGUgdXNlcyBjb29raWVzPC9oMj48ZGl2IGlkPSJvbmV0cnVzdC1wb2xpY3ktdGV4dCI+dGl0bGU8YSBocmVmPSIjIj5wb2xpY3k8L2E+PC9kaXY+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRhaW5lciI+PGgzIGNsYXNzPSJvdC1kcGQtdGl0bGUiPjwvaDM+PGRpdiBjbGFzcz0ib3QtZHBkLW
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 44 62 47 39 7a 5a 53 42 43 64 58 52 30 62 32 34 67 52 55 35 45 4c 53 30 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 73 73 22 3a 20 22 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 46 6c 6f 61 74 69 6e 67 52 6f 75 6e 64 65 64 43 6f 72 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 35 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 77 69 64 74 68 3a 32 36 25 3b 6d 61 78 2d 77 69 64 74 68 3a 33 37 35 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 2e 35 70 78 3b 62 6f 74 74 6f 6d 3a 31 65 6d 3b 6c 65 66 74 3a 31 Data Ascii: PC9kaXY+PCEtLSBDbG9zZSBCdXR0b24gRU5ELS0+PC9kaXY+PC9kaXY+PC9kaXY+", "css": "#onetrust-banner-sdk.otFloatingRoundedCorner{position:fixed;z-index:2147483645;background-color:#fff;width:26%;max-width:375px;border-radius:2.5px;bottom:1em;left:1
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 7b 77 69 64 74 68 3a 34 34 70 78 3b 68 65 69 67 68 74 3a 34 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 32 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 66 6c 6f 61 74 Data Ascii: argin-bottom:20px;margin-right:10px}#onetrust-banner-sdk .ot-close-icon{width:44px;height:44px;background-size:12px;display:inline-block;padding:0;border:none}#onetrust-banner-sdk #onetrust-policy-text,#onetrust-banner-sdk .ot-b-addl-desc{clear:both;float
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 32 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 30 35 65 6d 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 2e 63 6f 6f 6b 69 65 2d 73 65 74 74 69 6e 67 2d 6c 69 6e 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 Data Ascii: dth:100%;padding:12px 10px;font-size:.82em;font-weight:600;line-height:1.4;letter-spacing:.05em;height:auto;white-space:normal;word-break:break-word;word-wrap:break-word}#onetrust-banner-sdk #onetrust-pc-btn-handler.cookie-setting-link{background-color:#f
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 64 65 74 61 69 6c 73 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 33 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 68 65 69 67 68 74 3a Data Ascii: l-align:middle;transition:all 300ms ease-in 0s;-webkit-transition:all 300ms ease-in 0s;-moz-transition:all 300ms ease-in 0s;-o-transition:all 300ms ease-in 0s}#onetrust-banner-sdk .banner-option-details{display:none;font-size:.83em;line-height:1.5;height:
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b Data Ascii: netrust-banner-sdk .ot-dpd-container .ot-dpd-desc *{font-size:inherit;line-height:inherit}#onetrust-banner-sdk .ot-dpd-container .ot-dpd-desc .onetrust-vendors-list-handler{display:block;margin-left:0px;margin-top:5px;clear:both;padding:0;margin-bottom:0;
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 77 69 64 74 68 3a 34 35 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 68 61 6e 64 6c 65 72 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 3a 6e 6f 74 28 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 29 20 23 6f 6e 65 74 72 75 73 74 2d 61 63 63 65 70 74 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e Data Ascii: banner-sdk #onetrust-pc-btn-handler{width:45%}#onetrust-banner-sdk #onetrust-reject-all-handler{margin-right:0}#onetrust-banner-sdk #onetrust-button-group-parent:not(.has-reject-all-button) #onetrust-accept-btn-handler{margin-right:0}#onetrust-banner-sdk.
2024-05-02 14:33:24 UTC	17	IN	Data Raw: 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a Data Ascii: " }
2024-05-02 14:33:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49995	104.19.177.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:24 UTC	600	OUT	GET /scripttemplates/202401.2.0/assets/v2/otPcPanel.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.qualtrics.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:25 UTC	809	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:24 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: aEtIrXgwjpx03r+FaEAJLg== Last-Modified: Thu, 07 Mar 2024 11:26:24 GMT x-ms-request-id: 198f8cd9-e01e-006a-6af2-73e1ab000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 73653 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87d8b9eabee1c352-EWR
2024-05-02 14:33:25 UTC	560	IN	Data Raw: 37 63 37 38 0d 0a 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 50 63 50 61 6e 65 6c 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 4d 74 63 32 52 72 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 52 51 59 31 42 68 62 6d 56 73 49 47 39 30 4c 57 68 70 5a 47 55 67 62 33 51 74 5a 6d 46 6b 5a 53 31 70 62 69 49 2b 50 47 52 70 64 69 42 79 62 32 78 6c 50 53 4a 68 62 47 56 79 64 47 52 70 59 57 78 76 5a 79 49 67 59 58 4a 70 59 53 31 74 62 32 52 68 62 44 30 69 64 48 4a 31 5a 53 49 67 59 58 4a 70 59 53 31 6b 5a 58 4e 6a 63 6d 6c 69 5a 57 52 69 65 54 30 69 62 33 51 74 63 47 4d 74 5a 47 56 7a 59 79 49 2b 50 43 45 74 Data Ascii: 7c78 { "name": "otPcPanel", "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY1BhbmVsIG90LWhpZGUgb3QtZmFkZS1pbiI+PGRpdiByb2xlPSJhbGVydGRpYWxvZyIgYXJpYS1tb2RhbD0idHJ1ZSIgYXJpYS1kZXNjcmliZWRieT0ib3QtcGMtZGVzYyI+PCEt
2024-05-02 14:33:25 UTC	1369	IN	Data Raw: 6d 39 30 4c 58 42 6a 4c 58 4e 6a 63 6d 39 73 62 47 4a 68 63 69 49 2b 50 47 67 79 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 30 61 58 52 73 5a 53 49 2b 57 57 39 31 63 69 42 51 63 6d 6c 32 59 57 4e 35 50 43 39 6f 4d 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 6b 5a 58 4e 6a 49 6a 34 38 4c 32 52 70 64 6a 34 38 59 6e 56 30 64 47 39 75 49 47 6c 6b 50 53 4a 68 59 32 4e 6c 63 48 51 74 63 6d 56 6a 62 32 31 74 5a 57 35 6b 5a 57 51 74 59 6e 52 75 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6b 46 6a 59 32 56 77 64 43 42 42 62 47 77 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 63 32 56 6a 64 47 6c 76 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 52 72 4c 58 4a 76 64 79 42 76 64 43 31 6a 59 58 51 74 5a 33 4a 77 49 6a 34 38 61 44 4d 67 61 57 51 39 Data Ascii: m90LXBjLXNjcm9sbGJhciI+PGgyIGlkPSJvdC1wYy10aXRsZSI+WW91ciBQcml2YWN5PC9oMj48ZGl2IGlkPSJvdC1wYy1kZXNjIj48L2Rpdj48YnV0dG9uIGlkPSJhY2NlcHQtcmVjb21tZW5kZWQtYnRuLWhhbmRsZXIiPkFjY2VwdCBBbGw8L2J1dHRvbj48c2VjdGlvbiBjbGFzcz0ib3Qtc2RrLXJvdyBvdC1jYXQtZ3JwIj48aDMgaWQ9
2024-05-02 14:33:25 UTC	1369	IN	Data Raw: 31 69 64 47 34 67 59 6d 46 6a 61 79 31 69 64 47 34 74 61 47 46 75 5a 47 78 6c 63 69 49 67 59 58 4a 70 59 53 31 73 59 57 4a 6c 62 44 30 69 51 6d 46 6a 61 79 49 2b 50 48 4e 32 5a 79 42 70 5a 44 30 69 62 33 51 74 59 6d 46 6a 61 79 31 68 63 6e 63 69 49 48 68 74 62 47 35 7a 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 79 4d 44 41 77 4c 33 4e 32 5a 79 49 67 65 47 31 73 62 6e 4d 36 65 47 78 70 62 6d 73 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 45 35 4f 54 6b 76 65 47 78 70 62 6d 73 69 49 48 67 39 49 6a 42 77 65 43 49 67 65 54 30 69 4d 48 42 34 49 69 42 32 61 57 56 33 51 6d 39 34 50 53 49 77 49 44 41 67 4e 44 51 30 4c 6a 55 7a 4d 53 41 30 4e 44 51 75 4e 54 4d 78 49 69 42 34 62 57 77 36 63 Data Ascii: 1idG4gYmFjay1idG4taGFuZGxlciIgYXJpYS1sYWJlbD0iQmFjayI+PHN2ZyBpZD0ib3QtYmFjay1hcnciIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgeG1sbnM6eGxpbms9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkveGxpbmsiIHg9IjBweCIgeT0iMHB4IiB2aWV3Qm94PSIwIDAgNDQ0LjUzMSA0NDQuNTMxIiB4bWw6c
2024-05-02 14:33:25 UTC	1369	IN	Data Raw: 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 78 4f 54 6b 35 4c 33 68 73 61 57 35 72 49 69 42 34 50 53 49 77 63 48 67 69 49 48 6b 39 49 6a 42 77 65 43 49 67 64 6d 6c 6c 64 30 4a 76 65 44 30 69 4d 43 41 74 4d 7a 41 67 4d 54 45 77 49 44 45 78 4d 43 49 67 59 58 4a 70 59 53 31 6f 61 57 52 6b 5a 57 34 39 49 6e 52 79 64 57 55 69 50 6a 78 30 61 58 52 73 5a 54 35 54 5a 57 46 79 59 32 67 67 53 57 4e 76 62 6a 77 76 64 47 6c 30 62 47 55 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 49 7a 4a 6c 4d 7a 59 30 4e 43 49 67 5a 44 30 69 54 54 55 31 4c 6a 45 30 4e 69 77 31 4d 53 34 34 4f 44 64 4d 4e 44 45 75 4e 54 67 34 4c 44 4d 33 4c 6a 63 34 4e 6d 4d 7a 4c 6a 51 34 4e 69 30 30 4c 6a 45 30 4e 43 77 31 4c 6a 4d 35 4e 69 30 35 4c 6a 4d 31 4f 43 77 31 4c 6a 4d 35 4e 69 Data Ascii: vd3d3LnczLm9yZy8xOTk5L3hsaW5rIiB4PSIwcHgiIHk9IjBweCIgdmlld0JveD0iMCAtMzAgMTEwIDExMCIgYXJpYS1oaWRkZW49InRydWUiPjx0aXRsZT5TZWFyY2ggSWNvbjwvdGl0bGU+PHBhdGggZmlsbD0iIzJlMzY0NCIgZD0iTTU1LjE0Niw1MS44ODdMNDEuNTg4LDM3Ljc4NmMzLjQ4Ni00LjE0NCw1LjM5Ni05LjM1OCw1LjM5Ni
2024-05-02 14:33:25 UTC	1369	IN	Data Raw: 4e 57 77 78 4e 44 41 75 4e 7a 55 33 4c 44 45 30 4d 43 34 33 4e 54 4e 32 4d 54 4d 34 4c 6a 63 31 4e 57 4d 77 4c 44 51 75 4f 54 55 31 4c 44 45 75 4f 44 41 35 4c 44 6b 75 4d 6a 4d 79 4c 44 55 75 4e 44 49 30 4c 44 45 79 4c 6a 67 31 4e 47 77 33 4d 79 34 77 4f 44 55 73 4e 7a 4d 75 4d 44 67 7a 43 69 41 67 49 43 41 67 49 47 4d 7a 4c 6a 51 79 4f 53 77 7a 4c 6a 59 78 4e 43 77 33 4c 6a 63 78 4c 44 55 75 4e 44 49 34 4c 44 45 79 4c 6a 67 31 4d 53 77 31 4c 6a 51 79 4f 47 4d 79 4c 6a 49 34 4d 69 77 77 4c 44 51 75 4e 6a 59 74 4d 43 34 30 4e 7a 6b 73 4e 79 34 78 4d 7a 55 74 4d 53 34 30 4d 32 4d 33 4c 6a 51 79 4e 69 30 7a 4c 6a 49 7a 4f 43 77 78 4d 53 34 78 4e 43 30 34 4c 6a 67 31 4d 53 77 78 4d 53 34 78 4e 43 30 78 4e 69 34 34 4e 44 56 57 4d 54 63 79 4c 6a 45 32 4e 6b 77 Data Ascii: NWwxNDAuNzU3LDE0MC43NTN2MTM4Ljc1NWMwLDQuOTU1LDEuODA5LDkuMjMyLDUuNDI0LDEyLjg1NGw3My4wODUsNzMuMDgzCiAgICAgIGMzLjQyOSwzLjYxNCw3LjcxLDUuNDI4LDEyLjg1MSw1LjQyOGMyLjI4MiwwLDQuNjYtMC40NzksNy4xMzUtMS40M2M3LjQyNi0zLjIzOCwxMS4xNC04Ljg1MSwxMS4xNC0xNi44NDVWMTcyLjE2Nkw
2024-05-02 14:33:25 UTC	1369	IN	Data Raw: 58 4e 7a 50 53 4a 76 64 43 31 6f 62 33 4e 30 4c 57 6c 30 5a 57 30 69 50 6a 78 69 64 58 52 30 62 32 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 68 76 63 33 51 74 59 6d 39 34 49 69 42 68 63 6d 6c 68 4c 57 56 34 63 47 46 75 5a 47 56 6b 50 53 4a 6d 59 57 78 7a 5a 53 49 2b 50 43 39 69 64 58 52 30 62 32 34 2b 50 48 4e 6c 59 33 52 70 62 32 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 46 6a 59 79 31 6f 5a 48 49 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 68 76 63 33 51 74 61 47 52 79 49 6a 34 38 61 44 51 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 68 76 63 33 51 74 62 6d 46 74 5a 53 49 2b 50 43 39 6f 4e 44 34 38 61 44 51 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 68 76 63 33 51 74 5a 47 56 7a 59 79 49 2b 50 43 39 6f 4e 44 34 38 Data Ascii: XNzPSJvdC1ob3N0LWl0ZW0iPjxidXR0b24gY2xhc3M9Im90LWhvc3QtYm94IiBhcmlhLWV4cGFuZGVkPSJmYWxzZSI+PC9idXR0b24+PHNlY3Rpb24gY2xhc3M9Im90LWFjYy1oZHIiPjxkaXYgY2xhc3M9Im90LWhvc3QtaGRyIj48aDQgY2xhc3M9Im90LWhvc3QtbmFtZSI+PC9oND48aDQgY2xhc3M9Im90LWhvc3QtZGVzYyI+PC9oND48
2024-05-02 14:33:25 UTC	1369	IN	Data Raw: 51 74 63 47 4d 74 5a 6d 39 76 64 47 56 79 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 69 64 47 34 74 59 32 39 75 64 47 46 70 62 6d 56 79 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 77 59 79 31 79 5a 57 5a 31 63 32 55 74 59 57 78 73 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6c 4a 6c 61 6d 56 6a 64 43 42 42 62 47 77 38 4c 32 4a 31 64 48 52 76 62 6a 34 67 50 47 4a 31 64 48 52 76 62 69 42 6a 62 47 46 7a 63 7a 30 69 63 32 46 32 5a 53 31 77 63 6d 56 6d 5a 58 4a 6c 62 6d 4e 6c 4c 57 4a 30 62 69 31 6f 59 57 35 6b 62 47 56 79 49 47 39 75 5a 58 52 79 64 58 4e 30 4c 57 4e 73 62 33 4e 6c 4c 57 4a 30 62 69 31 6f 59 57 35 6b 62 47 56 79 49 6a 35 54 59 58 5a 6c 49 46 4e 6c 64 48 52 70 62 6d 64 7a 50 43 39 69 64 Data Ascii: QtcGMtZm9vdGVyIj48ZGl2IGNsYXNzPSJvdC1idG4tY29udGFpbmVyIj48YnV0dG9uIGNsYXNzPSJvdC1wYy1yZWZ1c2UtYWxsLWhhbmRsZXIiPlJlamVjdCBBbGw8L2J1dHRvbj4gPGJ1dHRvbiBjbGFzcz0ic2F2ZS1wcmVmZXJlbmNlLWJ0bi1oYW5kbGVyIG9uZXRydXN0LWNsb3NlLWJ0bi1oYW5kbGVyIj5TYXZlIFNldHRpbmdzPC9id
2024-05-02 14:33:25 UTC	1369	IN	Data Raw: 77 59 57 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 33 61 58 52 6a 61 43 31 75 62 32 49 69 49 47 46 79 61 57 45 74 59 32 68 6c 59 32 74 6c 5a 44 30 69 5a 6d 46 73 63 32 55 69 49 48 4a 76 62 47 55 39 49 6e 4e 33 61 58 52 6a 61 43 49 2b 50 43 39 7a 63 47 46 75 50 69 41 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 62 47 46 69 5a 57 77 74 64 48 68 30 49 6a 35 54 64 32 6c 30 59 32 67 67 54 47 46 69 5a 57 77 38 4c 33 4e 77 59 57 34 2b 50 43 39 73 59 57 4a 6c 62 44 34 67 50 48 4e 77 59 57 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 78 68 59 6d 56 73 4c 58 4e 30 59 58 52 31 63 79 49 2b 62 47 46 69 5a 57 77 38 4c 33 4e 77 59 57 34 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 44 61 47 56 6a 61 32 4a 76 65 43 42 49 56 45 31 4d 49 43 Data Ascii: wYW4gY2xhc3M9Im90LXN3aXRjaC1ub2IiIGFyaWEtY2hlY2tlZD0iZmFsc2UiIHJvbGU9InN3aXRjaCI+PC9zcGFuPiA8c3BhbiBjbGFzcz0ib3QtbGFiZWwtdHh0Ij5Td2l0Y2ggTGFiZWw8L3NwYW4+PC9sYWJlbD4gPHNwYW4gY2xhc3M9Im90LWxhYmVsLXN0YXR1cyI+bGFiZWw8L3NwYW4+PC9kaXY+PCEtLSBDaGVja2JveCBIVE1MIC
2024-05-02 14:33:25 UTC	1369	IN	Data Raw: 64 47 39 75 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 46 6a 59 79 31 6f 5a 48 49 69 50 6a 77 68 4c 53 30 67 51 57 4e 6a 62 33 4a 6b 61 57 39 75 49 47 68 6c 59 57 52 6c 63 69 42 6a 62 32 35 30 5a 57 35 30 49 43 30 74 50 6a 77 76 5a 47 6c 32 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 46 6a 59 79 31 30 65 48 51 69 50 6a 77 68 4c 53 30 67 51 57 4e 6a 62 33 4a 70 5a 47 39 75 49 47 4e 76 62 6e 52 6c 62 6e 51 67 4c 53 30 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 48 4e 77 59 57 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6a 63 6d 34 74 63 6d 52 79 49 69 42 68 63 6d 6c 68 4c 57 46 30 62 32 31 70 59 7a 30 69 64 48 4a 31 5a 53 49 67 59 58 4a 70 59 53 31 73 61 58 5a 6c 50 53 4a 77 62 32 78 70 64 47 55 Data Ascii: dG9uPjxkaXYgY2xhc3M9Im90LWFjYy1oZHIiPjwhLS0gQWNjb3JkaW9uIGhlYWRlciBjb250ZW50IC0tPjwvZGl2PjxkaXYgY2xhc3M9Im90LWFjYy10eHQiPjwhLS0gQWNjb3JpZG9uIGNvbnRlbnQgLS0+PC9kaXY+PC9kaXY+PHNwYW4gY2xhc3M9Im90LXNjcm4tcmRyIiBhcmlhLWF0b21pYz0idHJ1ZSIgYXJpYS1saXZlPSJwb2xpdGU
2024-05-02 14:33:25 UTC	1369	IN	Data Raw: 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 74 2d 73 6c 69 64 65 2d 69 6e 2d 72 69 67 68 74 7b 66 72 6f 6d 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 30 25 2c 20 30 2c 20 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 30 25 2c 20 30 2c 20 30 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 30 2c 20 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 30 2c 20 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 74 2d 73 6c 69 64 65 2d 6f 75 74 2d 6c 65 66 74 7b 66 72 6f 6d 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 30 Data Ascii: )}}@keyframes ot-slide-in-right{from{-webkit-transform:translate3d(100%, 0, 0);transform:translate3d(100%, 0, 0)}to{-webkit-transform:translate3d(0, 0, 0);transform:translate3d(0, 0, 0)}}@keyframes ot-slide-out-left{from{-webkit-transform:translate3d(0, 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49996	104.19.177.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:24 UTC	601	OUT	GET /scripttemplates/202401.2.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.qualtrics.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:24 UTC	826	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:24 GMT Content-Type: text/css Content-Length: 21778 Connection: close Content-MD5: c7xAZ9MSGAobGaTYg/Qtag== Last-Modified: Thu, 07 Mar 2024 11:26:34 GMT ETag: 0x8DC3E9971F9F305 x-ms-request-id: 76481089-e01e-0018-66f2-73e6e4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 78247 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87d8b9eabc6e7c9a-EWR
2024-05-02 14:33:24 UTC	543	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 Data Ascii: #onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .one
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 Data Ascii: k #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-ic
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f Data Ascii: ync-ntfy button ,#ot-sync-ntfy a[data-parent-id] {font-size:inherit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#onetrust-banner-sdk button.ot-link-btn:hover,#o
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 73 63 72 Data Ascii: ackground-position:center;background-size:contain;background-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-height:100%;max-width:100%}#onetrust-pc-sdk .scr
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 6e 65 74 72 75 73 74 2d 66 61 64 65 2d 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 6f 74 2d 63 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 Data Ascii: netrust-fade-in{0%{opacity:0}100%{opacity:1}}.ot-cookie-label{text-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.75em}}#onetrust-banner-sdk .banner-option-inp
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 61 79 3a 69 6e 6c 69 6e 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 Data Ascii: ay:inline;margin-right:5px}#onetrust-banner-sdk .ot-optout-signal svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 6f 67 67 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 74 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 74 2d 70 63 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 64 69 76 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 73 70 61 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 31 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 32 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 33 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 34 2c Data Ascii: #onetrust-banner-sdk .ot-toggle,#onetrust-banner-sdk #ot-content,#onetrust-banner-sdk #ot-pc-content,#onetrust-banner-sdk .checkbox,#onetrust-pc-sdk div,#onetrust-pc-sdk span,#onetrust-pc-sdk h1,#onetrust-pc-sdk h2,#onetrust-pc-sdk h3,#onetrust-pc-sdk h4,
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 64 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 62 6f 64 79 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 74 6f 67 67 6c 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 23 6f 74 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 23 6f 74 2d 70 63 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 63 68 65 63 6b 62 6f 78 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 64 69 76 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 Data Ascii: sdk-cookie-policy td,#ot-sdk-cookie-policy tbody,#ot-sdk-cookie-policy .ot-main-content,#ot-sdk-cookie-policy .ot-toggle,#ot-sdk-cookie-policy #ot-content,#ot-sdk-cookie-policy #ot-pc-content,#ot-sdk-cookie-policy .checkbox,#ot-sync-ntfy div,#ot-sync-ntfy
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 65 72 2d 73 64 6b 20 6c 61 62 65 6c 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 61 62 65 6c 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c Data Ascii: er-sdk label:after,#onetrust-banner-sdk .checkbox:after,#onetrust-banner-sdk .checkbox:before,#onetrust-pc-sdk label:before,#onetrust-pc-sdk label:after,#onetrust-pc-sdk .checkbox:after,#onetrust-pc-sdk .checkbox:before,#ot-sdk-cookie-policy label:before,
2024-05-02 14:33:24 UTC	1369	IN	Data Raw: 6b 2d 63 6f 6c 75 6d 6e 73 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 3a 66 69 72 73 74 Data Ascii: k-columns,#onetrust-pc-sdk .ot-sdk-column,#onetrust-pc-sdk .ot-sdk-columns,#ot-sdk-cookie-policy .ot-sdk-column,#ot-sdk-cookie-policy .ot-sdk-columns{margin-left:4%}#onetrust-banner-sdk .ot-sdk-column:first-child,#onetrust-banner-sdk .ot-sdk-columns:first

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49989	104.17.71.206	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:24 UTC	1275	OUT	GET /rs/542-FMF-412/images/marketo-xdframe-relative.html HTTP/1.1 Host: success.qualtrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=HC9C5iVS5xaJATy7UElHy1mVXPjj5Oi889oAJquUcQw-1714660403-1.0.1.1-GlmNEQttpAx68Z8FWbaFDpIPZAhb3RAmzHTalb2b2SGoo9X0Yf0JmGZVQHmGPdKSwUyfY5bXRYpgjxccPvemeQ; mutiny.user.token=030fb6bc-948e-4a68-ad25-9385910456db; mutiny.user.session=a558c5cb-0047-435f-8b79-7bfaa3a87403; __gtm_campaign_url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye; q_marketing_lang_ga_s=true
2024-05-02 14:33:25 UTC	472	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:25 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Sat, 27 Apr 2024 01:44:21 GMT Vary: Accept-Encoding X-Content-Type-Options: nosniff Set-Cookie: BIGipServersjpweb-nginx-app_https=!mo73xzY5WMZmqIwRgS7A5F9dNDOAZKN/KkJCyj2v5U0i6mvyBA/XybuwKMb0S04Q3SgXJ9HAahguNps=; Path=/; Version=1; Secure; Httponly CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87d8b9ea2b668c30-EWR
2024-05-02 14:33:25 UTC	897	IN	Data Raw: 37 35 39 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 61 72 6b 65 74 6f 20 46 6f 72 6d 73 20 32 20 43 72 6f 73 73 2d 44 6f 6d 61 69 6e 20 50 72 6f 78 79 20 46 72 61 6d 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 21 2d 2d 20 6d 6f 64 69 66 69 65 64 20 32 30 31 39 2d 31 30 20 74 6f 20 75 73 65 20 61 20 72 65 6c 61 74 69 76 65 20 70 61 74 68 20 2d 2d 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 66 6f 72 6d 73 32 2f 6a 73 2f 66 6f 72 6d 73 32 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 21 2d 2d 20 2f 6d 6f 64 69 66 69 65 64 20 2d 2d 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 28 66 75 6e 63 74 69 Data Ascii: 759<!doctype html><html> <head> <title>Marketo Forms 2 Cross-Domain Proxy Frame</title> ... modified 2019-10 to use a relative path --> <script src="/js/forms2/js/forms2.min.js"></script> ... /modified --> <script> (functi
2024-05-02 14:33:25 UTC	991	IN	Data Raw: 70 3a 66 61 6c 73 65 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 72 61 6d 73 2e 73 75 63 63 65 73 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 64 61 74 61 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 6b 74 6f 52 65 73 70 6f 6e 73 65 3a 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 66 6f 72 22 3a 6d 65 73 73 61 67 65 2e 6d 6b 74 6f 52 65 71 75 65 73 74 2e 69 64 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 72 72 6f 72 3a 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 3a 64 61 74 61 0a 20 20 20 Data Ascii: p:false }; params.success = function (data){ window.parent.postMessage(JSON.stringify({ mktoResponse:{ "for":message.mktoRequest.id, error:false, data:data
2024-05-02 14:33:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	50004	69.147.82.61	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:24 UTC	520	OUT	GET /wi/ytc.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:25 UTC	897	IN	HTTP/1.1 200 OK x-amz-id-2: 6Wo2lx1s7OnFQhJXsu7elQUkmPNXkGHiFBbaT6s+5WvuYyjcq5krMH6V+cqw47uNyDBUyJdrRvY= x-amz-request-id: 9RFMXV9JP0SMCF79 Date: Thu, 02 May 2024 14:33:25 GMT Last-Modified: Mon, 26 Jun 2023 09:26:35 GMT x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle" ETag: "5c6ed25dce803fd84288922b8928409e" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=3600 x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 18187 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-02 14:33:25 UTC	403	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2024-05-02 14:33:25 UTC	1300	IN	Data Raw: 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 6e 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 31 26 74 26 26 28 65 3d 6e 28 65 29 29 2c 38 26 74 29 72 65 74 75 72 6e 20 65 3b 69 66 28 34 26 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 6e 2e 72 28 72 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 65 7d 29 2c 32 26 74 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 29 Data Ascii: odule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)
2024-05-02 14:33:25 UTC	1300	IN	Data Raw: 2c 77 69 6e 64 6f 77 2e 54 65 78 74 45 6e 63 6f 64 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 54 65 78 74 45 6e 63 6f 64 65 72 5d 22 7d 3b 74 72 79 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 77 69 6e 64 6f 77 2e 54 65 78 74 45 6e 63 6f 64 65 72 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 63 6f 64 69 6e 67 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 77 69 6e 64 6f 77 2e 54 65 78 74 45 6e 63 6f 64 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 68 69 73 29 29 72 65 74 75 72 6e 22 75 74 66 2d 38 22 3b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6c 6c 65 67 61 6c 20 69 6e Data Ascii: ,window.TextEncoder.prototype.toString=function(){return"[object TextEncoder]"};try{Object.defineProperty(window.TextEncoder.prototype,"encoding",{get:function(){if(window.TextEncoder.prototype.isPrototypeOf(this))return"utf-8";throw TypeError("Illegal in
2024-05-02 14:33:25 UTC	196	IN	Data Raw: 6e 67 28 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 22 20 22 29 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3e 3d 65 3f 53 74 72 69 6e 67 28 74 68 69 73 29 3a 28 28 65 2d 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 3e 74 2e 6c 65 6e 67 74 68 26 26 28 74 2b 3d 74 2e 72 65 70 65 61 74 28 65 2f 74 2e 6c 65 6e 67 74 68 29 29 2c 74 2e 73 6c 69 63 65 28 30 2c 65 29 2b 53 74 72 69 6e 67 28 74 68 69 73 29 29 7d 29 2c 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 7c 7c 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 3d 66 75 6e 63 74 69 Data Ascii: ng(void 0!==t?t:" "),this.length>=e?String(this):((e-=this.length)>t.length&&(t+=t.repeat(e/t.length)),t.slice(0,e)+String(this))}),String.prototype.startsWith\|\|(String.prototype.startsWith=functi
2024-05-02 14:33:25 UTC	1300	IN	Data Raw: 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 7c 7c 30 2c 74 68 69 73 2e 69 6e 64 65 78 4f 66 28 65 2c 74 29 3d 3d 3d 74 7d 29 7d 6e 2e 72 28 74 29 3b 76 61 72 20 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 66 72 61 6d 65 73 5b 65 5d 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 77 69 6e 64 6f Data Ascii: on(e,t){return t=t\|\|0,this.indexOf(e,t)===t})}n.r(t);var i,o,a=function(){return window.location.hostname},s=function(){return window.location.search},u=function(){return window.location.hash},d=function(e){return window.frames[e]},c=function(e,t,n){windo
2024-05-02 14:33:25 UTC	1300	IN	Data Raw: 6c 75 65 2c 69 2e 73 75 63 63 65 73 73 29 2c 6e 5b 69 2e 63 61 6c 6c 49 64 5d 3d 6e 75 6c 6c 29 7d 28 65 2c 72 2c 6f 29 7d 29 2c 21 31 29 7d 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3b 6d 28 22 5f 5f 63 6d 70 22 2c 22 5f 5f 63 6d 70 4c 6f 63 61 74 6f 72 22 2c 22 5f 5f 63 6d 70 43 61 6c 6c 22 2c 22 5f 5f 63 6d 70 52 65 74 75 72 6e 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 6d 70 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 26 26 68 28 65 29 2c 76 28 22 5f 5f 63 6d 70 22 29 7d 2c 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 76 6f 69 64 20 30 2c 21 31 29 7d 29 2c 31 65 33 29 2c 63 28 22 67 65 74 43 6f 6e 73 65 6e 74 44 61 74 61 22 2c 6e 75 6c 6c 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 Data Ascii: lue,i.success),n[i.callId]=null)}(e,r,o)}),!1)}},g=function(){var e,t;m("__cmp","__cmpLocator","__cmpCall","__cmpReturn"),window.__cmp&&(e=function(e,t){t&&h(e),v("__cmp")},t=setTimeout((function(){e(void 0,!1)}),1e3),c("getConsentData",null,(function(n,r
2024-05-02 14:33:25 UTC	1300	IN	Data Raw: 2c 22 26 22 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 22 22 3d 3d 3d 74 29 72 65 74 75 72 6e 3b 78 28 22 76 6d 63 69 64 22 2c 74 2c 36 30 34 38 30 30 29 3b 76 61 72 20 6e 3d 4f 28 22 76 6d 75 75 69 64 22 2c 36 30 34 38 30 30 29 3b 76 6f 69 64 20 30 21 3d 3d 6e 26 26 22 22 21 3d 3d 6e 7c 7c 28 6e 3d 62 28 29 29 2c 78 28 22 76 6d 75 75 69 64 22 2c 6e 2c 36 30 34 38 30 30 29 7d 7d 76 61 72 20 45 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 26 26 22 22 21 3d 3d 6e 29 66 6f 72 28 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 68 3b 72 2b 3d 31 29 7b 76 61 72 20 69 3d 65 5b 72 5d 2e 70 72 6f 70 65 72 74 69 65 73 3b 69 2e 71 73 74 72 69 6e 67 73 3d 69 2e 71 73 74 72 69 6e 67 73 7c 7c 7b 7d 2c 69 2e Data Ascii: ,"&");if(void 0===t\|\|""===t)return;x("vmcid",t,604800);var n=O("vmuuid",604800);void 0!==n&&""!==n\|\|(n=b()),x("vmuuid",n,604800)}}var E=function(e,t,n){var r;if(void 0!==n&&""!==n)for(r=0;r<e.length;r+=1){var i=e[r].properties;i.qstrings=i.qstrings\|\|{},i.
2024-05-02 14:33:25 UTC	1300	IN	Data Raw: 76 61 72 20 65 3d 73 28 29 3b 69 66 28 65 29 72 65 74 75 72 6e 20 65 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3b 76 61 72 20 74 3d 75 28 29 3b 72 65 74 75 72 6e 20 74 3f 74 2e 73 75 62 73 74 72 69 6e 67 28 74 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 2b 31 29 3a 22 22 7d 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 28 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 73 2f 67 2c 22 22 29 3b 72 65 74 75 72 6e 20 53 28 74 2c 65 2c 22 3b 22 29 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 74 72 79 7b 6e 3d 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 65 29 7d 63 61 74 63 68 28 65 29 7b 6e 3d 6e 75 6c 6c 7d 69 66 28 6e 75 6c 6c 21 3d 3d 6e 29 7b 74 72 79 7b 6e Data Ascii: var e=s();if(e)return e.substring(1);var t=u();return t?t.substring(t.indexOf("?")+1):""},A=function(e){var t=(document.cookie\|\|"").replace(/\s/g,"");return S(t,e,";")},P=function(e,t){var n;try{n=localStorage.getItem(e)}catch(e){n=null}if(null!==n){try{n
2024-05-02 14:33:25 UTC	1300	IN	Data Raw: 67 65 2e 68 61 73 68 65 64 50 68 6f 6e 65 73 5b 65 2e 70 69 78 65 6c 49 64 5d 3d 6e 3a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2f 5e 5b 30 2d 39 5f 2b 5c 2d 28 29 20 5d 2b 24 2f 2e 74 65 73 74 28 65 29 7d 28 6e 29 3f 64 65 6c 65 74 65 20 65 2e 68 70 68 3a 67 65 2e 70 6c 61 69 6e 50 68 6f 6e 65 73 5b 65 2e 70 69 78 65 6c 49 64 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 30 2d 39 2b 5d 2f 67 2c 22 22 29 3b 69 66 28 21 74 2e 73 74 61 72 74 73 57 69 74 68 28 22 2b 22 29 29 72 65 74 75 72 6e 22 2b 22 2b 74 2e 72 65 70 6c 61 63 65 28 2f 5e 30 2b 2f 2c 22 22 29 3b 72 65 74 75 72 6e 20 74 7d 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 72 6f 70 65 72 74 Data Ascii: ge.hashedPhones[e.pixelId]=n:!function(e){return/^[0-9_+\-() ]+$/.test(e)}(n)?delete e.hph:ge.plainPhones[e.pixelId]=function(e){var t=e.replace(/[^0-9+]/g,"");if(!t.startsWith("+"))return"+"+t.replace(/^0+/,"");return t}(n)}}function N(e){var t=e.propert
2024-05-02 14:33:25 UTC	1300	IN	Data Raw: 65 29 7b 76 61 72 20 74 3d 65 2e 75 73 65 72 45 6d 61 69 6c 2c 6e 3d 65 2e 75 73 65 72 48 61 73 68 65 64 45 6d 61 69 6c 3b 69 66 28 21 42 28 74 29 26 26 6e 29 7b 76 61 72 20 72 3d 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 74 72 69 6d 28 29 3b 42 28 72 29 26 26 28 65 2e 75 73 65 72 45 6d 61 69 6c 3d 72 2c 64 65 6c 65 74 65 20 65 2e 75 73 65 72 48 61 73 68 65 64 45 6d 61 69 6c 29 7d 7d 28 65 29 2c 65 2e 75 73 65 72 45 6d 61 69 6c 3f 28 65 2e 75 73 65 72 45 6d 61 69 6c 3d 65 2e 75 73 65 72 45 6d 61 69 6c 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 74 72 69 6d 28 29 2c 42 28 65 2e 75 73 65 72 45 6d 61 69 6c 29 3f 28 67 65 2e 65 6d 61 69 6c 73 5b 65 2e 70 69 78 65 6c 49 64 5d 3d 65 2e 75 73 65 72 45 6d 61 69 6c 2c 65 2e 75 73 65 72 48 61 73 68 65 64 45 Data Ascii: e){var t=e.userEmail,n=e.userHashedEmail;if(!B(t)&&n){var r=n.toLowerCase().trim();B(r)&&(e.userEmail=r,delete e.userHashedEmail)}}(e),e.userEmail?(e.userEmail=e.userEmail.toLowerCase().trim(),B(e.userEmail)?(ge.emails[e.pixelId]=e.userEmail,e.userHashedE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	50002	142.251.40.196	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:24 UTC	871	OUT	POST /pagead/landing?gcs=G111&gcu=1&gcd=13r3r3r3r5&rnd=190938145.1714660404&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F&dma=0&npa=0&gtm=45He44t0n71W6F8HXv6526812za200&auid=1791124635.1714660404 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.qualtrics.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:25 UTC	858	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcu=1&gcd=13r3r3r3r5&rnd=190938145.1714660404&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F&dma=0&npa=0&gtm=45He44t0n71W6F8HXv6526812za200&auid=1791124635.1714660404 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	50009	34.192.223.42	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:26 UTC	616	OUT	POST /v2/b HTTP/1.1 Host: api-v2.mutinyhq.io Connection: keep-alive Content-Length: 259 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.qualtrics.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:26 UTC	259	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 65 76 65 6e 74 5f 74 79 70 65 22 3a 22 6d 65 74 72 69 63 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 6d 65 74 72 69 63 5f 6b 65 79 22 3a 22 63 6c 69 65 6e 74 2e 61 74 74 61 63 68 65 64 22 2c 22 6d 65 74 72 69 63 5f 74 79 70 65 22 3a 22 69 6e 63 72 65 6d 65 6e 74 22 2c 22 74 61 67 73 22 3a 7b 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 22 35 2e 33 2e 34 22 7d 7d 7d 5d 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 22 35 2e 33 2e 34 22 7d 2c 22 74 6f 6b 65 6e 22 3a 22 66 61 34 61 64 34 38 65 34 66 65 61 61 37 34 30 22 2c 22 76 69 73 69 74 6f 72 5f 74 6f 6b 65 6e 22 3a 22 30 33 30 66 62 36 62 63 2d 39 34 38 65 2d 34 61 36 38 2d 61 64 32 35 2d 39 33 38 35 39 31 30 34 35 36 Data Ascii: {"events":[{"event_type":"metric","payload":{"metric_key":"client.attached","metric_type":"increment","tags":{"client_version":"5.3.4"}}}],"metadata":{"client_version":"5.3.4"},"token":"fa4ad48e4feaa740","visitor_token":"030fb6bc-948e-4a68-ad25-9385910456
2024-05-02 14:33:26 UTC	568	IN	HTTP/1.1 201 Created Date: Thu, 02 May 2024 14:33:26 GMT Content-Type: text/plain Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Expose-Headers: x-cache, x-cache-hits, age Access-Control-Max-Age: 7200 Vary: Origin,Accept-Encoding ETag: W/"565339bc4d33d72817b583024112eb7f" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: 20824f74-fae6-4446-9c21-a51e24e0f3f5 X-Runtime: 0.006679 Strict-Transport-Security: max-age=63072000; includeSubDomains
2024-05-02 14:33:26 UTC	7	IN	Data Raw: 32 0d 0a 4f 4b 0d 0a Data Ascii: 2OK
2024-05-02 14:33:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	50016	172.217.165.130	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:26 UTC	869	OUT	GET /pagead/landing?gcs=G111&gcu=1&gcd=13r3r3r3r5&rnd=190938145.1714660404&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F&dma=0&npa=0&gtm=45He44t0n71W6F8HXv6526812za200&auid=1791124635.1714660404 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-02 14:33:26 UTC	960	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUnO9RFIBJunWPlD4OtIoZAqwdG0dHBqwAWYVPBC5WmC3gW2bK15-Lftyszn; expires=Sat, 02-May-2026 14:33:26 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	50023	69.147.82.61	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:27 UTC	565	OUT	GET /wi/config/10005469.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.qualtrics.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:27 UTC	799	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-amz-request-id: 70X7700JN12HC8AD x-amz-id-2: fLM0BDrLXhtvfWy5ZeCgsbzawnizuhtwoYUWOrxluhhLYbCLU61KYTjIf9HCIxPswQJrPjrSxk3wMpaeuzhfhb79/bElGQhAwR6iaSapbYs= Content-Type: application/json Date: Thu, 02 May 2024 14:23:25 GMT Server: ATS Referrer-Policy: no-referrer-when-downgrade Cache-Control: public,max-age=3600 Content-Length: 2 Age: 602 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-02 14:33:27 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	50020	104.19.177.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:27 UTC	579	OUT	GET /logos/static/ot_guard_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.qualtrics.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:27 UTC	829	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:27 GMT Content-Type: image/svg+xml Content-Length: 497 Connection: close Content-MD5: tXyZydHjxQshFMbbBT1/8A== Last-Modified: Tue, 30 Apr 2024 02:36:21 GMT ETag: 0x8DC68BE52371926 x-ms-request-id: 321f0e85-701e-000a-5cb4-9a9d34000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 68783 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87d8b9f8cfb45e62-EWR
2024-05-02 14:33:27 UTC	497	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 5f 5f 73 76 67 2d 66 69 6c 6c 22 20 64 3d 22 4d 31 34 2e 35 38 38 20 30 6c 2e 34 34 35 2e 33 32 38 63 31 2e 38 30 37 20 31 2e 33 30 33 20 33 2e 39 36 31 20 32 2e 35 33 33 20 36 2e 34 36 31 20 33 2e 36 38 38 20 32 2e 30 31 35 2e 39 33 20 34 2e 35 37 36 20 31 2e 37 34 36 20 37 2e 36 38 32 20 32 2e 34 34 36 20 30 20 31 34 2e 31 37 38 2d 34 2e 37 33 20 32 34 2e 31 33 33 2d 31 34 2e 31 39 20 32 39 2e 38 36 34 6c 2d 2e 33 39 38 2e 32 33 36 43 34 2e 38 36 33 20 33 30 2e 38 37 20 30 20 32 30 2e 38 33 37 20 30 20 36 2e 34 36 32 63 33 2e 31 30 37 2d 2e 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	50027	104.19.177.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:27 UTC	714	OUT	GET /logos/3d2b6fb4-6a2f-40e8-9142-8a3a3a25baa0/4d17d779-0601-4f87-b9c9-8a26d3e68497/e962d8e2-6340-4c53-9266-f5dcd2a8fdbf/QualtricsXM_RBG.png HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:27 UTC	827	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:27 GMT Content-Type: image/png Content-Length: 56061 Connection: close Content-MD5: pFeGsbq/IdkflcwxvaNb1A== Last-Modified: Mon, 06 Jun 2022 21:43:06 GMT ETag: 0x8DA48058A954C93 x-ms-request-id: f1965f2b-201e-005a-4be6-1d5f64000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 80340 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87d8b9f8fc96818c-IAD
2024-05-02 14:33:27 UTC	542	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 3f 00 00 02 59 08 06 00 00 00 a4 ae 0c f4 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ec dd 7d 90 64 59 7a d7 f7 73 66 77 67 56 ee ee a9 da d9 99 59 bd 20 55 41 0c 08 10 a2 1b 81 2c 40 e0 2e f9 25 a6 67 17 47 97 09 8f ff 33 d3 20 4b 96 15 b2 a6 84 00 19 64 b9 6b 82 20 08 85 82 d8 5a 87 c3 e1 30 41 4c 0d 06 24 24 40 dd 42 92 5f c2 66 ab bb 67 11 32 42 db 8d 76 77 66 16 b9 bb 7a 57 5a bd ed 4b 35 c4 fc 21 6d f7 1c c7 cd bc 37 ef 39 cf 79 9e 73 6f be 54 55 be 7c 3f b1 b3 59 99 f7 9e fb 96 59 5d 55 79 7e f9 3c 3e 84 e0 00 00 00 00 2c 0e 7f 66 7d cb 39 f7 d1 05 7d ca be 2d bc 7d 74 30 07 c7 01 00 00 00 00 00 00 60 89 3c c6 93 09 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR?YpHYs.#.#x?v IDATx}dYzsfwgVY UA,@.%gG3 Kdk Z0AL$$@B_fg2BvwfzWZK5!m79ysoTU\|?YY]Uy~<>,f}9}-}t0`<
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 2c 34 c2 0f 00 00 00 00 00 00 00 00 00 00 00 60 a1 11 7e 00 00 00 00 00 00 00 00 00 00 00 00 0b 8d f0 03 00 00 00 00 00 00 00 00 00 00 00 58 68 84 1f 00 00 00 00 00 00 00 00 00 00 00 c0 42 23 fc 00 00 00 00 00 00 00 00 00 00 00 00 16 1a e1 07 00 00 00 00 00 00 00 00 00 00 00 b0 d0 08 3f 00 00 00 00 00 00 00 00 00 00 00 80 85 46 f8 01 00 00 00 00 00 00 00 00 00 00 00 2c 34 c2 0f 00 00 00 00 00 00 00 00 00 00 00 60 a1 11 7e 00 00 00 00 00 00 00 00 00 00 00 00 0b 8d f0 03 00 00 00 00 00 00 00 00 00 00 00 58 68 84 1f 00 00 00 00 00 00 00 00 00 00 00 c0 42 23 fc 00 00 00 00 00 00 00 00 00 00 00 00 16 1a e1 07 00 00 00 00 00 00 00 00 00 00 00 b0 d0 08 3f 00 00 00 00 00 00 00 00 00 00 00 80 85 46 f8 01 00 00 00 00 00 00 00 00 00 00 00 2c 34 Data Ascii: ,4`~XhB#?F,4`~XhB#?F,4
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: d5 e5 e9 be 46 21 05 11 64 88 f9 e0 45 10 62 bc f1 84 1f 00 00 00 00 00 00 00 00 00 80 e3 57 85 07 ee cf cd 75 0e a2 dd 45 f4 b8 4b 26 e3 47 73 a6 e7 bf ee 8d 9f de 39 f9 03 3d 05 a1 0d 7a e8 ed 2e 8c fb 32 f8 20 db 5d 94 82 0e 22 18 a0 07 1d 1a 4a 6b 8b 68 99 1e 72 d0 1e 93 ed 37 7a b4 bb 88 17 74 4c 92 fb 71 26 d1 e5 c2 74 19 d5 1f 26 b7 ad 86 11 42 5a 35 41 6d 77 d1 d5 ba a2 14 a6 50 5a 6b a8 41 08 27 8f 23 af ee 20 db 5d 94 c6 13 7e 00 00 00 00 00 00 00 00 00 00 8e d9 dd e7 5e 3c 9a 9f f6 17 f1 24 7d 5e c9 20 c8 c9 f5 76 c2 7c f7 6b 3f f5 33 eb a7 70 c0 27 e6 c9 8f 7d a2 fa a4 fc e5 f6 3a d8 2d 2f f4 0a 10 b5 38 44 e2 ac 39 fd fa 31 11 92 c8 da 5d c8 d6 16 43 0f 82 58 27 d9 7e af 76 17 f1 bc 77 8f e0 83 55 c5 c1 fa ba 3d c1 7c dd be 61 88 e1 63 84 1f Data Ascii: F!dEbWuEK&Gs9=z.2 ]"Jkhr7ztLq&t&BZ5AmwPZkA'# ]~^<$}^ v\|k?3p'}:-/8D91]CX'~vwU=\|ac
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: b9 8b ae 5b 29 f8 a0 af 13 8d 4f da 5d b4 07 a2 04 1f 32 46 45 09 71 cc f9 fd d0 6b 8c 97 27 ef ca 93 e3 c5 c7 92 db 76 ff f5 19 ac bd eb ef 7d 9e ea 0f dd 86 21 91 38 44 d0 75 ed 43 28 2c 0f 59 c5 85 76 79 1a a6 d0 2a 39 c8 71 3e 0a 5c c9 20 43 bf f1 4e 8c 6f 83 14 84 1f 00 00 00 00 00 00 00 00 00 80 53 72 f7 b9 17 af 39 e7 6e 1c cb de e3 2a 02 21 6f 77 31 14 b7 be 70 59 a5 08 37 9a a4 b7 da 3b b8 8b 5f fd 4b ff f7 31 06 38 8e cf 93 af 7f 72 cb 39 7f 51 56 7d c8 aa 63 64 a1 11 b1 bc b9 2f 83 24 32 f8 60 16 3b b0 ab 40 d4 cf c7 47 1e 3e ff 81 db e5 0b d1 f1 fc 86 f4 fe 44 94 e3 4f 82 0f 85 62 0e 59 a8 21 7b 4c 6e 5f bc 0a a9 fe d0 5f 88 da 83 58 95 1d d4 e5 f6 63 32 70 30 fa 42 09 25 c8 20 43 bc 7c d0 9e 22 24 df 25 63 8e 77 62 bc 4f 96 13 7e 00 00 00 00 Data Ascii: [)O]2FEqk'v}!8DuC(,Yvy9q>\ CNoSr9n!ow1pY7;_K18r9QV}cd/$2`;@G>DObY!{Ln__Xc2p0B% C\|"$%cwbO~
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 7c 3c f1 af b4 bb b0 b6 5f af ff f2 07 3e 7e f3 c2 bc bd a6 82 73 bb 76 f0 c1 6a 77 61 05 41 0a 41 07 11 08 d0 83 0e 8d 2c 88 72 e3 e1 f3 cf ee f7 3b 21 2d d8 92 de b7 f7 2b 16 74 4c 92 7b 6b 79 71 db 4a 85 81 c2 3a d9 a4 bb 8b 5e b0 f9 36 2e 97 b6 ba 8a 7c 15 08 b1 02 27 71 65 07 f9 9c 75 55 8b d0 c2 2e 5a 10 42 79 1e 65 75 06 d9 ae a2 ff 78 df 6b 3c e1 07 00 00 00 00 00 00 00 00 00 60 fe f4 ac fe 10 4f d2 e7 95 0c b2 2a 0f 22 e0 30 fa d2 6c 77 e1 44 15 09 59 0d 21 9e fc 4f f6 6f b4 97 38 1d e7 5e ff d4 15 17 fc c5 f8 1c 93 6b a8 84 3a e4 75 92 d5 34 d4 0c 80 bc 8e 32 a0 10 5f cf ac a2 c4 e0 b1 f1 ab 7e c4 db b0 2a 4e c8 83 d5 26 b6 e5 7a fa 09 e6 cb bb 2a 0a 58 cb ba 6e 35 d1 98 77 bd fa 5b 54 7f a8 3d f1 57 3f 73 c1 05 b7 36 7a 3e d5 e7 26 0a 45 64 cb Data Ascii: \|<_>~svjwaAA,r;!-+tL{kyqJ:^6.\|'qeuU.ZByeuxk<`O"0lwDY!Oo8^k:u42_~N&z*Xn5w[T=W?s6z>&Ed
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: db 86 04 b1 af b4 b5 45 fc 70 f3 d8 03 17 ea 50 cb 24 ac 8a 13 56 68 a0 14 7c d0 4f 30 5f de 35 c9 6e 1d 4b d7 6d 49 d0 36 98 dc 3d f9 60 cd 9c 78 e2 07 ee 5f 70 c1 6d 44 d7 a2 be 2e d1 3f 04 d9 73 27 02 0e 85 e7 b6 6f bb 0b 19 74 18 b7 5d 85 35 5e bb 5f 1a 4f f8 01 00 00 00 00 00 00 00 00 00 58 00 61 d0 1e 41 ab ca e0 95 f6 0b 46 d8 61 44 4c ea 8b 8a 12 ed b2 28 c0 10 94 65 2e 5f 26 8f a3 5e 77 c3 05 3f 79 7b 87 f1 8d 5a 6d b4 c7 56 6a 0d e1 f3 a0 43 52 60 40 69 77 11 5d 83 60 b5 1c 89 ee 67 61 88 e0 76 1e 5e 7a f6 68 a6 67 dd 37 f8 60 8c 29 b6 bb 50 83 0f 85 c7 8c 8a 0e ea b3 60 55 7d e8 57 15 62 95 5b 5f b4 2d 2f 9a db b4 32 46 fa 75 08 79 e5 0d 27 ae af ac c4 10 05 10 f2 4a 0c 3e d9 77 1c 44 e8 37 de 89 f1 7e aa f1 84 1f 00 00 00 00 00 00 00 00 00 80 Data Ascii: EpP$Vh\|O0_5nKmI6=`x_pmD.?s'ot]5^_OXaAFaDL(e._&^w?y{ZmVjCR`@iw]`gav^zhg7`)P`U}Wb[_-/2Fuy'J>wD7~
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: b0 ea 83 0c 9a c4 5f d7 d5 20 f4 76 17 69 d0 44 b6 9b c8 82 07 51 bb 8b 78 79 56 89 a1 38 de 89 f1 7e ca f1 f1 fe 87 6b 11 7e 00 00 00 00 80 e5 70 81 e7 11 00 00 00 00 56 4f 70 fe 8a 5d 71 c1 29 13 f6 62 59 d6 fa 22 0d 3b a4 ad 2f 64 bb 8b b8 7a 44 5e 31 22 ae 48 e1 92 f9 d7 d1 f6 2e bf ef 5f fc e2 d4 ad 0a ce dd 7a e3 8a 73 fe 62 5a 9d 42 ec 2b 6b 6f 11 9d a7 ac 6a 21 83 0f ea 76 9d 72 6d e3 0d 67 d7 e3 95 87 97 9e 3d 9c e6 3c 8b ba aa 29 b8 74 1d b5 dd 45 a9 22 44 88 ee 14 03 0f fa ab 30 5b a7 67 78 42 bb cd 26 f3 9b fb c1 6d bc fb 7f fe 8d 99 55 13 99 6b 71 95 0b 25 cc 90 84 1a b2 e5 69 38 66 14 32 10 41 84 98 0f 3e 0f 22 8c 35 5e 09 52 4c 35 3e de bf 1f 8d 27 fc 00 00 00 00 00 cb 61 9d e7 11 00 00 00 00 56 cf 67 7e ff 7f 7a e0 9c bf 9e 05 0d e2 09 79 Data Ascii: _ viDQxyV8~k~pVOp]q)bY";/dzD^1"H._zsbZB+koj!vrmg=<)tE"D0[gxB&mUkq%i8f2A>"5^RL5>'aVg~zy
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: c7 5f 5f ce ea 0f 4d b0 23 e4 d7 2d 0b 0c 28 d5 20 cc 4a 0a 2e 5e c7 e7 41 84 b1 c6 2b 41 8a a9 c6 8b 63 33 c6 53 f9 01 00 00 00 00 00 00 00 00 00 58 22 bf f2 0d 97 aa 09 f7 1d ab dd 45 fb 75 33 d9 af b5 be 70 46 0b 89 78 d2 b9 0d 0a 98 41 03 23 30 90 2c cf b6 ed 77 9e fc d8 27 d6 4b cf 48 08 55 85 88 fe ed 2e cc 6a 16 32 e8 20 26 62 f5 a0 83 13 eb cb 20 c7 e0 b1 1b 8f 2e 3d 73 ad 74 0e 33 63 7d ca bf 39 12 51 19 20 63 55 62 70 d6 b2 7c 1d ed 53 fa 66 f0 41 1e 6b a1 6d 86 2f 2d 77 d1 78 7d db cb da fa e2 72 fe 9c 87 e1 f3 9c 5d a3 a0 5c cf 76 a8 d6 36 22 09 52 88 b0 c2 64 e3 fd 94 e3 e3 fd 47 a1 0c 59 97 a6 1e 47 f8 01 00 00 00 00 00 00 00 00 00 58 22 bf fa 87 9e bf e6 82 bb 9e b6 bb 50 42 00 51 90 41 b6 b4 68 e5 55 12 f2 cf fb 8b 65 51 ab 88 2c f8 90 b5 Data Ascii: __M#-( J.^A+Ac3SX"Eu3pFxA#0,w'KHU.j2 &b .=st3c}9Q cUbp\|SfAkm/-wx}r]\v6"RdGYGX"PBQAhUeQ,
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 3e c1 86 ae 5b 7b bb e3 6f 4b 4c a2 2f 4b eb 8b 51 e5 07 af 56 7b 48 af bf 0c 47 24 a1 83 51 58 c0 27 cb e2 b0 42 bf f1 62 9c f3 53 8e 8f f7 ef 93 e7 31 f9 8e 93 d5 21 a2 65 84 1f 00 00 00 00 60 39 ac f3 3c 02 00 00 00 00 34 bf 76 fe 3f 3c 72 a1 a9 4c d0 d1 ee a2 f9 32 88 fb 4a a0 20 0b 42 98 6d 24 7c 32 37 5b 0c 52 a4 c1 87 66 5b 1b 7d 82 0f 4e b9 1f d2 69 d7 68 47 da 71 b6 cb cb ed 2e 92 73 b8 ff e8 d2 33 bb f9 4e 4e 48 29 20 e0 b4 49 f2 78 59 29 21 21 d6 e9 aa e8 a0 8e cd ca 70 a8 c7 95 c4 64 fa 54 75 50 b6 a1 06 3e 86 fb bf fc 9e bf f5 b9 85 7e cf e4 89 9d c3 ad 61 15 94 60 3c b7 76 95 0f df d1 26 42 b6 2f d1 ee f7 19 3f 0a 52 4c 3c 3e df ff 24 ed 35 08 3f 00 00 00 00 00 00 00 00 00 00 4b ee d7 2f 7c 5b 55 3d e1 86 ac 8c d0 06 0a 44 35 86 a4 5d 44 34 Data Ascii: >[{oKL/KQV{HG$QX'BbS1!e`9<4v?<rL2J Bm$\|27[Rf[}NihGq.s3NNH) IxY)!!pdTuP>~a`<v&B/?RL<>$5?K/\|[U=D5]D4
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: f9 cb 20 83 04 4a c5 86 2c 40 20 83 0f a5 8a 10 cd b6 f5 b6 16 5a 05 08 6d 5f b2 62 85 ac 3a e1 8a 01 0d fb 58 93 6d e7 61 88 07 2e f8 1d e3 c0 4f 5e 1c 12 30 aa 22 28 17 47 5f a6 4c a4 9b 7a 56 8e a8 89 a0 48 cf e0 83 79 ec 85 76 17 a5 ed 0e ef 6c 17 ce 6a ee 78 e7 b6 d5 73 73 f9 f3 94 05 01 92 5b 6f 3e bf fd c6 0f 6e 0f a7 1c 6f ec df ab ed 30 cc 00 85 72 1b 2f 27 fc 00 00 00 00 00 00 00 00 00 00 ac a0 df fa a3 7f 72 cf 05 7f 67 54 55 21 9e 77 8e 02 08 32 44 d0 f2 51 55 06 27 d6 11 e1 82 c2 36 ba c2 0e 49 d5 87 78 0e 38 ae 2a a1 b5 bb 88 c6 65 c1 07 65 9d 24 ec 91 5c 8f d1 d8 bd 47 2f 3c 7d a8 1f e8 29 ea 0c 37 8c 57 d1 21 79 26 ac 8a 0b fd 6f 6f 37 eb 67 41 05 b9 0f 75 9f 76 b0 23 9b 54 97 15 23 f2 63 5f a8 f0 c3 e8 78 83 72 fd 4b 95 10 5c bc 8e 4f ae Data Ascii: J,@ Zm_b:Xma.O^0"(G_LzVHyvljxss[o>no0r/'rgTU!w2DQU'6Ix8*ee$\G/<})7W!y&oo7gAuv#T#c_xrK\O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	50025	104.19.177.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:27 UTC	610	OUT	GET /logos/static/powered_by_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:27 UTC	830	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:27 GMT Content-Type: image/svg+xml Content-Length: 5194 Connection: close Content-MD5: Y+c301RBZNK39PvKQWrIBw== Last-Modified: Tue, 30 Apr 2024 06:34:32 GMT ETag: 0x8DC68DF98B01182 x-ms-request-id: 5615e828-501e-007f-6031-9bf618000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 70023 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87d8b9f8faaf7ff1-IAD
2024-05-02 14:33:27 UTC	539	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 36 22 20 77 69 64 74 68 3d 22 31 33 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 20 31 34 2e 36 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 35 33 2e 37 36 20 30 48 31 33 36 76 31 34 2e 36 48 35 33 2e 37 36 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 32 2e 33 56 35 2e 35 39 68 32 2e 32 37 61 32 2e 36 32 20 32 2e 36 32 20 30 20 30 31 31 2e 32 39 2e 32 38 20 31 2e 38 33 20 31 2e 38 33 20 Data Ascii: <svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 20 32 2e 32 39 20 30 20 30 31 2d 2e 38 2d 2e 39 31 20 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 38 2d 31 2e 33 36 20 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 2e 32 38 2d 31 2e 33 37 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 2d 31 2e 32 34 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 20 31 2e 32 34 41 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 31 30 20 39 2e 38 31 61 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 39 20 31 2e 33 36 20 32 2e 31 31 20 32 2e 31 31 20 30 20 30 31 2d 32 20 31 2e 32 33 7a 6d 30 2d 2e 36 39 61 31 2e 33 31 20 31 2e 33 31 20 30 20 30 30 2e 38 35 2d 2e 32 37 20 31 2e 36 20 31 2e 36 20 30 20 30 30 2e 35 2d 2e 36 39 20 32 2e 39 20 32 2e 39 20 30 20 30 30 2e 31 36 2d 2e 39 34 20 32 2e 38 35 20 32 2e 38 35 20 30 20 Data Ascii: 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 30 20 30 31 2e 38 2d 2e 39 32 41 32 2e 30 35 20 32 2e 30 35 20 30 20 30 31 32 39 20 37 2e 32 61 32 2e 35 34 20 32 2e 35 34 20 30 20 30 31 2e 37 37 2e 31 33 20 31 2e 39 20 31 2e 39 20 30 20 30 31 2e 37 2e 34 33 20 31 2e 39 34 20 31 2e 39 34 20 30 20 30 31 2e 35 2e 37 37 20 33 2e 31 39 20 33 2e 31 39 20 30 20 30 31 2e 31 39 20 31 2e 31 39 56 31 30 68 2d 33 2e 38 35 76 2d 2e 36 32 68 33 2e 30 39 61 31 2e 35 35 20 31 2e 35 35 20 30 20 30 30 2d 2e 31 37 2d 2e 37 36 20 31 2e 32 38 20 31 2e 32 38 20 30 20 30 30 2d 2e 34 37 2d 2e 35 33 41 31 2e 33 35 20 31 2e 33 35 20 30 20 30 30 32 39 20 37 2e 39 61 31 2e 33 39 20 31 2e 33 39 20 30 20 30 30 2d 2e 38 2e 32 32 20 31 2e 37 33 20 31 2e 37 33 20 30 20 30 30 2d 2e 35 32 2e 35 39 20 31 2e 37 38 20 31 2e 37 38 20 30 20 Data Ascii: 0 01.8-.92A2.05 2.05 0 0129 7.2a2.54 2.54 0 01.77.13 1.9 1.9 0 01.7.43 1.94 1.94 0 01.5.77 3.19 3.19 0 01.19 1.19V10h-3.85v-.62h3.09a1.55 1.55 0 00-.17-.76 1.28 1.28 0 00-.47-.53A1.35 1.35 0 0029 7.9a1.39 1.39 0 00-.8.22 1.73 1.73 0 00-.52.59 1.78 1.78 0
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 31 2e 35 39 20 30 20 31 2e 34 36 20 31 2e 34 36 20 30 20 30 30 2e 34 39 2d 2e 36 39 20 32 2e 35 35 20 32 2e 35 35 20 30 20 30 30 2e 31 37 2d 31 20 32 2e 35 39 20 32 2e 35 39 20 30 20 30 30 2d 2e 31 36 2d 2e 39 35 20 31 2e 34 35 20 31 2e 34 35 20 30 20 30 30 2d 2e 34 39 2d 2e 36 38 41 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 34 33 20 37 2e 39 61 31 2e 33 36 20 31 2e 33 36 20 30 20 30 30 2d 2e 37 39 2e 32 33 20 31 2e 34 37 20 31 2e 34 37 20 30 20 30 30 2d 2e 34 38 2e 36 37 20 32 2e 36 38 20 32 2e 36 38 20 30 20 30 30 2d 2e 31 38 2e 39 38 7a 6d 35 2e 31 38 20 34 2e 34 61 31 2e 39 20 31 2e 39 20 30 20 30 31 2d 2e 33 35 20 30 6c 2d 2e 32 31 2d 2e 30 36 2e 32 2d 2e 36 38 61 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 2e 35 2e 30 35 2e 35 36 2e 35 36 20 30 20 30 Data Ascii: 1.59 0 1.46 1.46 0 00.49-.69 2.55 2.55 0 00.17-1 2.59 2.59 0 00-.16-.95 1.45 1.45 0 00-.49-.68A1.29 1.29 0 0043 7.9a1.36 1.36 0 00-.79.23 1.47 1.47 0 00-.48.67 2.68 2.68 0 00-.18.98zm5.18 4.4a1.9 1.9 0 01-.35 0l-.21-.06.2-.68a1.29 1.29 0 00.5.05.56.56 0 0
2024-05-02 14:33:27 UTC	548	IN	Data Raw: 20 34 2e 34 36 20 38 33 2e 35 34 20 34 2e 34 36 7a 4d 31 30 35 2e 35 38 20 33 76 32 2e 33 35 63 2d 2e 37 38 20 30 2d 31 2e 30 39 2d 2e 30 37 2d 31 2e 33 36 2d 2e 30 37 2d 31 2e 36 35 20 30 2d 32 2e 37 31 2e 37 32 2d 33 2e 30 36 20 32 2e 37 38 61 37 2e 38 35 20 37 2e 38 35 20 30 20 30 30 2d 2e 30 39 20 31 2e 31 39 76 35 2e 31 34 68 2d 32 2e 33 33 56 33 68 32 2e 31 32 76 33 2e 35 38 61 31 34 2e 39 20 31 34 2e 39 20 30 20 30 31 2e 37 39 2d 32 41 32 2e 35 39 20 32 2e 35 39 20 30 20 30 31 31 30 34 20 33 7a 6d 32 37 2e 34 39 20 38 2e 38 35 63 30 20 2e 37 35 2e 32 37 20 31 20 31 20 31 68 31 2e 39 31 76 31 2e 34 39 68 2d 32 2e 37 32 61 32 2e 32 36 20 32 2e 32 36 20 30 20 30 31 2d 32 2e 34 38 2d 32 2e 34 39 56 34 2e 36 33 68 2d 32 2e 32 37 56 33 2e 33 31 68 31 2e Data Ascii: 4.46 83.54 4.46zM105.58 3v2.35c-.78 0-1.09-.07-1.36-.07-1.65 0-2.71.72-3.06 2.78a7.85 7.85 0 00-.09 1.19v5.14h-2.33V3h2.12v3.58a14.9 14.9 0 01.79-2A2.59 2.59 0 01104 3zm27.49 8.85c0 .75.27 1 1 1h1.91v1.49h-2.72a2.26 2.26 0 01-2.48-2.49V4.63h-2.27V3.31h1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	50033	216.239.34.21	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:27 UTC	3315	OUT	GET /g/collect?v=2&tid=G-Z0RM4JK167&gtm=45je44t0v883492273z86526812za200&_p=1714660401997&gcs=G111&gcd=13r3r3r3r5&npa=0&dma=0&gdid=dYWJhMj&cid=1321622203.1714660406&ecid=990306678&ul=en-us&sr=1280x1024&_fplc=0&ur=US-NY&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=190938145.1714660404&sst.gse=1&sst.gcd=13r3r3r3r5&sst.tft=1714660401997&sst.ude=0&_s=1&sid=1714660406&sct=1&seg=0&dl=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&dt=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&en=lang_route_no_redirect&_fv=1&_nsi=1&_ss=1&ep.event_category=language%20routing&ep.event_action=language%20routing%20%3A%20languageNotSupported&ep.non_interaction=1&ep.x-ga-mp1-cd55=no%20redirect%20%3A%20languageNotSupported&ep.x-ga-mp1 [TRUNCATED] Host: sgtm.qualtrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.qualtrics.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=event-source Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mutiny.user.token=030fb6bc-948e-4a68-ad25-9385910456db; mutiny.user.session=a558c5cb-0047-435f-8b79-7bfaa3a87403; __gtm_campaign_url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye; q_marketing_lang_ga_s=true; _gcl_au=1.1.1791124635.1714660404; mutiny.user.session_number=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+May+02+2024+16%3A33%3A25+GMT%2B0200+(Central+European+Summer+Time)&version=202401.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd9b27f3-93fc-4d66-a35d-c5e09a28ec8c&interactionCount=0&landingPath=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0005%3A1%2CC0004%3A1; _uetsid=ef6f6630089011efadf9c35fa2e09645; _uetvid=e [TRUNCATED]
2024-05-02 14:33:27 UTC	838	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:27 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.mM5kZR2EBnQ4NjbmqKArlnx4iJuxETI0c4JTyJE%2Bd%2Fo%3D.1714660406; Max-Age=63072000; Domain=qualtrics.com; Path=/; Secure; HttpOnly set-cookie: FPLC=ojl%2BRwTYttgcI058W6I%2FlKmL3KB39PjAhP0HV5E12FkKnt5QgXto0ozmAmvUK6dg%2FQ7LHw16yJI751WcVTNsgbvdbytbCYkfPb1gAksdBNB8k9SS%2Fsbm4pFdIjZq8Q%3D%3D; Max-Age=72000; Domain=qualtrics.com; Path=/; Secure set-cookie: FPGSID=1.1714660407.1714660407.G-Z0RM4JK167.3yDHrATkpG9HnBIazXzoTQ; Max-Age=1800; Domain=qualtrics.com; Path=/; SameSite=strict; Secure cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.qualtrics.com access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-05-02 14:33:27 UTC	183	IN	Data Raw: 62 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 6e 61 6c 79 74 69 63 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 67 2f 73 2f 63 6f 6c 6c 65 63 74 3f 64 6d 61 3d 30 26 67 74 6d 3d 34 35 6a 39 31 65 34 34 75 31 76 38 38 33 34 39 32 32 37 33 7a 38 36 35 32 36 38 31 32 7a 39 38 34 38 38 31 36 39 30 31 7a 61 32 30 30 26 5f 67 73 69 64 3d 5a 30 52 4d 34 4a 4b 31 36 37 33 79 44 48 72 41 54 6b 70 47 39 48 6e 42 49 61 7a 58 7a 6f 54 51 22 5d 7d 0a 0a 0d 0a Data Ascii: b1event: messagedata: {"send_pixel":["https://analytics.google.com/g/s/collect?dma=0&gtm=45j91e44u1v883492273z86526812z9848816901za200&_gsid=Z0RM4JK1673yDHrATkpG9HnBIazXzoTQ"]}
2024-05-02 14:33:27 UTC	198	IN	Data Raw: 63 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 67 2f 63 6f 6c 6c 65 63 74 3f 76 3d 32 26 64 6d 61 3d 30 26 74 69 64 3d 47 2d 5a 30 52 4d 34 4a 4b 31 36 37 26 63 69 64 3d 31 33 32 31 36 32 32 32 30 33 2e 31 37 31 34 36 36 30 34 30 36 26 67 74 6d 3d 34 35 6a 39 31 65 34 34 75 31 76 38 38 33 34 39 32 32 37 33 7a 38 36 35 32 36 38 31 32 7a 39 38 34 38 38 31 36 39 30 31 7a 61 32 30 30 26 61 69 70 3d 31 22 5d 7d 0a 0a 0d 0a Data Ascii: c0event: messagedata: {"send_pixel":["https://stats.g.doubleclick.net/g/collect?v=2&dma=0&tid=G-Z0RM4JK167&cid=1321622203.1714660406&gtm=45j91e44u1v883492273z86526812z9848816901za200&aip=1"]}
2024-05-02 14:33:27 UTC	394	IN	Data Raw: 31 38 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 6c 73 63 34 75 34 67 4e 34 37 34 62 4b 55 67 7a 54 53 6e 77 68 4f 25 32 42 76 79 59 43 72 30 25 32 46 68 41 73 56 70 4e 59 63 34 35 25 32 46 4f 33 56 4f 48 5a 25 32 42 4f 77 37 52 75 64 76 7a 41 57 77 76 30 65 36 6a 39 4b 52 61 72 49 68 30 65 50 4f 25 32 46 44 61 49 71 6b 50 6b 67 55 25 32 42 5a 65 6a 76 66 51 25 32 42 76 52 5a 35 52 6e 56 6a 6b 75 34 53 36 4c 4a 50 5a 4e 6b 71 68 71 61 65 4e 38 79 36 70 63 31 6f 6a 77 47 6a 5a 72 35 77 31 77 5a 4f 64 25 32 42 5a 45 62 77 70 6f 74 66 53 4b 68 75 49 70 57 25 32 46 6f 4e 37 39 74 79 5a Data Ascii: 183event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=lsc4u4gN474bKUgzTSnwhO%2BvyYCr0%2FhAsVpNYc45%2FO3VOHZ%2BOw7RudvzAWwv0e6j9KRarIh0ePO%2FDaIqkPkgU%2BZejvfQ%2BvRZ5RnVjku4S6LJPZNkqhqaeN8y6pc1ojwGjZr5w1wZOd%2BZEbwpotfSKhuIpW%2FoN79tyZ
2024-05-02 14:33:27 UTC	183	IN	Data Raw: 62 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 6e 61 6c 79 74 69 63 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 67 2f 73 2f 63 6f 6c 6c 65 63 74 3f 64 6d 61 3d 30 26 67 74 6d 3d 34 35 6a 39 31 65 34 34 75 31 76 38 38 33 34 39 32 32 37 33 7a 38 36 35 32 36 38 31 32 7a 39 38 34 38 38 31 36 39 30 31 7a 61 32 30 30 26 5f 67 73 69 64 3d 4b 52 45 45 31 53 4d 58 52 57 36 45 58 51 42 51 56 69 32 46 76 76 5a 71 55 67 54 49 69 75 33 51 22 5d 7d 0a 0a 0d 0a Data Ascii: b1event: messagedata: {"send_pixel":["https://analytics.google.com/g/s/collect?dma=0&gtm=45j91e44u1v883492273z86526812z9848816901za200&_gsid=KREE1SMXRW6EXQBQVi2FvvZqUgTIiu3Q"]}
2024-05-02 14:33:27 UTC	198	IN	Data Raw: 63 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 67 2f 63 6f 6c 6c 65 63 74 3f 76 3d 32 26 64 6d 61 3d 30 26 74 69 64 3d 47 2d 4b 52 45 45 31 53 4d 58 52 57 26 63 69 64 3d 31 33 32 31 36 32 32 32 30 33 2e 31 37 31 34 36 36 30 34 30 36 26 67 74 6d 3d 34 35 6a 39 31 65 34 34 75 31 76 38 38 33 34 39 32 32 37 33 7a 38 36 35 32 36 38 31 32 7a 39 38 34 38 38 31 36 39 30 31 7a 61 32 30 30 26 61 69 70 3d 31 22 5d 7d 0a 0a 0d 0a Data Ascii: c0event: messagedata: {"send_pixel":["https://stats.g.doubleclick.net/g/collect?v=2&dma=0&tid=G-KREE1SMXRW&cid=1321622203.1714660406&gtm=45j91e44u1v883492273z86526812z9848816901za200&aip=1"]}
2024-05-02 14:33:27 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	50042	104.19.177.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:27 UTC	392	OUT	GET /scripttemplates/202401.2.0/assets/v2/otPcPanel.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:27 UTC	809	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:27 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: aEtIrXgwjpx03r+FaEAJLg== Last-Modified: Thu, 07 Mar 2024 11:26:24 GMT x-ms-request-id: ea13e7ab-001e-004d-4ca6-70f66f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 73799 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87d8b9fb88ed425f-EWR
2024-05-02 14:33:27 UTC	560	IN	Data Raw: 37 63 37 38 0d 0a 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 50 63 50 61 6e 65 6c 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 4d 74 63 32 52 72 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 52 51 59 31 42 68 62 6d 56 73 49 47 39 30 4c 57 68 70 5a 47 55 67 62 33 51 74 5a 6d 46 6b 5a 53 31 70 62 69 49 2b 50 47 52 70 64 69 42 79 62 32 78 6c 50 53 4a 68 62 47 56 79 64 47 52 70 59 57 78 76 5a 79 49 67 59 58 4a 70 59 53 31 74 62 32 52 68 62 44 30 69 64 48 4a 31 5a 53 49 67 59 58 4a 70 59 53 31 6b 5a 58 4e 6a 63 6d 6c 69 5a 57 52 69 65 54 30 69 62 33 51 74 63 47 4d 74 5a 47 56 7a 59 79 49 2b 50 43 45 74 Data Ascii: 7c78 { "name": "otPcPanel", "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY1BhbmVsIG90LWhpZGUgb3QtZmFkZS1pbiI+PGRpdiByb2xlPSJhbGVydGRpYWxvZyIgYXJpYS1tb2RhbD0idHJ1ZSIgYXJpYS1kZXNjcmliZWRieT0ib3QtcGMtZGVzYyI+PCEt
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 6d 39 30 4c 58 42 6a 4c 58 4e 6a 63 6d 39 73 62 47 4a 68 63 69 49 2b 50 47 67 79 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 30 61 58 52 73 5a 53 49 2b 57 57 39 31 63 69 42 51 63 6d 6c 32 59 57 4e 35 50 43 39 6f 4d 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 6b 5a 58 4e 6a 49 6a 34 38 4c 32 52 70 64 6a 34 38 59 6e 56 30 64 47 39 75 49 47 6c 6b 50 53 4a 68 59 32 4e 6c 63 48 51 74 63 6d 56 6a 62 32 31 74 5a 57 35 6b 5a 57 51 74 59 6e 52 75 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6b 46 6a 59 32 56 77 64 43 42 42 62 47 77 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 63 32 56 6a 64 47 6c 76 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 52 72 4c 58 4a 76 64 79 42 76 64 43 31 6a 59 58 51 74 5a 33 4a 77 49 6a 34 38 61 44 4d 67 61 57 51 39 Data Ascii: m90LXBjLXNjcm9sbGJhciI+PGgyIGlkPSJvdC1wYy10aXRsZSI+WW91ciBQcml2YWN5PC9oMj48ZGl2IGlkPSJvdC1wYy1kZXNjIj48L2Rpdj48YnV0dG9uIGlkPSJhY2NlcHQtcmVjb21tZW5kZWQtYnRuLWhhbmRsZXIiPkFjY2VwdCBBbGw8L2J1dHRvbj48c2VjdGlvbiBjbGFzcz0ib3Qtc2RrLXJvdyBvdC1jYXQtZ3JwIj48aDMgaWQ9
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 31 69 64 47 34 67 59 6d 46 6a 61 79 31 69 64 47 34 74 61 47 46 75 5a 47 78 6c 63 69 49 67 59 58 4a 70 59 53 31 73 59 57 4a 6c 62 44 30 69 51 6d 46 6a 61 79 49 2b 50 48 4e 32 5a 79 42 70 5a 44 30 69 62 33 51 74 59 6d 46 6a 61 79 31 68 63 6e 63 69 49 48 68 74 62 47 35 7a 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 79 4d 44 41 77 4c 33 4e 32 5a 79 49 67 65 47 31 73 62 6e 4d 36 65 47 78 70 62 6d 73 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 45 35 4f 54 6b 76 65 47 78 70 62 6d 73 69 49 48 67 39 49 6a 42 77 65 43 49 67 65 54 30 69 4d 48 42 34 49 69 42 32 61 57 56 33 51 6d 39 34 50 53 49 77 49 44 41 67 4e 44 51 30 4c 6a 55 7a 4d 53 41 30 4e 44 51 75 4e 54 4d 78 49 69 42 34 62 57 77 36 63 Data Ascii: 1idG4gYmFjay1idG4taGFuZGxlciIgYXJpYS1sYWJlbD0iQmFjayI+PHN2ZyBpZD0ib3QtYmFjay1hcnciIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgeG1sbnM6eGxpbms9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkveGxpbmsiIHg9IjBweCIgeT0iMHB4IiB2aWV3Qm94PSIwIDAgNDQ0LjUzMSA0NDQuNTMxIiB4bWw6c
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 78 4f 54 6b 35 4c 33 68 73 61 57 35 72 49 69 42 34 50 53 49 77 63 48 67 69 49 48 6b 39 49 6a 42 77 65 43 49 67 64 6d 6c 6c 64 30 4a 76 65 44 30 69 4d 43 41 74 4d 7a 41 67 4d 54 45 77 49 44 45 78 4d 43 49 67 59 58 4a 70 59 53 31 6f 61 57 52 6b 5a 57 34 39 49 6e 52 79 64 57 55 69 50 6a 78 30 61 58 52 73 5a 54 35 54 5a 57 46 79 59 32 67 67 53 57 4e 76 62 6a 77 76 64 47 6c 30 62 47 55 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 49 7a 4a 6c 4d 7a 59 30 4e 43 49 67 5a 44 30 69 54 54 55 31 4c 6a 45 30 4e 69 77 31 4d 53 34 34 4f 44 64 4d 4e 44 45 75 4e 54 67 34 4c 44 4d 33 4c 6a 63 34 4e 6d 4d 7a 4c 6a 51 34 4e 69 30 30 4c 6a 45 30 4e 43 77 31 4c 6a 4d 35 4e 69 30 35 4c 6a 4d 31 4f 43 77 31 4c 6a 4d 35 4e 69 Data Ascii: vd3d3LnczLm9yZy8xOTk5L3hsaW5rIiB4PSIwcHgiIHk9IjBweCIgdmlld0JveD0iMCAtMzAgMTEwIDExMCIgYXJpYS1oaWRkZW49InRydWUiPjx0aXRsZT5TZWFyY2ggSWNvbjwvdGl0bGU+PHBhdGggZmlsbD0iIzJlMzY0NCIgZD0iTTU1LjE0Niw1MS44ODdMNDEuNTg4LDM3Ljc4NmMzLjQ4Ni00LjE0NCw1LjM5Ni05LjM1OCw1LjM5Ni
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 4e 57 77 78 4e 44 41 75 4e 7a 55 33 4c 44 45 30 4d 43 34 33 4e 54 4e 32 4d 54 4d 34 4c 6a 63 31 4e 57 4d 77 4c 44 51 75 4f 54 55 31 4c 44 45 75 4f 44 41 35 4c 44 6b 75 4d 6a 4d 79 4c 44 55 75 4e 44 49 30 4c 44 45 79 4c 6a 67 31 4e 47 77 33 4d 79 34 77 4f 44 55 73 4e 7a 4d 75 4d 44 67 7a 43 69 41 67 49 43 41 67 49 47 4d 7a 4c 6a 51 79 4f 53 77 7a 4c 6a 59 78 4e 43 77 33 4c 6a 63 78 4c 44 55 75 4e 44 49 34 4c 44 45 79 4c 6a 67 31 4d 53 77 31 4c 6a 51 79 4f 47 4d 79 4c 6a 49 34 4d 69 77 77 4c 44 51 75 4e 6a 59 74 4d 43 34 30 4e 7a 6b 73 4e 79 34 78 4d 7a 55 74 4d 53 34 30 4d 32 4d 33 4c 6a 51 79 4e 69 30 7a 4c 6a 49 7a 4f 43 77 78 4d 53 34 78 4e 43 30 34 4c 6a 67 31 4d 53 77 78 4d 53 34 78 4e 43 30 78 4e 69 34 34 4e 44 56 57 4d 54 63 79 4c 6a 45 32 4e 6b 77 Data Ascii: NWwxNDAuNzU3LDE0MC43NTN2MTM4Ljc1NWMwLDQuOTU1LDEuODA5LDkuMjMyLDUuNDI0LDEyLjg1NGw3My4wODUsNzMuMDgzCiAgICAgIGMzLjQyOSwzLjYxNCw3LjcxLDUuNDI4LDEyLjg1MSw1LjQyOGMyLjI4MiwwLDQuNjYtMC40NzksNy4xMzUtMS40M2M3LjQyNi0zLjIzOCwxMS4xNC04Ljg1MSwxMS4xNC0xNi44NDVWMTcyLjE2Nkw
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 58 4e 7a 50 53 4a 76 64 43 31 6f 62 33 4e 30 4c 57 6c 30 5a 57 30 69 50 6a 78 69 64 58 52 30 62 32 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 68 76 63 33 51 74 59 6d 39 34 49 69 42 68 63 6d 6c 68 4c 57 56 34 63 47 46 75 5a 47 56 6b 50 53 4a 6d 59 57 78 7a 5a 53 49 2b 50 43 39 69 64 58 52 30 62 32 34 2b 50 48 4e 6c 59 33 52 70 62 32 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 46 6a 59 79 31 6f 5a 48 49 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 68 76 63 33 51 74 61 47 52 79 49 6a 34 38 61 44 51 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 68 76 63 33 51 74 62 6d 46 74 5a 53 49 2b 50 43 39 6f 4e 44 34 38 61 44 51 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 68 76 63 33 51 74 5a 47 56 7a 59 79 49 2b 50 43 39 6f 4e 44 34 38 Data Ascii: XNzPSJvdC1ob3N0LWl0ZW0iPjxidXR0b24gY2xhc3M9Im90LWhvc3QtYm94IiBhcmlhLWV4cGFuZGVkPSJmYWxzZSI+PC9idXR0b24+PHNlY3Rpb24gY2xhc3M9Im90LWFjYy1oZHIiPjxkaXYgY2xhc3M9Im90LWhvc3QtaGRyIj48aDQgY2xhc3M9Im90LWhvc3QtbmFtZSI+PC9oND48aDQgY2xhc3M9Im90LWhvc3QtZGVzYyI+PC9oND48
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 51 74 63 47 4d 74 5a 6d 39 76 64 47 56 79 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 69 64 47 34 74 59 32 39 75 64 47 46 70 62 6d 56 79 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 77 59 79 31 79 5a 57 5a 31 63 32 55 74 59 57 78 73 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6c 4a 6c 61 6d 56 6a 64 43 42 42 62 47 77 38 4c 32 4a 31 64 48 52 76 62 6a 34 67 50 47 4a 31 64 48 52 76 62 69 42 6a 62 47 46 7a 63 7a 30 69 63 32 46 32 5a 53 31 77 63 6d 56 6d 5a 58 4a 6c 62 6d 4e 6c 4c 57 4a 30 62 69 31 6f 59 57 35 6b 62 47 56 79 49 47 39 75 5a 58 52 79 64 58 4e 30 4c 57 4e 73 62 33 4e 6c 4c 57 4a 30 62 69 31 6f 59 57 35 6b 62 47 56 79 49 6a 35 54 59 58 5a 6c 49 46 4e 6c 64 48 52 70 62 6d 64 7a 50 43 39 69 64 Data Ascii: QtcGMtZm9vdGVyIj48ZGl2IGNsYXNzPSJvdC1idG4tY29udGFpbmVyIj48YnV0dG9uIGNsYXNzPSJvdC1wYy1yZWZ1c2UtYWxsLWhhbmRsZXIiPlJlamVjdCBBbGw8L2J1dHRvbj4gPGJ1dHRvbiBjbGFzcz0ic2F2ZS1wcmVmZXJlbmNlLWJ0bi1oYW5kbGVyIG9uZXRydXN0LWNsb3NlLWJ0bi1oYW5kbGVyIj5TYXZlIFNldHRpbmdzPC9id
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 77 59 57 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 33 61 58 52 6a 61 43 31 75 62 32 49 69 49 47 46 79 61 57 45 74 59 32 68 6c 59 32 74 6c 5a 44 30 69 5a 6d 46 73 63 32 55 69 49 48 4a 76 62 47 55 39 49 6e 4e 33 61 58 52 6a 61 43 49 2b 50 43 39 7a 63 47 46 75 50 69 41 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 62 47 46 69 5a 57 77 74 64 48 68 30 49 6a 35 54 64 32 6c 30 59 32 67 67 54 47 46 69 5a 57 77 38 4c 33 4e 77 59 57 34 2b 50 43 39 73 59 57 4a 6c 62 44 34 67 50 48 4e 77 59 57 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 78 68 59 6d 56 73 4c 58 4e 30 59 58 52 31 63 79 49 2b 62 47 46 69 5a 57 77 38 4c 33 4e 77 59 57 34 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 44 61 47 56 6a 61 32 4a 76 65 43 42 49 56 45 31 4d 49 43 Data Ascii: wYW4gY2xhc3M9Im90LXN3aXRjaC1ub2IiIGFyaWEtY2hlY2tlZD0iZmFsc2UiIHJvbGU9InN3aXRjaCI+PC9zcGFuPiA8c3BhbiBjbGFzcz0ib3QtbGFiZWwtdHh0Ij5Td2l0Y2ggTGFiZWw8L3NwYW4+PC9sYWJlbD4gPHNwYW4gY2xhc3M9Im90LWxhYmVsLXN0YXR1cyI+bGFiZWw8L3NwYW4+PC9kaXY+PCEtLSBDaGVja2JveCBIVE1MIC
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 64 47 39 75 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 46 6a 59 79 31 6f 5a 48 49 69 50 6a 77 68 4c 53 30 67 51 57 4e 6a 62 33 4a 6b 61 57 39 75 49 47 68 6c 59 57 52 6c 63 69 42 6a 62 32 35 30 5a 57 35 30 49 43 30 74 50 6a 77 76 5a 47 6c 32 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 46 6a 59 79 31 30 65 48 51 69 50 6a 77 68 4c 53 30 67 51 57 4e 6a 62 33 4a 70 5a 47 39 75 49 47 4e 76 62 6e 52 6c 62 6e 51 67 4c 53 30 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 48 4e 77 59 57 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6a 63 6d 34 74 63 6d 52 79 49 69 42 68 63 6d 6c 68 4c 57 46 30 62 32 31 70 59 7a 30 69 64 48 4a 31 5a 53 49 67 59 58 4a 70 59 53 31 73 61 58 5a 6c 50 53 4a 77 62 32 78 70 64 47 55 Data Ascii: dG9uPjxkaXYgY2xhc3M9Im90LWFjYy1oZHIiPjwhLS0gQWNjb3JkaW9uIGhlYWRlciBjb250ZW50IC0tPjwvZGl2PjxkaXYgY2xhc3M9Im90LWFjYy10eHQiPjwhLS0gQWNjb3JpZG9uIGNvbnRlbnQgLS0+PC9kaXY+PC9kaXY+PHNwYW4gY2xhc3M9Im90LXNjcm4tcmRyIiBhcmlhLWF0b21pYz0idHJ1ZSIgYXJpYS1saXZlPSJwb2xpdGU
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 74 2d 73 6c 69 64 65 2d 69 6e 2d 72 69 67 68 74 7b 66 72 6f 6d 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 30 25 2c 20 30 2c 20 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 30 25 2c 20 30 2c 20 30 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 30 2c 20 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 30 2c 20 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 74 2d 73 6c 69 64 65 2d 6f 75 74 2d 6c 65 66 74 7b 66 72 6f 6d 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 30 Data Ascii: )}}@keyframes ot-slide-in-right{from{-webkit-transform:translate3d(100%, 0, 0);transform:translate3d(100%, 0, 0)}to{-webkit-transform:translate3d(0, 0, 0);transform:translate3d(0, 0, 0)}}@keyframes ot-slide-out-left{from{-webkit-transform:translate3d(0, 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	50043	104.19.177.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:27 UTC	393	OUT	GET /scripttemplates/202401.2.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:27 UTC	826	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:27 GMT Content-Type: text/css Content-Length: 21778 Connection: close Content-MD5: c7xAZ9MSGAobGaTYg/Qtag== Last-Modified: Thu, 07 Mar 2024 11:26:34 GMT ETag: 0x8DC3E9971F9F305 x-ms-request-id: f0191474-801e-0088-3a8c-70dc8a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 78582 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87d8b9fb897843bc-EWR
2024-05-02 14:33:27 UTC	543	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 Data Ascii: #onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .one
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 Data Ascii: k #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-ic
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f Data Ascii: ync-ntfy button ,#ot-sync-ntfy a[data-parent-id] {font-size:inherit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#onetrust-banner-sdk button.ot-link-btn:hover,#o
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 73 63 72 Data Ascii: ackground-position:center;background-size:contain;background-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-height:100%;max-width:100%}#onetrust-pc-sdk .scr
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 6e 65 74 72 75 73 74 2d 66 61 64 65 2d 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 6f 74 2d 63 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 Data Ascii: netrust-fade-in{0%{opacity:0}100%{opacity:1}}.ot-cookie-label{text-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.75em}}#onetrust-banner-sdk .banner-option-inp
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 61 79 3a 69 6e 6c 69 6e 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 Data Ascii: ay:inline;margin-right:5px}#onetrust-banner-sdk .ot-optout-signal svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 6f 67 67 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 74 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 74 2d 70 63 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 64 69 76 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 73 70 61 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 31 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 32 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 33 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 34 2c Data Ascii: #onetrust-banner-sdk .ot-toggle,#onetrust-banner-sdk #ot-content,#onetrust-banner-sdk #ot-pc-content,#onetrust-banner-sdk .checkbox,#onetrust-pc-sdk div,#onetrust-pc-sdk span,#onetrust-pc-sdk h1,#onetrust-pc-sdk h2,#onetrust-pc-sdk h3,#onetrust-pc-sdk h4,
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 64 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 62 6f 64 79 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 74 6f 67 67 6c 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 23 6f 74 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 23 6f 74 2d 70 63 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 63 68 65 63 6b 62 6f 78 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 64 69 76 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 Data Ascii: sdk-cookie-policy td,#ot-sdk-cookie-policy tbody,#ot-sdk-cookie-policy .ot-main-content,#ot-sdk-cookie-policy .ot-toggle,#ot-sdk-cookie-policy #ot-content,#ot-sdk-cookie-policy #ot-pc-content,#ot-sdk-cookie-policy .checkbox,#ot-sync-ntfy div,#ot-sync-ntfy
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 65 72 2d 73 64 6b 20 6c 61 62 65 6c 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 61 62 65 6c 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c Data Ascii: er-sdk label:after,#onetrust-banner-sdk .checkbox:after,#onetrust-banner-sdk .checkbox:before,#onetrust-pc-sdk label:before,#onetrust-pc-sdk label:after,#onetrust-pc-sdk .checkbox:after,#onetrust-pc-sdk .checkbox:before,#ot-sdk-cookie-policy label:before,
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 6b 2d 63 6f 6c 75 6d 6e 73 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 3a 66 69 72 73 74 Data Ascii: k-columns,#onetrust-pc-sdk .ot-sdk-column,#onetrust-pc-sdk .ot-sdk-columns,#ot-sdk-cookie-policy .ot-sdk-column,#ot-sdk-cookie-policy .ot-sdk-columns{margin-left:4%}#onetrust-banner-sdk .ot-sdk-column:first-child,#onetrust-banner-sdk .ot-sdk-columns:first

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	50044	104.19.177.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:27 UTC	403	OUT	GET /scripttemplates/202401.2.0/assets/otFloatingRoundedCorner.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:27 UTC	809	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:27 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: ZH/qKk47Ag9JNNJXJ30c9Q== Last-Modified: Thu, 07 Mar 2024 11:26:23 GMT x-ms-request-id: 4ed054a9-b01e-0058-7e9a-70e1dc000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 81444 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87d8b9fb8a5f9e16-EWR
2024-05-02 14:33:27 UTC	560	IN	Data Raw: 32 37 61 38 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 46 6c 6f 61 74 69 6e 67 52 6f 75 6e 64 65 64 43 6f 72 6e 65 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 6d 46 75 62 6d 56 79 4c 58 4e 6b 61 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 52 6d 78 76 59 58 52 70 62 6d 64 53 62 33 56 75 5a 47 56 6b 51 32 39 79 62 6d 56 79 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 47 73 74 59 32 39 75 64 47 46 70 62 6d 56 79 49 69 42 79 62 32 78 6c 50 53 4a 68 62 47 56 79 64 47 52 70 59 57 78 76 5a 79 49 67 59 58 4a 70 59 53 31 6b 5a 58 Data Ascii: 27a8 { "name": "otFloatingRoundedCorner", "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90RmxvYXRpbmdSb3VuZGVkQ29ybmVyIj48ZGl2IGNsYXNzPSJvdC1zZGstY29udGFpbmVyIiByb2xlPSJhbGVydGRpYWxvZyIgYXJpYS1kZX
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 6c 64 48 4a 31 63 33 51 74 63 47 39 73 61 57 4e 35 4c 58 52 70 64 47 78 6c 49 6a 35 55 61 47 6c 7a 49 48 4e 70 64 47 55 67 64 58 4e 6c 63 79 42 6a 62 32 39 72 61 57 56 7a 50 43 39 6f 4d 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 62 6d 56 30 63 6e 56 7a 64 43 31 77 62 32 78 70 59 33 6b 74 64 47 56 34 64 43 49 2b 64 47 6c 30 62 47 55 38 59 53 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 77 62 32 78 70 59 33 6b 38 4c 32 45 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 64 47 6c 30 62 47 55 69 50 6a 77 76 61 44 4d 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 Data Ascii: ldHJ1c3QtcG9saWN5LXRpdGxlIj5UaGlzIHNpdGUgdXNlcyBjb29raWVzPC9oMj48ZGl2IGlkPSJvbmV0cnVzdC1wb2xpY3ktdGV4dCI+dGl0bGU8YSBocmVmPSIjIj5wb2xpY3k8L2E+PC9kaXY+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRhaW5lciI+PGgzIGNsYXNzPSJvdC1kcGQtdGl0bGUiPjwvaDM+PGRpdiBjbGFzcz0ib3QtZHBkLW
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 44 62 47 39 7a 5a 53 42 43 64 58 52 30 62 32 34 67 52 55 35 45 4c 53 30 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 73 73 22 3a 20 22 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 46 6c 6f 61 74 69 6e 67 52 6f 75 6e 64 65 64 43 6f 72 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 35 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 77 69 64 74 68 3a 32 36 25 3b 6d 61 78 2d 77 69 64 74 68 3a 33 37 35 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 2e 35 70 78 3b 62 6f 74 74 6f 6d 3a 31 65 6d 3b 6c 65 66 74 3a 31 Data Ascii: PC9kaXY+PCEtLSBDbG9zZSBCdXR0b24gRU5ELS0+PC9kaXY+PC9kaXY+PC9kaXY+", "css": "#onetrust-banner-sdk.otFloatingRoundedCorner{position:fixed;z-index:2147483645;background-color:#fff;width:26%;max-width:375px;border-radius:2.5px;bottom:1em;left:1
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 7b 77 69 64 74 68 3a 34 34 70 78 3b 68 65 69 67 68 74 3a 34 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 32 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 66 6c 6f 61 74 Data Ascii: argin-bottom:20px;margin-right:10px}#onetrust-banner-sdk .ot-close-icon{width:44px;height:44px;background-size:12px;display:inline-block;padding:0;border:none}#onetrust-banner-sdk #onetrust-policy-text,#onetrust-banner-sdk .ot-b-addl-desc{clear:both;float
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 32 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 30 35 65 6d 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 2e 63 6f 6f 6b 69 65 2d 73 65 74 74 69 6e 67 2d 6c 69 6e 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 Data Ascii: dth:100%;padding:12px 10px;font-size:.82em;font-weight:600;line-height:1.4;letter-spacing:.05em;height:auto;white-space:normal;word-break:break-word;word-wrap:break-word}#onetrust-banner-sdk #onetrust-pc-btn-handler.cookie-setting-link{background-color:#f
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 64 65 74 61 69 6c 73 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 33 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 68 65 69 67 68 74 3a Data Ascii: l-align:middle;transition:all 300ms ease-in 0s;-webkit-transition:all 300ms ease-in 0s;-moz-transition:all 300ms ease-in 0s;-o-transition:all 300ms ease-in 0s}#onetrust-banner-sdk .banner-option-details{display:none;font-size:.83em;line-height:1.5;height:
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b Data Ascii: netrust-banner-sdk .ot-dpd-container .ot-dpd-desc *{font-size:inherit;line-height:inherit}#onetrust-banner-sdk .ot-dpd-container .ot-dpd-desc .onetrust-vendors-list-handler{display:block;margin-left:0px;margin-top:5px;clear:both;padding:0;margin-bottom:0;
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 77 69 64 74 68 3a 34 35 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 68 61 6e 64 6c 65 72 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 3a 6e 6f 74 28 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 29 20 23 6f 6e 65 74 72 75 73 74 2d 61 63 63 65 70 74 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e Data Ascii: banner-sdk #onetrust-pc-btn-handler{width:45%}#onetrust-banner-sdk #onetrust-reject-all-handler{margin-right:0}#onetrust-banner-sdk #onetrust-button-group-parent:not(.has-reject-all-button) #onetrust-accept-btn-handler{margin-right:0}#onetrust-banner-sdk.
2024-05-02 14:33:27 UTC	17	IN	Data Raw: 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a Data Ascii: " }
2024-05-02 14:33:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	50045	50.17.194.92	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:27 UTC	955	OUT	GET /sp.pl?a=10000&d=Thu%2C%2002%20May%202024%2014%3A33%3A26%20GMT&n=-2d&b=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&.yp=10005469&f=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&enc=UTF-8&yv=1.15.1&tagmgr=gtm HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:27 UTC	937	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:27 GMT Expires: Thu, 02 May 2024 14:33:27 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS/9.1.10.112 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.112) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBDekM2YCEEAld__cwg2A7gx_rpV2-gMFEgEBAQH1NGY9ZtxH0iMA_eMAAA&S=AQAAAgdPEo-emHQ-qtOfAsVEnZw; Expires=Fri, 2 May 2025 20:33:27 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-02 14:33:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	50047	104.19.177.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:27 UTC	371	OUT	GET /logos/static/ot_guard_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:27 UTC	829	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:27 GMT Content-Type: image/svg+xml Content-Length: 497 Connection: close Content-MD5: tXyZydHjxQshFMbbBT1/8A== Last-Modified: Tue, 30 Apr 2024 06:34:31 GMT ETag: 0x8DC68DF98226652 x-ms-request-id: aa0bfd6e-401e-005c-5679-9b6cdb000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 69093 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87d8b9fc690c4313-EWR
2024-05-02 14:33:27 UTC	497	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 5f 5f 73 76 67 2d 66 69 6c 6c 22 20 64 3d 22 4d 31 34 2e 35 38 38 20 30 6c 2e 34 34 35 2e 33 32 38 63 31 2e 38 30 37 20 31 2e 33 30 33 20 33 2e 39 36 31 20 32 2e 35 33 33 20 36 2e 34 36 31 20 33 2e 36 38 38 20 32 2e 30 31 35 2e 39 33 20 34 2e 35 37 36 20 31 2e 37 34 36 20 37 2e 36 38 32 20 32 2e 34 34 36 20 30 20 31 34 2e 31 37 38 2d 34 2e 37 33 20 32 34 2e 31 33 33 2d 31 34 2e 31 39 20 32 39 2e 38 36 34 6c 2d 2e 33 39 38 2e 32 33 36 43 34 2e 38 36 33 20 33 30 2e 38 37 20 30 20 32 30 2e 38 33 37 20 30 20 36 2e 34 36 32 63 33 2e 31 30 37 2d 2e 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	50049	104.19.177.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:27 UTC	373	OUT	GET /logos/static/powered_by_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:27 UTC	876	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:27 GMT Content-Type: image/svg+xml Content-Length: 5194 Connection: close Content-MD5: Y+c301RBZNK39PvKQWrIBw== Last-Modified: Tue, 30 Apr 2024 06:34:32 GMT ETag: 0x8DC68DF98B01182 x-ms-request-id: 5615e828-501e-007f-6031-9bf618000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 306 Expires: Fri, 03 May 2024 14:33:27 GMT Cache-Control: public, max-age=86400 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87d8b9fc68da78e1-EWR
2024-05-02 14:33:27 UTC	493	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 36 22 20 77 69 64 74 68 3d 22 31 33 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 20 31 34 2e 36 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 35 33 2e 37 36 20 30 48 31 33 36 76 31 34 2e 36 48 35 33 2e 37 36 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 32 2e 33 56 35 2e 35 39 68 32 2e 32 37 61 32 2e 36 32 20 32 2e 36 32 20 30 20 30 31 31 2e 32 39 2e 32 38 20 31 2e 38 33 20 31 2e 38 33 20 Data Ascii: <svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 2d 2e 31 38 48 2e 38 31 76 36 7a 6d 37 2e 37 34 2e 31 61 32 2e 32 39 20 32 2e 32 39 20 30 20 30 31 2d 31 2e 32 2d 2e 33 32 20 32 2e 32 39 20 32 2e 32 39 20 30 20 30 31 2d 2e 38 2d 2e 39 31 20 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 38 2d 31 2e 33 36 20 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 2e 32 38 2d 31 2e 33 37 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 2d 31 2e 32 34 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 20 31 2e 32 34 41 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 31 30 20 39 2e 38 31 61 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 39 20 31 2e 33 36 20 32 2e 31 31 20 32 2e 31 31 20 30 20 30 31 2d 32 20 31 2e 32 33 7a 6d 30 2d 2e 36 39 61 31 2e 33 31 20 31 2e 33 31 20 30 20 30 30 2e 38 35 2d 2e 32 37 20 31 2e 36 20 31 Data Ascii: -.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 30 20 30 31 2d 2e 32 38 2d 31 2e 33 36 41 33 2e 32 34 20 33 2e 32 34 20 30 20 30 31 32 37 20 38 2e 34 36 61 32 2e 31 38 20 32 2e 31 38 20 30 20 30 31 2e 38 2d 2e 39 32 41 32 2e 30 35 20 32 2e 30 35 20 30 20 30 31 32 39 20 37 2e 32 61 32 2e 35 34 20 32 2e 35 34 20 30 20 30 31 2e 37 37 2e 31 33 20 31 2e 39 20 31 2e 39 20 30 20 30 31 2e 37 2e 34 33 20 31 2e 39 34 20 31 2e 39 34 20 30 20 30 31 2e 35 2e 37 37 20 33 2e 31 39 20 33 2e 31 39 20 30 20 30 31 2e 31 39 20 31 2e 31 39 56 31 30 68 2d 33 2e 38 35 76 2d 2e 36 32 68 33 2e 30 39 61 31 2e 35 35 20 31 2e 35 35 20 30 20 30 30 2d 2e 31 37 2d 2e 37 36 20 31 2e 32 38 20 31 2e 32 38 20 30 20 30 30 2d 2e 34 37 2d 2e 35 33 41 31 2e 33 35 20 31 2e 33 35 20 30 20 30 30 32 39 20 37 2e 39 61 31 2e 33 39 20 31 2e 33 39 Data Ascii: 0 01-.28-1.36A3.24 3.24 0 0127 8.46a2.18 2.18 0 01.8-.92A2.05 2.05 0 0129 7.2a2.54 2.54 0 01.77.13 1.9 1.9 0 01.7.43 1.94 1.94 0 01.5.77 3.19 3.19 0 01.19 1.19V10h-3.85v-.62h3.09a1.55 1.55 0 00-.17-.76 1.28 1.28 0 00-.47-.53A1.35 1.35 0 0029 7.9a1.39 1.39
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 38 35 20 30 20 30 30 2e 31 37 20 31 20 31 2e 35 20 31 2e 35 20 30 20 30 30 2e 34 39 2e 36 38 20 31 2e 33 39 20 31 2e 33 39 20 30 20 30 30 31 2e 35 39 20 30 20 31 2e 34 36 20 31 2e 34 36 20 30 20 30 30 2e 34 39 2d 2e 36 39 20 32 2e 35 35 20 32 2e 35 35 20 30 20 30 30 2e 31 37 2d 31 20 32 2e 35 39 20 32 2e 35 39 20 30 20 30 30 2d 2e 31 36 2d 2e 39 35 20 31 2e 34 35 20 31 2e 34 35 20 30 20 30 30 2d 2e 34 39 2d 2e 36 38 41 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 34 33 20 37 2e 39 61 31 2e 33 36 20 31 2e 33 36 20 30 20 30 30 2d 2e 37 39 2e 32 33 20 31 2e 34 37 20 31 2e 34 37 20 30 20 30 30 2d 2e 34 38 2e 36 37 20 32 2e 36 38 20 32 2e 36 38 20 30 20 30 30 2d 2e 31 38 2e 39 38 7a 6d 35 2e 31 38 20 34 2e 34 61 31 2e 39 20 31 2e 39 20 30 20 30 31 2d 2e 33 35 20 Data Ascii: 85 0 00.17 1 1.5 1.5 0 00.49.68 1.39 1.39 0 001.59 0 1.46 1.46 0 00.49-.69 2.55 2.55 0 00.17-1 2.59 2.59 0 00-.16-.95 1.45 1.45 0 00-.49-.68A1.29 1.29 0 0043 7.9a1.36 1.36 0 00-.79.23 1.47 1.47 0 00-.48.67 2.68 2.68 0 00-.18.98zm5.18 4.4a1.9 1.9 0 01-.35
2024-05-02 14:33:27 UTC	594	IN	Data Raw: 37 2d 38 2e 34 37 61 32 2e 37 36 20 32 2e 37 36 20 30 20 30 31 32 2e 37 37 20 32 2e 39 33 68 2d 35 2e 36 43 38 31 20 35 2e 34 36 20 38 32 20 34 2e 34 36 20 38 33 2e 35 34 20 34 2e 34 36 7a 4d 31 30 35 2e 35 38 20 33 76 32 2e 33 35 63 2d 2e 37 38 20 30 2d 31 2e 30 39 2d 2e 30 37 2d 31 2e 33 36 2d 2e 30 37 2d 31 2e 36 35 20 30 2d 32 2e 37 31 2e 37 32 2d 33 2e 30 36 20 32 2e 37 38 61 37 2e 38 35 20 37 2e 38 35 20 30 20 30 30 2d 2e 30 39 20 31 2e 31 39 76 35 2e 31 34 68 2d 32 2e 33 33 56 33 68 32 2e 31 32 76 33 2e 35 38 61 31 34 2e 39 20 31 34 2e 39 20 30 20 30 31 2e 37 39 2d 32 41 32 2e 35 39 20 32 2e 35 39 20 30 20 30 31 31 30 34 20 33 7a 6d 32 37 2e 34 39 20 38 2e 38 35 63 30 20 2e 37 35 2e 32 37 20 31 20 31 20 31 68 31 2e 39 31 76 31 2e 34 39 68 2d 32 2e Data Ascii: 7-8.47a2.76 2.76 0 012.77 2.93h-5.6C81 5.46 82 4.46 83.54 4.46zM105.58 3v2.35c-.78 0-1.09-.07-1.36-.07-1.65 0-2.71.72-3.06 2.78a7.85 7.85 0 00-.09 1.19v5.14h-2.33V3h2.12v3.58a14.9 14.9 0 01.79-2A2.59 2.59 0 01104 3zm27.49 8.85c0 .75.27 1 1 1h1.91v1.49h-2.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	50050	104.19.177.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:27 UTC	477	OUT	GET /logos/3d2b6fb4-6a2f-40e8-9142-8a3a3a25baa0/4d17d779-0601-4f87-b9c9-8a26d3e68497/e962d8e2-6340-4c53-9266-f5dcd2a8fdbf/QualtricsXM_RBG.png HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:27 UTC	827	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:27 GMT Content-Type: image/png Content-Length: 56061 Connection: close Content-MD5: pFeGsbq/IdkflcwxvaNb1A== Last-Modified: Mon, 06 Jun 2022 21:43:06 GMT ETag: 0x8DA48058A954C93 x-ms-request-id: f1965f2b-201e-005a-4be6-1d5f64000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 82465 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87d8b9fc7b8a8c6c-EWR
2024-05-02 14:33:27 UTC	542	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 3f 00 00 02 59 08 06 00 00 00 a4 ae 0c f4 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ec dd 7d 90 64 59 7a d7 f7 73 66 77 67 56 ee ee a9 da d9 99 59 bd 20 55 41 0c 08 10 a2 1b 81 2c 40 e0 2e f9 25 a6 67 17 47 97 09 8f ff 33 d3 20 4b 96 15 b2 a6 84 00 19 64 b9 6b 82 20 08 85 82 d8 5a 87 c3 e1 30 41 4c 0d 06 24 24 40 dd 42 92 5f c2 66 ab bb 67 11 32 42 db 8d 76 77 66 16 b9 bb 7a 57 5a bd ed 4b 35 c4 fc 21 6d f7 1c c7 cd bc 37 ef 39 cf 79 9e 73 6f be 54 55 be 7c 3f b1 b3 59 99 f7 9e fb 96 59 5d 55 79 7e f9 3c 3e 84 e0 00 00 00 00 2c 0e 7f 66 7d cb 39 f7 d1 05 7d ca be 2d bc 7d 74 30 07 c7 01 00 00 00 00 00 00 60 89 3c c6 93 09 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR?YpHYs.#.#x?v IDATx}dYzsfwgVY UA,@.%gG3 Kdk Z0AL$$@B_fg2BvwfzWZK5!m79ysoTU\|?YY]Uy~<>,f}9}-}t0`<
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 2c 34 c2 0f 00 00 00 00 00 00 00 00 00 00 00 60 a1 11 7e 00 00 00 00 00 00 00 00 00 00 00 00 0b 8d f0 03 00 00 00 00 00 00 00 00 00 00 00 58 68 84 1f 00 00 00 00 00 00 00 00 00 00 00 c0 42 23 fc 00 00 00 00 00 00 00 00 00 00 00 00 16 1a e1 07 00 00 00 00 00 00 00 00 00 00 00 b0 d0 08 3f 00 00 00 00 00 00 00 00 00 00 00 80 85 46 f8 01 00 00 00 00 00 00 00 00 00 00 00 2c 34 c2 0f 00 00 00 00 00 00 00 00 00 00 00 60 a1 11 7e 00 00 00 00 00 00 00 00 00 00 00 00 0b 8d f0 03 00 00 00 00 00 00 00 00 00 00 00 58 68 84 1f 00 00 00 00 00 00 00 00 00 00 00 c0 42 23 fc 00 00 00 00 00 00 00 00 00 00 00 00 16 1a e1 07 00 00 00 00 00 00 00 00 00 00 00 b0 d0 08 3f 00 00 00 00 00 00 00 00 00 00 00 80 85 46 f8 01 00 00 00 00 00 00 00 00 00 00 00 2c 34 Data Ascii: ,4`~XhB#?F,4`~XhB#?F,4
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: d5 e5 e9 be 46 21 05 11 64 88 f9 e0 45 10 62 bc f1 84 1f 00 00 00 00 00 00 00 00 00 80 e3 57 85 07 ee cf cd 75 0e a2 dd 45 f4 b8 4b 26 e3 47 73 a6 e7 bf ee 8d 9f de 39 f9 03 3d 05 a1 0d 7a e8 ed 2e 8c fb 32 f8 20 db 5d 94 82 0e 22 18 a0 07 1d 1a 4a 6b 8b 68 99 1e 72 d0 1e 93 ed 37 7a b4 bb 88 17 74 4c 92 fb 71 26 d1 e5 c2 74 19 d5 1f 26 b7 ad 86 11 42 5a 35 41 6d 77 d1 d5 ba a2 14 a6 50 5a 6b a8 41 08 27 8f 23 af ee 20 db 5d 94 c6 13 7e 00 00 00 00 00 00 00 00 00 00 8e d9 dd e7 5e 3c 9a 9f f6 17 f1 24 7d 5e c9 20 c8 c9 f5 76 c2 7c f7 6b 3f f5 33 eb a7 70 c0 27 e6 c9 8f 7d a2 fa a4 fc e5 f6 3a d8 2d 2f f4 0a 10 b5 38 44 e2 ac 39 fd fa 31 11 92 c8 da 5d c8 d6 16 43 0f 82 58 27 d9 7e af 76 17 f1 bc 77 8f e0 83 55 c5 c1 fa ba 3d c1 7c dd be 61 88 e1 63 84 1f Data Ascii: F!dEbWuEK&Gs9=z.2 ]"Jkhr7ztLq&t&BZ5AmwPZkA'# ]~^<$}^ v\|k?3p'}:-/8D91]CX'~vwU=\|ac
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: b9 8b ae 5b 29 f8 a0 af 13 8d 4f da 5d b4 07 a2 04 1f 32 46 45 09 71 cc f9 fd d0 6b 8c 97 27 ef ca 93 e3 c5 c7 92 db 76 ff f5 19 ac bd eb ef 7d 9e ea 0f dd 86 21 91 38 44 d0 75 ed 43 28 2c 0f 59 c5 85 76 79 1a a6 d0 2a 39 c8 71 3e 0a 5c c9 20 43 bf f1 4e 8c 6f 83 14 84 1f 00 00 00 00 00 00 00 00 00 80 53 72 f7 b9 17 af 39 e7 6e 1c cb de e3 2a 02 21 6f 77 31 14 b7 be 70 59 a5 08 37 9a a4 b7 da 3b b8 8b 5f fd 4b ff f7 31 06 38 8e cf 93 af 7f 72 cb 39 7f 51 56 7d c8 aa 63 64 a1 11 b1 bc b9 2f 83 24 32 f8 60 16 3b b0 ab 40 d4 cf c7 47 1e 3e ff 81 db e5 0b d1 f1 fc 86 f4 fe 44 94 e3 4f 82 0f 85 62 0e 59 a8 21 7b 4c 6e 5f bc 0a a9 fe d0 5f 88 da 83 58 95 1d d4 e5 f6 63 32 70 30 fa 42 09 25 c8 20 43 bc 7c d0 9e 22 24 df 25 63 8e 77 62 bc 4f 96 13 7e 00 00 00 00 Data Ascii: [)O]2FEqk'v}!8DuC(,Yvy9q>\ CNoSr9n!ow1pY7;_K18r9QV}cd/$2`;@G>DObY!{Ln__Xc2p0B% C\|"$%cwbO~
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 7c 3c f1 af b4 bb b0 b6 5f af ff f2 07 3e 7e f3 c2 bc bd a6 82 73 bb 76 f0 c1 6a 77 61 05 41 0a 41 07 11 08 d0 83 0e 8d 2c 88 72 e3 e1 f3 cf ee f7 3b 21 2d d8 92 de b7 f7 2b 16 74 4c 92 7b 6b 79 71 db 4a 85 81 c2 3a d9 a4 bb 8b 5e b0 f9 36 2e 97 b6 ba 8a 7c 15 08 b1 02 27 71 65 07 f9 9c 75 55 8b d0 c2 2e 5a 10 42 79 1e 65 75 06 d9 ae a2 ff 78 df 6b 3c e1 07 00 00 00 00 00 00 00 00 00 60 fe f4 ac fe 10 4f d2 e7 95 0c b2 2a 0f 22 e0 30 fa d2 6c 77 e1 44 15 09 59 0d 21 9e fc 4f f6 6f b4 97 38 1d e7 5e ff d4 15 17 fc c5 f8 1c 93 6b a8 84 3a e4 75 92 d5 34 d4 0c 80 bc 8e 32 a0 10 5f cf ac a2 c4 e0 b1 f1 ab 7e c4 db b0 2a 4e c8 83 d5 26 b6 e5 7a fa 09 e6 cb bb 2a 0a 58 cb ba 6e 35 d1 98 77 bd fa 5b 54 7f a8 3d f1 57 3f 73 c1 05 b7 36 7a 3e d5 e7 26 0a 45 64 cb Data Ascii: \|<_>~svjwaAA,r;!-+tL{kyqJ:^6.\|'qeuU.ZByeuxk<`O"0lwDY!Oo8^k:u42_~N&z*Xn5w[T=W?s6z>&Ed
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: db 86 04 b1 af b4 b5 45 fc 70 f3 d8 03 17 ea 50 cb 24 ac 8a 13 56 68 a0 14 7c d0 4f 30 5f de 35 c9 6e 1d 4b d7 6d 49 d0 36 98 dc 3d f9 60 cd 9c 78 e2 07 ee 5f 70 c1 6d 44 d7 a2 be 2e d1 3f 04 d9 73 27 02 0e 85 e7 b6 6f bb 0b 19 74 18 b7 5d 85 35 5e bb 5f 1a 4f f8 01 00 00 00 00 00 00 00 00 00 58 00 61 d0 1e 41 ab ca e0 95 f6 0b 46 d8 61 44 4c ea 8b 8a 12 ed b2 28 c0 10 94 65 2e 5f 26 8f a3 5e 77 c3 05 3f 79 7b 87 f1 8d 5a 6d b4 c7 56 6a 0d e1 f3 a0 43 52 60 40 69 77 11 5d 83 60 b5 1c 89 ee 67 61 88 e0 76 1e 5e 7a f6 68 a6 67 dd 37 f8 60 8c 29 b6 bb 50 83 0f 85 c7 8c 8a 0e ea b3 60 55 7d e8 57 15 62 95 5b 5f b4 2d 2f 9a db b4 32 46 fa 75 08 79 e5 0d 27 ae af ac c4 10 05 10 f2 4a 0c 3e d9 77 1c 44 e8 37 de 89 f1 7e aa f1 84 1f 00 00 00 00 00 00 00 00 00 80 Data Ascii: EpP$Vh\|O0_5nKmI6=`x_pmD.?s'ot]5^_OXaAFaDL(e._&^w?y{ZmVjCR`@iw]`gav^zhg7`)P`U}Wb[_-/2Fuy'J>wD7~
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: b0 ea 83 0c 9a c4 5f d7 d5 20 f4 76 17 69 d0 44 b6 9b c8 82 07 51 bb 8b 78 79 56 89 a1 38 de 89 f1 7e ca f1 f1 fe 87 6b 11 7e 00 00 00 00 80 e5 70 81 e7 11 00 00 00 00 56 4f 70 fe 8a 5d 71 c1 29 13 f6 62 59 d6 fa 22 0d 3b a4 ad 2f 64 bb 8b b8 7a 44 5e 31 22 ae 48 e1 92 f9 d7 d1 f6 2e bf ef 5f fc e2 d4 ad 0a ce dd 7a e3 8a 73 fe 62 5a 9d 42 ec 2b 6b 6f 11 9d a7 ac 6a 21 83 0f ea 76 9d 72 6d e3 0d 67 d7 e3 95 87 97 9e 3d 9c e6 3c 8b ba aa 29 b8 74 1d b5 dd 45 a9 22 44 88 ee 14 03 0f fa ab 30 5b a7 67 78 42 bb cd 26 f3 9b fb c1 6d bc fb 7f fe 8d 99 55 13 99 6b 71 95 0b 25 cc 90 84 1a b2 e5 69 38 66 14 32 10 41 84 98 0f 3e 0f 22 8c 35 5e 09 52 4c 35 3e de bf 1f 8d 27 fc 00 00 00 00 00 cb 61 9d e7 11 00 00 00 00 56 cf 67 7e ff 7f 7a e0 9c bf 9e 05 0d e2 09 79 Data Ascii: _ viDQxyV8~k~pVOp]q)bY";/dzD^1"H._zsbZB+koj!vrmg=<)tE"D0[gxB&mUkq%i8f2A>"5^RL5>'aVg~zy
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: c7 5f 5f ce ea 0f 4d b0 23 e4 d7 2d 0b 0c 28 d5 20 cc 4a 0a 2e 5e c7 e7 41 84 b1 c6 2b 41 8a a9 c6 8b 63 33 c6 53 f9 01 00 00 00 00 00 00 00 00 00 58 22 bf f2 0d 97 aa 09 f7 1d ab dd 45 fb 75 33 d9 af b5 be 70 46 0b 89 78 d2 b9 0d 0a 98 41 03 23 30 90 2c cf b6 ed 77 9e fc d8 27 d6 4b cf 48 08 55 85 88 fe ed 2e cc 6a 16 32 e8 20 26 62 f5 a0 83 13 eb cb 20 c7 e0 b1 1b 8f 2e 3d 73 ad 74 0e 33 63 7d ca bf 39 12 51 19 20 63 55 62 70 d6 b2 7c 1d ed 53 fa 66 f0 41 1e 6b a1 6d 86 2f 2d 77 d1 78 7d db cb da fa e2 72 fe 9c 87 e1 f3 9c 5d a3 a0 5c cf 76 a8 d6 36 22 09 52 88 b0 c2 64 e3 fd 94 e3 e3 fd 47 a1 0c 59 97 a6 1e 47 f8 01 00 00 00 00 00 00 00 00 00 58 22 bf fa 87 9e bf e6 82 bb 9e b6 bb 50 42 00 51 90 41 b6 b4 68 e5 55 12 f2 cf fb 8b 65 51 ab 88 2c f8 90 b5 Data Ascii: __M#-( J.^A+Ac3SX"Eu3pFxA#0,w'KHU.j2 &b .=st3c}9Q cUbp\|SfAkm/-wx}r]\v6"RdGYGX"PBQAhUeQ,
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: 3e c1 86 ae 5b 7b bb e3 6f 4b 4c a2 2f 4b eb 8b 51 e5 07 af 56 7b 48 af bf 0c 47 24 a1 83 51 58 c0 27 cb e2 b0 42 bf f1 62 9c f3 53 8e 8f f7 ef 93 e7 31 f9 8e 93 d5 21 a2 65 84 1f 00 00 00 00 60 39 ac f3 3c 02 00 00 00 00 34 bf 76 fe 3f 3c 72 a1 a9 4c d0 d1 ee a2 f9 32 88 fb 4a a0 20 0b 42 98 6d 24 7c 32 37 5b 0c 52 a4 c1 87 66 5b 1b 7d 82 0f 4e b9 1f d2 69 d7 68 47 da 71 b6 cb cb ed 2e 92 73 b8 ff e8 d2 33 bb f9 4e 4e 48 29 20 e0 b4 49 f2 78 59 29 21 21 d6 e9 aa e8 a0 8e cd ca 70 a8 c7 95 c4 64 fa 54 75 50 b6 a1 06 3e 86 fb bf fc 9e bf f5 b9 85 7e cf e4 89 9d c3 ad 61 15 94 60 3c b7 76 95 0f df d1 26 42 b6 2f d1 ee f7 19 3f 0a 52 4c 3c 3e df ff 24 ed 35 08 3f 00 00 00 00 00 00 00 00 00 00 4b ee d7 2f 7c 5b 55 3d e1 86 ac 8c d0 06 0a 44 35 86 a4 5d 44 34 Data Ascii: >[{oKL/KQV{HG$QX'BbS1!e`9<4v?<rL2J Bm$\|27[Rf[}NihGq.s3NNH) IxY)!!pdTuP>~a`<v&B/?RL<>$5?K/\|[U=D5]D4
2024-05-02 14:33:27 UTC	1369	IN	Data Raw: f9 cb 20 83 04 4a c5 86 2c 40 20 83 0f a5 8a 10 cd b6 f5 b6 16 5a 05 08 6d 5f b2 62 85 ac 3a e1 8a 01 0d fb 58 93 6d e7 61 88 07 2e f8 1d e3 c0 4f 5e 1c 12 30 aa 22 28 17 47 5f a6 4c a4 9b 7a 56 8e a8 89 a0 48 cf e0 83 79 ec 85 76 17 a5 ed 0e ef 6c 17 ce 6a ee 78 e7 b6 d5 73 73 f9 f3 94 05 01 92 5b 6f 3e bf fd c6 0f 6e 0f a7 1c 6f ec df ab ed 30 cc 00 85 72 1b 2f 27 fc 00 00 00 00 00 00 00 00 00 00 ac a0 df fa a3 7f 72 cf 05 7f 67 54 55 21 9e 77 8e 02 08 32 44 d0 f2 51 55 06 27 d6 11 e1 82 c2 36 ba c2 0e 49 d5 87 78 0e 38 ae 2a a1 b5 bb 88 c6 65 c1 07 65 9d 24 ec 91 5c 8f d1 d8 bd 47 2f 3c 7d a8 1f e8 29 ea 0c 37 8c 57 d1 21 79 26 ac 8a 0b fd 6f 6f 37 eb 67 41 05 b9 0f 75 9f 76 b0 23 9b 54 97 15 23 f2 63 5f a8 f0 c3 e8 78 83 72 fd 4b 95 10 5c bc 8e 4f ae Data Ascii: J,@ Zm_b:Xma.O^0"(G_LzVHyvljxss[o>no0r/'rgTU!w2DQU'6Ix8*ee$\G/<})7W!y&oo7gAuv#T#c_xrK\O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	50051	69.147.82.61	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:27 UTC	357	OUT	GET /wi/config/10005469.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:27 UTC	630	IN	HTTP/1.1 200 OK x-amz-request-id: XDG5EJ635B17W6Y6 x-amz-id-2: roLI3ka5xB1XLf5g65UAH6fYU1qD+e/QF64asKOUgFYhFcJGaJcXgcxkMTP3IF4BWRlPnq6B1WPyVmu17vixAd1OtTT26P1qjnpLlqGO6ak= Content-Type: application/json Date: Thu, 02 May 2024 14:33:27 GMT Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Cache-Control: public,max-age=3600 Age: 0 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-02 14:33:27 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	50058	216.239.34.21	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:27 UTC	2420	OUT	GET /_set_cookie?val=lsc4u4gN474bKUgzTSnwhO%2BvyYCr0%2FhAsVpNYc45%2FO3VOHZ%2BOw7RudvzAWwv0e6j9KRarIh0ePO%2FDaIqkPkgU%2BZejvfQ%2BvRZ5RnVjku4S6LJPZNkqhqaeN8y6pc1ojwGjZr5w1wZOd%2BZEbwpotfSKhuIpW%2FoN79tyZ3XZ3l%2Fg%2Fi5GZUMgKH1gr7q5OmYCJF4VL%2BIjHuunOBP6%2Fc6dF9YXEUkgLvfV%2Bs8oJf20cARgIYUkUCZND7hD3X5krSOh24aNd6iPsfBCzOw3ysKDXCfDuHOXFuY HTTP/1.1 Host: sgtm.qualtrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mutiny.user.token=030fb6bc-948e-4a68-ad25-9385910456db; mutiny.user.session=a558c5cb-0047-435f-8b79-7bfaa3a87403; __gtm_campaign_url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye; q_marketing_lang_ga_s=true; _gcl_au=1.1.1791124635.1714660404; mutiny.user.session_number=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+May+02+2024+16%3A33%3A25+GMT%2B0200+(Central+European+Summer+Time)&version=202401.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd9b27f3-93fc-4d66-a35d-c5e09a28ec8c&interactionCount=0&landingPath=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0005%3A1%2CC0004%3A1; _uetsid=ef6f6630089011efadf9c35fa2e09645; _uetvid=e [TRUNCATED]
2024-05-02 14:33:28 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:28 GMT Content-Type: image/gif Transfer-Encoding: chunked Set-Cookie: FPGSID=1.1714660407.1714660407.G-Z0RM4JK167.3yDHrATkpG9HnBIazXzoTQ.G-KREE1SMXRW.6EXQBQVi2FvvZqUgTIiu3Q; Max-Age=1800; Domain=qualtrics.com; Path=/; SameSite=strict; Secure Via: 1.1 google Connection: close
2024-05-02 14:33:28 UTC	59	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	50053	68.67.179.164	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:27 UTC	555	OUT	GET /getuidj HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.qualtrics.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:27 UTC	978	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Thu, 02 May 2024 14:33:27 GMT Content-Type: application/json; charset=utf-8 Content-Length: 11 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.qualtrics.com Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: d4441123-e0af-4930-a818-56e120e15f67 Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 20-Apr-2034 14:33:27 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned X-Proxy-Origin: 191.96.150.225; 191.96.150.225; 582.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-05-02 14:33:27 UTC	11	IN	Data Raw: 7b 22 75 69 64 22 3a 22 30 22 7d Data Ascii: {"uid":"0"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	50056	34.192.223.42	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:27 UTC	617	OUT	POST /v2/b HTTP/1.1 Host: api-v2.mutinyhq.io Connection: keep-alive Content-Length: 4786 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.qualtrics.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:27 UTC	4786	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 65 76 65 6e 74 5f 74 79 70 65 22 3a 22 6d 65 74 72 69 63 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 6d 65 74 72 69 63 5f 6b 65 79 22 3a 22 63 6c 69 65 6e 74 2e 75 73 65 72 5f 64 61 74 61 2e 66 65 74 63 68 22 2c 22 6d 65 74 72 69 63 5f 74 79 70 65 22 3a 22 69 6e 63 72 65 6d 65 6e 74 22 2c 22 74 61 67 73 22 3a 7b 22 61 73 79 6e 63 22 3a 22 66 61 6c 73 65 22 2c 22 63 64 6e 5f 73 74 61 74 75 73 22 3a 22 6d 69 73 73 22 2c 22 73 74 61 74 75 73 22 3a 22 32 30 30 22 2c 22 63 64 6e 5f 63 6c 69 65 6e 74 5f 63 6f 6e 6e 65 63 74 69 6f 6e 5f 73 70 65 65 64 22 3a 22 55 4e 4b 4e 4f 57 4e 22 2c 22 63 64 6e 5f 63 6c 69 65 6e 74 5f 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 55 4e 4b 4e 4f 57 4e 22 2c 22 63 64 6e 5f 63 6c 69 65 6e 74 5f 63 6f Data Ascii: {"events":[{"event_type":"metric","payload":{"metric_key":"client.user_data.fetch","metric_type":"increment","tags":{"async":"false","cdn_status":"miss","status":"200","cdn_client_connection_speed":"UNKNOWN","cdn_client_continent":"UNKNOWN","cdn_client_co
2024-05-02 14:33:28 UTC	568	IN	HTTP/1.1 201 Created Date: Thu, 02 May 2024 14:33:28 GMT Content-Type: text/plain Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Expose-Headers: x-cache, x-cache-hits, age Access-Control-Max-Age: 7200 Vary: Origin,Accept-Encoding ETag: W/"565339bc4d33d72817b583024112eb7f" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: c369889f-f94d-4b90-a06e-703cbf80ff37 X-Runtime: 0.033245 Strict-Transport-Security: max-age=63072000; includeSubDomains
2024-05-02 14:33:28 UTC	7	IN	Data Raw: 32 0d 0a 4f 4b 0d 0a Data Ascii: 2OK
2024-05-02 14:33:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	50063	216.239.32.181	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:27 UTC	784	OUT	GET /g/s/collect?dma=0&gtm=45j91e44u1v883492273z86526812z9848816901za200&_gsid=Z0RM4JK1673yDHrATkpG9HnBIazXzoTQ HTTP/1.1 Host: analytics.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:28 UTC	387	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Date: Thu, 02 May 2024 14:33:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	50064	216.239.32.181	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:27 UTC	784	OUT	GET /g/s/collect?dma=0&gtm=45j91e44u1v883492273z86526812z9848816901za200&_gsid=KREE1SMXRW6EXQBQVi2FvvZqUgTIiu3Q HTTP/1.1 Host: analytics.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:28 UTC	387	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Date: Thu, 02 May 2024 14:33:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	50066	142.250.31.156	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:27 UTC	877	OUT	GET /g/collect?v=2&dma=0&tid=G-Z0RM4JK167&cid=1321622203.1714660406&gtm=45j91e44u1v883492273z86526812z9848816901za200&aip=1 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnO9RFIBJunWPlD4OtIoZAqwdG0dHBqwAWYVPBC5WmC3gW2bK15-Lftyszn
2024-05-02 14:33:28 UTC	387	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Date: Thu, 02 May 2024 14:33:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	50065	142.250.31.156	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:27 UTC	877	OUT	GET /g/collect?v=2&dma=0&tid=G-KREE1SMXRW&cid=1321622203.1714660406&gtm=45j91e44u1v883492273z86526812z9848816901za200&aip=1 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnO9RFIBJunWPlD4OtIoZAqwdG0dHBqwAWYVPBC5WmC3gW2bK15-Lftyszn
2024-05-02 14:33:28 UTC	387	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Date: Thu, 02 May 2024 14:33:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	50067	216.239.34.21	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:27 UTC	3416	OUT	GET /g/collect?v=2&tid=G-Z0RM4JK167&gtm=45je44t0v883492273z86526812za200&_p=1714660401997&gcs=G111&gcd=13r3r3r3r5&npa=0&dma=0&gdid=dYWJhMj&cid=1321622203.1714660406&ecid=990306678&ul=en-us&sr=1280x1024&_fplc=0&ur=US-NY&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=190938145.1714660404&sst.gse=1&sst.gcd=13r3r3r3r5&sst.tft=1714660401997&sst.ude=0&_s=1&sid=1714660406&sct=1&seg=0&dl=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&dt=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&en=lang_route_no_redirect&_fv=1&_nsi=1&_ss=1&ep.event_category=language%20routing&ep.event_action=language%20routing%20%3A%20languageNotSupported&ep.non_interaction=1&ep.x-ga-mp1-cd55=no%20redirect%20%3A%20languageNotSupported&ep.x-ga-mp1 [TRUNCATED] Host: sgtm.qualtrics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mutiny.user.token=030fb6bc-948e-4a68-ad25-9385910456db; mutiny.user.session=a558c5cb-0047-435f-8b79-7bfaa3a87403; __gtm_campaign_url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye; q_marketing_lang_ga_s=true; _gcl_au=1.1.1791124635.1714660404; mutiny.user.session_number=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+May+02+2024+16%3A33%3A25+GMT%2B0200+(Central+European+Summer+Time)&version=202401.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd9b27f3-93fc-4d66-a35d-c5e09a28ec8c&interactionCount=0&landingPath=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0005%3A1%2CC0004%3A1; _uetsid=ef6f6630089011efadf9c35fa2e09645; _uetvid=e [TRUNCATED]
2024-05-02 14:33:28 UTC	736	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:28 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.mM5kZR2EBnQ4NjbmqKArlnx4iJuxETI0c4JTyJE%2Bd%2Fo%3D.1714660406; Max-Age=63072000; Domain=qualtrics.com; Path=/; Secure; HttpOnly set-cookie: FPLC=9eh3QPYfMQ4Iv7Wo6gcKzMambzTWLNNL4ys5B5tQnWp8WXwljH3GewwCQfLy5Ug%2B92p2hjncb33MmgKCYCHsHaYmQ6BdPwlJ1lTAAAkFEx1xCxakY6mBsyPvToN59A%3D%3D; Max-Age=72000; Domain=qualtrics.com; Path=/; Secure set-cookie: FPGSID=1.1714660407.1714660408.G-Z0RM4JK167.DyNk4LM2WF50xT5KwRx1Qw; Max-Age=1799; Domain=qualtrics.com; Path=/; SameSite=strict; Secure cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-05-02 14:33:28 UTC	183	IN	Data Raw: 62 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 6e 61 6c 79 74 69 63 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 67 2f 73 2f 63 6f 6c 6c 65 63 74 3f 64 6d 61 3d 30 26 67 74 6d 3d 34 35 6a 39 31 65 34 34 75 31 76 38 38 33 34 39 32 32 37 33 7a 38 36 35 32 36 38 31 32 7a 39 38 34 38 38 31 36 39 30 31 7a 61 32 30 30 26 5f 67 73 69 64 3d 5a 30 52 4d 34 4a 4b 31 36 37 44 79 4e 6b 34 4c 4d 32 57 46 35 30 78 54 35 4b 77 52 78 31 51 77 22 5d 7d 0a 0a 0d 0a Data Ascii: b1event: messagedata: {"send_pixel":["https://analytics.google.com/g/s/collect?dma=0&gtm=45j91e44u1v883492273z86526812z9848816901za200&_gsid=Z0RM4JK167DyNk4LM2WF50xT5KwRx1Qw"]}
2024-05-02 14:33:28 UTC	198	IN	Data Raw: 63 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 67 2f 63 6f 6c 6c 65 63 74 3f 76 3d 32 26 64 6d 61 3d 30 26 74 69 64 3d 47 2d 5a 30 52 4d 34 4a 4b 31 36 37 26 63 69 64 3d 31 33 32 31 36 32 32 32 30 33 2e 31 37 31 34 36 36 30 34 30 36 26 67 74 6d 3d 34 35 6a 39 31 65 34 34 75 31 76 38 38 33 34 39 32 32 37 33 7a 38 36 35 32 36 38 31 32 7a 39 38 34 38 38 31 36 39 30 31 7a 61 32 30 30 26 61 69 70 3d 31 22 5d 7d 0a 0a 0d 0a Data Ascii: c0event: messagedata: {"send_pixel":["https://stats.g.doubleclick.net/g/collect?v=2&dma=0&tid=G-Z0RM4JK167&cid=1321622203.1714660406&gtm=45j91e44u1v883492273z86526812z9848816901za200&aip=1"]}
2024-05-02 14:33:28 UTC	386	IN	Data Raw: 31 37 62 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 30 5a 4b 4b 6d 4c 43 46 39 79 30 72 45 31 4b 4e 66 72 48 39 30 6c 79 50 4a 6b 46 61 67 31 39 73 6d 37 68 62 53 61 48 4c 70 6c 42 62 45 4a 39 65 36 54 35 49 37 35 6a 4c 31 69 54 30 37 34 57 37 66 54 71 31 6a 4d 4d 4d 47 72 25 32 42 4c 69 25 32 46 50 33 44 51 30 4a 45 58 79 69 77 64 64 4b 73 36 58 70 49 67 45 7a 38 78 25 32 46 6a 43 38 6d 6b 5a 25 32 46 6e 39 77 48 41 4f 52 77 41 72 54 32 77 65 54 34 6b 25 32 46 4a 78 35 6a 6c 44 58 32 5a 77 6e 49 77 7a 54 25 32 46 32 30 52 30 6d 31 68 39 39 36 69 4d 74 34 4c 74 25 32 46 4b 42 30 31 79 Data Ascii: 17bevent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=0ZKKmLCF9y0rE1KNfrH90lyPJkFag19sm7hbSaHLplBbEJ9e6T5I75jL1iT074W7fTq1jMMMGr%2BLi%2FP3DQ0JEXyiwddKs6XpIgEz8x%2FjC8mkZ%2Fn9wHAORwArT2weT4k%2FJx5jlDX2ZwnIwzT%2F20R0m1h996iMt4Lt%2FKB01y
2024-05-02 14:33:28 UTC	183	IN	Data Raw: 62 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 6e 61 6c 79 74 69 63 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 67 2f 73 2f 63 6f 6c 6c 65 63 74 3f 64 6d 61 3d 30 26 67 74 6d 3d 34 35 6a 39 31 65 34 34 75 31 76 38 38 33 34 39 32 32 37 33 7a 38 36 35 32 36 38 31 32 7a 39 38 34 38 38 31 36 39 30 31 7a 61 32 30 30 26 5f 67 73 69 64 3d 4b 52 45 45 31 53 4d 58 52 57 5f 45 78 39 55 65 6c 7a 2d 74 52 79 79 66 73 30 52 32 6f 54 61 67 22 5d 7d 0a 0a 0d 0a Data Ascii: b1event: messagedata: {"send_pixel":["https://analytics.google.com/g/s/collect?dma=0&gtm=45j91e44u1v883492273z86526812z9848816901za200&_gsid=KREE1SMXRW_Ex9Uelz-tRyyfs0R2oTag"]}
2024-05-02 14:33:28 UTC	198	IN	Data Raw: 63 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 67 2f 63 6f 6c 6c 65 63 74 3f 76 3d 32 26 64 6d 61 3d 30 26 74 69 64 3d 47 2d 4b 52 45 45 31 53 4d 58 52 57 26 63 69 64 3d 31 33 32 31 36 32 32 32 30 33 2e 31 37 31 34 36 36 30 34 30 36 26 67 74 6d 3d 34 35 6a 39 31 65 34 34 75 31 76 38 38 33 34 39 32 32 37 33 7a 38 36 35 32 36 38 31 32 7a 39 38 34 38 38 31 36 39 30 31 7a 61 32 30 30 26 61 69 70 3d 31 22 5d 7d 0a 0a 0d 0a Data Ascii: c0event: messagedata: {"send_pixel":["https://stats.g.doubleclick.net/g/collect?v=2&dma=0&tid=G-KREE1SMXRW&cid=1321622203.1714660406&gtm=45j91e44u1v883492273z86526812z9848816901za200&aip=1"]}
2024-05-02 14:33:28 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	50070	50.17.194.92	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:27 UTC	825	OUT	GET /sp.pl?a=10000&d=Thu%2C%2002%20May%202024%2014%3A33%3A26%20GMT&n=-2d&b=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&.yp=10005469&f=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&enc=UTF-8&yv=1.15.1&tagmgr=gtm HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBDekM2YCEEAld__cwg2A7gx_rpV2-gMFEgEBAQH1NGY9ZtxH0iMA_eMAAA&S=AQAAAgdPEo-emHQ-qtOfAsVEnZw
2024-05-02 14:33:28 UTC	951	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:28 GMT Expires: Thu, 02 May 2024 14:33:28 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: application/x-javascript Accept-Ranges: bytes Content-Length: 0 Server: ATS/9.1.10.112 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.112) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBDekM2YCEEAld__cwg2A7gx_rpV2-gMFEgEBAQH1NGY9ZtxH0iMA_eMAAA&S=AQAAAgdPEo-emHQ-qtOfAsVEnZw; Expires=Fri, 2 May 2025 20:33:28 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	50061	13.248.142.121	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:28 UTC	539	OUT	OPTIONS /v3/company/details HTTP/1.1 Host: epsilon.6sense.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization,x-6s-customid Origin: https://www.qualtrics.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:28 UTC	513	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:28 GMT Transfer-Encoding: chunked Connection: close Server: nginx X-TRACE-ID: 1838433757267611750 Timing-Allow-Origin: https://6sense.com, https://www.ssga.com X-6si-Region: us-east-1a Access-Control-Expose-Headers: X-6si-Region Access-Control-Allow-Origin: https://www.qualtrics.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 1800 Access-Control-Allow-Methods: OPTIONS,GET Access-Control-Allow-Headers: authorization,x-6s-customid
2024-05-02 14:33:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	50046	192.28.147.68	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:28 UTC	983	OUT	POST /webevents/visitWebPage?_mchNc=1714660406408&_mchCn=&_mchId=542-FMF-412&_mchTk=_mch-qualtrics.com-1714660406407-14587&_mchWs=j1RQ&_mchHo=www.qualtrics.com&_mchPo=&_mchRu=%2Fpowered-by-qualtrics%2F&_mchPc=https%3A&_mchVr=163&_mchEcid=&_mchHa=&_mchRe=&_mchQp=utm_source%3Dinternal%2Binitiatives__-__utm_medium%3Dsurvey%2Bpowered%2Bby%2Bqualtrics__-__utm_content%3Dncsu__-__utm_survey_id%3DSV_ezeLwH8MeEs4Xye HTTP/1.1 Host: 542-fmf-412.mktoresp.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.qualtrics.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:28 UTC	241	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Thu, 02 May 2024 14:33:28 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close X-Request-Id: 1774bb0a-b1cf-4f3c-94c7-39c92f8e2efb Access-Control-Allow-Origin: *
2024-05-02 14:33:28 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	50073	216.239.34.21	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:28 UTC	2220	OUT	GET /_set_cookie?val=lsc4u4gN474bKUgzTSnwhO%2BvyYCr0%2FhAsVpNYc45%2FO3VOHZ%2BOw7RudvzAWwv0e6j9KRarIh0ePO%2FDaIqkPkgU%2BZejvfQ%2BvRZ5RnVjku4S6LJPZNkqhqaeN8y6pc1ojwGjZr5w1wZOd%2BZEbwpotfSKhuIpW%2FoN79tyZ3XZ3l%2Fg%2Fi5GZUMgKH1gr7q5OmYCJF4VL%2BIjHuunOBP6%2Fc6dF9YXEUkgLvfV%2Bs8oJf20cARgIYUkUCZND7hD3X5krSOh24aNd6iPsfBCzOw3ysKDXCfDuHOXFuY HTTP/1.1 Host: sgtm.qualtrics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mutiny.user.token=030fb6bc-948e-4a68-ad25-9385910456db; mutiny.user.session=a558c5cb-0047-435f-8b79-7bfaa3a87403; __gtm_campaign_url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye; q_marketing_lang_ga_s=true; _gcl_au=1.1.1791124635.1714660404; mutiny.user.session_number=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+May+02+2024+16%3A33%3A25+GMT%2B0200+(Central+European+Summer+Time)&version=202401.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd9b27f3-93fc-4d66-a35d-c5e09a28ec8c&interactionCount=0&landingPath=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0005%3A1%2CC0004%3A1; _uetsid=ef6f6630089011efadf9c35fa2e09645; _uetvid=e [TRUNCATED]
2024-05-02 14:33:28 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:28 GMT Content-Type: image/gif Transfer-Encoding: chunked Set-Cookie: FPGSID=1.1714660407.1714660407.G-Z0RM4JK167.3yDHrATkpG9HnBIazXzoTQ.G-KREE1SMXRW.6EXQBQVi2FvvZqUgTIiu3Q; Max-Age=1800; Domain=qualtrics.com; Path=/; SameSite=strict; Secure Via: 1.1 google Connection: close
2024-05-02 14:33:28 UTC	59	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	50072	68.67.160.117	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:28 UTC	347	OUT	GET /getuidj HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:28 UTC	954	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Thu, 02 May 2024 14:33:28 GMT Content-Type: application/json; charset=utf-8 Content-Length: 11 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 5892d5f3-c83b-409b-a42f-2bf1125d268d Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 20-Apr-2034 14:33:28 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned X-Proxy-Origin: 191.96.150.225; 191.96.150.225; 676.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-05-02 14:33:28 UTC	11	IN	Data Raw: 7b 22 75 69 64 22 3a 22 30 22 7d Data Ascii: {"uid":"0"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	50074	13.248.142.121	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:28 UTC	691	OUT	GET /v3/company/details HTTP/1.1 Host: epsilon.6sense.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-6s-CustomID: WebTag 4bf1707e-5518-4c0b-ab38-9341b0ae0b42 sec-ch-ua-mobile: ?0 Authorization: Token 0bd55fe6ddc04922a8ebf671dc5cb8849320c888 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.qualtrics.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:28 UTC	442	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:28 GMT Content-Type: application/json Content-Length: 755 Connection: close Server: nginx X-TRACE-ID: 965109404119740592 Timing-Allow-Origin: https://6sense.com, https://www.ssga.com X-6si-Region: us-east-1a Access-Control-Expose-Headers: X-6si-Region Access-Control-Allow-Origin: https://www.qualtrics.com Vary: Origin Access-Control-Allow-Credentials: true Vary: Accept-Encoding
2024-05-02 14:33:28 UTC	755	IN	Data Raw: 7b 22 63 6f 6d 70 61 6e 79 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 22 2c 22 6e 61 6d 65 22 3a 22 22 2c 22 72 65 67 69 6f 6e 22 3a 22 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 73 74 61 74 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 22 69 6e 64 75 73 74 72 79 22 3a 22 22 2c 22 63 6f 75 6e 74 72 79 5f 69 73 6f 5f 63 6f 64 65 22 3a 22 55 53 22 2c 22 61 64 64 72 65 73 73 22 3a 22 22 2c 22 7a 69 70 22 3a 22 22 2c 22 70 68 6f 6e 65 22 3a 22 22 2c 22 65 6d 70 6c 6f 79 65 65 5f 72 61 6e 67 65 22 3a 22 22 2c 22 72 65 76 65 6e 75 65 5f 72 61 6e 67 65 22 3a 22 22 2c 22 65 6d 70 6c 6f 79 65 65 5f 63 6f 75 6e 74 22 3a 22 22 2c 22 61 6e 6e 75 61 6c 5f 72 65 76 Data Ascii: {"company":{"domain":"","name":"","region":"","country":"United States","state":"New York","city":"New York City","industry":"","country_iso_code":"US","address":"","zip":"","phone":"","employee_range":"","revenue_range":"","employee_count":"","annual_rev

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	50080	13.248.142.121	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:30 UTC	360	OUT	GET /v3/company/details HTTP/1.1 Host: epsilon.6sense.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:30 UTC	319	IN	HTTP/1.1 401 Unauthorized Date: Thu, 02 May 2024 14:33:30 GMT Content-Type: application/json Content-Length: 54 Connection: close Server: nginx X-TRACE-ID: 5466368899077154814 Timing-Allow-Origin: https://6sense.com, https://www.ssga.com X-6si-Region: us-east-1a Access-Control-Expose-Headers: X-6si-Region
2024-05-02 14:33:30 UTC	54	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 68 65 61 64 65 72 20 6d 69 73 73 69 6e 67 2e 22 7d Data Ascii: {"code":401,"message":"Authorization header missing."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	50081	216.239.34.21	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:30 UTC	2982	OUT	POST /g/collect?v=2&tid=G-Z0RM4JK167&gtm=45je44t0v883492273z86526812za200&_p=1714660401997&gcs=G111&gcd=13r3r3r3r5&npa=0&dma=0&gdid=dYWJhMj&cid=1321622203.1714660406&ecid=990306678&ul=en-us&sr=1280x1024&ur=US-NY&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&ec_mode=c&sst.rnd=190938145.1714660404&sst.gse=1&sst.gcd=13r3r3r3r5&sst.tft=1714660401997&sst.ude=0&_s=2&sid=1714660406&sct=1&seg=1&dl=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&dt=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&tfd=10417&richsstsse HTTP/1.1 Host: sgtm.qualtrics.com Connection: keep-alive Content-Length: 1464 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.qualtrics.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=navigation-source Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mutiny.user.token=030fb6bc-948e-4a68-ad25-9385910456db; mutiny.user.session=a558c5cb-0047-435f-8b79-7bfaa3a87403; __gtm_campaign_url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye; q_marketing_lang_ga_s=true; _gcl_au=1.1.1791124635.1714660404; mutiny.user.session_number=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+May+02+2024+16%3A33%3A25+GMT%2B0200+(Central+European+Summer+Time)&version=202401.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd9b27f3-93fc-4d66-a35d-c5e09a28ec8c&interactionCount=0&landingPath=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0005%3A1%2CC0004%3A1; _uetsid=ef6f6630089011efadf9c35fa2e09645; _uetvid=e [TRUNCATED]
2024-05-02 14:33:30 UTC	1464	OUT	Data Raw: 65 6e 3d 70 61 67 65 5f 76 69 65 77 26 65 70 2e 63 5f 69 73 5f 69 66 72 61 6d 65 3d 66 61 6c 73 65 26 65 70 2e 63 5f 71 5f 72 65 67 69 6f 6e 3d 41 4d 52 26 65 70 2e 63 5f 63 6f 6e 74 65 6e 74 5f 74 69 74 6c 65 3d 25 35 42 41 70 70 72 6f 76 65 64 25 32 30 66 6f 72 25 32 30 41 4d 52 25 32 30 4d 69 67 72 61 74 69 6f 6e 25 35 44 25 32 30 50 6f 77 65 72 65 64 25 32 30 62 79 25 32 30 51 75 61 6c 74 72 69 63 73 25 32 30 4c 50 25 32 30 28 53 75 72 76 65 79 25 32 30 54 61 6b 65 72 29 26 65 70 2e 63 5f 63 6f 6e 74 65 6e 74 5f 63 61 74 65 67 6f 72 79 3d 26 65 70 2e 63 5f 63 6f 6e 74 65 6e 74 5f 61 75 74 68 6f 72 3d 26 65 70 2e 63 5f 63 6f 6e 74 65 6e 74 5f 67 72 6f 75 70 3d 50 61 67 65 26 65 70 2e 63 5f 63 6f 6e 74 65 6e 74 5f 70 75 62 5f 64 61 74 65 3d 26 65 70 2e Data Ascii: en=page_view&ep.c_is_iframe=false&ep.c_q_region=AMR&ep.c_content_title=%5BApproved%20for%20AMR%20Migration%5D%20Powered%20by%20Qualtrics%20LP%20(Survey%20Taker)&ep.c_content_category=&ep.c_content_author=&ep.c_content_group=Page&ep.c_content_pub_date=&ep.
2024-05-02 14:33:30 UTC	576	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:30 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.mM5kZR2EBnQ4NjbmqKArlnx4iJuxETI0c4JTyJE%2Bd%2Fo%3D.1714660406; Max-Age=63072000; Domain=qualtrics.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.1791124635.1714660404; Max-Age=7775993; Domain=qualtrics.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.qualtrics.com access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-05-02 14:33:30 UTC	771	IN	Data Raw: 32 66 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 31 30 32 36 39 37 38 32 37 38 2f 3f 72 61 6e 64 6f 6d 3d 31 34 37 33 34 35 35 38 35 37 26 66 73 74 3d 31 37 31 34 36 36 30 34 31 30 39 31 38 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 34 75 31 76 38 38 33 34 39 32 32 37 33 7a 38 36 35 32 36 38 31 32 7a 39 38 34 38 38 31 36 39 30 31 7a 61 32 30 30 26 75 72 Data Ascii: 2fcevent: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1026978278/?random=1473455857&fst=1714660410918&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&ur
2024-05-02 14:33:31 UTC	798	IN	Data Raw: 33 31 37 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 31 30 32 36 39 37 38 32 37 38 2f 3f 72 61 6e 64 6f 6d 3d 31 30 35 36 37 33 35 30 32 39 26 66 73 74 3d 31 37 31 34 36 36 30 34 31 30 39 36 35 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 77 58 32 34 43 4c 71 37 6a 50 77 42 45 4f 62 6a 32 65 6b 44 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 34 75 31 76 38 38 33 34 39 32 32 37 33 7a Data Ascii: 317event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1026978278/?random=1056735029&fst=1714660410965&cv=10&fmt=3&label=wX24CLq7jPwBEObj2ekD&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z
2024-05-02 14:33:31 UTC	796	IN	Data Raw: 33 31 35 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 39 32 39 33 35 39 39 35 33 2f 3f 72 61 6e 64 6f 6d 3d 39 38 34 33 37 37 32 32 31 26 66 73 74 3d 31 37 31 34 36 36 30 34 31 30 39 37 31 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 6b 4f 54 6b 43 4b 79 57 72 4a 30 43 45 4e 48 51 6b 37 73 44 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 34 75 31 76 38 38 33 34 39 32 32 37 33 7a 38 36 Data Ascii: 315event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/929359953/?random=984377221&fst=1714660410971&cv=10&fmt=3&label=kOTkCKyWrJ0CENHQk7sD&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86
2024-05-02 14:33:31 UTC	769	IN	Data Raw: 32 66 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 35 37 30 37 33 34 33 34 2f 3f 72 61 6e 64 6f 6d 3d 37 36 32 30 32 39 31 33 38 26 66 73 74 3d 31 37 31 34 36 36 30 34 31 30 39 37 38 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 34 75 31 76 38 38 33 34 39 32 32 37 33 7a 38 36 35 32 36 38 31 32 7a 39 38 34 38 38 31 36 39 30 31 7a 61 32 30 30 26 75 72 6c 3d Data Ascii: 2faevent: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/857073434/?random=762029138&fst=1714660410978&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=
2024-05-02 14:33:31 UTC	770	IN	Data Raw: 32 66 62 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 35 37 30 37 33 34 33 34 2f 3f 72 61 6e 64 6f 6d 3d 31 39 30 32 39 36 34 36 38 35 26 66 73 74 3d 31 37 31 34 36 36 30 34 31 30 39 38 36 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 34 75 31 76 38 38 33 34 39 32 32 37 33 7a 38 36 35 32 36 38 31 32 7a 39 38 34 38 38 31 36 39 30 31 7a 61 32 30 30 26 75 72 6c Data Ascii: 2fbevent: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/857073434/?random=1902964685&fst=1714660410986&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url
2024-05-02 14:33:31 UTC	735	IN	Data Raw: 32 64 38 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 30 37 38 34 32 35 31 3b 74 79 70 65 3d 72 74 6c 6e 77 30 3b 63 61 74 3d 71 75 61 6c 74 30 30 3b 6f 72 64 3d 31 36 35 34 37 31 30 36 35 33 3b 67 74 6d 3d 34 35 6a 39 31 65 34 34 75 31 76 38 38 33 34 39 32 32 37 33 7a 38 36 35 32 36 38 31 32 7a 39 38 34 38 38 31 36 39 30 31 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 67 64 69 64 3d 64 59 57 4a 68 4d 6a 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 67 63 73 3d 47 31 31 31 3b 67 63 64 3d 31 Data Ascii: 2d8event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=10784251;type=rtlnw0;cat=qualt00;ord=1654710653;gtm=45j91e44u1v883492273z86526812z9848816901za200;dc_pre=1;gdid=dYWJhMj;dma=0;npa=0;gcs=G111;gcd=1
2024-05-02 14:33:31 UTC	667	IN	Data Raw: 32 39 34 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 30 37 38 34 32 35 31 3b 74 79 70 65 3d 72 74 6c 6e 77 30 3b 63 61 74 3d 71 75 61 6c 74 30 30 3b 6f 72 64 3d 31 36 35 34 37 31 30 36 35 33 3b 67 74 6d 3d 34 35 6a 39 31 65 34 34 75 31 76 38 38 33 34 39 32 32 37 33 7a 38 36 35 32 36 38 31 32 7a 39 38 34 38 38 31 36 39 30 31 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 67 64 69 64 3d 64 59 57 4a 68 4d 6a 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 67 63 73 3d 47 31 31 31 3b 67 63 64 3d 31 33 72 33 72 33 72 33 72 35 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 Data Ascii: 294event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=10784251;type=rtlnw0;cat=qualt00;ord=1654710653;gtm=45j91e44u1v883492273z86526812z9848816901za200;dc_pre=1;gdid=dYWJhMj;dma=0;npa=0;gcs=G111;gcd=13r3r3r3r5;uaa=x86;uab=64;ua
2024-05-02 14:33:31 UTC	770	IN	Data Raw: 32 66 62 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 35 32 32 30 37 33 34 35 2f 3f 72 61 6e 64 6f 6d 3d 31 39 32 37 36 38 37 31 30 36 26 66 73 74 3d 31 37 31 34 36 36 30 34 31 31 30 30 36 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 34 75 31 76 38 38 33 34 39 32 32 37 33 7a 38 36 35 32 36 38 31 32 7a 39 38 34 38 38 31 36 39 30 31 7a 61 32 30 30 26 75 72 6c Data Ascii: 2fbevent: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/752207345/?random=1927687106&fst=1714660411006&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url
2024-05-02 14:33:31 UTC	245	IN	Data Raw: 65 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 44 53 75 6f 74 41 64 45 6f 68 4d 78 6b 4c 76 62 52 6f 4f 50 41 54 33 4f 65 45 63 47 4f 67 75 73 25 32 42 49 66 6e 37 38 45 32 63 66 51 6f 64 30 67 61 37 41 41 57 4d 64 64 37 36 65 50 6d 78 35 52 30 45 4f 6c 48 51 79 4a 5a 4e 56 56 64 5a 65 4d 75 41 4a 71 68 6f 35 6f 4a 4a 78 4c 33 43 44 6a 63 70 4e 34 73 58 54 30 6c 37 78 36 44 32 47 34 4c 79 4c 4c 64 76 41 72 4c 6f 5a 30 46 32 6f 5a 4e 72 4b 65 38 34 4b 68 5a 34 67 69 6d 42 7a 25 32 42 45 50 55 55 5a 70 76 41 6c 6a 67 25 33 44 25 33 44 22 5d 7d 0a 0a 0d 0a Data Ascii: efevent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=DSuotAdEohMxkLvbRoOPAT3OeEcGOgus%2BIfn78E2cfQod0ga7AAWMdd76ePmx5R0EOlHQyJZNVVdZeMuAJqho5oJJxL3CDjcpN4sXT0l7x6D2G4LyLLdvArLoZ0F2oZNrKe84KhZ4gimBz%2BEPUUZpvAljg%3D%3D"]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	50086	31.13.71.7	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:30 UTC	538	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:31 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-05-02 14:33:31 UTC	1632	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-05-02 14:33:31 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-05-02 14:33:31 UTC	14705	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-05-02 14:33:31 UTC	16384	IN	Data Raw: 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 70 61 72 61 6d 65 74 65 72 5f 73 65 6c 65 63 74 6f 72 73 3a 64 7d 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 78 74 2c 63 Data Ascii: length)return{parameter_selectors:d}}return null}function k(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;var b=a.context,c
2024-05-02 14:33:31 UTC	16384	IN	Data Raw: 6e 74 73 47 65 74 56 61 6c 69 64 55 72 6c 22 29 2c 76 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 52 65 73 6f 6c 76 65 4c 69 6e 6b 22 29 3b 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 69 78 65 6c 43 6f 6f 6b 69 65 55 74 69 6c 73 22 29 3b 76 61 72 20 77 3d 73 2e 43 4c 49 43 4b 5f 49 44 5f 50 41 52 41 4d 45 54 45 52 2c 78 3d 73 2e 72 65 61 64 50 61 63 6b 65 64 43 6f 6f 6b 69 65 2c 79 3d 73 2e 43 4c 49 43 4b 54 48 52 4f 55 47 48 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 3b 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 73 22 29 3b 76 Data Ascii: ntsGetValidUrl"),v=f.getFbeventsModules("SignalsFBEventsResolveLink");s=f.getFbeventsModules("SignalsPixelCookieUtils");var w=s.CLICK_ID_PARAMETER,x=s.readPackedCookie,y=s.CLICKTHROUGH_COOKIE_NAME;s=f.getFbeventsModules("SignalsFBEventsExperimentNames");v
2024-05-02 14:33:31 UTC	16384	IN	Data Raw: 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 72 79 7b 61 3d 6e 65 77 20 55 52 4c 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 63 61 74 63 68 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 6a 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 75 61 72 64 72 61 69 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 69 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 Data Ascii: ports=function(a){if(a==null)return null;try{a=new URL(a);return a}catch(a){return null}}})();return j.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsGuardrail",function(){return function(g,i,j,k){var l={exports:{}};l.exports;(function(){"us
2024-05-02 14:33:31 UTC	1678	IN	Data Raw: 29 29 2c 66 61 6c 6c 62 61 63 6b 44 6f 6d 61 69 6e 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 7d 29 29 2c 65 76 65 6e 74 73 46 69 6c 74 65 72 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 66 69 6c 74 65 72 69 6e 67 4d 6f 64 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 65 76 65 6e 74 4e 61 6d 65 73 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 61 72 72 61 79 4f 66 28 62 2e 73 74 72 69 6e 67 28 29 29 29 7d 29 29 2c 61 64 64 69 74 69 6f 6e 61 6c 55 73 65 72 44 61 74 61 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 73 65 6e 64 46 42 4c 6f 67 69 6e 49 44 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 Data Ascii: )),fallbackDomain:b.allowNull(b.string())})),eventsFilter:b.allowNull(b.objectWithFields({filteringMode:b.allowNull(b.string()),eventNames:b.allowNull(b.arrayOf(b.string()))})),additionalUserData:b.allowNull(b.objectWithFields({sendFBLoginID:b.allowNull(b
2024-05-02 14:33:31 UTC	14706	IN	Data Raw: 6c 3f 63 28 64 28 62 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 5b 61 5d 3d 3d 3d 21 30 7d 29 3a 5b 5d 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 61 72 61 6c 6c 65 6c 46 69 72 65 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 Data Ascii: l?c(d(b),function(a){return b[a]===!0}):[]}}]);return a}();l.exports=a})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsParallelFireConfigTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use s
2024-05-02 14:33:31 UTC	16384	IN	Data Raw: 6d 73 7c 7c 6e 65 77 20 64 28 29 2c 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 2e 61 70 70 65 6e 64 28 63 2c 61 5b 63 5d 29 7d 29 7d 29 3b 69 2e 74 72 69 67 67 65 72 28 62 29 3b 66 3d 65 2e 74 72 69 67 67 65 72 28 62 29 3b 69 66 28 6c 28 66 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 72 65 74 75 72 6e 3b 66 3d 68 2e 74 72 69 67 67 65 72 28 62 29 3b 69 66 28 6c 28 66 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 72 65 74 75 72 6e 3b 66 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 22 63 75 73 74 6f 6d 44 61 74 61 22 29 26 26 74 79 70 65 6f 66 20 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 62 Data Ascii: ms\|\|new d(),b.customParams.append(c,a[c])})});i.trigger(b);f=e.trigger(b);if(l(f,function(a){return a}))return;f=h.trigger(b);if(l(f,function(a){return a}))return;f=Object.prototype.hasOwnProperty.call(b,"customData")&&typeof b.customData!=="undefined"&&b
2024-05-02 14:33:31 UTC	16384	IN	Data Raw: 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 4f 62 6a 65 63 74 2e 6b 65 79 73 20 63 61 6c 6c 65 64 20 6f 6e 20 6e 6f 6e 2d 6f 62 6a 65 63 74 22 29 3b 76 61 72 20 62 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 71 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 63 29 3b 69 66 28 72 29 66 6f 72 28 63 3d 30 3b 63 3c 74 3b 63 2b 2b 29 71 2e 63 61 6c 6c 28 61 2c 73 5b 63 5d 29 26 26 62 2e 70 75 73 68 28 73 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 20 61 72 72 61 79 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 61 3d 4f 62 6a 65 63 74 28 61 29 3b 76 61 72 Data Ascii: row new TypeError("Object.keys called on non-object");var b=[];for(var c in a)q.call(a,c)&&b.push(c);if(r)for(c=0;c<t;c++)q.call(a,s[c])&&b.push(s[c]);return b}function v(a,b){if(a==null)throw new TypeError(" array is null or not defined");a=Object(a);var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	50089	172.217.165.130	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:31 UTC	1449	OUT	GET /pagead/viewthroughconversion/1026978278/?random=1473455857&fst=1714660410918&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnO9RFIBJunWPlD4OtIoZAqwdG0dHBqwAWYVPBC5WmC3gW2bK15-Lftyszn
2024-05-02 14:33:31 UTC	1386	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/1026978278/?random=1473455857&fst=1714658400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtq9iquF8NxqFfti5RFnNhNa1K9bYLChSR_RVb5ZV4LrJHjJdjK&random=4253828927 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:31 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	50093	172.217.165.130	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:31 UTC	1476	OUT	GET /pagead/viewthroughconversion/1026978278/?random=1056735029&fst=1714660410965&cv=10&fmt=3&label=wX24CLq7jPwBEObj2ekD&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnO9RFIBJunWPlD4OtIoZAqwdG0dHBqwAWYVPBC5WmC3gW2bK15-Lftyszn
2024-05-02 14:33:31 UTC	1413	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/1026978278/?random=1056735029&fst=1714658400000&cv=10&fmt=3&label=wX24CLq7jPwBEObj2ekD&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtq4R8Uyj2o7sSlXTDgme_J5wXMl8L7GyYkbWAbffL6KBVsW3O6&random=1560838822 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:31 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	50091	172.217.165.130	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:31 UTC	1474	OUT	GET /pagead/viewthroughconversion/929359953/?random=984377221&fst=1714660410971&cv=10&fmt=3&label=kOTkCKyWrJ0CENHQk7sD&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnO9RFIBJunWPlD4OtIoZAqwdG0dHBqwAWYVPBC5WmC3gW2bK15-Lftyszn
2024-05-02 14:33:31 UTC	1411	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/929359953/?random=984377221&fst=1714658400000&cv=10&fmt=3&label=kOTkCKyWrJ0CENHQk7sD&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqOcXApoWrADu0mXoxc3HMaUcrCnDORtdZL0O5BEfyKmCG2dnu&random=1019887100 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:31 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	50094	172.217.165.130	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:31 UTC	1447	OUT	GET /pagead/viewthroughconversion/857073434/?random=762029138&fst=1714660410978&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnO9RFIBJunWPlD4OtIoZAqwdG0dHBqwAWYVPBC5WmC3gW2bK15-Lftyszn
2024-05-02 14:33:31 UTC	1383	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/857073434/?random=762029138&fst=1714658400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqydIVnO_BTI28-jJ-pwx-1bo9TMUKpJHLVL5whI9WdNQvK3Dq&random=444176612 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:31 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	50090	172.217.165.130	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:31 UTC	1448	OUT	GET /pagead/viewthroughconversion/857073434/?random=1902964685&fst=1714660410986&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnO9RFIBJunWPlD4OtIoZAqwdG0dHBqwAWYVPBC5WmC3gW2bK15-Lftyszn
2024-05-02 14:33:32 UTC	1384	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/857073434/?random=1902964685&fst=1714658400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtq9qi27sgRAs5ZEASgAWvBib9ouB5MUtGlNvaDgEeV3k8H3nDJ&random=168153055 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	50092	172.217.165.130	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:31 UTC	1448	OUT	GET /pagead/viewthroughconversion/752207345/?random=1927687106&fst=1714660411006&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnO9RFIBJunWPlD4OtIoZAqwdG0dHBqwAWYVPBC5WmC3gW2bK15-Lftyszn
2024-05-02 14:33:32 UTC	1385	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/752207345/?random=1927687106&fst=1714658400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqzKRpQu2Fit8huFtnRNfmjVGDxNudJDHwcRqoT4vjgGkdgpYv&random=2018075289 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	50095	216.239.34.21	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:31 UTC	2334	OUT	GET /_set_cookie?val=DSuotAdEohMxkLvbRoOPAT3OeEcGOgus%2BIfn78E2cfQod0ga7AAWMdd76ePmx5R0EOlHQyJZNVVdZeMuAJqho5oJJxL3CDjcpN4sXT0l7x6D2G4LyLLdvArLoZ0F2oZNrKe84KhZ4gimBz%2BEPUUZpvAljg%3D%3D HTTP/1.1 Host: sgtm.qualtrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mutiny.user.token=030fb6bc-948e-4a68-ad25-9385910456db; mutiny.user.session=a558c5cb-0047-435f-8b79-7bfaa3a87403; __gtm_campaign_url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye; q_marketing_lang_ga_s=true; _gcl_au=1.1.1791124635.1714660404; mutiny.user.session_number=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+May+02+2024+16%3A33%3A25+GMT%2B0200+(Central+European+Summer+Time)&version=202401.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd9b27f3-93fc-4d66-a35d-c5e09a28ec8c&interactionCount=0&landingPath=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0005%3A1%2CC0004%3A1; _uetsid=ef6f6630089011efadf9c35fa2e09645; _uetvid=e [TRUNCATED]
2024-05-02 14:33:32 UTC	232	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:32 GMT Content-Type: image/gif Transfer-Encoding: chunked Set-Cookie: __gtm_pv=1; Max-Age=0; Domain=qualtrics.com; Path=/; SameSite=lax; Secure Via: 1.1 google Connection: close
2024-05-02 14:33:32 UTC	59	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	50097	142.250.65.198	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:31 UTC	1450	OUT	GET /activity;register_conversion=1;ps=1;src=10784251;type=rtlnw0;cat=qualt00;ord=1654710653;gtm=45j91e44u1v883492273z86526812z9848816901za200;dc_pre=1;gdid=dYWJhMj;dma=0;npa=0;gcs=G111;gcd=13r3r3r3r5;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1791124635.1714660404;s3p=1;~oref=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnO9RFIBJunWPlD4OtIoZAqwdG0dHBqwAWYVPBC5WmC3gW2bK15-Lftyszn
2024-05-02 14:33:32 UTC	2228	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"2837036111835856835"}],"aggregatable_trigger_data":[{"filters":[{"14":["11308182"]}],"key_piece":"0xd497b8f5be9e57f6","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xe46ca4fbf712c6af","not_filters":{"14":["11308182"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["11308182"]}],"key_piece":"0x1ba8f6b8011b4917","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x8a73264d8d4477c9","not_filters":{"14":["11308182"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"6483262112067696942","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"2837036111835856835","filters":[{"14":["11308182"],"sourc [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 01-Jun-2024 14:33:32 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	50096	142.250.65.198	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:31 UTC	1345	OUT	GET /activity;src=10784251;type=rtlnw0;cat=qualt00;ord=1654710653;gtm=45j91e44u1v883492273z86526812z9848816901za200;dc_pre=1;gdid=dYWJhMj;dma=0;npa=0;gcs=G111;gcd=13r3r3r3r5;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1791124635.1714660404;s3p=1;~oref=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnO9RFIBJunWPlD4OtIoZAqwdG0dHBqwAWYVPBC5WmC3gW2bK15-Lftyszn
2024-05-02 14:33:32 UTC	1208	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=10784251;type=rtlnw0;cat=qualt00;ord=1654710653;gtm=45j91e44u1v883492273z86526812z9848816901za200;dc_pre=1;gdid=dYWJhMj;dma=0;npa=0;gcs=G111;gcd=13r3r3r3r5;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	50100	216.239.34.21	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:31 UTC	2721	OUT	GET /g/collect?v=2&tid=G-Z0RM4JK167&gtm=45je44t0v883492273z86526812za200&_p=1714660401997&gcs=G111&gcd=13r3r3r3r5&npa=0&dma=0&gdid=dYWJhMj&cid=1321622203.1714660406&ecid=990306678&ul=en-us&sr=1280x1024&ur=US-NY&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&ec_mode=c&sst.rnd=190938145.1714660404&sst.gse=1&sst.gcd=13r3r3r3r5&sst.tft=1714660401997&sst.ude=0&_s=2&sid=1714660406&sct=1&seg=1&dl=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&dt=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&tfd=10417&richsstsse HTTP/1.1 Host: sgtm.qualtrics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mutiny.user.token=030fb6bc-948e-4a68-ad25-9385910456db; mutiny.user.session=a558c5cb-0047-435f-8b79-7bfaa3a87403; __gtm_campaign_url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye; q_marketing_lang_ga_s=true; _gcl_au=1.1.1791124635.1714660404; mutiny.user.session_number=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+May+02+2024+16%3A33%3A25+GMT%2B0200+(Central+European+Summer+Time)&version=202401.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd9b27f3-93fc-4d66-a35d-c5e09a28ec8c&interactionCount=0&landingPath=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0005%3A1%2CC0004%3A1; _uetsid=ef6f6630089011efadf9c35fa2e09645; _uetvid=e [TRUNCATED]
2024-05-02 14:33:32 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:32 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding access-control-allow-credentials: true x-robots-tag: noindex cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-05-02 14:33:32 UTC	101	IN	Data Raw: 35 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 62 6f 64 79 22 3a 22 4e 6f 20 63 6c 69 65 6e 74 20 63 6c 61 69 6d 65 64 20 74 68 65 20 72 65 71 75 65 73 74 2e 22 7d 7d 0a 0a 0d 0a Data Ascii: 5fevent: messagedata: {"response":{"status_code":404,"body":"No client claimed the request."}}
2024-05-02 14:33:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	50103	216.239.34.21	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:32 UTC	3267	OUT	POST /j/collect?v=1&_v=j101&a=1409268155&t=pageview&_s=1&dl=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&dp=%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&ul=en-us&de=UTF-8&dt=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&sd=24-bit&sr=1280x1024&vp=1263x907&je=0&_u=YADAAEABAAAAACgEKI~&jid=107385210&gjid=890081729&cid=1321622203.1714660406&tid=UA-570722-11&_gid=1797141080.1714660411&_r=1&gtm=45He44t0n71W6F8HXv6526812za200&cg2=&cg3=Page&cg4=en&cd21=&cd22=Page&cd23=&cd24=&cd25=&cd26=%5BApproved%20for%20AMR%20Migration%5D%20Powered%20by%20Qualtrics%20LP%20(Survey%20Taker)&cd46=AMR&cd47=en&cd58=(Non-company%20Visit)&cd59=&cd60=New%20York%20City&cd61=US&cd62=&cd63=&cd64=&cd65=&cd66=&cd67=&cd68=New%20York&cd70=&cd73=&gcs=G1 [TRUNCATED] Host: sgtm.qualtrics.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.qualtrics.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mutiny.user.token=030fb6bc-948e-4a68-ad25-9385910456db; mutiny.user.session=a558c5cb-0047-435f-8b79-7bfaa3a87403; __gtm_campaign_url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye; q_marketing_lang_ga_s=true; _gcl_au=1.1.1791124635.1714660404; mutiny.user.session_number=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+May+02+2024+16%3A33%3A25+GMT%2B0200+(Central+European+Summer+Time)&version=202401.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd9b27f3-93fc-4d66-a35d-c5e09a28ec8c&interactionCount=0&landingPath=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0005%3A1%2CC0004%3A1; _uetsid=ef6f6630089011efadf9c35fa2e09645; _uetvid=e [TRUNCATED]
2024-05-02 14:33:32 UTC	665	IN	HTTP/1.1 302 Found Date: Thu, 02 May 2024 14:33:32 GMT Transfer-Encoding: chunked access-control-allow-origin: https://www.qualtrics.com access-control-allow-credentials: true location: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-570722-11&cid=1321622203.1714660406&jid=107385210&_gid=1797141080.1714660411&gjid=890081729&_v=j101&z=2123129386 set-cookie: FPAU=1.1.1791124635.1714660404; Max-Age=7775992; Domain=qualtrics.com; Path=/; Secure set-cookie: FPID=FPID2.2.mM5kZR2EBnQ4NjbmqKArlnx4iJuxETI0c4JTyJE%2Bd%2Fo%3D.1714660406; Max-Age=63072000; Domain=qualtrics.com; Path=/; Secure; HttpOnly Via: 1.1 google Connection: close
2024-05-02 14:33:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	50104	142.251.40.196	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:32 UTC	1441	OUT	GET /pagead/1p-user-list/1026978278/?random=1473455857&fst=1714658400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtq9iquF8NxqFfti5RFnNhNa1K9bYLChSR_RVb5ZV4LrJHjJdjK&random=4253828927 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:32 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	50105	142.251.40.196	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:32 UTC	1466	OUT	GET /pagead/1p-user-list/929359953/?random=984377221&fst=1714658400000&cv=10&fmt=3&label=kOTkCKyWrJ0CENHQk7sD&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqOcXApoWrADu0mXoxc3HMaUcrCnDORtdZL0O5BEfyKmCG2dnu&random=1019887100 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:32 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	50107	142.251.40.196	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:32 UTC	1468	OUT	GET /pagead/1p-user-list/1026978278/?random=1056735029&fst=1714658400000&cv=10&fmt=3&label=wX24CLq7jPwBEObj2ekD&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtq4R8Uyj2o7sSlXTDgme_J5wXMl8L7GyYkbWAbffL6KBVsW3O6&random=1560838822 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:32 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	50106	142.251.40.196	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:32 UTC	1438	OUT	GET /pagead/1p-user-list/857073434/?random=762029138&fst=1714658400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqydIVnO_BTI28-jJ-pwx-1bo9TMUKpJHLVL5whI9WdNQvK3Dq&random=444176612 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:32 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	50111	216.239.34.21	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:32 UTC	2518	OUT	GET /_set_cookie?val=MDs%2FfjFTNeSmng1K%2FsmiYfRAhOkgI2jJK%2FhNuVShnQzDeA3BrUA1GwNqcIllMd4WZuqvcSgMmebRFoFodxKGtb1rwryhnw5bt2wguRFMwGP%2F1jP69ltQFouxLTAfq6Qdq8SkXiQFeNknhPJ3DSyLxJTM3NXcPyqHlPdBEU7PBiGdgqPcFH9B8nXxKtPinqPT14%2Fez2bGFf%2Bc%2FGIoTeYif0OnxPL0N2omxCUaW5NfwCOHHSUXs7LFa3mFGNQSSlen%2FkAL1QLQC%2ByUuQR%2F9%2BU2Yd7gGAj4 HTTP/1.1 Host: sgtm.qualtrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mutiny.user.token=030fb6bc-948e-4a68-ad25-9385910456db; mutiny.user.session=a558c5cb-0047-435f-8b79-7bfaa3a87403; __gtm_campaign_url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye; q_marketing_lang_ga_s=true; _gcl_au=1.1.1791124635.1714660404; mutiny.user.session_number=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+May+02+2024+16%3A33%3A25+GMT%2B0200+(Central+European+Summer+Time)&version=202401.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd9b27f3-93fc-4d66-a35d-c5e09a28ec8c&interactionCount=0&landingPath=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0005%3A1%2CC0004%3A1; _uetsid=ef6f6630089011efadf9c35fa2e09645; _uetvid=e [TRUNCATED]
2024-05-02 14:33:32 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:32 GMT Content-Type: image/gif Transfer-Encoding: chunked Set-Cookie: FPGSID=1.1714660407.1714660411.G-Z0RM4JK167.DyNk4LM2WF50xT5KwRx1Qw.G-KREE1SMXRW.1E15URjRAfXh0mk9JfE2Bw; Max-Age=1796; Domain=qualtrics.com; Path=/; SameSite=strict; Secure Via: 1.1 google Connection: close
2024-05-02 14:33:32 UTC	59	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	50109	142.251.40.196	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:32 UTC	1439	OUT	GET /pagead/1p-user-list/857073434/?random=1902964685&fst=1714658400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtq9qi27sgRAs5ZEASgAWvBib9ouB5MUtGlNvaDgEeV3k8H3nDJ&random=168153055 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:32 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	50108	142.251.40.196	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:32 UTC	1440	OUT	GET /pagead/1p-user-list/752207345/?random=1927687106&fst=1714658400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqzKRpQu2Fit8huFtnRNfmjVGDxNudJDHwcRqoT4vjgGkdgpYv&random=2018075289 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:32 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	50112	216.239.32.181	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:32 UTC	784	OUT	GET /g/s/collect?dma=0&gtm=45j91e44u1v883492273z86526812z9848816901za200&_gsid=KREE1SMXRW1E15URjRAfXh0mk9JfE2Bw HTTP/1.1 Host: analytics.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:32 UTC	387	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Date: Thu, 02 May 2024 14:33:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	50113	142.251.40.194	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:32 UTC	1249	OUT	GET /ddm/fls/z/src=10784251;type=rtlnw0;cat=qualt00;ord=1654710653;gtm=45j91e44u1v883492273z86526812z9848816901za200;dc_pre=1;gdid=dYWJhMj;dma=0;npa=0;gcs=G111;gcd=13r3r3r3r5;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:32 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	50114	142.251.40.198	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:32 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 140 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:32 UTC	140	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 71 75 61 6c 74 72 69 63 73 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 36 34 38 33 32 36 32 31 31 32 30 36 37 36 39 36 39 34 32 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://qualtrics.com","trigger_debug_key":"6483262112067696942"},"type":"trigger-no-matching-source"}]
2024-05-02 14:33:32 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 02 May 2024 14:33:32 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	50115	142.251.40.230	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:32 UTC	1147	OUT	GET /activity;register_conversion=1;ps=1;src=10784251;type=rtlnw0;cat=qualt00;ord=1654710653;gtm=45j91e44u1v883492273z86526812z9848816901za200;dc_pre=1;gdid=dYWJhMj;dma=0;npa=0;gcs=G111;gcd=13r3r3r3r5;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1791124635.1714660404;s3p=1;~oref=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnO9RFIBJunWPlD4OtIoZAqwdG0dHBqwAWYVPBC5WmC3gW2bK15-Lftyszn; ar_debug=1
2024-05-02 14:33:32 UTC	2228	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"2837036111835856835"}],"aggregatable_trigger_data":[{"filters":[{"14":["11308182"]}],"key_piece":"0xd497b8f5be9e57f6","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xe46ca4fbf712c6af","not_filters":{"14":["11308182"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["11308182"]}],"key_piece":"0x1ba8f6b8011b4917","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x8a73264d8d4477c9","not_filters":{"14":["11308182"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"6483262112067696942","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"2837036111835856835","filters":[{"14":["11308182"],"sourc [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 01-Jun-2024 14:33:32 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	50084	31.13.71.7	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:32 UTC	1313	OUT	GET /signals/config/620324491428838?v=2.9.154&r=stable&domain=www.qualtrics.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:33 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-05-02 14:33:33 UTC	1660	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-05-02 14:33:33 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-05-02 14:33:33 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-05-02 14:33:33 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-05-02 14:33:33 UTC	1500	IN	Data Raw: 61 2e 70 69 78 65 6c 3b 61 3d 61 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a Data Ascii: a.pixel;a=a.shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:
2024-05-02 14:33:33 UTC	1500	IN	Data Raw: 61 28 29 2c 6b 3d 5b 5d 2c 6c 3d 7b 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 Data Ascii: a(),k=[],l={};if(h==null)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonEleme
2024-05-02 14:33:33 UTC	1500	IN	Data Raw: 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 65 61 63 68 2c 64 3d 2f 5b 5e 5c 73 5c 22 5d 2f 2c 65 3d 2f 5b 5e 5c 73 3a 2b 5c 22 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 63 2c 66 29 7b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 63 29 3f 63 3d 3d 3d 22 40 22 3f 6e 75 6c 6c 3a 7b 73 74 61 72 74 3a 62 2c 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 75 73 65 72 Data Ascii: nts[b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.each,d=/[^\s\"]/,e=/[^\s:+\"]/;function g(b,c,f){if(f==null)return d.test(c)?c==="@"?null:{start:b,userOrDomain:"user
2024-05-02 14:33:33 UTC	1500	IN	Data Raw: 2e 5f 72 61 74 65 4d 53 3d 63 7d 68 28 62 2c 5b 7b 6b 65 79 3a 22 5f 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 49 6d 70 6c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 6c 61 73 74 41 72 67 73 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 63 3d 62 2d 74 68 69 73 2e 5f 6c 61 73 74 54 69 6d 65 3b 69 66 28 63 3e 3d 74 68 69 73 2e 5f 72 61 74 65 4d 53 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 64 29 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 Data Ascii: ._rateMS=c}h(b,[{key:"_passesThrottleImpl",value:function(){var a=this._lastArgs;if(a==null)return!0;var b=Date.now(),c=b-this._lastTime;if(c>=this._rateMS)return!0;for(var d=arguments.length,e=Array(d),f=0;f<d;f++)e[f]=arguments[f];if(a.length!==e.length
2024-05-02 14:33:33 UTC	1500	IN	Data Raw: 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 46 72 6f 6d 49 6e 70 75 74 73 22 29 2c 42 3d 6e 65 77 20 74 28 29 2c 43 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 44 6f 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 44 3d 31 30 30 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 62 2e 62 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 3d 3d 3d 22 65 78 74 65 6e 64 65 64 22 7d 66 75 6e 63 74 69 6f 6e 20 46 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 62 2e 64 69 73 61 62 6c 65 41 75 74 6f 43 6f 6e 66 69 67 29 72 65 74 75 Data Ascii: .getFbeventsModules("signalsFBEventsExtractFromInputs"),B=new t(),C=f.getFbeventsModules("signalsFBEventsDoAutomaticMatching"),D=100;function E(a,b){return b!=null&&b.buttonSelector==="extended"}function F(b){return function(c){if(b.disableAutoConfig)retu
2024-05-02 14:33:33 UTC	1500	IN	Data Raw: 29 2c 63 29 2c 63 2e 65 78 74 72 61 63 74 50 49 49 3d 47 2c 65 29 2c 6a 28 63 2c 64 29 7d 72 65 74 75 72 6e 20 62 7d 28 62 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 75 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 2e 6c 69 73 74 65 6e 4f 6e 63 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 77 28 46 28 62 29 29 3b 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 61 2c 7b 63 61 70 74 75 72 65 3a 21 30 2c 6f 6e 63 65 3a 21 31 2c 70 61 73 73 69 76 65 3a 21 30 7d 29 3a 67 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 63 6c 69 63 6b 22 2c 61 29 7d 29 2c 6d 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 47 28 Data Ascii: ),c),c.extractPII=G,e),j(c,d)}return b}(b);e.exports=new u(function(a,b){c.listenOnce(function(){var a=w(F(b));h.addEventListener?h.addEventListener("click",a,{capture:!0,once:!1,passive:!0}):g.attachEvent("onclick",a)}),m.listen(function(a,c,d){return G(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	50116	172.217.165.130	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:32 UTC	2411	OUT	GET /pagead/viewthroughconversion/752207345/?random=385466796&fst=1714660411015&cv=10&fmt=3&label=UNqRCJn5sIoDEPGL1-YC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&value=0&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&data=event%3Dpage_view%3Bc_is_iframe%3Dfalse%3Bc_q_region%3DAMR%3Bc_content_title%3D%5BApproved%20for%20AMR%20Migration%5D%20Powered%20by%20Qualtrics%20LP%20(Survey%20Taker)%3Bc_content_category%3D%3Bc_content_author%3D%3Bc_content_group%3DPage%3Bc_content_pub_date%3D%3Bc_product_line%3D%3Bc_content_topics%3D%3Bc_q_industry%3D%3Bc_hit_timestamp%3D2024-05-02T16%3A33%3A27.811%2B02%3A00%3Bc_weekend_weekday%3DWeekday%3Bc_mountain_local_time%3D8%3Bcontent_group%3Dnone%3Bevent_id%3D1714660401997_pv%3Bc_form_type%3Dec%3A%20&auid=1791124635.171466 [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnO9RFIBJunWPlD4OtIoZAqwdG0dHBqwAWYVPBC5WmC3gW2bK15-Lftyszn; ar_debug=1
2024-05-02 14:33:32 UTC	2282	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/752207345/?random=385466796&fst=1714660411015&cv=10&fmt=3&label=UNqRCJn5sIoDEPGL1-YC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&value=0&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&data=event%3Dpage_view%3Bc_is_iframe%3Dfalse%3Bc_q_region%3DAMR%3Bc_content_title%3D%5BApproved%20for%20AMR%20Migration%5D%20Powered%20by%20Qualtrics%20LP%20(Survey%20Taker)%3Bc_content_category%3D%3Bc_content_author%3D%3Bc_content_group%3DPage%3Bc_content_pub_date%3D%3Bc_product_line%3D%3Bc_content_topics%3D%3Bc_q_industry%3D%3Bc_hit_timestamp%3D2024-05-02T16%3A33%3A27.811%2B02%3A00%3Bc_weekend_weekday%3DWeekday%3Bc_mountain_local_time%3D8%3Bcontent_group%3Dnone%3Bevent_id%3D1714660401997_pv%3Bc_form_type%3Dec%3A%20&au [TRUNCATED] Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	50117	142.250.31.156	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:32 UTC	799	OUT	GET /r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-570722-11&cid=1321622203.1714660406&jid=107385210&_gid=1797141080.1714660411&gjid=890081729&_v=j101&z=2123129386 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnO9RFIBJunWPlD4OtIoZAqwdG0dHBqwAWYVPBC5WmC3gW2bK15-Lftyszn; ar_debug=1
2024-05-02 14:33:32 UTC	709	IN	HTTP/1.1 302 Found Location: https://www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-570722-11&cid=1321622203.1714660406&jid=107385210&_v=j101&z=2123129386 Access-Control-Allow-Origin: null Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 02 May 2024 14:33:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: Golfe2 Content-Length: 366 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:32 UTC	366	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 2f 67 61 2d 61 75 64 69 65 6e 63 65 73 3f 76 3d 31 26 61 6d 70 3b 61 69 70 3d 31 26 61 6d 70 3b 74 3d 73 72 26 61 6d 70 3b 5f 72 3d 34 26 61 6d 70 3b 74 69 64 3d 55 41 2d 35 37 30 37 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-5707

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	50118	172.217.165.130	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:32 UTC	1460	OUT	GET /pagead/viewthroughconversion/929359953/?random=1444647376&fst=1714660411033&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnO9RFIBJunWPlD4OtIoZAqwdG0dHBqwAWYVPBC5WmC3gW2bK15-Lftyszn; ar_debug=1
2024-05-02 14:33:32 UTC	1385	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/929359953/?random=1444647376&fst=1714658400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtq1C03dEQvGQTFJGgR5uJZhm1qdaPfalCwUi4puwTE8BmYpBcV&random=1126168917 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	50119	216.239.34.21	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:32 UTC	2422	OUT	GET /_set_cookie?val=NsL2Ny0hM33FlbcTQcv9sRCzL202xNJ1v0H08vs%2BKO%2FxhCKBbnaEvl5Xd2BFmiUWPAwonpA05vt2OeB%2FS1jYz4Wo2APKcmpgU7SYLIXhAmExiOsGpzyIxsVLIHZ7FonM%2F2sVak%2BrnKdvHbsb6lCmPfQCUvaA2mtjJeilNiLZJYjUi5v1p4ifjEraiP1oZTr0fQ%3D%3D HTTP/1.1 Host: sgtm.qualtrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mutiny.user.token=030fb6bc-948e-4a68-ad25-9385910456db; mutiny.user.session=a558c5cb-0047-435f-8b79-7bfaa3a87403; __gtm_campaign_url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye; q_marketing_lang_ga_s=true; _gcl_au=1.1.1791124635.1714660404; mutiny.user.session_number=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+May+02+2024+16%3A33%3A25+GMT%2B0200+(Central+European+Summer+Time)&version=202401.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd9b27f3-93fc-4d66-a35d-c5e09a28ec8c&interactionCount=0&landingPath=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0005%3A1%2CC0004%3A1; _uetsid=ef6f6630089011efadf9c35fa2e09645; _uetvid=e [TRUNCATED]
2024-05-02 14:33:33 UTC	262	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:33 GMT Content-Type: image/gif Transfer-Encoding: chunked Set-Cookie: _fbp=fb.1.1714660407810.1191634870; Max-Age=7776000; Domain=qualtrics.com; Path=/; SameSite=Lax; Secure Via: 1.1 google Connection: close
2024-05-02 14:33:33 UTC	59	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	50124	142.250.81.228	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:32 UTC	1229	OUT	GET /pagead/1p-user-list/929359953/?random=984377221&fst=1714658400000&cv=10&fmt=3&label=kOTkCKyWrJ0CENHQk7sD&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqOcXApoWrADu0mXoxc3HMaUcrCnDORtdZL0O5BEfyKmCG2dnu&random=1019887100 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:32 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	50126	142.250.81.228	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:32 UTC	1204	OUT	GET /pagead/1p-user-list/1026978278/?random=1473455857&fst=1714658400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtq9iquF8NxqFfti5RFnNhNa1K9bYLChSR_RVb5ZV4LrJHjJdjK&random=4253828927 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:32 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	50125	142.250.81.228	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:32 UTC	1231	OUT	GET /pagead/1p-user-list/1026978278/?random=1056735029&fst=1714658400000&cv=10&fmt=3&label=wX24CLq7jPwBEObj2ekD&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtq4R8Uyj2o7sSlXTDgme_J5wXMl8L7GyYkbWAbffL6KBVsW3O6&random=1560838822 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:32 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	50122	142.250.81.228	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:32 UTC	1201	OUT	GET /pagead/1p-user-list/857073434/?random=762029138&fst=1714658400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqydIVnO_BTI28-jJ-pwx-1bo9TMUKpJHLVL5whI9WdNQvK3Dq&random=444176612 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:32 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	50123	142.250.81.228	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:32 UTC	1203	OUT	GET /pagead/1p-user-list/752207345/?random=1927687106&fst=1714658400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqzKRpQu2Fit8huFtnRNfmjVGDxNudJDHwcRqoT4vjgGkdgpYv&random=2018075289 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:32 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	50121	142.250.81.228	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:32 UTC	1202	OUT	GET /pagead/1p-user-list/857073434/?random=1902964685&fst=1714658400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtq9qi27sgRAs5ZEASgAWvBib9ouB5MUtGlNvaDgEeV3k8H3nDJ&random=168153055 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:33 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	50131	216.239.34.21	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:33 UTC	2282	OUT	GET /_set_cookie?val=MDs%2FfjFTNeSmng1K%2FsmiYfRAhOkgI2jJK%2FhNuVShnQzDeA3BrUA1GwNqcIllMd4WZuqvcSgMmebRFoFodxKGtb1rwryhnw5bt2wguRFMwGP%2F1jP69ltQFouxLTAfq6Qdq8SkXiQFeNknhPJ3DSyLxJTM3NXcPyqHlPdBEU7PBiGdgqPcFH9B8nXxKtPinqPT14%2Fez2bGFf%2Bc%2FGIoTeYif0OnxPL0N2omxCUaW5NfwCOHHSUXs7LFa3mFGNQSSlen%2FkAL1QLQC%2ByUuQR%2F9%2BU2Yd7gGAj4 HTTP/1.1 Host: sgtm.qualtrics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mutiny.user.token=030fb6bc-948e-4a68-ad25-9385910456db; mutiny.user.session=a558c5cb-0047-435f-8b79-7bfaa3a87403; __gtm_campaign_url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye; q_marketing_lang_ga_s=true; _gcl_au=1.1.1791124635.1714660404; mutiny.user.session_number=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+May+02+2024+16%3A33%3A25+GMT%2B0200+(Central+European+Summer+Time)&version=202401.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd9b27f3-93fc-4d66-a35d-c5e09a28ec8c&interactionCount=0&landingPath=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0005%3A1%2CC0004%3A1; _uetsid=ef6f6630089011efadf9c35fa2e09645; _uetvid=e [TRUNCATED]
2024-05-02 14:33:33 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 02 May 2024 14:33:33 GMT Content-Type: image/gif Transfer-Encoding: chunked Set-Cookie: FPGSID=1.1714660407.1714660411.G-Z0RM4JK167.DyNk4LM2WF50xT5KwRx1Qw.G-KREE1SMXRW.1E15URjRAfXh0mk9JfE2Bw; Max-Age=1796; Domain=qualtrics.com; Path=/; SameSite=strict; Secure Via: 1.1 google Connection: close
2024-05-02 14:33:33 UTC	59	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	50128	142.251.40.196	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:33 UTC	665	OUT	GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-570722-11&cid=1321622203.1714660406&jid=107385210&_v=j101&z=2123129386 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:33 UTC	614	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Access-Control-Allow-Origin: null Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	50129	142.251.40.130	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:33 UTC	1012	OUT	GET /ddm/fls/z/src=10784251;type=rtlnw0;cat=qualt00;ord=1654710653;gtm=45j91e44u1v883492273z86526812z9848816901za200;dc_pre=1;gdid=dYWJhMj;dma=0;npa=0;gcs=G111;gcd=13r3r3r3r5;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:33 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	50130	142.251.40.196	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:33 UTC	2392	OUT	GET /pagead/1p-conversion/752207345/?random=385466796&fst=1714660411015&cv=10&fmt=3&label=UNqRCJn5sIoDEPGL1-YC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&value=0&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&data=event%3Dpage_view%3Bc_is_iframe%3Dfalse%3Bc_q_region%3DAMR%3Bc_content_title%3D%5BApproved%20for%20AMR%20Migration%5D%20Powered%20by%20Qualtrics%20LP%20(Survey%20Taker)%3Bc_content_category%3D%3Bc_content_author%3D%3Bc_content_group%3DPage%3Bc_content_pub_date%3D%3Bc_product_line%3D%3Bc_content_topics%3D%3Bc_q_industry%3D%3Bc_hit_timestamp%3D2024-05-02T16%3A33%3A27.811%2B02%3A00%3Bc_weekend_weekday%3DWeekday%3Bc_mountain_local_time%3D8%3Bcontent_group%3Dnone%3Bevent_id%3D1714660401997_pv%3Bc_form_type%3Dec%3A%20&auid=1791124635.1714660404&gdi [TRUNCATED] Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:33 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	50132	142.251.40.196	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:33 UTC	1440	OUT	GET /pagead/1p-user-list/929359953/?random=1444647376&fst=1714658400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtq1C03dEQvGQTFJGgR5uJZhm1qdaPfalCwUi4puwTE8BmYpBcV&random=1126168917 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:33 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50135	157.240.241.35	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:33 UTC	1001	OUT	GET /tr/?id=620324491428838&ev=PageView&dl=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&rl=&if=false&ts=1714660412431&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714660407810.1191634870&ler=empty&cdl=API_unavailable&it=1714660410797&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:33 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=87, rtx=0, c=10, mss=1277, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 02 May 2024 14:33:33 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50136	157.240.241.35	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:33 UTC	1111	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=620324491428838&ev=PageView&dl=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&rl=&if=false&ts=1714660412431&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714660407810.1191634870&ler=empty&cdl=API_unavailable&it=1714660410797&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source=navigation-source Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:33 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-02 14:33:33 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-05-02 14:33:33 UTC	1712	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-05-02 14:33:33 UTC	4	IN	Data Raw: 34 33 0d 0a Data Ascii: 43
2024-05-02 14:33:33 UTC	74	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50138	142.250.81.228	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:33 UTC	2100	OUT	GET /pagead/1p-conversion/752207345/?random=385466796&fst=1714660411015&cv=10&fmt=3&label=UNqRCJn5sIoDEPGL1-YC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&value=0&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&data=event%3Dpage_view%3Bc_is_iframe%3Dfalse%3Bc_q_region%3DAMR%3Bc_content_title%3D%5BApproved%20for%20AMR%20Migration%5D%20Powered%20by%20Qualtrics%20LP%20(Survey%20Taker)%3Bc_content_category%3D%3Bc_content_author%3D%3Bc_content_group%3DPage%3Bc_content_pub_date%3D%3Bc_product_line%3D%3Bc_content_topics%3D%3Bc_q_industry%3D%3Bc_hit_timestamp%3D2024-05-02T16%3A33%3A27.811%2B02%3A00%3Bc_weekend_weekday%3DWeekday%3Bc_mountain_local_time%3D8%3Bcontent_group%3Dnone%3Bevent_id%3D1714660401997_pv%3Bc_form_type%3Dec%3A%20&auid=1791124635.1714660404&gdi [TRUNCATED] Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:33 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50139	142.250.81.228	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:33 UTC	1203	OUT	GET /pagead/1p-user-list/929359953/?random=1444647376&fst=1714658400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v883492273z86526812z9848816901za200&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&tiba=Powered%20by%20Qualtrics%20%2F%2F%20Qualtrics&auid=1791124635.1714660404&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&gdid=dYWJhMj&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtq1C03dEQvGQTFJGgR5uJZhm1qdaPfalCwUi4puwTE8BmYpBcV&random=1126168917 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:33 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50137	142.250.81.228	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:33 UTC	549	OUT	GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-570722-11&cid=1321622203.1714660406&jid=107385210&_v=j101&z=2123129386 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:34 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 May 2024 14:33:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-02 14:33:34 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50142	157.240.241.35	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:33 UTC	764	OUT	GET /tr/?id=620324491428838&ev=PageView&dl=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&rl=&if=false&ts=1714660412431&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714660407810.1191634870&ler=empty&cdl=API_unavailable&it=1714660410797&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:34 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=87, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 02 May 2024 14:33:34 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50143	157.240.241.35	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:34 UTC	801	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=620324491428838&ev=PageView&dl=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F%3Futm_source%3Dinternal%252Binitiatives%26utm_medium%3Dsurvey%252Bpowered%252Bby%252Bqualtrics%26utm_content%3Dncsu%26utm_survey_id%3DSV_ezeLwH8MeEs4Xye&rl=&if=false&ts=1714660412431&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714660407810.1191634870&ler=empty&cdl=API_unavailable&it=1714660410797&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:34 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-02 14:33:34 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-05-02 14:33:34 UTC	1745	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50165	152.7.106.52	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:43 UTC	867	OUT	GET / HTTP/1.1 Host: naturalearning.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.2091661313.1714660381; _gat_UA-8130632-1=1; _gat_gtag_UA_8130632_1=1; _ga_M1MYBR9H42=GS1.1.1714660381.1.0.1714660381.60.0.0; _ga=GA1.1.382778281.1714660381 If-Modified-Since: Thu, 02 May 2024 14:10:28 GMT
2024-05-02 14:33:44 UTC	198	IN	HTTP/1.1 304 Not Modified Date: Thu, 02 May 2024 14:33:44 GMT Server: Apache Cache-Control: no-cache WPO-Cache-Status: cached Last-Modified: Thu, 02 May 2024 14:10:28 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50162	34.192.223.42	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:43 UTC	616	OUT	POST /v2/b HTTP/1.1 Host: api-v2.mutinyhq.io Connection: keep-alive Content-Length: 273 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.qualtrics.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-02 14:33:43 UTC	273	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 65 76 65 6e 74 5f 74 79 70 65 22 3a 22 6d 65 74 72 69 63 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 6d 65 74 72 69 63 5f 6b 65 79 22 3a 22 63 6c 69 65 6e 74 2e 72 75 6d 2e 6c 63 70 2e 74 69 6d 65 22 2c 22 6d 65 74 72 69 63 5f 74 79 70 65 22 3a 22 74 69 6d 69 6e 67 22 2c 22 74 61 67 73 22 3a 7b 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 22 35 2e 33 2e 34 22 7d 2c 22 76 61 6c 75 65 22 3a 34 36 34 34 7d 7d 5d 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 22 35 2e 33 2e 34 22 7d 2c 22 74 6f 6b 65 6e 22 3a 22 66 61 34 61 64 34 38 65 34 66 65 61 61 37 34 30 22 2c 22 76 69 73 69 74 6f 72 5f 74 6f 6b 65 6e 22 3a 22 30 33 30 66 62 36 62 63 2d 39 34 38 65 2d 34 61 36 38 2d 61 Data Ascii: {"events":[{"event_type":"metric","payload":{"metric_key":"client.rum.lcp.time","metric_type":"timing","tags":{"client_version":"5.3.4"},"value":4644}}],"metadata":{"client_version":"5.3.4"},"token":"fa4ad48e4feaa740","visitor_token":"030fb6bc-948e-4a68-a
2024-05-02 14:33:44 UTC	568	IN	HTTP/1.1 201 Created Date: Thu, 02 May 2024 14:33:44 GMT Content-Type: text/plain Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Expose-Headers: x-cache, x-cache-hits, age Access-Control-Max-Age: 7200 Vary: Origin,Accept-Encoding ETag: W/"565339bc4d33d72817b583024112eb7f" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: 27443929-e4a5-4427-8994-ccbf653002bf X-Runtime: 0.007182 Strict-Transport-Security: max-age=63072000; includeSubDomains
2024-05-02 14:33:44 UTC	7	IN	Data Raw: 32 0d 0a 4f 4b 0d 0a Data Ascii: 2OK
2024-05-02 14:33:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50168	104.22.74.115	443	3544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-02 14:33:44 UTC	718	OUT	GET /accounts_resources/base/f6d965115c2786.json HTTP/1.1 Host: cdn.sender.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://naturalearning.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://naturalearning.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "bb871d4ddae01385568227781287c751" If-Modified-Since: Mon, 01 Apr 2024 20:01:43 GMT
2024-05-02 14:33:45 UTC	521	IN	HTTP/1.1 304 Not Modified Date: Thu, 02 May 2024 14:33:45 GMT Content-Type: application/json Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "bb871d4ddae01385568227781287c751" Last-Modified: Mon, 01 Apr 2024 20:01:43 GMT Vary: Origin, Accept-Encoding CF-Cache-Status: DYNAMIC referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 87d8ba68aff636bd-YYZ alt-svc: h3=":443"; ma=86400

Target ID:	0
Start time:	16:32:22
Start date:	02/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	16:32:27
Start date:	02/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=2120,i,1019968667426500736,6603024413701182159,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	16:32:30
Start date:	02/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://campaign-statistics.com/link_click/Q8JO54uLM8_NZifI/8b475f29b654ee993e9d9f2d814b5501"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=ncsu&utm_survey_id=SV_ezeLwH8MeEs4Xye	HTTP Parser: Iframe src: https://sgtm.qualtrics.com/ns.html?id=GTM-W6F8HX
Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=ncsu&utm_survey_id=SV_ezeLwH8MeEs4Xye	HTTP Parser: Iframe src: https://success.qualtrics.com/rs/542-FMF-412/images/marketo-xdframe-relative.html
Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=ncsu&utm_survey_id=SV_ezeLwH8MeEs4Xye	HTTP Parser: Iframe src: https://sgtm.qualtrics.com/ns.html?id=GTM-W6F8HX
Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=ncsu&utm_survey_id=SV_ezeLwH8MeEs4Xye	HTTP Parser: Iframe src: https://success.qualtrics.com/rs/542-FMF-412/images/marketo-xdframe-relative.html
Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=ncsu&utm_survey_id=SV_ezeLwH8MeEs4Xye	HTTP Parser: Iframe src: https://sgtm.qualtrics.com/ns.html?id=GTM-W6F8HX
Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=ncsu&utm_survey_id=SV_ezeLwH8MeEs4Xye	HTTP Parser: Iframe src: https://success.qualtrics.com/rs/542-FMF-412/images/marketo-xdframe-relative.html

Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=ncsu&utm_survey_id=SV_ezeLwH8MeEs4Xye	HTTP Parser: No <meta name="author".. found
Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=ncsu&utm_survey_id=SV_ezeLwH8MeEs4Xye	HTTP Parser: No <meta name="author".. found
Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=ncsu&utm_survey_id=SV_ezeLwH8MeEs4Xye	HTTP Parser: No <meta name="author".. found

Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=ncsu&utm_survey_id=SV_ezeLwH8MeEs4Xye	HTTP Parser: No <meta name="copyright".. found
Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=ncsu&utm_survey_id=SV_ezeLwH8MeEs4Xye	HTTP Parser: No <meta name="copyright".. found
Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=ncsu&utm_survey_id=SV_ezeLwH8MeEs4Xye	HTTP Parser: No <meta name="copyright".. found

Source: chromecache_302.2.dr	String found in binary or memory: $('#footer-bottom .et-extra-social-icons').append("<li class=\"et-extra-social-icon\"><a href=\"https:\/\/www.facebook.com\/naturalearning\/\" class=\"et-extra-icon et-extra-icon-background-hover socicon socicon-facebook\"><\/a><\/li>"); equals www.facebook.com (Facebook)
Source: chromecache_302.2.dr	String found in binary or memory: $('#footer-bottom .et-extra-social-icons').append("<li class=\"et-extra-social-icon\"><a href=\"https:\/\/www.youtube.com\/channel\/UC9L6L41orjpiUpZh8AlP49A\" class=\"et-extra-icon et-extra-icon-background-hover socicon socicon-youtube\"><\/a><\/li>"); equals www.youtube.com (Youtube)
Source: chromecache_302.2.dr	String found in binary or memory: $('#footer-bottom .et-social-icons').append("<li class=\"et-social-icon\"><a href=\"https:\/\/www.facebook.com\/naturalearning\/\" class=\"icon socicon socicon-facebook\" alt=\"Facebook\" aria-label=\"Facebook\"><span>Facebook<\/span><\/a><\/li>"); equals www.facebook.com (Facebook)
Source: chromecache_302.2.dr	String found in binary or memory: $('#footer-bottom .et-social-icons').append("<li class=\"et-social-icon\"><a href=\"https:\/\/www.youtube.com\/channel\/UC9L6L41orjpiUpZh8AlP49A\" class=\"icon socicon socicon-youtube\" alt=\"YouTube\" aria-label=\"YouTube\"><span>YouTube<\/span><\/a><\/li>"); equals www.youtube.com (Youtube)
Source: chromecache_302.2.dr	String found in binary or memory: $('#top-header .et-extra-social-icons').append("<li class=\"et-extra-social-icon\"><a href=\"https:\/\/www.facebook.com\/naturalearning\/\" class=\"et-extra-icon et-extra-icon-background-hover socicon socicon-facebook\"><\/a><\/li>"); equals www.facebook.com (Facebook)
Source: chromecache_302.2.dr	String found in binary or memory: $('#top-header .et-extra-social-icons').append("<li class=\"et-extra-social-icon\"><a href=\"https:\/\/www.youtube.com\/channel\/UC9L6L41orjpiUpZh8AlP49A\" class=\"et-extra-icon et-extra-icon-background-hover socicon socicon-youtube\"><\/a><\/li>"); equals www.youtube.com (Youtube)
Source: chromecache_302.2.dr	String found in binary or memory: $('#top-header .et-social-icons').append("<li class=\"et-social-icon\"><a href=\"https:\/\/www.facebook.com\/naturalearning\/\" class=\"icon socicon socicon-facebook\" alt=\"Facebook\" aria-label=\"Facebook\"><span>Facebook<\/span><\/a><\/li>"); equals www.facebook.com (Facebook)
Source: chromecache_302.2.dr	String found in binary or memory: $('#top-header .et-social-icons').append("<li class=\"et-social-icon\"><a href=\"https:\/\/www.youtube.com\/channel\/UC9L6L41orjpiUpZh8AlP49A\" class=\"icon socicon socicon-youtube\" alt=\"YouTube\" aria-label=\"YouTube\"><span>YouTube<\/span><\/a><\/li>"); equals www.youtube.com (Youtube)
Source: chromecache_302.2.dr	String found in binary or memory: $('.et_slide_in_menu_container .et-extra-social-icons').append("<li class=\"et-extra-social-icon\"><a href=\"https:\/\/www.facebook.com\/naturalearning\/\" class=\"et-extra-icon et-extra-icon-background-hover socicon socicon-facebook\"><\/a><\/li>"); equals www.facebook.com (Facebook)
Source: chromecache_302.2.dr	String found in binary or memory: $('.et_slide_in_menu_container .et-extra-social-icons').append("<li class=\"et-extra-social-icon\"><a href=\"https:\/\/www.youtube.com\/channel\/UC9L6L41orjpiUpZh8AlP49A\" class=\"et-extra-icon et-extra-icon-background-hover socicon socicon-youtube\"><\/a><\/li>"); equals www.youtube.com (Youtube)
Source: chromecache_302.2.dr	String found in binary or memory: $('.et_slide_in_menu_container .et-social-icons').append("<li class=\"et-social-icon\"><a href=\"https:\/\/www.facebook.com\/naturalearning\/\" class=\"icon socicon socicon-facebook\" alt=\"Facebook\" aria-label=\"Facebook\"><span>Facebook<\/span><\/a><\/li>"); equals www.facebook.com (Facebook)
Source: chromecache_302.2.dr	String found in binary or memory: $('.et_slide_in_menu_container .et-social-icons').append("<li class=\"et-social-icon\"><a href=\"https:\/\/www.youtube.com\/channel\/UC9L6L41orjpiUpZh8AlP49A\" class=\"icon socicon socicon-youtube\" alt=\"YouTube\" aria-label=\"YouTube\"><span>YouTube<\/span><\/a><\/li>"); equals www.youtube.com (Youtube)
Source: chromecache_411.2.dr	String found in binary or memory: <a aria-label="Like us on Facebook" class="px-1" href="https://www.facebook.com/Qualtrics/" target="_blank"> equals www.facebook.com (Facebook)
Source: chromecache_411.2.dr	String found in binary or memory: <a aria-label="Follow us on LinkedIn" class="px-1" href="https://www.linkedin.com/company/qualtrics" target="_blank"> equals www.linkedin.com (Linkedin)
Source: chromecache_411.2.dr	String found in binary or memory: <link itemprop="sameAs" href="https://www.facebook.com/Qualtrics/" /> equals www.facebook.com (Facebook)
Source: chromecache_411.2.dr	String found in binary or memory: <link itemprop="sameAs" href="https://www.linkedin.com/company/qualtrics" /> equals www.linkedin.com (Linkedin)
Source: chromecache_411.2.dr	String found in binary or memory: <link itemprop="sameAs" href="https://www.youtube.com/user/QualtricsSoftware/" /> equals www.youtube.com (Youtube)
Source: chromecache_302.2.dr	String found in binary or memory: <li class="et-social-icon"><a href="https://www.facebook.com/naturalearning/" class="icon socicon socicon-facebook" alt="Facebook" aria-label="Facebook"><span>Facebook</span></a></li> <li class="et-social-icon"><a href="https://www.instagram.com/naturalearninginitiative/" class="icon socicon socicon-instagram" alt="Instagram" aria-label="Instagram"><span>Instagram</span></a></li> <li class="et-social-icon"><a href="https://www.youtube.com/channel/UC9L6L41orjpiUpZh8AlP49A" class="icon socicon socicon-youtube" alt="YouTube" aria-label="YouTube"><span>YouTube</span></a></li></ul></div> equals www.facebook.com (Facebook)
Source: chromecache_302.2.dr	String found in binary or memory: <li class="et-social-icon"><a href="https://www.facebook.com/naturalearning/" class="icon socicon socicon-facebook" alt="Facebook" aria-label="Facebook"><span>Facebook</span></a></li> <li class="et-social-icon"><a href="https://www.instagram.com/naturalearninginitiative/" class="icon socicon socicon-instagram" alt="Instagram" aria-label="Instagram"><span>Instagram</span></a></li> <li class="et-social-icon"><a href="https://www.youtube.com/channel/UC9L6L41orjpiUpZh8AlP49A" class="icon socicon socicon-youtube" alt="YouTube" aria-label="YouTube"><span>YouTube</span></a></li></ul></div> equals www.youtube.com (Youtube)
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: their strengths and weaknesses, and personalities. It would be a waste not to keep in touch with them (on LinkedIn or by newsletter) and let them know when a more suitable job turns up. You can create a talent pipeline, particularly for roles that have high employee turnover, reaching out to:"]},"\n",{"tag":"ul","html_attributes":{},"inner_html":["\n",{"tag":"li","html_attributes":{},"inner_html":["Previous candidates"]},"\n",{"tag":"li","html_attributes":{},"inner_html":["Former employees"]},"\n",{"tag":"li","html_attributes":{},"inner_html":["Interns"]},"\n",{"tag":"li","html_attributes":{},"inner_html":[{"tag":"a","html_attributes":{"href":"https://www.bamboohr.com/hr-glossary/passive-candidate/#:~:text=A%20passive%20candidate%20is%20someone,searching%20for%20a%20new%20job."},"inner_html":["Passive candidates"]}]},"\n"]},"\n",{"tag":"p","html_attributes":{},"inner_html":["Using a talent pipeline not only reduces the time it takes to hire. it also helps you to identify good cultural adds, increases the chance of job acceptance as a relationship already exists, and leads to higher retention rates as candidates have had plenty of time to consider the offer."]},"\n "]},"\n "]},"\n "]},"custom":false,"tag":"div","replace_classes":false,"render_only_once":false},"content_hash":null,"condition":null,"resource_id":"0f547d30-0dcf-42ce-be81-4f8e074b7de1","custom_javascript":null,"personalization_type":"modification"}],"questionnaire":null,"component_stylesheet_id":null,"data_dependencies":["user.random"],"custom_javascript":null,"custom_css":null,"condition":{"attribute":"web_experience_variation.b041fad0-8ec3-4827-83e4-fc04559035c6.variation","value":"fba4826d-5a09-4434-8d5a-fbc625e6d9d4","and":[{"attribute":"web_experience_variation.b041fad0-8ec3-4827-83e4-fc04559035c6.event_id","value":null,"and":[],"or":[],"comparator":"not_equal","filter":null,"aggregation":null}],"or":[],"comparator":"equal","filter":null,"aggregation":null}},{"id":"a859e364-f76a-4c7e-814c-d1ea19c074f8","state":"experiment","description":"AMR - Content Hub CTA Test (CX-ROI)","name":"AMR - Content Hub CTA Test (CX-ROI)","global":false,"priority":15,"experience_type":"render","redirect_url":null,"url_host":"www.qualtrics.com","url_path":"/experience-management/customer/customer-experience-roi","url_query_params":null,"url_condition":null,"hold_out":0.6666666666666667,"async":false,"experiment_assignment_grouping_strategy":"global","dom_update_group_id":"82f36ecf-c254-4f03-9cab-429195adbe39","dom_update_group_state":"active","variation_key":"e319a2c5-16bb-43a1-a941-00c6a9588a80","variation_name":"Variation 2","dom_updates":[{"selector":"section#article-content-section \u003e div:nth-of-type(1) \u003e div.row","data":{"html_attributes":{},"styles":{},"content":{"tag":"fragment","html_attributes":{},"inner_html":["\n ",{"tag":"div","html_attributes":{"class":"col-12 col-lg-7 offset-lg-2"},"inner_html":["\n ",{"tag":"div","html_a
Source: chromecache_405.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_302.2.dr	String found in binary or memory: <a href="https://www.facebook.com/naturalearning/"><img class="alignleft size-medium wp-image-14892" src="https://naturalearning.org/wp-content/uploads/2019/10/facebook_3225194.svg" alt="facebook" width="33"/></a><a href="https://www.instagram.com/naturalearninginitiative/"><img class="alignleft size-medium wp-image-14894" src="https://naturalearning.org/wp-content/uploads/2019/12/instagram_3225191.svg" alt="Instagram" width="33"/></a><a href="https://www.youtube.com/channel/UC9L6L41orjpiUpZh8AlP49A"><img class="alignleft size-medium wp-image-14894" src="https://naturalearning.org/wp-content/uploads/2019/10/youtube_3225180.svg" alt="YouTube" width="33"/></a></div></div></div><div class="footer-widget"><div id="custom_html-6" class="widget_text fwidget et_pb_widget widget_custom_html"><div class="textwidget custom-html-widget"><h2><p style="color: #7a953b;">CONTACT</p></h2> equals www.facebook.com (Facebook)
Source: chromecache_302.2.dr	String found in binary or memory: <a href="https://www.facebook.com/naturalearning/"><img class="alignleft size-medium wp-image-14892" src="https://naturalearning.org/wp-content/uploads/2019/10/facebook_3225194.svg" alt="facebook" width="33"/></a><a href="https://www.instagram.com/naturalearninginitiative/"><img class="alignleft size-medium wp-image-14894" src="https://naturalearning.org/wp-content/uploads/2019/12/instagram_3225191.svg" alt="Instagram" width="33"/></a><a href="https://www.youtube.com/channel/UC9L6L41orjpiUpZh8AlP49A"><img class="alignleft size-medium wp-image-14894" src="https://naturalearning.org/wp-content/uploads/2019/10/youtube_3225180.svg" alt="YouTube" width="33"/></a></div></div></div><div class="footer-widget"><div id="custom_html-6" class="widget_text fwidget et_pb_widget widget_custom_html"><div class="textwidget custom-html-widget"><h2><p style="color: #7a953b;">CONTACT</p></h2> equals www.youtube.com (Youtube)
Source: chromecache_426.2.dr, chromecache_225.2.dr, chromecache_242.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Rj:function(){e=zb()},sd:function(){d()}}};var dc=ka(["data-gtm-yt-inspected-"]),wC=["www.youtube.com","www.youtube-nocookie.com"],xC,yC=!1; equals www.youtube.com (Youtube)
Source: chromecache_426.2.dr, chromecache_225.2.dr, chromecache_242.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Wg:d,Ug:e,Vg:f,Hh:g,Ih:h,ye:m,zb:b},p=G.YT,q=function(){EC(n)};if(p)return p.ready&&p.ready(q),b;var r=G.onYouTubeIframeAPIReady;G.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(HC(w,"iframe_api")\|\|HC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!yC&&FC(x[B],n.ye))return tc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_480.2.dr, chromecache_342.2.dr	String found in binary or memory: re being seen as a complete individual by an employer that wants the best for them."]},"\n",{"tag":"p","html_attributes":{},"inner_html":["Employers also need to make it easier for employees to understand the ",{"tag":"a","html_attributes":{"href":"https://www.qualtrics.com/experience-management/employee/organizational-core-values/"},"inner_html":["company values"]}," and how they apply to their own personal development plans."]},"\n",{"tag":"p","html_attributes":{},"inner_html":[{"tag":"img","html_attributes":{"alt":"Career pathing map","src":"https://www.qualtrics.com/m/assets/wp-content/uploads/2022/07/1419666_CareerPathing_01_072522.png","class":"shadow mx-auto img-fluid alignnone wp-image-115923 size-full","sizes":"(max-width: 1200px) 100vw, 1200px","width":"1200","height":"800","srcset":"https://www.qualtrics.com/m/assets/wp-content/uploads/2022/07/1419666_CareerPathing_01_072522.png 1200w, https://www.qualtrics.com/m/assets/wp-content/uploads/2022/07/1419666_CareerPathing_01_072522-768x512.png 768w, https://www.qualtrics.com/m/assets/wp-content/uploads/2022/07/1419666_CareerPathing_01_072522-150x100.png 150w","decoding":"async","fetchpriority":"high"},"inner_html":[]}]},"\n",{"tag":"h2","html_attributes":{"tabindex":"-1"},"inner_html":["Why is career pathing so important?"]},"\n",{"tag":"p","html_attributes":{},"inner_html":["Career pathing is a critical component of organizational strategy because it enables companies to develop talent that can fill future positions. Even before the Great Resignation and its attendant challenges, employees were waking up to the importance of career pathing. ",{"tag":"a","html_attributes":{"href":"https://learning.linkedin.com/resources/workplace-learning-report-2018"},"inner_html":["LinkedIn equals www.linkedin.com (Linkedin)
Source: chromecache_487.2.dr, chromecache_266.2.dr, chromecache_307.2.dr, chromecache_273.2.dr	String found in binary or memory: return b}uC.K="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),wC=["www.youtube.com","www.youtube-nocookie.com"],xC,yC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: campaign-statistics.com
Source: global traffic	DNS traffic detected: DNS query: ncsu.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: eu.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: naturalearning.org
Source: global traffic	DNS traffic detected: DNS query: cdn.ncsu.edu
Source: global traffic	DNS traffic detected: DNS query: cdn.sender.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: use.typekit.net
Source: global traffic	DNS traffic detected: DNS query: client-registry.mutinycdn.com
Source: global traffic	DNS traffic detected: DNS query: p.typekit.net
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: success.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: play.vidyard.com
Source: global traffic	DNS traffic detected: DNS query: qualtrics-www.s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: www-api.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: j.6sc.co
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: munchkin.marketo.net
Source: global traffic	DNS traffic detected: DNS query: s.yimg.com
Source: global traffic	DNS traffic detected: DNS query: api-v2.mutinyhq.io
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: sgtm.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: sp.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: 542-fmf-412.mktoresp.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: c.6sc.co
Source: global traffic	DNS traffic detected: DNS query: ipv6.6sc.co
Source: global traffic	DNS traffic detected: DNS query: epsilon.6sense.com
Source: global traffic	DNS traffic detected: DNS query: b.6sc.co
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: zn725dkxtvxq847sl-qxm.siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: siteintercept.qualtrics.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://campaign-statistics.com/link_click/Q8JO54uLM8_NZifI/8b475f29b654ee993e9d9f2d814b5501

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Chrome Cache Entry: 229

Chrome Cache Entry: 230

Chrome Cache Entry: 231

Chrome Cache Entry: 232

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Windows Analysis Report
https://campaign-statistics.com/link_click/Q8JO54uLM8_NZifI/8b475f29b654ee993e9d9f2d814b5501