Edit tour

Windows Analysis Report
http://www.factaclassactionsettlement.com/

Overview

General Information

Sample URL:	http://www.factaclassactionsettlement.com/
Analysis ID:	1437892
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2524 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3132 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2496 --field-trial-handle=2304,i,9999863175344410500,9655413472271620124,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2612 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.factaclassactionsettlement.com/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.factaclassactionsettlement.com/

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 96.7.158.101:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.192.208.109:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49698 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.factaclassactionsettlement.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/TopNavLightBlueTheme.css HTTP/1.1Host: www.factaclassactionsettlement.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ApplicationGatewayAffinity=f2b76c8d084793a79fbb09e62995d901
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.factaclassactionsettlement.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ApplicationGatewayAffinity=f2b76c8d084793a79fbb09e62995d901
Source: global traffic	HTTP traffic detected: GET /css/images/bkggrad.png HTTP/1.1Host: www.factaclassactionsettlement.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ApplicationGatewayAffinity=f2b76c8d084793a79fbb09e62995d901
Source: global traffic	HTTP traffic detected: GET /css/images/doubleunder.gif HTTP/1.1Host: www.factaclassactionsettlement.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ApplicationGatewayAffinity=f2b76c8d084793a79fbb09e62995d901
Source: global traffic	HTTP traffic detected: GET /css/images/currentUnderline.gif HTTP/1.1Host: www.factaclassactionsettlement.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ApplicationGatewayAffinity=f2b76c8d084793a79fbb09e62995d901
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /css/images/bkggrad.png HTTP/1.1Host: www.factaclassactionsettlement.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ApplicationGatewayAffinity=f2b76c8d084793a79fbb09e62995d901
Source: global traffic	HTTP traffic detected: GET /css/images/doubleunder.gif HTTP/1.1Host: www.factaclassactionsettlement.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ApplicationGatewayAffinity=f2b76c8d084793a79fbb09e62995d901
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.factaclassactionsettlement.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ApplicationGatewayAffinity=f2b76c8d084793a79fbb09e62995d901
Source: global traffic	HTTP traffic detected: GET /css/images/currentUnderline.gif HTTP/1.1Host: www.factaclassactionsettlement.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ApplicationGatewayAffinity=f2b76c8d084793a79fbb09e62995d901
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.gilardi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/gilardi-c16ca2530e753c5011b74bac99660499.css HTTP/1.1Host: www.gilardi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=Lax
Source: global traffic	HTTP traffic detected: GET /js/gtm.js HTTP/1.1Host: www.gilardi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=Lax
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/2sbDjiRdHpvTtxGaLuZ8rN/25556300175ed902a13b05f86f3e304c/gilardi_logo.svg HTTP/1.1Host: content-images.computershare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/6cd605275a334a6ab1ececf7415627f0/9eed86d3c59e67c8456e0f57d75ffe82/target-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1Host: content-images.computershare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/fffccb33654140bda7841d0e2fed9270/fd33b7f34c9c59ef94b94c31d7fce115/partnership-handshake-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1Host: content-images.computershare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/c9117c1092534fcc9273232233df0c5b/cd4bbb343e36272e3e0525f13b2ce9f7/Welcome.jpg?w=1920&h=850&fit=fill&f=center HTTP/1.1Host: content-images.computershare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/04139ec921c04b6394616c7a40f48da6/dd23ce4ffccade0fe0b6f6af64d3c548/checklist-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1Host: content-images.computershare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/5b560a5e95534bfdab06d2bf9d9c8622/8adc9b8b9e39e7b77e9b37986e331de4/lightbulb-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1Host: content-images.computershare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/24ada858e0424dc9a6fe522196881460/163c84ee9d3bddfeb1bbc9125472cd0f/lock-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1Host: content-images.computershare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/main.min.js HTTP/1.1Host: www.gilardi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=Lax; SameSite=Lax
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/6cd605275a334a6ab1ececf7415627f0/9eed86d3c59e67c8456e0f57d75ffe82/target-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1Host: content-images.computershare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/2sbDjiRdHpvTtxGaLuZ8rN/25556300175ed902a13b05f86f3e304c/gilardi_logo.svg HTTP/1.1Host: content-images.computershare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/04139ec921c04b6394616c7a40f48da6/dd23ce4ffccade0fe0b6f6af64d3c548/checklist-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1Host: content-images.computershare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/2Cpsx0dFpuasUFp8YANLmZ/cad4a1a0a1335e1e8dfad49ec6f5531d/logo-gcp.png HTTP/1.1Host: content-images.computershare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/5b560a5e95534bfdab06d2bf9d9c8622/8adc9b8b9e39e7b77e9b37986e331de4/lightbulb-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1Host: content-images.computershare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/24ada858e0424dc9a6fe522196881460/163c84ee9d3bddfeb1bbc9125472cd0f/lock-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1Host: content-images.computershare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/fffccb33654140bda7841d0e2fed9270/fd33b7f34c9c59ef94b94c31d7fce115/partnership-handshake-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1Host: content-images.computershare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/92430c33e214475385fd3a25214e2f30/bf6e82bf958a8707c4e7d2fcbc11343b/solid-kcc-teal.svg HTTP/1.1Host: content-images.computershare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/5e5bdf7536d04306a8b16efabf3fe8e0/0a1e6991a00de59e643f09b6d204322a/solid-navy.svg HTTP/1.1Host: content-images.computershare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/c9117c1092534fcc9273232233df0c5b/cd4bbb343e36272e3e0525f13b2ce9f7/Welcome.jpg?w=1920&h=850&fit=fill&f=center HTTP/1.1Host: content-images.computershare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/overpass-variable.ttf HTTP/1.1Host: www.gilardi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.gilardi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=Lax
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/2Cpsx0dFpuasUFp8YANLmZ/cad4a1a0a1335e1e8dfad49ec6f5531d/logo-gcp.png HTTP/1.1Host: content-images.computershare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/5e5bdf7536d04306a8b16efabf3fe8e0/0a1e6991a00de59e643f09b6d204322a/solid-navy.svg HTTP/1.1Host: content-images.computershare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/92430c33e214475385fd3a25214e2f30/bf6e82bf958a8707c4e7d2fcbc11343b/solid-kcc-teal.svg HTTP/1.1Host: content-images.computershare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /site/v3/7792/99885/1/1/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/ HTTP/1.1Host: l.evidon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/fc248138-00ce-4270-ac78-e72164153e7f-5.woff2 HTTP/1.1Host: www.gilardi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.gilardi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=Lax; SameSite=Lax
Source: global traffic	HTTP traffic detected: GET /site/v3/7792/99885/1/4/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/ HTTP/1.1Host: l.evidon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /site/v3/7792/99885/1/2/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/ HTTP/1.1Host: l.evidon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/favicon.png HTTP/1.1Host: www.gilardi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=Lax; _ga=GA1.2.715666436.1715123900; _gid=GA1.2.909392301.1715123900; _gat_UA-132403652-1=1; _ga_XCZNY5NT2G=GS1.2.1715123901.1.0.1715123901.0.0.0
Source: global traffic	HTTP traffic detected: GET /img/favicon.png HTTP/1.1Host: www.gilardi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=Lax; SameSite=Lax; _ga=GA1.2.715666436.1715123900; _gid=GA1.2.909392301.1715123900; _gat_UA-132403652-1=1; _ga_XCZNY5NT2G=GS1.2.1715123901.1.0.1715123901.0.0.0
Source: global traffic	HTTP traffic detected: GET /about-us/our-story HTTP/1.1Host: www.gilardi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=Lax; _ga=GA1.2.715666436.1715123900; _gid=GA1.2.909392301.1715123900; _gat_UA-132403652-1=1; _ga_XCZNY5NT2G=GS1.2.1715123901.1.0.1715123901.0.0.0
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/1f7fa766134846da8a4ed9d3aaf54ffc/52e034004117ab1020b12bfc3dfb99ab/team-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1Host: content-images.computershare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/0abb65e242eb4242850a708671fc57bb/bfe60ad8f5fde227293570f6a72626b3/column-regulatory-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1Host: content-images.computershare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/6d38f371887443488c98d49ec4649805/feb8a9e6cac99987cf1575af6257110b/idea-lightbulb-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1Host: content-images.computershare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/831a25f085af4e0e9f8b354be3cf19b6/9774d186295f1ab7ba69c6dc29bde179/support-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1Host: content-images.computershare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/22cb14c2104849e6aa27d39f948d2c79/99929ad7b65a8870a946a4633f09cf80/OurStory.jpg?w=1920&h=850&fit=fill&f=center HTTP/1.1Host: content-images.computershare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /site/v3/7792/99885/1/1/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/our-story HTTP/1.1Host: l.evidon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/6d38f371887443488c98d49ec4649805/feb8a9e6cac99987cf1575af6257110b/idea-lightbulb-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1Host: content-images.computershare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/831a25f085af4e0e9f8b354be3cf19b6/9774d186295f1ab7ba69c6dc29bde179/support-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1Host: content-images.computershare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /site/v3/7792/99885/1/2/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/our-story HTTP/1.1Host: l.evidon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /site/v3/7792/99885/1/4/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/our-story HTTP/1.1Host: l.evidon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/1f7fa766134846da8a4ed9d3aaf54ffc/52e034004117ab1020b12bfc3dfb99ab/team-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1Host: content-images.computershare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/0abb65e242eb4242850a708671fc57bb/bfe60ad8f5fde227293570f6a72626b3/column-regulatory-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1Host: content-images.computershare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/22cb14c2104849e6aa27d39f948d2c79/99929ad7b65a8870a946a4633f09cf80/OurStory.jpg?w=1920&h=850&fit=fill&f=center HTTP/1.1Host: content-images.computershare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /about-us/our-team HTTP/1.1Host: www.gilardi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=Lax; SameSite=Lax; _ga=GA1.2.715666436.1715123900; _gid=GA1.2.909392301.1715123900; _gat_UA-132403652-1=1; _ga_XCZNY5NT2G=GS1.2.1715123901.1.1.1715123914.0.0.0
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/2a73440ea1134e808185dce447956100/6e0e997e957c3a30053bcbab7637e3b7/OurTeam.jpg?w=1920&h=850&fit=fill&f=center HTTP/1.1Host: content-images.computershare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/e5eb7c23d4bf4c0db739751135d7bc72/bc48a7154c6ffcc3fef26c56a0793b39/GMullins_GreyBackground.jpg?f=top&fit=thumb&w=300&h=300 HTTP/1.1Host: content-images.computershare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/7bafdfe337c247b38eb5a0949fd1c4aa/96659b8dc33ff89b04e2419e6c74fd49/BButvick_GreyBackground_website.jpg?f=top&fit=thumb&w=300&h=300 HTTP/1.1Host: content-images.computershare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/7cd77d1eff7c4f0fb2fbf364f4597505/248b9d293a526fa545e2b3f8b71c6f2e/PCrudo_GreyBackground2.jpg?f=top&fit=thumb&w=300&h=300 HTTP/1.1Host: content-images.computershare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/799b781401cb477b80a677fefce37de9/767bd69590f2106f78073c5d343560b3/LMcDermott_GreyBackground2.jpg?f=top&fit=thumb&w=300&h=300 HTTP/1.1Host: content-images.computershare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/ade2c395500d4139b3f3a5c76f74c11d/cc3ddea162b4fddd32a1bf5c9aa49bc5/MFerguson_GreyBackground2.jpg?f=top&fit=thumb&w=300&h=300 HTTP/1.1Host: content-images.computershare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/fa838bb1ec4d42f79e62f841fffa0d0e/a88f6c1acfbf2ebc98c4e0a421288468/DBurke_GreyBackground2.jpg?f=top&fit=thumb&w=300&h=300 HTTP/1.1Host: content-images.computershare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/7bafdfe337c247b38eb5a0949fd1c4aa/96659b8dc33ff89b04e2419e6c74fd49/BButvick_GreyBackground_website.jpg?f=top&fit=thumb&w=300&h=300 HTTP/1.1Host: content-images.computershare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/799b781401cb477b80a677fefce37de9/767bd69590f2106f78073c5d343560b3/LMcDermott_GreyBackground2.jpg?f=top&fit=thumb&w=300&h=300 HTTP/1.1Host: content-images.computershare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/7cd77d1eff7c4f0fb2fbf364f4597505/248b9d293a526fa545e2b3f8b71c6f2e/PCrudo_GreyBackground2.jpg?f=top&fit=thumb&w=300&h=300 HTTP/1.1Host: content-images.computershare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /site/v3/7792/99885/1/1/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/our-team HTTP/1.1Host: l.evidon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/ade2c395500d4139b3f3a5c76f74c11d/cc3ddea162b4fddd32a1bf5c9aa49bc5/MFerguson_GreyBackground2.jpg?f=top&fit=thumb&w=300&h=300 HTTP/1.1Host: content-images.computershare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /site/v3/7792/99885/1/2/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/our-team HTTP/1.1Host: l.evidon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/e5eb7c23d4bf4c0db739751135d7bc72/bc48a7154c6ffcc3fef26c56a0793b39/GMullins_GreyBackground.jpg?f=top&fit=thumb&w=300&h=300 HTTP/1.1Host: content-images.computershare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /site/v3/7792/99885/1/4/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/our-team HTTP/1.1Host: l.evidon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/2a73440ea1134e808185dce447956100/6e0e997e957c3a30053bcbab7637e3b7/OurTeam.jpg?w=1920&h=850&fit=fill&f=center HTTP/1.1Host: content-images.computershare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/fa838bb1ec4d42f79e62f841fffa0d0e/a88f6c1acfbf2ebc98c4e0a421288468/DBurke_GreyBackground2.jpg?f=top&fit=thumb&w=300&h=300 HTTP/1.1Host: content-images.computershare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /about-us/contact-us HTTP/1.1Host: www.gilardi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=Lax; SameSite=Lax; _ga=GA1.2.715666436.1715123900; _gid=GA1.2.909392301.1715123900; _gat_UA-132403652-1=1; _ga_XCZNY5NT2G=GS1.2.1715123901.1.1.1715123918.0.0.0
Source: global traffic	HTTP traffic detected: GET /about-us/contact-us HTTP/1.1Host: www.gilardi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=Lax; SameSite=Lax; _ga=GA1.2.715666436.1715123900; _gid=GA1.2.909392301.1715123900; _gat_UA-132403652-1=1; _ga_XCZNY5NT2G=GS1.2.1715123901.1.1.1715123918.0.0.0
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/79d72135a6c74119b571fce1437d7d3d/d2186c148b26f7b6500d6ac9203f5941/ContactUs.jpg?w=1920&h=850&fit=fill&f=center HTTP/1.1Host: content-images.computershare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /site/v3/7792/99885/1/1/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/contact-us HTTP/1.1Host: l.evidon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /site/v3/7792/99885/1/2/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/contact-us HTTP/1.1Host: l.evidon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh96rkuu9740/79d72135a6c74119b571fce1437d7d3d/d2186c148b26f7b6500d6ac9203f5941/ContactUs.jpg?w=1920&h=850&fit=fill&f=center HTTP/1.1Host: content-images.computershare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /site/v3/7792/99885/1/4/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/contact-us HTTP/1.1Host: l.evidon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gilardi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_138.2.dr, chromecache_104.2.dr

String found in binary or memory: return b}yC.K="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.factaclassactionsettlement.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ajax.aspnetcdn.com
Source: global traffic	DNS traffic detected: DNS query: www.gilardi.com
Source: global traffic	DNS traffic detected: DNS query: content-images.computershare.com
Source: global traffic	DNS traffic detected: DNS query: c.evidon.com
Source: global traffic	DNS traffic detected: DNS query: l.evidon.com

Source: chromecache_130.2.dr	String found in binary or memory: http://65.74.160.50/css/TopNavLightBlueTheme.css
Source: chromecache_95.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Accordion#theming
Source: chromecache_95.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Autocomplete#theming
Source: chromecache_95.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Button#theming
Source: chromecache_95.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Datepicker#theming
Source: chromecache_95.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Dialog#theming
Source: chromecache_95.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Menu#theming
Source: chromecache_95.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Progressbar#theming
Source: chromecache_95.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Resizable#theming
Source: chromecache_95.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Selectable#theming
Source: chromecache_95.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Slider#theming
Source: chromecache_95.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Tabs#theming
Source: chromecache_95.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Theming/API
Source: chromecache_95.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_95.2.dr	String found in binary or memory: http://jqueryui.com/about)
Source: chromecache_95.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?ffDefault=Lucida%20Grande
Source: chromecache_130.2.dr	String found in binary or memory: http://www.barbrisettlement.com/Content/jquery-ui.css
Source: chromecache_111.2.dr	String found in binary or memory: http://www.gcpcapital.com
Source: chromecache_104.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_104.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_130.2.dr	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/jquery.ui/1.8.20/themes/redmond/jquery-ui.css
Source: chromecache_91.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_138.2.dr, chromecache_104.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_111.2.dr	String found in binary or memory: https://content-images.computershare.com/eh96rkuu9740/04139ec921c04b6394616c7a40f48da6/dd23ce4ffccad
Source: chromecache_112.2.dr	String found in binary or memory: https://content-images.computershare.com/eh96rkuu9740/1f7fa766134846da8a4ed9d3aaf54ffc/52e034004117a
Source: chromecache_112.2.dr	String found in binary or memory: https://content-images.computershare.com/eh96rkuu9740/22cb14c2104849e6aa27d39f948d2c79/99929ad7b65a8
Source: chromecache_111.2.dr	String found in binary or memory: https://content-images.computershare.com/eh96rkuu9740/24ada858e0424dc9a6fe522196881460/163c84ee9d3bd
Source: chromecache_111.2.dr	String found in binary or memory: https://content-images.computershare.com/eh96rkuu9740/2Cpsx0dFpuasUFp8YANLmZ/cad4a1a0a1335e1e8dfad49
Source: chromecache_147.2.dr	String found in binary or memory: https://content-images.computershare.com/eh96rkuu9740/2a73440ea1134e808185dce447956100/6e0e997e957c3
Source: chromecache_147.2.dr, chromecache_112.2.dr, chromecache_111.2.dr, chromecache_101.2.dr	String found in binary or memory: https://content-images.computershare.com/eh96rkuu9740/2sbDjiRdHpvTtxGaLuZ8rN/25556300175ed902a13b05f
Source: chromecache_147.2.dr, chromecache_112.2.dr, chromecache_111.2.dr, chromecache_101.2.dr	String found in binary or memory: https://content-images.computershare.com/eh96rkuu9740/4MM44Kmv09GRC2pECMerDk/ca7b09a8c91e93d8a207ff9
Source: chromecache_111.2.dr	String found in binary or memory: https://content-images.computershare.com/eh96rkuu9740/5b560a5e95534bfdab06d2bf9d9c8622/8adc9b8b9e39e
Source: chromecache_112.2.dr, chromecache_111.2.dr	String found in binary or memory: https://content-images.computershare.com/eh96rkuu9740/5e5bdf7536d04306a8b16efabf3fe8e0/0a1e6991a00de
Source: chromecache_147.2.dr	String found in binary or memory: https://content-images.computershare.com/eh96rkuu9740/799b781401cb477b80a677fefce37de9/767bd69590f21
Source: chromecache_101.2.dr	String found in binary or memory: https://content-images.computershare.com/eh96rkuu9740/79d72135a6c74119b571fce1437d7d3d/d2186c148b26f
Source: chromecache_147.2.dr	String found in binary or memory: https://content-images.computershare.com/eh96rkuu9740/7bafdfe337c247b38eb5a0949fd1c4aa/96659b8dc33ff
Source: chromecache_147.2.dr	String found in binary or memory: https://content-images.computershare.com/eh96rkuu9740/7cd77d1eff7c4f0fb2fbf364f4597505/248b9d293a526
Source: chromecache_112.2.dr, chromecache_111.2.dr	String found in binary or memory: https://content-images.computershare.com/eh96rkuu9740/92430c33e214475385fd3a25214e2f30/bf6e82bf958a8
Source: chromecache_147.2.dr	String found in binary or memory: https://content-images.computershare.com/eh96rkuu9740/ade2c395500d4139b3f3a5c76f74c11d/cc3ddea162b4f
Source: chromecache_111.2.dr	String found in binary or memory: https://content-images.computershare.com/eh96rkuu9740/c9117c1092534fcc9273232233df0c5b/cd4bbb343e362
Source: chromecache_147.2.dr	String found in binary or memory: https://content-images.computershare.com/eh96rkuu9740/e5eb7c23d4bf4c0db739751135d7bc72/bc48a7154c6ff
Source: chromecache_147.2.dr	String found in binary or memory: https://content-images.computershare.com/eh96rkuu9740/fa838bb1ec4d42f79e62f841fffa0d0e/a88f6c1acfbf2
Source: chromecache_111.2.dr	String found in binary or memory: https://content-images.computershare.com/eh96rkuu9740/fffccb33654140bda7841d0e2fed9270/fd33b7f34c9c5
Source: chromecache_119.2.dr	String found in binary or memory: https://delvefonts.comThis
Source: chromecache_115.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_115.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/customize/)
Source: chromecache_130.2.dr	String found in binary or memory: https://gilardiconnect.com/Privacy/privacy.html
Source: chromecache_119.2.dr	String found in binary or memory: https://github.com/RedHatOfficial/Overpass)OverpassRegular4.000;DELV;Overpass-RegularOverpass
Source: chromecache_104.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_138.2.dr, chromecache_104.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_119.2.dr	String found in binary or memory: https://scripts.sil.org/OFLhttps://scripts.sil.org/OFLIf
Source: chromecache_104.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_104.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_91.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_91.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_138.2.dr, chromecache_104.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_130.2.dr	String found in binary or memory: https://www.gilardi.com
Source: chromecache_111.2.dr	String found in binary or memory: https://www.gilardi.com/
Source: chromecache_101.2.dr	String found in binary or memory: https://www.gilardi.com/about-us/contact-us
Source: chromecache_112.2.dr	String found in binary or memory: https://www.gilardi.com/about-us/our-story
Source: chromecache_147.2.dr	String found in binary or memory: https://www.gilardi.com/about-us/our-team
Source: chromecache_111.2.dr	String found in binary or memory: https://www.gilardi.com/active-cases
Source: chromecache_138.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_91.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_91.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_91.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_104.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_91.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_138.2.dr, chromecache_104.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_104.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_91.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_97.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_111.2.dr	String found in binary or memory: https://www.kccllc.com/news/kcc-announces-acquisition-led-by-gcp-capital-partners
Source: chromecache_104.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 96.7.158.101:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.192.208.109:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49698 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@21/128@22/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2496 --field-trial-handle=2304,i,9999863175344410500,9655413472271620124,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.factaclassactionsettlement.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2496 --field-trial-handle=2304,i,9999863175344410500,9655413472271620124,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://www.factaclassactionsettlement.com/	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://www.google.%/ads/ga-audiences	0%	URL Reputation	safe
http://65.74.160.50/css/TopNavLightBlueTheme.css	0%	Avira URL Cloud	safe
https://www.gilardi.com/fonts/fc248138-00ce-4270-ac78-e72164153e7f-5.woff2	0%	Avira URL Cloud	safe
https://www.gilardi.com/js/gtm.js	0%	Avira URL Cloud	safe
https://gilardiconnect.com/Privacy/privacy.html	0%	Avira URL Cloud	safe
https://www.gilardi.com/img/favicon.png	0%	Avira URL Cloud	safe
https://delvefonts.comThis	0%	Avira URL Cloud	safe
http://www.gcpcapital.com	0%	Avira URL Cloud	safe
http://www.barbrisettlement.com/Content/jquery-ui.css	0%	Avira URL Cloud	safe
https://www.factaclassactionsettlement.com/css/images/currentUnderline.gif	0%	Avira URL Cloud	safe
https://www.gilardi.com/js/main.min.js	0%	Avira URL Cloud	safe
https://www.gilardi.com/active-cases	0%	Avira URL Cloud	safe
https://www.factaclassactionsettlement.com/css/images/bkggrad.png	0%	Avira URL Cloud	safe
https://www.factaclassactionsettlement.com/css/TopNavLightBlueTheme.css	0%	Avira URL Cloud	safe
https://www.gilardi.com/fonts/overpass-variable.ttf	0%	Avira URL Cloud	safe
https://www.factaclassactionsettlement.com/favicon.ico	0%	Avira URL Cloud	safe
https://www.gilardi.com/css/gilardi-c16ca2530e753c5011b74bac99660499.css	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
privacycollector-production-457481513.us-east-1.elb.amazonaws.com	44.209.29.87	true	false	high
www.factaclassactionsettlement.com	172.67.213.176	true	false	unknown
d2bsfniek8gojs.cloudfront.net	99.86.38.13	true	false	high
www.google.com	142.251.215.228	true	false	high
part-0042.t-0009.t-msedge.net	13.107.246.70	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
c.evidon.com	unknown	unknown	false	high
www.gilardi.com	unknown	unknown	false	unknown
l.evidon.com	unknown	unknown	false	high
ajax.aspnetcdn.com	unknown	unknown	false	high
content-images.computershare.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://content-images.computershare.com/eh96rkuu9740/7cd77d1eff7c4f0fb2fbf364f4597505/248b9d293a526fa545e2b3f8b71c6f2e/PCrudo_GreyBackground2.jpg?f=top&fit=thumb&w=300&h=300	false		high
https://l.evidon.com/site/v3/7792/99885/1/1/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/contact-us	false		high
https://www.gilardi.com/about-us/our-story	false		unknown
https://content-images.computershare.com/eh96rkuu9740/ade2c395500d4139b3f3a5c76f74c11d/cc3ddea162b4fddd32a1bf5c9aa49bc5/MFerguson_GreyBackground2.jpg?f=top&fit=thumb&w=300&h=300	false		high
https://content-images.computershare.com/eh96rkuu9740/5e5bdf7536d04306a8b16efabf3fe8e0/0a1e6991a00de59e643f09b6d204322a/solid-navy.svg	false		high
https://www.gilardi.com/fonts/fc248138-00ce-4270-ac78-e72164153e7f-5.woff2	false	Avira URL Cloud: safe	unknown
https://l.evidon.com/site/v3/7792/99885/1/1/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/	false		high
https://content-images.computershare.com/eh96rkuu9740/79d72135a6c74119b571fce1437d7d3d/d2186c148b26f7b6500d6ac9203f5941/ContactUs.jpg?w=1920&h=850&fit=fill&f=center	false		high
https://www.gilardi.com/	false		unknown
https://www.gilardi.com/js/gtm.js	false	Avira URL Cloud: safe	unknown
https://content-images.computershare.com/eh96rkuu9740/6cd605275a334a6ab1ececf7415627f0/9eed86d3c59e67c8456e0f57d75ffe82/target-icon-navy.svg?w=300&h=300&fit=fill&f=faces	false		high
https://content-images.computershare.com/eh96rkuu9740/e5eb7c23d4bf4c0db739751135d7bc72/bc48a7154c6ffcc3fef26c56a0793b39/GMullins_GreyBackground.jpg?f=top&fit=thumb&w=300&h=300	false		high
https://l.evidon.com/site/v3/7792/99885/1/1/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/our-story	false		high
https://l.evidon.com/site/v3/7792/99885/1/4/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/our-story	false		high
https://l.evidon.com/site/v3/7792/99885/1/2/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/	false		high
https://www.gilardi.com/img/favicon.png	false	Avira URL Cloud: safe	unknown
https://www.factaclassactionsettlement.com/css/images/currentUnderline.gif	false	Avira URL Cloud: safe	unknown
https://www.factaclassactionsettlement.com/	false		unknown
https://content-images.computershare.com/eh96rkuu9740/2sbDjiRdHpvTtxGaLuZ8rN/25556300175ed902a13b05f86f3e304c/gilardi_logo.svg	false		high
https://content-images.computershare.com/eh96rkuu9740/5b560a5e95534bfdab06d2bf9d9c8622/8adc9b8b9e39e7b77e9b37986e331de4/lightbulb-icon-navy.svg?w=300&h=300&fit=fill&f=faces	false		high
https://l.evidon.com/site/v3/7792/99885/1/4/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/	false		high
https://www.gilardi.com/js/main.min.js	false	Avira URL Cloud: safe	unknown
https://content-images.computershare.com/eh96rkuu9740/04139ec921c04b6394616c7a40f48da6/dd23ce4ffccade0fe0b6f6af64d3c548/checklist-icon-navy.svg?w=300&h=300&fit=fill&f=faces	false		high
https://content-images.computershare.com/eh96rkuu9740/2a73440ea1134e808185dce447956100/6e0e997e957c3a30053bcbab7637e3b7/OurTeam.jpg?w=1920&h=850&fit=fill&f=center	false		high
https://content-images.computershare.com/eh96rkuu9740/7bafdfe337c247b38eb5a0949fd1c4aa/96659b8dc33ff89b04e2419e6c74fd49/BButvick_GreyBackground_website.jpg?f=top&fit=thumb&w=300&h=300	false		high
https://www.factaclassactionsettlement.com/css/TopNavLightBlueTheme.css	false	Avira URL Cloud: safe	unknown
https://content-images.computershare.com/eh96rkuu9740/6d38f371887443488c98d49ec4649805/feb8a9e6cac99987cf1575af6257110b/idea-lightbulb-icon-navy.svg?w=300&h=300&fit=fill&f=faces	false		high
https://www.gilardi.com/about-us/our-team	false		unknown
https://www.gilardi.com/css/gilardi-c16ca2530e753c5011b74bac99660499.css	false	Avira URL Cloud: safe	unknown
https://l.evidon.com/site/v3/7792/99885/1/2/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/contact-us	false		high
https://l.evidon.com/site/v3/7792/99885/1/4/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/our-team	false		high
https://content-images.computershare.com/eh96rkuu9740/24ada858e0424dc9a6fe522196881460/163c84ee9d3bddfeb1bbc9125472cd0f/lock-icon-navy.svg?w=300&h=300&fit=fill&f=faces	false		high
https://l.evidon.com/site/v3/7792/99885/1/2/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/our-story	false		high
https://www.gilardi.com/fonts/overpass-variable.ttf	false	Avira URL Cloud: safe	unknown
https://content-images.computershare.com/eh96rkuu9740/22cb14c2104849e6aa27d39f948d2c79/99929ad7b65a8870a946a4633f09cf80/OurStory.jpg?w=1920&h=850&fit=fill&f=center	false		high
https://l.evidon.com/site/v3/7792/99885/1/4/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/contact-us	false		high
https://l.evidon.com/site/v3/7792/99885/1/2/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/our-team	false		high
https://content-images.computershare.com/eh96rkuu9740/fffccb33654140bda7841d0e2fed9270/fd33b7f34c9c59ef94b94c31d7fce115/partnership-handshake-icon-navy.svg?w=300&h=300&fit=fill&f=faces	false		high
https://content-images.computershare.com/eh96rkuu9740/2Cpsx0dFpuasUFp8YANLmZ/cad4a1a0a1335e1e8dfad49ec6f5531d/logo-gcp.png	false		high
https://www.gilardi.com/about-us/contact-us	false		unknown
https://www.factaclassactionsettlement.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://content-images.computershare.com/eh96rkuu9740/831a25f085af4e0e9f8b354be3cf19b6/9774d186295f1ab7ba69c6dc29bde179/support-icon-navy.svg?w=300&h=300&fit=fill&f=faces	false		high
https://www.factaclassactionsettlement.com/css/images/bkggrad.png	false	Avira URL Cloud: safe	unknown
https://content-images.computershare.com/eh96rkuu9740/0abb65e242eb4242850a708671fc57bb/bfe60ad8f5fde227293570f6a72626b3/column-regulatory-icon-navy.svg?w=300&h=300&fit=fill&f=faces	false		high
https://l.evidon.com/site/v3/7792/99885/1/1/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/our-team	false		high
https://content-images.computershare.com/eh96rkuu9740/92430c33e214475385fd3a25214e2f30/bf6e82bf958a8707c4e7d2fcbc11343b/solid-kcc-teal.svg	false		high
https://content-images.computershare.com/eh96rkuu9740/c9117c1092534fcc9273232233df0c5b/cd4bbb343e36272e3e0525f13b2ce9f7/Welcome.jpg?w=1920&h=850&fit=fill&f=center	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://65.74.160.50/css/TopNavLightBlueTheme.css	chromecache_130.2.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_104.2.dr	false		high
http://docs.jquery.com/UI/Theming/API	chromecache_95.2.dr	false		high
http://docs.jquery.com/UI/Autocomplete#theming	chromecache_95.2.dr	false		high
http://docs.jquery.com/UI/Datepicker#theming	chromecache_95.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_91.2.dr	false		high
https://content-images.computershare.com/eh96rkuu9740/7bafdfe337c247b38eb5a0949fd1c4aa/96659b8dc33ff	chromecache_147.2.dr	false		high
https://www.google.com	chromecache_104.2.dr	false		high
http://docs.jquery.com/UI/Dialog#theming	chromecache_95.2.dr	false		high
https://gilardiconnect.com/Privacy/privacy.html	chromecache_130.2.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_91.2.dr	false		high
https://content-images.computershare.com/eh96rkuu9740/2Cpsx0dFpuasUFp8YANLmZ/cad4a1a0a1335e1e8dfad49	chromecache_111.2.dr	false		high
http://www.gcpcapital.com	chromecache_111.2.dr	false	Avira URL Cloud: safe	unknown
https://delvefonts.comThis	chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown
https://content-images.computershare.com/eh96rkuu9740/5e5bdf7536d04306a8b16efabf3fe8e0/0a1e6991a00de	chromecache_112.2.dr, chromecache_111.2.dr	false		high
http://www.barbrisettlement.com/Content/jquery-ui.css	chromecache_130.2.dr	false	Avira URL Cloud: safe	unknown
https://www.kccllc.com/news/kcc-announces-acquisition-led-by-gcp-capital-partners	chromecache_111.2.dr	false		high
http://jqueryui.com/themeroller/?ffDefault=Lucida%20Grande	chromecache_95.2.dr	false		high
https://adservice.google.com/pagead/regclk	chromecache_104.2.dr	false		high
http://docs.jquery.com/UI/Resizable#theming	chromecache_95.2.dr	false		high
https://cct.google/taggy/agent.js	chromecache_138.2.dr, chromecache_104.2.dr	false	URL Reputation: safe	unknown
https://ajax.aspnetcdn.com/ajax/jquery.ui/1.8.20/themes/redmond/jquery-ui.css	chromecache_130.2.dr	false		high
https://content-images.computershare.com/eh96rkuu9740/04139ec921c04b6394616c7a40f48da6/dd23ce4ffccad	chromecache_111.2.dr	false		high
https://www.google.%/ads/ga-audiences	chromecache_91.2.dr	false	URL Reputation: safe	low
https://content-images.computershare.com/eh96rkuu9740/fffccb33654140bda7841d0e2fed9270/fd33b7f34c9c5	chromecache_111.2.dr	false		high
http://jqueryui.com/about)	chromecache_95.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_104.2.dr	false		high
http://docs.jquery.com/UI/Accordion#theming	chromecache_95.2.dr	false		high
https://content-images.computershare.com/eh96rkuu9740/2sbDjiRdHpvTtxGaLuZ8rN/25556300175ed902a13b05f	chromecache_147.2.dr, chromecache_112.2.dr, chromecache_111.2.dr, chromecache_101.2.dr	false		high
http://jquery.org/license	chromecache_95.2.dr	false		high
https://content-images.computershare.com/eh96rkuu9740/22cb14c2104849e6aa27d39f948d2c79/99929ad7b65a8	chromecache_112.2.dr	false		high
https://scripts.sil.org/OFLhttps://scripts.sil.org/OFLIf	chromecache_119.2.dr	false		high
https://content-images.computershare.com/eh96rkuu9740/fa838bb1ec4d42f79e62f841fffa0d0e/a88f6c1acfbf2	chromecache_147.2.dr	false		high
http://docs.jquery.com/UI/Selectable#theming	chromecache_95.2.dr	false		high
http://docs.jquery.com/UI/Progressbar#theming	chromecache_95.2.dr	false		high
http://docs.jquery.com/UI/Tabs#theming	chromecache_95.2.dr	false		high
https://content-images.computershare.com/eh96rkuu9740/799b781401cb477b80a677fefce37de9/767bd69590f21	chromecache_147.2.dr	false		high
http://docs.jquery.com/UI/Button#theming	chromecache_95.2.dr	false		high
https://content-images.computershare.com/eh96rkuu9740/c9117c1092534fcc9273232233df0c5b/cd4bbb343e362	chromecache_111.2.dr	false		high
https://www.gilardi.com/active-cases	chromecache_111.2.dr	false	Avira URL Cloud: safe	unknown
https://content-images.computershare.com/eh96rkuu9740/4MM44Kmv09GRC2pECMerDk/ca7b09a8c91e93d8a207ff9	chromecache_147.2.dr, chromecache_112.2.dr, chromecache_111.2.dr, chromecache_101.2.dr	false		high
https://content-images.computershare.com/eh96rkuu9740/ade2c395500d4139b3f3a5c76f74c11d/cc3ddea162b4f	chromecache_147.2.dr	false		high
http://docs.jquery.com/UI/Slider#theming	chromecache_95.2.dr	false		high
https://getbootstrap.com/docs/3.4/customize/)	chromecache_115.2.dr	false		high
https://content-images.computershare.com/eh96rkuu9740/92430c33e214475385fd3a25214e2f30/bf6e82bf958a8	chromecache_112.2.dr, chromecache_111.2.dr	false		high
https://content-images.computershare.com/eh96rkuu9740/7cd77d1eff7c4f0fb2fbf364f4597505/248b9d293a526	chromecache_147.2.dr	false		high
https://github.com/RedHatOfficial/Overpass)OverpassRegular4.000;DELV;Overpass-RegularOverpass	chromecache_119.2.dr	false		high
https://tagassistant.google.com/	chromecache_91.2.dr	false		high
https://content-images.computershare.com/eh96rkuu9740/79d72135a6c74119b571fce1437d7d3d/d2186c148b26f	chromecache_101.2.dr	false		high
https://content-images.computershare.com/eh96rkuu9740/e5eb7c23d4bf4c0db739751135d7bc72/bc48a7154c6ff	chromecache_147.2.dr	false		high
https://getbootstrap.com/)	chromecache_115.2.dr	false		high
https://content-images.computershare.com/eh96rkuu9740/24ada858e0424dc9a6fe522196881460/163c84ee9d3bd	chromecache_111.2.dr	false		high
https://content-images.computershare.com/eh96rkuu9740/5b560a5e95534bfdab06d2bf9d9c8622/8adc9b8b9e39e	chromecache_111.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
99.86.38.13	d2bsfniek8gojs.cloudfront.net	United States	16509	AMAZON-02US	false
44.209.29.87	privacycollector-production-457481513.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
99.86.38.11	unknown	United States	16509	AMAZON-02US	false
172.67.213.176	www.factaclassactionsettlement.com	United States	13335	CLOUDFLARENETUS	false
13.107.246.70	part-0042.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.251.215.228	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.21.93.178	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1437892
Start date and time:	2024-05-08 01:17:09 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 10s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.factaclassactionsettlement.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@21/128@22/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.gilardi.com/ Browse: https://www.gilardi.com/about-us/our-story Browse: https://www.gilardi.com/about-us/our-team Browse: https://www.gilardi.com/about-us/contact-us

Warnings

Exclude process from analysis (whitelisted): WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.211.227, 142.250.217.78, 173.194.203.84, 34.104.35.123, 152.199.4.33, 52.165.165.26, 199.232.210.172, 192.229.211.108, 20.166.126.56, 142.251.211.232, 142.251.215.234, 142.251.33.74, 142.250.69.202, 172.217.14.202, 142.251.211.234, 142.251.33.106, 142.250.217.106, 142.250.217.74, 23.41.4.89, 23.41.4.80, 142.250.69.206, 142.251.211.238, 20.3.187.198
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, clients2.google.com, mscomajax.vo.msecnd.net, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, e119011.b.akamaiedge.net, sls.update.microsoft.com, update.googleapis.com, azurefd-t-prod.trafficmanager.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, cs22.wpc.v0cdn.net, ctldl.windowsupdate.com.delivery.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, newwildcard.evidon.com.edgekey.net, clients.l.google.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: http://www.factaclassactionsettlement.com/

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 9 x 108, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	626
Entropy (8bit):	7.34569232949579
Encrypted:	false
SSDEEP:	12:6v/7Uf2s/6TrnBdviQzS8SVtY6WGG8V0asv+BJLhRG1xQvufG0Ipc:N2s/6HBd6+g0iG8GPQRixIu+0Ipc
MD5:	33ED93F430E1651F83A8D4033D95BCB5
SHA1:	D4DD4684B91E6C86751A4895F392279E56976A96
SHA-256:	9A66233E2D047D59C6C05EF6FED6AFF83FF8A0F2E85ED1373EDB4CB972D700F7
SHA-512:	C83BCF6FC19FF6280C28244E6D96B2BBD54AA4CF6CF98D631828E0533C7F05275779F67A133214231AEAD94B90E7117A847943474295C8A66D70AC45F421DC1E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......l.............sRGB.........bKGD..............pHYs.................tIME.....2.^>$5....tEXtComment.Created with GIMPW.......IDATH..WAr.1..X^.G..}A.=t.C....o2=..v@.....?...............u.....dy.pa]....'.N....g.;..g...8..E...3d.cM..w...\|....xx......)...i),LQ:....!:..#/1M.....U.7.*.3pc..%w.d&KSN=.-(.......Af..9....TNi0...T.....T.7'.3.J2....'..T...(..j..;c6.J.n...I.x.d..#X...f...........O.<b...K...u_:{.E.(....66.L..Q=w\T........}...T.M.cH...,=..N.l..LK5...D......4...M.....i{&....U..,m.]..vd.M.k......5B.k...8D7.....S.._...@.%XE5a.k./@.sA..>:5a<%.e.w.I..+.uth........../...^#...t....IEND.B`.

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (6260)
Category:	downloaded
Size (bytes):	15637
Entropy (8bit):	5.401098382264186
Encrypted:	false
SSDEEP:	384:wxqyZ6H2bzMmg35WB5Mm5Mkn9+Zn9+UYJqEqBJqeq4qZe2Kfdv+Ir5+IrB+IrV+1:wxqyZ6HGqIn9+Zn9+FqEqDqeq4qkfdvu
MD5:	2D79BAC46492E4D75C1255DE6B287358
SHA1:	238EE5627EF11362DECF033F3108944A8234F88F
SHA-256:	CEE38DD06739A2BDA280611918BD54D2960B054A285041C8058CD3F4BBC7ADD1
SHA-512:	853B6BEE72F08D70A551E2BF138EA142A243B3C3242DB1D2FC62C42229B13BD777E3F19E8B71F719FF5C88230CCA3875B21D45B6420986683FD236A8454AA2DE
Malicious:	false
Reputation:	low
URL:	https://www.gilardi.com/about-us/contact-us
Preview:	<!DOCTYPE html><html><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><title>Contact us</title><link rel="icon" type="image/png" href="/img/favicon.png"/><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/><meta property="og:title" content="Contact us"/><meta property="og:image" content="https://content-images.computershare.com/eh96rkuu9740/79d72135a6c74119b571fce1437d7d3d/d2186c148b26f7b6500d6ac9203f5941/ContactUs.jpg"/><meta property="og:type" content="website"/><link rel="canonical" href="https://www.gilardi.com/about-us/contact-us"/><meta property="og:url" content="https://www.gilardi.com/about-us/contact-us"/><noscript><style>.popup__modal {display:block; position: fixed; top: 0; left: 0; background-color: rgba(0, 0, 0, 0.8); width: 100%; height: 100%; z-index: 12;}.popup__modal-inner{ background-color: #fff; text-align: center; position: relative; padding: 45px; box-shadow: 0 5px 15px rgb(0 0 0 / 50%);border: 1px solid rgba(0, 0, 0, 0.2)

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 4 x 3
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	3.889962480580669
Encrypted:	false
SSDEEP:	3:CL7dX8SnTqngi8ib:AdX8STcgi8A
MD5:	E14D834672E8BC72BE2527B73AC796F8
SHA1:	EFFDCAA30349ABC8DFF5C6EB5BF4DD6E65C1B657
SHA-256:	8C4D6460ED2FA9873F21111469C9B64359F179DFD2200DB1D9374B5CBEF099AB
SHA-512:	468073EF4A0D145F145D28F717BCCEEF1BC65FA3584582F2AB2279AE383766D2F12090CD6C1B2FE9DBC2F75B3EFEFFA7293DFABFC9CAEF1ECFADF1A6A15DEAFD
Malicious:	false
Reputation:	low
URL:	https://www.factaclassactionsettlement.com/css/images/doubleunder.gif
Preview:	GIF89a...................!.......,.................;

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	505
Entropy (8bit):	5.066493179459564
Encrypted:	false
SSDEEP:	12:tvG1WQuV+Jm+ySpp4t4lLxxMl1+qqXlVT:tu1PuTbiTqqXlt
MD5:	8DF29F3DFB8749F21C310266998BAED8
SHA1:	1EA16CA01FB1A2CA86DAA7B03361A3E98F928D52
SHA-256:	278E91F3CC6A25A5631A321F182553A6485F0E0B3A28EDFF97C06B6C16045A26
SHA-512:	8DF699804C9EC9C0DD7E96332E15DD1DECA5A2392106FCFFA13A957A525ADB06280111DDEA5F8C36DD6997A289CB9C85A507E86682BBA2109AA081637C2ADD6E
Malicious:	false
Reputation:	low
URL:	https://content-images.computershare.com/eh96rkuu9740/24ada858e0424dc9a6fe522196881460/163c84ee9d3bddfeb1bbc9125472cd0f/lock-icon-navy.svg?w=300&h=300&fit=fill&f=faces
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M185,182.4a8.61,8.61,0,0,0-4.78,15.79,4.2,4.2,0,0,0-.06.61v18.33a5,5,0,0,0,10,0V198.8a5.16,5.16,0,0,0-.08-.8,8.61,8.61,0,0,0-5-15.6Z"/><path class="cls-1" d="M266.62,263.69H103.38V139.6H266.62ZM111,256.09H259V147.2H111Z"/><path class="cls-1" d="M240.64,139.6H233V122A48,48,0,1,0,137,122V139.6h-7.6V122a55.64,55.64,0,1,1,111.28,0Z"/></svg>

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	261485
Entropy (8bit):	5.573838861970614
Encrypted:	false
SSDEEP:	3072:nHQcFn0/VPLu0h2zNeHc/8HMth1FytS5sSONhZ6yjRAO5Gbpp9qAwlYRHZg8+r29:HVF6rgzNplGG2Z6yjRV5cpVyV2J7
MD5:	3F3F49C6AC2DEB56F7F09607FD923497
SHA1:	45178081310D1CF6DF24C3B7C09D64004EC9F447
SHA-256:	28BD5520AB2BB8E4DBE55276FB3011995228C95A899853BA41F6625A7C5DCB14
SHA-512:	BF9A36E70385B7D3EF277149F4A44B266816FC350EC8CCC7C5CB04453C31774EDE3A61209D6A94C8DD834F4E6C12D7F441F78537301D47496270F872F639D866
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-XCZNY5NT2G&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":"google.co.uk"},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":"google.co.uk"},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":8,"vtp_value":true,"tag_id":16},{"function":"__ogt_referral_exclusion","priority":8,"vtp_includeConditions":["list","gilardi\\.com"],"tag_id":18},{"function":"__ogt_session_timeout","priority":8,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":19},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"t

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1201
Entropy (8bit):	4.537547106699354
Encrypted:	false
SSDEEP:	24:tu1PurJxae/LCZycdr4PtlaQD/IYBVF7c3I6djGkXbl:0P7gGZysr4PtlNYIUjGkXbl
MD5:	E3D2183EE1C18406D283D179F2456CAD
SHA1:	37819E9A1EDA9512DA7A69D41B247283D40E8CB3
SHA-256:	4768ECD33AB6A707544C55D779CF8AF3A4A3F824A9F0298F650FDFDE7E1761F6
SHA-512:	4B5E353F384A0597A9BC93CE0E790B7CFF9044B39D33156B2CD900BF823E67E499645B96BA82FE1D639614665B8178F3DEBBC07DC0FDE01C321D00C62736D967
Malicious:	false
Reputation:	low
URL:	https://content-images.computershare.com/eh96rkuu9740/6cd605275a334a6ab1ececf7415627f0/9eed86d3c59e67c8456e0f57d75ffe82/target-icon-navy.svg?w=300&h=300&fit=fill&f=faces
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M185,305.22a3.8,3.8,0,0,1-3.8-3.8V274.89l-3-.19A110,110,0,0,1,75.4,171.79l-.19-3H48.56a3.81,3.81,0,0,1,0-7.61H75.21l.19-3A110,110,0,0,1,178.2,55.26l3-.19V28.57a3.8,3.8,0,0,1,7.6,0V55.06l3,.18a109.93,109.93,0,0,1,103,102.94l.19,3h26.4a3.81,3.81,0,0,1,0,7.61H295l-.19,3a109.93,109.93,0,0,1-103,102.93l-3,.18v26.52A3.8,3.8,0,0,1,185,305.22Zm67.84-133.55a68.05,68.05,0,0,1-61.14,61l-2.9.28V267.3l3.42-.23c50.59-3.49,91.43-44.27,95-94.86l.24-3.42H253.13Zm-169.79.54c3.54,50.46,44.26,91.23,94.72,94.84l3.43.24V233l-2.88-.29a68.12,68.12,0,0,1-60.91-61l-.28-2.88H82.81Zm102.07-67.68A60.45,60.45,0,1,0,245.58,165,60.51,60.51,0,0,0,185.12,104.53ZM188.8,97l2.9.28a68.06,68.06,0,0,1,61.14,61l.29,2.89h34.31l-.24-3.42a102.71,102.71,0,0,0-95-94.87l-3.42-.23Zm-11-34.07c-50.46,3.61-91.18,44.38-94.72,94.85l-.24,3.42h34.32l.28-2.89a68.12,68.12,0,0,1

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 450x450, segment length 16, baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	20316
Entropy (8bit):	7.895336611352067
Encrypted:	false
SSDEEP:	384:tYNg7kMdzYEK9ILKcy6tC8QLatt8cNBX5zaRLy5urk23OSvyCwc4FNIcO:tYyIMvKWKL6taLattXJ58B+GyMoJO
MD5:	FF9A20B1DC2DA3D8B3FA7972AF35833D
SHA1:	22E81D4A4750FDCA988D6ECE036DE9270737FD8C
SHA-256:	DB0D1BCA8751D00E634C4392C855B60AF20E53DEDE702F500E6BAA5A034CBE08
SHA-512:	A751D53BF77F0CB0445E269F7E32F3944A95FF31B8BEE1752DA7CA09B41620DBD843A4AA98792777BB00E8ED52ABE8533FE4B04438B17BBE1136129A509E7D89
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......none....mntrRGB XYZ ...........!acsp........IEC sRGB.......................-HP ................................................desc...D...tbXYZ........bTRC........dmdd........gXYZ...`....gTRC........lumi...t....meas.......$bkpt........rXYZ........rTRC........tech........vued........wtpt...h....cprt...\|...(chad.......,desc........sRGB IEC61966-2-1 withBPC...............................................................................XYZ ......$.........curv.......................#.(.-.2.7.;.@.E.J.O.T.Y.^.c.h.m.r.w.\|...............................................................%.+.2.8.>.E.L.R.Y.`.g.n.u.\|.........................................&./.8.A.K.T.].g.q.z...............................!.-.8.C.O.Z.f.r.~......................... .-.;.H.U.c.q.~.......................+.:.I.X.g.w.....................'.7.H.Y.j.{...................+.=.O.a.t...................2.F.Z.n.................%.:.O.d.y...............'.=.T.j...............".9.Q.i..........

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2012:10:22 16:03:57], baseline, precision 8, 16x16, components 3
Category:	dropped
Size (bytes):	22878
Entropy (8bit):	4.084578354778774
Encrypted:	false
SSDEEP:	96:+5JtL7rQrtPBsPI7TNpL7CdkckIOUcB2sc5GQq/tmSJv+WsNXrNXtNaCN26MT0Df:ITOtaUfMkZ/tmSJy53IYNMtKw02Kl6Uj
MD5:	3DDEFB1786E9EA496B932F0C28471AE3
SHA1:	1B9B1EBCDAA02D5633AE4EB420E79FCBFFB3FD79
SHA-256:	3CF5CAA799E6171C486F7B5BCA442C250F2CBCD93199B38D74DE466AF54D65E3
SHA-512:	567901E6F0ACB908C979BC337572AC10769AD1146194AE171528F836FC56C92F705F0EC3D65BC269BE849A04158CD8501915E67FBD9845CF34B24EB2B5D87248
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS2 Windows.2012:10:22 16:03:57....................................................................................&.(.........................................H.......H..........JFIF.....H.H......Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..vEX]....Y..MX.Ika..]f.w..r...k.+..u..9.5.k\.....w.<.n...S...o...3....e..\.;M..9.}nk...E.Y[.?~.MV.}[.....Pj..z.m..[.....

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	102813
Entropy (8bit):	5.1078138238819015
Encrypted:	false
SSDEEP:	768:8+XVQdYjDoxYLwDo1YX+w0+Y3kGo1YlwTflDmwQgOY/wBVNd3JI/um2/:d90wGpzqxIa
MD5:	319D2FB7D326E11CF501459066A853BA
SHA1:	050F7D9B6C5E0B6CFD0BF9C66D6887F7A5009F63
SHA-256:	8BF74A40463063A921888E3626083A4373DD6BDC064A8FDCBB73F1D1AD5E4194
SHA-512:	2DC309581AB0D50F822E71A40A6ED69EC68B9169644CAE9954E243C4AA826B4762F2F4E3AF9FB01AE983DE58EB8DEC627D79FEB0631CCB54BBA9EFBEF8A974DB
Malicious:	false
Reputation:	low
URL:	https://c.evidon.com/sitenotice/7792/snthemes.js
Preview:	(function(){var a={};a[7736]={link:{linkIcon:"https://c.evidon.com/pub/icong1.png",linkStyle:"cursor:pointer;text-decoration:none;font-size:12px;color:#444444;font-family:Arial;",mobileLinkIcon:"https://c.evidon.com/pub/icong1.png",mobileLinkStyle:"cursor:pointer;text-decoration:none;font-size:12px;color:#444444;font-family:Arial;",mobileShowIcon:false,showIcon:false},button:{buttonIcon:"https://c.evidon.com/pub/icong2.png",buttonStyle:"display:none;position:fixed;padding:0 10px;border:1px solid #d7d7d7;cursor:pointer;line-height:36px;text-decoration:none;background:#f1f1f1;font-size:12px;color:#444444;bottom:0;right:0;z-index:2147483600;font-family:Arial;margin:;",mobileButtonIcon:"https://c.evidon.com/pub/icong2.png",mobileButtonStyle:"display:none;position:fixed;padding:0 10px;border:1px solid #d7d7d7;cursor:pointer;line-height:36px;text-decoration:none;background:#f1f1f1;font-size:12px;color:#444444;bottom:0;right:0;z-index:2147483600;font-family:Arial;margin:;",mobileShowIcon:fals

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2012:10:22 16:03:57], baseline, precision 8, 16x16, components 3
Category:	downloaded
Size (bytes):	22878
Entropy (8bit):	4.084578354778774
Encrypted:	false
SSDEEP:	96:+5JtL7rQrtPBsPI7TNpL7CdkckIOUcB2sc5GQq/tmSJv+WsNXrNXtNaCN26MT0Df:ITOtaUfMkZ/tmSJy53IYNMtKw02Kl6Uj
MD5:	3DDEFB1786E9EA496B932F0C28471AE3
SHA1:	1B9B1EBCDAA02D5633AE4EB420E79FCBFFB3FD79
SHA-256:	3CF5CAA799E6171C486F7B5BCA442C250F2CBCD93199B38D74DE466AF54D65E3
SHA-512:	567901E6F0ACB908C979BC337572AC10769AD1146194AE171528F836FC56C92F705F0EC3D65BC269BE849A04158CD8501915E67FBD9845CF34B24EB2B5D87248
Malicious:	false
Reputation:	low
URL:	https://www.factaclassactionsettlement.com/favicon.ico
Preview:	......JFIF.....H.H......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS2 Windows.2012:10:22 16:03:57....................................................................................&.(.........................................H.......H..........JFIF.....H.H......Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..vEX]....Y..MX.Ika..]f.w..r...k.+..u..9.5.k\.....w.<.n...S...o...3....e..\.;M..9.}nk...E.Y[.?~.MV.}[.....Pj..z.m..[.....

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	488
Entropy (8bit):	5.277772830852179
Encrypted:	false
SSDEEP:	6:TMVBdbj4dgXRxVnzVEn6VWB3qmc4slZKYnic4sf3nUmlNthqOmLq6jHzh7Nth2:TMHdPQi/nzVJ/KYf3njfhN0Hxfs
MD5:	FC53568457BD3E8C3215DA1667F01985
SHA1:	81FB2415E5A470E509B72F6DFB2C0218A175278F
SHA-256:	A2BFC2BF3C263070A79FB0948D9F57FDDFCE0410B468D2C0DA5C04A3F3A79432
SHA-512:	05BCFBBF819CECF5461AD993349A1480578EABD8838A307A72E5590E457B2918931317159781B8832FCC7E9AFFAB78EC65CA4BC14397C91234E9307F13E862B1
Malicious:	false
Reputation:	low
URL:	https://content-images.computershare.com/eh96rkuu9740/5e5bdf7536d04306a8b16efabf3fe8e0/0a1e6991a00de59e643f09b6d204322a/solid-navy.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 25.4.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 1920 1080" width="1920" height="1080" style="enable-background:new 0 0 1920 1080;" xml:space="preserve">.<style type="text/css">...st0{fill:#003150;}.</style>.<rect class="st0" width="1920" height="1080"/>.</svg>.

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (6822), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	25113
Entropy (8bit):	5.412738155311135
Encrypted:	false
SSDEEP:	768:G37aFZ6HoqIn9+Zn9+JsrWA5dPb/unxIgeIuGeIkbeIOseIzTeIoi4It3w34It6+:8ar6HnlutMrjH7NO
MD5:	65434ACD82BCF0567087B07DBE3B2C08
SHA1:	A3F828A9B1942C9F457344A341EF648338C473CF
SHA-256:	6273EB0EFC0CB5FEA61E4390E4771D4031210BA9CAA9C2FC5616AE78ABD96432
SHA-512:	A755103BE90E06C52F62E3400F06F782358F64786CE2FCAB84D94F2CD7F72E31539FA813F3233DAA3CF7DA10C4A00DB7B7068AD21ABBD30D16522C28BD298348
Malicious:	false
Reputation:	low
URL:	https://www.gilardi.com/
Preview:	<!DOCTYPE html><html><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><title>Gilardi & Co., LLC</title><link rel="icon" type="image/png" href="/img/favicon.png"/><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/><meta property="og:title" content="Gilardi & Co., LLC"/><meta property="og:image" content="https://content-images.computershare.com/eh96rkuu9740/c9117c1092534fcc9273232233df0c5b/cd4bbb343e36272e3e0525f13b2ce9f7/Welcome.jpg"/><meta property="og:type" content="website"/><meta name="description" content="For more than thirty years, Gilardi has been among the nation.s leading experts in legal settlements and claims administration. Our services include pre-settlement consulting, legal notification, data management and distribution"/><meta property="og:description" content="For more than thirty years, Gilardi has been among the nation.s leading experts in legal settlements and claims administration. Our services include pre-set

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (7857)
Category:	downloaded
Size (bytes):	23361
Entropy (8bit):	5.320977755314713
Encrypted:	false
SSDEEP:	384:3abZ6H2VzMmg35WB5Mm5Mkn9+Zn9+UYJb+Jz9Ue2KwDmZAS4ItVmfe2Gz0kEyRe7:3abZ6HoqIn9+Zn9+FbYz9nwDmZAS4It4
MD5:	34AEA41131021B316566ECC9BFE6E7FA
SHA1:	717C9E0CAAF1DDCB15D31168915F325EBC1653B6
SHA-256:	359F8099C4183D1E9FAC4A6CDA133EF6AEE47FC1474FD5179D615986DDB3F939
SHA-512:	79FB35351ECB1CC458C911560CFA4A393B0810BCDA2236C11F7C081FB0CB7FB8ADD8AEC7820C689049C027B862B783B955299462B708EB63799EE0DC7F1CD218
Malicious:	false
Reputation:	low
URL:	https://www.gilardi.com/about-us/our-story
Preview:	<!DOCTYPE html><html><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><title>Our story</title><link rel="icon" type="image/png" href="/img/favicon.png"/><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/><meta property="og:title" content="Our story"/><meta property="og:image" content="https://content-images.computershare.com/eh96rkuu9740/22cb14c2104849e6aa27d39f948d2c79/99929ad7b65a8870a946a4633f09cf80/OurStory.jpg"/><meta property="og:type" content="website"/><meta name="description" content="As experts in all phases of legal administration, we pride ourselves on our unmatched transparency, accountability and expertise."/><meta property="og:description" content="As experts in all phases of legal administration, we pride ourselves on our unmatched transparency, accountability and expertise."/><link rel="canonical" href="https://www.gilardi.com/about-us/our-story"/><meta property="og:url" content="https://www.gilardi.com/about-us/our-story"/><

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	505
Entropy (8bit):	5.066493179459564
Encrypted:	false
SSDEEP:	12:tvG1WQuV+Jm+ySpp4t4lLxxMl1+qqXlVT:tu1PuTbiTqqXlt
MD5:	8DF29F3DFB8749F21C310266998BAED8
SHA1:	1EA16CA01FB1A2CA86DAA7B03361A3E98F928D52
SHA-256:	278E91F3CC6A25A5631A321F182553A6485F0E0B3A28EDFF97C06B6C16045A26
SHA-512:	8DF699804C9EC9C0DD7E96332E15DD1DECA5A2392106FCFFA13A957A525ADB06280111DDEA5F8C36DD6997A289CB9C85A507E86682BBA2109AA081637C2ADD6E
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M185,182.4a8.61,8.61,0,0,0-4.78,15.79,4.2,4.2,0,0,0-.06.61v18.33a5,5,0,0,0,10,0V198.8a5.16,5.16,0,0,0-.08-.8,8.61,8.61,0,0,0-5-15.6Z"/><path class="cls-1" d="M266.62,263.69H103.38V139.6H266.62ZM111,256.09H259V147.2H111Z"/><path class="cls-1" d="M240.64,139.6H233V122A48,48,0,1,0,137,122V139.6h-7.6V122a55.64,55.64,0,1,1,111.28,0Z"/></svg>

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 3 x 3
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	3.8861331683055274
Encrypted:	false
SSDEEP:	3:Csa2a1hSkLIage:va2khSkDge
MD5:	21413F135CFDF6B5CAFC066F1597708A
SHA1:	D817FEABD4C3E3256709A9EEEDFCAD5C84273387
SHA-256:	5E4058F27C654186CAE1019C54ACA7F024167848C477FD8CDA6E79C218154482
SHA-512:	042698C936541E2DB8E866FC45862C6F12AAB2AA9E4C31156A5F8BDFEC8BBE2953C85B55AC17DDA0514B06B7AD17727E225E9F195818FE9E23BA11D4160BEF20
Malicious:	false
Reputation:	low
URL:	https://www.factaclassactionsettlement.com/css/images/currentUnderline.gif
Preview:	GIF89a.............!.......,...............;

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	134128
Entropy (8bit):	5.290090428748416
Encrypted:	false
SSDEEP:	3072:L2e6pFWRiDZBJVSnaPPYnXhwIKImOXXweePLqIjYC/kknE2DCseqG:LKGRidEnqgX/tMG
MD5:	0EA8D7D424CA12367C557BEA3A734F5D
SHA1:	0B7A61D56144769379E1DA5977D066EF787FF6AB
SHA-256:	1D426FF2C1ED78B499CC6C2BD3E0200D18A2547AFE0CD6568580000447050B42
SHA-512:	EA207D2C78DB550113CAD5A9F219E23E60DE436D03CE71E9251891BC016139B74199EC3810E60286A734E80F42180E79D17EA3758787A7251E522B4B1720AB8C
Malicious:	false
Reputation:	low
URL:	https://www.gilardi.com/js/main.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /function _instanceof(e,t){if(t!=null&&typeof Symbol!=="undefined"&&t[Symbol.hasInstance]){return!!t[Symbol.hasInstance](e)}else{return e instanceof t}}function _type_of(e){"@swc/helpers - typeof";return e&&typeof Symbol!=="undefined"&&e.constructor===Symbol?"symbol":typeof e}!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,(function(e,t){"use strict";var n=[],r=Object.getPrototypeOf,i=n.slice,o=n.flat?function e(t){return n.flat.call(t)}:function(e){return n.concat.apply([],e)},a=n.push,s=n.indexOf,l={},u=l.toString,c=l.hasOwnProperty,d=c.toString,f=d.call(Object),p={},h=function e(t){return"function"==typeof t&&"number"!=typeof t.nodeType},g=function e(t){return null!=t&&t===t.window},m=e.do

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 450x450, segment length 16, baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	20439
Entropy (8bit):	7.886521504250281
Encrypted:	false
SSDEEP:	384:lYNg7KOLW2DZb8pamByckos5+9sAELsIUU/6cPDeJp3GAZ9:lYyBLWAZb8NycuMhELJU6P7eWAZ9
MD5:	437D876C85F222C91AB0EFD6449C7B35
SHA1:	67CC20A5BE68ABCAFE4203DB6C107E82BF5C0627
SHA-256:	4B5405FBAFD33C037DF9AE68B44CCAA7F7CA7A07CAC07BA4ED2F4A6A83D8E7E8
SHA-512:	185C19312CC01708EFC884D4F02B4F1B8932358EECEE99EE026D552D6BA415599E82A4A9B2EA573BA70DDC2F0B0C122CFE169CE450E1F0F0B8A0D5648929DC29
Malicious:	false
Reputation:	low
URL:	https://content-images.computershare.com/eh96rkuu9740/7cd77d1eff7c4f0fb2fbf364f4597505/248b9d293a526fa545e2b3f8b71c6f2e/PCrudo_GreyBackground2.jpg?f=top&fit=thumb&w=300&h=300
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1652
Entropy (8bit):	4.461509391855355
Encrypted:	false
SSDEEP:	24:tu1PuUUjoAyS54w8AUBQkbwDT4h+jNSfyOXH2GROX:0PtUchS+wJUBQYwDTu+Z6yrGUX
MD5:	2FACB3E4225067F33350000A6E824F96
SHA1:	A7A43FFB000691C3FF8A893D02ED5DE4E38BDD0C
SHA-256:	BD01D0544D1F36CA6EBD386A89F738F086A8A046BBF337E7B6D532CC39D76B41
SHA-512:	77CDC672E1C053F818CD5DA13AF385DF8FFDC3EAEEFD8CC4288D716395BB81915BC23C959663517E82236D8E15B20E8B889F328125C37F888137ED29527588BF
Malicious:	false
Reputation:	low
URL:	https://content-images.computershare.com/eh96rkuu9740/0abb65e242eb4242850a708671fc57bb/bfe60ad8f5fde227293570f6a72626b3/column-regulatory-icon-navy.svg?w=300&h=300&fit=fill&f=faces
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M240.22,252.48H129.8a3.8,3.8,0,0,1,0-7.6H240.22a3.8,3.8,0,1,1,0,7.6Z"/><path class="cls-1" d="M261,274.42H109.06a3.8,3.8,0,1,1,0-7.6H261a3.8,3.8,0,0,1,0,7.6Z"/><path class="cls-1" d="M148.21,227.94a3.8,3.8,0,0,1-3.8-3.8V159.59a3.8,3.8,0,1,1,7.6,0v64.55A3.8,3.8,0,0,1,148.21,227.94Z"/><path class="cls-1" d="M172.75,227.94a3.8,3.8,0,0,1-3.8-3.8V91.54a3.8,3.8,0,0,1,7.6,0v132.6A3.8,3.8,0,0,1,172.75,227.94Z"/><path class="cls-1" d="M197.28,227.94a3.8,3.8,0,0,1-3.8-3.8V91.54a3.8,3.8,0,1,1,7.6,0v132.6A3.8,3.8,0,0,1,197.28,227.94Z"/><path class="cls-1" d="M221.81,227.94a3.8,3.8,0,0,1-3.8-3.8V159.59a3.8,3.8,0,1,1,7.6,0v64.55A3.8,3.8,0,0,1,221.81,227.94Z"/><path class="cls-1" d="M121.49,146.9a36.49,36.49,0,0,1-24.68-9.55,45,45,0,0,1-3.08-63.61,55.14,55.14,0,0,1,44.8-18h93.22a55,55,0,0,1,44.55,18,45.09,45.09,0,0,1-3.08,63.61,36.84,36

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, baseline, precision 8, 1920x850, components 3
Category:	downloaded
Size (bytes):	300364
Entropy (8bit):	7.975007203161473
Encrypted:	false
SSDEEP:	6144:9viQBw1TD3kyo15CEb1QQiAI59IONDQ6cZUZ+pfAt:hiQ21P3t0erAI5i6PZ+o
MD5:	FEEE23B30F0A4B853B5E34CE8523E867
SHA1:	DE048B13B037B0FAC43490BDDC6D437989C27049
SHA-256:	CB3B96BEEF783201E2227E2636D6522D81ADD9173B5F1C7CC3CEAC8D0144B8A6
SHA-512:	9962AC159B768B8D35A2CA0878F454FB03350F780644BA772F4D737409B3CFD70DF59759B4CFE4D76BCE431E3ED01B196C960D2BAA414D688ADDE08B9D5AACF4
Malicious:	false
Reputation:	low
URL:	https://content-images.computershare.com/eh96rkuu9740/22cb14c2104849e6aa27d39f948d2c79/99929ad7b65a8870a946a4633f09cf80/OurStory.jpg?w=1920&h=850&fit=fill&f=center
Preview:	......JFIF.....,.,.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 19 tables, 1st "GDEF", 38 names, Microsoft, language 0x409, Copyright 2021 The Overpass Project Authors (https://github.com/RedHatOfficial/Overpass)Overpass
Category:	downloaded
Size (bytes):	315752
Entropy (8bit):	6.174426572956883
Encrypted:	false
SSDEEP:	6144:2mNbg/2h3LOFwnd4Rh6TN6VfZbNawuIYwn3:TkLRisVZswu+3
MD5:	676ED13694F673C4BC372D7E4B8ED7FD
SHA1:	F863ABF3938347AFDCD11C8128264E745F1C482F
SHA-256:	46A407FD75822C54C2649AB08D36A63D7AD6662D31F83C7BAAE50F475F4C8774
SHA-512:	F578240571FADCF7BF35E058481637D501329F803FA1C49381B1BBFCF5D9C7478DAE21C1A7802F9698574CC62C11FF6EFCD5E82D7B8D5A06C459035641B8E01B
Malicious:	false
Reputation:	low
URL:	https://www.gilardi.com/fonts/overpass-variable.ttf
Preview:	...........0GDEF.4.5...\...,GPOS2.>W.....W.GSUB.......D....HVAR^."...4....jOS/2n<....C....`STAT......Ch....cmapx..^..C...> fvar..y...D ...~gasp.......T....glyf...e...<..".gvarD.....D.....head!.9D...X...6hhea......C`...$hmtx.p7o........loca..It..#....jmaxp.S.R..#.... name..~.........post.<W......./_preph....................x..........3.!.%!.!..3.!.3...H.f............N......x....,...\|...\|.....f.....x......3.3.#.!..!...'...f....x..v............x...V.......53..35....f.....2.&.......*.t.....f.....F.&.........5.z...f.......&.....'...5.z...........f.t...F.&.....'...6.......5.z...f.......&.....'...5.z...........f.......&.....'...5.z.....;.....f.......&.....'...5.z.....7. ...f.....2.&.......+.4.....f.....2.&.........5.z...f.....J.&.....'...5.z...........f.t...2.&.....'...6.......5.z...f.....J.&.....'...5.z.....9.....f.......&.....'...5.z.....:.4...f.......&.....'...5.z.....7.....,.....2.&...........z...f.......&.......).6.....f.....P.&.....'.).6.......6.....f.......&.........6.z...f.t...x.&

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2679
Entropy (8bit):	4.271971105670695
Encrypted:	false
SSDEEP:	48:0PKp9/SdDbdSuGzwE55YgP3SKUIwdzlkYAOLtioUv/r7tl:V/SHSuGzwkBnw0xaWrH
MD5:	B430847F6311DC4F4AD88EE5103142B0
SHA1:	EC91CDFD7ADCB4F67F28EB68145FD404CB7D0187
SHA-256:	786FC6B915454579DA353079D5F4C612E5D6E4852CC993B56BE8B27A59B1334A
SHA-512:	8D7E5134EF4A44596CAB5DBB36AB72E85EB4C4CFA19DAD32EA88EC0ECBADC302558335B2FC54B58266B18E1371A0011A33269671F6BCEBA460646EA5B84C6B7F
Malicious:	false
Reputation:	low
URL:	https://content-images.computershare.com/eh96rkuu9740/5b560a5e95534bfdab06d2bf9d9c8622/8adc9b8b9e39e7b77e9b37986e331de4/lightbulb-icon-navy.svg?w=300&h=300&fit=fill&f=faces
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M216.62,269.3H153.38a3.8,3.8,0,1,0,0,7.59h63.24a3.8,3.8,0,1,0,0-7.59Z"/><path class="cls-1" d="M200.62,296.89H169.38a3.81,3.81,0,0,0,0,7.61h31.24a3.81,3.81,0,0,0,0-7.61Z"/><path class="cls-1" d="M184.64,51.06a3.8,3.8,0,0,0,3.8-3.8v-18a3.8,3.8,0,0,0-7.6,0v18A3.8,3.8,0,0,0,184.64,51.06Z"/><path class="cls-1" d="M286.35,68.91a3.74,3.74,0,0,0-2.68-1.11,3.8,3.8,0,0,0-2.7,1.12L266.45,83.5a3.8,3.8,0,1,0,5.38,5.37l14.53-14.59A3.79,3.79,0,0,0,286.35,68.91Z"/><path class="cls-1" d="M103.54,83.5,89,68.92a3.8,3.8,0,0,0-5.39,5.36L98.17,88.87a3.8,3.8,0,0,0,5.37-5.37Z"/><path class="cls-1" d="M185,71.92c-44.64,0-81,35.63-81,79.42,0,18.32,5,33.79,14.8,45.8,3.36,3.65,6.76,6.84,10.05,9.94,11,10.44,21.52,20.31,24.31,41.78h63.59c2.8-21.51,13.31-31.4,24.42-41.84,3.27-3.07,6.66-6.26,9.93-9.77,10.43-12.31,14.88-26,14.88-45.91C266,107.55,229.64,

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 62488, version 0.0
Category:	downloaded
Size (bytes):	62488
Entropy (8bit):	7.996873370420622
Encrypted:	true
SSDEEP:	1536:xoE5Wz00Tsw8nAKrXFviP92z8kQm/R218Sfw1N:7cGRiokmw18SfO
MD5:	3E02A40953031232C67536B2681AB955
SHA1:	8BF5B3F051B8031B528508DAD0F8BF1692BD8A1A
SHA-256:	AB1F1CCB38F213F5B9E908DF4F06C80C41AA0FC9C1028AF92FD01D7BCF805B54
SHA-512:	6180AE9268855F4ACC5F880A77BFF4D668008DFE561EEBB9ADEA4FEED862F077BD9EA570ADBDBB3DDAE513880DC754215D1D38F84EFBA1EF1D9E722966A0A136
Malicious:	false
Reputation:	low
URL:	https://www.gilardi.com/fonts/fc248138-00ce-4270-ac78-e72164153e7f-5.woff2
Preview:	wOF2..............Q@..............................n.....W.`..6..............y....6.$..L..(.. ..X..+..X[A3....{......t.m3S...G.%lp...,.u../..2.E....'T..........W$_b...m...".../..s.,r&.d..D$..j.....)..l>..Gx...j....bE=.\..1.u..-.k..N.fF3q.....):........C...s.F.T....GQ..gl.M.J.r..<.f.A}..yu.=.N8..<.t.tK....Z..X...n1;......qnpF/.}...3H;.._.i.4..1..-~%.ZRQq..}...KS..z3.J...y..._C..7>b..!~.1..(..z>...Y!....;c.....;+ \....K..jy......2..S....A1u.....x...9.h...../.Qgi..9t."C....9DP.....-.O..j3..`...i..t.D.."....{6CL.."n.x...q6.8...0.$.&)wAF..X..M].K...Y.Y.l].....l.....&.7..u5aE}...K..ME..,...B>.d..Y...P...T..l9r%y.....t...$.BB .....j...-....(....v..H.T.......y.[l.....[n..V.>+.........Q.c+l..q..8...fYY....mf.<3..]Yw..u....]...{...)..,.u7K.J(.X-....M.U,.....o\.).cb)...2.g.....\|..9.Nw....j4...R&.tj.c..~nB..R<.c.:.S.8._.K....R2(...kK!8.g...i..}$9.dIG..,sb'...8.J...8..Jf<m..H%tJh..`R.p.8.......J.}Q......>r...x-...bJ....i#c.1'c*_.JFI.8~_.....${....XN..x......P....K(

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 450x450, segment length 16, baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	25202
Entropy (8bit):	7.901428537720697
Encrypted:	false
SSDEEP:	768:lYyJXOPCXUY8z2S1ADoEAoJC8fFIoDoZYSR:lpOPbY8zpCDoKp5D4R
MD5:	2026F1676838A116F899C477CC8EC533
SHA1:	A9B5F66FE95CAD25F25462DDDFE9BFFBC2C772E1
SHA-256:	22B190128FE94C073D479A64584F81D00BD798807F31FBBEA7EAE47A82A89723
SHA-512:	37C91E74ABC23B6D07281A1845CA295E63F6C71BFEBAB38755D8E242290293CAAF97DE4E28B6CED8672518758575BB82E56108D4907273004B12E35D5628980E
Malicious:	false
Reputation:	low
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, baseline, precision 8, 1920x850, components 3
Category:	dropped
Size (bytes):	146051
Entropy (8bit):	7.928039409421398
Encrypted:	false
SSDEEP:	3072:qEau23wbLdu2EpDMeSZO9jop7DKMtq/bf9m0lVEgP7tVcjpAMH05QoP:qyLdu2EpD/pxblmCVEgP73KpAMHcQoP
MD5:	A9115978E0C5C7B81AF2C985B9F42540
SHA1:	6E2D5B01C554316E99D2337A240FDB4D20E8F361
SHA-256:	1818D879785327BFB7ABA9D1DB1C65CB7BBB97D7566BFCF79F2519535095C27F
SHA-512:	F7A3F9860B94CA2B465A9A5649BBA2FF6FEC38FC6B2DD4453AD5256657EADD4A4F70EBBC81236E02898C3666B7C29BC681957BA485094BF06CD3B153F1ED0FE5
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,.....@ICC_PROFILE......0ADBE....mntrRGB XYZ ............acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 1999 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C.......................................................................R..............................................K.......................!.1..AQ."a.2q....BR...#..3b..CSc...$r...4.D%5s........................................................!1..A.Q."a2q...#B..3R..............?...@ .......@ ..IA.ck.A+......h..X..R .a..7.

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 450x450, segment length 16, baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	27573
Entropy (8bit):	7.8888280801417805
Encrypted:	false
SSDEEP:	768:lYye1hZOZrPu+y/boQCdSqwBveUfRBw+/1IZprocP:lKau+pgpvJvmrl
MD5:	F191BA7CEAB64E6C1CC5BA22B9D61E0F
SHA1:	90503029B044D7FD29D88D1D70F16D275842470E
SHA-256:	29F5084167F5821E49D5C71CCBF80DA4388553AA59C41607C1360DFE37493819
SHA-512:	D0F4EC17515B5D3FB9B98F1DD94CA420C4D1807521D1174A57B7FA37C79858085E67ABA14CB2B21482ECE9279C5F83304978D5ADBFA9BAF828345D9835ABB0E3
Malicious:	false
Reputation:	low
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1201
Entropy (8bit):	4.537547106699354
Encrypted:	false
SSDEEP:	24:tu1PurJxae/LCZycdr4PtlaQD/IYBVF7c3I6djGkXbl:0P7gGZysr4PtlNYIUjGkXbl
MD5:	E3D2183EE1C18406D283D179F2456CAD
SHA1:	37819E9A1EDA9512DA7A69D41B247283D40E8CB3
SHA-256:	4768ECD33AB6A707544C55D779CF8AF3A4A3F824A9F0298F650FDFDE7E1761F6
SHA-512:	4B5E353F384A0597A9BC93CE0E790B7CFF9044B39D33156B2CD900BF823E67E499645B96BA82FE1D639614665B8178F3DEBBC07DC0FDE01C321D00C62736D967
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M185,305.22a3.8,3.8,0,0,1-3.8-3.8V274.89l-3-.19A110,110,0,0,1,75.4,171.79l-.19-3H48.56a3.81,3.81,0,0,1,0-7.61H75.21l.19-3A110,110,0,0,1,178.2,55.26l3-.19V28.57a3.8,3.8,0,0,1,7.6,0V55.06l3,.18a109.93,109.93,0,0,1,103,102.94l.19,3h26.4a3.81,3.81,0,0,1,0,7.61H295l-.19,3a109.93,109.93,0,0,1-103,102.93l-3,.18v26.52A3.8,3.8,0,0,1,185,305.22Zm67.84-133.55a68.05,68.05,0,0,1-61.14,61l-2.9.28V267.3l3.42-.23c50.59-3.49,91.43-44.27,95-94.86l.24-3.42H253.13Zm-169.79.54c3.54,50.46,44.26,91.23,94.72,94.84l3.43.24V233l-2.88-.29a68.12,68.12,0,0,1-60.91-61l-.28-2.88H82.81Zm102.07-67.68A60.45,60.45,0,1,0,245.58,165,60.51,60.51,0,0,0,185.12,104.53ZM188.8,97l2.9.28a68.06,68.06,0,0,1,61.14,61l.29,2.89h34.31l-.24-3.42a102.71,102.71,0,0,0-95-94.87l-3.42-.23Zm-11-34.07c-50.46,3.61-91.18,44.38-94.72,94.85l-.24,3.42h34.32l.28-2.89a68.12,68.12,0,0,1

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 580 x 90, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2960
Entropy (8bit):	7.860702077254495
Encrypted:	false
SSDEEP:	48:3h+NFb1u6DZXzElJW8KVgif+LGSLn1bPUB3XvdmWwtx/XUxfxUmC8G2jf:evwqVg5LGSLn1zO3fdm7x/kxfxUsX
MD5:	54D8963F2B634B37ABAEA0025F1079FF
SHA1:	31AEA1E45374F8FE6852A7D44D2D034420E0C555
SHA-256:	D2EF43941AD826AE5D1A1AB35839A7BBEDD86D80AA9EDF3263BEF29DFD1F9AE0
SHA-512:	9FF4BD59724D433BF881ED95CCE73ECF921530EE6C6BD692271E9251080B478142BBF48C9C48CDE978E2A80E9A2887F092B724E917494A39D29B36566B338837
Malicious:	false
Reputation:	low
URL:	https://content-images.computershare.com/eh96rkuu9740/2Cpsx0dFpuasUFp8YANLmZ/cad4a1a0a1335e1e8dfad49ec6f5531d/logo-gcp.png
Preview:	.PNG........IHDR...D...Z.......T....0PLTE......................x..i..Z..K.\|;zq,pf.f\.\Q.c......IDATx..M.......3..=6t$cL...P...G.CP.3$+>$...\|.8pp...\r......5&Q...=....k. .MX...r.%...H..F..C/..\|.t.s......5D..N.....]..W5`..4d.2D...Q.(C.!..e-C.!..e.2D...Q.(k...Q......R...~........gIv'BW{..>~....O.W..Cq.[.....-}..uw........../.....X.2{......>.._.._.:...!.....>....N.........o?...@.....o.[1.....\....b..2.e...>7.zUi.S....P..Iw?.X$.@.......-..&...2.....l."..5D)....G...3..u..,..X ...G.O........:...=.kUE..s.......t..\|.{.......@><.!...@.....>j...#D5......u...."....B:...b... ...G...: .Y.-.s.p_z.......6..>.....m(D..h{k=..).#;..r...T.-.#....ki..h.8.".p.U...[..~.*:wJ}[k..U..r.(.`u.DSC"R.G[....3r..y........6........;......6.....@w.H......6.tfI..g..w........X.D.pa.(_VN..R...e..#...-.cX.D...D.2M..h.K.\..\|.t............\|..\|$....y`.Daq.Y..^..P.. .#{.%.Es...I....F:.....V.T.b7.......pH..#I..r...D{...'p~Z$i.4.@......~.<.x.......".. yz.D...I.g....U.......i....Kk

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HqCRn:KYn
MD5:	BE43C1F8563C1C133AB722EC0C544F0A
SHA1:	E835DB5DEE77892118697CE5EE57C7C1ED47F129
SHA-256:	97F6C04A6793760E64EF59C21877D8E04AF689EA67A4942F1D47C0A9CEFAE465
SHA-512:	5964D95A8FA46D7B62F721AC4B41D73200EB1EF0E77B82B9775981F43AE395AC3F789AB07525D455561325FFFE7D4CD1DAE7737013E83BD0A564C020939DCD6B
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAmMgLQLVuxP6RIFDWavnHw=?alt=proto
Preview:	CgkKBw1mr5x8GgA=

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1683
Entropy (8bit):	4.863200033449857
Encrypted:	false
SSDEEP:	24:tu1PugVQq13kQwi+BIsvTTKg7oaD/6QdfZZOpdz4rhSFqE6Eg7JQqIxhOX:0P+fbPvh8KFdfZsz4CqE6QW
MD5:	15212D30489234794BEF381F334A2CB0
SHA1:	4C69E69EBACD4C921033BBB3DDAFAD66F3F96748
SHA-256:	CF4BA8F10A0CB9A078583797C91BD4B27DAEB3D0976683B440A94B1BEC02DD7C
SHA-512:	A4F01E4A9DCF3AFD9050B9E4481DC61C3EC79FE320550848E95589BE405BFCF2E471C15568C807EE9ADEEFE70F69CD52806B66AAD00C65ADCB4FDF3D06C976E6
Malicious:	false
Reputation:	low
URL:	https://content-images.computershare.com/eh96rkuu9740/04139ec921c04b6394616c7a40f48da6/dd23ce4ffccade0fe0b6f6af64d3c548/checklist-icon-navy.svg?w=300&h=300&fit=fill&f=faces
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><rect class="cls-1" x="110.18" y="200.36" width="9.6" height="9.6"/><rect class="cls-1" x="110.18" y="168.08" width="9.6" height="9.6"/><rect class="cls-1" x="110.18" y="135.8" width="9.6" height="9.6"/><rect class="cls-1" x="110.18" y="232.64" width="9.6" height="9.6"/><path class="cls-1" d="M141.2,209v-7.6h42.93c.64,2.57,1.41,5.11,2.3,7.6Z"/><path class="cls-1" d="M141.2,176.68v-7.6H183c-.41,2.48-.7,5-.88,7.6Z"/><path class="cls-1" d="M141.2,144.4v-7.6h55.09a84.07,84.07,0,0,0-4.73,7.6Z"/><path class="cls-1" d="M141.2,241.24v-7.6h59.57a78.74,78.74,0,0,0,7.47,7.6Z"/><path class="cls-1" d="M92.84,286.86A16.83,16.83,0,0,1,76,270.05V91.54a16.82,16.82,0,0,1,16.8-16.8h10.63v7.6H92.84a9.32,9.32,0,0,0-9.2,9.2V270.05a9.32,9.32,0,0,0,9.2,9.2H238.4a9.32,9.32,0,0,0,9.2-9.2v-9.86c2.48.41,5,.71,7.6.89v9a16.82,16.82,0,0,1-16.8,16.81Z"/><path class="cls-1" d=

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 9 x 108, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	626
Entropy (8bit):	7.34569232949579
Encrypted:	false
SSDEEP:	12:6v/7Uf2s/6TrnBdviQzS8SVtY6WGG8V0asv+BJLhRG1xQvufG0Ipc:N2s/6HBd6+g0iG8GPQRixIu+0Ipc
MD5:	33ED93F430E1651F83A8D4033D95BCB5
SHA1:	D4DD4684B91E6C86751A4895F392279E56976A96
SHA-256:	9A66233E2D047D59C6C05EF6FED6AFF83FF8A0F2E85ED1373EDB4CB972D700F7
SHA-512:	C83BCF6FC19FF6280C28244E6D96B2BBD54AA4CF6CF98D631828E0533C7F05275779F67A133214231AEAD94B90E7117A847943474295C8A66D70AC45F421DC1E
Malicious:	false
Reputation:	low
URL:	https://www.factaclassactionsettlement.com/css/images/bkggrad.png
Preview:	.PNG........IHDR.......l.............sRGB.........bKGD..............pHYs.................tIME.....2.^>$5....tEXtComment.Created with GIMPW.......IDATH..WAr.1..X^.G..}A.=t.C....o2=..v@.....?...............u.....dy.pa]....'.N....g.;..g...8..E...3d.cM..w...\|....xx......)...i),LQ:....!:..#/1M.....U.7.*.3pc..%w.d&KSN=.-(.......Af..9....TNi0...T.....T.7'.3.J2....'..T...(..j..;c6.J.n...I.x.d..#X...f...........O.<b...K...u_:{.E.(....66.L..Q=w\T........}...T.M.cH...,=..N.l..LK5...D......4...M.....i{&....U..,m.]..vd.M.k......5B.k...8D7.....S.._...@.%XE5a.k./@.sA..>:5a<%.e.w.I..+.uth........../...^#...t....IEND.B`.

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	3812
Entropy (8bit):	4.270242710658107
Encrypted:	false
SSDEEP:	48:i/7erbFCYMAMCQQJJqjX5vRVrBMqKIDPGNuTePSb:ywbFCYphQSJS5vRbMqpsweab
MD5:	D14ABFF1A145C0CFA44716E41298C45C
SHA1:	993421213C5C3B38509558D7BF1B42326DDC13D4
SHA-256:	2DD3FB6960DE879E8AB2724114A74B9CE52B75FA9D649B64B8EA111656151069
SHA-512:	83A465F6D8BA8E0A98EB18AD10F377DA4186497F02DAD8189E437C27F5DC4377E64EE64B69C32E227139D30BCED6EC8D3E26FC266EE2953CCBA5C82D2B65354E
Malicious:	false
Reputation:	low
URL:	https://www.factaclassactionsettlement.com/
Preview:	. . . . .<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. [if IE 7]> <html class="ie7" xmlns="http://www.w3.org/1999/xhtml"> <![endif]--> . [if IE 8]> <html class="ie8" xmlns="http://www.w3.org/1999/xhtml"> <![endif]--> . [if IE 9]> <html class="ie9" xmlns="http://www.w3.org/1999/xhtml"> <![endif]-->. [if !IE]> > <html xmlns="http://www.w3.org/1999/xhtml"> <![endif]-->.<head>. <title>Site Coming Soon!</title>. <meta name="keywords" content="" />. <link rel="stylesheet" rev="stylesheet" href="http://65.74.160.50/css/TopNavLightBlueTheme.css" type="text/css" />-->. <link rel="stylesheet" rev="stylesheet" href="/css/TopNavLightBlueTheme.css" type="text/css" />.. link rel="stylesheet" rev="stylesheet" href="/Content/jquery-ui-1.8.18.custom.css" type="text/css" / -->. <style type="text/css">. span.DeltaViewDeletion. {. letter-spacing

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	8369
Entropy (8bit):	4.296460543522956
Encrypted:	false
SSDEEP:	192:vRyiDPA5MMS4aDzhbUDj7kI6F0D/YvtIYHku9WO4Peez3K:Zy/vaDzhoTh6F0DAvtou9WODeza
MD5:	C5E87DB7E623044F6B3C0A13ED348832
SHA1:	5217D55EF7853DC1B6FE74D157D9B45CC7C7DF44
SHA-256:	7CD576D07E4900BA9568AEF7DC02D07FA9107B84C26C3D6956E8E2604D436D17
SHA-512:	7833523158B5D990BF9E815722D19735EA148195CF767082C0DE386028E8F71C7F4CB5A0DF4A6B22A7B41A3F116A6EDEC02D2840E3234E133B12BB18442EF3FC
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 157.06 73.85"><title>Gilardi_Logo_Black_HighRes</title><path d="M257.57,542.19a5.32,5.32,0,0,1,1.93-3.91,11.91,11.91,0,0,1,2.35-1.61c-1.57-1-2.28-2-2.3-3.2,0-1.81,2.23-3.93,4.39-3.93,2.58,0,4,1.63,4,3.2,0,1.29-1.48,2.55-2.76,3a11.47,11.47,0,0,1,4.53,4.28,5.85,5.85,0,0,0,1.35-3.36.67.67,0,0,0-.71-.71H270c-.14,0-.16-.07-.16-.16v-.55c0-.07,0-.12.16-.12s1.45.07,2.65.07c.85,0,2.23-.07,2.37-.07s.16.07.16.19v.48c0,.09,0,.16-.16.16h-.4c-.69,0-1.08.09-1.4.6a38.87,38.87,0,0,1-2.87,4.32c.3.23,1.22,1.43,1.91,2.09a3.84,3.84,0,0,0,2.55,1.34,3,3,0,0,0,2.39-1.52c.07-.09.14-.11.19-.07l.45.32s0,.1,0,.21a5.62,5.62,0,0,1-4.85,2.9c-2.6,0-3.61-1.36-4.83-2.74-1,.92-2.3,2.74-5.25,2.74C259.64,546.17,257.57,543.91,257.57,542.19Zm10.05.37a17.37,17.37,0,0,0-5-5.27,5.07,5.07,0,0,0-1.86,4.05,3.25,3.25,0,0,0,3,3.06A4.86,4.86,0,0,0,267.62,542.56Zm-5.29-9.66c0,1,1.06,1.88,1.93,2.3.48-.32,1.08-.88,1.08-2.53,0-1-.48-2.16-1.4-2.16C262.7,530.51,262.33,531.7,262.33,532.9

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 450x450, segment length 16, baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	25202
Entropy (8bit):	7.901428537720697
Encrypted:	false
SSDEEP:	768:lYyJXOPCXUY8z2S1ADoEAoJC8fFIoDoZYSR:lpOPbY8zpCDoKp5D4R
MD5:	2026F1676838A116F899C477CC8EC533
SHA1:	A9B5F66FE95CAD25F25462DDDFE9BFFBC2C772E1
SHA-256:	22B190128FE94C073D479A64584F81D00BD798807F31FBBEA7EAE47A82A89723
SHA-512:	37C91E74ABC23B6D07281A1845CA295E63F6C71BFEBAB38755D8E242290293CAAF97DE4E28B6CED8672518758575BB82E56108D4907273004B12E35D5628980E
Malicious:	false
Reputation:	low
URL:	https://content-images.computershare.com/eh96rkuu9740/fa838bb1ec4d42f79e62f841fffa0d0e/a88f6c1acfbf2ebc98c4e0a421288468/DBurke_GreyBackground2.jpg?f=top&fit=thumb&w=300&h=300
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18871), with no line terminators
Category:	downloaded
Size (bytes):	18871
Entropy (8bit):	5.144793538979459
Encrypted:	false
SSDEEP:	384:cSNZhgSM7HK187sTEtHdmXmN6rZnlQq/oW3OighQAkaxd7OiSydRHI3xcHMjV:cq3gSMrK187swtHgXm0rZure3xcHs
MD5:	AA1067B7A894C39DA77C4C50C966268B
SHA1:	AF99DF82811A48A03FF5C41E5E38835009892A4F
SHA-256:	35A21D90068AF9BBA033BDD8E209AE789CC12F0ABBB3BE673BC3B32886A191B7
SHA-512:	9006AFDE9B39388AD40ADED054F71E13155CE8A9F89025EB03FC19F2B2E0EF4F5EFE39CAB20645E8F3FC9643145BB09A292C2D8742B2E3A2239E464E4F015ACD
Malicious:	false
Reputation:	low
URL:	https://c.evidon.com/sitenotice/7792/translations/en-153197.js
Preview:	(function(){var a={};a[153197]={languageCode:"en-us",acceptButtonText:{id:1},bannerCCPAMessage:{id:2},bannerConsentMessage:{id:3},bannerMessage:{id:4},bannerTitle:{id:5},barrierAcceptButtonText:{id:6},barrierAccessMessage:{id:7},barrierCookieButtonText:{id:8},barrierCookieMessage:{id:9},barrierDeclineButtonText:{id:10},barrierFooter:{id:11},barrierMessage:{id:12},barrierTitle:{id:13},buttonText:{id:8},cancelButton:{id:14},cnilAcceptAllText:{id:1},cnilBannerText:{id:15},cnilBarrierText:{id:16},declineButtonText:{id:17},doNotSell:{id:18},gdprl2Access:{id:19},gdprl2Cancel:{id:14},gdprl2CheckEmail:{id:20},gdprl2Close:{id:21},gdprl2Comments:{id:22},gdprl2ConfirmErrorHeader:{id:23},gdprl2ConfirmErrorMessage:{id:24},gdprl2ConfirmHeader:{id:25},gdprl2Deletion:{id:26},gdprl2dsar3rdParties:{id:27},gdprl2dsarConsentDenial:{id:28},gdprl2dsarConsentRevoke:{id:29},gdprl2dsarDataAccess:{id:30},gdprl2dsarDataCorrection:{id:31},gdprl2dsarDataPortability:{id:32},gdprl2dsarDataPurpose:{id:33},gdprl2dsarD

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 3 x 3
Category:	dropped
Size (bytes):	44
Entropy (8bit):	3.8861331683055274
Encrypted:	false
SSDEEP:	3:Csa2a1hSkLIage:va2khSkDge
MD5:	21413F135CFDF6B5CAFC066F1597708A
SHA1:	D817FEABD4C3E3256709A9EEEDFCAD5C84273387
SHA-256:	5E4058F27C654186CAE1019C54ACA7F024167848C477FD8CDA6E79C218154482
SHA-512:	042698C936541E2DB8E866FC45862C6F12AAB2AA9E4C31156A5F8BDFEC8BBE2953C85B55AC17DDA0514B06B7AD17727E225E9F195818FE9E23BA11D4160BEF20
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...............;

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, baseline, precision 8, 1920x850, components 3
Category:	dropped
Size (bytes):	186110
Entropy (8bit):	7.95369812652948
Encrypted:	false
SSDEEP:	3072:6u7ocgoSgAHERDSTsNF9dw9XBVRA/Zkm52WsPiQwxFrlf0KXtXABUm2ydfkFjJY5:6Rcgo4WDSTWdw9XzRCkm5hsqFtl86Qmg
MD5:	A424F80C09E9747A75122F10670C030C
SHA1:	0BBEBD7B1419C361DE2B139F1BA121351EB9C692
SHA-256:	CA03C8376D83BF93781E9B1CEA75DABB93CAD45D99AD8F840F0A21952AEE3DD9
SHA-512:	AD0DC54F838CC97F6E7A2ABA8BBEF42055C267FED6916694C44E2152719EE7AB28B2809EAA9068F1687789BF3164D2C4E6907B03929A57A5C005A71700DE6D7A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,.....C....................................................................C.......................................................................R..............................................D.......................!..1A.."Qa..2q..#B........3R.$b.r%4C....&.......................................................!.1A.Q."a2q..B.#R.............?..(pF......Q.~..r..v.?..We.\|!Tt...GCG.F.T......D..h&..H.H.8 p@......P4..P...(...)..TB+...A..+9@....V..F...@ .......@ .......@ .......@ .......@ .......@ .......@ .......@ .......@ .......@ .....:..e........-Sr.Z....H.....!..O.7 D....@ V.r...[...........<...y.k..o\rX.=H[S..r........C.~....z-A....h&j.............B)ek2....s\/.y.F.c.T...1.Y.r3^6.nVkq.WRF........(..q..v...7.._.....8.vZ.......8.....(oy.J8..C.X...)..8../s......~5%Ff-.#.......b.].....J*..3c...R...Y5dW..w8....1...[.L=..T...dnh.M..Jo.#Z.W;YPwD..l>..6.....=..c..KR..xh.....?..r..Ru.Z.^...8._}..&...s...3E.......a...Sk.%V...f..5..r9.{.}?D.]&..z..;.K`>#\|X.`~Vo

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	4.461509391855355
Encrypted:	false
SSDEEP:	24:tu1PuUUjoAyS54w8AUBQkbwDT4h+jNSfyOXH2GROX:0PtUchS+wJUBQYwDTu+Z6yrGUX
MD5:	2FACB3E4225067F33350000A6E824F96
SHA1:	A7A43FFB000691C3FF8A893D02ED5DE4E38BDD0C
SHA-256:	BD01D0544D1F36CA6EBD386A89F738F086A8A046BBF337E7B6D532CC39D76B41
SHA-512:	77CDC672E1C053F818CD5DA13AF385DF8FFDC3EAEEFD8CC4288D716395BB81915BC23C959663517E82236D8E15B20E8B889F328125C37F888137ED29527588BF
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M240.22,252.48H129.8a3.8,3.8,0,0,1,0-7.6H240.22a3.8,3.8,0,1,1,0,7.6Z"/><path class="cls-1" d="M261,274.42H109.06a3.8,3.8,0,1,1,0-7.6H261a3.8,3.8,0,0,1,0,7.6Z"/><path class="cls-1" d="M148.21,227.94a3.8,3.8,0,0,1-3.8-3.8V159.59a3.8,3.8,0,1,1,7.6,0v64.55A3.8,3.8,0,0,1,148.21,227.94Z"/><path class="cls-1" d="M172.75,227.94a3.8,3.8,0,0,1-3.8-3.8V91.54a3.8,3.8,0,0,1,7.6,0v132.6A3.8,3.8,0,0,1,172.75,227.94Z"/><path class="cls-1" d="M197.28,227.94a3.8,3.8,0,0,1-3.8-3.8V91.54a3.8,3.8,0,1,1,7.6,0v132.6A3.8,3.8,0,0,1,197.28,227.94Z"/><path class="cls-1" d="M221.81,227.94a3.8,3.8,0,0,1-3.8-3.8V159.59a3.8,3.8,0,1,1,7.6,0v64.55A3.8,3.8,0,0,1,221.81,227.94Z"/><path class="cls-1" d="M121.49,146.9a36.49,36.49,0,0,1-24.68-9.55,45,45,0,0,1-3.08-63.61,55.14,55.14,0,0,1,44.8-18h93.22a55,55,0,0,1,44.55,18,45.09,45.09,0,0,1-3.08,63.61,36.84,36

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, baseline, precision 8, 1920x850, components 3
Category:	dropped
Size (bytes):	194431
Entropy (8bit):	7.973416512963353
Encrypted:	false
SSDEEP:	3072:03vrYQkYWhWE16/gzG3lVjMSTVxcMcoFp5GxOMkmJx3THGe31E3eCL/oF07gL0xl:8Dyhl6YAlVjXhxcS/AhTHGe3i3rUwgwz
MD5:	9F6CCC60756DF965A3E16A50C10677D4
SHA1:	97D8A5A12EB1518AA3F490DF4CE26DB2F7D71FB9
SHA-256:	CA088D8F1D292F3134BC54E14FD735798CC28ACD6436E6B2EE66E7B965456844
SHA-512:	0EB0F193D193B32DBD837DF6C74434A91D04777ED348EE3C17D272325759F41327A37E7CB6D70BF332DB9B11543F2DB03E07517573BC89BFEF18349D24B68D0C
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,.....C....................................................................C.......................................................................R..............................................G.......................!.1..AQ.."a.q....2#B..3R....Cb....$S4r%.D..5c.................................2.......................!1.A.Q"2aqB....#.R...$3C.............?..N..j..._U.<......N.i.o../?..z&.K.....W8..V..+.:.h.I...:.c.b...F...kWu..J.....04...^m...<...u.5..-..e.]la..E...AY.....[z...\.u.....Vc..Wcy\.e..Op..Pe<.B...\|........m<.u...<5.......:.;.7P......+}m\|..XoW[\|;.Z....5"...'....~............X.\|0%..n...R..n...........:..MV.\|.9CU.\|'tMG...{....{...tM%..wD.6.wCE.....4....D..{....i...F...OT].K....n..uo....o.tD\|..&.u.tM`.=....1.U.W.....S...M..".1\|#tM........d\|h..u?.;.k..=QeH...]H....4_.?...=.tB...P....A..uD.\|x..>?..5"........!z;........`[.#...7.e.Ju.wQu^..#u...\. ..F.Q.!..8.{X..*..(..w...c..;...=..S..c..3n.}.6.....4.eNK.Q..~..:.....u#.O[ 3.y..

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2022)
Category:	downloaded
Size (bytes):	203655
Entropy (8bit):	5.530897055560181
Encrypted:	false
SSDEEP:	3072:VFn0/VPLu0h2f/v8Hhth1FytS5Fx0Z6yjRAO5GbvwlY2Bvv0bC:VF6rg6lGhZ6yjRV5cOvvB
MD5:	11B807CACF61CE0DF98F8A0607DFC9FB
SHA1:	2C767780D455B6493B703405C89F5E349949BDBE
SHA-256:	F410348F24BCAD048EC27B8F9F896ED9537EC4F1C8EB9283B98FCC0D7CFA2F54
SHA-512:	1AFE1F69F3F584A64EF72E9808F91FEBA8B23EF276486B588B77F29877CC1BDA40CD6A5204C3149E9E1369F4D2C27CD0D8633962BB99A4351B05225B65AF8C2A
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-NDWX5RJ
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"4",. . "macros":[{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"consentCategories"},{"function":"__e"},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_fieldsToSet":["list",["map","fieldName","anonymizeIp","value","true"]],"vtp_useHashAutoLink":false,"vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":false,"vtp_enableEcommerce":false,"vtp_trackingId":"UA-132403652-1","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableGA4Schema":true},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"consentVendors"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryK

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 450x450, segment length 16, baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	20439
Entropy (8bit):	7.886521504250281
Encrypted:	false
SSDEEP:	384:lYNg7KOLW2DZb8pamByckos5+9sAELsIUU/6cPDeJp3GAZ9:lYyBLWAZb8NycuMhELJU6P7eWAZ9
MD5:	437D876C85F222C91AB0EFD6449C7B35
SHA1:	67CC20A5BE68ABCAFE4203DB6C107E82BF5C0627
SHA-256:	4B5405FBAFD33C037DF9AE68B44CCAA7F7CA7A07CAC07BA4ED2F4A6A83D8E7E8
SHA-512:	185C19312CC01708EFC884D4F02B4F1B8932358EECEE99EE026D552D6BA415599E82A4A9B2EA573BA70DDC2F0B0C122CFE169CE450E1F0F0B8A0D5648929DC29
Malicious:	false
Reputation:	low
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 580 x 90, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2960
Entropy (8bit):	7.860702077254495
Encrypted:	false
SSDEEP:	48:3h+NFb1u6DZXzElJW8KVgif+LGSLn1bPUB3XvdmWwtx/XUxfxUmC8G2jf:evwqVg5LGSLn1zO3fdm7x/kxfxUsX
MD5:	54D8963F2B634B37ABAEA0025F1079FF
SHA1:	31AEA1E45374F8FE6852A7D44D2D034420E0C555
SHA-256:	D2EF43941AD826AE5D1A1AB35839A7BBEDD86D80AA9EDF3263BEF29DFD1F9AE0
SHA-512:	9FF4BD59724D433BF881ED95CCE73ECF921530EE6C6BD692271E9251080B478142BBF48C9C48CDE978E2A80E9A2887F092B724E917494A39D29B36566B338837
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...D...Z.......T....0PLTE......................x..i..Z..K.\|;zq,pf.f\.\Q.c......IDATx..M.......3..=6t$cL...P...G.CP.3$+>$...\|.8pp...\r......5&Q...=....k. .MX...r.%...H..F..C/..\|.t.s......5D..N.....]..W5`..4d.2D...Q.(C.!..e-C.!..e.2D...Q.(k...Q......R...~........gIv'BW{..>~....O.W..Cq.[.....-}..uw........../.....X.2{......>.._.._.:...!.....>....N.........o?...@.....o.[1.....\....b..2.e...>7.zUi.S....P..Iw?.X$.@.......-..&...2.....l."..5D)....G...3..u..,..X ...G.O........:...=.kUE..s.......t..\|.{.......@><.!...@.....>j...#D5......u...."....B:...b... ...G...: .Y.-.s.p_z.......6..>.....m(D..h{k=..).#;..r...T.-.#....ki..h.8.".p.U...[..~.*:wJ}[k..U..r.(.`u.DSC"R.G[....3r..y........6........;......6.....@w.H......6.tfI..g..w........X.D.pa.(_VN..R...e..#...-.cX.D...D.2M..h.K.\..\|.t............\|..\|$....y`.Daq.Y..^..P.. .#{.%.Es...I....F:.....V.T.b7.......pH..#I..r...D{...'p~Z$i.4.@......~.<.x.......".. yz.D...I.g....U.......i....Kk

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2046
Entropy (8bit):	4.399701259033969
Encrypted:	false
SSDEEP:	48:0PP11xW1fhg4tjhPGVesLQ4sL2cFnkbR9MEV0VIj5vCnK0JIajaY:ux8Zg4DPGVEj/+RWEVGMd0JIajaY
MD5:	F6C8301411D25601B07F4CFAC953B7F0
SHA1:	9A65C9A4423D4A5C0BB1DB1906FFD9AF2595F2F4
SHA-256:	36D5D0ADCA429ECDFC1E57B7DD2F71EB314E32E6760E99E0FB4D2CB2AC281B5B
SHA-512:	0C198DEB7144319FD0DA2265F8DC6D202F1E30315C3589B9B363A8AC8292DE48E21C842C6F607AA32670D89F4DD292067C7741DF451A406A4FE7FE4E0C82FC84
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M113.34,259.94l-45-59.8v-15.7l0-1.6L68,101.32c0-6.51,4.66-11.81,10.36-11.81,6.24,0,9.57,6.23,9.53,12L88.24,146a33.92,33.92,0,0,1,6.53-.62h1.07l-.33-43.93C95.58,90.57,88.07,82,78.34,81.91s-17.86,8.71-17.92,19.4l.35,98.26a7.37,7.37,0,0,0,1.49,5.09l2,2.84,43.2,57.24.11.1.11.21,2,6a79.08,79.08,0,0,1,1.59,15.28h7.61C118.51,267.74,114.64,261.53,113.34,259.94Z"/><path class="cls-1" d="M173,243.47l-.06-.81c-3.16-20.65-20.84-31.88-23-33.19-6.83-4.72-15.91-13.26-19.5-16.72l-2.25-2.53-17.92-19.47a20.65,20.65,0,0,0-15.06-6.81,16.86,16.86,0,0,0-11.51,4.39C76.4,175,76.52,187,83.91,195L109,222.26l5.58-5.16L89.51,189.87a13.47,13.47,0,0,1-3.59-8,9.65,9.65,0,0,1,2.89-8,9.24,9.24,0,0,1,6.36-2.37,13.2,13.2,0,0,1,9.47,4.37l17.9,19.56,1.65,1.84c.51.51,12.76,12.5,21.5,18.49l.38.24c.66.38,16.26,9.69,19.24,27.23l.05.26,0,43.33H173Z"/><path class=

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 4 x 3
Category:	dropped
Size (bytes):	52
Entropy (8bit):	3.889962480580669
Encrypted:	false
SSDEEP:	3:CL7dX8SnTqngi8ib:AdX8STcgi8A
MD5:	E14D834672E8BC72BE2527B73AC796F8
SHA1:	EFFDCAA30349ABC8DFF5C6EB5BF4DD6E65C1B657
SHA-256:	8C4D6460ED2FA9873F21111469C9B64359F179DFD2200DB1D9374B5CBEF099AB
SHA-512:	468073EF4A0D145F145D28F717BCCEEF1BC65FA3584582F2AB2279AE383766D2F12090CD6C1B2FE9DBC2F75B3EFEFFA7293DFABFC9CAEF1ECFADF1A6A15DEAFD
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,.................;

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1683
Entropy (8bit):	4.863200033449857
Encrypted:	false
SSDEEP:	24:tu1PugVQq13kQwi+BIsvTTKg7oaD/6QdfZZOpdz4rhSFqE6Eg7JQqIxhOX:0P+fbPvh8KFdfZsz4CqE6QW
MD5:	15212D30489234794BEF381F334A2CB0
SHA1:	4C69E69EBACD4C921033BBB3DDAFAD66F3F96748
SHA-256:	CF4BA8F10A0CB9A078583797C91BD4B27DAEB3D0976683B440A94B1BEC02DD7C
SHA-512:	A4F01E4A9DCF3AFD9050B9E4481DC61C3EC79FE320550848E95589BE405BFCF2E471C15568C807EE9ADEEFE70F69CD52806B66AAD00C65ADCB4FDF3D06C976E6
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><rect class="cls-1" x="110.18" y="200.36" width="9.6" height="9.6"/><rect class="cls-1" x="110.18" y="168.08" width="9.6" height="9.6"/><rect class="cls-1" x="110.18" y="135.8" width="9.6" height="9.6"/><rect class="cls-1" x="110.18" y="232.64" width="9.6" height="9.6"/><path class="cls-1" d="M141.2,209v-7.6h42.93c.64,2.57,1.41,5.11,2.3,7.6Z"/><path class="cls-1" d="M141.2,176.68v-7.6H183c-.41,2.48-.7,5-.88,7.6Z"/><path class="cls-1" d="M141.2,144.4v-7.6h55.09a84.07,84.07,0,0,0-4.73,7.6Z"/><path class="cls-1" d="M141.2,241.24v-7.6h59.57a78.74,78.74,0,0,0,7.47,7.6Z"/><path class="cls-1" d="M92.84,286.86A16.83,16.83,0,0,1,76,270.05V91.54a16.82,16.82,0,0,1,16.8-16.8h10.63v7.6H92.84a9.32,9.32,0,0,0-9.2,9.2V270.05a9.32,9.32,0,0,0,9.2,9.2H238.4a9.32,9.32,0,0,0,9.2-9.2v-9.86c2.48.41,5,.71,7.6.89v9a16.82,16.82,0,0,1-16.8,16.81Z"/><path class="cls-1" d=

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, baseline, precision 8, 1920x850, components 3
Category:	downloaded
Size (bytes):	186110
Entropy (8bit):	7.95369812652948
Encrypted:	false
SSDEEP:	3072:6u7ocgoSgAHERDSTsNF9dw9XBVRA/Zkm52WsPiQwxFrlf0KXtXABUm2ydfkFjJY5:6Rcgo4WDSTWdw9XzRCkm5hsqFtl86Qmg
MD5:	A424F80C09E9747A75122F10670C030C
SHA1:	0BBEBD7B1419C361DE2B139F1BA121351EB9C692
SHA-256:	CA03C8376D83BF93781E9B1CEA75DABB93CAD45D99AD8F840F0A21952AEE3DD9
SHA-512:	AD0DC54F838CC97F6E7A2ABA8BBEF42055C267FED6916694C44E2152719EE7AB28B2809EAA9068F1687789BF3164D2C4E6907B03929A57A5C005A71700DE6D7A
Malicious:	false
Reputation:	low
URL:	https://content-images.computershare.com/eh96rkuu9740/79d72135a6c74119b571fce1437d7d3d/d2186c148b26f7b6500d6ac9203f5941/ContactUs.jpg?w=1920&h=850&fit=fill&f=center
Preview:	......JFIF.....,.,.....C....................................................................C.......................................................................R..............................................D.......................!..1A.."Qa..2q..#B........3R.$b.r%4C....&.......................................................!.1A.Q."a2q..B.#R.............?..(pF......Q.~..r..v.?..We.\|!Tt...GCG.F.T......D..h&..H.H.8 p@......P4..P...(...)..TB+...A..+9@....V..F...@ .......@ .......@ .......@ .......@ .......@ .......@ .......@ .......@ .......@ .....:..e........-Sr.Z....H.....!..O.7 D....@ V.r...[...........<...y.k..o\rX.=H[S..r........C.~....z-A....h&j.............B)ek2....s\/.y.F.c.T...1.Y.r3^6.nVkq.WRF........(..q..v...7.._.....8.vZ.......8.....(oy.J8..C.X...)..8../s......~5%Ff-.#.......b.].....J*..3c...R...Y5dW..w8....1...[.L=..T...dnh.M..Jo.#Z.W;YPwD..l>..6.....=..c..KR..xh.....?..r..Ru.Z.^...8._}..&...s...3E.......a...Sk.%V...f..5..r9.{.}?D.]&..z..;.K`>#\|X.`~Vo

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5388), with no line terminators
Category:	downloaded
Size (bytes):	5388
Entropy (8bit):	5.072248075851118
Encrypted:	false
SSDEEP:	96:k7ABGCgbCgSCoC1CKCeBpbCbCWCYCvAcMrL7zNAkWFmctWYkltEYxnD:k7ABGCWCLCoC1CKCeBVCbCWCYCvAcgH1
MD5:	09C9B509AFE5572C07E3A9DD2FED9C00
SHA1:	E3D93D3843F7DB17E9A1CC3682CCE7D792BCF35D
SHA-256:	E1A55594082FC9D865DD09BB7EAB5A1CFFCD1832792C0D3EC888282F681A182F
SHA-512:	D8684A833266693B5428363DF735FC38DDC8D5B20A877427EF07ACE4CFAC7C4468CD2A9767A5085E74AC6FA601F40F5FF6B1119CE5C0CC761C0C952E6450C735
Malicious:	false
Reputation:	low
URL:	https://c.evidon.com/sitenotice/7792/gilardi/settingsV2.js
Preview:	(function(){var c={};c["www.gilardi.com\|99885"]={id:99885,themeId:12719,consentDisplayType:1,division:"Computershare",includeSubdomains:0,dataRightsFormEmails:{},rightsLinks:{},dnsFormEmails:{},dnsLinks:{},privacyLinks:{1:"https://www.gilardi.com/privacy"},cookieLinks:{},pubvendorsLinks:{},countries:{1:{consentTemplate:1,dataRightsType:0,dnsRightsType:0,rightslinkId:0,dataRightsFormEmailId:0,dnslinkId:0,dnsFormEmailId:0,privacyLinkId:1,pubvendorsLinkId:0,vendor:1,vendorCategory:1,dnsLinkId:0,dnsEmailId:0,cookieLinkId:0,regulationRightsId:1,gpcEnabled:1},3:{consentTemplate:2,dataRightsType:0,dnsRightsType:0,rightslinkId:0,dataRightsFormEmailId:0,dnslinkId:0,dnsFormEmailId:0,privacyLinkId:1,pubvendorsLinkId:0,vendor:1,vendorCategory:1,dnsLinkId:0,dnsEmailId:0,cookieLinkId:0,regulationRightsId:2,gpcEnabled:0},4:{consentTemplate:2,dataRightsType:0,dnsRightsType:0,rightslinkId:0,dataRightsFormEmailId:0,dnslinkId:0,dnsFormEmailId:0,privacyLinkId:1,pubvendorsLinkId:0,vendor:1,vendorCategory:1

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	21008
Entropy (8bit):	7.871196153492369
Encrypted:	false
SSDEEP:	384:qYNg7yM9OE7C26gtiv6XiaOOsv2Arnmy2BbpuV1+H1jTdZMzFJC:qYyWZ2tSgm2smy6BxfMrC
MD5:	746669DD061F6B4F0D221D91773354D0
SHA1:	74EE5754FEA3452048B6EECC48E701AC0CD959E1
SHA-256:	CD02E6D157598791339008D2F74D844F99D69237F27DCF3A8ACB9228FBB918D2
SHA-512:	9DBF93CA923C7F11005DC6D1A925F42465CD8DF39D512F8A16E6AB360003EA3D2C79053F1E40160A44E193639ED6DAE7796393388DDF99D23078BCCD0061669B
Malicious:	false
Reputation:	low
URL:	https://content-images.computershare.com/eh96rkuu9740/7bafdfe337c247b38eb5a0949fd1c4aa/96659b8dc33ff89b04e2419e6c74fd49/BButvick_GreyBackground_website.jpg?f=top&fit=thumb&w=300&h=300
Preview:	......JFIF.....,.,.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (6270)
Category:	downloaded
Size (bytes):	25979
Entropy (8bit):	5.305868888596401
Encrypted:	false
SSDEEP:	768:xmWZ6HoqIn9+Zn9+JyFkmqtTFmr7V1b5AGJLb128LO+1es8+Ir5+IrB+IrV+Ir7c:t6HE7otJLKcwrjH7NO
MD5:	F5C8AAF8975B4FF1D1FC30CCDC51669B
SHA1:	2117286C0265392BD2D64E3DAEA02CF6D1C2123B
SHA-256:	4EAD3A7D8C0F9FAA2FF14244374C47755D73C3637E7A4F7AB9D55E2888BCE734
SHA-512:	2F0FD878E808D08F97D158400C459CD8298ACD1F65FB29DD7ACEE753986A4548BD0E826C5B555AE70330B8A3FC67E61A237E10E5B96A7E514C67A9D12EC7D3EC
Malicious:	false
Reputation:	low
URL:	https://www.gilardi.com/about-us/our-team
Preview:	<!DOCTYPE html><html><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><title>Our team</title><link rel="icon" type="image/png" href="/img/favicon.png"/><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/><meta property="og:title" content="Our team"/><meta property="og:image" content="https://content-images.computershare.com/eh96rkuu9740/2a73440ea1134e808185dce447956100/6e0e997e957c3a30053bcbab7637e3b7/OurTeam.jpg"/><meta property="og:type" content="website"/><meta name="description" content="Gilardi.s client services team brings extensive expertise to each client engagement."/><meta property="og:description" content="Gilardi.s client services team brings extensive expertise to each client engagement."/><link rel="canonical" href="https://www.gilardi.com/about-us/our-team"/><meta property="og:url" content="https://www.gilardi.com/about-us/our-team"/><noscript><style>.popup__modal {display:block; position: fixed; top: 0; left: 0; background-

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 450x450, segment length 16, baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	27573
Entropy (8bit):	7.8888280801417805
Encrypted:	false
SSDEEP:	768:lYye1hZOZrPu+y/boQCdSqwBveUfRBw+/1IZprocP:lKau+pgpvJvmrl
MD5:	F191BA7CEAB64E6C1CC5BA22B9D61E0F
SHA1:	90503029B044D7FD29D88D1D70F16D275842470E
SHA-256:	29F5084167F5821E49D5C71CCBF80DA4388553AA59C41607C1360DFE37493819
SHA-512:	D0F4EC17515B5D3FB9B98F1DD94CA420C4D1807521D1174A57B7FA37C79858085E67ABA14CB2B21482ECE9279C5F83304978D5ADBFA9BAF828345D9835ABB0E3
Malicious:	false
Reputation:	low
URL:	https://content-images.computershare.com/eh96rkuu9740/799b781401cb477b80a677fefce37de9/767bd69590f2106f78073c5d343560b3/LMcDermott_GreyBackground2.jpg?f=top&fit=thumb&w=300&h=300
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2046
Entropy (8bit):	4.399701259033969
Encrypted:	false
SSDEEP:	48:0PP11xW1fhg4tjhPGVesLQ4sL2cFnkbR9MEV0VIj5vCnK0JIajaY:ux8Zg4DPGVEj/+RWEVGMd0JIajaY
MD5:	F6C8301411D25601B07F4CFAC953B7F0
SHA1:	9A65C9A4423D4A5C0BB1DB1906FFD9AF2595F2F4
SHA-256:	36D5D0ADCA429ECDFC1E57B7DD2F71EB314E32E6760E99E0FB4D2CB2AC281B5B
SHA-512:	0C198DEB7144319FD0DA2265F8DC6D202F1E30315C3589B9B363A8AC8292DE48E21C842C6F607AA32670D89F4DD292067C7741DF451A406A4FE7FE4E0C82FC84
Malicious:	false
Reputation:	low
URL:	https://content-images.computershare.com/eh96rkuu9740/831a25f085af4e0e9f8b354be3cf19b6/9774d186295f1ab7ba69c6dc29bde179/support-icon-navy.svg?w=300&h=300&fit=fill&f=faces
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M113.34,259.94l-45-59.8v-15.7l0-1.6L68,101.32c0-6.51,4.66-11.81,10.36-11.81,6.24,0,9.57,6.23,9.53,12L88.24,146a33.92,33.92,0,0,1,6.53-.62h1.07l-.33-43.93C95.58,90.57,88.07,82,78.34,81.91s-17.86,8.71-17.92,19.4l.35,98.26a7.37,7.37,0,0,0,1.49,5.09l2,2.84,43.2,57.24.11.1.11.21,2,6a79.08,79.08,0,0,1,1.59,15.28h7.61C118.51,267.74,114.64,261.53,113.34,259.94Z"/><path class="cls-1" d="M173,243.47l-.06-.81c-3.16-20.65-20.84-31.88-23-33.19-6.83-4.72-15.91-13.26-19.5-16.72l-2.25-2.53-17.92-19.47a20.65,20.65,0,0,0-15.06-6.81,16.86,16.86,0,0,0-11.51,4.39C76.4,175,76.52,187,83.91,195L109,222.26l5.58-5.16L89.51,189.87a13.47,13.47,0,0,1-3.59-8,9.65,9.65,0,0,1,2.89-8,9.24,9.24,0,0,1,6.36-2.37,13.2,13.2,0,0,1,9.47,4.37l17.9,19.56,1.65,1.84c.51.51,12.76,12.5,21.5,18.49l.38.24c.66.38,16.26,9.69,19.24,27.23l.05.26,0,43.33H173Z"/><path class=

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	783
Entropy (8bit):	7.671263090106827
Encrypted:	false
SSDEEP:	24:hrnuOFVbViYihTQF9/6ZOvp8/0RWq3cUAM:hruOFVbVxiTQ//6ZOxTj
MD5:	F4C5BF2E7CEFAAF6E87C189E6204694C
SHA1:	2177272EBA9C19B32B61286ED30F084F74781A97
SHA-256:	35C393D55F2699332D17F3D2662BE6743C9D3373850D6AAFF09DD70F2EFC2B57
SHA-512:	04F9ED0F5A5F736B5751D23D57B360D3FB1556E6A8DAB73C490D4C67C83A5832A8FD3671B76CBF69F13D3BE8929ABC31ACD603766500A6E2D625A396676F4F5C
Malicious:	false
Reputation:	low
URL:	https://www.gilardi.com/img/favicon.png
Preview:	.PNG........IHDR... ... .....D.......PLTE..[.)bRg.....................Od..%`.4j............}..Xl.Mc.]p..........v...%_...&@s\p.......6N~."]bu....2K{.......(b)Cv...j\|.....'aBY....:R.&At......'Bt...>U......,EwBY..8n...,Fw...l~..........................=T.o..gy.at.`s.`s.cv.l~..............Wk..... [...n....fMb.Xl......#>q...3K\|....)b.........-f...^q.w.....Ti..!\.2i...'At....m..x........\|...1h.0g^r...............p..0Iz. \........pHYs.................tIME........n......IDAT8..eS.A.....B.QA.;;PT.BO%..._.3.......O...l...[#.>!1......-.ffe.....-.....M..I.+<--sRN.1.........A}...M4.y...j..F....i...n.zz...h.xB?.H....T..a.......Q.0...NLNM.......yX...W.....2...@.B...a..4k"..T.T...J.vv..3..>.............y....}i3.u......Y...........\|..?>....X..'.-[~..s....IEND.B`.

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1925
Entropy (8bit):	4.494741791266522
Encrypted:	false
SSDEEP:	48:0PzQN3iU+oEL3WkD+WQMNOMo+4Quzgzwl8j4DwM:kQypoEL3WnWQCo+4Quzgw24D1
MD5:	8E0883AFB6BC509D126EF46399686E40
SHA1:	225680724284231863C9785C7E2A7E0E6C346A02
SHA-256:	CFF6AC12F6802D9FD239826B387A6709D2B401B6C9DC19CBCF3A4D6E3AFC1EB9
SHA-512:	A0FEDD79976E40D6538F54FD6E9EA614798F23A40CA8E3153CAF12F1FAA5BD34B75DF73E2E7BCC7B22410F720B5645644882F28ECFFF61EBF41FBED25EE92A43
Malicious:	false
Reputation:	low
URL:	https://content-images.computershare.com/eh96rkuu9740/fffccb33654140bda7841d0e2fed9270/fd33b7f34c9c59ef94b94c31d7fce115/partnership-handshake-icon-navy.svg?w=300&h=300&fit=fill&f=faces
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M48.33,186.29a5.8,5.8,0,1,1,5.78-5.8A5.8,5.8,0,0,1,48.33,186.29Z"/><path class="cls-1" d="M208.42,248.37a16.54,16.54,0,0,1-12-5.22,18.84,18.84,0,0,1-1.32-1.47l-6.61-11.19-13.72-24.21a3.78,3.78,0,0,1,1.44-5.18,3.67,3.67,0,0,1,1.86-.49,3.79,3.79,0,0,1,3.31,1.92l19.23,33.93.19.23c2.32,2.73,4.89,4.05,7.89,4.05a13,13,0,0,0,3.48-.53l4.24,6.6A23.64,23.64,0,0,1,208.42,248.37Z"/><path class="cls-1" d="M176.77,255.76c-3.94,0-9.68-1.45-14.76-8.3l-1-1.76-11-19.21a3.8,3.8,0,0,1,3.29-5.69,3.8,3.8,0,0,1,3.3,1.91l11.79,20.52.24.34c3.1,3.8,6.28,4.59,8.4,4.59h.47l3.84,7A17.34,17.34,0,0,1,176.77,255.76Z"/><circle class="cls-1" cx="321.67" cy="192.45" r="5.8"/><path class="cls-1" d="M145.39,259.65c-6.22,0-14.89-2.13-20.87-12.25L96.8,200H84.35v18.19H42.65v-7.6h34.1V84H43v-7.6H84.35V92.72h52.59l-6,7.6H84.35v92h16.77l29.95,51.27c3.55,6,8.31,8,1

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	21008
Entropy (8bit):	7.871196153492369
Encrypted:	false
SSDEEP:	384:qYNg7yM9OE7C26gtiv6XiaOOsv2Arnmy2BbpuV1+H1jTdZMzFJC:qYyWZ2tSgm2smy6BxfMrC
MD5:	746669DD061F6B4F0D221D91773354D0
SHA1:	74EE5754FEA3452048B6EECC48E701AC0CD959E1
SHA-256:	CD02E6D157598791339008D2F74D844F99D69237F27DCF3A8ACB9228FBB918D2
SHA-512:	9DBF93CA923C7F11005DC6D1A925F42465CD8DF39D512F8A16E6AB360003EA3D2C79053F1E40160A44E193639ED6DAE7796393388DDF99D23078BCCD0061669B
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	8369
Entropy (8bit):	4.296460543522956
Encrypted:	false
SSDEEP:	192:vRyiDPA5MMS4aDzhbUDj7kI6F0D/YvtIYHku9WO4Peez3K:Zy/vaDzhoTh6F0DAvtou9WODeza
MD5:	C5E87DB7E623044F6B3C0A13ED348832
SHA1:	5217D55EF7853DC1B6FE74D157D9B45CC7C7DF44
SHA-256:	7CD576D07E4900BA9568AEF7DC02D07FA9107B84C26C3D6956E8E2604D436D17
SHA-512:	7833523158B5D990BF9E815722D19735EA148195CF767082C0DE386028E8F71C7F4CB5A0DF4A6B22A7B41A3F116A6EDEC02D2840E3234E133B12BB18442EF3FC
Malicious:	false
Reputation:	low
URL:	https://content-images.computershare.com/eh96rkuu9740/2sbDjiRdHpvTtxGaLuZ8rN/25556300175ed902a13b05f86f3e304c/gilardi_logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 157.06 73.85"><title>Gilardi_Logo_Black_HighRes</title><path d="M257.57,542.19a5.32,5.32,0,0,1,1.93-3.91,11.91,11.91,0,0,1,2.35-1.61c-1.57-1-2.28-2-2.3-3.2,0-1.81,2.23-3.93,4.39-3.93,2.58,0,4,1.63,4,3.2,0,1.29-1.48,2.55-2.76,3a11.47,11.47,0,0,1,4.53,4.28,5.85,5.85,0,0,0,1.35-3.36.67.67,0,0,0-.71-.71H270c-.14,0-.16-.07-.16-.16v-.55c0-.07,0-.12.16-.12s1.45.07,2.65.07c.85,0,2.23-.07,2.37-.07s.16.07.16.19v.48c0,.09,0,.16-.16.16h-.4c-.69,0-1.08.09-1.4.6a38.87,38.87,0,0,1-2.87,4.32c.3.23,1.22,1.43,1.91,2.09a3.84,3.84,0,0,0,2.55,1.34,3,3,0,0,0,2.39-1.52c.07-.09.14-.11.19-.07l.45.32s0,.1,0,.21a5.62,5.62,0,0,1-4.85,2.9c-2.6,0-3.61-1.36-4.83-2.74-1,.92-2.3,2.74-5.25,2.74C259.64,546.17,257.57,543.91,257.57,542.19Zm10.05.37a17.37,17.37,0,0,0-5-5.27,5.07,5.07,0,0,0-1.86,4.05,3.25,3.25,0,0,0,3,3.06A4.86,4.86,0,0,0,267.62,542.56Zm-5.29-9.66c0,1,1.06,1.88,1.93,2.3.48-.32,1.08-.88,1.08-2.53,0-1-.48-2.16-1.4-2.16C262.7,530.51,262.33,531.7,262.33,532.9

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	783
Entropy (8bit):	7.671263090106827
Encrypted:	false
SSDEEP:	24:hrnuOFVbViYihTQF9/6ZOvp8/0RWq3cUAM:hruOFVbVxiTQ//6ZOxTj
MD5:	F4C5BF2E7CEFAAF6E87C189E6204694C
SHA1:	2177272EBA9C19B32B61286ED30F084F74781A97
SHA-256:	35C393D55F2699332D17F3D2662BE6743C9D3373850D6AAFF09DD70F2EFC2B57
SHA-512:	04F9ED0F5A5F736B5751D23D57B360D3FB1556E6A8DAB73C490D4C67C83A5832A8FD3671B76CBF69F13D3BE8929ABC31ACD603766500A6E2D625A396676F4F5C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....D.......PLTE..[.)bRg.....................Od..%`.4j............}..Xl.Mc.]p..........v...%_...&@s\p.......6N~."]bu....2K{.......(b)Cv...j\|.....'aBY....:R.&At......'Bt...>U......,EwBY..8n...,Fw...l~..........................=T.o..gy.at.`s.`s.cv.l~..............Wk..... [...n....fMb.Xl......#>q...3K\|....)b.........-f...^q.w.....Ti..!\.2i...'At....m..x........\|...1h.0g^r...............p..0Iz. \........pHYs.................tIME........n......IDAT8..eS.A.....B.QA.;;PT.BO%..._.3.......O...l...[#.>!1......-.ffe.....-.....M..I.+<--sRN.1.........A}...M4.y...j..F....i...n.zz...h.xB?.H....T..a.......Q.0...NLNM.......yX...W.....2...@.B...a..4k"..T.T...J.vv..3..>.............y....}i3.u......Y...........\|..?>....X..'.-[~..s....IEND.B`.

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	488
Entropy (8bit):	5.313367621493572
Encrypted:	false
SSDEEP:	6:TMVBdbj4dgXRxVnzVEn6VWB3qmc4slZKYnic4sf3nUmlNthqOmLq6jHzhUnONth2:TMHdPQi/nzVJ/KYf3njfhN0HSOfs
MD5:	94867036E5B64ACF26AD33AD59016C38
SHA1:	94402E5F87CBD962C3D7DFBB17D6253AE22B99DB
SHA-256:	04458660718E2A0F77BF318456674D9460A9997128E219A51854E58488FC7F0A
SHA-512:	31EC3B9605D51B73F2BDB5FAF6792F01B2466DF30711A146B3DA2DDA84565E1155E59E4647E2D2E29D32E8CAF0F2A32C2C91B64F175481152BF18F6AB501CD01
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 25.4.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 1920 1080" width="1920" height="1080" style="enable-background:new 0 0 1920 1080;" xml:space="preserve">.<style type="text/css">...st0{fill:#36A4C6;}.</style>.<rect class="st0" width="1920" height="1080"/>.</svg>.

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13114), with no line terminators
Category:	downloaded
Size (bytes):	13114
Entropy (8bit):	5.25521673093633
Encrypted:	false
SSDEEP:	384:5Si52QZP0yCVtEgMyfy+yZ74zAdvVjh0r4Iy+y2yQyTy1wXj:5vTHgjqZiavhhl3ZxfWmj
MD5:	02979007459AEADCCD3688D740108248
SHA1:	2FC2B17B7FDD6A7C90ABAA06776A92B17FC7E65E
SHA-256:	B59B1F68A3FBAB7604920C320604E589634F508421AA5F66A5A63BAAEC776141
SHA-512:	F08F1423301E8752105828491BE583EB0AA76C1E23C6508138C03017A6A8FFAF0BC3CD94D2961F522923288CD3B21EBB8C15ADFB03B9BD59EAAB31204380A5D2
Malicious:	false
Reputation:	low
URL:	https://c.evidon.com/sitenotice/evidon-banner.js
Preview:	(function(){if(!String.prototype.includes){String.prototype.includes=function(G,H){if(G instanceof RegExp){throw TypeError("first argument must not be a RegExp")}if(H===undefined){H=0}return this.indexOf(G,H)!==-1}}var n="_evidon_banner",v="_evh-ric-c",y="_evh-learn",z="_evh-ric-l",b="_evidon-background",F="_evidon-title",A="_evidon-message",w="_evidon-collapse-message",x="_evidon-decline-button",a="_evidon-accept-button",C="_evidon-option-button",B=800;var l=4,h=8,u=10,e=11,s=13,k=31,q=49;var D=1,E=2;var f="evidon-background",g="evidon-banner",t="evidon-banner-title",p="evidon-banner-message",i="evidon-banner-collapse-message",o="evidon-banner-image",m="evidon-banner-icon",j="evidon-banner-declinebutton",d="evidon-banner-acceptbutton",r="evidon-banner-optionbutton";var c=function(){var L=this,W=window.evidon.notice,S=document,M=null,J=false,K=false,I=null;function V(){if(S.documentMode===undefined){return 0}else{return S.documentMode}}function H(aa){var Z=window.evidon.notice._parseCs

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1925
Entropy (8bit):	4.494741791266522
Encrypted:	false
SSDEEP:	48:0PzQN3iU+oEL3WkD+WQMNOMo+4Quzgzwl8j4DwM:kQypoEL3WnWQCo+4Quzgw24D1
MD5:	8E0883AFB6BC509D126EF46399686E40
SHA1:	225680724284231863C9785C7E2A7E0E6C346A02
SHA-256:	CFF6AC12F6802D9FD239826B387A6709D2B401B6C9DC19CBCF3A4D6E3AFC1EB9
SHA-512:	A0FEDD79976E40D6538F54FD6E9EA614798F23A40CA8E3153CAF12F1FAA5BD34B75DF73E2E7BCC7B22410F720B5645644882F28ECFFF61EBF41FBED25EE92A43
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M48.33,186.29a5.8,5.8,0,1,1,5.78-5.8A5.8,5.8,0,0,1,48.33,186.29Z"/><path class="cls-1" d="M208.42,248.37a16.54,16.54,0,0,1-12-5.22,18.84,18.84,0,0,1-1.32-1.47l-6.61-11.19-13.72-24.21a3.78,3.78,0,0,1,1.44-5.18,3.67,3.67,0,0,1,1.86-.49,3.79,3.79,0,0,1,3.31,1.92l19.23,33.93.19.23c2.32,2.73,4.89,4.05,7.89,4.05a13,13,0,0,0,3.48-.53l4.24,6.6A23.64,23.64,0,0,1,208.42,248.37Z"/><path class="cls-1" d="M176.77,255.76c-3.94,0-9.68-1.45-14.76-8.3l-1-1.76-11-19.21a3.8,3.8,0,0,1,3.29-5.69,3.8,3.8,0,0,1,3.3,1.91l11.79,20.52.24.34c3.1,3.8,6.28,4.59,8.4,4.59h.47l3.84,7A17.34,17.34,0,0,1,176.77,255.76Z"/><circle class="cls-1" cx="321.67" cy="192.45" r="5.8"/><path class="cls-1" d="M145.39,259.65c-6.22,0-14.89-2.13-20.87-12.25L96.8,200H84.35v18.19H42.65v-7.6h34.1V84H43v-7.6H84.35V92.72h52.59l-6,7.6H84.35v92h16.77l29.95,51.27c3.55,6,8.31,8,1

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65529), with no line terminators
Category:	downloaded
Size (bytes):	232090
Entropy (8bit):	5.235195680287624
Encrypted:	false
SSDEEP:	1536:K4EsuXS8D9L3EgVPl7RK2dhPg0ZYAm3tqlBlSS3ukJOKZLZ8A6SpAsiqQAz:ttOgiukJ7pi8
MD5:	C16CA2530E753C5011B74BAC99660499
SHA1:	025D134A9C71ADA585D18817AEC11C9DE7E84C88
SHA-256:	A436C9F29184D4AF80E178121DA28F6469D6E5C485D13CB9E77266286E611A01
SHA-512:	F564897B666A1991E0A6628B37879F5C325EE35CAED7B12BD230B1A69A0126418595DEC9FFA3468FDEDCBB8AC681FA666E2B9E4FE653800890281838D58B36AA
Malicious:	false
Reputation:	low
URL:	https://www.gilardi.com/css/gilardi-c16ca2530e753c5011b74bac99660499.css
Preview:	..button{font-size:16px;font-family:"Overpass",sans-serif;display:inline-block;padding:13px 26px;border-width:2px;border-style:solid;text-transform:uppercase;font-weight:bold;border-radius:7px;background-color:rgba(0,0,0,0);transition:all .09s ease-in-out;color:#fff;text-decoration:none;cursor:pointer}.button:hover{background-color:#fff;color:#00205b;border-color:#fff}.btn-primary{display:inline-block;padding:13px 26px;border-width:2px;border-style:solid;text-transform:uppercase;font-weight:bold;border-radius:7px;color:#00205b;border-color:#00205b;font-family:"Overpass",sans-serif;background-color:rgba(0,0,0,0);transition:all .09s ease-in-out;font-size:16px;cursor:pointer;text-decoration:none}.btn-primary:hover{color:#fff;background-color:#00205b;text-decoration:none}.cpu-rteElement-buttonprimary{display:inline-block;padding:13px 26px;border-width:2px;border-style:solid;text-transform:uppercase;font-weight:bold;border-radius:7px;color:#00205b;border-color:#00205b;font-family:"Overpas

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78398
Entropy (8bit):	5.330367292891129
Encrypted:	false
SSDEEP:	768:ukyrFX9ILhXhKXoPxK9aLGgLRdYvCH5rssmUw6YrqvGw1bXh9ZkVl4Exnm9IJGgY:u7DILhXkXEhLGgL10UBkVnnm93c8
MD5:	2D1947E943B6CDA46CB404F50B8160CD
SHA1:	6F4F32F60A8F578F756048F6080A3339DAAF256D
SHA-256:	A42C336C6564E32C873D31CFD3CE9516A270D594D337E701ECFF6939FB71CF2D
SHA-512:	F9E28AE6BDF5C8237584F86D7643CF469D901208B13C9F94894289DD45BB3523AEF995017E3288ECFAA639FC394C44668E68F88ADAC2AF5C2786CC4E81E0ABF6
Malicious:	false
Reputation:	low
URL:	https://c.evidon.com/sitenotice/evidon-sitenotice-tag.js
Preview:	(function(){var ab={en:{monthvar:"months",partnervar:"partners"},fr:{monthvar:"mois",partnervar:"partenaires"},it:{monthvar:"mesi",partnervar:"partner"},de:{monthvar:"Monate",partnervar:"Partnern"}};if(!Object.keys){Object.keys=(function(){var aP=Object.prototype.hasOwnProperty,aO=!({toString:null}).propertyIsEnumerable("toString"),aM=["toString","toLocaleString","valueOf","hasOwnProperty","isPrototypeOf","propertyIsEnumerable","constructor"],aN=aM.length;return function(aR){if(typeof aR!=="function"&&(typeof aR!=="object"\|\|aR===null)){throw new TypeError("Object.keys called on non-object")}var aT=[],aS,aQ;for(aS in aR){if(aP.call(aR,aS)){aT.push(aS)}}if(aO){for(aQ=0;aQ<aN;aQ++){if(aP.call(aR,aM[aQ])){aT.push(aM[aQ])}}}return aT}}())}if(typeof Object.assign!="function"){Object.assign=function(aP,aR){if(aP==null){throw new TypeError("Cannot convert undefined or null to object")}var aQ=Object(aP);for(var aM=1;aM<arguments.length;aM++){var aO=arguments[aM];if(aO!=null&&aO!=undefined){for(

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	25366
Entropy (8bit):	5.117319828164417
Encrypted:	false
SSDEEP:	768:KHGcLXX8cxHXGHCs1Y7705FuF2p/YVn+IS8uSH:KHGE8cx3Gis1X8AeVChSH
MD5:	82FFF6AE34CE6A12D8E48901B28E7FF5
SHA1:	DDEBEB06A58C551E4FFC5568246200BCF2A33552
SHA-256:	7EF7EBFA054FF2145900A5FF73CB39C0D8887266451E2190FA1124404A149E62
SHA-512:	A65536564F57DC04E7BB781CE9A55B9D710343A359966D0AE806F95406267DC2904DA5AA5B85CE21E530C57661583F6C74311098D2756FA7F03203F89F1CBE50
Malicious:	false
Reputation:	low
URL:	https://www.factaclassactionsettlement.com/css/TopNavLightBlueTheme.css
Preview:	/* Some simple CSS kludges to get the various browsers to behave / ...html.{. overflow-y: scroll;.}../ extra nav button styles /...topmenu_list tr td.butt a:link, .topmenu_list tr td.butt a:visited {. color:#fff;. background-color: #212f82;. padding: .5em;. }...topmenu_list tr td.butt a:hover {. color:#fff;. background-color: blue;. padding: .5em;. }../ end extra nav button styles /..body { . background-color: white; . margin: 0; . padding-top: 10px; . font-family: "Helvetica Neue", Helvetica, Arial, sans-serif;. font-size: 14px;..}.. .input, select, textarea { . font-size: 100% .}..form {. padding: 0;. margin: 0;.}../ The main body, centered for 800 width screens / ...staticbody_cel { . padding: 0px 30px 0px 30px; . margin: 0; . border: 0; . vertical-align: top; . text-align: left;. background-image: url( "images/bkggrad.png" ); . background-repeat: repeat-x; . background-attachment: scroll; . background-position: top left.}../ Masthead sty

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3213
Entropy (8bit):	4.2581727379609005
Encrypted:	false
SSDEEP:	48:0PKxsiJfChlA2//QLF9DGsmLX1gIGX1ZpP8qsAeyLYS8pRlLsp1:XxlJfrjHGlLXSIGX1XP8Me0YS8RLsp1
MD5:	5C3F283946F0A893043A04A16B34DDE9
SHA1:	FBB5D38888290FB93740F4D78370CDB57E6741A6
SHA-256:	BEACBB256CBD8D7078190EC60821EB9BC58E80EFAFFB842D97D71F3C2B6A4368
SHA-512:	15D1F342891CD3B2C90887D61D0B4145B757A9D4AA4C5190B048B39D2CFEC2DB4EE3E2AA52A5620B212E2CDCD55EBBB4E2637535DBC5C91456DB5532DD543CCC
Malicious:	false
Reputation:	low
URL:	https://content-images.computershare.com/eh96rkuu9740/6d38f371887443488c98d49ec4649805/feb8a9e6cac99987cf1575af6257110b/idea-lightbulb-icon-navy.svg?w=300&h=300&fit=fill&f=faces
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M139.12,306.85l0-60.64h8.48a9.32,9.32,0,0,0,9.19-9.19V178.37a9.32,9.32,0,0,0-9.19-9.2H100.2a9.33,9.33,0,0,0-9.2,9.2V237a9.32,9.32,0,0,0,9.2,9.19h8.43l0,60.64h-7.6V253.94l-2.82-.34A16.78,16.78,0,0,1,83.4,237V178.37a16.82,16.82,0,0,1,16.8-16.8h47.38a16.82,16.82,0,0,1,16.8,16.8V237a16.77,16.77,0,0,1-14.84,16.58l-2.82.34v52.91Z"/><path class="cls-1" d="M123.89,142.35A26.14,26.14,0,1,1,150,116.21,26.17,26.17,0,0,1,123.89,142.35Zm0-44.68a18.54,18.54,0,1,0,18.53,18.54A18.56,18.56,0,0,0,123.89,97.67Z"/><path class="cls-1" d="M253.71,191.19H208.58a2.71,2.71,0,0,0,0,5.42h45.13a2.71,2.71,0,0,0,0-5.42Z"/><path class="cls-1" d="M242.29,210.88H220a2.71,2.71,0,1,0,0,5.42h22.29a2.71,2.71,0,0,0,0-5.42Z"/><path class="cls-1" d="M230.89,42.11a2.82,2.82,0,0,0,2.82-2.82V26a2.82,2.82,0,0,0-5.64,0V39.29A2.82,2.82,0,0,0,230.89,42.11Z"/><path cla

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 450x450, segment length 16, baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	26590
Entropy (8bit):	7.898981477334702
Encrypted:	false
SSDEEP:	768:lYy3oepF9XsA3DK0XAEgSWiLRmB9QagO+TU:l7oWuHE9LRumarWU
MD5:	C6440A826A99C1ECFCF5A612B7F3CC57
SHA1:	4C7E75EBA7746915960835EE0BADEAC84216383C
SHA-256:	B5DC1ED79A6B730ED2356752680030FADFA1AED8C9DFD5C6C7E846ADFDD224D2
SHA-512:	01E7065A7D84592A2C8636BD56E4FE5C7937070EE4E3B514954B3A6D3DE1D200F7089D3AC35F42C07C27AED756CC94A8AD2089ADFDF25828815C16801B68404D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	488
Entropy (8bit):	5.277772830852179
Encrypted:	false
SSDEEP:	6:TMVBdbj4dgXRxVnzVEn6VWB3qmc4slZKYnic4sf3nUmlNthqOmLq6jHzh7Nth2:TMHdPQi/nzVJ/KYf3njfhN0Hxfs
MD5:	FC53568457BD3E8C3215DA1667F01985
SHA1:	81FB2415E5A470E509B72F6DFB2C0218A175278F
SHA-256:	A2BFC2BF3C263070A79FB0948D9F57FDDFCE0410B468D2C0DA5C04A3F3A79432
SHA-512:	05BCFBBF819CECF5461AD993349A1480578EABD8838A307A72E5590E457B2918931317159781B8832FCC7E9AFFAB78EC65CA4BC14397C91234E9307F13E862B1
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 25.4.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 1920 1080" width="1920" height="1080" style="enable-background:new 0 0 1920 1080;" xml:space="preserve">.<style type="text/css">...st0{fill:#003150;}.</style>.<rect class="st0" width="1920" height="1080"/>.</svg>.

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3213
Entropy (8bit):	4.2581727379609005
Encrypted:	false
SSDEEP:	48:0PKxsiJfChlA2//QLF9DGsmLX1gIGX1ZpP8qsAeyLYS8pRlLsp1:XxlJfrjHGlLXSIGX1XP8Me0YS8RLsp1
MD5:	5C3F283946F0A893043A04A16B34DDE9
SHA1:	FBB5D38888290FB93740F4D78370CDB57E6741A6
SHA-256:	BEACBB256CBD8D7078190EC60821EB9BC58E80EFAFFB842D97D71F3C2B6A4368
SHA-512:	15D1F342891CD3B2C90887D61D0B4145B757A9D4AA4C5190B048B39D2CFEC2DB4EE3E2AA52A5620B212E2CDCD55EBBB4E2637535DBC5C91456DB5532DD543CCC
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M139.12,306.85l0-60.64h8.48a9.32,9.32,0,0,0,9.19-9.19V178.37a9.32,9.32,0,0,0-9.19-9.2H100.2a9.33,9.33,0,0,0-9.2,9.2V237a9.32,9.32,0,0,0,9.2,9.19h8.43l0,60.64h-7.6V253.94l-2.82-.34A16.78,16.78,0,0,1,83.4,237V178.37a16.82,16.82,0,0,1,16.8-16.8h47.38a16.82,16.82,0,0,1,16.8,16.8V237a16.77,16.77,0,0,1-14.84,16.58l-2.82.34v52.91Z"/><path class="cls-1" d="M123.89,142.35A26.14,26.14,0,1,1,150,116.21,26.17,26.17,0,0,1,123.89,142.35Zm0-44.68a18.54,18.54,0,1,0,18.53,18.54A18.56,18.56,0,0,0,123.89,97.67Z"/><path class="cls-1" d="M253.71,191.19H208.58a2.71,2.71,0,0,0,0,5.42h45.13a2.71,2.71,0,0,0,0-5.42Z"/><path class="cls-1" d="M242.29,210.88H220a2.71,2.71,0,1,0,0,5.42h22.29a2.71,2.71,0,0,0,0-5.42Z"/><path class="cls-1" d="M230.89,42.11a2.82,2.82,0,0,0,2.82-2.82V26a2.82,2.82,0,0,0-5.64,0V39.29A2.82,2.82,0,0,0,230.89,42.11Z"/><path cla

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, baseline, precision 8, 1920x850, components 3
Category:	downloaded
Size (bytes):	194431
Entropy (8bit):	7.973416512963353
Encrypted:	false
SSDEEP:	3072:03vrYQkYWhWE16/gzG3lVjMSTVxcMcoFp5GxOMkmJx3THGe31E3eCL/oF07gL0xl:8Dyhl6YAlVjXhxcS/AhTHGe3i3rUwgwz
MD5:	9F6CCC60756DF965A3E16A50C10677D4
SHA1:	97D8A5A12EB1518AA3F490DF4CE26DB2F7D71FB9
SHA-256:	CA088D8F1D292F3134BC54E14FD735798CC28ACD6436E6B2EE66E7B965456844
SHA-512:	0EB0F193D193B32DBD837DF6C74434A91D04777ED348EE3C17D272325759F41327A37E7CB6D70BF332DB9B11543F2DB03E07517573BC89BFEF18349D24B68D0C
Malicious:	false
Reputation:	low
URL:	https://content-images.computershare.com/eh96rkuu9740/2a73440ea1134e808185dce447956100/6e0e997e957c3a30053bcbab7637e3b7/OurTeam.jpg?w=1920&h=850&fit=fill&f=center
Preview:	......JFIF.....,.,.....C....................................................................C.......................................................................R..............................................G.......................!.1..AQ.."a.q....2#B..3R....Cb....$S4r%.D..5c.................................2.......................!1.A.Q"2aqB....#.R...$3C.............?..N..j..._U.<......N.i.o../?..z&.K.....W8..V..+.:.h.I...:.c.b...F...kWu..J.....04...^m...<...u.5..-..e.]la..E...AY.....[z...\.u.....Vc..Wcy\.e..Op..Pe<.B...\|........m<.u...<5.......:.;.7P......+}m\|..XoW[\|;.Z....5"...'....~............X.\|0%..n...R..n...........:..MV.\|.9CU.\|'tMG...{....{...tM%..wD.6.wCE.....4....D..{....i...F...OT].K....n..uo....o.tD\|..&.u.tM`.=....1.U.W.....S...M..".1\|#tM........d\|h..u?.;.k..=QeH...]H....4_.?...=.tB...P....A..uD.\|x..>?..5"........!z;........`[.#...7.e.Ju.wQu^..#u...\. ..F.Q.!..8.{X..*..(..w...c..;...=..S..c..3n.}.6.....4.eNK.Q..~..:.....u#.O[ 3.y..

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 450x450, segment length 16, baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	20316
Entropy (8bit):	7.895336611352067
Encrypted:	false
SSDEEP:	384:tYNg7kMdzYEK9ILKcy6tC8QLatt8cNBX5zaRLy5urk23OSvyCwc4FNIcO:tYyIMvKWKL6taLattXJ58B+GyMoJO
MD5:	FF9A20B1DC2DA3D8B3FA7972AF35833D
SHA1:	22E81D4A4750FDCA988D6ECE036DE9270737FD8C
SHA-256:	DB0D1BCA8751D00E634C4392C855B60AF20E53DEDE702F500E6BAA5A034CBE08
SHA-512:	A751D53BF77F0CB0445E269F7E32F3944A95FF31B8BEE1752DA7CA09B41620DBD843A4AA98792777BB00E8ED52ABE8533FE4B04438B17BBE1136129A509E7D89
Malicious:	false
Reputation:	low
URL:	https://content-images.computershare.com/eh96rkuu9740/e5eb7c23d4bf4c0db739751135d7bc72/bc48a7154c6ffcc3fef26c56a0793b39/GMullins_GreyBackground.jpg?f=top&fit=thumb&w=300&h=300
Preview:	......JFIF..............ICC_PROFILE.......none....mntrRGB XYZ ...........!acsp........IEC sRGB.......................-HP ................................................desc...D...tbXYZ........bTRC........dmdd........gXYZ...`....gTRC........lumi...t....meas.......$bkpt........rXYZ........rTRC........tech........vued........wtpt...h....cprt...\|...(chad.......,desc........sRGB IEC61966-2-1 withBPC...............................................................................XYZ ......$.........curv.......................#.(.-.2.7.;.@.E.J.O.T.Y.^.c.h.m.r.w.\|...............................................................%.+.2.8.>.E.L.R.Y.`.g.n.u.\|.........................................&./.8.A.K.T.].g.q.z...............................!.-.8.C.O.Z.f.r.~......................... .-.;.H.U.c.q.~.......................+.:.I.X.g.w.....................'.7.H.Y.j.{...................+.=.O.a.t...................2.F.Z.n.................%.:.O.d.y...............'.=.T.j...............".9.Q.i..........

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, baseline, precision 8, 1920x850, components 3
Category:	downloaded
Size (bytes):	146051
Entropy (8bit):	7.928039409421398
Encrypted:	false
SSDEEP:	3072:qEau23wbLdu2EpDMeSZO9jop7DKMtq/bf9m0lVEgP7tVcjpAMH05QoP:qyLdu2EpD/pxblmCVEgP73KpAMHcQoP
MD5:	A9115978E0C5C7B81AF2C985B9F42540
SHA1:	6E2D5B01C554316E99D2337A240FDB4D20E8F361
SHA-256:	1818D879785327BFB7ABA9D1DB1C65CB7BBB97D7566BFCF79F2519535095C27F
SHA-512:	F7A3F9860B94CA2B465A9A5649BBA2FF6FEC38FC6B2DD4453AD5256657EADD4A4F70EBBC81236E02898C3666B7C29BC681957BA485094BF06CD3B153F1ED0FE5
Malicious:	false
Reputation:	low
URL:	https://content-images.computershare.com/eh96rkuu9740/c9117c1092534fcc9273232233df0c5b/cd4bbb343e36272e3e0525f13b2ce9f7/Welcome.jpg?w=1920&h=850&fit=fill&f=center
Preview:	......JFIF.....,.,.....@ICC_PROFILE......0ADBE....mntrRGB XYZ ............acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 1999 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C.......................................................................R..............................................K.......................!.1..AQ."a.2q....BR...#..3b..CSc...$r...4.D%5s........................................................!1..A.Q."a2q...#B..3R..............?...@ .......@ ..IA.ck.A+......h..X..R .a..7.

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1740
Entropy (8bit):	4.455412733003531
Encrypted:	false
SSDEEP:	48:0P1RBWvoSFIsQkaefy9gH1VayTUS3BiUSSGVmGq:ARBW5PQnefxVVBTUS3BiUSPVm3
MD5:	C860B36B8229DF6F6343425FFDFA7A98
SHA1:	4798E15B3C7CE2AC155A9B4D9E7E224A4F39E1A8
SHA-256:	83228DF2A74C2C87C245FAF84D4D8AFBFFF46EA31EDD24E4AC654804839F7ADA
SHA-512:	DFF1D2C4A8D4DC6EBD4AD264B7713FE91C570592833C07CD58760538FB5F4E0C045047D01929416B253096962A832B8B4D3914A491C91781B7339B9E23584A7F
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M267.63,285.61l0-54.51h3.12a17.57,17.57,0,0,0,17.55-17.55V174.11a17.56,17.56,0,0,0-17.55-17.54H251.11V149h19.67a25.17,25.17,0,0,1,25.15,25.14v39.44a25.25,25.25,0,0,1-18.37,24.18l-2.33.66v47.22Z"/><path class="cls-1" d="M94.77,285.61V238.39l-2.33-.66a25.25,25.25,0,0,1-18.37-24.18V174.11A25.17,25.17,0,0,1,99.22,149h19.34v7.6H99.22a17.56,17.56,0,0,0-17.55,17.54v39.44A17.57,17.57,0,0,0,99.22,231.1h3.12l0,54.51Z"/><path class="cls-1" d="M202.41,285.61V219.1h3.16a17.72,17.72,0,0,0,17.55-17.55V147.19a17.58,17.58,0,0,0-17.54-17.29H164.11a17.61,17.61,0,0,0-17.54,17.35v54.3a17.72,17.72,0,0,0,17.55,17.55h3.15l0,66.51h-7.6V226.39l-2.32-.66a25.11,25.11,0,0,1-6.06-2.63l-.71-.43a25.57,25.57,0,0,1-9.82-11.94,24.77,24.77,0,0,1-1.77-9.18v-54.1c0-.34,0-.68,0-1l0-.48a25,25,0,0,1,1.69-7.7,25.49,25.49,0,0,1,10.53-12.37,25,25,0,0,1,12.85-3.59h4

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	241
Entropy (8bit):	4.762158656952478
Encrypted:	false
SSDEEP:	6:2LGiIiDGOcxgBAYWlKSXFQTDIHLzMSCVZ:2aiCOcuA7lKNTDG0Z
MD5:	BC3E82E1B424C4A301FC7E27A0229562
SHA1:	856EF2E1E62D108107B228746278C752812088B1
SHA-256:	117DEE899993C626522C4002C5A03A64794B48B85320DA34EBF02E3F36EC49DE
SHA-512:	CF7B473090850264142464E4996BFD474590FF907F90CD6A4441ABACDF01EA0B45FFFD4F25B8AFA3FE79BEF17ED4F63961FA788DDFCC72AED618B6FD2FA639BB
Malicious:	false
Reputation:	low
URL:	https://c.evidon.com/geo/country.js
Preview:	(function () { /US USA/.var country = {'code':'us','id':1,'defaultLangauge':'en-us'};.if (!window.evidon) window.evidon = {};.if (window.evidon.notice) window.evidon.notice.setLocation(country);.else window.evidon.location = country;})();

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 450x450, segment length 16, baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	26590
Entropy (8bit):	7.898981477334702
Encrypted:	false
SSDEEP:	768:lYy3oepF9XsA3DK0XAEgSWiLRmB9QagO+TU:l7oWuHE9LRumarWU
MD5:	C6440A826A99C1ECFCF5A612B7F3CC57
SHA1:	4C7E75EBA7746915960835EE0BADEAC84216383C
SHA-256:	B5DC1ED79A6B730ED2356752680030FADFA1AED8C9DFD5C6C7E846ADFDD224D2
SHA-512:	01E7065A7D84592A2C8636BD56E4FE5C7937070EE4E3B514954B3A6D3DE1D200F7089D3AC35F42C07C27AED756CC94A8AD2089ADFDF25828815C16801B68404D
Malicious:	false
Reputation:	low
URL:	https://content-images.computershare.com/eh96rkuu9740/ade2c395500d4139b3f3a5c76f74c11d/cc3ddea162b4fddd32a1bf5c9aa49bc5/MFerguson_GreyBackground2.jpg?f=top&fit=thumb&w=300&h=300
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.271971105670695
Encrypted:	false
SSDEEP:	48:0PKp9/SdDbdSuGzwE55YgP3SKUIwdzlkYAOLtioUv/r7tl:V/SHSuGzwkBnw0xaWrH
MD5:	B430847F6311DC4F4AD88EE5103142B0
SHA1:	EC91CDFD7ADCB4F67F28EB68145FD404CB7D0187
SHA-256:	786FC6B915454579DA353079D5F4C612E5D6E4852CC993B56BE8B27A59B1334A
SHA-512:	8D7E5134EF4A44596CAB5DBB36AB72E85EB4C4CFA19DAD32EA88EC0ECBADC302558335B2FC54B58266B18E1371A0011A33269671F6BCEBA460646EA5B84C6B7F
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M216.62,269.3H153.38a3.8,3.8,0,1,0,0,7.59h63.24a3.8,3.8,0,1,0,0-7.59Z"/><path class="cls-1" d="M200.62,296.89H169.38a3.81,3.81,0,0,0,0,7.61h31.24a3.81,3.81,0,0,0,0-7.61Z"/><path class="cls-1" d="M184.64,51.06a3.8,3.8,0,0,0,3.8-3.8v-18a3.8,3.8,0,0,0-7.6,0v18A3.8,3.8,0,0,0,184.64,51.06Z"/><path class="cls-1" d="M286.35,68.91a3.74,3.74,0,0,0-2.68-1.11,3.8,3.8,0,0,0-2.7,1.12L266.45,83.5a3.8,3.8,0,1,0,5.38,5.37l14.53-14.59A3.79,3.79,0,0,0,286.35,68.91Z"/><path class="cls-1" d="M103.54,83.5,89,68.92a3.8,3.8,0,0,0-5.39,5.36L98.17,88.87a3.8,3.8,0,0,0,5.37-5.37Z"/><path class="cls-1" d="M185,71.92c-44.64,0-81,35.63-81,79.42,0,18.32,5,33.79,14.8,45.8,3.36,3.65,6.76,6.84,10.05,9.94,11,10.44,21.52,20.31,24.31,41.78h63.59c2.8-21.51,13.31-31.4,24.42-41.84,3.27-3.07,6.66-6.26,9.93-9.77,10.43-12.31,14.88-26,14.88-45.91C266,107.55,229.64,

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1436)
Category:	downloaded
Size (bytes):	33337
Entropy (8bit):	5.095897008821902
Encrypted:	false
SSDEEP:	384:xpbYhXMP0rIzS2TVE6/woZsuGY0KrcT4Z2cTuqBHnOYd9YP:xVsXMPNzS2V/vZjGYbrHiqBH3d9YP
MD5:	7B6B33D79FA6B2EADB1227DA028AC928
SHA1:	4216B68D801292518797409FC3A95672D3025906
SHA-256:	7888DFCE142EACACBB9E1D6FA90A935AEC84CC2B8A64A09B3CFF90D56D54E6D1
SHA-512:	9EFD71EC1E2A68B154E1537E6AABB01B5F268222F7EF79987C3B700E74E875214A1214573459A4F8E61AD7BBAC5D233315E892001542F5E9D3184813A2CB3297
Malicious:	false
Reputation:	low
URL:	https://ajax.aspnetcdn.com/ajax/jquery.ui/1.8.20/themes/redmond/jquery-ui.css
Preview:	/!. jQuery UI CSS Framework 1.8.20. . Copyright 2012, AUTHORS.txt (http://jqueryui.com/about). * Dual licensed under the MIT or GPL Version 2 licenses.. * http://jquery.org/license. . http://docs.jquery.com/UI/Theming/API. /../ Layout helpers.----------------------------------/..ui-helper-hidden { display: none; }..ui-helper-hidden-accessible { position: absolute !important; clip: rect(1px 1px 1px 1px); clip: rect(1px,1px,1px,1px); }..ui-helper-reset { margin: 0; padding: 0; border: 0; outline: 0; line-height: 1.3; text-decoration: none; font-size: 100%; list-style: none; }..ui-helper-clearfix:before, .ui-helper-clearfix:after { content: ""; display: table; }..ui-helper-clearfix:after { clear: both; }..ui-helper-clearfix { zoom: 1; }..ui-helper-zfix { width: 100%; height: 100%; top: 0; left: 0; position: absolute; opacity: 0; filter:Alpha(Opacity=0); }.../ Interaction Cues.----------------------------------/..ui-state-disabled { cursor: default !important; }.../ Icons.--

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	488
Entropy (8bit):	5.313367621493572
Encrypted:	false
SSDEEP:	6:TMVBdbj4dgXRxVnzVEn6VWB3qmc4slZKYnic4sf3nUmlNthqOmLq6jHzhUnONth2:TMHdPQi/nzVJ/KYf3njfhN0HSOfs
MD5:	94867036E5B64ACF26AD33AD59016C38
SHA1:	94402E5F87CBD962C3D7DFBB17D6253AE22B99DB
SHA-256:	04458660718E2A0F77BF318456674D9460A9997128E219A51854E58488FC7F0A
SHA-512:	31EC3B9605D51B73F2BDB5FAF6792F01B2466DF30711A146B3DA2DDA84565E1155E59E4647E2D2E29D32E8CAF0F2A32C2C91B64F175481152BF18F6AB501CD01
Malicious:	false
Reputation:	low
URL:	https://content-images.computershare.com/eh96rkuu9740/92430c33e214475385fd3a25214e2f30/bf6e82bf958a8707c4e7d2fcbc11343b/solid-kcc-teal.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 25.4.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 1920 1080" width="1920" height="1080" style="enable-background:new 0 0 1920 1080;" xml:space="preserve">.<style type="text/css">...st0{fill:#36A4C6;}.</style>.<rect class="st0" width="1920" height="1080"/>.</svg>.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	438
Entropy (8bit):	5.221143401351341
Encrypted:	false
SSDEEP:	12:Ztg1QXzWlGY3E6SRWeRbnnwBbFNo1w11BJ6ci:Tg1QXzYzaRWQbnnwZ11BJw
MD5:	98F6BE74371357C27D57954D5A9B35E1
SHA1:	2B54AE9ECF2EEE9E5B8751B29DAF02F7756E0AC0
SHA-256:	3F053BC92164679698DFEC0E3DF4C27BE63C5C57C25374F6794F11081D45C6B6
SHA-512:	9636607E5BADA330076DEEC6EC9066A70FB79F126C292E73C61407AB1ACACCB8EBA938F16740DF687A1C8225E9DF12FF254A82984810BDA2D986A73C7C95BA91
Malicious:	false
Reputation:	low
URL:	https://www.gilardi.com/js/gtm.js
Preview:	var gtmContainerId = 'GTM-NDWX5RJ';. if (gtmContainerId !== '') {. (function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':. new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],. j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=. 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);. }). (window,document,'script','dataLayer', gtmContainerId).}

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1740
Entropy (8bit):	4.455412733003531
Encrypted:	false
SSDEEP:	48:0P1RBWvoSFIsQkaefy9gH1VayTUS3BiUSSGVmGq:ARBW5PQnefxVVBTUS3BiUSPVm3
MD5:	C860B36B8229DF6F6343425FFDFA7A98
SHA1:	4798E15B3C7CE2AC155A9B4D9E7E224A4F39E1A8
SHA-256:	83228DF2A74C2C87C245FAF84D4D8AFBFFF46EA31EDD24E4AC654804839F7ADA
SHA-512:	DFF1D2C4A8D4DC6EBD4AD264B7713FE91C570592833C07CD58760538FB5F4E0C045047D01929416B253096962A832B8B4D3914A491C91781B7339B9E23584A7F
Malicious:	false
Reputation:	low
URL:	https://content-images.computershare.com/eh96rkuu9740/1f7fa766134846da8a4ed9d3aaf54ffc/52e034004117ab1020b12bfc3dfb99ab/team-icon-navy.svg?w=300&h=300&fit=fill&f=faces
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M267.63,285.61l0-54.51h3.12a17.57,17.57,0,0,0,17.55-17.55V174.11a17.56,17.56,0,0,0-17.55-17.54H251.11V149h19.67a25.17,25.17,0,0,1,25.15,25.14v39.44a25.25,25.25,0,0,1-18.37,24.18l-2.33.66v47.22Z"/><path class="cls-1" d="M94.77,285.61V238.39l-2.33-.66a25.25,25.25,0,0,1-18.37-24.18V174.11A25.17,25.17,0,0,1,99.22,149h19.34v7.6H99.22a17.56,17.56,0,0,0-17.55,17.54v39.44A17.57,17.57,0,0,0,99.22,231.1h3.12l0,54.51Z"/><path class="cls-1" d="M202.41,285.61V219.1h3.16a17.72,17.72,0,0,0,17.55-17.55V147.19a17.58,17.58,0,0,0-17.54-17.29H164.11a17.61,17.61,0,0,0-17.54,17.35v54.3a17.72,17.72,0,0,0,17.55,17.55h3.15l0,66.51h-7.6V226.39l-2.32-.66a25.11,25.11,0,0,1-6.06-2.63l-.71-.43a25.57,25.57,0,0,1-9.82-11.94,24.77,24.77,0,0,1-1.77-9.18v-54.1c0-.34,0-.68,0-1l0-.48a25,25,0,0,1,1.69-7.7,25.49,25.49,0,0,1,10.53-12.37,25,25,0,0,1,12.85-3.59h4

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, baseline, precision 8, 1920x850, components 3
Category:	dropped
Size (bytes):	300364
Entropy (8bit):	7.975007203161473
Encrypted:	false
SSDEEP:	6144:9viQBw1TD3kyo15CEb1QQiAI59IONDQ6cZUZ+pfAt:hiQ21P3t0erAI5i6PZ+o
MD5:	FEEE23B30F0A4B853B5E34CE8523E867
SHA1:	DE048B13B037B0FAC43490BDDC6D437989C27049
SHA-256:	CB3B96BEEF783201E2227E2636D6522D81ADD9173B5F1C7CC3CEAC8D0144B8A6
SHA-512:	9962AC159B768B8D35A2CA0878F454FB03350F780644BA772F4D737409B3CFD70DF59759B4CFE4D76BCE431E3ED01B196C960D2BAA414D688ADDE08B9D5AACF4
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 8, 2024 01:17:51.841461897 CEST	49674	443	192.168.2.6	173.222.162.64
May 8, 2024 01:17:51.841464043 CEST	49673	443	192.168.2.6	173.222.162.64
May 8, 2024 01:17:52.185199976 CEST	49672	443	192.168.2.6	173.222.162.64
May 8, 2024 01:17:58.540186882 CEST	443	49698	173.222.162.64	192.168.2.6
May 8, 2024 01:17:58.540318012 CEST	49698	443	192.168.2.6	173.222.162.64
May 8, 2024 01:18:00.396847010 CEST	49705	443	192.168.2.6	142.251.215.228
May 8, 2024 01:18:00.396882057 CEST	443	49705	142.251.215.228	192.168.2.6
May 8, 2024 01:18:00.396950006 CEST	49705	443	192.168.2.6	142.251.215.228
May 8, 2024 01:18:00.397238970 CEST	49705	443	192.168.2.6	142.251.215.228
May 8, 2024 01:18:00.397252083 CEST	443	49705	142.251.215.228	192.168.2.6
May 8, 2024 01:18:00.443077087 CEST	49707	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:00.443104029 CEST	443	49707	172.67.213.176	192.168.2.6
May 8, 2024 01:18:00.443182945 CEST	49707	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:00.443404913 CEST	49707	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:00.443420887 CEST	443	49707	172.67.213.176	192.168.2.6
May 8, 2024 01:18:00.740627050 CEST	443	49705	142.251.215.228	192.168.2.6
May 8, 2024 01:18:00.740928888 CEST	49705	443	192.168.2.6	142.251.215.228
May 8, 2024 01:18:00.740947962 CEST	443	49705	142.251.215.228	192.168.2.6
May 8, 2024 01:18:00.742022038 CEST	443	49705	142.251.215.228	192.168.2.6
May 8, 2024 01:18:00.742090940 CEST	49705	443	192.168.2.6	142.251.215.228
May 8, 2024 01:18:00.744105101 CEST	49705	443	192.168.2.6	142.251.215.228
May 8, 2024 01:18:00.744292974 CEST	443	49705	142.251.215.228	192.168.2.6
May 8, 2024 01:18:00.788913012 CEST	49705	443	192.168.2.6	142.251.215.228
May 8, 2024 01:18:00.788943052 CEST	443	49705	142.251.215.228	192.168.2.6
May 8, 2024 01:18:00.790043116 CEST	443	49707	172.67.213.176	192.168.2.6
May 8, 2024 01:18:00.790263891 CEST	49707	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:00.790283918 CEST	443	49707	172.67.213.176	192.168.2.6
May 8, 2024 01:18:00.791539907 CEST	443	49707	172.67.213.176	192.168.2.6
May 8, 2024 01:18:00.791610003 CEST	49707	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:00.792643070 CEST	49707	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:00.792711973 CEST	443	49707	172.67.213.176	192.168.2.6
May 8, 2024 01:18:00.793010950 CEST	49707	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:00.793018103 CEST	443	49707	172.67.213.176	192.168.2.6
May 8, 2024 01:18:00.834793091 CEST	49705	443	192.168.2.6	142.251.215.228
May 8, 2024 01:18:00.834846020 CEST	49707	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:01.181744099 CEST	443	49707	172.67.213.176	192.168.2.6
May 8, 2024 01:18:01.181797028 CEST	443	49707	172.67.213.176	192.168.2.6
May 8, 2024 01:18:01.181833029 CEST	443	49707	172.67.213.176	192.168.2.6
May 8, 2024 01:18:01.181854010 CEST	49707	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:01.181879044 CEST	443	49707	172.67.213.176	192.168.2.6
May 8, 2024 01:18:01.181916952 CEST	49707	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:01.181927919 CEST	443	49707	172.67.213.176	192.168.2.6
May 8, 2024 01:18:01.181982040 CEST	443	49707	172.67.213.176	192.168.2.6
May 8, 2024 01:18:01.182071924 CEST	49707	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:01.237845898 CEST	49707	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:01.237869978 CEST	443	49707	172.67.213.176	192.168.2.6
May 8, 2024 01:18:01.314904928 CEST	49708	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:01.314945936 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:01.315005064 CEST	49708	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:01.318520069 CEST	49708	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:01.318532944 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:01.442718029 CEST	49673	443	192.168.2.6	173.222.162.64
May 8, 2024 01:18:01.442972898 CEST	49674	443	192.168.2.6	173.222.162.64
May 8, 2024 01:18:01.649957895 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:01.650501013 CEST	49708	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:01.650527954 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:01.650844097 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:01.654762983 CEST	49708	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:01.654843092 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:01.655472994 CEST	49708	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:01.700117111 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:01.792957067 CEST	49672	443	192.168.2.6	173.222.162.64
May 8, 2024 01:18:02.049516916 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.049572945 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.049599886 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.049628973 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.049637079 CEST	49708	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:02.049652100 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.049680948 CEST	49708	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:02.049803019 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.049839020 CEST	49708	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:02.049845934 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.050327063 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.050353050 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.050371885 CEST	49708	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:02.050378084 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.050412893 CEST	49708	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:02.051080942 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.051136971 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.051182985 CEST	49708	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:02.051188946 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.051965952 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.051997900 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.052009106 CEST	49708	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:02.052012920 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.052051067 CEST	49708	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:02.052054882 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.052848101 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.052871943 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.052900076 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.052915096 CEST	49708	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:02.052920103 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.052944899 CEST	49708	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:02.052968025 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.053004980 CEST	49708	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:02.055996895 CEST	49708	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:02.056010962 CEST	443	49708	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.690985918 CEST	49711	443	192.168.2.6	96.7.158.101
May 8, 2024 01:18:02.691030025 CEST	443	49711	96.7.158.101	192.168.2.6
May 8, 2024 01:18:02.691288948 CEST	49711	443	192.168.2.6	96.7.158.101
May 8, 2024 01:18:02.693327904 CEST	49711	443	192.168.2.6	96.7.158.101
May 8, 2024 01:18:02.693341970 CEST	443	49711	96.7.158.101	192.168.2.6
May 8, 2024 01:18:02.770198107 CEST	49712	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:02.770241976 CEST	443	49712	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.770307064 CEST	49712	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:02.770865917 CEST	49713	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:02.770909071 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.771022081 CEST	49713	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:02.771275997 CEST	49712	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:02.771287918 CEST	443	49712	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.771481037 CEST	49713	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:02.771492958 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.789231062 CEST	49714	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:02.789268017 CEST	443	49714	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.789329052 CEST	49714	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:02.789932966 CEST	49714	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:02.789946079 CEST	443	49714	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.847249985 CEST	49715	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:02.847280979 CEST	443	49715	172.67.213.176	192.168.2.6
May 8, 2024 01:18:02.847537994 CEST	49715	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:02.848079920 CEST	49715	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:02.848093987 CEST	443	49715	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.027321100 CEST	443	49711	96.7.158.101	192.168.2.6
May 8, 2024 01:18:03.027401924 CEST	49711	443	192.168.2.6	96.7.158.101
May 8, 2024 01:18:03.038492918 CEST	49711	443	192.168.2.6	96.7.158.101
May 8, 2024 01:18:03.038506985 CEST	443	49711	96.7.158.101	192.168.2.6
May 8, 2024 01:18:03.038733959 CEST	443	49711	96.7.158.101	192.168.2.6
May 8, 2024 01:18:03.091229916 CEST	49711	443	192.168.2.6	96.7.158.101
May 8, 2024 01:18:03.104643106 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.105653048 CEST	443	49712	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.119443893 CEST	49713	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.119456053 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.119833946 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.119959116 CEST	49712	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.119982004 CEST	443	49712	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.120359898 CEST	443	49712	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.121368885 CEST	49713	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.121433973 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.123404026 CEST	49712	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.123475075 CEST	443	49712	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.124630928 CEST	49713	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.124794960 CEST	49712	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.125231028 CEST	443	49714	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.125495911 CEST	49714	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.125519037 CEST	443	49714	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.126506090 CEST	443	49714	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.126584053 CEST	49714	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.141870022 CEST	49714	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.141946077 CEST	443	49714	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.142328024 CEST	49714	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.168118954 CEST	443	49712	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.168119907 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.182570934 CEST	443	49715	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.183078051 CEST	49714	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.183104038 CEST	443	49714	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.190356970 CEST	49711	443	192.168.2.6	96.7.158.101
May 8, 2024 01:18:03.190762997 CEST	49715	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.190769911 CEST	443	49715	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.191739082 CEST	443	49715	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.191798925 CEST	49715	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.193846941 CEST	49715	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.193948030 CEST	443	49715	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.195116997 CEST	49715	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.195122957 CEST	443	49715	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.229980946 CEST	49714	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.232132912 CEST	443	49711	96.7.158.101	192.168.2.6
May 8, 2024 01:18:03.245595932 CEST	49715	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.354568005 CEST	443	49711	96.7.158.101	192.168.2.6
May 8, 2024 01:18:03.354641914 CEST	443	49711	96.7.158.101	192.168.2.6
May 8, 2024 01:18:03.354691982 CEST	49711	443	192.168.2.6	96.7.158.101
May 8, 2024 01:18:03.450558901 CEST	49711	443	192.168.2.6	96.7.158.101
May 8, 2024 01:18:03.450579882 CEST	443	49711	96.7.158.101	192.168.2.6
May 8, 2024 01:18:03.504538059 CEST	443	49712	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.504654884 CEST	443	49712	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.504710913 CEST	49712	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.508352995 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.508403063 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.508438110 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.508471012 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.508486986 CEST	49713	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.508497000 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.508536100 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.508574009 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.508586884 CEST	49713	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.508591890 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.508620024 CEST	49713	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.508666992 CEST	49713	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.508671045 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.508707047 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.508738041 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.508774996 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.508790016 CEST	49713	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.508795023 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.508831024 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.508856058 CEST	49713	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.508860111 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.508877993 CEST	49713	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.508893013 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.508922100 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.508941889 CEST	49713	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.508955956 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.509012938 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.509077072 CEST	49713	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.519419909 CEST	443	49714	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.519481897 CEST	443	49714	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.519731045 CEST	49714	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.541632891 CEST	49712	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.541652918 CEST	443	49712	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.580519915 CEST	443	49715	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.580584049 CEST	443	49715	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.580646992 CEST	49715	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.599319935 CEST	49714	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.599354029 CEST	443	49714	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.601109028 CEST	49713	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.601134062 CEST	443	49713	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.614377022 CEST	49715	443	192.168.2.6	172.67.213.176
May 8, 2024 01:18:03.614391088 CEST	443	49715	172.67.213.176	192.168.2.6
May 8, 2024 01:18:03.670948029 CEST	49716	443	192.168.2.6	23.192.208.109
May 8, 2024 01:18:03.670977116 CEST	443	49716	23.192.208.109	192.168.2.6
May 8, 2024 01:18:03.671102047 CEST	49716	443	192.168.2.6	23.192.208.109
May 8, 2024 01:18:03.672394991 CEST	49716	443	192.168.2.6	23.192.208.109
May 8, 2024 01:18:03.672408104 CEST	443	49716	23.192.208.109	192.168.2.6
May 8, 2024 01:18:03.803360939 CEST	49717	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:03.803400993 CEST	443	49717	104.21.93.178	192.168.2.6
May 8, 2024 01:18:03.803531885 CEST	49717	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:03.803905010 CEST	49718	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:03.803941965 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:03.804035902 CEST	49718	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:03.804656029 CEST	49719	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:03.804682970 CEST	443	49719	104.21.93.178	192.168.2.6
May 8, 2024 01:18:03.804745913 CEST	49719	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:03.805077076 CEST	49720	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:03.805097103 CEST	443	49720	104.21.93.178	192.168.2.6
May 8, 2024 01:18:03.805159092 CEST	49720	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:03.808269978 CEST	49720	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:03.808284044 CEST	443	49720	104.21.93.178	192.168.2.6
May 8, 2024 01:18:03.812912941 CEST	49719	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:03.812938929 CEST	443	49719	104.21.93.178	192.168.2.6
May 8, 2024 01:18:03.813153028 CEST	49718	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:03.813174009 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:03.814455986 CEST	49717	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:03.814480066 CEST	443	49717	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.008542061 CEST	443	49716	23.192.208.109	192.168.2.6
May 8, 2024 01:18:04.008646011 CEST	49716	443	192.168.2.6	23.192.208.109
May 8, 2024 01:18:04.030083895 CEST	49716	443	192.168.2.6	23.192.208.109
May 8, 2024 01:18:04.030113935 CEST	443	49716	23.192.208.109	192.168.2.6
May 8, 2024 01:18:04.030667067 CEST	443	49716	23.192.208.109	192.168.2.6
May 8, 2024 01:18:04.035119057 CEST	49716	443	192.168.2.6	23.192.208.109
May 8, 2024 01:18:04.080120087 CEST	443	49716	23.192.208.109	192.168.2.6
May 8, 2024 01:18:04.140429974 CEST	443	49720	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.140706062 CEST	49720	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.140722036 CEST	443	49720	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.141627073 CEST	443	49720	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.141702890 CEST	49720	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.142208099 CEST	49720	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.142275095 CEST	443	49720	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.142478943 CEST	49720	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.142488956 CEST	443	49720	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.146218061 CEST	443	49717	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.146298885 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.146542072 CEST	49717	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.146564960 CEST	443	49717	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.146739960 CEST	49718	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.146763086 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.147612095 CEST	443	49717	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.147672892 CEST	49717	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.147778034 CEST	443	49719	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.147788048 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.147850990 CEST	49718	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.148231030 CEST	49717	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.148304939 CEST	443	49717	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.148437023 CEST	49719	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.148461103 CEST	443	49719	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.148855925 CEST	49718	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.148930073 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.148997068 CEST	49717	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.149007082 CEST	443	49717	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.149223089 CEST	49718	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.149231911 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.149461985 CEST	443	49719	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.149527073 CEST	49719	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.149913073 CEST	49719	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.149974108 CEST	443	49719	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.150293112 CEST	49719	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.150302887 CEST	443	49719	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.183650017 CEST	49720	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.199213028 CEST	49717	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.199237108 CEST	49718	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.199242115 CEST	49719	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.330976009 CEST	443	49716	23.192.208.109	192.168.2.6
May 8, 2024 01:18:04.331073999 CEST	443	49716	23.192.208.109	192.168.2.6
May 8, 2024 01:18:04.331183910 CEST	49716	443	192.168.2.6	23.192.208.109
May 8, 2024 01:18:04.331928968 CEST	49716	443	192.168.2.6	23.192.208.109
May 8, 2024 01:18:04.331943035 CEST	443	49716	23.192.208.109	192.168.2.6
May 8, 2024 01:18:04.331983089 CEST	49716	443	192.168.2.6	23.192.208.109
May 8, 2024 01:18:04.331988096 CEST	443	49716	23.192.208.109	192.168.2.6
May 8, 2024 01:18:04.538774967 CEST	443	49720	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.538865089 CEST	443	49720	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.538996935 CEST	49720	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.540344954 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.540390968 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.540426970 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.540443897 CEST	49718	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.540457010 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.540507078 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.540524006 CEST	49718	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.540532112 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.540617943 CEST	49718	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.540625095 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.541182995 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.541220903 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.541229010 CEST	49718	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.541245937 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.541284084 CEST	49718	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.541289091 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.542047024 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.542082071 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.542098045 CEST	49718	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.542104006 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.542150974 CEST	49718	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.542156935 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.542318106 CEST	49720	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.542337894 CEST	443	49720	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.543001890 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.543035030 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.543045044 CEST	49718	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.543056965 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.543126106 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.543173075 CEST	49718	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.546263933 CEST	443	49717	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.546334982 CEST	443	49717	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.546524048 CEST	49717	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.548417091 CEST	49718	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.548423052 CEST	443	49718	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.551662922 CEST	443	49719	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.551721096 CEST	443	49719	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.551795006 CEST	49719	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.553349018 CEST	49717	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.553363085 CEST	443	49717	104.21.93.178	192.168.2.6
May 8, 2024 01:18:04.556230068 CEST	49719	443	192.168.2.6	104.21.93.178
May 8, 2024 01:18:04.556242943 CEST	443	49719	104.21.93.178	192.168.2.6
May 8, 2024 01:18:10.739732981 CEST	443	49705	142.251.215.228	192.168.2.6
May 8, 2024 01:18:10.739804029 CEST	443	49705	142.251.215.228	192.168.2.6
May 8, 2024 01:18:10.742913008 CEST	49705	443	192.168.2.6	142.251.215.228
May 8, 2024 01:18:12.352536917 CEST	49705	443	192.168.2.6	142.251.215.228
May 8, 2024 01:18:12.352556944 CEST	443	49705	142.251.215.228	192.168.2.6
May 8, 2024 01:18:12.524566889 CEST	49698	443	192.168.2.6	173.222.162.64
May 8, 2024 01:18:12.675956964 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:12.675959110 CEST	49724	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:12.675987959 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:12.676007032 CEST	443	49724	13.107.246.70	192.168.2.6
May 8, 2024 01:18:12.676420927 CEST	49724	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:12.676423073 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:12.676925898 CEST	49724	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:12.676928997 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:12.676942110 CEST	443	49724	13.107.246.70	192.168.2.6
May 8, 2024 01:18:12.676944017 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:12.713958025 CEST	443	49698	173.222.162.64	192.168.2.6
May 8, 2024 01:18:12.780148029 CEST	443	49698	173.222.162.64	192.168.2.6
May 8, 2024 01:18:12.780164957 CEST	443	49698	173.222.162.64	192.168.2.6
May 8, 2024 01:18:12.780180931 CEST	443	49698	173.222.162.64	192.168.2.6
May 8, 2024 01:18:12.780194998 CEST	443	49698	173.222.162.64	192.168.2.6
May 8, 2024 01:18:12.780306101 CEST	49698	443	192.168.2.6	173.222.162.64
May 8, 2024 01:18:12.780462027 CEST	49698	443	192.168.2.6	173.222.162.64
May 8, 2024 01:18:13.219568014 CEST	443	49724	13.107.246.70	192.168.2.6
May 8, 2024 01:18:13.219894886 CEST	49724	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:13.219922066 CEST	443	49724	13.107.246.70	192.168.2.6
May 8, 2024 01:18:13.221030951 CEST	443	49724	13.107.246.70	192.168.2.6
May 8, 2024 01:18:13.221086979 CEST	49724	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:13.253009081 CEST	49724	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:13.253139973 CEST	443	49724	13.107.246.70	192.168.2.6
May 8, 2024 01:18:13.253285885 CEST	49724	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:13.253298998 CEST	443	49724	13.107.246.70	192.168.2.6
May 8, 2024 01:18:13.295263052 CEST	49724	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:13.850615978 CEST	443	49724	13.107.246.70	192.168.2.6
May 8, 2024 01:18:13.850641012 CEST	443	49724	13.107.246.70	192.168.2.6
May 8, 2024 01:18:13.850656033 CEST	443	49724	13.107.246.70	192.168.2.6
May 8, 2024 01:18:13.850663900 CEST	443	49724	13.107.246.70	192.168.2.6
May 8, 2024 01:18:13.850678921 CEST	49724	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:13.850702047 CEST	443	49724	13.107.246.70	192.168.2.6
May 8, 2024 01:18:13.850734949 CEST	49724	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:13.850759983 CEST	49724	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:13.850951910 CEST	443	49724	13.107.246.70	192.168.2.6
May 8, 2024 01:18:13.850991964 CEST	49724	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:13.851850033 CEST	443	49724	13.107.246.70	192.168.2.6
May 8, 2024 01:18:13.851902962 CEST	49724	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:13.851907015 CEST	443	49724	13.107.246.70	192.168.2.6
May 8, 2024 01:18:13.851929903 CEST	443	49724	13.107.246.70	192.168.2.6
May 8, 2024 01:18:13.851969004 CEST	49724	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:13.858604908 CEST	49724	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:13.858619928 CEST	443	49724	13.107.246.70	192.168.2.6
May 8, 2024 01:18:13.930737972 CEST	49727	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:13.930782080 CEST	443	49727	13.107.246.70	192.168.2.6
May 8, 2024 01:18:13.931773901 CEST	49727	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:13.931773901 CEST	49727	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:13.931809902 CEST	443	49727	13.107.246.70	192.168.2.6
May 8, 2024 01:18:13.967344999 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:13.970550060 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:13.970570087 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:13.971590042 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:13.971700907 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:13.989207983 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:13.989299059 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:13.989512920 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:13.989527941 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.036983013 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.362880945 CEST	49731	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:14.362903118 CEST	443	49731	99.86.38.13	192.168.2.6
May 8, 2024 01:18:14.363301039 CEST	49732	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:14.363343954 CEST	443	49732	99.86.38.13	192.168.2.6
May 8, 2024 01:18:14.363379002 CEST	49731	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:14.363563061 CEST	49732	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:14.363868952 CEST	49732	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:14.363871098 CEST	49731	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:14.363881111 CEST	443	49732	99.86.38.13	192.168.2.6
May 8, 2024 01:18:14.363883972 CEST	443	49731	99.86.38.13	192.168.2.6
May 8, 2024 01:18:14.472696066 CEST	443	49727	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.473279953 CEST	49727	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.473300934 CEST	443	49727	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.473634958 CEST	443	49727	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.474737883 CEST	49727	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.474800110 CEST	443	49727	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.475054026 CEST	49727	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.516123056 CEST	443	49727	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.527445078 CEST	49727	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.566294909 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.566318035 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.566332102 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.566392899 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.566427946 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.566456079 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.566487074 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.566487074 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.566627026 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.567456961 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.567475080 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.567523003 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.567533970 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.567553997 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.567718983 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.700980902 CEST	443	49732	99.86.38.13	192.168.2.6
May 8, 2024 01:18:14.701479912 CEST	49732	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:14.701505899 CEST	443	49732	99.86.38.13	192.168.2.6
May 8, 2024 01:18:14.702524900 CEST	443	49732	99.86.38.13	192.168.2.6
May 8, 2024 01:18:14.702779055 CEST	49732	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:14.703695059 CEST	443	49731	99.86.38.13	192.168.2.6
May 8, 2024 01:18:14.704009056 CEST	49731	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:14.704024076 CEST	443	49731	99.86.38.13	192.168.2.6
May 8, 2024 01:18:14.705193996 CEST	443	49731	99.86.38.13	192.168.2.6
May 8, 2024 01:18:14.705257893 CEST	49731	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:14.735100031 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.735126972 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.735265970 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.735281944 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.735493898 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.737659931 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.737678051 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.737746000 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.737752914 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.737859964 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.738925934 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.738944054 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.739027977 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.739034891 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.739317894 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.907365084 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.907387972 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.907438040 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.907448053 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.907470942 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.907499075 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.926422119 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.926441908 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.926476955 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.926492929 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.926501036 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.926548004 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.927661896 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.927679062 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.927727938 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.927736044 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.928149939 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.928170919 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.928199053 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.928205013 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.928239107 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.929177046 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.929191113 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.929223061 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.929229975 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.929251909 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.929703951 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.929727077 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.929754019 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.929759979 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.929771900 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.970205069 CEST	49732	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:14.970339060 CEST	49732	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:14.970351934 CEST	443	49732	99.86.38.13	192.168.2.6
May 8, 2024 01:18:14.970413923 CEST	443	49732	99.86.38.13	192.168.2.6
May 8, 2024 01:18:14.971406937 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:14.971414089 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:14.972229004 CEST	49731	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:14.972435951 CEST	443	49731	99.86.38.13	192.168.2.6
May 8, 2024 01:18:14.972441912 CEST	49731	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.013149023 CEST	49732	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.013155937 CEST	49731	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.013155937 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:15.013164997 CEST	443	49731	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.013174057 CEST	443	49732	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.049123049 CEST	443	49727	13.107.246.70	192.168.2.6
May 8, 2024 01:18:15.049180031 CEST	49727	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:15.049199104 CEST	443	49727	13.107.246.70	192.168.2.6
May 8, 2024 01:18:15.051063061 CEST	443	49727	13.107.246.70	192.168.2.6
May 8, 2024 01:18:15.051148891 CEST	49727	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:15.058120966 CEST	49731	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.058147907 CEST	49732	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.071790934 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:15.071803093 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:15.071835041 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:15.071861982 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:15.071866989 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:15.071872950 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:15.071901083 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:15.071918964 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:15.076117992 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:15.076139927 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:15.076170921 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:15.076179028 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:15.076216936 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:15.095504999 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:15.095524073 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:15.095575094 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:15.095583916 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:15.095626116 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:15.095900059 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:15.095985889 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:15.096029043 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:15.166661978 CEST	49723	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:15.166676998 CEST	443	49723	13.107.246.70	192.168.2.6
May 8, 2024 01:18:15.192061901 CEST	49727	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:15.192090034 CEST	443	49727	13.107.246.70	192.168.2.6
May 8, 2024 01:18:15.283195019 CEST	443	49731	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.283415079 CEST	443	49731	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.283463001 CEST	49731	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.551651955 CEST	443	49732	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.551683903 CEST	443	49732	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.551692009 CEST	443	49732	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.551713943 CEST	443	49732	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.551740885 CEST	49732	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.551755905 CEST	443	49732	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.551789045 CEST	49732	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.558027029 CEST	443	49732	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.558075905 CEST	49732	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.576426029 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.576477051 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.576574087 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.577357054 CEST	49735	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.577394962 CEST	443	49735	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.577445030 CEST	49735	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.578051090 CEST	49736	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.578069925 CEST	443	49736	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.578119040 CEST	49736	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.578727007 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:15.578747988 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:15.578799963 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:15.579497099 CEST	49738	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.579529047 CEST	443	49738	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.579582930 CEST	49738	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.581338882 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.581355095 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.581759930 CEST	49735	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.581777096 CEST	443	49735	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.582001925 CEST	49736	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.582015991 CEST	443	49736	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.582297087 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:15.582309008 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:15.582647085 CEST	49738	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.582662106 CEST	443	49738	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.585886955 CEST	49731	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.585906029 CEST	443	49731	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.586366892 CEST	49739	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.586393118 CEST	443	49739	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.586447001 CEST	49739	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.587759972 CEST	49739	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.587773085 CEST	443	49739	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.604193926 CEST	49732	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.604212046 CEST	443	49732	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.604222059 CEST	49732	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.604254007 CEST	49732	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.912491083 CEST	443	49736	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.913008928 CEST	49736	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.913023949 CEST	443	49736	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.914050102 CEST	443	49736	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.914108992 CEST	49736	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.914299011 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.914541960 CEST	443	49735	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.914908886 CEST	49736	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.914980888 CEST	443	49736	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.915108919 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.915128946 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.915277004 CEST	49735	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.915297031 CEST	443	49735	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.915528059 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.915661097 CEST	443	49735	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.915669918 CEST	49736	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.915678024 CEST	443	49736	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.915982962 CEST	443	49738	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.916207075 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.916273117 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.916791916 CEST	49735	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.916853905 CEST	443	49735	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.917150021 CEST	49738	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.917175055 CEST	443	49738	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.917200089 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.917313099 CEST	49735	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.918164015 CEST	443	49738	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.918220997 CEST	49738	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.919404030 CEST	49738	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.919480085 CEST	443	49738	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.919624090 CEST	443	49739	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.919820070 CEST	49739	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.919836044 CEST	443	49739	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.919907093 CEST	49738	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.919917107 CEST	443	49738	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.920721054 CEST	443	49739	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.920785904 CEST	49739	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.921792030 CEST	49739	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.921852112 CEST	443	49739	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.922106981 CEST	49739	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.922112942 CEST	443	49739	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.964111090 CEST	443	49735	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.964121103 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:15.965987921 CEST	49739	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.966006994 CEST	49736	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:15.966018915 CEST	49738	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.010134935 CEST	49741	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.010173082 CEST	443	49741	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.010329962 CEST	49742	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.010355949 CEST	49741	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.010365009 CEST	443	49742	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.010507107 CEST	49742	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.011738062 CEST	49743	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.011759996 CEST	443	49743	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.011843920 CEST	49743	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.012058973 CEST	49741	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.012084007 CEST	443	49741	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.012219906 CEST	49742	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.012229919 CEST	443	49742	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.012612104 CEST	49743	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.012624979 CEST	443	49743	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.115358114 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.115557909 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:16.115570068 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.115916014 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.116205931 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:16.116262913 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.116302013 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:16.164119005 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.168344021 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:16.344959021 CEST	443	49741	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.346580029 CEST	443	49742	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.347646952 CEST	443	49743	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.354417086 CEST	49743	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.354437113 CEST	443	49743	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.354899883 CEST	49742	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.354913950 CEST	443	49742	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.355021954 CEST	49741	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.355046988 CEST	443	49741	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.355855942 CEST	443	49743	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.355909109 CEST	49743	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.355958939 CEST	443	49741	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.356014967 CEST	49741	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.356271982 CEST	443	49742	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.356326103 CEST	49742	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.357371092 CEST	49742	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.357467890 CEST	443	49742	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.393249989 CEST	443	49738	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.393276930 CEST	443	49738	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.393357992 CEST	49738	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.393389940 CEST	443	49738	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.393806934 CEST	443	49738	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.394150972 CEST	49738	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.394814968 CEST	443	49735	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.394838095 CEST	443	49735	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.394993067 CEST	443	49735	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.395045042 CEST	49735	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.402553082 CEST	49742	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.402564049 CEST	443	49742	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.451175928 CEST	49742	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.457448959 CEST	49741	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.457525969 CEST	443	49741	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.464498043 CEST	49743	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.465415955 CEST	443	49743	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.500932932 CEST	49741	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.500946999 CEST	443	49741	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.513621092 CEST	49743	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.513643980 CEST	443	49743	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.514797926 CEST	49742	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.514930010 CEST	49741	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.518208027 CEST	49735	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.518229961 CEST	443	49735	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.524493933 CEST	49738	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.524519920 CEST	443	49738	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.532716036 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.532737017 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.532793999 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.532804966 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.544996023 CEST	443	49739	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.545212030 CEST	443	49739	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.545275927 CEST	49739	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.556118011 CEST	443	49742	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.559973001 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.559998035 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.560112953 CEST	443	49741	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.560134888 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.560134888 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.560144901 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.560194969 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.562216043 CEST	49743	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.568948030 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.569010973 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.591789007 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.597574949 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.597862959 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.597871065 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.602561951 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.605853081 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.605859041 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.607039928 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.609769106 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.609776020 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.614424944 CEST	443	49736	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.614940882 CEST	443	49736	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.615000963 CEST	49736	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.615020037 CEST	443	49736	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.615031958 CEST	443	49736	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.615086079 CEST	49736	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.617526054 CEST	49739	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.617537022 CEST	443	49739	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.641686916 CEST	49736	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.641702890 CEST	443	49736	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.647778988 CEST	49744	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.647811890 CEST	443	49744	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.647876024 CEST	49744	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.648286104 CEST	49744	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.648297071 CEST	443	49744	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.654562950 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.688293934 CEST	443	49742	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.688374996 CEST	443	49742	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.688461065 CEST	49742	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.689277887 CEST	49742	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.689290047 CEST	443	49742	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.690481901 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.690578938 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.692719936 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.694622040 CEST	49743	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.695091009 CEST	49745	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.695107937 CEST	443	49745	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.695259094 CEST	49745	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.695755005 CEST	49745	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.695765972 CEST	443	49745	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.696295023 CEST	49746	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.696332932 CEST	443	49746	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.696383953 CEST	49746	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.696767092 CEST	49746	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.696778059 CEST	443	49746	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.697211027 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.697264910 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.697271109 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.697434902 CEST	443	49741	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.697453022 CEST	443	49741	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.697460890 CEST	443	49741	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.697489023 CEST	443	49741	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.697501898 CEST	49741	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.697508097 CEST	443	49741	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.697521925 CEST	49741	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.699182034 CEST	49747	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.699215889 CEST	443	49747	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.699265003 CEST	49747	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.699642897 CEST	443	49741	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.699700117 CEST	49741	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.701203108 CEST	49747	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.701220989 CEST	443	49747	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.702990055 CEST	49741	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.703001022 CEST	443	49741	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.704083920 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.704108953 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.704154015 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:16.704165936 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.704174995 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.704196930 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:16.704216957 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:16.704229116 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.704243898 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.704278946 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:16.704452038 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.704489946 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:16.705627918 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.705646038 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.705679893 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:16.705684900 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.705729008 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:16.710875988 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.710916042 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.710937023 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.710946083 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.710992098 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.724545956 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.727073908 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.740109921 CEST	443	49743	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.754076958 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.754096031 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.754162073 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.754170895 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.754333019 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.785912037 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.785931110 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.785984993 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.785994053 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.786031008 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.866377115 CEST	443	49743	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.866395950 CEST	443	49743	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.866542101 CEST	49743	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.866564989 CEST	443	49743	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.866597891 CEST	443	49743	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.866663933 CEST	49743	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.868024111 CEST	49743	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.868037939 CEST	443	49743	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.868563890 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.868592978 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.868627071 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.868638039 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.868660927 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.868674994 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.871069908 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.871098995 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.871156931 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:16.871165991 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.871212006 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:16.872216940 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.872234106 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.872294903 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:16.872301102 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.872339010 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:16.873615980 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.873631954 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.873677969 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:16.873682976 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.873718977 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:16.891347885 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.891366959 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.891423941 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.891431093 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.891510010 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.916367054 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.916404963 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.916433096 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.916440964 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.916470051 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.926703930 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.926753044 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.926764965 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.926781893 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.926826954 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.927511930 CEST	49734	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.927524090 CEST	443	49734	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.960320950 CEST	49749	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.960361958 CEST	443	49749	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.960423946 CEST	49749	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.960845947 CEST	49750	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.960869074 CEST	443	49750	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.961041927 CEST	49750	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.962380886 CEST	49749	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.962399006 CEST	443	49749	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.962645054 CEST	49750	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.962660074 CEST	443	49750	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.964207888 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:16.964288950 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.964416027 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:16.964808941 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:16.964823008 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:16.978694916 CEST	443	49744	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.987059116 CEST	49744	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.987071991 CEST	443	49744	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.987442970 CEST	443	49744	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.988046885 CEST	49744	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.988126993 CEST	443	49744	99.86.38.13	192.168.2.6
May 8, 2024 01:18:16.988249063 CEST	49744	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:16.992558956 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.992585897 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:16.992680073 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.992912054 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:16.992923975 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.027853012 CEST	443	49746	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.029612064 CEST	443	49745	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.034596920 CEST	443	49747	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.036124945 CEST	443	49744	99.86.38.13	192.168.2.6
May 8, 2024 01:18:17.038445950 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:17.038475037 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:17.038538933 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:17.038549900 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:17.038583994 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:17.038605928 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:17.040093899 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:17.040127039 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:17.040162086 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:17.040168047 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:17.040203094 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:17.040230989 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:17.040294886 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:17.040812016 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:17.040827990 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:17.040882111 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:17.040889025 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:17.040930986 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:17.041130066 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:17.041183949 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:17.041189909 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:17.041245937 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:17.041294098 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:17.064594030 CEST	49747	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.064611912 CEST	443	49747	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.064871073 CEST	49745	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.064882040 CEST	443	49745	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.065047026 CEST	49746	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.065063953 CEST	443	49746	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.065404892 CEST	443	49745	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.065469980 CEST	443	49746	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.065601110 CEST	443	49747	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.065648079 CEST	49747	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.066277981 CEST	49747	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.066338062 CEST	443	49747	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.066505909 CEST	49746	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.066576004 CEST	443	49746	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.066816092 CEST	49745	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.066874981 CEST	443	49745	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.066987038 CEST	49747	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.066997051 CEST	443	49747	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.067090988 CEST	49746	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.067117929 CEST	49745	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.069102049 CEST	49737	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:17.069116116 CEST	443	49737	13.107.246.70	192.168.2.6
May 8, 2024 01:18:17.108120918 CEST	443	49745	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.108130932 CEST	443	49746	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.115078926 CEST	49747	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.297755957 CEST	443	49750	99.86.38.13	192.168.2.6
May 8, 2024 01:18:17.299015999 CEST	443	49749	99.86.38.13	192.168.2.6
May 8, 2024 01:18:17.321095943 CEST	49749	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:17.321131945 CEST	443	49749	99.86.38.13	192.168.2.6
May 8, 2024 01:18:17.321261883 CEST	49750	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:17.321280003 CEST	443	49750	99.86.38.13	192.168.2.6
May 8, 2024 01:18:17.321604967 CEST	443	49749	99.86.38.13	192.168.2.6
May 8, 2024 01:18:17.322074890 CEST	49749	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:17.322139978 CEST	443	49749	99.86.38.13	192.168.2.6
May 8, 2024 01:18:17.322200060 CEST	443	49750	99.86.38.13	192.168.2.6
May 8, 2024 01:18:17.322253942 CEST	49750	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:17.323373079 CEST	49749	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:17.324516058 CEST	49750	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:17.324573040 CEST	443	49750	99.86.38.13	192.168.2.6
May 8, 2024 01:18:17.324837923 CEST	49750	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:17.324843884 CEST	443	49750	99.86.38.13	192.168.2.6
May 8, 2024 01:18:17.326807022 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.327128887 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.327147961 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.328361034 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.328434944 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.329230070 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.329291105 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.329348087 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.364121914 CEST	443	49749	99.86.38.13	192.168.2.6
May 8, 2024 01:18:17.365854025 CEST	443	49745	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.365873098 CEST	443	49745	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.365942955 CEST	49745	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.365950108 CEST	443	49745	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.366105080 CEST	443	49745	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.366241932 CEST	49745	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.367460012 CEST	49745	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.367469072 CEST	443	49745	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.369807005 CEST	443	49747	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.369827032 CEST	443	49747	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.369869947 CEST	49747	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.369887114 CEST	443	49747	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.370070934 CEST	443	49747	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.370105982 CEST	49747	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.371388912 CEST	49750	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:17.371567965 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.371577978 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.372350931 CEST	49747	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.372368097 CEST	443	49747	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.378406048 CEST	443	49746	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.378465891 CEST	443	49746	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.378567934 CEST	49746	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.380300999 CEST	49746	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.380312920 CEST	443	49746	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.425240040 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.483392000 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:17.483853102 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:17.483895063 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:17.484257936 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:17.485001087 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:17.485080004 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:17.485280991 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:17.532119989 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:17.665124893 CEST	443	49744	99.86.38.13	192.168.2.6
May 8, 2024 01:18:17.665148973 CEST	443	49744	99.86.38.13	192.168.2.6
May 8, 2024 01:18:17.665232897 CEST	49744	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:17.665246010 CEST	443	49744	99.86.38.13	192.168.2.6
May 8, 2024 01:18:17.665285110 CEST	49744	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:17.665512085 CEST	443	49744	99.86.38.13	192.168.2.6
May 8, 2024 01:18:17.665568113 CEST	443	49744	99.86.38.13	192.168.2.6
May 8, 2024 01:18:17.665642023 CEST	49744	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:17.673671961 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.673690081 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.673696995 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.673721075 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.673759937 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.673790932 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.673808098 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.674458027 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.674511909 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.674530983 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.703694105 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.703706026 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.703721046 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.703736067 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.703768015 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.703792095 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.704269886 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.707751036 CEST	49744	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:17.707781076 CEST	443	49744	99.86.38.13	192.168.2.6
May 8, 2024 01:18:17.707818031 CEST	49744	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:17.707847118 CEST	49744	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:17.717499018 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.717552900 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.717564106 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.757853031 CEST	49761	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.757879972 CEST	443	49761	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.757946014 CEST	49761	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.758131027 CEST	49761	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.758143902 CEST	443	49761	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.766524076 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.842708111 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.842719078 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.842750072 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.842761993 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.842791080 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.842812061 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.842847109 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.842859030 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.847176075 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.847248077 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.879388094 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.879412889 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.879481077 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.879492998 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.879520893 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.879537106 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.904679060 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.904716969 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.904745102 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.904759884 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.904783010 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.904791117 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.993513107 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.993535042 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.993593931 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.993619919 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:17.993634939 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.993663073 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:17.995044947 CEST	443	49750	99.86.38.13	192.168.2.6
May 8, 2024 01:18:17.995349884 CEST	443	49750	99.86.38.13	192.168.2.6
May 8, 2024 01:18:17.995403051 CEST	49750	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:17.998676062 CEST	49750	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:17.998687983 CEST	443	49750	99.86.38.13	192.168.2.6
May 8, 2024 01:18:18.007066965 CEST	49762	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.007082939 CEST	443	49762	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.007200003 CEST	49762	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.007586002 CEST	49762	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.007597923 CEST	443	49762	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.012794018 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.012825966 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.012856960 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.012867928 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.012907982 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.029794931 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.029839993 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.029870987 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.029890060 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.029902935 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.029925108 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.033982038 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.034064054 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.050517082 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.050551891 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.050600052 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.050614119 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.050646067 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.056948900 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.056998014 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.057019949 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.057054996 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.061604977 CEST	49752	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.061626911 CEST	443	49752	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.091583967 CEST	443	49761	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.092695951 CEST	49761	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.092714071 CEST	443	49761	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.093099117 CEST	443	49761	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.093718052 CEST	49761	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.093796015 CEST	443	49761	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.094022036 CEST	49761	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.111710072 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.111731052 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.111749887 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.111860037 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.111860037 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.111885071 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.111931086 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.111932993 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.111939907 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.111983061 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.115871906 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.115888119 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.115958929 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.115967035 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.116002083 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.119587898 CEST	443	49749	99.86.38.13	192.168.2.6
May 8, 2024 01:18:18.119852066 CEST	443	49749	99.86.38.13	192.168.2.6
May 8, 2024 01:18:18.120063066 CEST	49749	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:18.125813007 CEST	49749	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:18.125834942 CEST	443	49749	99.86.38.13	192.168.2.6
May 8, 2024 01:18:18.136120081 CEST	443	49761	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.159179926 CEST	49764	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.159218073 CEST	443	49764	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.159285069 CEST	49764	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.159522057 CEST	49764	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.159537077 CEST	443	49764	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.280359030 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.280383110 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.280440092 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.280463934 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.280482054 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.280505896 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.283233881 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.283250093 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.283312082 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.283317089 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.283353090 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.285351038 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.285367966 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.285429001 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.285434008 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.285489082 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.344255924 CEST	443	49762	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.344491959 CEST	49762	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.344502926 CEST	443	49762	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.344860077 CEST	443	49762	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.345175028 CEST	49762	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.345237017 CEST	443	49762	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.345294952 CEST	49762	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.388118029 CEST	443	49762	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.430017948 CEST	443	49761	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.430071115 CEST	443	49761	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.430134058 CEST	49761	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.430150986 CEST	443	49761	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.430164099 CEST	443	49761	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.430191040 CEST	49761	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.430218935 CEST	49761	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.432620049 CEST	49761	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.432630062 CEST	443	49761	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.446278095 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.446296930 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.446363926 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.446382046 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.446429968 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.447462082 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.447478056 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.447504044 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.447520018 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.447525024 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.447547913 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.449145079 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.449163914 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.449214935 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.449219942 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.449250937 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.449992895 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.450026035 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.450057030 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.450062037 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.450089931 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.453763962 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.453788042 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.453825951 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.453830004 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.453860044 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.453876972 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.453896999 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.453919888 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.453923941 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.453952074 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.493838072 CEST	443	49764	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.494163990 CEST	49764	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.494178057 CEST	443	49764	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.494549036 CEST	443	49764	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.494993925 CEST	49764	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.495057106 CEST	443	49764	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.495179892 CEST	49764	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.496189117 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.496195078 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.536123037 CEST	443	49764	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.543108940 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.612612009 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.612623930 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.612653971 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.612699032 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.612705946 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.612736940 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.612757921 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.613626957 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.613642931 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.613699913 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.613704920 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.613739014 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.614579916 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.614593983 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.614649057 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.614655972 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.614686966 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.615936995 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.615961075 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.615993023 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.616034985 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.616040945 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.616067886 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.617208958 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.617228985 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.617291927 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.617299080 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.618251085 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.618266106 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.618343115 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.618349075 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.619337082 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.619357109 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.619390965 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.619395018 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.619434118 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.620495081 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.620510101 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.620537996 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.620563030 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.620567083 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.620609999 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.620614052 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.620842934 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.620892048 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.621984959 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.621998072 CEST	443	49751	13.107.246.70	192.168.2.6
May 8, 2024 01:18:18.622006893 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.622044086 CEST	49751	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:18.681646109 CEST	443	49762	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.681852102 CEST	443	49762	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.681910038 CEST	49762	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.773287058 CEST	49762	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.773294926 CEST	443	49762	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.778840065 CEST	443	49698	173.222.162.64	192.168.2.6
May 8, 2024 01:18:18.780036926 CEST	49698	443	192.168.2.6	173.222.162.64
May 8, 2024 01:18:18.827565908 CEST	443	49764	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.827928066 CEST	443	49764	99.86.38.11	192.168.2.6
May 8, 2024 01:18:18.828005075 CEST	49764	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.929013968 CEST	49764	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:18.929025888 CEST	443	49764	99.86.38.11	192.168.2.6
May 8, 2024 01:18:19.094326019 CEST	49768	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:19.094353914 CEST	443	49768	44.209.29.87	192.168.2.6
May 8, 2024 01:18:19.094505072 CEST	49768	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:19.094687939 CEST	49768	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:19.094698906 CEST	443	49768	44.209.29.87	192.168.2.6
May 8, 2024 01:18:19.635490894 CEST	49769	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:19.635529995 CEST	443	49769	44.209.29.87	192.168.2.6
May 8, 2024 01:18:19.635864973 CEST	49770	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:19.635895014 CEST	443	49770	44.209.29.87	192.168.2.6
May 8, 2024 01:18:19.635904074 CEST	49769	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:19.635936975 CEST	49770	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:19.636146069 CEST	49770	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:19.636157990 CEST	443	49770	44.209.29.87	192.168.2.6
May 8, 2024 01:18:19.638288975 CEST	49769	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:19.638304949 CEST	443	49769	44.209.29.87	192.168.2.6
May 8, 2024 01:18:19.642787933 CEST	49771	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:19.642798901 CEST	443	49771	13.107.246.70	192.168.2.6
May 8, 2024 01:18:19.642859936 CEST	49771	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:19.643426895 CEST	49771	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:19.643441916 CEST	443	49771	13.107.246.70	192.168.2.6
May 8, 2024 01:18:19.826641083 CEST	443	49768	44.209.29.87	192.168.2.6
May 8, 2024 01:18:19.827105045 CEST	49768	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:19.827116013 CEST	443	49768	44.209.29.87	192.168.2.6
May 8, 2024 01:18:19.828159094 CEST	443	49768	44.209.29.87	192.168.2.6
May 8, 2024 01:18:19.828236103 CEST	49768	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:19.829235077 CEST	49768	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:19.829307079 CEST	443	49768	44.209.29.87	192.168.2.6
May 8, 2024 01:18:19.829448938 CEST	49768	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:19.829454899 CEST	443	49768	44.209.29.87	192.168.2.6
May 8, 2024 01:18:19.871722937 CEST	49768	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:20.066914082 CEST	443	49768	44.209.29.87	192.168.2.6
May 8, 2024 01:18:20.066998005 CEST	443	49768	44.209.29.87	192.168.2.6
May 8, 2024 01:18:20.067090034 CEST	49768	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:20.076205015 CEST	49768	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:20.076222897 CEST	443	49768	44.209.29.87	192.168.2.6
May 8, 2024 01:18:20.321597099 CEST	443	49771	13.107.246.70	192.168.2.6
May 8, 2024 01:18:20.322377920 CEST	49771	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:20.322403908 CEST	443	49771	13.107.246.70	192.168.2.6
May 8, 2024 01:18:20.322736979 CEST	443	49771	13.107.246.70	192.168.2.6
May 8, 2024 01:18:20.323663950 CEST	49771	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:20.323724985 CEST	443	49771	13.107.246.70	192.168.2.6
May 8, 2024 01:18:20.324084997 CEST	49771	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:20.351157904 CEST	443	49770	44.209.29.87	192.168.2.6
May 8, 2024 01:18:20.351362944 CEST	49770	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:20.351378918 CEST	443	49770	44.209.29.87	192.168.2.6
May 8, 2024 01:18:20.352446079 CEST	443	49770	44.209.29.87	192.168.2.6
May 8, 2024 01:18:20.352519035 CEST	49770	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:20.353998899 CEST	49770	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:20.354064941 CEST	443	49770	44.209.29.87	192.168.2.6
May 8, 2024 01:18:20.354268074 CEST	49770	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:20.354273081 CEST	443	49770	44.209.29.87	192.168.2.6
May 8, 2024 01:18:20.354482889 CEST	443	49769	44.209.29.87	192.168.2.6
May 8, 2024 01:18:20.358016014 CEST	49769	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:20.358027935 CEST	443	49769	44.209.29.87	192.168.2.6
May 8, 2024 01:18:20.359122038 CEST	443	49769	44.209.29.87	192.168.2.6
May 8, 2024 01:18:20.359179974 CEST	49769	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:20.360140085 CEST	49769	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:20.360204935 CEST	443	49769	44.209.29.87	192.168.2.6
May 8, 2024 01:18:20.360323906 CEST	49769	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:20.364120960 CEST	443	49771	13.107.246.70	192.168.2.6
May 8, 2024 01:18:20.401838064 CEST	49769	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:20.401842117 CEST	49770	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:20.401853085 CEST	443	49769	44.209.29.87	192.168.2.6
May 8, 2024 01:18:20.450300932 CEST	49769	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:20.591368914 CEST	443	49770	44.209.29.87	192.168.2.6
May 8, 2024 01:18:20.591435909 CEST	443	49770	44.209.29.87	192.168.2.6
May 8, 2024 01:18:20.591691971 CEST	49770	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:20.592518091 CEST	49770	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:20.592534065 CEST	443	49770	44.209.29.87	192.168.2.6
May 8, 2024 01:18:20.597243071 CEST	443	49769	44.209.29.87	192.168.2.6
May 8, 2024 01:18:20.597327948 CEST	443	49769	44.209.29.87	192.168.2.6
May 8, 2024 01:18:20.597374916 CEST	49769	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:20.597908974 CEST	49769	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:20.597923040 CEST	443	49769	44.209.29.87	192.168.2.6
May 8, 2024 01:18:20.996934891 CEST	443	49771	13.107.246.70	192.168.2.6
May 8, 2024 01:18:20.996958971 CEST	443	49771	13.107.246.70	192.168.2.6
May 8, 2024 01:18:20.996972084 CEST	443	49771	13.107.246.70	192.168.2.6
May 8, 2024 01:18:20.997011900 CEST	49771	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:20.997026920 CEST	443	49771	13.107.246.70	192.168.2.6
May 8, 2024 01:18:20.997040987 CEST	49771	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:20.997065067 CEST	49771	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:21.001252890 CEST	443	49771	13.107.246.70	192.168.2.6
May 8, 2024 01:18:21.001287937 CEST	443	49771	13.107.246.70	192.168.2.6
May 8, 2024 01:18:21.001321077 CEST	49771	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:21.001327038 CEST	443	49771	13.107.246.70	192.168.2.6
May 8, 2024 01:18:21.001360893 CEST	49771	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:21.001374006 CEST	49771	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:21.163402081 CEST	443	49771	13.107.246.70	192.168.2.6
May 8, 2024 01:18:21.163427114 CEST	443	49771	13.107.246.70	192.168.2.6
May 8, 2024 01:18:21.163459063 CEST	443	49771	13.107.246.70	192.168.2.6
May 8, 2024 01:18:21.163485050 CEST	49771	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:21.163503885 CEST	443	49771	13.107.246.70	192.168.2.6
May 8, 2024 01:18:21.163533926 CEST	49771	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:21.163558960 CEST	49771	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:21.165883064 CEST	443	49771	13.107.246.70	192.168.2.6
May 8, 2024 01:18:21.165925980 CEST	443	49771	13.107.246.70	192.168.2.6
May 8, 2024 01:18:21.165958881 CEST	49771	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:21.165963888 CEST	443	49771	13.107.246.70	192.168.2.6
May 8, 2024 01:18:21.165973902 CEST	49771	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:21.165997028 CEST	49771	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:21.175518990 CEST	49771	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:21.175534964 CEST	443	49771	13.107.246.70	192.168.2.6
May 8, 2024 01:18:22.384259939 CEST	49775	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:22.384289026 CEST	443	49775	13.107.246.70	192.168.2.6
May 8, 2024 01:18:22.384346008 CEST	49775	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:22.387988091 CEST	49775	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:22.388001919 CEST	443	49775	13.107.246.70	192.168.2.6
May 8, 2024 01:18:23.121367931 CEST	443	49775	13.107.246.70	192.168.2.6
May 8, 2024 01:18:23.151263952 CEST	49775	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:23.151293039 CEST	443	49775	13.107.246.70	192.168.2.6
May 8, 2024 01:18:23.151829004 CEST	443	49775	13.107.246.70	192.168.2.6
May 8, 2024 01:18:23.152538061 CEST	49775	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:23.152630091 CEST	443	49775	13.107.246.70	192.168.2.6
May 8, 2024 01:18:23.153038979 CEST	49775	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:23.196125984 CEST	443	49775	13.107.246.70	192.168.2.6
May 8, 2024 01:18:23.824234962 CEST	443	49775	13.107.246.70	192.168.2.6
May 8, 2024 01:18:23.824317932 CEST	49775	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:23.824333906 CEST	443	49775	13.107.246.70	192.168.2.6
May 8, 2024 01:18:23.824377060 CEST	49775	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:23.869469881 CEST	49775	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:23.869484901 CEST	443	49775	13.107.246.70	192.168.2.6
May 8, 2024 01:18:24.086595058 CEST	49776	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:24.086612940 CEST	443	49776	13.107.246.70	192.168.2.6
May 8, 2024 01:18:24.086678982 CEST	49776	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:24.087053061 CEST	49776	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:24.087070942 CEST	443	49776	13.107.246.70	192.168.2.6
May 8, 2024 01:18:25.602122068 CEST	443	49776	13.107.246.70	192.168.2.6
May 8, 2024 01:18:25.602615118 CEST	49776	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:25.602643013 CEST	443	49776	13.107.246.70	192.168.2.6
May 8, 2024 01:18:25.603693962 CEST	443	49776	13.107.246.70	192.168.2.6
May 8, 2024 01:18:25.603754997 CEST	49776	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:25.604588032 CEST	49776	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:25.604661942 CEST	443	49776	13.107.246.70	192.168.2.6
May 8, 2024 01:18:25.604811907 CEST	49776	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:25.604820013 CEST	443	49776	13.107.246.70	192.168.2.6
May 8, 2024 01:18:25.652102947 CEST	49776	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:26.163599014 CEST	443	49776	13.107.246.70	192.168.2.6
May 8, 2024 01:18:26.163690090 CEST	49776	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:26.163713932 CEST	443	49776	13.107.246.70	192.168.2.6
May 8, 2024 01:18:26.165680885 CEST	443	49776	13.107.246.70	192.168.2.6
May 8, 2024 01:18:26.166860104 CEST	49776	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:26.257641077 CEST	49776	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:26.257663965 CEST	443	49776	13.107.246.70	192.168.2.6
May 8, 2024 01:18:32.370950937 CEST	49777	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:32.370990992 CEST	443	49777	13.107.246.70	192.168.2.6
May 8, 2024 01:18:32.371155024 CEST	49777	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:32.371469975 CEST	49778	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:32.371530056 CEST	443	49778	13.107.246.70	192.168.2.6
May 8, 2024 01:18:32.371606112 CEST	49778	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:32.373282909 CEST	49778	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:32.373298883 CEST	443	49778	13.107.246.70	192.168.2.6
May 8, 2024 01:18:32.373574972 CEST	49777	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:32.373591900 CEST	443	49777	13.107.246.70	192.168.2.6
May 8, 2024 01:18:32.888885021 CEST	443	49778	13.107.246.70	192.168.2.6
May 8, 2024 01:18:32.891016006 CEST	49778	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:32.891052961 CEST	443	49778	13.107.246.70	192.168.2.6
May 8, 2024 01:18:32.891437054 CEST	443	49778	13.107.246.70	192.168.2.6
May 8, 2024 01:18:32.891897917 CEST	49778	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:32.891976118 CEST	443	49778	13.107.246.70	192.168.2.6
May 8, 2024 01:18:32.892333031 CEST	49778	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:32.938467026 CEST	443	49777	13.107.246.70	192.168.2.6
May 8, 2024 01:18:32.938792944 CEST	49777	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:32.938822985 CEST	443	49777	13.107.246.70	192.168.2.6
May 8, 2024 01:18:32.939179897 CEST	443	49777	13.107.246.70	192.168.2.6
May 8, 2024 01:18:32.939603090 CEST	49777	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:32.939671040 CEST	443	49777	13.107.246.70	192.168.2.6
May 8, 2024 01:18:32.940129042 CEST	443	49778	13.107.246.70	192.168.2.6
May 8, 2024 01:18:32.984813929 CEST	49777	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:33.487991095 CEST	443	49778	13.107.246.70	192.168.2.6
May 8, 2024 01:18:33.488013029 CEST	443	49778	13.107.246.70	192.168.2.6
May 8, 2024 01:18:33.488027096 CEST	443	49778	13.107.246.70	192.168.2.6
May 8, 2024 01:18:33.488059044 CEST	49778	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:33.488095999 CEST	443	49778	13.107.246.70	192.168.2.6
May 8, 2024 01:18:33.488154888 CEST	49778	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:33.488178968 CEST	443	49778	13.107.246.70	192.168.2.6
May 8, 2024 01:18:33.488195896 CEST	49778	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:33.488204956 CEST	443	49778	13.107.246.70	192.168.2.6
May 8, 2024 01:18:33.488440990 CEST	443	49778	13.107.246.70	192.168.2.6
May 8, 2024 01:18:33.488523006 CEST	443	49778	13.107.246.70	192.168.2.6
May 8, 2024 01:18:33.488545895 CEST	49778	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:33.488709927 CEST	49778	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:33.490835905 CEST	49778	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:33.490871906 CEST	443	49778	13.107.246.70	192.168.2.6
May 8, 2024 01:18:33.508893013 CEST	49779	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.508927107 CEST	443	49779	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.509010077 CEST	49779	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.510595083 CEST	49779	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.510616064 CEST	443	49779	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.523782015 CEST	49780	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.523823023 CEST	443	49780	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.523963928 CEST	49780	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.524435043 CEST	49781	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.524461985 CEST	443	49781	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.524548054 CEST	49781	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.525199890 CEST	49781	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.525204897 CEST	49780	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.525214911 CEST	443	49781	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.525244951 CEST	443	49780	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.526135921 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.526169062 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.528975010 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.529376030 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.529390097 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.534836054 CEST	49783	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.534857988 CEST	443	49783	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.534993887 CEST	49783	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.538837910 CEST	49783	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.538860083 CEST	443	49783	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.711174965 CEST	49784	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:33.711189985 CEST	443	49784	44.209.29.87	192.168.2.6
May 8, 2024 01:18:33.713886023 CEST	49784	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:33.715536118 CEST	49784	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:33.715548992 CEST	443	49784	44.209.29.87	192.168.2.6
May 8, 2024 01:18:33.840723038 CEST	443	49779	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.841034889 CEST	49779	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.841048002 CEST	443	49779	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.841389894 CEST	443	49779	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.842004061 CEST	49779	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.842076063 CEST	443	49779	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.842178106 CEST	49779	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.855189085 CEST	443	49780	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.855770111 CEST	49780	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.855808973 CEST	443	49780	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.856137037 CEST	443	49780	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.856780052 CEST	49780	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.856846094 CEST	443	49780	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.858336926 CEST	443	49781	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.859824896 CEST	49781	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.859848976 CEST	443	49781	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.860003948 CEST	49780	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.860878944 CEST	443	49781	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.861040115 CEST	49781	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.861284971 CEST	49781	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.861346960 CEST	443	49781	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.861378908 CEST	49781	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.862171888 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.862492085 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.862518072 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.870978117 CEST	443	49783	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.871495008 CEST	49783	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.871515989 CEST	443	49783	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.872406960 CEST	443	49783	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.872481108 CEST	49783	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.872798920 CEST	49783	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.872858047 CEST	443	49783	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.872940063 CEST	49783	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.873133898 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.873189926 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.873579025 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.873579025 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.873590946 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.880165100 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.884121895 CEST	443	49779	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.888973951 CEST	49779	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.900131941 CEST	443	49780	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.904834032 CEST	49781	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.904843092 CEST	443	49781	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.916121006 CEST	443	49783	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.918503046 CEST	49783	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.918514013 CEST	443	49783	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.933974028 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.933980942 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:33.949080944 CEST	49781	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.966900110 CEST	49783	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:33.981127024 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.189764023 CEST	443	49784	44.209.29.87	192.168.2.6
May 8, 2024 01:18:34.190045118 CEST	49784	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:34.190062046 CEST	443	49784	44.209.29.87	192.168.2.6
May 8, 2024 01:18:34.190375090 CEST	443	49784	44.209.29.87	192.168.2.6
May 8, 2024 01:18:34.190690994 CEST	49784	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:34.190747976 CEST	443	49784	44.209.29.87	192.168.2.6
May 8, 2024 01:18:34.190870047 CEST	49784	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:34.232120037 CEST	443	49784	44.209.29.87	192.168.2.6
May 8, 2024 01:18:34.340092897 CEST	443	49781	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.340133905 CEST	443	49781	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.340195894 CEST	49781	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.340212107 CEST	443	49781	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.340234995 CEST	443	49781	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.340251923 CEST	49781	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.340277910 CEST	49781	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.342072964 CEST	49781	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.342084885 CEST	443	49781	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.346144915 CEST	49786	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:34.346185923 CEST	443	49786	99.86.38.11	192.168.2.6
May 8, 2024 01:18:34.346246004 CEST	49786	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:34.346606016 CEST	49786	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:34.346621990 CEST	443	49786	99.86.38.11	192.168.2.6
May 8, 2024 01:18:34.351223946 CEST	443	49783	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.351250887 CEST	443	49783	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.351414919 CEST	49783	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.351429939 CEST	443	49783	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.351468086 CEST	443	49783	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.351506948 CEST	49783	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.351970911 CEST	49783	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.351983070 CEST	443	49783	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.354897022 CEST	49787	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:34.354940891 CEST	443	49787	99.86.38.11	192.168.2.6
May 8, 2024 01:18:34.355076075 CEST	49787	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:34.355273008 CEST	49787	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:34.355285883 CEST	443	49787	99.86.38.11	192.168.2.6
May 8, 2024 01:18:34.419493914 CEST	49788	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:34.419522047 CEST	443	49788	44.209.29.87	192.168.2.6
May 8, 2024 01:18:34.419573069 CEST	49788	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:34.419802904 CEST	49788	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:34.419816971 CEST	443	49788	44.209.29.87	192.168.2.6
May 8, 2024 01:18:34.421139002 CEST	49789	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:34.421168089 CEST	443	49789	44.209.29.87	192.168.2.6
May 8, 2024 01:18:34.421279907 CEST	49789	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:34.421433926 CEST	49789	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:34.421442986 CEST	443	49789	44.209.29.87	192.168.2.6
May 8, 2024 01:18:34.501496077 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.501523018 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.501530886 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.501554012 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.501565933 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.501579046 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.501580000 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.501605988 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.501624107 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.501647949 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.510504961 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.510514975 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.510572910 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.519582033 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.519649029 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.543621063 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.543678999 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.550077915 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.550133944 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.554687023 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.554740906 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.554748058 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.554786921 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.555140018 CEST	443	49779	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.555164099 CEST	443	49779	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.555226088 CEST	49779	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.555238008 CEST	443	49779	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.555319071 CEST	443	49779	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.555407047 CEST	49779	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.556252956 CEST	49779	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.556267023 CEST	443	49779	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.627444029 CEST	49791	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:34.627501965 CEST	443	49791	99.86.38.11	192.168.2.6
May 8, 2024 01:18:34.627568007 CEST	49791	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:34.627759933 CEST	49791	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:34.627778053 CEST	443	49791	99.86.38.11	192.168.2.6
May 8, 2024 01:18:34.641211987 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.641284943 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.643338919 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.643409014 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.643416882 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.656980991 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.657046080 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.657053947 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.657130957 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.663485050 CEST	443	49784	44.209.29.87	192.168.2.6
May 8, 2024 01:18:34.663547039 CEST	443	49784	44.209.29.87	192.168.2.6
May 8, 2024 01:18:34.663686991 CEST	49784	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:34.664160013 CEST	49784	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:34.664169073 CEST	443	49784	44.209.29.87	192.168.2.6
May 8, 2024 01:18:34.664177895 CEST	49784	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:34.664222956 CEST	49784	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:34.669956923 CEST	443	49780	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.669980049 CEST	443	49780	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.670028925 CEST	49780	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.670054913 CEST	443	49780	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.670166016 CEST	443	49780	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.670223951 CEST	49780	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.670954943 CEST	49780	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.670969963 CEST	443	49780	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.670999050 CEST	49780	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.671020031 CEST	49780	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.675112963 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.675152063 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.675179958 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.675193071 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.675225973 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.677405119 CEST	49792	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:34.677433014 CEST	443	49792	99.86.38.11	192.168.2.6
May 8, 2024 01:18:34.677629948 CEST	49792	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:34.677858114 CEST	49792	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:34.677865982 CEST	443	49792	99.86.38.11	192.168.2.6
May 8, 2024 01:18:34.679559946 CEST	443	49786	99.86.38.11	192.168.2.6
May 8, 2024 01:18:34.679775953 CEST	49786	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:34.679800034 CEST	443	49786	99.86.38.11	192.168.2.6
May 8, 2024 01:18:34.680141926 CEST	443	49786	99.86.38.11	192.168.2.6
May 8, 2024 01:18:34.680598021 CEST	49786	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:34.680644989 CEST	443	49786	99.86.38.11	192.168.2.6
May 8, 2024 01:18:34.680727959 CEST	49786	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:34.684839010 CEST	443	49787	99.86.38.11	192.168.2.6
May 8, 2024 01:18:34.685070992 CEST	49787	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:34.685095072 CEST	443	49787	99.86.38.11	192.168.2.6
May 8, 2024 01:18:34.685391903 CEST	443	49787	99.86.38.11	192.168.2.6
May 8, 2024 01:18:34.685782909 CEST	49787	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:34.685842991 CEST	443	49787	99.86.38.11	192.168.2.6
May 8, 2024 01:18:34.685883999 CEST	49787	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:34.695597887 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.695633888 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.695681095 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.695692062 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.695720911 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.695749998 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.704621077 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.704710007 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.728116989 CEST	443	49786	99.86.38.11	192.168.2.6
May 8, 2024 01:18:34.728157043 CEST	443	49787	99.86.38.11	192.168.2.6
May 8, 2024 01:18:34.731957912 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.731980085 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.734853983 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.734867096 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.776489019 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.812371016 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.812391043 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.812453032 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.812460899 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.812525034 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.834814072 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.834861040 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.834887981 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.834893942 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.834944963 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.843914986 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.844095945 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.862484932 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.862529993 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.862561941 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.862574100 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.862624884 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.874198914 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.874263048 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.889837980 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.889873028 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.889910936 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.889923096 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.889952898 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.889971018 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.892728090 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.892784119 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.895662069 CEST	443	49788	44.209.29.87	192.168.2.6
May 8, 2024 01:18:34.895944118 CEST	49788	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:34.895962000 CEST	443	49788	44.209.29.87	192.168.2.6
May 8, 2024 01:18:34.896290064 CEST	443	49788	44.209.29.87	192.168.2.6
May 8, 2024 01:18:34.896732092 CEST	49788	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:34.896795988 CEST	443	49788	44.209.29.87	192.168.2.6
May 8, 2024 01:18:34.896897078 CEST	49788	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:34.897586107 CEST	443	49789	44.209.29.87	192.168.2.6
May 8, 2024 01:18:34.897752047 CEST	49789	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:34.897758961 CEST	443	49789	44.209.29.87	192.168.2.6
May 8, 2024 01:18:34.898108006 CEST	443	49789	44.209.29.87	192.168.2.6
May 8, 2024 01:18:34.898375034 CEST	49789	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:34.898426056 CEST	443	49789	44.209.29.87	192.168.2.6
May 8, 2024 01:18:34.898524046 CEST	49789	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:34.906106949 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.906141996 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.906172037 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.906177044 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.906219006 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.909221888 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.909279108 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.922847033 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.922895908 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.922921896 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.922931910 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.922959089 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.922980070 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.925519943 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.925575972 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.935050011 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.935123920 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.935131073 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.935168982 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.943214893 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.943289995 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.944107056 CEST	443	49788	44.209.29.87	192.168.2.6
May 8, 2024 01:18:34.944117069 CEST	443	49789	44.209.29.87	192.168.2.6
May 8, 2024 01:18:34.952828884 CEST	49789	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:34.962302923 CEST	443	49791	99.86.38.11	192.168.2.6
May 8, 2024 01:18:34.962568998 CEST	49791	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:34.962593079 CEST	443	49791	99.86.38.11	192.168.2.6
May 8, 2024 01:18:34.963593960 CEST	443	49791	99.86.38.11	192.168.2.6
May 8, 2024 01:18:34.963654995 CEST	49791	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:34.964040995 CEST	49791	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:34.964113951 CEST	443	49791	99.86.38.11	192.168.2.6
May 8, 2024 01:18:34.964258909 CEST	49791	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:34.964270115 CEST	443	49791	99.86.38.11	192.168.2.6
May 8, 2024 01:18:34.980227947 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.980256081 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.980335951 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.980343103 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.980396032 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.996181011 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.996201992 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.996264935 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:34.996270895 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:34.996314049 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:35.008430958 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:35.008452892 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:35.008517981 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:35.008523941 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:35.008559942 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:35.012916088 CEST	443	49792	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.013123989 CEST	49792	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.013137102 CEST	443	49792	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.014121056 CEST	443	49792	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.014173031 CEST	49792	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.014491081 CEST	49791	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.014523983 CEST	443	49786	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.014549017 CEST	443	49786	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.014600039 CEST	49786	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.014615059 CEST	443	49786	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.014659882 CEST	49786	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.014692068 CEST	49792	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.014750957 CEST	443	49792	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.014775038 CEST	443	49786	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.014841080 CEST	443	49786	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.014869928 CEST	49792	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.014875889 CEST	443	49792	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.014885902 CEST	49786	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.015676022 CEST	49786	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.015690088 CEST	443	49786	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.019009113 CEST	443	49787	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.019030094 CEST	443	49787	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.019079924 CEST	49787	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.019112110 CEST	443	49787	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.019218922 CEST	443	49787	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.019262075 CEST	49787	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.020602942 CEST	49787	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.020617962 CEST	443	49787	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.021517992 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:35.021534920 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:35.021600008 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:35.021608114 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:35.021645069 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:35.034984112 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:35.035006046 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:35.035053968 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:35.035060883 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:35.035093069 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:35.035108089 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:35.045030117 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:35.045073986 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:35.045094967 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:35.045099974 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:35.045118093 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:35.045140028 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:35.045164108 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:35.047262907 CEST	49782	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:35.047271967 CEST	443	49782	99.86.38.13	192.168.2.6
May 8, 2024 01:18:35.061306953 CEST	49792	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.126719952 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.126754045 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.127007008 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.127207994 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.127222061 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.298374891 CEST	443	49791	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.298399925 CEST	443	49791	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.298470974 CEST	443	49791	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.298562050 CEST	49791	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.298562050 CEST	49791	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.299537897 CEST	49791	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.299557924 CEST	443	49791	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.353074074 CEST	443	49792	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.353112936 CEST	443	49792	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.353172064 CEST	49792	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.353184938 CEST	443	49792	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.353516102 CEST	443	49792	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.353564024 CEST	49792	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.354100943 CEST	49792	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.354115963 CEST	443	49792	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.354125023 CEST	49792	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.354162931 CEST	49792	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.367413998 CEST	443	49788	44.209.29.87	192.168.2.6
May 8, 2024 01:18:35.367490053 CEST	443	49788	44.209.29.87	192.168.2.6
May 8, 2024 01:18:35.367566109 CEST	49788	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:35.367996931 CEST	49788	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:35.368014097 CEST	443	49788	44.209.29.87	192.168.2.6
May 8, 2024 01:18:35.370701075 CEST	443	49789	44.209.29.87	192.168.2.6
May 8, 2024 01:18:35.370773077 CEST	443	49789	44.209.29.87	192.168.2.6
May 8, 2024 01:18:35.370888948 CEST	49789	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:35.371306896 CEST	49789	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:35.371315002 CEST	443	49789	44.209.29.87	192.168.2.6
May 8, 2024 01:18:35.461613894 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.461898088 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.461918116 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.462261915 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.462624073 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.462682962 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.462783098 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.508121967 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.793848038 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.817111969 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.817130089 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.817198038 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.817218065 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.817301989 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.844769001 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.844790936 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.844854116 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.844868898 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.844904900 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.886859894 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.967381954 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.967474937 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.967474937 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.967531919 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.967544079 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.994108915 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.994126081 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:35.994318962 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:35.994332075 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.024161100 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.024183989 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.024315119 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.024324894 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.051808119 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.051887989 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.051897049 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.051904917 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.051964998 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.051968098 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.052021027 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.137411118 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.137423038 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.137502909 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.137527943 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.137542009 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.137568951 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.137618065 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.158885002 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.158902884 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.158967018 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.158973932 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.159032106 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.159032106 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.182113886 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.182132006 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.182193995 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.182204962 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.182244062 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.182260036 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.203639984 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.203726053 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.203788042 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.203798056 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.203798056 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.203815937 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.204880953 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.225270987 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.225292921 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.225366116 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.225384951 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.225675106 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.234677076 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.234781981 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.253566027 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.253582954 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.253659964 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.253668070 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.285867929 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.285892963 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.285943031 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.285950899 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.286025047 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.295845985 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.295923948 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.295922041 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.295969963 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.295984030 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.311481953 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.311497927 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.311691046 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.311697960 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.325412035 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.325428963 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.325551033 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.325567961 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.340029955 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.340054035 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.340121984 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.340127945 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.340137959 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.355161905 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.355180025 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.355262041 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.355272055 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.364617109 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.364697933 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.364741087 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.364742994 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.364767075 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.364813089 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.376451969 CEST	49793	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:36.376472950 CEST	443	49793	99.86.38.11	192.168.2.6
May 8, 2024 01:18:36.496742010 CEST	49794	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:36.496773005 CEST	443	49794	13.107.246.70	192.168.2.6
May 8, 2024 01:18:36.496833086 CEST	49794	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:36.625318050 CEST	49794	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:36.625346899 CEST	443	49794	13.107.246.70	192.168.2.6
May 8, 2024 01:18:36.627687931 CEST	49777	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:36.668117046 CEST	443	49777	13.107.246.70	192.168.2.6
May 8, 2024 01:18:37.054697990 CEST	443	49777	13.107.246.70	192.168.2.6
May 8, 2024 01:18:37.054723978 CEST	443	49777	13.107.246.70	192.168.2.6
May 8, 2024 01:18:37.054739952 CEST	443	49777	13.107.246.70	192.168.2.6
May 8, 2024 01:18:37.054745913 CEST	443	49777	13.107.246.70	192.168.2.6
May 8, 2024 01:18:37.054780006 CEST	49777	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:37.054800987 CEST	443	49777	13.107.246.70	192.168.2.6
May 8, 2024 01:18:37.054841042 CEST	49777	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:37.054862022 CEST	49777	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:37.054974079 CEST	443	49777	13.107.246.70	192.168.2.6
May 8, 2024 01:18:37.055021048 CEST	49777	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:37.056140900 CEST	443	49777	13.107.246.70	192.168.2.6
May 8, 2024 01:18:37.056179047 CEST	443	49777	13.107.246.70	192.168.2.6
May 8, 2024 01:18:37.056221008 CEST	443	49777	13.107.246.70	192.168.2.6
May 8, 2024 01:18:37.056226015 CEST	49777	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:37.056272984 CEST	49777	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:37.056896925 CEST	49777	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:37.056907892 CEST	443	49777	13.107.246.70	192.168.2.6
May 8, 2024 01:18:37.079324961 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.079370975 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.079438925 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.079798937 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.079813004 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.088088036 CEST	49796	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.088126898 CEST	443	49796	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.088273048 CEST	49796	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.088598013 CEST	49796	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.088608027 CEST	443	49796	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.090949059 CEST	49797	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.090975046 CEST	443	49797	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.091038942 CEST	49797	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.091355085 CEST	49798	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.091392994 CEST	443	49798	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.091604948 CEST	49798	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.092467070 CEST	49799	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.092494011 CEST	443	49799	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.092575073 CEST	49799	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.093061924 CEST	49797	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.093076944 CEST	443	49797	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.093363047 CEST	49798	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.093377113 CEST	443	49798	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.093847036 CEST	49799	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.093859911 CEST	443	49799	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.094494104 CEST	49800	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.094580889 CEST	443	49800	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.094659090 CEST	49800	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.095283031 CEST	49800	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.095316887 CEST	443	49800	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.354623079 CEST	443	49794	13.107.246.70	192.168.2.6
May 8, 2024 01:18:37.355693102 CEST	49794	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:37.355705976 CEST	443	49794	13.107.246.70	192.168.2.6
May 8, 2024 01:18:37.356071949 CEST	443	49794	13.107.246.70	192.168.2.6
May 8, 2024 01:18:37.357167959 CEST	49794	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:37.357242107 CEST	443	49794	13.107.246.70	192.168.2.6
May 8, 2024 01:18:37.402580976 CEST	49794	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:37.412710905 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.412987947 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.413001060 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.413362980 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.413832903 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.413887024 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.413986921 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.418860912 CEST	443	49796	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.419059992 CEST	49796	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.419068098 CEST	443	49796	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.419394970 CEST	443	49796	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.421061039 CEST	49796	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.421124935 CEST	443	49796	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.421185970 CEST	49796	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.423152924 CEST	443	49797	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.423348904 CEST	49797	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.423363924 CEST	443	49797	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.424433947 CEST	443	49797	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.424496889 CEST	49797	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.424808979 CEST	49797	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.424907923 CEST	443	49797	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.424927950 CEST	49797	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.426815033 CEST	443	49799	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.426990032 CEST	49799	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.427004099 CEST	443	49799	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.427939892 CEST	443	49799	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.427953005 CEST	443	49800	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.427994967 CEST	49799	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.428163052 CEST	49800	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.428206921 CEST	443	49800	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.428369045 CEST	49799	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.428420067 CEST	443	49799	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.428455114 CEST	49799	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.429121971 CEST	443	49798	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.429294109 CEST	49798	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.429328918 CEST	443	49800	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.429353952 CEST	443	49798	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.429384947 CEST	49800	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.429678917 CEST	49800	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.429748058 CEST	443	49800	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.429758072 CEST	49800	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.430558920 CEST	443	49798	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.430623055 CEST	49798	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.430959940 CEST	49798	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.431046009 CEST	49798	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.431129932 CEST	443	49798	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.460118055 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.466897011 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.466945887 CEST	49796	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.466953039 CEST	443	49796	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.468118906 CEST	443	49797	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.470458984 CEST	49797	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.470465899 CEST	49798	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.470469952 CEST	443	49797	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.470493078 CEST	443	49798	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.470508099 CEST	49799	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.470515013 CEST	443	49799	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.470515966 CEST	49800	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.470550060 CEST	443	49800	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.512324095 CEST	49798	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.512339115 CEST	49797	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.512340069 CEST	49799	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.512882948 CEST	49800	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.905030966 CEST	443	49797	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.905061960 CEST	443	49797	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.905070066 CEST	443	49797	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.905086994 CEST	443	49797	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.905095100 CEST	443	49797	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.905101061 CEST	443	49797	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.905152082 CEST	49797	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.905172110 CEST	443	49797	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.905185938 CEST	49797	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.905210018 CEST	49797	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.914037943 CEST	443	49797	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.914099932 CEST	49797	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.914105892 CEST	443	49797	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.914133072 CEST	443	49797	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.914181948 CEST	49797	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.940596104 CEST	443	49800	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.940614939 CEST	443	49800	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.940622091 CEST	443	49800	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.940660000 CEST	443	49800	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.940682888 CEST	443	49800	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.940690994 CEST	443	49800	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.940704107 CEST	49800	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.940738916 CEST	443	49800	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.940759897 CEST	49800	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.940855980 CEST	49800	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.941217899 CEST	49797	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.941231012 CEST	443	49797	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.942270041 CEST	49801	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.942302942 CEST	443	49801	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.942365885 CEST	49801	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.944981098 CEST	443	49800	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.945031881 CEST	49800	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.945869923 CEST	49801	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.945880890 CEST	443	49801	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.949522972 CEST	443	49800	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.949594021 CEST	49800	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.954049110 CEST	443	49800	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.954097986 CEST	49800	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.963088036 CEST	443	49800	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.963160992 CEST	443	49800	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.963264942 CEST	49800	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.963264942 CEST	49800	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.963423014 CEST	49800	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.963448048 CEST	443	49800	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.973069906 CEST	49802	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:37.973098993 CEST	443	49802	99.86.38.11	192.168.2.6
May 8, 2024 01:18:37.973151922 CEST	49802	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:37.973551989 CEST	49802	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:37.973567009 CEST	443	49802	99.86.38.11	192.168.2.6
May 8, 2024 01:18:37.976469040 CEST	49803	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:37.976492882 CEST	443	49803	99.86.38.11	192.168.2.6
May 8, 2024 01:18:37.976567030 CEST	49803	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:37.977107048 CEST	49803	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:37.977119923 CEST	443	49803	99.86.38.11	192.168.2.6
May 8, 2024 01:18:37.990755081 CEST	443	49799	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.990776062 CEST	443	49799	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.990782976 CEST	443	49799	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.990811110 CEST	443	49799	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.990823030 CEST	443	49799	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.990833044 CEST	443	49799	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.990840912 CEST	49799	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.990868092 CEST	443	49799	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.990883112 CEST	49799	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.990909100 CEST	49799	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.995261908 CEST	443	49799	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.995321989 CEST	49799	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:37.999762058 CEST	443	49799	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.999811888 CEST	443	49799	99.86.38.13	192.168.2.6
May 8, 2024 01:18:37.999865055 CEST	49799	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.000214100 CEST	49799	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.000222921 CEST	443	49799	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.008589029 CEST	49804	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.008603096 CEST	443	49804	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.008668900 CEST	49804	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.009439945 CEST	49804	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.009450912 CEST	443	49804	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.122791052 CEST	443	49798	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.122813940 CEST	443	49798	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.122824907 CEST	443	49798	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.122878075 CEST	49798	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.122908115 CEST	443	49798	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.122920990 CEST	443	49798	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.122926950 CEST	443	49798	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.122944117 CEST	49798	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.122953892 CEST	443	49798	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.122977018 CEST	49798	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.123006105 CEST	49798	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.130577087 CEST	443	49796	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.140878916 CEST	443	49798	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.140888929 CEST	443	49798	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.140939951 CEST	443	49798	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.140953064 CEST	49798	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.140969038 CEST	443	49798	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.141010046 CEST	49798	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.141021013 CEST	443	49798	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.141045094 CEST	443	49798	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.141088963 CEST	49798	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.141701937 CEST	49798	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.141715050 CEST	443	49798	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.153377056 CEST	443	49796	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.153390884 CEST	443	49796	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.153407097 CEST	443	49796	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.153443098 CEST	49796	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.153475046 CEST	443	49796	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.153491020 CEST	49796	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.153496027 CEST	443	49796	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.153516054 CEST	49796	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.157921076 CEST	443	49796	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.157974958 CEST	49796	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.157983065 CEST	443	49796	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.158005953 CEST	443	49796	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.158040047 CEST	49796	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.158061981 CEST	49796	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.160162926 CEST	49796	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.160171986 CEST	443	49796	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.168978930 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.191819906 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.191837072 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.191844940 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.191859961 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.191868067 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.191890955 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.191911936 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.191921949 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.191937923 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.191973925 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.219120979 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.219170094 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.219213963 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.219230890 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.219274044 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.278652906 CEST	443	49801	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.279669046 CEST	49801	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.279691935 CEST	443	49801	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.280065060 CEST	443	49801	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.281959057 CEST	49801	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.282022953 CEST	443	49801	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.303328037 CEST	443	49802	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.305731058 CEST	49801	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.306808949 CEST	49802	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.306827068 CEST	443	49802	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.307147026 CEST	443	49802	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.308298111 CEST	49802	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.308362007 CEST	443	49802	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.308943987 CEST	49802	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.309453964 CEST	443	49803	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.313714981 CEST	49803	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.313735962 CEST	443	49803	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.314152956 CEST	443	49803	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.314905882 CEST	49805	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:38.314940929 CEST	443	49805	44.209.29.87	192.168.2.6
May 8, 2024 01:18:38.315180063 CEST	49805	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:38.316071033 CEST	49803	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.316178083 CEST	443	49803	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.316628933 CEST	49805	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:38.316636086 CEST	443	49805	44.209.29.87	192.168.2.6
May 8, 2024 01:18:38.317051888 CEST	49803	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.339463949 CEST	443	49804	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.340126038 CEST	49804	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.340146065 CEST	443	49804	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.341041088 CEST	443	49804	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.341098070 CEST	49804	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.342598915 CEST	49806	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:38.342639923 CEST	443	49806	44.209.29.87	192.168.2.6
May 8, 2024 01:18:38.342655897 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.342683077 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.342709064 CEST	49806	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:38.342765093 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.342787981 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.342843056 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.343090057 CEST	49804	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.343153954 CEST	443	49804	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.343264103 CEST	49804	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.343274117 CEST	443	49804	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.343518019 CEST	49806	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:38.343533993 CEST	443	49806	44.209.29.87	192.168.2.6
May 8, 2024 01:18:38.352114916 CEST	443	49801	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.352133989 CEST	443	49802	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.364109039 CEST	443	49803	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.365438938 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.365475893 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.365525961 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.365531921 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.365577936 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.374433041 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.374519110 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.385842085 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.385929108 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.390444994 CEST	49804	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.399477005 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.399537086 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.407947063 CEST	49808	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:38.407973051 CEST	443	49808	44.209.29.87	192.168.2.6
May 8, 2024 01:18:38.408046961 CEST	49808	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:38.408489943 CEST	49808	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:38.408509970 CEST	443	49808	44.209.29.87	192.168.2.6
May 8, 2024 01:18:38.422293901 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.422333002 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.422362089 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.422368050 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.422399044 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.422425985 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.426758051 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.426806927 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.482770920 CEST	49809	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.482811928 CEST	443	49809	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.482884884 CEST	49809	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.484086037 CEST	49809	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.484105110 CEST	443	49809	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.485091925 CEST	49810	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.485135078 CEST	443	49810	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.485193968 CEST	49810	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.487183094 CEST	49810	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.487200975 CEST	443	49810	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.508224010 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.508265972 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.508292913 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.508299112 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.508316040 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.508357048 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.520162106 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.520194054 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.520226955 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.520236969 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.520267963 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.520283937 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.530796051 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.530888081 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.542588949 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.542625904 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.542660952 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.542669058 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.542709112 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.549468040 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.549544096 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.549555063 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.549598932 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.566827059 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.566869020 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.566898108 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.566905022 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.566932917 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.566951990 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.570343018 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.570405960 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.589314938 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.589349985 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.589376926 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.589382887 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.589422941 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.592478991 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.592539072 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.607840061 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.607877016 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.607903957 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.607911110 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.607968092 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.613720894 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.613761902 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.613792896 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.613801003 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.613842010 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.613852978 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.613879919 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.636640072 CEST	443	49802	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.643063068 CEST	443	49803	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.659246922 CEST	443	49802	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.659265995 CEST	443	49802	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.659574032 CEST	49802	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.659590006 CEST	443	49802	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.659638882 CEST	49802	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.660551071 CEST	49795	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.660567999 CEST	443	49795	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.665821075 CEST	443	49803	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.665838957 CEST	443	49803	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.665962934 CEST	49803	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.665983915 CEST	443	49803	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.666038990 CEST	49803	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.668241978 CEST	443	49802	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.668303013 CEST	443	49802	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.668304920 CEST	49802	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.668344975 CEST	49802	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.675582886 CEST	49802	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.675596952 CEST	443	49802	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.687102079 CEST	443	49803	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.687139034 CEST	443	49803	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.687160969 CEST	443	49803	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.687163115 CEST	49803	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.687206984 CEST	49803	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.699515104 CEST	443	49804	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.699536085 CEST	443	49804	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.699542999 CEST	443	49804	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.699553967 CEST	443	49804	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.699572086 CEST	443	49804	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.699595928 CEST	49804	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.699618101 CEST	443	49804	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.699632883 CEST	49804	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.699661970 CEST	49804	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.704680920 CEST	443	49804	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.704730034 CEST	443	49804	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.704734087 CEST	49804	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.704770088 CEST	49804	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.708570957 CEST	49803	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.708590031 CEST	443	49803	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.711236954 CEST	49804	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.711249113 CEST	443	49804	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.758516073 CEST	443	49801	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.758542061 CEST	443	49801	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.758625031 CEST	443	49801	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.758681059 CEST	49801	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.758699894 CEST	443	49801	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.758724928 CEST	49801	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.758755922 CEST	49801	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.777137995 CEST	443	49801	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.777215004 CEST	49801	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.777236938 CEST	443	49801	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.777254105 CEST	443	49801	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.777307987 CEST	49801	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.778105974 CEST	49801	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:38.778119087 CEST	443	49801	99.86.38.13	192.168.2.6
May 8, 2024 01:18:38.791038036 CEST	443	49805	44.209.29.87	192.168.2.6
May 8, 2024 01:18:38.798446894 CEST	49805	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:38.798455954 CEST	443	49805	44.209.29.87	192.168.2.6
May 8, 2024 01:18:38.798830032 CEST	443	49805	44.209.29.87	192.168.2.6
May 8, 2024 01:18:38.806016922 CEST	49805	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:38.806077957 CEST	443	49805	44.209.29.87	192.168.2.6
May 8, 2024 01:18:38.809427023 CEST	49805	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:38.813998938 CEST	443	49809	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.817163944 CEST	49809	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.817184925 CEST	443	49809	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.817517996 CEST	443	49809	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.817785025 CEST	443	49806	44.209.29.87	192.168.2.6
May 8, 2024 01:18:38.819895983 CEST	443	49810	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.820291996 CEST	49806	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:38.820306063 CEST	443	49806	44.209.29.87	192.168.2.6
May 8, 2024 01:18:38.820638895 CEST	443	49806	44.209.29.87	192.168.2.6
May 8, 2024 01:18:38.823740005 CEST	49809	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.823787928 CEST	443	49809	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.824007034 CEST	49806	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:38.824065924 CEST	443	49806	44.209.29.87	192.168.2.6
May 8, 2024 01:18:38.827039957 CEST	49810	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.827063084 CEST	443	49810	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.827158928 CEST	49809	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.827194929 CEST	49806	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:38.827436924 CEST	443	49810	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.830400944 CEST	49810	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.830468893 CEST	443	49810	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.830518007 CEST	49810	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:38.852108002 CEST	443	49805	44.209.29.87	192.168.2.6
May 8, 2024 01:18:38.868108034 CEST	443	49806	44.209.29.87	192.168.2.6
May 8, 2024 01:18:38.872116089 CEST	443	49810	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.872117043 CEST	443	49809	99.86.38.11	192.168.2.6
May 8, 2024 01:18:38.882728100 CEST	443	49808	44.209.29.87	192.168.2.6
May 8, 2024 01:18:38.883126020 CEST	49808	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:38.883135080 CEST	443	49808	44.209.29.87	192.168.2.6
May 8, 2024 01:18:38.884166956 CEST	443	49808	44.209.29.87	192.168.2.6
May 8, 2024 01:18:38.884228945 CEST	49808	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:38.884562969 CEST	49808	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:38.884619951 CEST	443	49808	44.209.29.87	192.168.2.6
May 8, 2024 01:18:38.884715080 CEST	49808	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:38.924961090 CEST	49808	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:38.924973965 CEST	443	49808	44.209.29.87	192.168.2.6
May 8, 2024 01:18:38.978449106 CEST	49808	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:39.148314953 CEST	443	49809	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.170835972 CEST	443	49809	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.170852900 CEST	443	49809	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.170892000 CEST	49809	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:39.170906067 CEST	443	49809	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.170943022 CEST	49809	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:39.170967102 CEST	49809	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:39.176902056 CEST	443	49810	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.176920891 CEST	443	49810	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.176934958 CEST	443	49810	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.177009106 CEST	49810	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:39.177035093 CEST	443	49810	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.177078962 CEST	49810	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:39.188971043 CEST	443	49809	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.189009905 CEST	443	49809	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.189033031 CEST	49809	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:39.189042091 CEST	443	49809	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.189053059 CEST	443	49809	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.189075947 CEST	49809	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:39.189093113 CEST	49809	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:39.192267895 CEST	443	49810	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.192336082 CEST	49810	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:39.192348957 CEST	443	49810	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.192363024 CEST	443	49810	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.192408085 CEST	49810	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:39.226466894 CEST	49809	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:39.226491928 CEST	443	49809	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.226864100 CEST	49810	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:39.226887941 CEST	443	49810	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.263839006 CEST	443	49805	44.209.29.87	192.168.2.6
May 8, 2024 01:18:39.263912916 CEST	443	49805	44.209.29.87	192.168.2.6
May 8, 2024 01:18:39.263973951 CEST	49805	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:39.264313936 CEST	49805	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:39.264331102 CEST	443	49805	44.209.29.87	192.168.2.6
May 8, 2024 01:18:39.292171955 CEST	443	49806	44.209.29.87	192.168.2.6
May 8, 2024 01:18:39.292248964 CEST	443	49806	44.209.29.87	192.168.2.6
May 8, 2024 01:18:39.292325020 CEST	49806	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:39.312644958 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:39.312680960 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.312829971 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:39.314033985 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:39.314054012 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.316776991 CEST	49806	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:39.316797018 CEST	443	49806	44.209.29.87	192.168.2.6
May 8, 2024 01:18:39.355747938 CEST	443	49808	44.209.29.87	192.168.2.6
May 8, 2024 01:18:39.355829000 CEST	443	49808	44.209.29.87	192.168.2.6
May 8, 2024 01:18:39.356093884 CEST	49808	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:39.608620882 CEST	49808	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:39.608648062 CEST	443	49808	44.209.29.87	192.168.2.6
May 8, 2024 01:18:39.646015882 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.647147894 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:39.647161007 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.647452116 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.648741007 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:39.648792028 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.649254084 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:39.696120024 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.783521891 CEST	49812	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:39.783576012 CEST	443	49812	99.86.38.11	192.168.2.6
May 8, 2024 01:18:39.783690929 CEST	49812	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:39.784498930 CEST	49812	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:39.784513950 CEST	443	49812	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.002794027 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.002818108 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.002831936 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.002913952 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.002932072 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.002978086 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.030200005 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.030220032 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.030277967 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.030284882 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.030431032 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.114865065 CEST	443	49812	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.153743982 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.153767109 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.153815031 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.153827906 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.153876066 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.157769918 CEST	49812	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.181162119 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.181200027 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.181252956 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.181257010 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.181307077 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.185704947 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.185899973 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.210988998 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.211009979 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.211071968 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.211076021 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.211118937 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.304635048 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.304656029 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.304775953 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.304785013 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.304847002 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.325615883 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.325638056 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.325720072 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.325726032 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.325771093 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.346618891 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.346636057 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.346709967 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.346714020 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.346754074 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.369267941 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.369286060 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.369345903 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.369350910 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.369395018 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.386466026 CEST	49812	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.386487007 CEST	443	49812	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.387018919 CEST	443	49812	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.387602091 CEST	49812	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.387658119 CEST	443	49812	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.387836933 CEST	49812	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.388134956 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.389816999 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.389851093 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.389875889 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.389879942 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.389929056 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.411025047 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.411041975 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.411118031 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.411122084 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.429294109 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.429317951 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.429374933 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.429379940 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.429404974 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.429415941 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.429456949 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.432107925 CEST	443	49812	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.439001083 CEST	49812	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.584996939 CEST	443	49812	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.585020065 CEST	443	49812	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.585027933 CEST	443	49812	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.585040092 CEST	443	49812	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.585047007 CEST	443	49812	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.585050106 CEST	443	49812	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.585079908 CEST	49812	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.585098028 CEST	443	49812	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.585129976 CEST	49812	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.585155964 CEST	49812	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.603051901 CEST	443	49812	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.603060007 CEST	443	49812	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.603085041 CEST	443	49812	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.603108883 CEST	49812	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.603120089 CEST	443	49812	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.603131056 CEST	443	49812	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.603157043 CEST	49812	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.603173971 CEST	49812	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.875842094 CEST	49811	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.875865936 CEST	443	49811	99.86.38.11	192.168.2.6
May 8, 2024 01:18:40.935269117 CEST	49812	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:40.935286999 CEST	443	49812	99.86.38.11	192.168.2.6
May 8, 2024 01:18:41.802762985 CEST	49814	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:41.802789927 CEST	443	49814	13.107.246.70	192.168.2.6
May 8, 2024 01:18:41.802855015 CEST	49814	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:41.803428888 CEST	49814	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:41.803442001 CEST	443	49814	13.107.246.70	192.168.2.6
May 8, 2024 01:18:41.935203075 CEST	49794	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:41.976119995 CEST	443	49794	13.107.246.70	192.168.2.6
May 8, 2024 01:18:42.109850883 CEST	443	49794	13.107.246.70	192.168.2.6
May 8, 2024 01:18:42.109945059 CEST	443	49794	13.107.246.70	192.168.2.6
May 8, 2024 01:18:42.110009909 CEST	49794	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:42.110652924 CEST	49794	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:42.110666990 CEST	443	49794	13.107.246.70	192.168.2.6
May 8, 2024 01:18:42.352900028 CEST	443	49814	13.107.246.70	192.168.2.6
May 8, 2024 01:18:42.382261992 CEST	49814	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:42.382282019 CEST	443	49814	13.107.246.70	192.168.2.6
May 8, 2024 01:18:42.382994890 CEST	443	49814	13.107.246.70	192.168.2.6
May 8, 2024 01:18:42.384742022 CEST	49814	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:42.384938955 CEST	443	49814	13.107.246.70	192.168.2.6
May 8, 2024 01:18:42.385987997 CEST	49814	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:42.432115078 CEST	443	49814	13.107.246.70	192.168.2.6
May 8, 2024 01:18:42.945045948 CEST	443	49814	13.107.246.70	192.168.2.6
May 8, 2024 01:18:42.945070028 CEST	443	49814	13.107.246.70	192.168.2.6
May 8, 2024 01:18:42.945081949 CEST	443	49814	13.107.246.70	192.168.2.6
May 8, 2024 01:18:42.945168018 CEST	49814	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:42.945187092 CEST	443	49814	13.107.246.70	192.168.2.6
May 8, 2024 01:18:42.945245981 CEST	49814	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:42.948256016 CEST	49814	443	192.168.2.6	13.107.246.70
May 8, 2024 01:18:42.948266983 CEST	443	49814	13.107.246.70	192.168.2.6
May 8, 2024 01:18:43.620312929 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:43.620404959 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:43.620501995 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:43.631392002 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:43.631429911 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:43.945698977 CEST	49816	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:43.945754051 CEST	443	49816	44.209.29.87	192.168.2.6
May 8, 2024 01:18:43.945883036 CEST	49816	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:43.946269035 CEST	49816	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:43.946280003 CEST	443	49816	44.209.29.87	192.168.2.6
May 8, 2024 01:18:43.961992025 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:43.962559938 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:43.962637901 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:43.963115931 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:43.963572025 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:43.963654995 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:43.963960886 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.004115105 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.015366077 CEST	49818	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:44.015384912 CEST	443	49818	44.209.29.87	192.168.2.6
May 8, 2024 01:18:44.015499115 CEST	49818	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:44.015908957 CEST	49818	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:44.015928030 CEST	443	49818	44.209.29.87	192.168.2.6
May 8, 2024 01:18:44.423707962 CEST	443	49816	44.209.29.87	192.168.2.6
May 8, 2024 01:18:44.425669909 CEST	49816	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:44.425683022 CEST	443	49816	44.209.29.87	192.168.2.6
May 8, 2024 01:18:44.426068068 CEST	443	49816	44.209.29.87	192.168.2.6
May 8, 2024 01:18:44.426667929 CEST	49816	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:44.426733971 CEST	443	49816	44.209.29.87	192.168.2.6
May 8, 2024 01:18:44.426851988 CEST	49816	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:44.468135118 CEST	443	49816	44.209.29.87	192.168.2.6
May 8, 2024 01:18:44.493443966 CEST	443	49818	44.209.29.87	192.168.2.6
May 8, 2024 01:18:44.575048923 CEST	49818	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:44.580775023 CEST	49818	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:44.580784082 CEST	443	49818	44.209.29.87	192.168.2.6
May 8, 2024 01:18:44.581393003 CEST	443	49818	44.209.29.87	192.168.2.6
May 8, 2024 01:18:44.584767103 CEST	49818	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:44.584878922 CEST	443	49818	44.209.29.87	192.168.2.6
May 8, 2024 01:18:44.585025072 CEST	49818	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:44.608182907 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.608203888 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.608218908 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.608294964 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.608326912 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.608371019 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.617171049 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.617250919 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.621726990 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.621795893 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.632110119 CEST	443	49818	44.209.29.87	192.168.2.6
May 8, 2024 01:18:44.649863958 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.649918079 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.655570984 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.655618906 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.660538912 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.660598993 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.665142059 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.665194035 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.748447895 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.748527050 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.748545885 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.750682116 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.750760078 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.750767946 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.762340069 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.762443066 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.762454033 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.762495995 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.767007113 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.767083883 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.768878937 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.796170950 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.796185017 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.796241045 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.796252012 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.825696945 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.825720072 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.825779915 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.825789928 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.825819016 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.853020906 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.853034019 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.853077888 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.853096962 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.853116035 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.895930052 CEST	443	49816	44.209.29.87	192.168.2.6
May 8, 2024 01:18:44.896009922 CEST	443	49816	44.209.29.87	192.168.2.6
May 8, 2024 01:18:44.896054029 CEST	49816	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:44.896930933 CEST	49816	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:44.896948099 CEST	443	49816	44.209.29.87	192.168.2.6
May 8, 2024 01:18:44.896958113 CEST	49816	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:44.896998882 CEST	49816	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:44.903019905 CEST	49820	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:44.903049946 CEST	443	49820	44.209.29.87	192.168.2.6
May 8, 2024 01:18:44.903105974 CEST	49820	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:44.903784037 CEST	49820	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:44.903800964 CEST	443	49820	44.209.29.87	192.168.2.6
May 8, 2024 01:18:44.925736904 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.925782919 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.925801992 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.925816059 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.925839901 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.950279951 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.950316906 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.950335979 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.950346947 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.950349092 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.950375080 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.950392008 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.966080904 CEST	443	49818	44.209.29.87	192.168.2.6
May 8, 2024 01:18:44.966203928 CEST	443	49818	44.209.29.87	192.168.2.6
May 8, 2024 01:18:44.966423035 CEST	49818	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:44.968348980 CEST	49818	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:44.968369007 CEST	443	49818	44.209.29.87	192.168.2.6
May 8, 2024 01:18:44.972951889 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.972999096 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.973010063 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.973026037 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.973026037 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.973053932 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.973093987 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.992235899 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.992283106 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.992294073 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.992307901 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.992312908 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:44.992321014 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:44.992372990 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:45.009913921 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:45.009922028 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:45.009957075 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:45.009995937 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:45.010003090 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:45.010054111 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:45.018071890 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:45.018138885 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:45.018142939 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:45.018189907 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:45.018516064 CEST	49815	443	192.168.2.6	99.86.38.13
May 8, 2024 01:18:45.018529892 CEST	443	49815	99.86.38.13	192.168.2.6
May 8, 2024 01:18:45.045130968 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:45.045162916 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.045319080 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:45.045964003 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:45.045979977 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.377075911 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.377264023 CEST	443	49820	44.209.29.87	192.168.2.6
May 8, 2024 01:18:45.377547026 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:45.377561092 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.377680063 CEST	49820	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:45.377695084 CEST	443	49820	44.209.29.87	192.168.2.6
May 8, 2024 01:18:45.377904892 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.378043890 CEST	443	49820	44.209.29.87	192.168.2.6
May 8, 2024 01:18:45.378716946 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:45.378777027 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.379586935 CEST	49820	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:45.379654884 CEST	443	49820	44.209.29.87	192.168.2.6
May 8, 2024 01:18:45.379769087 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:45.379965067 CEST	49820	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:45.420118093 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.420120955 CEST	443	49820	44.209.29.87	192.168.2.6
May 8, 2024 01:18:45.715116978 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.737935066 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.737951994 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.737998962 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:45.738019943 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.738049984 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:45.738089085 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:45.765141964 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.765157938 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.765234947 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:45.765248060 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.824214935 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:45.849375010 CEST	443	49820	44.209.29.87	192.168.2.6
May 8, 2024 01:18:45.849466085 CEST	443	49820	44.209.29.87	192.168.2.6
May 8, 2024 01:18:45.849526882 CEST	49820	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:45.888513088 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.888521910 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.888559103 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.888583899 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:45.888595104 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.888622999 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:45.915750027 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.915764093 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.915823936 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:45.915834904 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.945295095 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.945310116 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.945343971 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.945375919 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:45.945389032 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.945400953 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:45.967978001 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.968018055 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.968058109 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:45.968070030 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:45.968092918 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:45.968106985 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:46.040523052 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:46.040606022 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:46.062172890 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:46.062186956 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:46.062262058 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:46.062272072 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:46.076478004 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:46.076515913 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:46.076560020 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:46.076567888 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:46.076605082 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:46.094374895 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:46.094412088 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:46.094455004 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:46.094465971 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:46.094511986 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:46.113893032 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:46.113929033 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:46.113955021 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:46.113960981 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:46.113991976 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:46.114011049 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:46.131421089 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:46.131450891 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:46.131485939 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:46.131505013 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:46.131530046 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:46.131542921 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:46.146066904 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:46.146101952 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:46.146143913 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:46.146152973 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:46.146186113 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:46.146198988 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:46.161921024 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:46.161958933 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:46.161987066 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:18:46.162003040 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:46.162054062 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:46.182781935 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:46.197956085 CEST	49820	443	192.168.2.6	44.209.29.87
May 8, 2024 01:18:46.197969913 CEST	443	49820	44.209.29.87	192.168.2.6
May 8, 2024 01:18:46.208019018 CEST	49821	443	192.168.2.6	99.86.38.11
May 8, 2024 01:18:46.208043098 CEST	443	49821	99.86.38.11	192.168.2.6
May 8, 2024 01:19:00.265114069 CEST	49824	443	192.168.2.6	142.251.215.228
May 8, 2024 01:19:00.265161037 CEST	443	49824	142.251.215.228	192.168.2.6
May 8, 2024 01:19:00.265294075 CEST	49824	443	192.168.2.6	142.251.215.228
May 8, 2024 01:19:00.266375065 CEST	49824	443	192.168.2.6	142.251.215.228
May 8, 2024 01:19:00.266385078 CEST	443	49824	142.251.215.228	192.168.2.6
May 8, 2024 01:19:00.627479076 CEST	443	49824	142.251.215.228	192.168.2.6
May 8, 2024 01:19:00.632445097 CEST	49824	443	192.168.2.6	142.251.215.228
May 8, 2024 01:19:00.632472038 CEST	443	49824	142.251.215.228	192.168.2.6
May 8, 2024 01:19:00.632853985 CEST	443	49824	142.251.215.228	192.168.2.6
May 8, 2024 01:19:00.633655071 CEST	49824	443	192.168.2.6	142.251.215.228
May 8, 2024 01:19:00.633718014 CEST	443	49824	142.251.215.228	192.168.2.6
May 8, 2024 01:19:00.683450937 CEST	49824	443	192.168.2.6	142.251.215.228
May 8, 2024 01:19:10.627029896 CEST	443	49824	142.251.215.228	192.168.2.6
May 8, 2024 01:19:10.627104998 CEST	443	49824	142.251.215.228	192.168.2.6
May 8, 2024 01:19:10.627166986 CEST	49824	443	192.168.2.6	142.251.215.228
May 8, 2024 01:19:12.346839905 CEST	49824	443	192.168.2.6	142.251.215.228
May 8, 2024 01:19:12.346875906 CEST	443	49824	142.251.215.228	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 8, 2024 01:17:58.150239944 CEST	53	64072	1.1.1.1	192.168.2.6
May 8, 2024 01:17:58.276146889 CEST	53	51867	1.1.1.1	192.168.2.6
May 8, 2024 01:17:59.185523033 CEST	53	59120	1.1.1.1	192.168.2.6
May 8, 2024 01:18:00.029387951 CEST	54369	53	192.168.2.6	1.1.1.1
May 8, 2024 01:18:00.029546976 CEST	56685	53	192.168.2.6	1.1.1.1
May 8, 2024 01:18:00.198736906 CEST	53	54369	1.1.1.1	192.168.2.6
May 8, 2024 01:18:00.200160027 CEST	53	56685	1.1.1.1	192.168.2.6
May 8, 2024 01:18:00.229861975 CEST	49873	53	192.168.2.6	1.1.1.1
May 8, 2024 01:18:00.230043888 CEST	56311	53	192.168.2.6	1.1.1.1
May 8, 2024 01:18:00.232795954 CEST	61093	53	192.168.2.6	1.1.1.1
May 8, 2024 01:18:00.232995987 CEST	62175	53	192.168.2.6	1.1.1.1
May 8, 2024 01:18:00.395113945 CEST	53	56311	1.1.1.1	192.168.2.6
May 8, 2024 01:18:00.395864010 CEST	53	49873	1.1.1.1	192.168.2.6
May 8, 2024 01:18:00.401321888 CEST	53	61093	1.1.1.1	192.168.2.6
May 8, 2024 01:18:00.442466974 CEST	53	62175	1.1.1.1	192.168.2.6
May 8, 2024 01:18:01.320492029 CEST	51643	53	192.168.2.6	1.1.1.1
May 8, 2024 01:18:01.322041035 CEST	61144	53	192.168.2.6	1.1.1.1
May 8, 2024 01:18:03.630997896 CEST	53407	53	192.168.2.6	1.1.1.1
May 8, 2024 01:18:03.631558895 CEST	54623	53	192.168.2.6	1.1.1.1
May 8, 2024 01:18:03.797894001 CEST	53	54623	1.1.1.1	192.168.2.6
May 8, 2024 01:18:03.802182913 CEST	53	53407	1.1.1.1	192.168.2.6
May 8, 2024 01:18:12.397567034 CEST	62624	53	192.168.2.6	1.1.1.1
May 8, 2024 01:18:12.398030043 CEST	63171	53	192.168.2.6	1.1.1.1
May 8, 2024 01:18:13.930737972 CEST	57271	53	192.168.2.6	1.1.1.1
May 8, 2024 01:18:13.931341887 CEST	61920	53	192.168.2.6	1.1.1.1
May 8, 2024 01:18:14.225622892 CEST	53	61920	1.1.1.1	192.168.2.6
May 8, 2024 01:18:14.361876011 CEST	53	57271	1.1.1.1	192.168.2.6
May 8, 2024 01:18:15.691267014 CEST	55405	53	192.168.2.6	1.1.1.1
May 8, 2024 01:18:15.691643000 CEST	51406	53	192.168.2.6	1.1.1.1
May 8, 2024 01:18:15.743866920 CEST	53	59774	1.1.1.1	192.168.2.6
May 8, 2024 01:18:15.960874081 CEST	53	51406	1.1.1.1	192.168.2.6
May 8, 2024 01:18:15.993736029 CEST	53	55405	1.1.1.1	192.168.2.6
May 8, 2024 01:18:16.268846989 CEST	53	58363	1.1.1.1	192.168.2.6
May 8, 2024 01:18:17.182894945 CEST	58209	53	192.168.2.6	1.1.1.1
May 8, 2024 01:18:17.183825970 CEST	57788	53	192.168.2.6	1.1.1.1
May 8, 2024 01:18:17.306945086 CEST	53	51423	1.1.1.1	192.168.2.6
May 8, 2024 01:18:18.930165052 CEST	50866	53	192.168.2.6	1.1.1.1
May 8, 2024 01:18:18.930355072 CEST	50969	53	192.168.2.6	1.1.1.1
May 8, 2024 01:18:19.091934919 CEST	53	60301	1.1.1.1	192.168.2.6
May 8, 2024 01:18:19.093053102 CEST	53	50866	1.1.1.1	192.168.2.6
May 8, 2024 01:18:19.093882084 CEST	53	50969	1.1.1.1	192.168.2.6
May 8, 2024 01:18:20.993068933 CEST	53	54592	1.1.1.1	192.168.2.6
May 8, 2024 01:18:23.878735065 CEST	60481	53	192.168.2.6	1.1.1.1
May 8, 2024 01:18:23.879347086 CEST	62886	53	192.168.2.6	1.1.1.1
May 8, 2024 01:18:35.133455038 CEST	53	61866	1.1.1.1	192.168.2.6
May 8, 2024 01:18:57.752414942 CEST	53	56082	1.1.1.1	192.168.2.6
May 8, 2024 01:18:58.252507925 CEST	53	55553	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 8, 2024 01:18:00.029387951 CEST	192.168.2.6	1.1.1.1	0x13d4	Standard query (0)	www.factaclassactionsettlement.com	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:00.029546976 CEST	192.168.2.6	1.1.1.1	0x5c06	Standard query (0)	www.factaclassactionsettlement.com	65	IN (0x0001)	false
May 8, 2024 01:18:00.229861975 CEST	192.168.2.6	1.1.1.1	0x8ce2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:00.230043888 CEST	192.168.2.6	1.1.1.1	0xb471	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 8, 2024 01:18:00.232795954 CEST	192.168.2.6	1.1.1.1	0x2156	Standard query (0)	www.factaclassactionsettlement.com	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:00.232995987 CEST	192.168.2.6	1.1.1.1	0xac	Standard query (0)	www.factaclassactionsettlement.com	65	IN (0x0001)	false
May 8, 2024 01:18:01.320492029 CEST	192.168.2.6	1.1.1.1	0xb3e2	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:01.322041035 CEST	192.168.2.6	1.1.1.1	0x4c47	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
May 8, 2024 01:18:03.630997896 CEST	192.168.2.6	1.1.1.1	0x3d6f	Standard query (0)	www.factaclassactionsettlement.com	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:03.631558895 CEST	192.168.2.6	1.1.1.1	0xc07d	Standard query (0)	www.factaclassactionsettlement.com	65	IN (0x0001)	false
May 8, 2024 01:18:12.397567034 CEST	192.168.2.6	1.1.1.1	0x3239	Standard query (0)	www.gilardi.com	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:12.398030043 CEST	192.168.2.6	1.1.1.1	0x2e74	Standard query (0)	www.gilardi.com	65	IN (0x0001)	false
May 8, 2024 01:18:13.930737972 CEST	192.168.2.6	1.1.1.1	0xe835	Standard query (0)	content-images.computershare.com	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:13.931341887 CEST	192.168.2.6	1.1.1.1	0x3383	Standard query (0)	content-images.computershare.com	65	IN (0x0001)	false
May 8, 2024 01:18:15.691267014 CEST	192.168.2.6	1.1.1.1	0x6e00	Standard query (0)	content-images.computershare.com	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:15.691643000 CEST	192.168.2.6	1.1.1.1	0x315f	Standard query (0)	content-images.computershare.com	65	IN (0x0001)	false
May 8, 2024 01:18:17.182894945 CEST	192.168.2.6	1.1.1.1	0xd565	Standard query (0)	c.evidon.com	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:17.183825970 CEST	192.168.2.6	1.1.1.1	0x3eb	Standard query (0)	c.evidon.com	65	IN (0x0001)	false
May 8, 2024 01:18:18.930165052 CEST	192.168.2.6	1.1.1.1	0x4af7	Standard query (0)	l.evidon.com	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:18.930355072 CEST	192.168.2.6	1.1.1.1	0xb91b	Standard query (0)	l.evidon.com	65	IN (0x0001)	false
May 8, 2024 01:18:23.878735065 CEST	192.168.2.6	1.1.1.1	0xfa49	Standard query (0)	www.gilardi.com	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:23.879347086 CEST	192.168.2.6	1.1.1.1	0xdae0	Standard query (0)	www.gilardi.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 8, 2024 01:18:00.198736906 CEST	1.1.1.1	192.168.2.6	0x13d4	No error (0)	www.factaclassactionsettlement.com		172.67.213.176	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:00.198736906 CEST	1.1.1.1	192.168.2.6	0x13d4	No error (0)	www.factaclassactionsettlement.com		104.21.93.178	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:00.200160027 CEST	1.1.1.1	192.168.2.6	0x5c06	No error (0)	www.factaclassactionsettlement.com			65	IN (0x0001)	false
May 8, 2024 01:18:00.395113945 CEST	1.1.1.1	192.168.2.6	0xb471	No error (0)	www.google.com			65	IN (0x0001)	false
May 8, 2024 01:18:00.395864010 CEST	1.1.1.1	192.168.2.6	0x8ce2	No error (0)	www.google.com		142.251.215.228	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:00.401321888 CEST	1.1.1.1	192.168.2.6	0x2156	No error (0)	www.factaclassactionsettlement.com		172.67.213.176	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:00.401321888 CEST	1.1.1.1	192.168.2.6	0x2156	No error (0)	www.factaclassactionsettlement.com		104.21.93.178	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:00.442466974 CEST	1.1.1.1	192.168.2.6	0xac	No error (0)	www.factaclassactionsettlement.com			65	IN (0x0001)	false
May 8, 2024 01:18:01.483894110 CEST	1.1.1.1	192.168.2.6	0xb3e2	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:01.485721111 CEST	1.1.1.1	192.168.2.6	0x4c47	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:03.797894001 CEST	1.1.1.1	192.168.2.6	0xc07d	No error (0)	www.factaclassactionsettlement.com			65	IN (0x0001)	false
May 8, 2024 01:18:03.802182913 CEST	1.1.1.1	192.168.2.6	0x3d6f	No error (0)	www.factaclassactionsettlement.com		104.21.93.178	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:03.802182913 CEST	1.1.1.1	192.168.2.6	0x3d6f	No error (0)	www.factaclassactionsettlement.com		172.67.213.176	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:12.621148109 CEST	1.1.1.1	192.168.2.6	0x2e74	No error (0)	www.gilardi.com	cpucorpsites-p-fd.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:12.621148109 CEST	1.1.1.1	192.168.2.6	0x2e74	No error (0)	cpucorpsites-p-fd.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:12.673958063 CEST	1.1.1.1	192.168.2.6	0x3239	No error (0)	www.gilardi.com	cpucorpsites-p-fd.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:12.673958063 CEST	1.1.1.1	192.168.2.6	0x3239	No error (0)	cpucorpsites-p-fd.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:12.673958063 CEST	1.1.1.1	192.168.2.6	0x3239	No error (0)	shed.dual-low.part-0042.t-0009.t-msedge.net	part-0042.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:12.673958063 CEST	1.1.1.1	192.168.2.6	0x3239	No error (0)	part-0042.t-0009.t-msedge.net		13.107.246.70	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:12.673958063 CEST	1.1.1.1	192.168.2.6	0x3239	No error (0)	part-0042.t-0009.t-msedge.net		13.107.213.70	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:13.006161928 CEST	1.1.1.1	192.168.2.6	0x5732	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:13.006161928 CEST	1.1.1.1	192.168.2.6	0x5732	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:13.975318909 CEST	1.1.1.1	192.168.2.6	0x6427	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:13.975318909 CEST	1.1.1.1	192.168.2.6	0x6427	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:14.225622892 CEST	1.1.1.1	192.168.2.6	0x3383	No error (0)	content-images.computershare.com	6nurfseglnq0xf8wfrn7wk.images.enterprise.contentful.com		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:14.225622892 CEST	1.1.1.1	192.168.2.6	0x3383	No error (0)	6nurfseglnq0xf8wfrn7wk.images.enterprise.contentful.com	d2bsfniek8gojs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:14.361876011 CEST	1.1.1.1	192.168.2.6	0xe835	No error (0)	content-images.computershare.com	6nurfseglnq0xf8wfrn7wk.images.enterprise.contentful.com		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:14.361876011 CEST	1.1.1.1	192.168.2.6	0xe835	No error (0)	6nurfseglnq0xf8wfrn7wk.images.enterprise.contentful.com	d2bsfniek8gojs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:14.361876011 CEST	1.1.1.1	192.168.2.6	0xe835	No error (0)	d2bsfniek8gojs.cloudfront.net		99.86.38.13	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:14.361876011 CEST	1.1.1.1	192.168.2.6	0xe835	No error (0)	d2bsfniek8gojs.cloudfront.net		99.86.38.11	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:14.361876011 CEST	1.1.1.1	192.168.2.6	0xe835	No error (0)	d2bsfniek8gojs.cloudfront.net		99.86.38.95	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:14.361876011 CEST	1.1.1.1	192.168.2.6	0xe835	No error (0)	d2bsfniek8gojs.cloudfront.net		99.86.38.78	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:15.960874081 CEST	1.1.1.1	192.168.2.6	0x315f	No error (0)	content-images.computershare.com	6nurfseglnq0xf8wfrn7wk.images.enterprise.contentful.com		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:15.960874081 CEST	1.1.1.1	192.168.2.6	0x315f	No error (0)	6nurfseglnq0xf8wfrn7wk.images.enterprise.contentful.com	d2bsfniek8gojs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:15.993736029 CEST	1.1.1.1	192.168.2.6	0x6e00	No error (0)	content-images.computershare.com	6nurfseglnq0xf8wfrn7wk.images.enterprise.contentful.com		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:15.993736029 CEST	1.1.1.1	192.168.2.6	0x6e00	No error (0)	6nurfseglnq0xf8wfrn7wk.images.enterprise.contentful.com	d2bsfniek8gojs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:15.993736029 CEST	1.1.1.1	192.168.2.6	0x6e00	No error (0)	d2bsfniek8gojs.cloudfront.net		99.86.38.11	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:15.993736029 CEST	1.1.1.1	192.168.2.6	0x6e00	No error (0)	d2bsfniek8gojs.cloudfront.net		99.86.38.13	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:15.993736029 CEST	1.1.1.1	192.168.2.6	0x6e00	No error (0)	d2bsfniek8gojs.cloudfront.net		99.86.38.95	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:15.993736029 CEST	1.1.1.1	192.168.2.6	0x6e00	No error (0)	d2bsfniek8gojs.cloudfront.net		99.86.38.78	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:17.346034050 CEST	1.1.1.1	192.168.2.6	0xd565	No error (0)	c.evidon.com	newwildcard.evidon.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:17.346863985 CEST	1.1.1.1	192.168.2.6	0x3eb	No error (0)	c.evidon.com	newwildcard.evidon.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:19.093053102 CEST	1.1.1.1	192.168.2.6	0x4af7	No error (0)	l.evidon.com	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:19.093053102 CEST	1.1.1.1	192.168.2.6	0x4af7	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		44.209.29.87	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:19.093053102 CEST	1.1.1.1	192.168.2.6	0x4af7	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		34.236.183.224	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:19.093053102 CEST	1.1.1.1	192.168.2.6	0x4af7	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		52.200.151.143	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:19.093882084 CEST	1.1.1.1	192.168.2.6	0xb91b	No error (0)	l.evidon.com	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:24.081762075 CEST	1.1.1.1	192.168.2.6	0xdae0	No error (0)	www.gilardi.com	cpucorpsites-p-fd.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:24.081762075 CEST	1.1.1.1	192.168.2.6	0xdae0	No error (0)	cpucorpsites-p-fd.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:24.085546017 CEST	1.1.1.1	192.168.2.6	0xfa49	No error (0)	www.gilardi.com	cpucorpsites-p-fd.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:24.085546017 CEST	1.1.1.1	192.168.2.6	0xfa49	No error (0)	cpucorpsites-p-fd.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:24.085546017 CEST	1.1.1.1	192.168.2.6	0xfa49	No error (0)	shed.dual-low.part-0042.t-0009.t-msedge.net	part-0042.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:24.085546017 CEST	1.1.1.1	192.168.2.6	0xfa49	No error (0)	part-0042.t-0009.t-msedge.net		13.107.246.70	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:24.085546017 CEST	1.1.1.1	192.168.2.6	0xfa49	No error (0)	part-0042.t-0009.t-msedge.net		13.107.213.70	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:26.975169897 CEST	1.1.1.1	192.168.2.6	0x3b95	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:26.975169897 CEST	1.1.1.1	192.168.2.6	0x3b95	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
May 8, 2024 01:18:50.352724075 CEST	1.1.1.1	192.168.2.6	0x5ced	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:18:50.352724075 CEST	1.1.1.1	192.168.2.6	0x5ced	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
May 8, 2024 01:19:11.058734894 CEST	1.1.1.1	192.168.2.6	0xb06	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 01:19:11.058734894 CEST	1.1.1.1	192.168.2.6	0xb06	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.factaclassactionsettlement.com

fs.microsoft.com

www.gilardi.com

https:

content-images.computershare.com

l.evidon.com

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
May 8, 2024 01:18:12.780180931 CEST	173.222.162.64	443	192.168.2.6	49698	CN=r.bing.com, O=Microsoft Corporation, L=Redmond, ST=WA, C=US CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US	CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Oct 18 22:32:40 CEST 2023 Wed Aug 12 02:00:00 CEST 2020	Fri Jun 28 01:59:59 CEST 2024 Fri Jun 28 01:59:59 CEST 2024	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-5-10-11-13-35-16-23-65281,29-23-24,0	28a2c9bd18a11de089ef85a160da29e4
May 8, 2024 01:18:12.780180931 CEST	173.222.162.64	443	192.168.2.6	49698	CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US	CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Aug 12 02:00:00 CEST 2020	Fri Jun 28 01:59:59 CEST 2024		28a2c9bd18a11de089ef85a160da29e4

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49707	172.67.213.176	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:00 UTC	677	OUT	GET / HTTP/1.1 Host: www.factaclassactionsettlement.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:01 UTC	988	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 23:18:01 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: ApplicationGatewayAffinity=f2b76c8d084793a79fbb09e62995d901; Path=/ Cache-Control: private X-Umbraco-Version: 4.7 X-AspNet-Version: 4.0.30319 X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer X-Permitted-Cross-Domain-Policies: none Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BNTIQ38pGhLC%2B1%2FHaSApwmOqVselsnY08j7fXxug%2BDttaoZQ343ds9Xegui4PcB70lvKdCpw9RV%2BwGoynGigZZ4WBLhmDmVgDwR%2FLJD3pD3Kbj6vAXF3AtsAxH45V7CcBynbfuXPjadYe44V0JN5jl4yYYpp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8804ed40b99827b3-SEA alt-svc: h3=":443"; ma=86400
2024-05-07 23:18:01 UTC	381	IN	Data Raw: 65 65 34 0d 0a 0a 20 20 20 20 20 20 20 20 0a 20 20 0a 20 20 0a 20 20 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 37 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 20 20 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 38 22 20 78 Data Ascii: ee4 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">...[if IE 7]> <html class="ie7" xmlns="http://www.w3.org/1999/xhtml"> <![endif]--> ...[if IE 8]> <html class="ie8" x
2024-05-07 23:18:01 UTC	1369	IN	Data Raw: 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 21 49 45 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 69 74 65 20 43 6f 6d 69 6e 67 20 53 6f 6f 6e 21 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 22 20 2f 3e 0a 20 20 3c 21 2d 2d 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 72 65 76 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 36 35 2e 37 34 2e Data Ascii: <![endif]-->...[if !IE]>...> <html xmlns="http://www.w3.org/1999/xhtml"> ...<![endif]--><head> <title>Site Coming Soon!</title> <meta name="keywords" content="" /> ...<link rel="stylesheet" rev="stylesheet" href="http://65.74.
2024-05-07 23:18:01 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 74 64 20 63 6c 61 73 73 3d 22 73 74 61 74 69 63 62 6f 64 79 5f 63 65 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 48 65 61 64 69 6e 67 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 61 62 6c 65 20 63 6c 61 73 73 3d 22 6d 61 73 74 68 65 61 64 5f 74 61 62 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 64 20 63 6c 61 73 73 3d 22 6d 61 73 74 68 65 61 64 5f 63 65 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 69 74 65 20 43 6f 6d 69 6e 67 20 53 6f 6f 6e 21 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <td class="staticbody_cel"> ... Heading --> <table class="masthead_table"> <tr> <td class="masthead_cel"> Site Coming Soon!
2024-05-07 23:18:01 UTC	700	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6b 63 63 61 7a 20 63 65 6e 74 65 72 74 65 78 74 22 3e 2d 2a 2d 3c 2f 73 70 61 6e 3e 2d 2d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 62 6c 6f 63 6b 71 75 6f 74 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 74 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 74 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 74 61 62 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 Data Ascii: ...<span class="kccaz centertext">-*-</span>--> </div> </blockquote> </td> </tr> </table> <!
2024-05-07 23:18:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49708	172.67.213.176	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:01 UTC	610	OUT	GET /css/TopNavLightBlueTheme.css HTTP/1.1 Host: www.factaclassactionsettlement.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ApplicationGatewayAffinity=f2b76c8d084793a79fbb09e62995d901
2024-05-07 23:18:02 UTC	925	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 23:18:01 GMT Content-Type: text/css Content-Length: 25366 Connection: close Last-Modified: Wed, 17 Jan 2024 22:57:42 GMT ETag: "1c69c7939849da1:0" X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer X-Permitted-Cross-Domain-Policies: none Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B7k6zvaDNqH16jOe9W%2BRGxU9TWo8ihvdBnlbPyLUPXbEiwuAd2PVOVMacGsWh50UFoJy6caYTRDkKwohBC3Qgns0K9NA2ZsKbsE0T%2FqEYsJUhdhumJhQUohn2YoZfDCohsDi9H95yIm3um3qZI94zyOZTylR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8804ed461878090f-SEA alt-svc: h3=":443"; ma=86400
2024-05-07 23:18:02 UTC	444	IN	Data Raw: 2f 2a 20 53 6f 6d 65 20 73 69 6d 70 6c 65 20 43 53 53 20 6b 6c 75 64 67 65 73 20 74 6f 20 67 65 74 20 74 68 65 20 76 61 72 69 6f 75 73 20 62 72 6f 77 73 65 72 73 20 74 6f 20 62 65 68 61 76 65 20 2a 2f 20 0a 0a 0a 68 74 6d 6c 0a 7b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 73 63 72 6f 6c 6c 3b 0a 7d 0a 0a 2f 2a 20 65 78 74 72 61 20 6e 61 76 20 62 75 74 74 6f 6e 20 73 74 79 6c 65 73 20 20 2a 2f 0a 0a 2e 74 6f 70 6d 65 6e 75 5f 6c 69 73 74 20 74 72 20 74 64 2e 62 75 74 74 20 61 3a 6c 69 6e 6b 2c 20 2e 74 6f 70 6d 65 6e 75 5f 6c 69 73 74 20 74 72 20 74 64 2e 62 75 74 74 20 61 3a 76 69 73 69 74 65 64 20 7b 0a 20 20 63 6f 6c 6f 72 3a 23 66 66 66 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 31 32 66 38 32 3b 0a 20 20 70 61 64 Data Ascii: /* Some simple CSS kludges to get the various browsers to behave / html{ overflow-y: scroll;}/ extra nav button styles */.topmenu_list tr td.butt a:link, .topmenu_list tr td.butt a:visited { color:#fff; background-color: #212f82; pad
2024-05-07 23:18:02 UTC	1369	IN	Data Raw: 61 72 67 69 6e 3a 20 30 3b 20 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 30 70 78 3b 20 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 0a 7d 0a 0a 20 20 20 20 0a 69 6e 70 75 74 2c 20 73 65 6c 65 63 74 2c 20 74 65 78 74 61 72 65 61 20 7b 20 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 20 0a 7d 0a 0a 66 6f 72 6d 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 2f 2a 20 54 68 65 20 6d 61 69 6e 20 62 6f 64 79 2c 20 63 65 6e 74 65 72 65 64 20 66 6f 72 20 38 30 30 20 77 69 64 74 68 20 Data Ascii: argin: 0; padding-top: 10px; font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 14px;} input, select, textarea { font-size: 100% }form { padding: 0; margin: 0;}/* The main body, centered for 800 width
2024-05-07 23:18:02 UTC	1369	IN	Data Raw: 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 7d 0a 0a 2e 74 6f 70 6d 65 6e 75 5f 6c 69 73 74 20 74 72 20 74 64 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 20 30 70 78 20 31 31 70 78 20 30 70 78 3b 20 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 2e 74 6f 70 6d 65 6e 75 5f 6c 69 73 74 20 74 72 20 74 64 20 61 20 7b 20 20 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 20 0a 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 73 6f 6c 69 64 20 62 6c 61 63 6b 20 31 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 20 39 70 78 20 30 Data Ascii: font-size: 14px;}.topmenu_list tr td { padding: 0px 0px 11px 0px; margin: 0;}.topmenu_list tr td a { font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; white-space: nowrap; border-right: solid black 1px; padding: 0px 9px 0
2024-05-07 23:18:02 UTC	1369	IN	Data Raw: 74 61 67 2e 20 20 41 70 70 6c 79 20 74 68 65 20 65 76 65 6e 5f 73 65 63 74 69 6f 6e 20 73 74 79 6c 65 20 74 6f 20 65 76 65 72 79 20 6f 74 68 65 72 20 2e 63 6f 6e 74 65 6e 74 5f 73 65 63 74 69 6f 6e 20 74 61 67 20 74 6f 20 67 65 74 20 74 68 65 20 61 6c 74 65 72 6e 61 74 69 6e 67 20 62 61 63 6b 67 72 6f 75 6e 64 20 63 6f 6c 6f 72 20 2a 2f 20 20 0a 0a 2e 63 6f 6e 74 65 6e 74 5f 73 65 63 74 69 6f 6e 20 0a 7b 0a 0a 7d 0a 0a 2e 65 76 65 6e 5f 73 65 63 74 69 6f 6e 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 77 68 69 74 65 20 21 20 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 0a 2f 2a 20 48 65 61 64 65 72 20 74 61 67 20 73 74 79 6c 65 73 20 77 69 74 68 69 6e 20 63 6f 6e 74 65 6e 74 5f 73 65 63 74 69 6f 6e 27 73 20 2a 2f 0a 2f 2a 20 50 6c 61 Data Ascii: tag. Apply the even_section style to every other .content_section tag to get the alternating background color / .content_section {}.even_section { background-color: white ! important;}/ Header tag styles within content_section's // Pla
2024-05-07 23:18:02 UTC	1369	IN	Data Raw: 72 6c 28 20 22 69 6d 61 67 65 73 2f 64 69 76 69 64 65 72 2e 67 69 66 22 20 29 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 62 6f 74 74 6f 6d 20 6c 65 66 74 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 35 70 78 3b 0a 7d 0a 20 20 20 20 0a 20 20 20 20 0a 2f 2a 20 4f 74 68 65 72 20 73 65 63 74 69 6f 6e 20 74 79 70 65 73 20 2a 2f 0a 0a 2e 66 6f 6f 74 65 72 Data Ascii: rl( "images/divider.gif" ); background-position: bottom left; background-repeat: no-repeat; padding: 0; margin-left: auto; margin-right: auto; margin-top: 0px; margin-bottom: 25px;} /* Other section types */.footer
2024-05-07 23:18:02 UTC	1369	IN	Data Raw: 3b 0a 7d 0a 0a 74 61 62 6c 65 2e 74 61 62 6c 65 5f 6c 65 67 61 6c 52 69 67 68 74 73 20 74 72 2e 65 76 65 6e 5f 72 6f 77 20 74 68 2c 20 2e 74 61 62 6c 65 5f 6c 65 67 61 6c 52 69 67 68 74 73 20 74 72 2e 65 76 65 6e 5f 72 6f 77 20 74 64 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 77 68 69 74 65 20 21 20 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 74 61 62 6c 65 5f 64 6f 63 73 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 63 65 63 65 63 65 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 63 65 65 36 66 30 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 20 63 6f 6c 6c 61 70 73 65 3b 0a 20 20 20 20 65 6d 70 74 79 2d 63 65 6c 6c 73 3a 20 73 68 6f 77 3b 0a Data Ascii: ;}table.table_legalRights tr.even_row th, .table_legalRights tr.even_row td { background-color: white ! important;}.table_docs { border: solid 1px #cecece; background-color: #cee6f0; border-collapse: collapse; empty-cells: show;
2024-05-07 23:18:02 UTC	1369	IN	Data Raw: 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 30 70 78 20 35 70 78 20 31 30 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 63 65 63 65 63 65 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 20 21 20 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 74 61 62 6c 65 5f 6b 65 79 44 61 74 65 73 20 74 72 2e 65 76 65 6e 5f 72 6f 77 20 74 68 0a 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 77 68 69 74 65 20 21 20 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 74 61 62 6c 65 5f 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 73 65 63 75 72 69 74 69 65 73 5f 69 6e 6e 65 72 20 74 64 2c 20 2e 74 61 62 6c Data Ascii: vetica, Arial, sans-serif; padding: 5px 10px 5px 10px; border: solid 1px #cecece; text-align: left ! important;}.table_keyDates tr.even_row th{ background-color: white ! important;}.table_confirmation_securities_inner td, .tabl
2024-05-07 23:18:02 UTC	1369	IN	Data Raw: 70 78 3b 0a 7d 0a 2e 66 69 65 6c 64 7a 69 70 20 23 5a 69 70 0a 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 35 30 70 78 3b 0a 7d 0a 0a 66 69 65 6c 64 73 65 74 20 0a 7b 0a 20 20 20 20 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 32 70 78 20 23 62 37 64 64 66 32 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 32 30 70 78 20 32 30 70 78 20 31 30 70 78 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 45 46 46 46 46 3b 0a 7d 0a 0a 66 69 65 6c 64 73 65 74 20 66 69 65 6c 64 73 65 74 0a 7b 0a 20 20 20 20 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 32 70 78 20 23 62 34 65 31 61 31 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 32 30 70 78 20 32 30 70 78 20 31 30 70 78 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 Data Ascii: px;}.fieldzip #Zip{ width: 50px;}fieldset { border:solid 2px #b7ddf2; padding: 5px 20px 20px 10px; background-color: #EEFFFF;}fieldset fieldset{ border:solid 2px #b4e1a1; padding: 5px 20px 20px 10px; background-color
2024-05-07 23:18:02 UTC	1369	IN	Data Raw: 62 6f 6c 64 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 70 78 20 32 70 78 20 32 70 78 20 34 70 78 3b 0a 7d 0a 0a 2e 44 61 74 65 45 6e 74 72 79 48 69 6c 69 67 68 74 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 64 39 65 66 66 37 3b 0a 7d 0a 0a 2e 44 61 74 65 45 6e 74 72 79 48 69 6c 69 67 68 74 20 6c 61 62 65 6c 20 7b 0a 20 20 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 36 70 78 3b 0a 7d 0a 0a 2e 44 61 74 65 45 6e 74 72 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 0a 7d 0a 0a 2e 44 61 74 65 45 6e 74 72 79 20 6c 61 62 65 6c 20 7b 0a 20 20 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 20 Data Ascii: bold; padding: 2px 2px 2px 4px;}.DateEntryHilight { background-color: #d9eff7;}.DateEntryHilight label { visibility: visible; width: 16px;}.DateEntry { background-color: #FFFFFF;}.DateEntry label { visibility: hidden;
2024-05-07 23:18:02 UTC	1369	IN	Data Raw: 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 34 44 39 30 46 45 2c 23 34 37 38 37 45 44 29 3b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 6d 73 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 34 44 39 30 46 45 2c 23 34 37 38 37 45 44 29 3b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 34 44 39 30 46 45 2c 23 34 37 38 37 45 44 29 3b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 34 44 39 30 46 45 2c 23 34 37 38 37 45 44 29 3b 0a 7d 0a 0a 2e 67 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 36 46 36 46 36 3b 0a Data Ascii: gradient(top,#4D90FE,#4787ED);background-image: -ms-linear-gradient(top,#4D90FE,#4787ED);background-image: -o-linear-gradient(top,#4D90FE,#4787ED);background-image: linear-gradient(top,#4D90FE,#4787ED);}.g-button:active {background-color: #F6F6F6;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49713	172.67.213.176	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:03 UTC	639	OUT	GET /favicon.ico HTTP/1.1 Host: www.factaclassactionsettlement.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ApplicationGatewayAffinity=f2b76c8d084793a79fbb09e62995d901
2024-05-07 23:18:03 UTC	932	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 23:18:03 GMT Content-Type: image/x-icon Content-Length: 22878 Connection: close Last-Modified: Wed, 17 Jan 2024 22:54:01 GMT ETag: "78effaf9849da1:0" X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer X-Permitted-Cross-Domain-Policies: none Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1p4cAh0O7%2FS0qIAmO8T1N2X%2FbxHaWsaXowdrsTFRx6O5FPqzGJQX2UaM25fnNZHp5ErX5N2VQ8ZykI6GrcC1Ohj%2FyZmfin7rx5TqOuQV96oyqR1AZSsOZqbJwmNB%2BcISGcJGHherdVQ4Gx3a1kY6wA995USK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8804ed4f382b08df-SEA alt-svc: h3=":443"; ma=86400
2024-05-07 23:18:03 UTC	437	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 03 e6 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1c 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 8e 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 32 20 57 69 6e 64 6f 77 73 00 32 30 31 32 3a 31 30 3a 32 32 20 31 36 3a 30 33 3a 35 37 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 10 a0 03 00 04 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 Data Ascii: JFIFHHExifMM*bj(1r2i''Adobe Photoshop CS2 Windows2012:10:22 16:03:57
2024-05-07 23:18:03 UTC	1369	IN	Data Raw: 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 10 00 10 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 01 ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 04 02 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 Data Ascii: "?3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6Ueu
2024-05-07 23:18:03 UTC	1369	IN	Data Raw: 00 00 00 07 73 6c 69 63 65 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 07 67 72 6f 75 70 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 06 6f 72 69 67 69 6e 65 6e 75 6d 00 00 00 0c 45 53 6c 69 63 65 4f 72 69 67 69 6e 00 00 00 0d 61 75 74 6f 47 65 6e 65 72 61 74 65 64 00 00 00 00 54 79 70 65 65 6e 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 00 10 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 00 10 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d Data Ascii: sliceIDlonggroupIDlongoriginenumESliceOriginautoGeneratedTypeenumESliceTypeImg boundsObjcRct1Top longLeftlongBtomlongRghtlongurlTEXTnullTEXTM
2024-05-07 23:18:03 UTC	1369	IN	Data Raw: 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 13 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 43 00 53 00 32 00 00 00 01 00 38 42 49 4d 0f a0 00 00 00 00 00 f8 6d 61 6e 69 49 52 46 52 00 00 00 ec 38 42 49 4d 41 6e 44 73 00 00 00 cc 00 00 00 10 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 00 00 00 03 00 00 00 00 41 46 53 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 46 72 49 6e 56 6c 4c 73 00 00 00 01 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 00 00 00 01 00 00 00 00 46 72 49 44 6c 6f 6e 67 38 18 bd cb 00 00 00 00 46 53 74 73 56 6c 4c 73 00 00 00 01 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 00 00 00 04 00 00 00 00 46 73 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 00 41 46 72 6d 6c 6f Data Ascii: hotoshopAdobe Photoshop CS28BIMmaniIRFR8BIMAnDsnullAFStlongFrInVlLsObjcnullFrIDlong8FStsVlLsObjcnullFsIDlongAFrmlo
2024-05-07 23:18:03 UTC	1369	IN	Data Raw: 37 38 30 41 36 46 38 41 39 34 45 39 33 45 44 3c 2f 78 61 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 61 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3e 75 75 69 64 3a 32 34 38 41 30 32 42 42 39 43 31 43 45 32 31 31 39 37 38 30 41 36 46 38 41 39 34 45 39 33 45 44 3c 2f 78 61 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 61 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 72 64 66 3a 70 61 72 73 65 54 79 70 65 3d 22 52 65 73 6f 75 72 63 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3e 75 75 69 64 3a 32 31 38 41 30 32 42 42 39 43 31 43 45 32 31 31 39 37 38 30 41 36 46 38 41 39 34 45 39 33 45 44 3c 2f 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 Data Ascii: 780A6F8A94E93ED</xapMM:DocumentID> <xapMM:InstanceID>uuid:248A02BB9C1CE2119780A6F8A94E93ED</xapMM:InstanceID> <xapMM:DerivedFrom rdf:parseType="Resource"> <stRef:instanceID>uuid:218A02BB9C1CE2119780A6F8A94E93ED</stRef:instanc
2024-05-07 23:18:03 UTC	1369	IN	Data Raw: 2c 34 31 34 38 33 2c 34 31 34 38 34 2c 34 31 34 38 36 2c 34 31 34 38 37 2c 34 31 34 38 38 2c 34 31 34 39 32 2c 34 31 34 39 33 2c 34 31 34 39 35 2c 34 31 37 32 38 2c 34 31 37 32 39 2c 34 31 37 33 30 2c 34 31 39 38 35 2c 34 31 39 38 36 2c 34 31 39 38 37 2c 34 31 39 38 38 2c 34 31 39 38 39 2c 34 31 39 39 30 2c 34 31 39 39 31 2c 34 31 39 39 32 2c 34 31 39 39 33 2c 34 31 39 39 34 2c 34 31 39 39 35 2c 34 31 39 39 36 2c 34 32 30 31 36 2c 30 2c 32 2c 34 2c 35 2c 36 2c 37 2c 38 2c 39 2c 31 30 2c 31 31 2c 31 32 2c 31 33 2c 31 34 2c 31 35 2c 31 36 2c 31 37 2c 31 38 2c 32 30 2c 32 32 2c 32 33 2c 32 34 2c 32 35 2c 32 36 2c 32 37 2c 32 38 2c 33 30 3b 32 36 45 43 32 37 31 43 38 39 34 33 30 39 44 30 42 42 41 32 45 33 33 37 39 45 45 36 35 32 33 37 3c 2f 65 78 69 66 3a 4e Data Ascii: ,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;26EC271C894309D0BBA2E3379EE65237</exif:N
2024-05-07 23:18:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-07 23:18:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-07 23:18:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-07 23:18:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49712	172.67.213.176	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:03 UTC	650	OUT	GET /css/images/bkggrad.png HTTP/1.1 Host: www.factaclassactionsettlement.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ApplicationGatewayAffinity=f2b76c8d084793a79fbb09e62995d901
2024-05-07 23:18:03 UTC	926	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 23:18:03 GMT Content-Type: image/png Content-Length: 626 Connection: close Last-Modified: Wed, 17 Jan 2024 22:57:42 GMT ETag: "d1b21949849da1:0" X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer X-Permitted-Cross-Domain-Policies: none Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wS7576EIrg8vQokJKXXj1wxQnvlzwBqYHPuFzFWjQ4GT4doIAEwzduYUove3BGuYPsrdZf5ktZpoMvjnjGEO6pqt0OHV80x7n11uKuh2WeIZWP5KAUNFrVqCeryw8mIX5oXP0sMBGvbxE4aRg2Opn6nsiJ3T"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8804ed4f39b69b53-SEA alt-svc: h3=":443"; ma=86400
2024-05-07 23:18:03 UTC	443	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 09 00 00 00 6c 08 06 00 00 00 b8 a8 98 f9 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d8 0c 02 00 32 02 5e 3e 24 35 00 00 00 19 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 47 49 4d 50 57 81 0e 17 00 00 01 cd 49 44 41 54 48 c7 dd 57 41 72 03 31 08 93 58 5e dc 47 f6 1f 7d 41 cf 3d 74 dc 43 9a 8d 0d 02 6f 32 3d d5 a7 c4 76 40 08 81 09 df de 3f 06 00 10 b7 c5 fb a7 fb c6 00 fc f3 eb 1b eb a5 75 91 80 fb fd 87 64 79 c9 70 61 5d ba e4 d5 01 27 bf 4e 06 14 e2 ab 17 67 bd 3b 8a 0d 67 e3 06 00 38 98 dd 45 88 18 80 33 64 01 63 4d 0f 17 77 c8 Data Ascii: PNGIHDRlsRGBbKGDpHYstIME2^>$5tEXtCommentCreated with GIMPWIDATHWAr1X^G}A=tCo2=v@?udypa]'Ng;g8E3dcMw
2024-05-07 23:18:03 UTC	183	IN	Data Raw: f9 51 3d 77 5c 54 c0 8d bb a6 1d ae 0d 03 7d 99 eb e2 54 f2 4d 0d 63 48 9e 98 ea 2c 3d d4 c7 4e 99 6c 1a 86 4c 4b 35 17 dc c8 44 1f 9d ae 96 96 02 34 0f f5 11 4d 8d ae d3 15 e9 69 7b 26 9e d2 b8 b2 a4 55 d0 f0 93 2c 6d 2e 5d 18 d7 76 64 02 4d a7 6b df e0 a2 17 bc a2 02 35 42 1a 6b b1 bd c6 38 44 37 d9 0e c8 ec fa 53 ef ae 11 5f 09 1c ed 40 d3 25 58 45 35 61 da 6b c5 2f 40 ca 73 41 ac bf 3e 3a 35 61 3c 25 15 65 d0 77 b8 49 e6 04 2b fc 75 74 68 06 e4 82 cc fd ad bf fb 13 f8 bf 2f fd 00 16 5e 23 bc 18 d9 91 74 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: Q=w\T}TMcH,=NlLK5D4Mi{&U,m.]vdMk5Bk8D7S_@%XE5ak/@sA>:5a<%ewI+uth/^#tIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49714	172.67.213.176	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:03 UTC	654	OUT	GET /css/images/doubleunder.gif HTTP/1.1 Host: www.factaclassactionsettlement.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ApplicationGatewayAffinity=f2b76c8d084793a79fbb09e62995d901
2024-05-07 23:18:03 UTC	931	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 23:18:03 GMT Content-Type: image/gif Content-Length: 52 Connection: close Last-Modified: Wed, 17 Jan 2024 22:57:42 GMT ETag: "7f428949849da1:0" X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer X-Permitted-Cross-Domain-Policies: none Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G0ED7hqMkFrXKadnupJFDn6RFGpZ4BM4gAOBDhKhm3FMgZZEG3w7tzNjN5VWtN01eMzODeqcjKwN4TDNcPtmPQy0CdfynMWyqac26Qj7X%2Bqjal2aOVhpPD5etBIo%2FNCcL32uQYmIpb8quUG6aB81BSve%2FY1g"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8804ed4f59a37618-SEA alt-svc: h3=":443"; ma=86400
2024-05-07 23:18:03 UTC	52	IN	Data Raw: 47 49 46 38 39 61 04 00 03 00 a1 01 00 d6 d6 d6 ff ff ff ff ff ff ff ff ff 21 f9 04 01 0a 00 02 00 2c 00 00 00 00 04 00 03 00 00 02 05 84 11 19 07 05 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49711	96.7.158.101	443

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:03 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-07 23:18:03 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/2518) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=114339 Date: Tue, 07 May 2024 23:18:03 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49715	172.67.213.176	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:03 UTC	659	OUT	GET /css/images/currentUnderline.gif HTTP/1.1 Host: www.factaclassactionsettlement.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ApplicationGatewayAffinity=f2b76c8d084793a79fbb09e62995d901
2024-05-07 23:18:03 UTC	926	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 23:18:03 GMT Content-Type: image/gif Content-Length: 44 Connection: close Last-Modified: Wed, 17 Jan 2024 22:57:42 GMT ETag: "9ed53949849da1:0" X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer X-Permitted-Cross-Domain-Policies: none Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7Gx4qLZeY%2BZu8BN6e%2FgeXVSFC1S%2Bv1XT9jUROBlu64jj6BGSm3kuUQ9vr4JbhIstv%2BUsFhBDRjmJwa63OoFIbJDONmMVZLjGWWsTXiZegV7WTQWV4Hqjw2MLgsx6ejOAEiTM5JRTKuNucfJZfM3FW31uQGLb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8804ed4fbfebebbf-SEA alt-svc: h3=":443"; ma=86400
2024-05-07 23:18:03 UTC	44	IN	Data Raw: 47 49 46 38 39 61 03 00 03 00 80 01 00 06 87 be ff ff ff 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 03 00 03 00 00 02 03 84 7f 05 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49716	23.192.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:04 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-07 23:18:04 UTC	539	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0MNkrYwAAAADiUL7L3dxqSIABzBrl++yWQ082QUEzMTUwODEwMDIxAGNlZmMyNTgzLWE5YjItNDRhNy05NzU1LWI3NmQxN2UwNWY3Zg== Cache-Control: public, max-age=114350 Date: Tue, 07 May 2024 23:18:04 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-07 23:18:04 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49720	104.21.93.178	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:04 UTC	449	OUT	GET /css/images/bkggrad.png HTTP/1.1 Host: www.factaclassactionsettlement.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ApplicationGatewayAffinity=f2b76c8d084793a79fbb09e62995d901
2024-05-07 23:18:04 UTC	932	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 23:18:04 GMT Content-Type: image/png Content-Length: 626 Connection: close Last-Modified: Wed, 17 Jan 2024 22:57:42 GMT ETag: "d1b21949849da1:0" X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer X-Permitted-Cross-Domain-Policies: none Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2zchXD7kuICgsinVQyvzZ374KI7xDLy3kXMSJEWgYAmiExSo3s%2BEvFdx7ZdQuZiinawrM0LRjc40vkPMSfkNa3cDnoGEyQkn5zbnl6R2O226KkzG14lg1LgUpNYbX5Iwhe1BYXOl5o%2Fuq0qI0r%2F1VuGtGKsl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8804ed55b843ec58-SEA alt-svc: h3=":443"; ma=86400
2024-05-07 23:18:04 UTC	437	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 09 00 00 00 6c 08 06 00 00 00 b8 a8 98 f9 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d8 0c 02 00 32 02 5e 3e 24 35 00 00 00 19 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 47 49 4d 50 57 81 0e 17 00 00 01 cd 49 44 41 54 48 c7 dd 57 41 72 03 31 08 93 58 5e dc 47 f6 1f 7d 41 cf 3d 74 dc 43 9a 8d 0d 02 6f 32 3d d5 a7 c4 76 40 08 81 09 df de 3f 06 00 10 b7 c5 fb a7 fb c6 00 fc f3 eb 1b eb a5 75 91 80 fb fd 87 64 79 c9 70 61 5d ba e4 d5 01 27 bf 4e 06 14 e2 ab 17 67 bd 3b 8a 0d 67 e3 06 00 38 98 dd 45 88 18 80 33 64 01 63 4d 0f 17 77 c8 Data Ascii: PNGIHDRlsRGBbKGDpHYstIME2^>$5tEXtCommentCreated with GIMPWIDATHWAr1X^G}A=tCo2=v@?udypa]'Ng;g8E3dcMw
2024-05-07 23:18:04 UTC	189	IN	Data Raw: 07 36 36 14 4c c4 f9 51 3d 77 5c 54 c0 8d bb a6 1d ae 0d 03 7d 99 eb e2 54 f2 4d 0d 63 48 9e 98 ea 2c 3d d4 c7 4e 99 6c 1a 86 4c 4b 35 17 dc c8 44 1f 9d ae 96 96 02 34 0f f5 11 4d 8d ae d3 15 e9 69 7b 26 9e d2 b8 b2 a4 55 d0 f0 93 2c 6d 2e 5d 18 d7 76 64 02 4d a7 6b df e0 a2 17 bc a2 02 35 42 1a 6b b1 bd c6 38 44 37 d9 0e c8 ec fa 53 ef ae 11 5f 09 1c ed 40 d3 25 58 45 35 61 da 6b c5 2f 40 ca 73 41 ac bf 3e 3a 35 61 3c 25 15 65 d0 77 b8 49 e6 04 2b fc 75 74 68 06 e4 82 cc fd ad bf fb 13 f8 bf 2f fd 00 16 5e 23 bc 18 d9 91 74 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 66LQ=w\T}TMcH,=NlLK5D4Mi{&U,m.]vdMk5Bk8D7S_@%XE5ak/@sA>:5a<%ewI+uth/^#tIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49717	104.21.93.178	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:04 UTC	453	OUT	GET /css/images/doubleunder.gif HTTP/1.1 Host: www.factaclassactionsettlement.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ApplicationGatewayAffinity=f2b76c8d084793a79fbb09e62995d901
2024-05-07 23:18:04 UTC	926	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 23:18:04 GMT Content-Type: image/gif Content-Length: 52 Connection: close Last-Modified: Wed, 17 Jan 2024 22:57:42 GMT ETag: "7f428949849da1:0" X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer X-Permitted-Cross-Domain-Policies: none Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eMw6NnrvLVxKqKxUgCqXwHSeO0EPSr1BQsfHDz59nZ4jcYcXRk4ttJIPJDE8Bz37gqSKWQ9awRmxMzb0S5VUkcZalB%2FGXEkeq4ZKftLL8XRkS1UeL3T6%2F7%2F0s1YJDUP6qgZ2n9NnWVItFx9xaCtWTNckGdr%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8804ed55be2527d6-SEA alt-svc: h3=":443"; ma=86400
2024-05-07 23:18:04 UTC	52	IN	Data Raw: 47 49 46 38 39 61 04 00 03 00 a1 01 00 d6 d6 d6 ff ff ff ff ff ff ff ff ff 21 f9 04 01 0a 00 02 00 2c 00 00 00 00 04 00 03 00 00 02 05 84 11 19 07 05 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49718	104.21.93.178	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:04 UTC	438	OUT	GET /favicon.ico HTTP/1.1 Host: www.factaclassactionsettlement.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ApplicationGatewayAffinity=f2b76c8d084793a79fbb09e62995d901
2024-05-07 23:18:04 UTC	943	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 23:18:04 GMT Content-Type: image/x-icon Content-Length: 22878 Connection: close Last-Modified: Wed, 17 Jan 2024 22:54:01 GMT ETag: "78effaf9849da1:0" X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer X-Permitted-Cross-Domain-Policies: none Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e%2FxM6UlbO16YnFCSoLDJWt0l1S96d1aWldyT3qXxaoO7cZ2LGdCYBe%2B6AZsO1eQm8HvaY65DQeqa3jUQLUQ1JG63QBC5xw%2FofBnxHvSBgj2h0pEEHLG2x8lwbIwd%2BMwV%2Bf%2Fu7JihvPLQErqOiLPU2mI5xZ0y"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8804ed55bef39358-SEA alt-svc: h3=":443"; ma=86400
2024-05-07 23:18:04 UTC	426	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 03 e6 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1c 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 8e 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 32 20 57 69 6e 64 6f 77 73 00 32 30 31 32 3a 31 30 3a 32 32 20 31 36 3a 30 33 3a 35 37 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 10 a0 03 00 04 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 Data Ascii: JFIFHHExifMM*bj(1r2i''Adobe Photoshop CS2 Windows2012:10:22 16:03:57
2024-05-07 23:18:04 UTC	1369	IN	Data Raw: 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 10 00 10 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 01 ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 04 02 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 Data Ascii: "?3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6
2024-05-07 23:18:04 UTC	1369	IN	Data Raw: 00 05 73 6c 69 63 65 00 00 00 12 00 00 00 07 73 6c 69 63 65 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 07 67 72 6f 75 70 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 06 6f 72 69 67 69 6e 65 6e 75 6d 00 00 00 0c 45 53 6c 69 63 65 4f 72 69 67 69 6e 00 00 00 0d 61 75 74 6f 47 65 6e 65 72 61 74 65 64 00 00 00 00 54 79 70 65 65 6e 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 00 10 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 00 10 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 Data Ascii: slicesliceIDlonggroupIDlongoriginenumESliceOriginautoGeneratedTypeenumESliceTypeImg boundsObjcRct1Top longLeftlongBtomlongRghtlongurlTEXTnullTEXT
2024-05-07 23:18:04 UTC	1369	IN	Data Raw: 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 13 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 43 00 53 00 32 00 00 00 01 00 38 42 49 4d 0f a0 00 00 00 00 00 f8 6d 61 6e 69 49 52 46 52 00 00 00 ec 38 42 49 4d 41 6e 44 73 00 00 00 cc 00 00 00 10 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 00 00 00 03 00 00 00 00 41 46 53 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 46 72 49 6e 56 6c 4c 73 00 00 00 01 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 00 00 00 01 00 00 00 00 46 72 49 44 6c 6f 6e 67 38 18 bd cb 00 00 00 00 46 53 74 73 56 6c 4c 73 00 00 00 01 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 00 00 00 04 00 00 00 00 46 73 49 44 6c 6f 6e 67 00 00 00 Data Ascii: dobe PhotoshopAdobe Photoshop CS28BIMmaniIRFR8BIMAnDsnullAFStlongFrInVlLsObjcnullFrIDlong8FStsVlLsObjcnullFsIDlong
2024-05-07 23:18:04 UTC	1369	IN	Data Raw: 42 42 39 43 31 43 45 32 31 31 39 37 38 30 41 36 46 38 41 39 34 45 39 33 45 44 3c 2f 78 61 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 61 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3e 75 75 69 64 3a 32 34 38 41 30 32 42 42 39 43 31 43 45 32 31 31 39 37 38 30 41 36 46 38 41 39 34 45 39 33 45 44 3c 2f 78 61 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 61 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 72 64 66 3a 70 61 72 73 65 54 79 70 65 3d 22 52 65 73 6f 75 72 63 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3e 75 75 69 64 3a 32 31 38 41 30 32 42 42 39 43 31 43 45 32 31 31 39 37 38 30 41 36 46 38 41 39 34 45 39 33 45 44 3c 2f 73 74 Data Ascii: BB9C1CE2119780A6F8A94E93ED</xapMM:DocumentID> <xapMM:InstanceID>uuid:248A02BB9C1CE2119780A6F8A94E93ED</xapMM:InstanceID> <xapMM:DerivedFrom rdf:parseType="Resource"> <stRef:instanceID>uuid:218A02BB9C1CE2119780A6F8A94E93ED</st
2024-05-07 23:18:04 UTC	1369	IN	Data Raw: 33 37 33 38 36 2c 33 37 33 39 36 2c 34 31 34 38 33 2c 34 31 34 38 34 2c 34 31 34 38 36 2c 34 31 34 38 37 2c 34 31 34 38 38 2c 34 31 34 39 32 2c 34 31 34 39 33 2c 34 31 34 39 35 2c 34 31 37 32 38 2c 34 31 37 32 39 2c 34 31 37 33 30 2c 34 31 39 38 35 2c 34 31 39 38 36 2c 34 31 39 38 37 2c 34 31 39 38 38 2c 34 31 39 38 39 2c 34 31 39 39 30 2c 34 31 39 39 31 2c 34 31 39 39 32 2c 34 31 39 39 33 2c 34 31 39 39 34 2c 34 31 39 39 35 2c 34 31 39 39 36 2c 34 32 30 31 36 2c 30 2c 32 2c 34 2c 35 2c 36 2c 37 2c 38 2c 39 2c 31 30 2c 31 31 2c 31 32 2c 31 33 2c 31 34 2c 31 35 2c 31 36 2c 31 37 2c 31 38 2c 32 30 2c 32 32 2c 32 33 2c 32 34 2c 32 35 2c 32 36 2c 32 37 2c 32 38 2c 33 30 3b 32 36 45 43 32 37 31 43 38 39 34 33 30 39 44 30 42 42 41 32 45 33 33 37 39 45 45 36 35 Data Ascii: 37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;26EC271C894309D0BBA2E3379EE65
2024-05-07 23:18:04 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a Data Ascii:
2024-05-07 23:18:04 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-07 23:18:04 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-07 23:18:04 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49719	104.21.93.178	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:04 UTC	458	OUT	GET /css/images/currentUnderline.gif HTTP/1.1 Host: www.factaclassactionsettlement.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ApplicationGatewayAffinity=f2b76c8d084793a79fbb09e62995d901
2024-05-07 23:18:04 UTC	930	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 23:18:04 GMT Content-Type: image/gif Content-Length: 44 Connection: close Last-Modified: Wed, 17 Jan 2024 22:57:42 GMT ETag: "9ed53949849da1:0" X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer X-Permitted-Cross-Domain-Policies: none Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lKDfwtO3%2BSQUOjtwakBz1HLHsbSMuuPJDPGNLRtJjsHxhUm%2BTfJtB2YFK%2BNFXxicuujiopJ5YNq88h%2FXtqMMISHXpkz7ONyaHdsCTvRLqGn%2BXPcRtVuS1dJCzuzlvzv3K8R1Xr0z6wKKyLdeWMrE%2FqJKQ4qS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8804ed55bf2e6817-SEA alt-svc: h3=":443"; ma=86400
2024-05-07 23:18:04 UTC	44	IN	Data Raw: 47 49 46 38 39 61 03 00 03 00 80 01 00 06 87 be ff ff ff 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 03 00 03 00 00 02 03 84 7f 05 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49724	13.107.246.70	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:13 UTC	638	OUT	GET / HTTP/1.1 Host: www.gilardi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:13 UTC	2935	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 23:18:13 GMT Content-Type: text/html Content-Length: 25113 Connection: close Content-MD5: ZUNKzYK88FZwh7B9vjssCA== Last-Modified: Tue, 07 May 2024 05:05:05 GMT ETag: "0x8DC6E5342398F84" x-ms-request-id: 0dd61dfc-b01e-0061-6cd4-a0df84000000 x-ms-version: 2018-03-28 x-azure-ref: 20240507T231813Z-17c65945bcbvk4l659yvhryr5c00000003vg000000009e56 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff Referrer-Policy: strict-origin X-XSS-Protection: 1; mode=block Cache-Control: no-store no-cache Set-Cookie: SameSite=Lax;secure;HttpOnly Permissions-Policy: camera=(), microphone=() Content-Security-Policy: worker-src blob: https://.georgeson.com;script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://content-assets.computershare.com https://ui.customsearch.ai https://s508159127.t.eloqua.com https://ssl.google-analytics.com https://www.google-analytics.com https://.evidon.com https://img03.en25.com https://js.adsrvr.org https://snap.licdn.com https://view.ceros.com https://siteintercept.qualtrics.com https://.siteintercept.qualtrics.com https://secure.quantserve.com https://.pub.sfmc-content.com https://rules.quantcount.com https://.adsrvr.org https://snap.licdn.com https://widget.trustpilot.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://.crazyegg.com https://bat.bing.com;connect-src https://www.googletagmanager.com https://www.google-analytics.com https://ui.customsearch.ai https://s508159127.t.eloqua.com https://*.evidon.com https://cdn.linkedin.oribi.io https://siteintercept.qualtrics.com https://rules.quantcount.com http [TRUNCATED] X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-05-07 23:18:13 UTC	13449	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 2f 3e 3c 74 69 74 6c 65 3e 47 69 6c 61 72 64 69 20 26 61 6d 70 3b 20 43 6f 2e 2c 20 4c 4c 43 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 68 72 65 66 3d 22 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 70 6e 67 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d Data Ascii: <!DOCTYPE html><html><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><title>Gilardi & Co., LLC</title><link rel="icon" type="image/png" href="/img/favicon.png"/><meta http-equiv="X-UA-Compatible" content="IE=edge,chrom
2024-05-07 23:18:13 UTC	2563	IN	Data Raw: 31 2e 38 36 2c 30 2c 30 2c 31 2c 32 38 2e 32 38 2c 34 39 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 3c 2f 73 70 61 6e 3e 3c 61 20 68 72 65 66 3d 22 2f 61 63 74 69 76 65 2d 63 61 73 65 73 22 20 74 61 72 67 65 74 3d 22 22 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 22 3e 41 63 74 69 76 65 20 63 61 73 65 73 3c 21 2d 2d 20 2d 2d 3e 20 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 2d 33 34 35 20 32 37 32 2e 38 20 35 30 20 35 30 22 3e 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 20 64 3d 22 4d 2d 33 Data Ascii: 1.86,0,0,1,28.28,49Z" style="fill:currentColor"></path></svg></span><a href="/active-cases" target="" rel="noopener">Active cases... --> <svg version="1" xmlns="http://www.w3.org/2000/svg" viewBox="-345 272.8 50 50"><path style="fill:currentColor" d="M-3
2024-05-07 23:18:13 UTC	9101	IN	Data Raw: 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 2f 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 6d 6f 2d 6c 69 73 74 5f 5f 69 74 65 6d 2d 64 65 73 63 22 3e 3c 68 33 3e 54 72 61 6e 73 70 61 72 65 6e 74 3c 2f 68 33 3e 3c 64 69 76 3e 3c 70 3e 57 65 20 6b 6e 6f 77 20 74 68 61 74 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 61 6e 64 20 74 72 61 6e 73 70 61 72 65 6e 63 79 20 61 72 65 20 74 68 65 20 63 6f 72 6e 65 72 73 74 6f 6e 65 73 20 6f 66 20 74 72 75 73 74 20 61 6e 64 20 61 20 6c 61 73 74 69 6e 67 20 72 65 6c 61 74 69 6f 6e 73 68 69 70 2e 3c 2f 70 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 22 70 72 6f 6d 6f 2d 6c 69 73 74 5f 5f 69 74 65 6d 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 6d 6f 2d 6c Data Ascii: "presentation"/></div><div class="promo-list__item-desc"><h3>Transparent</h3><div><p>We know that communication and transparency are the cornerstones of trust and a lasting relationship.</p></div></div></li><li class="promo-list__item"><div class="promo-l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49723	13.107.246.70	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:13 UTC	599	OUT	GET /css/gilardi-c16ca2530e753c5011b74bac99660499.css HTTP/1.1 Host: www.gilardi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=Lax
2024-05-07 23:18:14 UTC	2935	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 23:18:14 GMT Content-Type: text/css Content-Length: 232090 Connection: close Content-MD5: wWyiUw51PFARt0usmWYEmQ== Last-Modified: Tue, 07 May 2024 05:05:05 GMT ETag: "0x8DC6E53425180BC" x-ms-request-id: b4b5989b-a01e-0075-5ed4-a01ce0000000 x-ms-version: 2018-03-28 x-azure-ref: 20240507T231814Z-17c65945bcb86ln6rahnfuvdpn00000003sg0000000152d2 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff Referrer-Policy: strict-origin X-XSS-Protection: 1; mode=block Cache-Control: no-store no-cache Set-Cookie: SameSite=Lax;secure;HttpOnly Permissions-Policy: camera=(), microphone=() Content-Security-Policy: worker-src blob: https://.georgeson.com;script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://content-assets.computershare.com https://ui.customsearch.ai https://s508159127.t.eloqua.com https://ssl.google-analytics.com https://www.google-analytics.com https://.evidon.com https://img03.en25.com https://js.adsrvr.org https://snap.licdn.com https://view.ceros.com https://siteintercept.qualtrics.com https://.siteintercept.qualtrics.com https://secure.quantserve.com https://.pub.sfmc-content.com https://rules.quantcount.com https://.adsrvr.org https://snap.licdn.com https://widget.trustpilot.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://.crazyegg.com https://bat.bing.com;connect-src https://www.googletagmanager.com https://www.google-analytics.com https://ui.customsearch.ai https://s508159127.t.eloqua.com https://*.evidon.com https://cdn.linkedin.oribi.io https://siteintercept.qualtrics.com https://rules.quantcount.com http [TRUNCATED] X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-05-07 23:18:14 UTC	13449	IN	Data Raw: ef bb bf 2e 62 75 74 74 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4f 76 65 72 70 61 73 73 22 2c 73 61 6e 73 2d 73 65 72 69 66 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 31 33 70 78 20 32 36 70 78 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 32 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 37 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 30 39 73 20 65 61 73 65 2d 69 6e 2d 6f Data Ascii: .button{font-size:16px;font-family:"Overpass",sans-serif;display:inline-block;padding:13px 26px;border-width:2px;border-style:solid;text-transform:uppercase;font-weight:bold;border-radius:7px;background-color:rgba(0,0,0,0);transition:all .09s ease-in-o
2024-05-07 23:18:14 UTC	2563	IN	Data Raw: 65 6c 2d 69 6e 6e 65 72 20 2e 69 74 65 6d 2e 61 63 74 69 76 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6c 65 66 74 3a 30 7d 2e 63 61 72 6f 75 73 65 6c 20 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 6e 65 72 20 2e 69 74 65 6d 2e 61 63 74 69 76 65 2e 6c 65 66 74 7b 6c 65 66 74 3a 2d 31 30 30 25 7d 2e 63 61 72 6f 75 73 65 6c 20 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 6e 65 72 20 2e 69 74 65 6d 2e 61 63 74 69 76 65 2e 72 69 67 68 74 7b 6c 65 66 74 3a 31 30 30 25 7d 2e 63 61 72 6f 75 73 65 6c 20 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 6e 65 72 20 2e 69 74 65 6d 2e 6e 65 78 74 2c 2e 63 61 72 6f 75 73 65 6c 20 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 6e 65 72 20 2e 69 74 65 6d 2e 70 72 65 76 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c Data Ascii: el-inner .item.active{display:block;left:0}.carousel .carousel-inner .item.active.left{left:-100%}.carousel .carousel-inner .item.active.right{left:100%}.carousel .carousel-inner .item.next,.carousel .carousel-inner .item.prev{display:block;position:absol
2024-05-07 23:18:14 UTC	16384	IN	Data Raw: 3b 6c 65 66 74 3a 30 7d 2e 63 61 72 6f 75 73 65 6c 20 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 6e 65 72 20 2e 69 74 65 6d 2e 70 72 65 76 2c 2e 63 61 72 6f 75 73 65 6c 20 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 6e 65 72 20 2e 69 74 65 6d 2e 61 63 74 69 76 65 2e 6c 65 66 74 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 30 25 2c 20 30 2c 20 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 30 25 2c 20 30 2c 20 30 29 3b 6c 65 66 74 3a 30 7d 2e 63 61 72 6f 75 73 65 6c 20 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 6e 65 72 20 2e 69 74 65 6d 2e 6e 65 78 74 2e 6c 65 66 74 2c 2e 63 61 72 6f 75 73 65 6c 20 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 6e 65 72 20 2e 69 74 65 6d 2e 70 72 65 76 2e 72 69 Data Ascii: ;left:0}.carousel .carousel-inner .item.prev,.carousel .carousel-inner .item.active.left{-webkit-transform:translate3d(-100%, 0, 0);transform:translate3d(-100%, 0, 0);left:0}.carousel .carousel-inner .item.next.left,.carousel .carousel-inner .item.prev.ri
2024-05-07 23:18:14 UTC	16384	IN	Data Raw: 73 2d 73 75 62 2d 6c 69 73 74 20 2e 6d 65 6e 75 2d 6c 69 6e 6b 73 7b 6c 65 66 74 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 3b 6f 70 61 63 69 74 79 3a 31 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 39 39 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 35 73 7d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 31 70 78 29 7b 2e 73 75 62 6d 65 6e 75 2d 61 63 74 69 76 65 2e 6d 65 6e 75 2d 69 74 65 6d 73 2d 73 75 62 2d 6c 69 73 74 20 2e 6d 65 6e 75 2d 6c 69 6e 6b 73 7b 6c 65 66 74 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 Data Ascii: s-sub-list .menu-links{left:0;visibility:visible;opacity:1;width:100%;height:100%;z-index:99;background-color:#fff;transition:all .5s}}@media(min-width: 768px)and (max-width: 991px){.submenu-active.menu-items-sub-list .menu-links{left:0;visibility:visible
2024-05-07 23:18:14 UTC	16384	IN	Data Raw: 65 61 72 63 68 2d 62 6f 78 5f 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 31 66 31 66 31 7d 2e 73 65 61 72 63 68 2d 62 6f 78 5f 5f 62 75 74 74 6f 6e 20 73 76 67 7b 77 69 64 74 68 3a 31 34 70 78 3b 68 65 69 67 68 74 3a 31 34 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 32 30 35 62 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 7b 2e 6d 65 6e 75 44 6f 77 6e 41 72 72 6f 77 2c 2e 6d 65 6e 75 55 70 41 72 72 6f 77 2c 23 6c 6f 67 69 6e 42 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 33 70 78 7d 23 63 6f 75 6e 74 72 79 44 6f 77 6e 41 72 72 6f 77 2c 23 63 6f 75 6e 74 72 79 55 70 41 72 72 6f 77 2c 23 6c 61 6e 67 75 61 67 65 44 6f 77 6e 41 72 72 6f 77 2c 23 6c 61 6e 67 75 61 67 65 Data Ascii: earch-box__button:hover{background-color:#f1f1f1}.search-box__button svg{width:14px;height:14px;color:#00205b}@media(min-width: 1200px){.menuDownArrow,.menuUpArrow,#loginButton{margin-top:-3px}#countryDownArrow,#countryUpArrow,#languageDownArrow,#language
2024-05-07 23:18:14 UTC	16384	IN	Data Raw: 36 2e 32 25 32 30 35 2e 38 2d 31 25 32 30 31 31 2e 34 2d 31 2e 34 25 32 30 31 36 2e 33 2d 31 2e 33 25 32 30 31 31 2e 36 25 32 30 30 25 32 30 32 31 2e 38 25 32 30 31 2e 34 25 32 30 32 38 25 32 30 33 2e 36 76 31 36 2e 37 25 32 32 25 32 46 25 33 45 25 33 43 70 61 74 68 25 32 30 66 69 6c 6c 25 33 44 25 32 32 25 32 33 63 30 30 25 32 32 25 32 30 64 25 33 44 25 32 32 4d 31 38 30 25 32 30 32 36 38 2e 32 63 2d 37 2e 37 2d 2e 36 2d 31 33 2d 32 2e 36 2d 31 33 2e 35 2d 35 2e 38 2d 2e 35 2d 32 2e 35 25 32 30 32 2d 35 2e 33 25 32 30 36 2e 37 2d 38 25 32 30 32 25 32 30 2e 33 25 32 30 34 2e 34 2e 36 25 32 30 36 2e 38 2e 36 76 31 33 2e 32 6d 32 37 2e 35 2d 31 30 2e 32 63 34 2e 38 2e 36 25 32 30 38 2e 34 25 32 30 31 2e 38 25 32 30 31 30 2e 32 25 32 30 33 2e 32 76 2e 33 63 Data Ascii: 6.2%205.8-1%2011.4-1.4%2016.3-1.3%2011.6%200%2021.8%201.4%2028%203.6v16.7%22%2F%3E%3Cpath%20fill%3D%22%23c00%22%20d%3D%22M180%20268.2c-7.7-.6-13-2.6-13.5-5.8-.5-2.5%202-5.3%206.7-8%202%20.3%204.4.6%206.8.6v13.2m27.5-10.2c4.8.6%208.4%201.8%2010.2%203.2v.3c
2024-05-07 23:18:14 UTC	16384	IN	Data Raw: 73 2d 35 2d 32 2e 36 2d 36 2e 32 2d 33 2e 34 63 2d 31 2d 2e 37 2d 33 2d 32 2e 37 2d 33 2e 35 2d 33 2e 36 2d 2e 35 2d 31 2d 31 2d 32 2e 37 2d 31 2d 32 2e 37 73 2d 31 25 32 30 30 2d 31 2e 38 2e 34 2d 31 2e 36 25 32 30 31 2d 32 25 32 30 31 2e 37 63 2d 2e 36 2e 36 2d 31 2e 33 25 32 30 31 2e 38 2d 31 2e 33 25 32 30 31 2e 38 76 2d 33 2e 35 73 2d 2e 35 25 32 30 32 2e 32 2d 31 2e 37 25 32 30 33 6c 2d 32 2e 35 25 32 30 32 25 32 30 2e 32 2d 31 2e 35 2e 33 2d 31 2e 37 73 2d 31 25 32 30 31 2e 33 2d 32 25 32 30 31 2e 35 63 2d 31 2e 33 2e 33 2d 33 2e 32 2e 32 2d 33 2e 33 25 32 30 31 2d 2e 32 2e 37 2e 33 25 32 30 31 2e 38 25 32 30 30 25 32 30 32 2e 33 2d 2e 32 2e 36 2d 31 25 32 30 31 2d 31 25 32 30 31 73 2d 2e 36 2d 2e 37 2d 31 2e 32 2d 2e 37 2d 31 2e 32 2e 34 2d 31 2e Data Ascii: s-5-2.6-6.2-3.4c-1-.7-3-2.7-3.5-3.6-.5-1-1-2.7-1-2.7s-1%200-1.8.4-1.6%201-2%201.7c-.6.6-1.3%201.8-1.3%201.8v-3.5s-.5%202.2-1.7%203l-2.5%202%20.2-1.5.3-1.7s-1%201.3-2%201.5c-1.3.3-3.2.2-3.3%201-.2.7.3%201.8%200%202.3-.2.6-1%201-1%201s-.6-.7-1.2-.7-1.2.4-1.
2024-05-07 23:18:14 UTC	16384	IN	Data Raw: 32 30 66 69 6c 6c 25 33 44 25 32 32 25 32 33 65 38 31 31 32 64 25 32 32 25 32 46 25 33 45 25 30 41 25 32 30 25 32 30 25 32 30 25 33 43 70 61 74 68 25 32 30 69 64 25 33 44 25 32 32 63 72 6f 77 6e 25 32 32 25 32 30 64 25 33 44 25 32 32 6d 31 31 39 2e 38 31 25 32 30 31 39 2e 36 36 37 63 35 2e 32 32 36 25 32 30 30 25 32 30 31 30 2e 30 39 33 25 32 30 31 2e 33 38 33 32 25 32 30 31 32 2e 39 36 32 25 32 30 33 2e 31 37 36 34 25 32 30 30 2e 35 36 33 2d 34 2e 34 30 35 39 25 32 30 32 2e 35 36 31 2d 38 2e 38 31 31 37 25 32 30 34 2e 39 31 38 2d 31 32 2e 31 34 32 2d 32 2e 34 35 39 2d 30 2e 30 35 31 33 2d 33 2e 35 36 31 25 32 30 31 2e 32 35 35 31 2d 33 2e 35 38 36 25 32 30 32 2e 36 31 32 37 2d 30 2e 36 31 35 2d 31 2e 37 34 31 38 2d 33 2e 30 32 33 2d 31 2e 36 33 39 34 2d Data Ascii: 20fill%3D%22%23e8112d%22%2F%3E%0A%20%20%20%3Cpath%20id%3D%22crown%22%20d%3D%22m119.81%2019.667c5.226%200%2010.093%201.3832%2012.962%203.1764%200.563-4.4059%202.561-8.8117%204.918-12.142-2.459-0.0513-3.561%201.2551-3.586%202.6127-0.615-1.7418-3.023-1.6394-
2024-05-07 23:18:14 UTC	1024	IN	Data Raw: 30 72 64 66 25 33 41 61 62 6f 75 74 25 33 44 25 32 32 25 32 32 25 33 45 25 30 41 25 32 30 25 32 30 25 33 43 64 63 25 33 41 66 6f 72 6d 61 74 25 33 45 69 6d 61 67 65 25 32 46 73 76 67 25 32 42 78 6d 6c 25 33 43 25 32 46 64 63 25 33 41 66 6f 72 6d 61 74 25 33 45 25 30 41 25 32 30 25 32 30 25 33 43 64 63 25 33 41 74 79 70 65 25 32 30 72 64 66 25 33 41 72 65 73 6f 75 72 63 65 25 33 44 25 32 32 68 74 74 70 25 33 41 25 32 46 25 32 46 70 75 72 6c 2e 6f 72 67 25 32 46 64 63 25 32 46 64 63 6d 69 74 79 70 65 25 32 46 53 74 69 6c 6c 49 6d 61 67 65 25 32 32 25 32 46 25 33 45 25 30 41 25 32 30 25 32 30 25 32 30 25 33 43 25 32 46 63 63 25 33 41 57 6f 72 6b 25 33 45 25 30 41 25 32 30 25 32 30 25 33 43 25 32 46 72 64 66 25 33 41 52 44 46 25 33 45 25 30 41 25 32 30 25 33 Data Ascii: 0rdf%3Aabout%3D%22%22%3E%0A%20%20%3Cdc%3Aformat%3Eimage%2Fsvg%2Bxml%3C%2Fdc%3Aformat%3E%0A%20%20%3Cdc%3Atype%20rdf%3Aresource%3D%22http%3A%2F%2Fpurl.org%2Fdc%2Fdcmitype%2FStillImage%22%2F%3E%0A%20%20%20%3C%2Fcc%3AWork%3E%0A%20%20%3C%2Frdf%3ARDF%3E%0A%20%3
2024-05-07 23:18:14 UTC	16384	IN	Data Raw: 25 32 30 66 69 6c 6c 25 33 44 25 32 32 25 32 33 66 30 30 25 32 32 25 32 46 25 33 45 25 30 41 25 32 30 25 32 30 25 32 30 25 33 43 70 61 74 68 25 32 30 69 64 25 33 44 25 32 32 70 61 74 68 35 38 31 25 32 32 25 32 30 64 25 33 44 25 32 32 6d 36 34 2e 35 30 31 25 32 30 32 39 31 2e 35 37 25 32 30 35 31 34 2e 30 38 25 32 30 35 30 38 2e 36 33 68 31 30 35 2e 34 35 6c 2d 35 30 32 2e 39 38 2d 35 30 38 2e 33 39 2d 31 31 36 2e 35 35 2d 30 2e 32 34 7a 25 32 32 25 32 30 74 72 61 6e 73 66 6f 72 6d 25 33 44 25 32 32 6d 61 74 72 69 78 28 2d 2e 34 36 32 33 37 25 32 30 30 25 32 30 30 25 32 30 2e 34 37 34 35 38 25 32 30 33 31 36 2e 32 38 25 32 30 2d 31 33 37 2e 32 38 29 25 32 32 25 32 30 66 69 6c 6c 25 33 44 25 32 32 25 32 33 66 66 66 25 32 32 25 32 46 25 33 45 25 30 41 25 32 Data Ascii: %20fill%3D%22%23f00%22%2F%3E%0A%20%20%20%3Cpath%20id%3D%22path581%22%20d%3D%22m64.501%20291.57%20514.08%20508.63h105.45l-502.98-508.39-116.55-0.24z%22%20transform%3D%22matrix(-.46237%200%200%20.47458%20316.28%20-137.28)%22%20fill%3D%22%23fff%22%2F%3E%0A%2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49727	13.107.246.70	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:14 UTC	546	OUT	GET /js/gtm.js HTTP/1.1 Host: www.gilardi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=Lax
2024-05-07 23:18:15 UTC	2946	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 23:18:14 GMT Content-Type: application/javascript Content-Length: 438 Connection: close Content-MD5: mPa+dDcTV8J9V5VNWps14Q== Last-Modified: Tue, 07 May 2024 05:05:05 GMT ETag: "0x8DC6E53421B368A" x-ms-request-id: a067505d-901e-0076-38d4-a01fe7000000 x-ms-version: 2018-03-28 x-azure-ref: 20240507T231814Z-17c65945bcb6v65wtps664a6z000000003wg000000002q33 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff Referrer-Policy: strict-origin X-XSS-Protection: 1; mode=block Cache-Control: no-store no-cache Set-Cookie: SameSite=Lax;secure;HttpOnly Permissions-Policy: camera=(), microphone=() Content-Security-Policy: worker-src blob: https://.georgeson.com;script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://content-assets.computershare.com https://ui.customsearch.ai https://s508159127.t.eloqua.com https://ssl.google-analytics.com https://www.google-analytics.com https://.evidon.com https://img03.en25.com https://js.adsrvr.org https://snap.licdn.com https://view.ceros.com https://siteintercept.qualtrics.com https://.siteintercept.qualtrics.com https://secure.quantserve.com https://.pub.sfmc-content.com https://rules.quantcount.com https://.adsrvr.org https://snap.licdn.com https://widget.trustpilot.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://.crazyegg.com https://bat.bing.com;connect-src https://www.googletagmanager.com https://www.google-analytics.com https://ui.customsearch.ai https://s508159127.t.eloqua.com https://*.evidon.com https://cdn.linkedin.oribi.io https://siteintercept.qualtrics.com https://rules.quantcount.com http [TRUNCATED] X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-05-07 23:18:15 UTC	438	IN	Data Raw: 76 61 72 20 67 74 6d 43 6f 6e 74 61 69 6e 65 72 49 64 20 3d 20 27 47 54 4d 2d 4e 44 57 58 35 52 4a 27 3b 0a 20 20 20 20 69 66 20 28 67 74 6d 43 6f 6e 74 61 69 6e 65 72 49 64 20 21 3d 3d 20 27 27 29 20 7b 0a 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0a 20 20 20 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0a 20 20 20 20 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c 21 3d 27 64 61 74 61 4c 61 79 65 72 27 3f 27 26 Data Ascii: var gtmContainerId = 'GTM-NDWX5RJ'; if (gtmContainerId !== '') { (function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49732	99.86.38.13	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:14 UTC	676	OUT	GET /eh96rkuu9740/2sbDjiRdHpvTtxGaLuZ8rN/25556300175ed902a13b05f86f3e304c/gilardi_logo.svg HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:15 UTC	530	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 8369 Connection: close Date: Tue, 07 May 2024 23:18:16 GMT Last-Modified: Mon, 06 Sep 2021 09:26:41 GMT ETag: "c5e87db7e623044f6b3c0a13ed348832" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 1f6e68152880a39d72e6bf2996cd6a60.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: DwZy9b2DtmBk2b_rJQ1nkXqCJ4A_ChWPMf0N9ZgUKpGJaWKgt8nNJA==
2024-05-07 23:18:15 UTC	8369	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 37 2e 30 36 20 37 33 2e 38 35 22 3e 3c 74 69 74 6c 65 3e 47 69 6c 61 72 64 69 5f 4c 6f 67 6f 5f 42 6c 61 63 6b 5f 48 69 67 68 52 65 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 32 35 37 2e 35 37 2c 35 34 32 2e 31 39 61 35 2e 33 32 2c 35 2e 33 32 2c 30 2c 30 2c 31 2c 31 2e 39 33 2d 33 2e 39 31 2c 31 31 2e 39 31 2c 31 31 2e 39 31 2c 30 2c 30 2c 31 2c 32 2e 33 35 2d 31 2e 36 31 63 2d 31 2e 35 37 2d 31 2d 32 2e 32 38 2d 32 2d 32 2e 33 2d 33 2e 32 2c 30 2d 31 2e 38 31 2c 32 2e 32 33 2d 33 2e 39 33 2c 34 2e 33 39 2d 33 2e 39 33 2c 32 2e 35 38 2c 30 2c 34 2c 31 2e 36 33 2c 34 2c 33 2e 32 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 157.06 73.85"><title>Gilardi_Logo_Black_HighRes</title><path d="M257.57,542.19a5.32,5.32,0,0,1,1.93-3.91,11.91,11.91,0,0,1,2.35-1.61c-1.57-1-2.28-2-2.3-3.2,0-1.81,2.23-3.93,4.39-3.93,2.58,0,4,1.63,4,3.2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49731	99.86.38.13	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:14 UTC	719	OUT	GET /eh96rkuu9740/6cd605275a334a6ab1ececf7415627f0/9eed86d3c59e67c8456e0f57d75ffe82/target-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:15 UTC	530	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1201 Connection: close ETag: "e3d2183ee1c18406d283d179f2456cad" Last-Modified: Fri, 12 Apr 2024 14:28:34 GMT Date: Tue, 07 May 2024 23:18:15 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 0cf6c59c77f0fff670ae085179adc458.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: jYupJV4YhjYCMgHPyHatp2iRwXKuDgvXdJ9D6H9bGF6glbKHlv5F4Q==
2024-05-07 23:18:15 UTC	1201	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 37 30 20 33 33 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 32 30 35 62 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 38 35 2c 33 30 35 2e 32 32 61 33 2e 38 2c 33 2e 38 2c 30 2c 30 2c 31 2d 33 2e 38 2d 33 2e 38 56 32 37 34 2e 38 39 6c 2d 33 2d 2e 31 39 41 31 31 30 2c 31 31 30 2c 30 2c 30 2c 31 2c 37 35 2e 34 2c 31 37 31 2e 37 39 6c 2d 2e 31 39 2d 33 48 34 38 2e 35 36 61 33 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M185,305.22a3.8,3.8,0,0,1-3.8-3.8V274.89l-3-.19A110,110,0,0,1,75.4,171.79l-.19-3H48.56a3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49736	99.86.38.13	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:15 UTC	734	OUT	GET /eh96rkuu9740/fffccb33654140bda7841d0e2fed9270/fd33b7f34c9c59ef94b94c31d7fce115/partnership-handshake-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:16 UTC	530	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1925 Connection: close ETag: "8e0883afb6bc509d126ef46399686e40" Last-Modified: Thu, 02 May 2024 09:23:47 GMT Date: Tue, 07 May 2024 23:18:16 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 60b744e5b364d04abea9fa6686121242.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: qalAXSlVeYPI9SSUiuT2qa2tn_52WYyhqr9FsonZJhfi7FEv1tRjxg==
2024-05-07 23:18:16 UTC	1925	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 37 30 20 33 33 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 32 30 35 62 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 34 38 2e 33 33 2c 31 38 36 2e 32 39 61 35 2e 38 2c 35 2e 38 2c 30 2c 31 2c 31 2c 35 2e 37 38 2d 35 2e 38 41 35 2e 38 2c 35 2e 38 2c 30 2c 30 2c 31 2c 34 38 2e 33 33 2c 31 38 36 2e 32 39 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M48.33,186.29a5.8,5.8,0,1,1,5.78-5.8A5.8,5.8,0,0,1,48.33,186.29Z"/><path class="cls-1" d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49734	99.86.38.13	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:15 UTC	712	OUT	GET /eh96rkuu9740/c9117c1092534fcc9273232233df0c5b/cd4bbb343e36272e3e0525f13b2ce9f7/Welcome.jpg?w=1920&h=850&fit=fill&f=center HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:16 UTC	506	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 146051 Connection: close ETag: "a9115978e0c5c7b81af2c985b9f42540" Last-Modified: Tue, 30 Apr 2024 21:11:33 GMT Date: Tue, 07 May 2024 23:18:16 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 34f8ef0e4c880df0650a814412a26ea6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: FEw4bwKQNgBgcjIDvYxIxjcTgEAvJ5sPJJp1mRYHpH6bAE0pmmH1OQ==
2024-05-07 23:18:16 UTC	5484	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 2c 01 2c 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 cf 00 06 00 03 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: JFIF,,@ICC_PROFILE0ADBEmntrRGB XYZ acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-05-07 23:18:16 UTC	16384	IN	Data Raw: 80 40 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 3a 1d 05 ab 97 eb 4e ce c5 b8 19 41 b7 6c 04 65 14 b5 46 50 47 4b 15 10 5a 22 4f aa 0f 5a f6 4b ec cd ba ad 0a 9a ae a3 6c fa b4 69 89 a5 4c fb a7 d4 af 17 7f 3c fb 7d 23 bf 3f 1d cf b5 54 f6 83 c3 54 6b bd f5 19 4d bc bb 72 c2 b2 d8 8e 0b 4a d2 74 61 7a 2d f5 aa 35 4d a3 b1 e2 d0 f7 99 eb 1d 57 4d b9 b1 7c 5f 15 d6 6b fe c0 75 dd 0b 44 1a ff 00 0e 55 fe 21 d0 0b 05 57 0a 40 f8 b4 db ea d5 79 f9 a5 b9 d1 df c5 67 9e 7d 38 1b 7b 86 5c b4 96 48 70 c3 98 44 16 9e c4 2e ef 3a 58 28 ab 14 7e eb 34 5b 0f 86 28 39 fd 6a bc 35 d9 5b 9e d9 ae 03 58 b9 e6 ab cb 39 95 d2 31 54 e9 bc 42 ac 2f 51 d9 15 3b 44 84 52 ec 88 72 29 0e c8 18 50 2c 20 51 bf aa 14 fe 88 88 aa 05 3d aa 16 f9 4c a7 ea 7a 58 a4 Data Ascii: @ @ @ :NAleFPGKZ"OZKliL<}#?TTkMrJtaz-5MWM\|_kuDU!W@yg}8{\HpD.:X(~4[(9j5[X91TB/Q;DRr)P, Q=LzX
2024-05-07 23:18:16 UTC	3532	IN	Data Raw: 46 51 d4 3d 7a ad 48 cd 46 64 8f 8a d8 00 ca 88 7b 69 a9 ab 87 b2 98 1b e1 66 d5 2c 80 14 0c 75 58 38 2b 52 26 a1 7d 62 76 5b 9c b3 6a 32 e2 56 d9 22 01 00 80 40 20 10 08 04 02 01 00 81 79 50 38 0c 85 96 b0 b1 0a 07 81 d9 45 28 f5 46 8e 6b 09 38 0a 68 91 94 1c e3 b2 ce 8b 2c b1 24 67 75 04 d4 6c 41 dd 05 fa 74 59 48 4e c1 58 94 ca dc a4 e2 37 d9 42 22 a8 ec 22 9f 6a f0 cd d5 4a b3 e2 07 3b 1b 2a 85 98 ff 00 45 44 81 d1 01 05 ba 35 31 0a 87 d3 20 bb ba 24 29 89 95 54 f7 62 0f 55 12 9d 4d c4 1d d5 12 f3 03 13 d3 ba 06 d7 a2 ca cd 00 22 31 75 3e 1f a7 5e 9c 81 ca fe e1 4f 5e 8a e6 ae f4 9a f6 92 48 e6 68 ea 16 be c8 a4 44 6e b4 04 02 01 00 80 40 20 10 08 04 02 01 06 96 8c 62 b0 5c fa f6 d4 f4 ed b4 f7 60 20 d7 a6 70 a2 9a ec 39 44 59 b5 77 9d 55 68 11 21 40 Data Ascii: FQ=zHFd{if,uX8+R&}bv[j2V"@ yP8E(Fk8h,$gulAtYHNX7B""jJ;*ED51 $)TbUM"1u>^O^HhDn@ b\` p9DYwUh!@
2024-05-07 23:18:16 UTC	1371	IN	Data Raw: 9b 53 96 8c 92 0d 2c b4 01 dc 76 38 5a cd 4b 71 83 53 8a 6b 1a c2 99 7f 3b 7a 09 d9 4b 13 23 7f 47 d6 ea 87 b9 95 1c da 80 0d 9c d2 12 46 3a 74 f6 7a 83 6b 30 16 31 fc ed 6f 31 12 60 fd 54 66 c6 85 96 be 6b d6 65 b0 ab e1 bc 99 25 c4 01 f0 9e ab ac ea b9 75 f1 cb e6 b7 e8 6a f7 16 6c 7b e9 39 d4 f9 5d ca f6 fb c1 a7 a4 85 df 8f 9b ae 3d 57 8f bf e3 71 df b8 75 f5 dd 87 11 d9 3e d7 52 b6 6d 4a 75 70 e2 00 73 7e 63 aa f6 73 fc a9 7f f2 7c ef 93 f8 36 7f e2 fc c7 fd af bd 91 e9 7c 0f c6 cf ad c3 ba 3e ad 69 69 71 51 dc ee af 69 c9 6c f3 d1 d4 9c 09 90 7b 2f a1 f1 7c b3 e4 fd 7c ef 93 e1 eb e3 f7 1f 3b 3d a5 a4 b5 c0 b5 c3 04 1d c2 f4 bc e6 10 82 27 8c 84 08 3d 10 29 08 22 aa 31 0a 0a 57 0d 10 56 5a 8c ba cd 82 ac 6d 10 1f f8 57 5a 89 58 25 45 38 8f 2e c8 23 Data Ascii: S,v8ZKqSk;zK#GF:tzk01o1`Tfke%ujl{9]=Wqu>RmJups~cs\|6\|>iiqQil{/\|\|;='=)"1WVZmWZX%E8.#
2024-05-07 23:18:16 UTC	2742	IN	Data Raw: e9 6e de de 04 92 b9 da eb 8b b4 44 1f f5 59 ad 2c d1 77 3e 62 0f 45 08 b2 c6 78 86 20 c2 36 bb 6b 68 f2 e6 34 73 07 13 02 11 d2 36 6d 74 f2 45 47 72 b8 c6 1b 1d d6 5d 23 ae d0 ec c3 9d 4a 9f 27 f3 39 09 74 8e ab 36 ba 47 a1 70 f0 36 d7 76 d7 21 a3 c3 f2 97 83 fa f3 03 e6 02 e1 d3 bf 2f 40 d0 2b 51 a1 a9 0a 15 6b 1b 76 0a e5 b4 eb 37 f2 87 6c 47 c2 76 5c e4 f2 e9 6f 85 26 de 3e fe db f7 6d c9 e5 b8 0e 22 9d 49 f2 3a 24 41 57 d3 56 fe b9 43 5e a6 97 a6 5c 36 81 3e 35 12 65 c0 e5 84 1d c1 56 4d ac f5 d3 9a bb d4 45 5a 20 b8 47 38 0e 63 db f9 5c ba 63 3f 6c 41 4b 5c 7d 3a 8c a9 21 b5 98 61 c0 ec 42 9f 4f 0d ce dd 66 93 c5 15 2d 69 b1 d4 dd 34 dd 8a b4 5c 71 e8 b8 de 1d e7 c9 fd bb 3b 3e 2d 15 34 57 80 f8 73 bc 9e 13 9d 0f 1e a1 62 73 8b f6 9a 8a b7 12 8a 36 Data Ascii: nDY,w>bEx 6kh4s6mtEGr]#J'9t6Gp6v!/@+Qkv7lGv\o&>m"I:$AWVC^\6>5eVMEZ G8c\c?lAK\}:!aBOf-i4\q;>-4Wsbs6
2024-05-07 23:18:16 UTC	2742	IN	Data Raw: da b5 e2 79 8e 68 29 8b ad 6b 7d 52 de e3 0e 20 14 f2 bf 6f 3e 56 0d bd 0a c3 ca 46 54 d5 f1 51 bf 45 a6 fe 80 ad 18 84 f0 c5 3a 87 2c fb 28 ce 2f 69 fc 24 d6 bc 43 39 7e 49 53 1e 81 c3 5a 57 e1 b9 3c b8 ee 56 29 98 ec c5 bb 5f 42 00 92 a3 4e 77 56 d2 43 81 f2 fd 90 72 3a a6 8a 20 f9 7e 8b 51 1c 7e a7 a5 1a 64 f9 71 95 a9 51 cc 5f d9 fb d2 15 f6 ae 6e fe cc b5 d3 18 53 f4 49 a6 cd 37 c4 ed d1 54 77 3c 3f 7b c8 f6 09 52 8f 53 d0 2f 43 d8 dc fc e5 73 1d 33 a9 b6 b5 34 6b 58 ba 9e 9a da 80 f9 55 83 90 d5 b4 41 24 f2 fd 02 be 51 ca 5f 68 fc 84 f9 55 d4 63 dc 69 dc b3 e5 5a 19 37 9a 6f 30 38 ca 0c 3b ab 3a 94 4c 8d 94 54 74 2f ea db 1c 93 8e ea a3 6e c7 5f 82 25 d0 a0 ea 74 ce 23 73 00 f3 c0 f8 a9 83 ad d3 78 9a 43 65 c0 0f ba 96 0e 92 cf 59 65 40 25 c0 0f 5e Data Ascii: yh)k}R o>VFTQE:,(/i$C9~ISZW<V)_BNwVCr: ~Q~dqQ_nSI7Tw<?{RS/Cs34kXUA$Q_hUciZ7o08;:LTt/n_%t#sxCeYe@%^
2024-05-07 23:18:16 UTC	2742	IN	Data Raw: 9f 8a 73 e6 ad 86 3f 98 39 f8 07 65 cf 5d 4d 7e fe aa 34 64 18 1c dd 46 ca a2 4a 54 a0 9e bd c2 6a c8 d0 b5 6c 3e 5b 8e eb 15 e8 e7 97 75 c2 1a 73 6a d5 6d 57 fb a0 ce 37 5e 7e ad 7b 79 92 3d bf 82 6b 0b 97 30 b6 90 6d 06 e0 37 bf a9 5e 4e ee 78 7b be 38 f7 1e 14 b3 a9 5a ad 3a 8d 26 b8 04 06 82 7c a3 e4 b8 cf 35 e9 c9 27 97 af e9 9a a5 4b 3a 0c b7 65 df 87 fa 9b 6c c0 08 3d a7 7f ba eb b9 e3 5e 2e be 39 d5 db 17 2b d9 b2 f9 8d 02 d6 a5 47 b8 99 ab 51 f9 3e be 8a 5f 2c c9 f5 fd 66 6a 3c 35 6b 6a d7 dc 56 a4 da b5 5a d8 65 2a 47 98 34 f4 93 b7 aa d6 67 9a b2 de bc 47 9d 56 d0 eb 53 b8 73 ae aa d1 a7 4a 98 e7 14 c1 1c cf 07 a4 75 27 ba 47 5e b3 3c 39 fa 9a 45 07 d3 a7 51 b4 5c f2 e7 97 be ce bf 94 72 ce ed 3b fa 2e 75 9c ba d3 d2 58 f7 de be de 95 31 4a b3 Data Ascii: s?9e]M~4dFJTjl>[usjmW7^~{y=k0m7^Nx{8Z:&\|5'K:el=^.9+GQ>_,fj<5kjVZe*G4gGVSsJu'G^<9EQ\r;.uX1J
2024-05-07 23:18:16 UTC	2742	IN	Data Raw: 8e 9f 2b e6 fe 1d 9f ed f1 ff 00 fe 9f 26 d7 b4 7d bd 47 32 a3 0b 1e d3 05 ae 10 41 f8 2f 6f bf 2f 99 76 5c aa b5 28 c3 b2 b2 b1 0b 9b 8d b7 45 c2 47 a7 44 43 4b 20 6e b4 81 c3 18 c2 82 37 88 0a 88 de dc 2a 18 f9 ec 81 a7 25 03 63 b0 41 a3 a4 09 ac 14 66 ba aa 3e e2 db 0c bd 5b 25 1c eb 16 a8 23 d5 08 81 c3 ba 28 81 38 cf c1 01 f3 84 11 d4 33 94 10 38 4a 06 c2 ba 1a 55 08 55 0b d9 02 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 80 40 20 d7 d2 9d 0c 18 c2 c7 eb 4b d7 6d 7d 5a 50 d6 92 7d 10 64 d3 d1 ae 2b 38 f9 79 7e 2a eb 2d 4b 4e 16 e6 83 50 93 e8 a6 d1 bd 63 c3 8c a6 04 53 1f 18 43 1a f6 fa 4b 69 c4 84 5c 6b 5b 59 d3 a6 41 20 42 ce ab 4e dd d4 98 30 02 87 86 85 1b b6 37 00 47 c1 51 3f e2 9b bc a8 a5 17 46 70 11 0f fc 43 8e c3 0a 55 2f e3 2a 37 60 9a Data Ascii: +&}G2A/o/v\(EGDCK n7%cAf>[%#(838JUU @ @ Km}ZP}d+8y~-KNPcSCKi\k[YA BN07GQ?FpCU/*7`
2024-05-07 23:18:16 UTC	1371	IN	Data Raw: 28 3f c8 55 0e a5 74 58 ef 82 83 e6 85 d8 08 04 02 01 00 80 40 20 10 08 04 02 07 d1 cb a3 a2 cd 6b 95 d6 08 88 dd 71 75 3d d0 02 8a 82 a1 8f 55 b8 c2 bb ce 17 48 cd f4 8d 69 80 80 40 20 10 08 00 25 04 b4 59 2b 16 b7 22 d5 36 0d fb 2e 75 d3 0f 13 d7 65 14 10 32 80 c8 89 44 2c ee 22 07 74 34 87 74 52 1f 5d 91 0d 22 4e 11 3d 90 00 81 76 19 56 ad 00 e3 3f 75 10 e3 21 03 47 fd 84 0e 23 bf d9 03 4e de 88 12 22 3f a2 21 64 ca 28 1b c7 55 54 b3 84 54 94 df c8 76 95 12 d2 3c 13 9c 47 a2 21 87 ca 70 81 5b b0 ed d9 10 f6 91 c8 7b fa aa 18 cf 33 b3 d5 28 90 10 09 fa 28 a5 82 7e 7d 91 17 6c 34 b7 d7 7b 71 8e 8a e6 a5 ae 8a de ce 8d ab 3c e4 6d 39 5b c6 59 fa 8f 12 52 b5 9a 6c 87 38 0c 42 b1 35 cc ea 1a c5 6b e7 bb cc 5a c3 f9 56 b1 14 37 54 49 4b 05 12 ac 31 8e a9 53 Data Ascii: (?UtX@ kqu=UHi@ %Y+"6.ue2D,"t4tR]"N=vV?u!G#N"?!d(UTTv<G!p[{3((~}l4{q<m9[YRl8B5kZV7TIK1S
2024-05-07 23:18:16 UTC	2606	IN	Data Raw: a0 08 04 02 01 00 80 40 20 10 08 04 02 07 b2 93 aa 18 01 4b 70 5f b6 d1 6a 57 89 3c bf 25 35 71 a7 43 84 83 ce 6a 9f 80 4d a9 95 af 63 c0 f4 1d 92 0b cf aa 8b 8d eb 5e 05 a6 d0 0b 69 81 f2 53 57 ea d7 b7 e0 b0 3a 2c ea 62 d8 e1 11 4f 30 9a b8 0e 80 69 b7 0d 57 51 0d 4d 29 e0 4f 2e 54 d1 5c e9 ee 6b b2 21 53 0f 16 a4 0d 91 4d f0 5c c9 3d 10 27 86 4a 85 89 a8 d1 27 64 45 c6 d0 24 6d 84 13 d3 b4 eb 19 46 96 1b 69 cd 0a 6a 2e 53 a3 ca cc b5 05 ab 7a 45 b9 3b 61 41 71 ad e6 cc 7a e5 15 37 24 37 6f ae c8 19 c9 2e c8 ea 82 2a d6 f0 24 76 f9 20 8b 96 70 42 06 bd 80 32 60 6c 88 a4 f1 98 df 64 16 29 0d a4 7a a2 5a bf 6f 6e 1c 04 84 17 99 6c 1c 30 11 4a 6d 23 a1 d9 05 7b 8b 76 92 71 08 33 2e 69 40 da 11 54 61 d4 dc 7f ba ac a5 a6 fe 71 df aa 8b 09 cc 43 d1 13 0a fc Data Ascii: @ Kp_jW<%5qCjMc^iSW:,bO0iWQM)O.T\k!SM\='J'dE$mFij.SzE;aAqz7$7o.*$v pB2`ld)zZonl0Jm#{vq3.i@TaqC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49735	99.86.38.13	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:15 UTC	722	OUT	GET /eh96rkuu9740/04139ec921c04b6394616c7a40f48da6/dd23ce4ffccade0fe0b6f6af64d3c548/checklist-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:16 UTC	530	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1683 Connection: close ETag: "15212d30489234794bef381f334a2cb0" Last-Modified: Fri, 19 Apr 2024 16:10:20 GMT Date: Tue, 07 May 2024 23:18:16 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 1570d93226c1bbca2ebaad510cff3e0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: NDzbA_azY3seAunleRcowWeZYwc5IWSNcEQLh6OqZsBvuHkqHTxFpw==
2024-05-07 23:18:16 UTC	1683	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 37 30 20 33 33 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 32 30 35 62 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 78 3d 22 31 31 30 2e 31 38 22 20 79 3d 22 32 30 30 2e 33 36 22 20 77 69 64 74 68 3d 22 39 2e 36 22 20 68 65 69 67 68 74 3d 22 39 2e 36 22 2f 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 78 3d 22 31 31 30 2e 31 38 22 20 79 3d 22 31 36 38 2e 30 38 22 20 77 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><rect class="cls-1" x="110.18" y="200.36" width="9.6" height="9.6"/><rect class="cls-1" x="110.18" y="168.08" w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49738	99.86.38.13	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:15 UTC	722	OUT	GET /eh96rkuu9740/5b560a5e95534bfdab06d2bf9d9c8622/8adc9b8b9e39e7b77e9b37986e331de4/lightbulb-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:16 UTC	530	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2679 Connection: close ETag: "b430847f6311dc4f4ad88ee5103142b0" Last-Modified: Fri, 05 Apr 2024 11:29:22 GMT Date: Tue, 07 May 2024 23:18:16 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 34f8ef0e4c880df0650a814412a26ea6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: k7SzsoJR6MJFevSGDskJgNSOnmQHE71l7xtsb_SifbyLW-yc598WEA==
2024-05-07 23:18:16 UTC	2679	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 37 30 20 33 33 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 32 30 35 62 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 32 31 36 2e 36 32 2c 32 36 39 2e 33 48 31 35 33 2e 33 38 61 33 2e 38 2c 33 2e 38 2c 30 2c 31 2c 30 2c 30 2c 37 2e 35 39 68 36 33 2e 32 34 61 33 2e 38 2c 33 2e 38 2c 30 2c 31 2c 30 2c 30 2d 37 2e 35 39 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M216.62,269.3H153.38a3.8,3.8,0,1,0,0,7.59h63.24a3.8,3.8,0,1,0,0-7.59Z"/><path class="cls

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49739	99.86.38.13	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:15 UTC	717	OUT	GET /eh96rkuu9740/24ada858e0424dc9a6fe522196881460/163c84ee9d3bddfeb1bbc9125472cd0f/lock-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:16 UTC	506	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 505 Connection: close ETag: "8df29f3dfb8749f21c310266998baed8" Last-Modified: Mon, 08 Apr 2024 15:36:48 GMT Date: Tue, 07 May 2024 23:18:16 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: 925mc3D_sSj8ewPQbcWtTJTBPElFUBU8ohU6w33hZWOa0gb1DYKlPA==
2024-05-07 23:18:16 UTC	505	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 37 30 20 33 33 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 32 30 35 62 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 38 35 2c 31 38 32 2e 34 61 38 2e 36 31 2c 38 2e 36 31 2c 30 2c 30 2c 30 2d 34 2e 37 38 2c 31 35 2e 37 39 2c 34 2e 32 2c 34 2e 32 2c 30 2c 30 2c 30 2d 2e 30 36 2e 36 31 76 31 38 2e 33 33 61 35 2c 35 2c 30 2c 30 2c 30 2c 31 30 2c 30 56 31 39 38 2e 38 61 35 2e Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M185,182.4a8.61,8.61,0,0,0-4.78,15.79,4.2,4.2,0,0,0-.06.61v18.33a5,5,0,0,0,10,0V198.8a5.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49737	13.107.246.70	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:16 UTC	565	OUT	GET /js/main.min.js HTTP/1.1 Host: www.gilardi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=Lax; SameSite=Lax
2024-05-07 23:18:16 UTC	2949	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 23:18:16 GMT Content-Type: application/javascript Content-Length: 134128 Connection: close Content-MD5: DqjX1CTKEjZ8VXvqOnNPXQ== Last-Modified: Tue, 07 May 2024 05:05:05 GMT ETag: "0x8DC6E53427B229A" x-ms-request-id: 9c4d75a9-f01e-0000-4fd4-a09b5b000000 x-ms-version: 2018-03-28 x-azure-ref: 20240507T231816Z-17c65945bcbknpw5xy9fyrvu4400000003zg00000002329d X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff Referrer-Policy: strict-origin X-XSS-Protection: 1; mode=block Cache-Control: no-store no-cache Set-Cookie: SameSite=Lax;secure;HttpOnly Permissions-Policy: camera=(), microphone=() Content-Security-Policy: worker-src blob: https://.georgeson.com;script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://content-assets.computershare.com https://ui.customsearch.ai https://s508159127.t.eloqua.com https://ssl.google-analytics.com https://www.google-analytics.com https://.evidon.com https://img03.en25.com https://js.adsrvr.org https://snap.licdn.com https://view.ceros.com https://siteintercept.qualtrics.com https://.siteintercept.qualtrics.com https://secure.quantserve.com https://.pub.sfmc-content.com https://rules.quantcount.com https://.adsrvr.org https://snap.licdn.com https://widget.trustpilot.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://.crazyegg.com https://bat.bing.com;connect-src https://www.googletagmanager.com https://www.google-analytics.com https://ui.customsearch.ai https://s508159127.t.eloqua.com https://*.evidon.com https://cdn.linkedin.oribi.io https://siteintercept.qualtrics.com https://rules.quantcount.com http [TRUNCATED] X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-05-07 23:18:16 UTC	13435	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 66 75 6e 63 74 69 6f 6e 20 5f 69 6e 73 74 61 6e 63 65 6f 66 28 65 2c 74 29 7b 69 66 28 74 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 5b 53 79 6d 62 6f 6c 2e 68 61 73 49 6e 73 74 61 6e 63 65 5d 29 7b 72 65 74 75 72 6e 21 21 74 5b 53 79 6d 62 6f 6c 2e 68 61 73 49 6e 73 74 61 6e 63 65 5d 28 65 29 7d 65 6c 73 65 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 5f 6f 66 28 65 29 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /function _instanceof(e,t){if(t!=null&&typeof Symbol!=="undefined"&&t[Symbol.hasInstance]){return!!t[Symbol.hasInstance](e)}else{return e instanceof t}}function _type_of(e)
2024-05-07 23:18:16 UTC	2563	IN	Data Raw: 2c 6e 75 6c 6c 2c 74 29 7d 2c 73 65 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 66 28 65 29 2c 6e 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 26 26 67 26 26 21 53 5b 74 2b 22 20 22 5d 26 26 28 21 76 7c 7c 21 76 2e 74 65 73 74 28 74 29 29 26 26 28 21 6d 7c 7c 21 6d 2e 74 65 73 74 28 74 29 29 29 74 72 79 7b 76 61 72 20 72 3d 79 2e 63 61 6c 6c 28 65 2c 74 29 3b 69 66 28 72 7c 7c 6e 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 7c 7c 65 2e 64 6f 63 75 6d 65 6e 74 26 26 31 31 21 3d 3d 65 2e 64 6f 63 75 6d 65 6e 74 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 72 7d 63 61 74 63 68 28 65 29 7b 53 28 74 2c 21 30 29 7d 72 65 74 75 72 6e 20 30 3c 73 65 28 74 2c 70 2c 6e 75 6c 6c 2c 5b 65 5d Data Ascii: ,null,t)},se.matchesSelector=function(e,t){if(f(e),n.matchesSelector&&g&&!S[t+" "]&&(!v\|\|!v.test(t))&&(!m\|\|!m.test(t)))try{var r=y.call(e,t);if(r\|\|n.disconnectedMatch\|\|e.document&&11!==e.document.nodeType)return r}catch(e){S(t,!0)}return 0<se(t,p,null,[e]
2024-05-07 23:18:16 UTC	16384	IN	Data Raw: 2e 73 6c 69 63 65 28 2d 72 2e 6c 65 6e 67 74 68 29 3d 3d 3d 72 3a 22 7e 3d 22 3d 3d 3d 6e 3f 2d 31 3c 28 22 20 22 2b 69 2e 72 65 70 6c 61 63 65 28 50 2c 22 20 22 29 2b 22 20 22 29 2e 69 6e 64 65 78 4f 66 28 72 29 3a 22 7c 3d 22 3d 3d 3d 6e 26 26 28 69 3d 3d 3d 72 7c 7c 69 2e 73 6c 69 63 65 28 30 2c 72 2e 6c 65 6e 67 74 68 2b 31 29 3d 3d 3d 72 2b 22 2d 22 29 29 7d 7d 2c 43 48 49 4c 44 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 72 2c 69 2c 6f 29 7b 76 61 72 20 61 3d 22 6e 74 68 22 21 3d 3d 74 2e 73 6c 69 63 65 28 30 2c 33 29 2c 73 3d 22 6c 61 73 74 22 21 3d 3d 74 2e 73 6c 69 63 65 28 2d 34 29 2c 6c 3d 22 6f 66 2d 74 79 70 65 22 3d 3d 3d 6e 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 69 26 26 30 3d 3d 3d 6f 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 Data Ascii: .slice(-r.length)===r:"~="===n?-1<(" "+i.replace(P," ")+" ").indexOf(r):"\|="===n&&(i===r\|\|i.slice(0,r.length+1)===r+"-"))}},CHILD:function e(t,n,r,i,o){var a="nth"!==t.slice(0,3),s="last"!==t.slice(-4),l="of-type"===n;return 1===i&&0===o?function(e){retur
2024-05-07 23:18:16 UTC	16384	IN	Data Raw: 6f 6e 28 29 7b 74 68 72 6f 77 20 74 7d 29 29 7d 3b 76 61 72 20 5f 3d 78 2e 44 65 66 65 72 72 65 64 28 29 3b 66 75 6e 63 74 69 6f 6e 20 50 28 29 7b 6d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 50 29 2c 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 50 29 2c 78 2e 72 65 61 64 79 28 29 7d 78 2e 66 6e 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 5f 2e 74 68 65 6e 28 65 29 5b 22 63 61 74 63 68 22 5d 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 78 2e 72 65 61 64 79 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 29 29 2c 74 68 69 73 7d 2c 78 2e 65 78 74 65 6e 64 28 7b 69 73 52 65 61 64 79 3a 21 31 2c 72 65 61 64 79 57 61 69 Data Ascii: on(){throw t}))};var _=x.Deferred();function P(){m.removeEventListener("DOMContentLoaded",P),e.removeEventListener("load",P),x.ready()}x.fn.ready=function(e){return _.then(e)["catch"]((function(e){x.readyException(e)})),this},x.extend({isReady:!1,readyWai
2024-05-07 23:18:16 UTC	16384	IN	Data Raw: 31 3c 66 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6d 26 26 21 70 2e 63 68 65 63 6b 43 6c 6f 6e 65 26 26 42 65 2e 74 65 73 74 28 6d 29 29 72 65 74 75 72 6e 20 65 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 6f 3d 65 2e 65 71 28 69 29 3b 76 26 26 28 74 5b 30 5d 3d 6d 2e 63 61 6c 6c 28 74 68 69 73 2c 69 2c 6f 2e 68 74 6d 6c 28 29 29 29 2c 6a 65 28 6f 2c 74 2c 6e 2c 72 29 7d 29 29 3b 69 66 28 66 26 26 28 61 3d 28 69 3d 62 65 28 74 2c 65 5b 30 5d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 21 31 2c 65 2c 72 29 29 2e 66 69 72 73 74 43 68 69 6c 64 2c 31 3d 3d 3d 69 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 26 26 28 69 3d 61 29 2c 61 7c 7c 72 29 29 7b 66 6f 72 28 6c 3d 28 73 3d 78 2e 6d 61 70 28 6d 65 28 69 2c Data Ascii: 1<f&&"string"==typeof m&&!p.checkClone&&Be.test(m))return e.each((function(i){var o=e.eq(i);v&&(t[0]=m.call(this,i,o.html())),je(o,t,n,r)}));if(f&&(a=(i=be(t,e[0].ownerDocument,!1,e,r)).firstChild,1===i.childNodes.length&&(i=a),a\|\|r)){for(l=(s=x.map(me(i,
2024-05-07 23:18:16 UTC	16384	IN	Data Raw: 2c 78 2e 65 61 63 68 28 5b 22 74 6f 67 67 6c 65 22 2c 22 73 68 6f 77 22 2c 22 68 69 64 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 78 2e 66 6e 5b 74 5d 3b 78 2e 66 6e 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 69 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 7c 7c 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3a 74 68 69 73 2e 61 6e 69 6d 61 74 65 28 75 74 28 74 2c 21 30 29 2c 65 2c 72 2c 69 29 7d 7d 29 29 2c 78 2e 65 61 63 68 28 7b 73 6c 69 64 65 44 6f 77 6e 3a 75 74 28 22 73 68 6f 77 22 29 2c 73 6c 69 64 65 55 70 3a 75 74 28 22 68 69 64 65 22 29 2c 73 6c 69 64 65 54 6f 67 67 6c 65 3a 75 74 28 22 74 6f 67 67 6c 65 22 29 2c 66 61 64 Data Ascii: ,x.each(["toggle","show","hide"],(function(e,t){var n=x.fn[t];x.fn[t]=function(e,r,i){return null==e\|\|"boolean"==typeof e?n.apply(this,arguments):this.animate(ut(t,!0),e,r,i)}})),x.each({slideDown:ut("show"),slideUp:ut("hide"),slideToggle:ut("toggle"),fad
2024-05-07 23:18:17 UTC	16384	IN	Data Raw: 26 26 65 29 29 7d 7d 29 29 2c 78 2e 61 6a 61 78 50 72 65 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 2e 68 65 61 64 65 72 73 29 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 28 65 2e 63 6f 6e 74 65 6e 74 54 79 70 65 3d 65 2e 68 65 61 64 65 72 73 5b 74 5d 7c 7c 22 22 29 7d 29 29 2c 78 2e 5f 65 76 61 6c 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 78 2e 61 6a 61 78 28 7b 75 72 6c 3a 65 2c 74 79 70 65 3a 22 47 45 54 22 2c 64 61 74 61 54 79 70 65 3a 22 73 63 72 69 70 74 22 2c 63 61 63 68 65 3a 21 30 2c 61 73 79 6e 63 3a 21 31 2c 67 6c 6f 62 61 6c 3a 21 31 2c 63 6f 6e 76 65 72 74 65 72 73 3a 7b 22 74 65 78 Data Ascii: &&e))}})),x.ajaxPrefilter((function(e){var t;for(t in e.headers)"content-type"===t.toLowerCase()&&(e.contentType=e.headers[t]\|\|"")})),x._evalUrl=function(e,t,n){return x.ajax({url:e,type:"GET",dataType:"script",cache:!0,async:!1,global:!1,converters:{"tex
2024-05-07 23:18:17 UTC	16384	IN	Data Raw: 79 43 6c 61 73 73 4e 61 6d 65 28 22 6d 65 6e 75 2d 69 74 65 6d 73 2d 73 75 62 2d 6c 69 73 74 22 29 3b 76 61 72 20 66 6f 6f 74 65 72 4c 69 6e 6b 73 4d 65 6e 75 49 74 65 6d 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 66 6f 6f 74 65 72 2d 6c 69 6e 6b 73 5f 5f 6d 65 6e 75 2d 69 74 65 6d 22 29 3b 76 61 72 20 61 63 63 6f 72 64 69 6f 6e 48 65 61 64 69 6e 67 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 61 63 63 6f 72 64 69 6f 6e 5f 5f 69 74 65 6d 2d 68 65 61 64 69 6e 67 22 29 3b 76 61 72 20 73 65 61 72 63 68 49 6e 70 75 74 54 61 67 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 65 61 72 63 68 49 6e 70 75 74 54 61 Data Ascii: yClassName("menu-items-sub-list");var footerLinksMenuItem=document.getElementsByClassName("footer-links__menu-item");var accordionHeadings=document.getElementsByClassName("accordion__item-heading");var searchInputTag=document.getElementById("searchInputTa
2024-05-07 23:18:17 UTC	1024	IN	Data Raw: 22 7d 69 66 28 61 29 7b 61 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 22 7d 69 66 28 73 29 7b 73 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 7d 7d 69 66 28 73 65 61 72 63 68 42 75 74 74 6f 6e 26 26 73 65 61 72 63 68 42 6f 78 29 7b 73 65 61 72 63 68 42 6f 78 4d 6f 64 61 6c 3d 66 61 6c 73 65 3b 6e 61 76 69 67 61 74 69 6f 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 73 65 61 72 63 68 2d 6f 70 65 6e 22 29 3b 73 65 61 72 63 68 42 75 74 74 6f 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 73 65 61 72 63 68 2d 6f 70 65 6e 22 29 3b 73 65 61 72 63 68 42 6f 78 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 73 65 61 72 63 68 2d 6f 70 65 6e 22 29 3b 6e 61 76 69 67 61 74 Data Ascii: "}if(a){a.style.display="inline-block"}if(s){s.style.display="none"}}if(searchButton&&searchBox){searchBoxModal=false;navigation.classList.remove("search-open");searchButton.classList.remove("search-open");searchBox.classList.remove("search-open");navigat
2024-05-07 23:18:17 UTC	16384	IN	Data Raw: 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 22 7d 7d 7d 65 6c 73 65 7b 66 6f 72 28 76 61 72 20 73 3d 30 3b 73 3c 6d 65 6e 75 49 74 65 6d 73 54 6f 70 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 6d 65 6e 75 49 74 65 6d 73 54 6f 70 5b 73 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 6d 65 6e 75 2d 61 63 74 69 76 65 22 29 7d 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 6d 65 6e 75 2d 61 63 74 69 76 65 22 29 3b 73 65 6c 65 63 74 65 64 4d 65 6e 75 49 74 65 6d 3d 6e 3b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 22 74 72 75 65 22 29 3b 72 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 22 74 72 75 65 22 29 3b 72 2e 73 65 74 41 Data Ascii: nline-block"}}}else{for(var s=0;s<menuItemsTop.length;s++){menuItemsTop[s].classList.remove("menu-active")}e.currentTarget.classList.add("menu-active");selectedMenuItem=n;t.setAttribute("aria-expanded","true");r.setAttribute("aria-expanded","true");r.setA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49742	99.86.38.11	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:16 UTC	484	OUT	GET /eh96rkuu9740/6cd605275a334a6ab1ececf7415627f0/9eed86d3c59e67c8456e0f57d75ffe82/target-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:16 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1201 Connection: close ETag: "e3d2183ee1c18406d283d179f2456cad" Last-Modified: Fri, 12 Apr 2024 14:28:34 GMT Date: Tue, 07 May 2024 23:18:15 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: Fgtymr83H6bEL8Y1MHOK4IER1Zkt9HCZIpWH9qufQfaumwcWcvm_qQ== Age: 1
2024-05-07 23:18:16 UTC	1201	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 37 30 20 33 33 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 32 30 35 62 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 38 35 2c 33 30 35 2e 32 32 61 33 2e 38 2c 33 2e 38 2c 30 2c 30 2c 31 2d 33 2e 38 2d 33 2e 38 56 32 37 34 2e 38 39 6c 2d 33 2d 2e 31 39 41 31 31 30 2c 31 31 30 2c 30 2c 30 2c 31 2c 37 35 2e 34 2c 31 37 31 2e 37 39 6c 2d 2e 31 39 2d 33 48 34 38 2e 35 36 61 33 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M185,305.22a3.8,3.8,0,0,1-3.8-3.8V274.89l-3-.19A110,110,0,0,1,75.4,171.79l-.19-3H48.56a3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49741	99.86.38.11	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:16 UTC	441	OUT	GET /eh96rkuu9740/2sbDjiRdHpvTtxGaLuZ8rN/25556300175ed902a13b05f86f3e304c/gilardi_logo.svg HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:16 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 8369 Connection: close Date: Tue, 07 May 2024 23:18:16 GMT Last-Modified: Mon, 06 Sep 2021 09:26:41 GMT ETag: "c5e87db7e623044f6b3c0a13ed348832" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 42ef990e439ae115ff739f04e3945234.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: p1PhrLx2ne8RN-b5wFaPX58jlHZfWyiThRZrJ-3nA60ZD-KNPGRxPA== Age: 1
2024-05-07 23:18:16 UTC	8369	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 37 2e 30 36 20 37 33 2e 38 35 22 3e 3c 74 69 74 6c 65 3e 47 69 6c 61 72 64 69 5f 4c 6f 67 6f 5f 42 6c 61 63 6b 5f 48 69 67 68 52 65 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 32 35 37 2e 35 37 2c 35 34 32 2e 31 39 61 35 2e 33 32 2c 35 2e 33 32 2c 30 2c 30 2c 31 2c 31 2e 39 33 2d 33 2e 39 31 2c 31 31 2e 39 31 2c 31 31 2e 39 31 2c 30 2c 30 2c 31 2c 32 2e 33 35 2d 31 2e 36 31 63 2d 31 2e 35 37 2d 31 2d 32 2e 32 38 2d 32 2d 32 2e 33 2d 33 2e 32 2c 30 2d 31 2e 38 31 2c 32 2e 32 33 2d 33 2e 39 33 2c 34 2e 33 39 2d 33 2e 39 33 2c 32 2e 35 38 2c 30 2c 34 2c 31 2e 36 33 2c 34 2c 33 2e 32 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 157.06 73.85"><title>Gilardi_Logo_Black_HighRes</title><path d="M257.57,542.19a5.32,5.32,0,0,1,1.93-3.91,11.91,11.91,0,0,1,2.35-1.61c-1.57-1-2.28-2-2.3-3.2,0-1.81,2.23-3.93,4.39-3.93,2.58,0,4,1.63,4,3.2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49743	99.86.38.11	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:16 UTC	487	OUT	GET /eh96rkuu9740/04139ec921c04b6394616c7a40f48da6/dd23ce4ffccade0fe0b6f6af64d3c548/checklist-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:16 UTC	529	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1683 Connection: close ETag: "15212d30489234794bef381f334a2cb0" Last-Modified: Fri, 19 Apr 2024 16:10:20 GMT Date: Tue, 07 May 2024 23:18:16 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 adc2002956acc4d61bfbf3b973fdf246.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: aMUHda2rmHHgkjPQXDkNoFCq3EphO-r4yD_c9Vd6izZEbPMaQeE9uA==
2024-05-07 23:18:16 UTC	1683	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 37 30 20 33 33 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 32 30 35 62 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 78 3d 22 31 31 30 2e 31 38 22 20 79 3d 22 32 30 30 2e 33 36 22 20 77 69 64 74 68 3d 22 39 2e 36 22 20 68 65 69 67 68 74 3d 22 39 2e 36 22 2f 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 78 3d 22 31 31 30 2e 31 38 22 20 79 3d 22 31 36 38 2e 30 38 22 20 77 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><rect class="cls-1" x="110.18" y="200.36" width="9.6" height="9.6"/><rect class="cls-1" x="110.18" y="168.08" w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49744	99.86.38.13	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:16 UTC	672	OUT	GET /eh96rkuu9740/2Cpsx0dFpuasUFp8YANLmZ/cad4a1a0a1335e1e8dfad49ec6f5531d/logo-gcp.png HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:17 UTC	503	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2960 Connection: close Date: Tue, 07 May 2024 23:18:18 GMT Last-Modified: Mon, 24 Apr 2023 15:51:09 GMT ETag: "54d8963f2b634b37abaea0025f1079ff" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 1002c05e647d0804e83147cdd205d14a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: dLTZs87YHjask2F_iKr-ezEpKbSywoZikbJV08lKb5WxqjqmsAb9UQ==
2024-05-07 23:18:17 UTC	2960	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 44 00 00 00 5a 04 03 00 00 00 ab 8d 54 ab 00 00 00 30 50 4c 54 45 f1 f1 f1 e2 e7 e6 d3 dd dc c4 d3 d1 b4 c9 c6 a5 bf bc 96 b5 b1 87 ab a6 78 a2 9c 69 98 91 5a 8e 86 4b 84 7c 3b 7a 71 2c 70 66 1d 66 5c 0e 5c 51 ad 63 a8 1d 00 00 0b 1b 49 44 41 54 78 da ed 9b 4d 8c 1c c5 15 c7 ff b3 33 bb 8c 3d 36 74 24 63 4c 82 c9 1c 50 02 8a 84 47 82 43 50 12 33 24 2b 3e 24 94 dd dc a2 7c c0 38 70 70 12 01 0b 5c 72 09 19 87 0f b5 d9 90 35 26 51 90 1c e2 3d a0 80 84 c0 6b 91 20 a3 4d 58 1b 10 01 72 d8 25 0e 8e a3 48 19 cc 46 04 8b 43 2f de f5 7c f5 74 ff 73 a8 ea 8f aa fe 98 19 85 35 44 e9 ba ec 4e cf eb f7 aa 7f 5d f5 ea bd 57 35 60 d6 fa 34 64 08 32 44 19 a2 0c 51 86 28 43 94 21 ca 10 65 2d 43 94 21 ca 10 65 88 32 Data Ascii: PNGIHDRDZT0PLTExiZK\|;zq,pff\\QcIDATxM3=6t$cLPGCP3$+>$\|8pp\r5&Q=k MXr%HFC/\|ts5DN]W5`4d2DQ(C!e-C!e2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49747	99.86.38.11	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:17 UTC	487	OUT	GET /eh96rkuu9740/5b560a5e95534bfdab06d2bf9d9c8622/8adc9b8b9e39e7b77e9b37986e331de4/lightbulb-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:17 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2679 Connection: close ETag: "b430847f6311dc4f4ad88ee5103142b0" Last-Modified: Fri, 05 Apr 2024 11:29:22 GMT Date: Tue, 07 May 2024 23:18:16 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 42ef990e439ae115ff739f04e3945234.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: BKnBN50_9sKzUgFVik6lEGcrn1MoW-C5kIPGCG18xoPNJc11HfZv2w== Age: 1
2024-05-07 23:18:17 UTC	2679	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 37 30 20 33 33 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 32 30 35 62 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 32 31 36 2e 36 32 2c 32 36 39 2e 33 48 31 35 33 2e 33 38 61 33 2e 38 2c 33 2e 38 2c 30 2c 31 2c 30 2c 30 2c 37 2e 35 39 68 36 33 2e 32 34 61 33 2e 38 2c 33 2e 38 2c 30 2c 31 2c 30 2c 30 2d 37 2e 35 39 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M216.62,269.3H153.38a3.8,3.8,0,1,0,0,7.59h63.24a3.8,3.8,0,1,0,0-7.59Z"/><path class="cls

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49746	99.86.38.11	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:17 UTC	482	OUT	GET /eh96rkuu9740/24ada858e0424dc9a6fe522196881460/163c84ee9d3bddfeb1bbc9125472cd0f/lock-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:17 UTC	513	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 505 Connection: close ETag: "8df29f3dfb8749f21c310266998baed8" Last-Modified: Mon, 08 Apr 2024 15:36:48 GMT Date: Tue, 07 May 2024 23:18:16 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 d16c3f15bd14953a9d4109eaaa991de2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: ScHoeyTFBEJlJHN7czMVrCu78A81QbZMbtQH77WIbDUfCZ08TF_T6Q== Age: 1
2024-05-07 23:18:17 UTC	505	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 37 30 20 33 33 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 32 30 35 62 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 38 35 2c 31 38 32 2e 34 61 38 2e 36 31 2c 38 2e 36 31 2c 30 2c 30 2c 30 2d 34 2e 37 38 2c 31 35 2e 37 39 2c 34 2e 32 2c 34 2e 32 2c 30 2c 30 2c 30 2d 2e 30 36 2e 36 31 76 31 38 2e 33 33 61 35 2c 35 2c 30 2c 30 2c 30 2c 31 30 2c 30 56 31 39 38 2e 38 61 35 2e Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M185,182.4a8.61,8.61,0,0,0-4.78,15.79,4.2,4.2,0,0,0-.06.61v18.33a5,5,0,0,0,10,0V198.8a5.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49745	99.86.38.11	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:17 UTC	499	OUT	GET /eh96rkuu9740/fffccb33654140bda7841d0e2fed9270/fd33b7f34c9c59ef94b94c31d7fce115/partnership-handshake-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:17 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1925 Connection: close ETag: "8e0883afb6bc509d126ef46399686e40" Last-Modified: Thu, 02 May 2024 09:23:47 GMT Date: Tue, 07 May 2024 23:18:16 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1949caaabae48a894fcd770a3e1384f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: ynAnn1dH0BpPbkom0W1gS7fDT1p75q1Dw_4XWKxM1d8Bc-99DhKfSw== Age: 1
2024-05-07 23:18:17 UTC	1925	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 37 30 20 33 33 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 32 30 35 62 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 34 38 2e 33 33 2c 31 38 36 2e 32 39 61 35 2e 38 2c 35 2e 38 2c 30 2c 31 2c 31 2c 35 2e 37 38 2d 35 2e 38 41 35 2e 38 2c 35 2e 38 2c 30 2c 30 2c 31 2c 34 38 2e 33 33 2c 31 38 36 2e 32 39 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M48.33,186.29a5.8,5.8,0,1,1,5.78-5.8A5.8,5.8,0,0,1,48.33,186.29Z"/><path class="cls-1" d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49749	99.86.38.13	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:17 UTC	688	OUT	GET /eh96rkuu9740/92430c33e214475385fd3a25214e2f30/bf6e82bf958a8707c4e7d2fcbc11343b/solid-kcc-teal.svg HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:18 UTC	506	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 488 Connection: close Date: Tue, 07 May 2024 23:18:18 GMT Last-Modified: Wed, 15 Sep 2021 04:11:08 GMT ETag: "94867036e5b64acf26ad33ad59016c38" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: FjD6Tz_Nu0bsoNnLy0vC0nZBMMeVRycTaySAdpNnM1tmCrKWVYmMOA==
2024-05-07 23:18:18 UTC	488	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 35 2e 34 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 25.4.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49750	99.86.38.13	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:17 UTC	684	OUT	GET /eh96rkuu9740/5e5bdf7536d04306a8b16efabf3fe8e0/0a1e6991a00de59e643f09b6d204322a/solid-navy.svg HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:17 UTC	506	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 488 Connection: close Date: Tue, 07 May 2024 23:18:18 GMT Last-Modified: Wed, 15 Sep 2021 04:20:37 GMT ETag: "fc53568457bd3e8c3215da1667f01985" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 6ca7826fb0f4c565b1af9c7737725c48.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: 316GC7Z0crx3CNrPFk1rRfp7OmcQeMr1QJ2ayJ8jXs1LPalghyhVGQ==
2024-05-07 23:18:17 UTC	488	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 35 2e 34 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 25.4.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49752	99.86.38.11	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:17 UTC	477	OUT	GET /eh96rkuu9740/c9117c1092534fcc9273232233df0c5b/cd4bbb343e36272e3e0525f13b2ce9f7/Welcome.jpg?w=1920&h=850&fit=fill&f=center HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:17 UTC	513	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 146051 Connection: close ETag: "a9115978e0c5c7b81af2c985b9f42540" Last-Modified: Tue, 30 Apr 2024 21:11:33 GMT Date: Tue, 07 May 2024 23:18:16 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 599f04a365a179d553682d476509c388.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: 7_0JwOOeVHN9wK4NQlm0nnKolepnVa4XUHVe2X6CkNZY8cv7ejQJTA== Age: 1
2024-05-07 23:18:17 UTC	9594	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 2c 01 2c 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 cf 00 06 00 03 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: JFIF,,@ICC_PROFILE0ADBEmntrRGB XYZ acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-05-07 23:18:17 UTC	16384	IN	Data Raw: 2d 30 47 59 2b 15 b9 16 a8 b4 00 b0 ad 1b 76 e7 ee 8c d5 d6 36 07 aa d2 1d 13 d1 50 c2 33 84 0c 24 05 2d 10 b8 f5 dc 28 b0 d0 64 fa ec 98 61 ed 33 2a 25 4a c7 48 5a 13 31 f1 b1 54 58 65 72 06 e9 e1 31 66 8d d9 69 f4 55 3d 2e 53 bb 05 4d d3 56 59 59 ae ea 8a 53 07 e4 ae aa 0a b4 83 8e ca a6 29 56 b5 0e e8 89 8c db ad 3c 3c 1c 22 30 ef 34 ae 49 20 29 b5 71 93 52 99 a6 e8 2b 72 a1 aa 81 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 1d 48 4d 46 a9 7d 2c 76 7a 33 21 8c c7 45 cf f1 a7 4f 6a 30 10 69 d1 d9 04 84 88 40 94 c4 13 84 0e 3b a0 cc d6 b4 56 ea 54 0b 98 22 b3 76 3d d4 4a e6 ac 6f 6b 59 d5 2d 32 ca b4 fe eb 39 8b 2b d9 bd 93 ea 97 06 d8 d7 ba a8 45 a7 89 cd 46 86 c0 ba 3d e3 e8 3b 77 5e 3f 97 99 bb 3d Data Ascii: -0GY+v6P3$-(da3*%JHZ1TXer1fiU=.SMVYYS)V<<"04I )qR+r@ @ @ @ HMF},vz3!EOj0i@;VT"v=JokY-29+EF=;w^?=
2024-05-07 23:18:17 UTC	8304	IN	Data Raw: cc 70 37 9a 7d 7b 1a 85 95 58 5a 47 58 c2 e9 2e a6 ab 2a a1 02 87 10 a0 91 95 dc d3 ba 98 ba bd 6d a9 be 9f e6 2b 39 87 b6 c5 9e b5 d3 9a 3e 69 a6 37 ac 78 81 ec 88 7c fc d3 0f 4d fb 4e 21 a7 54 00 f8 51 75 70 9b 7b b1 82 32 86 c5 7a fa 35 3a 83 0d 05 58 b8 e7 f5 5e 0d b7 b8 97 78 70 ef d4 dc 23 36 63 93 d4 38 42 e6 d8 93 4b ce de c7 05 5d fe d3 cb 16 bd a5 6b 67 16 d4 a6 e6 11 dc 2d 4b 28 85 50 03 08 35 74 bd 4d d6 ee 6b 49 c2 e7 66 0e f3 42 e2 1f 0d cd 21 f8 53 07 a7 f0 ff 00 10 b6 b3 03 79 b7 f5 59 ab 1d 23 db 4e ee 96 20 92 14 69 ca 6b 5a 5c 73 79 7e 70 aa 57 15 a9 69 a1 8e 76 16 e5 1c ed cd a4 13 85 51 99 73 6d cb 38 52 8c 9b 96 f2 13 d9 4a 2a d1 ab 0f fe e8 57 5b a2 54 e6 e4 95 a4 7a 77 0e 43 9a c5 85 75 4f b3 15 69 60 74 ea a2 eb 95 d7 34 83 04 86 Data Ascii: p7}{XZGX.m+9>i7x\|MN!TQup{2z5:X^xp#6c8BK]kg-K(P5tMkIfB!SyY#N ikZ\sy~pWivQsm8RJW[TzwCuOi`t4
2024-05-07 23:18:17 UTC	16384	IN	Data Raw: 9d 20 18 4c 7c fb 94 74 e6 2f e9 d4 1c fa a2 44 34 7d ca e7 6b d5 cc 77 3a 49 2c e4 a6 dc 37 ac 75 5c 2f 97 ab 98 f5 2e 0d bc a5 66 5a ea 8e e5 66 0c 4e eb cd df 3a f7 70 f6 9e 18 d6 eb de d3 ff 00 d3 bd d4 28 60 08 c1 72 e1 66 78 7a a4 9f af 50 e1 0a af b9 7b 18 d6 92 0b b6 6e e4 f7 59 e7 6f 84 f9 24 93 5e a1 a7 d2 b6 a4 d1 4a a5 33 7b 70 d6 f9 81 77 92 9f c4 ff 00 60 bd 5c c9 1f 2b bb d5 f3 3c 45 7a b6 d4 ab be a3 ef 9f e1 52 6e 45 26 88 e6 f4 68 0a 66 df f6 6b 6c 9f e8 e5 b5 cd 0e ae a2 f2 ea 36 5c d5 1f 8a 4e 1b b1 a3 a0 ff 00 aa 79 ae b2 c9 ee bc d7 88 f4 aa c2 e6 ab 1f 70 2e eb b1 bc af ab 50 99 a3 07 a1 db e9 b2 e5 7c 57 7e 73 37 11 e8 ce 16 95 18 2e 2a 73 d5 69 e6 1f 9c 3b b7 9b bf a2 c2 59 be 9e 91 a7 dd 3a e2 8b 5f 4a dd ce 63 5b ca e7 17 12 01 Data Ascii: L\|t/D4}kw:I,7u\/.fZfN:p(`rfxzP{nYo$^J3{pw`\+<EzRnE&hfkl6\Nyp.P\|W~s7.*si;Y:_Jc[
2024-05-07 23:18:17 UTC	2804	IN	Data Raw: 46 d3 3c c1 22 63 aa 0a 17 4f 2e 71 6e dd 56 a3 34 94 a5 ee 91 e5 8e 85 54 0e a6 ef 12 59 93 de 77 45 35 e2 19 39 9f 54 82 3e 50 03 5d d6 56 84 cc 71 31 02 67 b2 2c 68 d8 0f e6 b4 18 1d 65 65 d2 47 43 69 4c d5 61 2c 74 19 c0 4d 6b 17 e9 58 02 f6 82 49 20 4b 9c 15 d6 bf 17 6d ec 80 12 e6 80 0e e3 d1 67 51 6a a5 98 23 95 a0 96 ec d7 9c 02 a6 ac 4d 4a c3 f9 41 c5 a0 09 83 27 af 75 56 f9 4f 4a dd 82 5a e6 89 06 67 b1 5a 8c a5 e4 77 31 6c 40 89 02 71 0a ae 2e d0 0d 7e 08 31 f5 85 3f 55 6a a5 33 06 09 07 78 3d 15 10 92 4b 09 78 13 3d 36 2a 0a 37 2e 1c d0 0c 4f 6d d6 93 15 de e6 ce 73 8e a1 45 88 ab 55 e7 31 ca 70 3a 15 70 54 aa 49 71 9c 09 c2 8b a5 b7 a8 68 80 08 95 9b 1a d4 f7 20 54 2d 59 c3 71 4d ec 75 39 1f 70 98 bf 65 61 d4 6e 7b a6 1a 99 95 1f 46 a5 37 32 Data Ascii: F<"cO.qnV4TYwE59T>P]Vq1g,heeGCiLa,tMkXI KmgQj#MJA'uVOJZgZw1l@q.~1?Uj3x=Kx=6*7.OmsEU1p:pTIqh T-YqMu9pean{F72
2024-05-07 23:18:17 UTC	16384	IN	Data Raw: ff 00 b3 b0 d0 6a 53 6d 16 50 35 21 ad 77 9c 9d d8 3b 2c b3 d6 fb 76 36 da 8b 6b 56 60 7b b9 29 d3 20 d1 69 c4 0e e4 7f 65 bd 71 cf 0d dd 0b 89 db 56 fe ad cb 8b 5e da 6d f0 db 1b bb e1 e8 bb 71 df 9d 72 f9 3e 1f f5 fa c6 bd e6 b7 4d f5 ad 6d 01 e7 af 55 fe 35 56 fa 0e 9f 58 5b eb bd f0 e5 c7 c5 72 f5 f9 3d 2c dc 6a 0e 1a 55 d8 73 f1 4e 98 79 00 60 05 ad bf 5b 18 9c 4f bc f1 ed b5 6d 50 57 a5 4c 8e 52 1c 27 98 f5 5d a7 98 f3 d9 96 a0 bc b6 6d cd 07 b2 a3 1a e6 3b ca e6 38 60 8e cb 37 cf 86 b9 f1 5f 3c fb 51 f6 56 ed 11 f5 75 1d 32 89 7d 81 97 54 a2 d1 26 97 a8 ee 3f a2 f0 fc 9c 67 97 d1 f8 fb 9d 4f 2f 16 d4 ad 19 50 1c 05 ce 3a df 2e 7e b6 92 1a 65 bd d7 4d 73 c5 dd 3a fd d6 30 0e cb 16 0d 87 6b 8c aa c8 90 b3 95 bd 65 dd dc 83 26 53 d2 6b 2a ea a0 2d 27 Data Ascii: jSmP5!w;,v6kV`{) ieqV^mqr>MmU5VX[r=,jUsNy`[OmPWLR']m;8`7_<QVu2}T&?gO/P:.~eMs:0ke&Sk*-'
2024-05-07 23:18:17 UTC	13895	IN	Data Raw: 12 39 55 88 e4 75 1d 2e 09 c2 dc 2b 02 f3 4d 04 19 68 55 1c e6 a7 a6 b9 8e 90 13 d2 b2 8b 1c cd c4 2d 22 5a 17 4e a4 64 15 2c 1b d6 3a bc 00 0c ca cf 91 d0 58 6b 05 a4 79 8f d5 51 d5 69 7c 48 ea 65 be 68 59 c1 d9 69 3c 4e 31 e6 f9 92 b0 3a 9b 0d 72 9d c0 12 ee 62 8a d3 9a 75 c6 0c 92 8d 2a 5d e9 fc f3 19 28 96 32 2e 74 b7 34 e0 61 19 51 75 9d 5a 44 c0 ca 06 87 54 a4 7a c2 09 e9 de 3c 63 64 54 a2 e8 9d fe 68 89 59 57 6f e8 8b a9 da f0 7e 48 ba 08 99 c2 08 9f 48 3d 05 6a d6 80 cc 04 15 2a 59 02 08 23 0a 88 4e 9e 23 64 45 4b 8d 28 3a 71 f6 41 99 75 a3 8c f9 55 45 11 a3 79 b6 45 6c 69 9a 41 04 79 4a 9a 3e 6f 5d d0 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 04 0a d1 cc e0 3b a9 7c 2c f2 df 37 f4 f4 fb 20 c6 65 d1 Data Ascii: 9Uu.+MhU-"ZNd,:XkyQi\|HehYi<N1:rbu](2.t4aQuZDTz<cdThYWo~HH=jY#N#dEK(:qAuUEyEliAyJ>o] @ @ @ ;\|,7 e
2024-05-07 23:18:17 UTC	16384	IN	Data Raw: 59 38 65 65 52 d6 e2 73 cb 1c e4 2b 86 a8 3b 5f 3b 97 26 22 85 ef 10 92 0c 39 5c 35 8e eb d7 57 a8 1d 33 95 51 d0 69 9a c3 2d e9 47 55 17 4f a9 c4 2e a8 f3 06 02 62 25 a7 ac 92 3d e4 c5 d5 8a 3a cf 9b 2e 53 29 ab 27 55 0e 18 28 a4 6e a4 27 75 11 2f ef 29 1e f2 29 a6 f8 3b aa 06 3a ee 7a aa 21 75 e1 1d 67 d5 00 db c2 63 28 89 05 c4 f5 51 51 3e ec 8e aa 88 cd ef aa 14 f6 de f5 95 19 3b f1 b9 dd 56 bd a5 6d fc 0d d4 0e a7 7c 4b 86 51 2b 56 ce ee 20 ca 61 1b 16 fa 9e 40 9c ac 9e da 74 6f c1 eb 94 55 a6 5e 8f 8a 28 37 00 f5 41 0d 4a ad 38 41 4e b1 eb ba 0a 95 3b 4a 22 27 01 d9 15 0b c0 01 04 0f df 64 11 bd a0 09 2b 51 10 d4 af 4d 83 79 55 54 ab ea ac 68 81 08 33 2e 75 a0 27 29 88 cb b9 d6 f7 3c df 75 7c 43 58 77 bc 4b 4a 94 cd 49 3d 86 e9 a9 ac 4b ae 26 a9 50 Data Ascii: Y8eeRs+;_;&"9\5W3Qi-GUO.b%=:.S)'U(n'u/));:z!ugc(QQ>;Vm\|KQ+V a@toU^(7AJ8AN;J"'d+QMyUTh3.u')<u\|CXwKJI=K&P
2024-05-07 23:18:17 UTC	394	IN	Data Raw: 54 12 8b 98 8c a0 53 70 63 75 42 78 e4 41 0e 50 06 ac 9d d4 21 af aa 40 90 50 23 2e 09 70 ca 8d 27 15 fd 70 81 45 c6 77 40 f1 73 ea 10 48 2e 48 38 28 1c 2e bd 42 08 6a 5d 3a 46 51 48 6e 5d 28 1a 2e 5c e9 12 8b e0 3a b3 b9 70 72 a7 a4 30 5c 3c 9c 6e ae 2f 83 c5 77 fc 11 0c 75 cb a5 10 a2 e0 a0 78 ae 48 90 10 48 ca c6 36 84 30 e1 54 ca 18 77 e2 08 04 90 81 ad b8 32 81 ef af 1b 04 11 fe 2f 05 02 7e 2e 3a 42 26 25 a5 72 1d ba 18 7b ee 9a d1 ee a2 61 bf 8a 69 e8 86 1b f8 a1 b4 21 94 a2 bb 5d d1 50 3a ab 4f e5 41 5e a1 6c 4f 2a 08 39 83 5d ee ab e4 38 dc 0e a1 4d fe c2 d3 ae c2 72 16 91 6d be 11 fc a8 85 f1 59 4c 18 02 10 c3 5d 5a 90 c9 68 53 0c 46 fa 94 dd 38 09 e4 c4 42 a5 31 b0 45 48 1d 4c 89 84 0c 73 98 08 c2 a7 90 1d 4c 74 08 98 1c ea 67 1c b2 81 b3 4f f4 Data Ascii: TSpcuBxAP!@P#.p'pEw@sH.H8(.Bj]:FQHn](.\:pr0\<n/wuxHH60Tw2/~.:B&%r{ai!]P:OA^lO*9]8MrmYL]ZhSF8B1EHLsLtgO
2024-05-07 23:18:18 UTC	12792	IN	Data Raw: 03 79 25 02 86 11 94 07 2a 03 96 10 29 69 8d d0 0d 71 6a a2 7a 75 8e 32 89 88 ef f4 cb 3d 52 91 a7 73 41 95 1a 44 1e 61 28 6b c7 7d a3 7e cb fc 2f c6 76 f5 09 d3 e8 b6 a3 86 ed 68 0a eb 73 a7 ca be d0 ff 00 61 9b 8d 3d f5 2a e9 2e 7b 5b d1 b1 21 5f 15 76 57 cf 9c 57 ec 37 89 f8 56 a3 fc 6b 17 d5 a6 d3 bb 1a 54 bc 2f d7 fa 70 37 ba 6d 7b 67 16 55 a2 fa 6e 1b 87 36 17 3b cb 36 55 37 50 9c 11 f6 59 c4 31 96 d1 d1 43 1a 96 14 32 31 2a 5f 07 a6 ed 3b 16 d5 a7 90 07 c5 65 55 2b e9 e2 99 3c a8 33 af 2d c3 41 54 62 dc d3 21 c6 16 99 36 d2 a3 a9 d4 13 b2 0e 9a c1 cd b8 e5 6c 49 2b 0d 34 6e 74 b2 c6 03 10 14 d1 94 fb 67 07 10 02 a8 8d f4 7b fd 50 44 69 80 81 1c c1 1f f5 55 4c 14 46 f0 89 80 37 e0 aa 8e 50 4f a2 c8 77 87 19 05 0f 46 16 cf 5f aa 04 e5 cf aa a6 9e ca Data Ascii: y%)iqjzu2=RsADa(k}~/vhsa=.{[!_vWW7VkT/p7m{gUn6;6U7PY1C21*_;eU+<3-ATb!6lI+4ntg{PDiULF7POwF_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49751	13.107.246.70	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:17 UTC	592	OUT	GET /fonts/overpass-variable.ttf HTTP/1.1 Host: www.gilardi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.gilardi.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=Lax
2024-05-07 23:18:18 UTC	2935	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 23:18:17 GMT Content-Type: font/ttf Content-Length: 315752 Connection: close Content-MD5: Z27RNpT2c8S8Ny1+S47X/Q== Last-Modified: Tue, 07 May 2024 05:05:06 GMT ETag: "0x8DC6E5342E93D5B" x-ms-request-id: 8fe974a8-e01e-003d-5ed4-a02e7d000000 x-ms-version: 2018-03-28 x-azure-ref: 20240507T231817Z-17c65945bcbpjwdb5g8cs42cwn00000003yg000000024mq6 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff Referrer-Policy: strict-origin X-XSS-Protection: 1; mode=block Cache-Control: no-store no-cache Set-Cookie: SameSite=Lax;secure;HttpOnly Permissions-Policy: camera=(), microphone=() Content-Security-Policy: worker-src blob: https://.georgeson.com;script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://content-assets.computershare.com https://ui.customsearch.ai https://s508159127.t.eloqua.com https://ssl.google-analytics.com https://www.google-analytics.com https://.evidon.com https://img03.en25.com https://js.adsrvr.org https://snap.licdn.com https://view.ceros.com https://siteintercept.qualtrics.com https://.siteintercept.qualtrics.com https://secure.quantserve.com https://.pub.sfmc-content.com https://rules.quantcount.com https://.adsrvr.org https://snap.licdn.com https://widget.trustpilot.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://.crazyegg.com https://bat.bing.com;connect-src https://www.googletagmanager.com https://www.google-analytics.com https://ui.customsearch.ai https://s508159127.t.eloqua.com https://*.evidon.com https://cdn.linkedin.oribi.io https://siteintercept.qualtrics.com https://rules.quantcount.com http [TRUNCATED] X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-05-07 23:18:18 UTC	13449	IN	Data Raw: 00 01 00 00 00 13 01 00 00 04 00 30 47 44 45 46 8d 34 ed 35 00 01 bb 5c 00 00 0c 2c 47 50 4f 53 32 96 3e 57 00 01 c7 88 00 01 57 bc 47 53 55 42 03 ec fa 02 00 03 1f 44 00 00 15 b8 48 56 41 52 5e 02 22 d5 00 03 34 fc 00 00 0e 6a 4f 53 2f 32 6e 3c be 92 00 01 43 84 00 00 00 60 53 54 41 54 f8 e8 d5 d8 00 03 43 68 00 00 00 b8 63 6d 61 70 78 fa 8e 5e 00 01 43 e4 00 00 3e 20 66 76 61 72 91 1d 79 b0 00 03 44 20 00 00 00 7e 67 61 73 70 00 00 00 10 00 01 bb 54 00 00 00 08 67 6c 79 66 f7 b8 cc 65 00 00 01 3c 00 01 22 8e 67 76 61 72 44 fe 8d 04 00 03 44 a0 00 01 8c c6 68 65 61 64 21 ac 39 44 00 01 2e 58 00 00 00 36 68 68 65 61 0f 1b 06 e1 00 01 43 60 00 00 00 24 68 6d 74 78 13 70 37 6f 00 01 2e 90 00 00 14 d0 6c 6f 63 61 91 9e 49 74 00 01 23 ec 00 00 0a 6a 6d 61 78 Data Ascii: 0GDEF45\,GPOS2>WWGSUBDHVAR^"4jOS/2n<C`STATChcmapx^C> fvaryD ~gaspTglyfe<"gvarDDhead!9D.X6hheaC`$hmtxp7o.locaIt#jmax
2024-05-07 23:18:18 UTC	2563	IN	Data Raw: b6 00 00 ff ff 00 6a ff e8 03 c2 07 6e 02 26 01 18 00 00 00 27 05 04 00 b6 00 0a 00 07 04 fd 00 f6 01 b6 ff ff 00 6a ff e8 03 94 05 9e 02 26 01 18 00 00 00 07 05 05 00 b8 00 00 00 02 00 88 ff e8 03 b2 04 16 00 1d 00 2a 00 00 05 22 26 35 11 33 15 36 36 33 32 16 15 14 06 06 23 22 26 27 15 14 16 33 32 36 37 17 06 06 03 32 36 35 34 26 23 22 06 07 15 16 16 01 f4 b5 b7 a4 3c 97 4f a7 bd 5e ac 74 4b 82 3b 6c 72 4a 9d 43 32 4c c6 38 71 81 74 66 46 8c 36 33 83 18 b9 b7 02 a6 5e 39 3d b7 a1 67 98 53 21 21 48 76 70 36 30 92 33 39 02 1c 65 57 59 65 45 41 b0 1f 25 00 00 03 00 6a ff e8 06 54 04 16 00 34 00 44 00 4c 00 00 05 22 26 26 35 34 36 36 33 32 16 17 35 34 26 23 22 06 07 27 36 36 33 32 16 17 36 36 33 32 16 16 15 14 06 07 21 1e 02 33 32 36 37 17 06 06 23 22 26 27 Data Ascii: jn&'j&*"&536632#"&'32672654&#"<O^tK;lrJC2L8qtfF63^9=gS!!Hvp6039eWYeEA%jT4DL"&&54663254&#"'66326632!3267#"&'
2024-05-07 23:18:18 UTC	16384	IN	Data Raw: 05 0f 00 c0 00 00 00 07 05 01 00 bf 00 00 ff ff 00 6a ff e8 04 17 06 d0 02 26 01 53 00 00 00 27 05 01 00 bf 00 00 00 07 04 fb 01 c3 01 18 ff ff 00 6a ff e8 03 d6 07 80 02 26 01 53 00 00 00 27 05 01 00 bf 00 00 00 07 05 09 00 c4 01 ba ff ff 00 6a ff e8 03 d6 07 30 02 26 01 53 00 00 00 27 05 01 00 bf 00 00 00 07 05 05 00 c1 01 92 ff ff ff b6 ff e8 03 d6 05 b8 02 26 01 53 00 00 00 06 05 0a 1c 00 ff ff 00 6a ff e8 03 d6 05 94 02 26 01 53 00 00 00 07 04 f9 00 be 00 00 ff ff 00 6a ff e8 03 d6 05 8a 02 26 01 53 00 00 00 07 04 fa 00 c0 00 00 ff ff 00 6a fe 74 03 d6 04 16 02 26 01 53 00 00 00 07 05 0f 00 c0 00 00 ff ff 00 6a ff e8 03 d6 05 b8 02 26 01 53 00 00 00 06 04 fb 56 00 ff ff 00 6a ff e8 03 d6 05 c6 02 26 01 53 00 00 00 07 05 09 00 c4 00 00 ff ff 00 6a ff Data Ascii: j&S'j&S'j0&S'&Sj&Sj&Sjt&Sj&SVj&Sj
2024-05-07 23:18:18 UTC	16384	IN	Data Raw: 45 44 8e 78 4a a2 48 6f 3b 3a 6e 48 ff ff 00 68 ff e8 08 7a 05 78 00 26 02 9c 00 00 00 07 02 ad 03 da 00 00 ff ff 00 c4 00 00 07 e2 05 78 00 26 00 60 00 00 00 07 02 ad 03 42 00 00 ff ff 00 74 ff e8 04 28 05 90 02 06 00 cc 00 00 00 02 00 88 ff e8 04 9c 05 90 00 03 00 28 00 00 13 35 21 15 03 22 26 26 02 35 34 12 36 36 33 32 16 16 17 07 2e 02 23 22 0e 02 15 14 1e 02 33 32 36 37 17 0e 02 d4 02 98 a0 9f de 88 3f 41 8a dd 9c 81 b3 71 1f 9c 21 4e 6c 4d 70 9a 5d 29 2e 62 97 69 74 8c 30 a0 24 7c b5 02 6e 9e 9e fd 7a 7c d1 01 02 85 84 01 01 d2 7d 4a 73 3f 50 31 4d 2c 66 a6 c6 60 68 c8 a1 5f 63 4f 3c 4e 80 4c 00 02 00 5e ff e8 04 72 05 90 00 24 00 28 00 00 05 22 26 26 27 37 16 16 33 32 3e 02 35 34 2e 02 23 22 06 06 07 27 3e 02 33 32 16 16 12 15 14 02 06 06 01 35 21 Data Ascii: EDxJHo;:nHhzx&x&`Bt((5!"&&546632.#"3267?Aq!NlMp]).bit0$\|nz\|}Js?P1M,f`h_cO<NL^r$("&&'732>54.#"'>325!
2024-05-07 23:18:18 UTC	16384	IN	Data Raw: ff f0 fe fc 03 b0 05 90 00 03 00 00 01 01 33 01 03 04 fc ec ae 03 12 fe fc 06 94 f9 6c 00 ff ff 00 56 02 32 01 6c 03 44 02 06 04 05 00 00 00 01 00 a6 02 00 02 7a 02 a8 00 03 00 00 13 35 21 15 a6 01 d4 02 00 a8 a8 00 ff ff 00 a6 02 00 02 7a 02 a8 02 06 04 0f 00 00 00 01 00 74 01 f4 03 8a 02 8a 00 03 00 00 13 35 21 15 74 03 16 01 f4 96 96 00 00 01 00 06 01 f4 04 98 02 8a 00 03 00 00 13 35 21 15 06 04 92 01 f4 96 96 00 ff ff 00 06 01 f4 04 98 02 8a 02 06 04 12 00 00 ff ff 00 a6 02 00 02 7a 02 a8 02 06 04 0f 00 00 00 01 ff e2 fe 9c 03 f2 ff 44 00 03 00 00 03 35 21 15 1e 04 10 fe 9c a8 a8 00 00 02 ff e2 fe 04 03 f2 ff d0 00 03 00 07 00 00 07 35 21 15 01 35 21 15 1e 04 10 fb f0 04 10 d8 a8 a8 fe dc a8 a8 ff ff 00 58 fe b0 01 66 02 18 02 07 04 1f 00 00 fb 46 ff Data Ascii: 3lV2lDz5!zt5!t5!zD5!5!5!XfF
2024-05-07 23:18:18 UTC	16384	IN	Data Raw: 1a 15 1f 44 36 4c 83 51 2a 18 15 21 42 36 00 01 00 b0 01 58 04 5c 03 a8 00 05 00 00 01 11 21 35 21 11 03 ac fd 04 03 ac 01 58 01 aa a6 fd b0 00 00 01 00 aa 02 c8 04 60 05 90 00 06 00 00 13 01 33 01 23 01 01 aa 01 88 a4 01 8a b2 fe d8 fe d8 02 c8 02 c8 fd 38 01 ee fe 12 00 03 00 56 00 f6 07 8a 04 94 00 1f 00 2f 00 3f 00 00 25 22 26 26 35 34 36 36 33 32 16 16 17 3e 02 33 32 16 16 15 14 06 06 23 22 26 26 27 0e 02 27 32 36 36 37 2e 02 23 22 06 06 15 14 16 16 21 32 36 36 35 34 26 26 23 22 06 06 07 1e 02 02 24 81 d2 7b 7b d2 81 73 ac 7e 2f 2e 7b aa 75 83 d3 7c 7c d1 81 75 ad 7d 2d 2f 7e ac 65 56 8a 6c 2a 2a 6c 8a 56 56 89 4f 4f 89 03 d2 56 88 4e 4e 88 56 56 8b 6e 29 29 6e 8b f6 6c ce 94 94 cf 6d 57 92 57 5b 91 54 6d cf 94 94 ce 6c 53 8f 5a 57 90 55 a2 55 89 4e Data Ascii: D6LQ!B6X\!5!X`3#8V/?%"&&546632>32#"&&''2667.#"!26654&&#"${{s~/.{u\|\|u}-/~eVl*lVVOOVNNVVn))nlmWW[TmlSZWUUN
2024-05-07 23:18:18 UTC	16384	IN	Data Raw: 01 c2 00 56 07 5a 00 c4 02 22 00 88 02 1e 00 88 04 04 00 40 04 04 00 56 01 c2 00 56 03 48 00 b0 04 2a 00 6c 04 44 00 88 04 04 00 40 05 56 00 64 04 f0 00 6e 03 d4 ff f0 03 d4 ff f0 01 c2 00 56 03 1e 00 a6 03 1e 00 a6 03 fc 00 74 04 9c 00 06 04 9c 00 06 03 1e 00 a6 03 d4 ff e2 03 d4 ff e2 01 9a 00 58 01 9a 00 34 02 ae 00 9c 02 ae 00 60 02 e8 00 6a 02 e8 00 56 02 f0 00 d8 02 f0 00 60 01 9a 00 58 01 9a 00 34 01 c2 00 56 03 64 00 56 03 64 00 4e 03 64 00 56 01 c2 00 4e 01 c2 00 56 01 c2 00 4e 04 06 00 4c 04 06 00 2e 02 68 00 4c 02 68 00 2e 03 26 00 6a 01 ac 00 6a 02 de 00 02 04 28 00 5a 07 ae 00 64 03 d0 00 a0 04 d0 00 cc 05 3c 00 84 05 20 00 c4 04 d0 00 32 04 d0 00 50 04 d0 00 50 04 d0 00 50 05 3c 01 14 05 3c 00 64 04 d0 00 64 05 3c 00 5c 05 3c 00 74 05 3c 00 Data Ascii: VZ"@VVH*lD@VdnVtX4`jV`X4VdVdNdVNVNL.hLh.&jj(Zd< 2PPP<<dd<\<t<
2024-05-07 23:18:18 UTC	16384	IN	Data Raw: 00 00 22 65 00 00 22 65 00 00 04 a8 00 00 23 02 00 00 23 02 00 00 04 5c 00 00 23 10 00 00 23 10 00 00 04 9d 00 00 23 17 00 00 23 17 00 00 04 70 00 00 23 18 00 00 23 18 00 00 04 66 00 00 23 20 00 00 23 20 00 00 04 9c 00 00 23 21 00 00 23 21 00 00 04 9b 00 00 23 25 00 00 23 25 00 00 04 63 00 00 23 26 00 00 23 26 00 00 04 60 00 00 23 27 00 00 23 27 00 00 04 5e 00 00 23 28 00 00 23 28 00 00 04 62 00 00 23 2b 00 00 23 2b 00 00 04 5f 00 00 23 bd 00 00 23 bd 00 00 04 5b 00 00 23 ce 00 00 23 ce 00 00 04 67 00 00 23 cf 00 00 23 cf 00 00 04 61 00 00 23 fb 00 00 23 fb 00 00 04 69 00 00 24 07 00 00 24 07 00 00 04 51 00 00 24 60 00 00 24 68 00 00 03 95 00 00 24 ea 00 00 24 ea 00 00 03 94 00 00 24 ff 00 00 24 ff 00 00 03 8a 00 00 25 a0 00 00 25 a1 00 00 04 e3 00 00 25 Data Ascii: "e"e##\####p##f# # #!#!#%#%c#&#&`#'#'^#(#(b#+#+_##[##g##a##i$$Q$`$h$$$$%%%
2024-05-07 23:18:18 UTC	1024	IN	Data Raw: 00 07 00 00 00 34 00 00 00 6e 00 00 00 eb 00 00 07 d5 00 00 07 ff 00 00 08 0f 00 00 08 c4 00 01 00 02 c0 00 c0 00 00 00 00 00 40 00 40 00 00 32 00 00 00 01 00 00 88 92 9c a6 b0 b8 ba c4 ca ce d4 d7 d8 da e2 e8 ec ee f0 f1 f2 f4 f5 f6 f7 f8 f9 fa fb fc fd fe ff 02 03 04 05 06 07 08 0a 0c 0e 12 14 18 1e 1f 28 32 00 75 00 00 00 01 00 01 82 85 86 88 8c 8d 94 96 a0 a4 a6 a8 ac ad b0 b5 b6 b8 ba bc be c4 c6 c8 c9 ca cb cc ce d2 d3 d6 d8 da dc dd de e0 e2 e4 e5 e6 e7 e8 ea ec ed ee ef f0 f1 f2 f3 f4 f5 f6 f7 f8 fa fb fc fe ff 01 02 03 04 05 06 09 0a 0b 0c 0e 10 11 12 14 15 16 19 1a 1b 1c 1d 1e 20 21 22 23 24 27 28 2a 2b 2e 30 32 34 35 3a 3c 3f 46 48 4a 4c 58 5a 62 69 6a 70 78 7a 7b 7e 03 70 00 00 00 02 00 00 00 01 88 88 9a a6 9c 9c 9c e2 9c 64 9e 36 a0 a0 a2 a2 Data Ascii: 4n@@2(2u !"#$'(*+.0245:<?FHJLXZbijpxz{~pd6
2024-05-07 23:18:18 UTC	16384	IN	Data Raw: f6 fa f9 fa fa fa fb fa fc fa fd fa fe fa 04 fa 06 fa 0a fa 0e fa 11 fa 12 fa 26 fa 30 fa 42 fa 44 fb e7 fb ee fb f1 fb f3 fb f5 fb f6 fb f8 fb fc fb fe fb ff fb 01 fb 05 fb 14 fc dc fc de fc e4 fc e8 fc ee fc ef fc f3 fc f4 fc f6 fc fc fc fd fc fe fc ff fc 01 fc 02 fc 04 fc 06 fc 0c fc 12 fc 16 fc 26 fc 28 fc 2a fd dc fd ef fd f0 fd f1 fd f2 fd f3 fd f4 fd f5 fd f6 fd fa fd fb fd fc fd fe fd ff fd 01 fd 02 fd 05 fd 07 fd 08 fd 0c fd 17 fe d1 fe d6 fe db fe dc fe dd fe de fe e0 fe e2 fe e3 fe e4 fe e5 fe e6 fe e8 fe ea fe ed fe f0 fe f1 fe f2 fe f3 fe f5 fe f6 fe f7 fe f8 fe fa fe fb fe fc fe fe fe ff fe 01 fe 02 fe 0b fe 0e fe 10 fe 1d fe 1e fe 2e ff dc ff dd ff e8 ff e9 ff eb ff ed ff ee ff ef ff f0 ff f1 ff f2 ff f3 ff f4 ff f5 ff f7 ff fa ff fc ff 01 Data Ascii: &0BD&(*.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49761	99.86.38.11	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:18 UTC	437	OUT	GET /eh96rkuu9740/2Cpsx0dFpuasUFp8YANLmZ/cad4a1a0a1335e1e8dfad49ec6f5531d/logo-gcp.png HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:18 UTC	510	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2960 Connection: close Date: Tue, 07 May 2024 23:18:18 GMT Last-Modified: Mon, 24 Apr 2023 15:51:09 GMT ETag: "54d8963f2b634b37abaea0025f1079ff" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 6a6653dfb47ccc5082f2a5b9d0d168ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: FQRoMhldxYyAUOS3PBSlIiXo3nA-zwMmwC1WW8wrAG7tHwRsWPT50Q== Age: 1
2024-05-07 23:18:18 UTC	2960	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 44 00 00 00 5a 04 03 00 00 00 ab 8d 54 ab 00 00 00 30 50 4c 54 45 f1 f1 f1 e2 e7 e6 d3 dd dc c4 d3 d1 b4 c9 c6 a5 bf bc 96 b5 b1 87 ab a6 78 a2 9c 69 98 91 5a 8e 86 4b 84 7c 3b 7a 71 2c 70 66 1d 66 5c 0e 5c 51 ad 63 a8 1d 00 00 0b 1b 49 44 41 54 78 da ed 9b 4d 8c 1c c5 15 c7 ff b3 33 bb 8c 3d 36 74 24 63 4c 82 c9 1c 50 02 8a 84 47 82 43 50 12 33 24 2b 3e 24 94 dd dc a2 7c c0 38 70 70 12 01 0b 5c 72 09 19 87 0f b5 d9 90 35 26 51 90 1c e2 3d a0 80 84 c0 6b 91 20 a3 4d 58 1b 10 01 72 d8 25 0e 8e a3 48 19 cc 46 04 8b 43 2f de f5 7c f5 74 ff 73 a8 ea 8f aa fe 98 19 85 35 44 e9 ba ec 4e cf eb f7 aa 7f 5d f5 ea bd 57 35 60 d6 fa 34 64 08 32 44 19 a2 0c 51 86 28 43 94 21 ca 10 65 2d 43 94 21 ca 10 65 88 32 Data Ascii: PNGIHDRDZT0PLTExiZK\|;zq,pff\\QcIDATxM3=6t$cLPGCP3$+>$\|8pp\r5&Q=k MXr%HFC/\|ts5DN]W5`4d2DQ(C!e-C!e2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49762	99.86.38.11	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:18 UTC	449	OUT	GET /eh96rkuu9740/5e5bdf7536d04306a8b16efabf3fe8e0/0a1e6991a00de59e643f09b6d204322a/solid-navy.svg HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:18 UTC	513	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 488 Connection: close Date: Tue, 07 May 2024 23:18:18 GMT Last-Modified: Wed, 15 Sep 2021 04:20:37 GMT ETag: "fc53568457bd3e8c3215da1667f01985" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 174acb08636ac7d9e9a778bbf1bcbc52.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: bGQX7UyzpCpP1sQQNE0kvEj-7OTxCK3R5uQoM754_Nx8HhlGhsqr0Q== Age: 1
2024-05-07 23:18:18 UTC	488	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 35 2e 34 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 25.4.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49764	99.86.38.11	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:18 UTC	453	OUT	GET /eh96rkuu9740/92430c33e214475385fd3a25214e2f30/bf6e82bf958a8707c4e7d2fcbc11343b/solid-kcc-teal.svg HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:18 UTC	505	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 488 Connection: close Date: Tue, 07 May 2024 23:18:18 GMT Last-Modified: Wed, 15 Sep 2021 04:11:08 GMT ETag: "94867036e5b64acf26ad33ad59016c38" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 adc2002956acc4d61bfbf3b973fdf246.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: QdbqNcFXFp9pnS-6RcLOLo1faIBj3sTowQLp-i46E8W2JT1P2VJQDg==
2024-05-07 23:18:18 UTC	488	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 35 2e 34 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 25.4.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49768	44.209.29.87	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:19 UTC	682	OUT	GET /site/v3/7792/99885/1/1/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/ HTTP/1.1 Host: l.evidon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:20 UTC	231	IN	HTTP/1.1 204 No Content Date: Tue, 07 May 2024 23:18:19 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 10 Connection: close X-Powered-By: Express ETag: W/"a-bAsFyilMr4Ra1hIU5PyoyFRunpI" Vary: Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49771	13.107.246.70	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:20 UTC	629	OUT	GET /fonts/fc248138-00ce-4270-ac78-e72164153e7f-5.woff2 HTTP/1.1 Host: www.gilardi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.gilardi.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=Lax; SameSite=Lax
2024-05-07 23:18:20 UTC	2936	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 23:18:20 GMT Content-Type: font/woff2 Content-Length: 62488 Connection: close Content-MD5: PgKkCVMDEjLGdTayaBq5VQ== Last-Modified: Tue, 07 May 2024 05:05:05 GMT ETag: "0x8DC6E534296BCCD" x-ms-request-id: cd6c6c7b-101e-004e-0ed4-a05ebe000000 x-ms-version: 2018-03-28 x-azure-ref: 20240507T231820Z-17c65945bcbjfc8b4eu0eadc600000000250000000025bz3 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff Referrer-Policy: strict-origin X-XSS-Protection: 1; mode=block Cache-Control: no-store no-cache Set-Cookie: SameSite=Lax;secure;HttpOnly Permissions-Policy: camera=(), microphone=() Content-Security-Policy: worker-src blob: https://.georgeson.com;script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://content-assets.computershare.com https://ui.customsearch.ai https://s508159127.t.eloqua.com https://ssl.google-analytics.com https://www.google-analytics.com https://.evidon.com https://img03.en25.com https://js.adsrvr.org https://snap.licdn.com https://view.ceros.com https://siteintercept.qualtrics.com https://.siteintercept.qualtrics.com https://secure.quantserve.com https://.pub.sfmc-content.com https://rules.quantcount.com https://.adsrvr.org https://snap.licdn.com https://widget.trustpilot.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://.crazyegg.com https://bat.bing.com;connect-src https://www.googletagmanager.com https://www.google-analytics.com https://ui.customsearch.ai https://s508159127.t.eloqua.com https://*.evidon.com https://cdn.linkedin.oribi.io https://siteintercept.qualtrics.com https://rules.quantcount.com http [TRUNCATED] X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-05-07 23:18:20 UTC	13448	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 f4 18 00 12 00 00 00 02 51 40 00 00 f3 ae 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 82 de 6e 1c 85 1a 14 84 57 06 60 00 88 36 08 84 16 09 8e 05 11 10 0a 85 82 14 84 d1 79 12 cb 08 01 36 02 24 03 92 4c 0b 89 28 00 04 20 05 86 58 07 a3 2b 0c 87 58 5b 41 33 92 0b e2 c6 b6 7b 91 d0 02 09 a3 a2 74 8e 6d 33 53 82 ab 9d 47 c3 25 6c 70 9d 87 de 2c f0 75 7f d9 2f d1 03 32 af 45 f8 dd 0e 9e 27 54 fd ed cc fe ff ff ff ff ff ff 57 24 5f 62 dc bf ed ea 6d bb ab ae 22 11 01 fc 2f 08 0a 73 f3 b0 2c 72 26 8a 64 b0 13 44 24 14 cd 8c 6a d1 fb 81 ac a3 29 93 c3 6c 3e d0 1c 47 78 10 85 0b 6a 11 a7 10 06 62 45 3d 97 5c c4 05 31 16 75 b5 8b 2d 1b 6b 8d 06 4e 94 66 46 33 71 a5 d1 09 1f cc 29 3a 1a 88 ae cf f0 1b b5 Data Ascii: wOF2Q@nW`6y6$L( X+X[A3{tm3SG%lp,u/2E'TW$_bm"/s,r&dD$j)l>GxjbE=\1u-kNfF3q):
2024-05-07 23:18:20 UTC	16384	IN	Data Raw: a5 42 d2 c6 1c 06 01 9d c5 66 0a 05 54 ad af d0 72 a7 c8 36 50 3e c6 e3 7a 49 c5 64 6e d5 ae 77 54 90 28 58 cd 21 b9 fd 6e 89 ed 83 f5 19 02 1b df 1d a5 b3 09 9b 98 e3 aa 5e dc ed ae c2 c5 2e ab 37 58 93 b3 74 2f e6 72 55 0e a1 21 47 20 52 5f e5 e3 d3 7c 11 9f 35 67 a6 e5 4c ef 77 ab da 9c 5e 2d b6 2c 57 d1 f5 04 0c bc 7e 7b 80 a1 d6 52 bd 4f 2b 04 2e 2d 02 c3 df ec 13 ba 0c ca 5f a5 a6 c7 94 87 09 9e be 79 1c 08 74 d0 5c f5 9d d9 fc d9 68 c5 1c f7 58 5c 7b a1 bc 4f 31 d9 b0 48 8d e6 f2 51 74 5c e9 49 52 5a 4d ee a0 fb 2a db 8d 4a b6 29 52 e4 78 48 88 72 ca 8b 4b 39 09 ec 79 a0 17 4d bb 53 75 89 05 86 6b 12 ba 38 b8 ae 29 4d c3 d5 26 c8 5f 04 dc 7a 79 89 54 85 12 90 17 e4 8f a6 bf c8 df 1f 8c 3f c9 f5 67 43 75 6c 20 c7 d0 fe 68 43 46 b7 cb 8f a7 b9 b9 72 Data Ascii: BfTr6P>zIdnwT(X!n^.7Xt/rU!G R_\|5gLw^-,W~{RO+.-_yt\hX\{O1HQt\IRZM*J)RxHrK9yMSuk8)M&_zyT?gCul hCFr
2024-05-07 23:18:21 UTC	16384	IN	Data Raw: af c1 0d bc 86 e7 1f fd 74 f1 5c 46 8d b1 79 08 3c 2b b4 34 d3 f7 f7 c3 c6 1a 9d ef 8f 59 e8 6b 9f 6c 6a 4a 1c 1e 34 95 3e ed f5 3a 4b e5 f2 2c 35 ec e7 a1 93 22 4c 63 9e 4a 6a 2a ec dc 09 64 a6 ca 55 ac 44 9b 47 99 ec 92 82 b1 2a 83 25 5b b7 38 e1 72 bd a6 32 13 32 95 a0 8b 5d 31 b4 77 92 75 d8 d4 4a 2a 3d 59 db f3 1f 77 5a 08 be c2 bd 4d 0c 1b 80 79 bd dc 71 39 61 0e 03 33 47 ae b5 e4 fc a4 82 ae 3d 5e 30 7a 09 f6 fa 7a e6 c4 1e 68 df ce 4d 1c 8c dc 25 88 87 9a 91 bb 94 50 6b 8b 54 ae 95 83 d3 69 1e fe 22 35 7c cc 73 98 42 49 eb 9a f5 72 2e 63 14 88 50 f4 84 2b 44 38 38 33 40 72 22 f3 67 51 6e 48 85 8d 4b 61 31 ae 53 5f b2 d2 59 e5 9c aa 26 64 74 a3 8b e1 9d 28 e1 8d 93 a4 ad c8 f8 f1 c6 2c 0c df c0 88 4b d0 6c d4 3c 4d 74 09 70 2b e5 20 1e 1d 7e d5 85 Data Ascii: t\Fy<+4YkljJ4>:K,5"LcJjdUDG%[8r22]1wuJ*=YwZMyq9a3G=^0zzhM%PkTi"5\|sBIr.cP+D883@r"gQnHKa1S_Y&dt(,Kl<Mtp+ ~
2024-05-07 23:18:21 UTC	2563	IN	Data Raw: ec 52 d0 8c df 0b e8 b0 12 de 75 86 38 77 b1 23 b8 33 d7 73 89 53 97 fd 29 fe d6 0a 62 38 0a 24 b8 c8 e9 68 a4 03 0c 10 27 c3 5d a1 5c d1 80 09 94 eb 27 9f 57 ae 72 78 41 2d 2d cc 7e ea f1 db f2 36 c2 3a 41 bc 3f 69 33 e9 42 d2 86 25 70 ed e4 43 27 72 53 1e 2b 58 1a a8 78 9a 28 25 a2 53 41 f6 19 b2 81 f8 75 62 3b c3 95 b9 d9 75 f9 3c b0 55 8b 7e 57 da 66 1f c1 5b de 85 46 ed 83 42 50 7c 83 eb 84 f0 83 b6 07 13 8d 93 ec 1e 0a 2c 6d 6e 7e 6a 8e fb 4b 5b 66 95 85 86 d6 2f 10 be b4 3d c2 66 c4 d7 f8 22 f9 c5 67 e6 1f 6f 00 47 ed d7 62 a8 a9 b6 5a f3 cf 0a 1f c1 d9 14 df ed 96 96 d2 2d 66 a4 cb 0a 63 30 11 11 d3 b3 71 2d 21 bb df 23 de 7b a5 d0 52 bc a9 1e 57 0f 2a b9 9b e2 66 8a 8d 14 56 53 f8 c0 e1 86 db 77 9c 38 7c 3b 79 03 dd 83 78 90 3c 86 c8 24 d8 b1 be Data Ascii: Ru8w#3sS)b8$h']\'WrxA--~6:A?i3B%pC'rS+Xx(%SAub;u<U~Wf[FBP\|,mn~jK[f/=f"goGbZ-fc0q-!#{RW*fVSw8\|;yx<$
2024-05-07 23:18:21 UTC	13709	IN	Data Raw: 4b a3 1a 7a 5e 22 9d e9 8b ea 3c 2c 75 35 c3 ab 85 7d ce 25 dd 65 2f 68 96 bd 6b 72 a3 c4 eb 31 96 3e dd b4 84 60 9c 4f 70 bc c1 82 e8 54 63 c3 c4 ba 1d f8 63 f8 0d c4 e7 95 8c b0 b8 cc bf c8 75 5c e0 5a 0b 09 7b 9e bb 44 1c 2d a5 bc 62 2c f2 1e d6 84 10 99 45 c4 c0 c6 5d d6 e6 9d a5 c8 f1 46 7a 83 6f f3 b2 2b f7 65 5b ca 21 ed d2 16 95 cd d5 f5 36 4b 73 66 fe 17 60 ec 6d 70 fb 85 ca c1 d8 e5 96 ed 62 07 84 16 e7 17 b5 21 04 1c 54 7a 27 df fe 41 7d 58 e2 da 2d 74 b0 61 7f e0 32 a6 18 2f c0 b7 5f 6c 6d 56 0f a4 1f d2 64 78 29 b4 0b 3e aa 24 b1 94 dd e8 32 fe c5 e8 59 40 0b a4 2b a1 fb d5 48 a0 5c 28 cf d4 40 e5 cb 3a 1e d6 7d 95 42 1b ba 8c 59 76 cd 19 b3 8f 4d c7 5b 5f be d1 60 e5 0c 51 de 0c 72 24 62 bd b4 d7 e5 d4 88 d6 dd 3a 1d e7 5b 7d 56 5a 5c 02 8f Data Ascii: Kz^"<,u5}%e/hkr1>`OpTccu\Z{D-b,E]Fzo+e[!6Ksf`mpb!Tz'A}X-ta2/_lmVdx)>$2Y@+H\(@:}BYvM[_`Qr$b:[}VZ\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49770	44.209.29.87	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:20 UTC	682	OUT	GET /site/v3/7792/99885/1/4/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/ HTTP/1.1 Host: l.evidon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:20 UTC	231	IN	HTTP/1.1 204 No Content Date: Tue, 07 May 2024 23:18:20 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 10 Connection: close X-Powered-By: Express ETag: W/"a-bAsFyilMr4Ra1hIU5PyoyFRunpI" Vary: Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49769	44.209.29.87	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:20 UTC	682	OUT	GET /site/v3/7792/99885/1/2/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/ HTTP/1.1 Host: l.evidon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:20 UTC	231	IN	HTTP/1.1 204 No Content Date: Tue, 07 May 2024 23:18:20 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 10 Connection: close X-Powered-By: Express ETag: W/"a-bAsFyilMr4Ra1hIU5PyoyFRunpI" Vary: Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49775	13.107.246.70	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:23 UTC	754	OUT	GET /img/favicon.png HTTP/1.1 Host: www.gilardi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=Lax; _ga=GA1.2.715666436.1715123900; _gid=GA1.2.909392301.1715123900; _gat_UA-132403652-1=1; _ga_XCZNY5NT2G=GS1.2.1715123901.1.0.1715123901.0.0.0
2024-05-07 23:18:23 UTC	2933	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 23:18:23 GMT Content-Type: image/png Content-Length: 783 Connection: close Content-MD5: 9MW/LnzvqvbofBieYgRpTA== Last-Modified: Tue, 07 May 2024 05:05:04 GMT ETag: "0x8DC6E5341D5D36B" x-ms-request-id: a61b8848-701e-0077-70d4-a01e1a000000 x-ms-version: 2018-03-28 x-azure-ref: 20240507T231823Z-b58887dc5c9r8ms2385ezvfqwg000000049g000000015w5c X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff Referrer-Policy: strict-origin X-XSS-Protection: 1; mode=block Cache-Control: no-store no-cache Set-Cookie: SameSite=Lax;secure;HttpOnly Permissions-Policy: camera=(), microphone=() Content-Security-Policy: worker-src blob: https://.georgeson.com;script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://content-assets.computershare.com https://ui.customsearch.ai https://s508159127.t.eloqua.com https://ssl.google-analytics.com https://www.google-analytics.com https://.evidon.com https://img03.en25.com https://js.adsrvr.org https://snap.licdn.com https://view.ceros.com https://siteintercept.qualtrics.com https://.siteintercept.qualtrics.com https://secure.quantserve.com https://.pub.sfmc-content.com https://rules.quantcount.com https://.adsrvr.org https://snap.licdn.com https://widget.trustpilot.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://.crazyegg.com https://bat.bing.com;connect-src https://www.googletagmanager.com https://www.google-analytics.com https://ui.customsearch.ai https://s508159127.t.eloqua.com https://*.evidon.com https://cdn.linkedin.oribi.io https://siteintercept.qualtrics.com https://rules.quantcount.com http [TRUNCATED] X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-05-07 23:18:23 UTC	783	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 01 89 50 4c 54 45 00 1f 5b 0b 29 62 52 67 8f 8f 9c b7 ba c2 d2 d4 d9 e3 df e3 ea da de e7 c1 c9 d7 93 a0 ba 4f 64 8e 07 25 60 18 34 6a 92 9f b9 f2 f4 f7 fe ff ff c2 ca d8 7d 8c ab 58 6c 93 4d 63 8d 5d 70 97 8d 9b b6 ff ff ff ea ed f2 76 87 a7 07 25 5f a3 ae c4 26 40 73 5c 70 96 f0 f2 f5 d1 d7 e1 36 4e 7e 03 22 5d 62 75 9a ec ef f3 32 4b 7b 83 92 af b7 bf d0 0a 28 62 29 43 76 e9 ec f1 6a 7c 9f cc d2 de 09 27 61 42 59 86 fe fe fe 3a 52 80 26 41 74 f7 f8 fa f9 fa fb 27 42 74 a4 af c4 3e 55 83 ac b6 ca 96 a3 bb 2c 45 77 42 59 85 1d 38 6e fc fd fd 2c 46 77 c8 cf dc 6c 7e a1 dd e1 e9 a5 b0 c5 a9 b3 c8 c6 cd da 8b 99 b5 cf d5 e0 84 93 b0 8e 9b b6 b3 bc ce a4 Data Ascii: PNGIHDR DPLTE[)bRgOd%`4j}XlMc]pv%_&@s\p6N~"]bu2K{(b)Cvj\|'aBY:R&At'Bt>U,EwBY8n,Fwl~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49776	13.107.246.70	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:25 UTC	532	OUT	GET /img/favicon.png HTTP/1.1 Host: www.gilardi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=Lax; SameSite=Lax; _ga=GA1.2.715666436.1715123900; _gid=GA1.2.909392301.1715123900; _gat_UA-132403652-1=1; _ga_XCZNY5NT2G=GS1.2.1715123901.1.0.1715123901.0.0.0
2024-05-07 23:18:26 UTC	2933	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 23:18:26 GMT Content-Type: image/png Content-Length: 783 Connection: close Content-MD5: 9MW/LnzvqvbofBieYgRpTA== Last-Modified: Tue, 07 May 2024 05:05:04 GMT ETag: "0x8DC6E5341D5D36B" x-ms-request-id: 1464ae09-101e-0028-59d4-a0ece4000000 x-ms-version: 2018-03-28 x-azure-ref: 20240507T231825Z-17c65945bcbjgbzl82qfb00z0c000000049000000001xcf0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff Referrer-Policy: strict-origin X-XSS-Protection: 1; mode=block Cache-Control: no-store no-cache Set-Cookie: SameSite=Lax;secure;HttpOnly Permissions-Policy: camera=(), microphone=() Content-Security-Policy: worker-src blob: https://.georgeson.com;script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://content-assets.computershare.com https://ui.customsearch.ai https://s508159127.t.eloqua.com https://ssl.google-analytics.com https://www.google-analytics.com https://.evidon.com https://img03.en25.com https://js.adsrvr.org https://snap.licdn.com https://view.ceros.com https://siteintercept.qualtrics.com https://.siteintercept.qualtrics.com https://secure.quantserve.com https://.pub.sfmc-content.com https://rules.quantcount.com https://.adsrvr.org https://snap.licdn.com https://widget.trustpilot.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://.crazyegg.com https://bat.bing.com;connect-src https://www.googletagmanager.com https://www.google-analytics.com https://ui.customsearch.ai https://s508159127.t.eloqua.com https://*.evidon.com https://cdn.linkedin.oribi.io https://siteintercept.qualtrics.com https://rules.quantcount.com http [TRUNCATED] X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-05-07 23:18:26 UTC	783	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 01 89 50 4c 54 45 00 1f 5b 0b 29 62 52 67 8f 8f 9c b7 ba c2 d2 d4 d9 e3 df e3 ea da de e7 c1 c9 d7 93 a0 ba 4f 64 8e 07 25 60 18 34 6a 92 9f b9 f2 f4 f7 fe ff ff c2 ca d8 7d 8c ab 58 6c 93 4d 63 8d 5d 70 97 8d 9b b6 ff ff ff ea ed f2 76 87 a7 07 25 5f a3 ae c4 26 40 73 5c 70 96 f0 f2 f5 d1 d7 e1 36 4e 7e 03 22 5d 62 75 9a ec ef f3 32 4b 7b 83 92 af b7 bf d0 0a 28 62 29 43 76 e9 ec f1 6a 7c 9f cc d2 de 09 27 61 42 59 86 fe fe fe 3a 52 80 26 41 74 f7 f8 fa f9 fa fb 27 42 74 a4 af c4 3e 55 83 ac b6 ca 96 a3 bb 2c 45 77 42 59 85 1d 38 6e fc fd fd 2c 46 77 c8 cf dc 6c 7e a1 dd e1 e9 a5 b0 c5 a9 b3 c8 c6 cd da 8b 99 b5 cf d5 e0 84 93 b0 8e 9b b6 b3 bc ce a4 Data Ascii: PNGIHDR DPLTE[)bRgOd%`4j}XlMc]pv%_&@s\p6N~"]bu2K{(b)Cvj\|'aBY:R&At'Bt>U,EwBY8n,Fwl~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49778	13.107.246.70	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:32 UTC	820	OUT	GET /about-us/our-story HTTP/1.1 Host: www.gilardi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=Lax; _ga=GA1.2.715666436.1715123900; _gid=GA1.2.909392301.1715123900; _gat_UA-132403652-1=1; _ga_XCZNY5NT2G=GS1.2.1715123901.1.0.1715123901.0.0.0
2024-05-07 23:18:33 UTC	2935	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 23:18:33 GMT Content-Type: text/html Content-Length: 23361 Connection: close Content-MD5: NK6kETECGzFlZuzJv+bn+g== Last-Modified: Tue, 07 May 2024 05:05:05 GMT ETag: "0x8DC6E534237BB03" x-ms-request-id: a06751f9-901e-0076-68d4-a01fe7000000 x-ms-version: 2018-03-28 x-azure-ref: 20240507T231833Z-17c65945bcbfnk5rbx23a3zvd000000001q000000000p3q7 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff Referrer-Policy: strict-origin X-XSS-Protection: 1; mode=block Cache-Control: no-store no-cache Set-Cookie: SameSite=Lax;secure;HttpOnly Permissions-Policy: camera=(), microphone=() Content-Security-Policy: worker-src blob: https://.georgeson.com;script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://content-assets.computershare.com https://ui.customsearch.ai https://s508159127.t.eloqua.com https://ssl.google-analytics.com https://www.google-analytics.com https://.evidon.com https://img03.en25.com https://js.adsrvr.org https://snap.licdn.com https://view.ceros.com https://siteintercept.qualtrics.com https://.siteintercept.qualtrics.com https://secure.quantserve.com https://.pub.sfmc-content.com https://rules.quantcount.com https://.adsrvr.org https://snap.licdn.com https://widget.trustpilot.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://.crazyegg.com https://bat.bing.com;connect-src https://www.googletagmanager.com https://www.google-analytics.com https://ui.customsearch.ai https://s508159127.t.eloqua.com https://*.evidon.com https://cdn.linkedin.oribi.io https://siteintercept.qualtrics.com https://rules.quantcount.com http [TRUNCATED] X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-05-07 23:18:33 UTC	13449	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 2f 3e 3c 74 69 74 6c 65 3e 4f 75 72 20 73 74 6f 72 79 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 68 72 65 66 3d 22 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 70 6e 67 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 70 Data Ascii: <!DOCTYPE html><html><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><title>Our story</title><link rel="icon" type="image/png" href="/img/favicon.png"/><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/><meta p
2024-05-07 23:18:33 UTC	2563	IN	Data Raw: 72 6f 6d 6f 2d 63 61 72 6f 75 73 65 6c 2d 32 22 20 63 6c 61 73 73 3d 22 63 61 72 6f 75 73 65 6c 20 73 6c 69 64 65 22 20 64 61 74 61 2d 72 69 64 65 3d 22 63 61 72 6f 75 73 65 6c 22 3e 3c 6f 6c 20 63 6c 61 73 73 3d 22 63 61 72 6f 75 73 65 6c 2d 69 6e 64 69 63 61 74 6f 72 73 22 20 64 61 74 61 2d 69 64 3d 22 70 72 6f 6d 6f 2d 63 61 72 6f 75 73 65 6c 2d 32 22 3e 3c 6c 69 20 64 61 74 61 2d 74 61 72 67 65 74 3d 22 23 70 72 6f 6d 6f 2d 63 61 72 6f 75 73 65 6c 2d 32 22 20 64 61 74 61 2d 73 6c 69 64 65 2d 74 6f 3d 22 30 22 20 63 6c 61 73 73 3d 22 61 63 74 69 76 65 22 3e 3c 2f 6c 69 3e 3c 6c 69 20 64 61 74 61 2d 74 61 72 67 65 74 3d 22 23 70 72 6f 6d 6f 2d 63 61 72 6f 75 73 65 6c 2d 32 22 20 64 61 74 61 2d 73 6c 69 64 65 2d 74 6f 3d 22 31 22 20 63 6c 61 73 73 3d 22 Data Ascii: romo-carousel-2" class="carousel slide" data-ride="carousel"><ol class="carousel-indicators" data-id="promo-carousel-2"><li data-target="#promo-carousel-2" data-slide-to="0" class="active"></li><li data-target="#promo-carousel-2" data-slide-to="1" class="
2024-05-07 23:18:33 UTC	7349	IN	Data Raw: 74 70 73 3a 2f 2f 63 6f 6e 74 65 6e 74 2d 69 6d 61 67 65 73 2e 63 6f 6d 70 75 74 65 72 73 68 61 72 65 2e 63 6f 6d 2f 65 68 39 36 72 6b 75 75 39 37 34 30 2f 31 66 37 66 61 37 36 36 31 33 34 38 34 36 64 61 38 61 34 65 64 39 64 33 61 61 66 35 34 66 66 63 2f 35 32 65 30 33 34 30 30 34 31 31 37 61 62 31 30 32 30 62 31 32 62 66 63 33 64 66 62 39 39 61 62 2f 74 65 61 6d 2d 69 63 6f 6e 2d 6e 61 76 79 2e 73 76 67 3f 77 3d 33 30 30 26 61 6d 70 3b 68 3d 33 30 30 26 61 6d 70 3b 66 69 74 3d 66 69 6c 6c 26 61 6d 70 3b 66 3d 66 61 63 65 73 22 20 61 6c 74 3d 22 54 65 61 6d 20 49 63 6f 6e 20 4e 61 76 79 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 2f 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 6d 6f 2d 6c 69 73 74 5f 5f 69 74 65 6d Data Ascii: tps://content-images.computershare.com/eh96rkuu9740/1f7fa766134846da8a4ed9d3aaf54ffc/52e034004117ab1020b12bfc3dfb99ab/team-icon-navy.svg?w=300&h=300&fit=fill&f=faces" alt="Team Icon Navy" role="presentation"/></div><div class="promo-list__item

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49779	99.86.38.13	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:33 UTC	717	OUT	GET /eh96rkuu9740/1f7fa766134846da8a4ed9d3aaf54ffc/52e034004117ab1020b12bfc3dfb99ab/team-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:34 UTC	530	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1740 Connection: close ETag: "c860b36b8229df6f6343425ffdfa7a98" Last-Modified: Tue, 09 Apr 2024 13:56:36 GMT Date: Tue, 07 May 2024 23:18:34 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: tG5IZdGJ-IAOrYpFFFOwZ5S4ELYkh0QFjHXqUKtUmRWH_GniqIkGlg==
2024-05-07 23:18:34 UTC	1740	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 37 30 20 33 33 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 32 30 35 62 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 32 36 37 2e 36 33 2c 32 38 35 2e 36 31 6c 30 2d 35 34 2e 35 31 68 33 2e 31 32 61 31 37 2e 35 37 2c 31 37 2e 35 37 2c 30 2c 30 2c 30 2c 31 37 2e 35 35 2d 31 37 2e 35 35 56 31 37 34 2e 31 31 61 31 37 2e 35 36 2c 31 37 2e 35 36 2c 30 2c 30 2c 30 2d 31 37 2e 35 35 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M267.63,285.61l0-54.51h3.12a17.57,17.57,0,0,0,17.55-17.55V174.11a17.56,17.56,0,0,0-17.55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49780	99.86.38.13	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:33 UTC	730	OUT	GET /eh96rkuu9740/0abb65e242eb4242850a708671fc57bb/bfe60ad8f5fde227293570f6a72626b3/column-regulatory-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:34 UTC	530	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1652 Connection: close ETag: "2facb3e4225067f33350000a6e824f96" Last-Modified: Sat, 04 May 2024 22:08:17 GMT Date: Tue, 07 May 2024 23:18:34 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: STcuv1J_k_NuZcGIxE0MDpfejvw4fGSY4kf_DPFAfk_gRezi_IgMvQ==
2024-05-07 23:18:34 UTC	1652	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 37 30 20 33 33 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 32 30 35 62 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 32 34 30 2e 32 32 2c 32 35 32 2e 34 38 48 31 32 39 2e 38 61 33 2e 38 2c 33 2e 38 2c 30 2c 30 2c 31 2c 30 2d 37 2e 36 48 32 34 30 2e 32 32 61 33 2e 38 2c 33 2e 38 2c 30 2c 31 2c 31 2c 30 2c 37 2e 36 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M240.22,252.48H129.8a3.8,3.8,0,0,1,0-7.6H240.22a3.8,3.8,0,1,1,0,7.6Z"/><path class="cls-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49781	99.86.38.13	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:33 UTC	727	OUT	GET /eh96rkuu9740/6d38f371887443488c98d49ec4649805/feb8a9e6cac99987cf1575af6257110b/idea-lightbulb-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:34 UTC	530	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 3213 Connection: close ETag: "5c3f283946f0a893043a04a16b34dde9" Last-Modified: Sun, 28 Apr 2024 07:57:56 GMT Date: Tue, 07 May 2024 23:18:34 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 0bb842bd5868b86440983b936bb0adee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: tpCBfUYBr-gSq9H8U6G3s4Cs473RJMEF-4ife34daRerHMSB-IzqBQ==
2024-05-07 23:18:34 UTC	3213	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 37 30 20 33 33 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 32 30 35 62 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 33 39 2e 31 32 2c 33 30 36 2e 38 35 6c 30 2d 36 30 2e 36 34 68 38 2e 34 38 61 39 2e 33 32 2c 39 2e 33 32 2c 30 2c 30 2c 30 2c 39 2e 31 39 2d 39 2e 31 39 56 31 37 38 2e 33 37 61 39 2e 33 32 2c 39 2e 33 32 2c 30 2c 30 2c 30 2d 39 2e 31 39 2d 39 2e 32 48 31 30 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M139.12,306.85l0-60.64h8.48a9.32,9.32,0,0,0,9.19-9.19V178.37a9.32,9.32,0,0,0-9.19-9.2H10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49783	99.86.38.13	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:33 UTC	720	OUT	GET /eh96rkuu9740/831a25f085af4e0e9f8b354be3cf19b6/9774d186295f1ab7ba69c6dc29bde179/support-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:34 UTC	530	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2046 Connection: close ETag: "f6c8301411d25601b07f4cfac953b7f0" Last-Modified: Sat, 20 Apr 2024 03:30:49 GMT Date: Tue, 07 May 2024 23:18:34 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 174acb08636ac7d9e9a778bbf1bcbc52.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: qNJWJRogdfxc9_rgd7ErsDlz20WvwELXtSYIE0qrO6q4olYTgEEMKA==
2024-05-07 23:18:34 UTC	2046	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 37 30 20 33 33 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 32 30 35 62 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 31 33 2e 33 34 2c 32 35 39 2e 39 34 6c 2d 34 35 2d 35 39 2e 38 76 2d 31 35 2e 37 6c 30 2d 31 2e 36 4c 36 38 2c 31 30 31 2e 33 32 63 30 2d 36 2e 35 31 2c 34 2e 36 36 2d 31 31 2e 38 31 2c 31 30 2e 33 36 2d 31 31 2e 38 31 2c 36 2e 32 34 2c 30 2c 39 2e 35 37 2c Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M113.34,259.94l-45-59.8v-15.7l0-1.6L68,101.32c0-6.51,4.66-11.81,10.36-11.81,6.24,0,9.57,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49782	99.86.38.13	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:33 UTC	713	OUT	GET /eh96rkuu9740/22cb14c2104849e6aa27d39f948d2c79/99929ad7b65a8870a946a4633f09cf80/OurStory.jpg?w=1920&h=850&fit=fill&f=center HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:34 UTC	506	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 300364 Connection: close ETag: "feee23b30f0a4b853b5e34ce8523e867" Last-Modified: Tue, 26 Mar 2024 04:05:19 GMT Date: Tue, 07 May 2024 23:18:34 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 aa623e134417515bd2496cb01d5e5626.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: h9GT1Jqg06xcIqLmjmnAIgYFFhY8W350UP7R0NgEextTiKr0ccY6iQ==
2024-05-07 23:18:34 UTC	15878	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 2c 01 2c 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIF,,XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-05-07 23:18:34 UTC	6508	IN	Data Raw: ae 40 18 3b a4 1e 6a f6 ea 77 fe af b0 36 de c0 e2 23 7f fe 5b 95 63 ec 3c 65 45 63 5d 09 b7 ea 9e 16 97 d1 2f 9a d0 0f 3f 71 59 83 d1 00 d6 91 c9 1c df 8b 20 cc 90 09 36 eb e8 80 e1 fd a5 b4 0e d6 30 8b 7e b1 8b fe 24 e1 57 6c a7 24 4e c0 6e 78 ba cc d6 73 34 1a 49 9b 7b 9e e9 c6 c3 e4 94 bd 9e 9e 67 cf 63 f9 4b ed c1 75 d7 66 4c e4 64 98 3c 3b f9 ec a0 cf d0 80 6a a2 1c 78 db f9 a0 e3 e9 ff 00 b0 4b f5 e5 ac 64 5e e4 77 5b 79 7c 4a 2f a4 4f c9 ea f5 2d 09 28 04 a0 0b a2 01 07 94 24 b6 a5 4e 0e e9 43 0b aa 01 74 01 a0 02 9a 09 77 08 80 4a 81 27 94 01 1d 90 0a 1c 20 09 ee 0d 69 53 68 55 55 5e 57 58 70 17 36 77 6d b1 92 7b 53 d7 89 27 7b 22 1c 75 5c 99 6e dd 3a b1 d4 ed 67 87 c4 29 e3 b2 e8 e3 9a 8c 73 bb a8 78 8c 5a aa 01 2b 0e 5f 6d b8 fd 24 61 e0 46 fb Data Ascii: @;jw6#[c<eEc]/?qY 60~$Wl$Nnxs4I{gcKufLd<;jxKd^w[y\|J/O-($NCtwJ' iShUU^WXp6wm{S'{"u\n:g)sxZ+_m$aF
2024-05-07 23:18:34 UTC	3595	IN	Data Raw: d2 d7 c6 c6 86 32 da 48 e8 ae 52 d2 e2 88 31 f1 6c 56 d8 c9 a4 d3 cd 21 ae 3b ec a8 8f 35 c0 ab 51 5a 90 03 52 00 6a 41 06 a4 00 d4 83 0d 48 21 6a 28 05 30 ee 95 14 b4 24 10 01 20 23 74 ce 20 3a 9e 56 d6 77 a0 dc 71 62 b3 b2 ef 6b df 5a 27 18 84 d5 53 88 dc 36 27 a2 32 9b 3c 6f 8d da 24 39 52 8b 40 26 3b b8 f5 25 2f 08 77 93 2b f6 44 d9 55 80 5e 19 5f 19 f4 28 f0 fe 0e 72 59 ed 4f 88 51 63 38 6b 4b e3 9b be 8c 74 ea b3 b3 28 d7 1b 86 5e ca cb 98 dd 76 2f 3b a1 d3 62 c1 e2 73 b6 b2 31 ce db a1 9e 18 63 db 54 c8 a5 8d c0 38 ea bf 50 b7 9b 73 25 06 0b 2a d9 06 80 96 cb 63 b0 41 8d 20 16 4c 81 32 0b a4 05 70 85 05 c2 00 6a 08 20 d4 11 a3 a2 2f 08 d0 1e a0 9e 80 6a f4 4b 49 0b a0 0b 52 34 ad 08 b8 a6 05 e2 29 81 8d 48 1d 05 89 40 0d 04 f2 82 d8 18 d0 05 dd a0 Data Ascii: 2HR1lV!;5QZRjAH!j(0$ #t :VwqbkZ'S6'2<o$9R@&;%/w+DU^_(rYOQc8kKt(^v/;bs1cT8Ps%*cA L2pj /jKIR4)H@
2024-05-07 23:18:34 UTC	3605	IN	Data Raw: 00 f0 f5 b8 48 12 6c 41 69 e4 74 40 02 6c 00 e3 6e 88 3a 2b d9 db 1f bd 32 1d c9 d2 6f d5 20 0e 77 a9 bf 92 01 3e a0 dc 79 20 86 41 75 c9 3b 84 80 ad a7 83 f3 29 c0 5b 5b b6 d6 41 83 4d c5 89 b6 ff 00 24 cf 60 1b f5 03 92 82 24 38 1d c2 08 a3 62 07 50 80 41 8e cd 04 6f e6 80 32 37 1d 02 0c 18 4f 3c fa 84 07 aa 30 d7 5d a2 ff 00 9a 78 ba aa d4 1d 85 b8 f2 5a 24 eb 0f 0a 4e 1c 07 4f 54 1a ef 2a 90 71 26 1d 85 bc 96 79 2a 57 a1 68 a4 fb 2c 30 5a c0 53 36 c0 ff 00 58 a8 8e 4b ee ae 2a cd a9 af 6d 87 44 c9 84 a3 7e be d9 28 81 e3 f4 7b dc 3f d8 72 c3 39 fb a3 79 f8 56 a1 ee 0e 8f a8 1c 2d d2 ae cc 2f 68 cb d8 86 fb f7 2e fc 94 ab 1f 71 c6 f0 a7 83 4e 7d 49 fc d1 3d 3a aa d2 23 b7 9f 54 c9 21 8e da c9 06 93 3c e9 39 b2 50 e3 b8 86 9c 7f dc 31 67 9f f2 9e 3f 4c Data Ascii: HlAit@ln:+2o w>y Au;)[[AM$`$8bPAo27O<0]xZ$NOTq&yWh,0ZS6XK*mD~({?r9yV-/h.qN}I=:#T!<9P1g?L
2024-05-07 23:18:34 UTC	2742	IN	Data Raw: a4 c6 35 82 3a a9 b8 2b 1e 4d 97 51 58 e6 39 a4 1d fa a2 63 b2 ca a9 b1 8c 46 51 03 88 3b d9 57 8c 65 72 af 20 fb 56 62 93 c9 82 48 c2 e2 19 72 5c 11 96 32 47 77 c6 af 08 8b 77 ae 3e ab 9d d4 90 d0 77 b9 d8 0e a9 a4 e0 07 4d c6 de 45 2d 90 da eb 58 14 b6 06 35 1e bc 23 60 93 f1 8e 4a 0c 2d a6 fe 7e a8 d9 0a db ee 2f 74 f6 04 7d 38 08 80 05 ba 94 c1 7f 11 28 02 75 86 d6 e1 2d 00 6b 41 3d 3c d3 03 1c f1 6d ed ca 0c ae 4e c8 21 91 a7 91 ff 00 24 8c 2c 2c 01 db d0 23 66 43 9b 60 7a a9 48 ad 6b db 65 40 9b 6d 61 cf 9a 66 02 df 54 07 a7 f0 d7 59 a2 d7 ba bc 7d 36 ab 46 be d6 54 25 3f 0b bf c1 41 a4 eb f3 4b 41 a0 ca 65 9f a4 18 47 51 ba cf 26 93 d3 d0 94 ba 6d 87 81 72 05 24 7c 1d fa ac e3 92 fb ab aa c9 74 d2 31 b7 3b 26 97 32 d1 df 76 e3 44 79 11 d0 97 0f a4 Data Ascii: 5:+MQX9cFQ;Wer VbHr\2Gww>wME-X5#`J-~/t}8(u-kA=<mN!$,,#fC`zHke@mafTY}6FT%?AKAeGQ&mr$\|t1;&2vDy
2024-05-07 23:18:34 UTC	2742	IN	Data Raw: ac a9 5f 68 64 71 fd 82 53 0f 2e f6 80 40 a8 9a e3 f5 8e eb d0 cb f1 72 63 ed 88 8f e1 59 37 ab 0c 39 da 26 67 cc 7e 68 d2 6b e9 e7 f0 6f 54 be a7 0d cc 81 c7 f9 b6 44 3e 77 73 bf b9 2e 4c 75 8e d1 85 de 6f 6c 5e cb 9d d2 23 ca 01 25 d6 40 24 fc 41 00 b4 01 38 d8 84 01 a0 02 00 20 02 00 9c 80 24 00 40 04 00 40 10 20 a0 08 9b 39 00 a4 00 40 04 01 13 64 00 e8 80 49 36 40 25 c6 cd 41 14 38 48 c1 30 08 05 00 80 34 00 40 7c 6f f6 e6 bb fd a9 f3 c9 e7 ed e0 b7 cb dd e3 5d 37 d4 72 4f 77 fe 5c 3e 27 00 46 b6 eb 67 50 a3 6d 36 f7 6f b0 dc 30 c5 d9 66 36 61 91 ce d7 88 1d 2d 7b 6c 47 80 7d fd 7e e4 f7 d6 8e 63 be d8 ce dd b0 49 2a b3 bc e4 96 07 16 9e e5 ee e0 11 c8 f9 ae 2f 91 96 a3 d7 f8 f8 cb db cd d9 8b 13 8b 02 a9 97 de da ea 87 4c ff 00 1e 9b 1b 90 7a 1f bf Data Ascii: _hdqS.@rcY79&g~hkoTD>ws.Luol^#%@$A8 $@@ 9@dI6@%A8H04@\|o]7rOw\>'FgPm6o0f6a-{lG}~cI*/Lz
2024-05-07 23:18:34 UTC	1371	IN	Data Raw: d5 72 65 f1 f5 f8 56 47 14 ec 9b 15 c1 69 5e 58 d1 58 d0 3f d1 ec 7e e5 b7 ea e3 93 3f 1c f1 fc 9c 53 19 c3 71 09 b3 0b a8 a3 a7 91 92 83 f0 39 b6 21 6f 2c 93 75 97 9c b7 51 60 fe ce 71 bc 22 21 53 3c 57 88 8b ba db a9 fd 5c 6f 51 af 8d fb 89 94 d4 44 e8 37 e3 c8 14 94 81 99 a9 dd ee ce 1c ed 7d d6 76 b4 8e 13 da 8d 37 77 81 b9 da b7 71 3c 85 cf 9d e9 db c4 f3 7b 80 32 bf a0 d4 b1 8d 7e cf 30 8b 81 ff 00 9a 65 4b 63 46 f6 3b 7a a2 82 9b b9 e0 1f 50 a4 87 a4 d8 9f 5f 34 18 89 73 9c aa 19 26 e0 13 c7 ad 93 22 5a eb de e7 9d 8a 44 3e 5b 7b dc 79 23 40 40 df 70 80 50 bd 87 44 a8 2b 57 88 01 cd b7 ba 7a 04 8b 36 f7 e5 06 17 70 b7 1b a4 42 da fb 7d c9 e8 c2 f7 d8 83 bf 92 00 c9 17 1c 01 6e 52 a6 4b 85 fc c8 44 22 6d e5 72 7d 15 10 1b 5f 51 b1 3e 49 2a 0d c2 c0 Data Ascii: reVGi^XX?~?Sq9!o,uQ`q"!S<W\oQD7}v7wq<{2~0eKcF;zP_4s&"ZD>[{y#@@pPD+Wz6pB}nRKD"mr}_Q>I*
2024-05-07 23:18:34 UTC	2742	IN	Data Raw: 75 9a 1a 37 d2 36 04 ef 65 d3 b7 99 9e 1e 35 55 18 91 91 ec 41 6f 97 92 18 9d f7 47 4c cd 45 c2 30 01 75 dd b5 d2 0e af ec ef 96 29 db 5b 5f 8f d6 bd ac 6c 47 dd a9 4b f6 d4 e3 f1 91 7f 20 40 fa af 23 fa 87 25 b8 ce 3c 7e de ef f4 ce 19 bb cb 97 d7 51 ea fc bb 4f 11 81 a2 27 07 92 2f a8 58 af 9c 9b 7d 2f a5 85 43 8c 4e ee de c3 7b 72 3a a0 e7 7e 95 d5 30 fd 9b af e1 1d 45 d0 a8 cc 63 20 b6 12 40 f0 f4 f5 57 8f b5 6d cd 31 d6 bb 56 ed d8 df 8e 3e 4b b3 02 ac 6e 23 48 c9 75 3d fe 1f 22 17 56 39 57 26 52 5f 6e 7f 9a e9 e3 ee 9c 58 3c 5f 25 ea 70 db be de 0f cd c6 6b a8 c4 c4 fd 0f 2c 76 c4 f5 0b d1 7c f8 39 85 a0 93 6b df 94 e2 49 89 f7 27 a2 62 25 e9 0c 88 1b 8b f9 f9 04 28 b8 64 0d f1 70 97 b3 8b 8c 32 9e 69 de d7 41 a8 c9 7b 86 81 72 40 dc 9f c1 2b 34 da Data Ascii: u76e5UAoGLE0u)[_lGK @#%<~QO'/X}/CN{r:~0Ec @Wm1V>Kn#Hu="V9W&R_nX<_%pk,v\|9kI'b%(dp2iA{r@+4
2024-05-07 23:18:34 UTC	2742	IN	Data Raw: 5a 7a 5c 6e b6 e2 f6 c3 9f d4 6e ea 65 2e 90 7e 2b a5 c9 13 b0 d6 87 38 fc b8 45 25 f4 4d 3f a2 9f bd bc 5c f2 bc bf 99 e9 78 de d4 d4 b5 75 b4 d5 44 c6 09 60 e4 af 22 74 d6 b4 74 18 87 7a e0 f7 c8 e6 3c 72 0f 55 5b 2d 2d aa 21 6e 24 d6 e8 b9 b7 24 ad 3c 76 3d 2d b0 46 e9 90 40 c3 b8 0b a7 0f e2 22 b6 34 d8 83 a9 22 01 fe 25 d5 8e 5a 66 b7 a6 90 54 42 24 e8 56 d3 b0 29 20 6b 81 03 64 58 0c c5 4f 1c 47 76 8f 9a 99 02 63 03 40 d9 59 96 13 50 11 74 10 59 03 40 78 28 1a 36 d2 4b 8d c5 b6 08 49 48 03 bd 90 03 52 01 40 d8 a0 1c ba 01 b7 1d d4 d5 14 0e c8 03 bd 93 04 38 a6 90 42 83 70 81 05 d5 00 09 b2 00 d2 a6 09 68 02 a2 04 01 75 41 81 3b a0 86 83 04 01 82 82 1a 00 ae 83 02 50 04 1d ba 9a 00 9b a2 15 10 45 10 68 30 54 01 00 5c 20 82 e8 1b 15 ae 84 83 82 02 3b Data Ascii: Zz\nne.~+8E%M?\xuD`"ttz<rU[--!n$$<v=-F@"4"%ZfTB$V) kdXOGvc@YPtY@x(6KIHR@8BphuA;PEh0T\ ;
2024-05-07 23:18:34 UTC	1303	IN	Data Raw: 60 34 80 80 50 4f 60 76 ba 60 6c 3b 29 81 f2 2b f8 41 75 1f 6a 7c c9 b1 b7 bb d1 f4 ff 00 e1 d8 b5 c6 ee 31 d7 75 c0 e2 84 bc 0d 86 ea b4 4f 66 fb 09 34 8c bf 9c 36 ff 00 4d 07 fc 2f 5b 63 e9 9d f6 c1 fb 62 d3 97 62 ef 7e 91 ab 48 37 b2 d7 2f c1 13 f2 70 ee cc e5 9f 1c a0 ad c3 e1 8e 57 4b 4d 1b aa 1a 75 59 80 03 e2 1f 71 5e 0f 3e 32 5d be 93 e2 65 72 c6 e0 c9 d4 d5 4f 59 8a d4 47 4d 1e 90 f2 4d dc 76 1e a8 93 50 ae 56 de 99 ea e8 ea a1 ac ee ce b7 be fb 91 7b 39 5b 93 2d ca f4 37 b2 3e 4a 6c 99 8f 1f c6 26 80 17 c3 4e c8 20 de fa 0b ee 5d f5 b0 1f 7a f1 bf a9 72 6b 19 84 7b df d2 b8 a5 cb 2c eb b4 e6 0c 9a 2a dc 44 cf 25 a4 df 4d ec be 7a 72 5c 5f 49 96 12 a9 06 48 c3 b0 fa a8 de d6 6b 94 10 43 4f 4f 54 ef 2e 57 a4 e3 c7 8c 45 ce 2c 93 f4 6f bb 45 e1 17 Data Ascii: `4PO`v`l;)+Auj\|1uOf46M/[cbb~H7/pWKMuYq^>2]erOYGMMvPV{9[-7>Jl&N ]zrk{,*D%Mzr\_IHkCOOT.WE,oE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49784	44.209.29.87	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:34 UTC	700	OUT	GET /site/v3/7792/99885/1/1/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/our-story HTTP/1.1 Host: l.evidon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:34 UTC	231	IN	HTTP/1.1 204 No Content Date: Tue, 07 May 2024 23:18:34 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 10 Connection: close X-Powered-By: Express ETag: W/"a-bAsFyilMr4Ra1hIU5PyoyFRunpI" Vary: Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49786	99.86.38.11	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:34 UTC	492	OUT	GET /eh96rkuu9740/6d38f371887443488c98d49ec4649805/feb8a9e6cac99987cf1575af6257110b/idea-lightbulb-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:35 UTC	529	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 3213 Connection: close ETag: "5c3f283946f0a893043a04a16b34dde9" Last-Modified: Sun, 28 Apr 2024 07:57:56 GMT Date: Tue, 07 May 2024 23:18:34 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 aa623e134417515bd2496cb01d5e5626.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: A9z43OBKohn1fyjtb2bSBYUgXqbZYXYY03kpbI0oPPsOc2apwS1L2A==
2024-05-07 23:18:35 UTC	3213	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 37 30 20 33 33 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 32 30 35 62 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 33 39 2e 31 32 2c 33 30 36 2e 38 35 6c 30 2d 36 30 2e 36 34 68 38 2e 34 38 61 39 2e 33 32 2c 39 2e 33 32 2c 30 2c 30 2c 30 2c 39 2e 31 39 2d 39 2e 31 39 56 31 37 38 2e 33 37 61 39 2e 33 32 2c 39 2e 33 32 2c 30 2c 30 2c 30 2d 39 2e 31 39 2d 39 2e 32 48 31 30 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M139.12,306.85l0-60.64h8.48a9.32,9.32,0,0,0,9.19-9.19V178.37a9.32,9.32,0,0,0-9.19-9.2H10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49787	99.86.38.11	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:34 UTC	485	OUT	GET /eh96rkuu9740/831a25f085af4e0e9f8b354be3cf19b6/9774d186295f1ab7ba69c6dc29bde179/support-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:35 UTC	529	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2046 Connection: close ETag: "f6c8301411d25601b07f4cfac953b7f0" Last-Modified: Sat, 20 Apr 2024 03:30:49 GMT Date: Tue, 07 May 2024 23:18:34 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 efcf7b9d0f917f9ebf314db03e52d9b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: CvxCc0m74TgiPjLUOJsgBtgGFIDl8MrHN0So2p2k0sM1FmKQl2zBFQ==
2024-05-07 23:18:35 UTC	2046	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 37 30 20 33 33 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 32 30 35 62 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 31 33 2e 33 34 2c 32 35 39 2e 39 34 6c 2d 34 35 2d 35 39 2e 38 76 2d 31 35 2e 37 6c 30 2d 31 2e 36 4c 36 38 2c 31 30 31 2e 33 32 63 30 2d 36 2e 35 31 2c 34 2e 36 36 2d 31 31 2e 38 31 2c 31 30 2e 33 36 2d 31 31 2e 38 31 2c 36 2e 32 34 2c 30 2c 39 2e 35 37 2c Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M113.34,259.94l-45-59.8v-15.7l0-1.6L68,101.32c0-6.51,4.66-11.81,10.36-11.81,6.24,0,9.57,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49788	44.209.29.87	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:34 UTC	700	OUT	GET /site/v3/7792/99885/1/2/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/our-story HTTP/1.1 Host: l.evidon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:35 UTC	231	IN	HTTP/1.1 204 No Content Date: Tue, 07 May 2024 23:18:35 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 10 Connection: close X-Powered-By: Express ETag: W/"a-bAsFyilMr4Ra1hIU5PyoyFRunpI" Vary: Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49789	44.209.29.87	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:34 UTC	700	OUT	GET /site/v3/7792/99885/1/4/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/our-story HTTP/1.1 Host: l.evidon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:35 UTC	231	IN	HTTP/1.1 204 No Content Date: Tue, 07 May 2024 23:18:35 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 10 Connection: close X-Powered-By: Express ETag: W/"a-bAsFyilMr4Ra1hIU5PyoyFRunpI" Vary: Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49791	99.86.38.11	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:34 UTC	482	OUT	GET /eh96rkuu9740/1f7fa766134846da8a4ed9d3aaf54ffc/52e034004117ab1020b12bfc3dfb99ab/team-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:35 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1740 Connection: close ETag: "c860b36b8229df6f6343425ffdfa7a98" Last-Modified: Tue, 09 Apr 2024 13:56:36 GMT Date: Tue, 07 May 2024 23:18:34 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: 0J4seJumu0gMivSYrqhwXSvJIecg4TIgW-toEwQGJqnjogSZ5RNjcA== Age: 1
2024-05-07 23:18:35 UTC	1740	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 37 30 20 33 33 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 32 30 35 62 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 32 36 37 2e 36 33 2c 32 38 35 2e 36 31 6c 30 2d 35 34 2e 35 31 68 33 2e 31 32 61 31 37 2e 35 37 2c 31 37 2e 35 37 2c 30 2c 30 2c 30 2c 31 37 2e 35 35 2d 31 37 2e 35 35 56 31 37 34 2e 31 31 61 31 37 2e 35 36 2c 31 37 2e 35 36 2c 30 2c 30 2c 30 2d 31 37 2e 35 35 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M267.63,285.61l0-54.51h3.12a17.57,17.57,0,0,0,17.55-17.55V174.11a17.56,17.56,0,0,0-17.55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49792	99.86.38.11	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:35 UTC	495	OUT	GET /eh96rkuu9740/0abb65e242eb4242850a708671fc57bb/bfe60ad8f5fde227293570f6a72626b3/column-regulatory-icon-navy.svg?w=300&h=300&fit=fill&f=faces HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:35 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1652 Connection: close ETag: "2facb3e4225067f33350000a6e824f96" Last-Modified: Sat, 04 May 2024 22:08:17 GMT Date: Tue, 07 May 2024 23:18:34 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1570d93226c1bbca2ebaad510cff3e0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: eU6rHDUVJs4Jan6GvvRb6y9iJ_SMaqpzhRP3tUXQ-hVlHwI1U746MA== Age: 1
2024-05-07 23:18:35 UTC	1652	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 37 30 20 33 33 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 32 30 35 62 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 32 34 30 2e 32 32 2c 32 35 32 2e 34 38 48 31 32 39 2e 38 61 33 2e 38 2c 33 2e 38 2c 30 2c 30 2c 31 2c 30 2d 37 2e 36 48 32 34 30 2e 32 32 61 33 2e 38 2c 33 2e 38 2c 30 2c 31 2c 31 2c 30 2c 37 2e 36 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 370 330"><defs><style>.cls-1{fill:#00205b;}</style></defs><path class="cls-1" d="M240.22,252.48H129.8a3.8,3.8,0,0,1,0-7.6H240.22a3.8,3.8,0,1,1,0,7.6Z"/><path class="cls-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49793	99.86.38.11	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:35 UTC	478	OUT	GET /eh96rkuu9740/22cb14c2104849e6aa27d39f948d2c79/99929ad7b65a8870a946a4633f09cf80/OurStory.jpg?w=1920&h=850&fit=fill&f=center HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:35 UTC	513	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 300364 Connection: close ETag: "feee23b30f0a4b853b5e34ce8523e867" Last-Modified: Tue, 26 Mar 2024 04:05:19 GMT Date: Tue, 07 May 2024 23:18:34 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: O_uYb-jE4RHPUY9KjBqiH4XNiq5vBdJhBaYUqbVgx3kU4BKY8RACzw== Age: 1
2024-05-07 23:18:35 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 2c 01 2c 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIF,,XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-05-07 23:18:35 UTC	16384	IN	Data Raw: 9d d0 45 58 59 07 f4 69 ed 16 ba 12 6c 6c 82 1e a4 0d 88 b9 03 60 dd dc 10 51 39 bf 08 52 da 10 f1 76 95 44 85 d4 a1 03 e1 00 45 00 d3 e1 12 0d c2 0d 17 11 a4 69 a5 7e dd 13 c7 d8 cb d3 9b 8a d9 a8 2b 1e 04 4f 70 d4 78 0b 5d 39 7c b5 5a 8c 37 19 7c cd 6b 5d 13 87 d1 2d 34 f2 95 a2 a0 1a d8 0d 88 51 5a 43 98 84 01 f0 94 43 b1 83 9e 09 61 9a 42 1f 6d ce cb 5d 31 ec ed 04 d2 6b 00 b9 24 64 9d 89 4a e6 d3 3c 8e 6c 92 6d e9 83 97 1d a8 8e 77 30 5c 8f 9a a8 b9 6e 97 fd 9e d7 bf 11 c4 aa 75 83 e1 db 74 65 e8 f0 bf b9 e2 6f 6c f9 dc dc ff 00 8c d3 83 e1 1a 4e 9f 9b 42 c6 bd 4c 7f 17 90 63 04 3d c6 dd 50 cd 2a 2d 4e 6d 92 23 c3 61 62 6d e8 80 1a 89 e3 91 d5 54 3f 65 35 a0 ee eb 92 38 42 87 a4 9d ce fe 48 d1 01 36 db 9b 8e 8a 48 4d f0 f1 b9 4f 40 1e 76 b7 5f 34 81 Data Ascii: EXYill`Q9RvDEi~+Opx]9\|Z7\|k]-4QZCCaBm]1k$dJ<lmw0\nuteolNBLc=P*-Nm#abmT?e58BH6HMO@v_4
2024-05-07 23:18:35 UTC	12004	IN	Data Raw: d7 12 d2 47 42 02 f4 38 f9 66 4f 2f 9b e2 67 c4 cd 97 3e 03 a5 c2 dd 6e ba 76 e0 f4 7d 95 2d 36 8f 9f 32 91 9d b0 8f a5 90 01 d3 1d 3b 6e 38 40 11 60 70 04 9b dc 5b e4 80 5b 1a 63 1b 5f 7e a9 aa 26 d3 ea 90 1b 3d ac f5 ba 9a b8 d1 45 25 53 e8 c5 14 33 bb dc 65 2d 74 b0 ba 42 1a e7 03 b6 cb 3f b6 f3 d6 9e 92 f6 3f ec cb 24 e7 8c e9 23 73 f4 12 62 51 bd ad 34 fe f3 28 30 9b 58 06 38 1e 76 00 0b 79 7a a8 f2 fd da 3c f0 be 36 ce df 53 f2 e5 16 0f 97 30 9a 7c 3f 03 a5 a5 a3 c3 e1 68 6c 34 d4 4c 6b 23 6b 7a 58 37 60 ba 27 f8 70 de 96 18 9e 32 dc 2e 95 d3 cc 0b 63 68 b9 77 92 bd 26 e5 af 6c 7d 3f 6c b8 15 45 43 e2 15 4d bb 4d 8f cd 2d 33 9c b2 a4 d7 f6 9d 85 d2 d3 89 bb d0 f6 75 2d e8 8d 2a e6 d4 60 38 c5 3e 35 45 1d 4c 0f 12 46 f1 70 42 ad 1c cb 71 62 40 ba 7a Data Ascii: GB8fO/g>nv}-62;n8@`p[[c_~&=E%S3e-tB??$#sbQ4(0X8vyz<6S0\|?hl4Lk#kzX7`'p2.chw&l}?lECMM-3u-*`8>5ELFpBqb@z
2024-05-07 23:18:35 UTC	16384	IN	Data Raw: e4 fc 4c 83 6b 34 5b fd a0 95 5e 3e dc 67 09 97 fc 9f 0f f5 55 4f 4d 2f b5 93 09 b8 eb f5 4c 44 9a 67 13 3b 08 b8 37 08 35 df 6a 8e 07 3f 66 13 d7 df e7 ff 00 8c a9 c9 9e 3f 8c 64 e9 9f 77 28 68 b0 73 c7 75 f4 2a 4d bf ec 6f 14 ee 5d 5a d3 c1 70 05 6f c4 e5 e6 f6 ea 15 18 cb 5a fb 6e 4a df 4e 6d 2d b0 0a ff 00 79 71 16 e1 4d 0d 55 24 8d 2c b3 b6 b1 d8 95 c5 cf ae 8e 2d 69 a8 e4 92 e1 9f 09 dd 72 7b 52 06 33 85 bb 43 8b c5 c0 df 7e ab 1e 49 74 a8 c8 b3 1c 92 8a ad da 0b 5a 06 da 2f c2 e1 fd 4b 2b 4d 6d a9 c3 2b ce 2f 08 1c 3e db 95 df 85 f3 8c ef 49 34 a7 10 a0 ab 63 21 0e 92 17 1d cb 85 ac b5 c7 1c b1 a8 db 73 86 fd a4 61 c4 6f d6 eb ae 04 a3 13 19 30 70 16 4c 25 2a 30 40 25 ed d4 c2 df 31 64 03 71 42 23 95 e4 0b 07 01 fb d3 20 74 45 a7 54 7e 17 79 74 28 Data Ascii: Lk4[^>gUOM/LDg;75j?f?dw(hsuMo]ZpoZnJNm-yqMU$,-ir{R3C~ItZ/K+Mm+/>I4c!sao0pL%0@%1dqB# tET~yt(
2024-05-07 23:18:36 UTC	16384	IN	Data Raw: 83 7e b6 55 11 4f c0 eb 1f 35 49 a9 90 1b 4c 3d 3c 92 be 89 f4 53 b3 d9 7b ec 89 86 1b d8 fb b3 3f 20 b8 af b3 63 fd 92 8d bb 63 cd 0d f2 64 db ff 00 f3 1a 8c 7d 26 fe 4f 67 b7 80 9a c6 80 08 00 80 08 00 80 43 9d d0 20 12 80 08 00 80 08 02 25 06 4a 08 10 01 00 10 01 00 10 01 00 10 01 00 10 09 76 c9 50 41 29 02 d8 6e 13 80 a3 b2 60 10 01 00 0f 08 06 da 6e 6c 80 33 b1 48 39 47 b5 20 bf 63 38 b0 b5 ef 2c 02 df fc c6 a6 9c 9e 15 c5 e9 df fa 2e 94 b4 12 04 c2 e0 0e 9a 5c a6 84 0c 56 be 93 2b e1 42 b3 11 78 8a 32 76 6f 57 1f 25 3b 12 5a e7 19 eb b5 53 9b f0 d8 b0 c8 b0 e6 50 51 b1 c5 c0 b0 ef 20 fe 92 cf 2b 6b 6c 71 98 b8 f6 31 a9 f3 86 80 43 40 b0 1d 11 8f a3 47 8e 19 1a 5c 79 db 65 43 69 3d d7 79 10 70 1d 3a a9 08 ad 1a a4 d1 6f 08 1c 0e 13 34 a1 36 98 ce 9f Data Ascii: ~UO5IL=<S{? ccd}&OgC %JvPA)n`nl3H9G c8,.\V+Bx2voW%;ZSPQ +klq1C@G\yeCi=yp:o46
2024-05-07 23:18:36 UTC	14843	IN	Data Raw: 1e db 8f 66 1c 2b f4 bf b5 06 44 86 da 80 c4 c5 49 1f ea da e9 3f fb 53 bf 89 e1 f9 47 d6 5c 41 fd dc 06 dc de f6 5c 99 74 f4 31 f6 a8 8e d4 e0 ca 6c 1e ef 84 1e 8b 39 d3 4b d9 12 e2 21 b1 90 df 88 a7 e4 5a 73 2e d0 de e9 70 e9 c9 27 55 8e d6 58 bb 38 fd 3e 50 d2 38 fb c4 d7 37 3a dd f3 e5 7a 6f 9d ad 36 5b c5 1f 82 e2 f4 15 f1 ef 25 34 ec 99 a0 f9 b5 c1 c2 ff 00 72 9c a6 e6 9a f1 e5 e1 94 cb f8 3b 8e c0 28 71 cc 42 95 8e 0f 64 15 12 44 c7 79 b4 38 80 7e a0 7e 2a 71 bb 92 8c e4 99 59 15 e5 a5 f6 1d 2f e4 b4 67 61 76 17 b1 37 3d 02 7b 2d 15 25 da d3 70 2f e9 c2 36 34 91 84 53 9a 5a 6a cc 59 c2 c2 9c 88 a1 fe 94 ef 07 4f fb 20 39 df d9 1e 6a 2f 77 47 8c d4 b9 29 9e 36 3e 5f 35 a2 1d 6b d9 0b 22 8c fb ed 01 96 a9 e5 66 ba 3a 09 0e 25 50 08 fd 58 86 a1 7f 9b Data Ascii: f+DI?SG\A\t1l9K!Zs.p'UX8>P87:zo6[%4r;(qBdDy8~~*qY/gav7={-%p/64SZjYO 9j/wG)6>_5k"f:%PX
2024-05-07 23:18:36 UTC	16384	IN	Data Raw: 09 e1 00 61 00 10 1c bb da 4a 26 3f b2 9c 45 ee 6e a0 c9 22 75 bf b5 6f de 91 5f 4f 11 62 6d 73 a9 63 d3 a9 c0 48 de 9b 1d d3 a8 c6 6e b6 78 17 64 58 c6 25 87 43 88 62 0f 8f 03 a0 7f c0 fa b7 69 7b fa f8 5b cf e4 b3 cf 2f 19 ba d7 0c 7c ef 8e 3d d7 28 ed a3 08 c0 dd 18 c3 e6 8e 76 39 8e b3 6b 48 04 1f 3b 85 e7 e3 f2 70 e4 ba 8f 5f 2f e9 fc 9c 3c 73 3f 7b 79 c3 14 86 2c 16 b6 4a 7a 6a 91 55 07 1a db d1 6f ff 00 0f 3f 56 5e d2 68 03 6a 22 04 10 6d e6 a2 d0 85 36 5a 6c d5 2f 94 be ce 70 de dc 2d 26 7a 9a 4e 99 8a ac b1 51 04 e0 b2 ce b9 3b f9 2d 26 5b 2d 2a 2b f0 89 84 8e 1a 0d f8 4f 65 aa ae 74 15 0c 0c 60 8c 83 7e 83 74 89 b2 a0 d7 1d 34 6d 77 3b 6e b1 cb da 93 98 f7 17 f5 f9 29 0a 3c ec d3 fa 20 9e a4 f9 ad 30 f6 1c c7 bb 20 93 d4 ad 90 79 81 c0 75 03 84 Data Ascii: aJ&?En"uo_ObmscHnxdX%Cbi{[/\|=(v9kH;p_/<s?{y,JzjUo?V^hj"m6Zl/p-&zNQ;-&[-*+Oet`~t4mw;n)< 0 yu
2024-05-07 23:18:36 UTC	16384	IN	Data Raw: dc 49 73 9d a4 8b 0b d8 00 01 fb d7 46 32 dd 57 2e 56 63 bc 5b 8a a8 03 9a 36 5a b0 40 ad 8a f4 a4 7a 27 01 8c 16 99 b0 c5 6b 59 05 3d 23 66 8a 66 d4 d0 49 19 17 04 25 7d 19 9c bd 40 da 5a 16 34 0e 9e 4a 64 d1 da 8f 8c e1 ad aa a9 88 91 72 1c 8b 36 36 9d 59 42 d7 50 18 c8 db 4d 93 d7 47 b7 3f cb 59 46 38 33 14 f5 02 30 2e 7c 97 3f 87 7b 57 97 4e 9a ea 36 8a 4d 36 da cb 6d 21 e1 ff 00 6b cc 18 4f 8b 19 5a d1 e1 80 df ef 59 ef b7 57 1f f0 f0 5d 43 4b 6a 64 be c7 51 fc d7 52 32 f6 71 80 71 7e 53 da 4a d8 6c 07 d5 22 07 1b 81 d5 56 c0 c8 16 b5 b9 09 6c 12 38 d8 5c 24 0d 9b 1b 90 2c 99 8c 0e 6d d5 04 51 16 df d1 35 06 a1 64 10 07 6d e4 82 24 ee eb a3 60 b0 d0 37 08 31 0b 13 ce dc 70 83 26 fa 47 36 f5 41 0d a6 fd 45 90 00 ba e4 1b 6f e6 82 21 c6 e4 f9 94 00 d8 Data Ascii: IsF2W.Vc[6Z@z'kY=#ffI%}@Z4Jdr66YBPMG?YF830.\|?{WN6M6m!kOZYW]CKjdQR2qq~SJl"Vl8\$,mQ5dm$`71p&G6AEo!
2024-05-07 23:18:36 UTC	16384	IN	Data Raw: 92 79 b2 1e 06 e6 ca 89 a6 ec e5 c5 b9 fb 2e 12 76 18 85 39 df fd 63 54 e5 37 0a dd 28 73 93 fc 2f 71 be e7 aa 33 67 83 31 86 9b 1d ce cb 0a de 2e 9a f2 69 e4 07 8d 04 05 0d 1d 7f d9 bc 30 e0 d8 a1 77 22 6d af f2 0b af 87 d5 70 73 fb 8e 8b 38 fb 72 40 de fc 9e 17 5c 72 d6 d3 02 3a b0 c7 82 6f e1 37 dd 5d 44 76 ff 00 66 4a 1d 19 7b 12 a8 12 12 5f 56 e6 e9 be c2 cd 0b ca f9 33 ff 00 51 d9 f1 a7 56 bb 75 bc d6 0e d1 3b e1 45 08 52 8b b9 28 54 40 d8 2a 2d 98 9d e4 a0 90 9e 7c 6a a2 0f 35 a4 8b a9 56 92 a9 9b 66 a5 57 08 95 da 5e 80 51 f1 32 e8 a6 8c 5c 6f 65 98 47 98 b9 9b dd 38 49 38 75 47 7a dd f9 4c 44 99 fc 4d b7 09 99 80 ed 0e 05 22 3e e7 dd a9 ec cc f7 d6 46 cb 67 19 2e ab 58 a4 69 21 ba 5b 74 f4 0d b9 ba ac 91 9a 94 77 6d 26 db 29 bd 0d aa 29 80 aa 9c Data Ascii: y.v9cT7(s/q3g1.i0w"mps8r@\r:o7]DvfJ{_V3QVu;ER(T@*-\|j5VfW^Q2\oeG8I8uGzLDM">Fg.Xi![twm&))
2024-05-07 23:18:36 UTC	14808	IN	Data Raw: 82 2b 1d a3 71 20 7d ca b7 fb 2d 44 ff 00 72 3d 15 d9 67 67 b4 98 74 74 d5 d8 a3 d9 51 3c ad 12 47 40 df 13 63 07 83 21 e0 9e ba 47 1d 7c 95 71 70 cc bf 76 4e 3f 95 f3 2e 3f fa 7c 7f f7 5a f6 41 50 e9 3d a9 de f9 1c 6c 2a 5e d6 83 d0 08 c8 00 7a 01 b7 c9 7a 78 75 34 f9 bc ed b9 3e 93 e1 4e bd 1b 10 da 26 24 60 98 04 a8 05 21 1f 10 af a6 c2 a8 6a 2b 2b 27 8e 96 92 9e 37 4b 2c f2 b8 35 8c 60 17 24 93 c0 01 30 f9 bd ed 45 ed 45 51 da ae 3a fc 2f 00 32 d3 e5 aa 27 96 c0 e7 0b 3a a1 fc 19 48 3c 7a 5f 70 3c ae 57 77 16 1e 1d fd b3 cf 2d 75 1e 79 a6 c3 aa 2b 6a 19 2c ae 73 cf c4 64 79 bf de ba 7d b1 37 8a e2 91 d2 17 3d 97 69 71 b0 d4 77 50 b9 3e ea 91 d5 4f 91 b3 4b e2 70 2c 3b 93 d4 29 b1 6a bf d2 2f 14 d2 34 92 d3 2d ac 4f 20 05 9e 93 b5 3d 64 d3 de ed 9b 66 Data Ascii: +q }-Dr=ggttQ<G@c!G\|qpvN?.?\|ZAP=l*^zzxu4>N&$`!j++'7K,5`$0EEQ:/2':H<z_p<Ww-uy+j,sdy}7=iqwP>OKp,;)j/4-O =df

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49777	13.107.246.70	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:36 UTC	833	OUT	GET /about-us/our-team HTTP/1.1 Host: www.gilardi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=Lax; SameSite=Lax; _ga=GA1.2.715666436.1715123900; _gid=GA1.2.909392301.1715123900; _gat_UA-132403652-1=1; _ga_XCZNY5NT2G=GS1.2.1715123901.1.1.1715123914.0.0.0
2024-05-07 23:18:37 UTC	2935	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 23:18:36 GMT Content-Type: text/html Content-Length: 25979 Connection: close Content-MD5: 9ciq+JdbT/HR/DDM3FFmmw== Last-Modified: Tue, 07 May 2024 05:05:05 GMT ETag: "0x8DC6E534277A0BB" x-ms-request-id: 83647042-c01e-0065-2bd4-a02a06000000 x-ms-version: 2018-03-28 x-azure-ref: 20240507T231836Z-17c65945bcb86ln6rahnfuvdpn00000003rg0000000194dd X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff Referrer-Policy: strict-origin X-XSS-Protection: 1; mode=block Cache-Control: no-store no-cache Set-Cookie: SameSite=Lax;secure;HttpOnly Permissions-Policy: camera=(), microphone=() Content-Security-Policy: worker-src blob: https://.georgeson.com;script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://content-assets.computershare.com https://ui.customsearch.ai https://s508159127.t.eloqua.com https://ssl.google-analytics.com https://www.google-analytics.com https://.evidon.com https://img03.en25.com https://js.adsrvr.org https://snap.licdn.com https://view.ceros.com https://siteintercept.qualtrics.com https://.siteintercept.qualtrics.com https://secure.quantserve.com https://.pub.sfmc-content.com https://rules.quantcount.com https://.adsrvr.org https://snap.licdn.com https://widget.trustpilot.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://.crazyegg.com https://bat.bing.com;connect-src https://www.googletagmanager.com https://www.google-analytics.com https://ui.customsearch.ai https://s508159127.t.eloqua.com https://*.evidon.com https://cdn.linkedin.oribi.io https://siteintercept.qualtrics.com https://rules.quantcount.com http [TRUNCATED] X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-05-07 23:18:37 UTC	13449	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 2f 3e 3c 74 69 74 6c 65 3e 4f 75 72 20 74 65 61 6d 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 68 72 65 66 3d 22 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 70 6e 67 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 70 72 Data Ascii: <!DOCTYPE html><html><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><title>Our team</title><link rel="icon" type="image/png" href="/img/favicon.png"/><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/><meta pr
2024-05-07 23:18:37 UTC	2563	IN	Data Raw: 6c 64 73 20 75 70 6f 6e 20 74 68 65 20 63 6f 6d 70 61 6e 79 e2 80 99 73 20 72 65 73 70 6f 6e 73 69 76 65 20 73 65 72 76 69 63 65 73 20 61 70 70 72 6f 61 63 68 2c 20 69 6e 64 75 73 74 72 79 20 65 78 70 65 72 74 69 73 65 2c 20 61 6e 64 20 69 6e 6e 6f 76 61 74 69 76 65 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 2e 20 0a 20 0a 48 65 20 69 73 20 63 6f 6d 6d 69 74 74 65 64 20 74 6f 20 66 6f 73 74 65 72 69 6e 67 20 63 6c 69 65 6e 74 20 73 61 74 69 73 66 61 63 74 69 6f 6e 20 74 68 72 6f 75 67 68 20 6c 6f 6e 67 2d 74 65 72 6d 20 61 6e 64 20 74 72 75 73 74 2d 62 61 73 65 64 20 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 2c 20 61 6e 20 61 70 70 72 6f 61 63 68 20 74 68 61 74 20 68 65 20 68 61 73 20 63 75 6c 74 69 76 61 74 65 64 20 6f 76 65 72 20 68 69 73 20 32 35 2d 79 65 61 Data Ascii: lds upon the companys responsive services approach, industry expertise, and innovative technologies. He is committed to fostering client satisfaction through long-term and trust-based relationships, an approach that he has cultivated over his 25-yea
2024-05-07 23:18:37 UTC	9967	IN	Data Raw: 6e 20 73 65 74 74 6c 65 6d 65 6e 74 20 6d 61 74 74 65 72 73 20 61 6e 64 20 68 61 73 20 62 65 65 6e 20 61 20 66 65 61 74 75 72 65 64 20 73 70 65 61 6b 65 72 20 61 74 20 76 61 72 69 6f 75 73 20 46 65 64 65 72 61 6c 20 6a 75 64 69 63 69 61 6c 20 63 6f 6e 66 65 72 65 6e 63 65 73 2e 0a 0a 50 72 69 6f 72 20 74 6f 20 70 72 61 63 74 69 63 69 6e 67 20 6c 61 77 2c 20 50 65 74 65 72 20 73 65 72 76 65 64 20 69 6e 20 74 68 65 20 4a 65 73 75 69 74 20 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 20 56 6f 6c 75 6e 74 65 65 72 73 20 69 6e 20 4d 69 63 72 6f 6e 65 73 69 61 2e 20 57 68 69 6c 65 20 74 68 65 72 65 2c 20 68 65 20 74 61 75 67 68 74 20 68 69 67 68 20 73 63 68 6f 6f 6c 2c 20 68 65 6c 70 65 64 20 70 72 69 73 6f 6e 20 69 6e 6d 61 74 65 73 20 6f 62 74 61 69 6e 20 74 68 65 Data Ascii: n settlement matters and has been a featured speaker at various Federal judicial conferences.Prior to practicing law, Peter served in the Jesuit International Volunteers in Micronesia. While there, he taught high school, helped prison inmates obtain the

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49795	99.86.38.13	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:37 UTC	712	OUT	GET /eh96rkuu9740/2a73440ea1134e808185dce447956100/6e0e997e957c3a30053bcbab7637e3b7/OurTeam.jpg?w=1920&h=850&fit=fill&f=center HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:38 UTC	506	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 194431 Connection: close ETag: "9f6ccc60756df965a3e16a50c10677d4" Last-Modified: Fri, 12 Apr 2024 18:05:28 GMT Date: Tue, 07 May 2024 23:18:38 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 2e20768704c71ff3ce2e677251d27f3c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: q11xrdgRqj4GP6FDL1t1I8JHm3dNsTLv6HqzZlaSCicXJUwtZnPAyg==
2024-05-07 23:18:38 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 2c 01 2c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 03 52 07 80 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 02 03 01 04 00 05 06 07 08 09 ff c4 00 47 10 00 01 03 03 02 04 04 05 02 03 06 05 04 01 02 07 01 00 02 11 03 04 21 05 31 06 12 41 51 07 13 22 61 14 71 81 91 a1 08 32 23 42 Data Ascii: JFIF,,CCRG!1AQ"aq2#B
2024-05-07 23:18:38 UTC	14465	IN	Data Raw: 75 3b 4a d8 9c 15 2b 9f ed f0 6f 8a 4e 3f da 6f 07 19 2b af 8f ed e9 e3 e9 e7 8e dd 7a 9d 5e db fa 7d b9 f2 b5 3a 60 f5 21 62 fd be 57 e4 cf 97 e8 4f 87 15 79 ed 68 fc 82 c5 72 f1 bd 8f 4d 67 3b 1a b9 3d dc fd 37 b6 b4 60 04 75 8d bd ad 30 32 ac 6a 36 0c 68 8d 91 d6 44 96 fd 54 c0 3c aa 82 60 ca aa b3 4d a3 aa 1a 78 6e c8 09 cc 59 52 9c cc a0 5c 26 1a 12 21 5c 35 04 26 1a 88 54 d1 b5 bf 54 45 9a 4d 84 34 e6 89 51 44 44 a8 14 e6 a4 0a 21 68 2d d0 a0 5b d0 25 c7 75 02 cb b3 94 41 b1 d9 44 34 39 17 58 5c 8a 55 47 7e 11 29 7c e8 cb 39 d0 d4 79 91 d5 04 79 9e e8 6a 5a f9 f7 44 d3 a9 bb 23 b2 b2 b4 73 5f 94 a0 e5 46 a0 5c e8 40 21 fd d0 10 32 80 da 55 c0 c6 e5 53 44 00 d9 13 4c 63 72 88 73 46 14 ad 19 cb ec a0 12 10 0c 47 4c 20 20 81 8d 8e e8 0c 6c 80 da 50 18 Data Ascii: u;J+oN?o+z^}:`!bWOyhrMg;=7`u02j6hDT<`MxnYR\&!\5&TTEM4QDD!h-[%uAD49X\UG~)\|9yyjZD#s_F\@!2USDLcrsFGL lP
2024-05-07 23:18:38 UTC	16384	IN	Data Raw: dd 13 f9 22 9d 5e 23 63 7f 9c 7d d3 58 be 48 a9 53 8a 29 8f e7 1f 74 d6 2f 93 15 dd c5 74 87 fc c1 f7 46 3f 94 23 8a e9 1f f9 83 ee b5 f6 9f ca b1 47 89 58 ef e7 13 f3 46 a7 95 72 9f 11 30 ff 00 30 fb a6 b5 fc 90 d1 c4 6c ff 00 18 fb a6 af f2 c4 3b 88 99 fe 3f ca 6a ff 00 2a bd 4e 24 64 1f 58 fb a6 b1 fc 9f d2 8d 6e 29 a6 cf e7 1f 74 d6 2f 96 aa 3f 8c 69 b7 fe 60 fb a9 a9 7c 94 87 71 ad 2c 8f 33 f2 8c ff 00 2a 1b c6 74 89 fe f0 7d d3 4f e4 5b a5 c5 94 df 11 53 f2 b4 d7 f2 55 da 7c 4b 4c c7 af f2 a6 b5 fc a6 8e 26 63 7f 9f f2 a6 b5 fc 8c 77 12 d3 3f f3 3f 29 a7 f2 aa dc 71 35 30 0f ac 7d d3 75 9b e4 68 35 2e 2f a7 4c 12 6a 0f ba 31 7b d7 9b f1 77 1f d3 a3 4d df c5 03 ea b5 23 8d e9 f3 c7 88 1e 25 35 e2 a0 6d 5e fd 56 97 99 b5 e0 1c 47 c4 6e bf ae e2 5c 4e Data Ascii: "^#c}XHS)t/tF?#GXFr00l;?jN$dXn)t/?i`\|q,3t}O[SU\|KL&cw??)q50}uh5./Lj1{wM#%5m^VGn\N
2024-05-07 23:18:38 UTC	12792	IN	Data Raw: 11 d5 46 a3 71 6f b0 51 56 96 40 18 54 29 ff 00 25 53 ec 97 0c e5 54 0c 0e c8 83 11 0a 01 74 28 d4 2c c1 51 43 30 80 c1 54 30 38 a6 83 6b cc 2d 06 35 e6 02 06 8a 9d f7 57 59 a6 35 f3 d5 51 85 ca 52 10 f7 9c a8 a4 39 e4 92 86 94 e7 a9 a6 96 e7 82 a6 9a 5b 88 43 40 5d d9 19 48 20 aa 9a 75 32 aa 8c b9 40 3c d9 d9 65 a0 73 65 55 10 74 28 0c 54 57 43 1a e5 74 34 3c aa 18 da 91 d5 12 98 ca 93 d5 5d 64 7e 66 37 51 4a 7b f0 8b a4 b9 d2 51 4b 73 a1 46 74 b3 53 e8 9a 04 d4 90 88 12 e3 2a 08 e6 40 d6 3b ea b4 9a 3e 64 34 0e 7e 51 42 1c 84 30 3b dd 59 41 b5 f1 d7 2b 49 4d 65 49 40 d6 3d 10 e6 3e 3a ab a1 cd aa ae ae 98 1f 8d d4 d5 41 a9 ff 00 65 4d 00 f7 48 51 a8 d7 dc b9 35 5a 3d 41 f8 2a 6a c7 15 ad bf 0e ca 6b 4f 2c e2 e7 43 5c b1 6b 51 e3 5c 44 e9 f3 14 8d f5 f4 Data Ascii: FqoQV@T)%STt(,QC0T08k-5WY5QR9[C@]H u2@<eseUt(TWCt4<]d~f7QJ{QKsFtS@;>d4~QB0;YA+IMeI@=>:AeMHQ5Z=AjkO,C\kQ\D
2024-05-07 23:18:38 UTC	3592	IN	Data Raw: e8 01 cf 8f 73 ec 81 6e 7a 00 2e fc a0 12 e2 42 00 2f 40 b2 ff 00 74 00 5d 9e 88 3d 24 41 5f b5 7e 5c 6d 82 71 f7 53 41 8d e1 35 4d 1f 35 9d 6b d4 60 7b ca cf b2 e3 23 d9 4d 5c 41 6f b2 9a 61 94 5b 04 76 52 d6 9b 2b 67 c2 e3 5d 24 5f a7 5a 07 ba e1 63 70 4f b8 c4 4a 98 d2 95 cd c6 0a 98 39 8d 62 bf 33 5d de 17 6e 63 15 c0 6b 2d e6 e6 95 ef e2 39 57 35 56 84 bb 22 7b 2f 64 70 4d 1b 50 1d b4 14 b4 74 5a 45 38 70 5c 3a 59 5d d6 8e 79 43 61 78 3b 76 e5 d9 69 b5 30 0f 55 e7 ea 3a 47 47 65 56 00 5e 7b 1d 23 73 6d 58 80 b8 d8 de ae 32 be 30 7e ea 62 98 da e6 77 53 19 d3 19 5a 3a cf 75 70 58 a7 5b b2 96 0b 54 eb 28 d6 ac 32 ba 98 68 fc e3 dd 4c 56 79 de ea e0 8f 35 54 d6 79 a5 0d 48 ab 38 43 46 2a a1 a3 15 72 a6 2e 9c ca de ea 60 31 5f 0a 60 c7 57 94 c0 b7 56 dd Data Ascii: snz.B/@t]=$A_~\mqSA5M5k`{#M\Aoa[vR+g]$_ZcpOJ9b3]nck-9W5V"{/dpMPtZE8p\:Y]yCax;vi0U:GGeV^{#smX20~bwSZ:upX[T(2hLVy5TyH8CF*r.`1_`WV
2024-05-07 23:18:38 UTC	6396	IN	Data Raw: 9e b2 1a 70 bf 63 5f 9d c3 1a 09 85 95 90 e6 0c 6c b3 5b 39 ac 58 5c 38 32 31 0b 1a d6 0d b4 f2 a6 b4 9f 2f ba 68 83 47 d9 34 c1 06 11 9c a8 98 20 f2 c4 50 54 b8 c4 a0 a1 73 5f 05 6a 46 6d 68 af de 5e d3 d5 76 e6 33 5c ed dd 3e 63 ec bd 3c b8 d5 07 51 85 d7 58 15 3a 39 08 36 96 94 76 8d 97 3a b1 d1 e9 cd e5 21 79 ba 76 8e 97 4f 79 6c 2f 3d 74 74 16 95 8c 05 c7 ae 5a 8d c5 bd 49 5c 6c 69 79 9d 16 54 e6 e5 03 58 e8 40 f6 98 50 3d 95 21 66 c5 35 b5 37 59 c0 c6 d4 84 04 2a 7b fd d3 10 41 f3 08 ac e7 db 28 82 0e ca 60 36 bb 08 08 3d 14 62 a6 54 35 3e 64 26 1a c3 54 c2 1a 07 3f 0a 85 39 e5 5c 42 dc e2 a8 5b 89 27 1d 56 99 c2 9e 24 ad e8 4b c6 eb 60 62 50 c1 06 cc 75 28 63 21 11 00 91 b6 10 31 b5 de 06 e9 eb 06 3e e1 e4 7b a9 ea aa 95 de e2 0e 65 59 ce 0d 65 d5 Data Ascii: pc_l[9X\821/hG4 PTs_jFmh^v3\>c<QX:96v:!yvOyl/=ttZI\liyTX@P=!f57Y*{A(`6=bT5>d&T?9\B['V$K`bPu(c!1>{eYe
2024-05-07 23:18:38 UTC	8009	IN	Data Raw: 3d 40 87 36 42 e3 d4 c7 4e 5e a1 c3 d4 b9 43 57 97 a7 a2 3b 1b 37 f2 35 72 ae 8b ad b8 11 95 9d 31 2e ae 23 74 d3 14 2f ae 43 58 72 b7 0f a7 9f 71 5e a6 19 4a a6 7e 4b d1 c3 8f 51 e3 da 95 c1 ac fa d5 3a 93 01 7a 63 c1 d5 da 56 8f c2 ef bf ac 1c f0 48 72 eb ed 8e 9c cb 5e 8d a5 70 35 31 49 a3 cb 59 be 47 6f 4a 7e a5 e1 eb 5f 6e e2 d6 f2 90 16 2f 95 cb be 3a cf 87 84 71 4f 01 de d1 d5 de f2 d7 39 85 cb a7 39 8e 13 79 99 5d 47 07 f0 d8 a7 c9 e9 2c 70 56 fc 37 39 7b 17 0e e9 c6 90 68 39 5c f5 df 98 ed ec e9 f2 b0 2e 36 ba 63 2e 0c c8 56 56 55 5c d0 76 5a d6 4c a3 6f 3d 13 d8 5e a5 6c 00 d9 4d 68 df 85 53 57 0a 7d b1 09 f0 7d aa d7 a2 42 b2 4a 35 57 94 9c c0 4a e9 24 a3 8b e2 3d 49 d6 b4 dd d3 ea b5 3c 72 a7 b6 3e 7e f1 23 8a cd 36 55 1c fd e7 2a 77 c6 45 9d Data Ascii: =@6BN^CW;75r1.#t/CXrq^J~KQ:zcVHr^p51IYGoJ~_n/:qO99y]G,pV79{h9\.6c.VVU\vZLo=^lMhSW}}BJ5WJ$=I<r>~#6U*wE
2024-05-07 23:18:38 UTC	12792	IN	Data Raw: d1 5e e5 c5 ee 07 d2 c9 c0 4e ba f5 99 17 7e 32 3a ee 5a 56 34 64 8f 5c 44 76 5e 6f b4 6b 19 54 d4 ba 6b 89 26 4e cb b7 d1 2e 3b 4d 3a ed d6 34 43 f9 88 c2 f2 5f 9b 8e b3 ac 01 e2 6b ba f5 8f f1 5c da 43 f2 af f1 f3 27 d3 5f c8 6d 4e 2e b8 20 53 a6 64 0c 49 0a 7f 0f 3f 75 3d a1 d6 ba cd 67 65 dc a7 e8 b3 d7 31 75 b1 1a 99 73 39 9c d1 1f 25 cf d2 35 ae 43 8c fc 43 a5 a2 5a d4 74 b0 38 0c 05 db 8f 0c eb ed 8d db 8f 96 3c 4d fd 4c dc 69 8e aa 19 50 13 9c 07 2d f9 3b f1 f8 63 db e1 f0 7f 23 e7 7e 26 fd 4e 6b 7a 8d 57 32 95 67 00 71 82 be 4f 93 f3 a4 bf e2 fa dc 7e 1f 13 ed e7 5a bf 19 eb 5c 4c f2 6b dc 3f 90 ef 95 e2 ef f2 7c 9d fe de 99 c7 1e 3f a8 d6 d3 b5 6d 3c bc c9 ea 4a f3 5b 6f cd 67 ae ed fa 19 a9 4d a6 02 89 95 81 ce 71 1c a4 85 a9 4c b1 d1 70 df 11 Data Ascii: ^N~2:ZV4d\Dv^okTk&N.;M:4C_k\C'_mN. SdI?u=ge1us9%5CCZt8<MLiP-;c#~&NkzW2gqO~Z\Lk?\|?m<J[ogMqLp
2024-05-07 23:18:38 UTC	3592	IN	Data Raw: c7 df a4 d7 bc 78 51 7a ea f6 d4 9c 66 48 5a e3 c3 ea bf cb ed 5e f7 a3 be 68 b7 0b bf ac 8c 75 75 b8 a6 42 ac 53 5a e0 ae b2 30 67 65 75 10 4f ba 68 96 8c a6 a9 a3 69 53 50 ba 8f 01 41 5d c6 56 82 9c e0 15 0a 71 94 10 40 57 52 a1 c0 35 a5 59 53 1e 41 e3 57 11 0d 2f 44 b9 7f 34 10 d3 d5 7b bc 3f dd 70 f2 3f 28 7c 63 e2 57 f1 27 17 56 68 79 78 e7 38 fa af 89 f9 9e 4f 7f 25 8f ab f8 bc 7a f1 ad 8e 90 c1 a7 e8 ed 04 00 48 5d bc 73 d3 c7 af 4f 45 e9 9a 5d 6d 7f 5a b1 d3 68 34 9a d7 75 db 48 01 ee 57 83 bb 6f cc fb 67 cb e4 fe 0f 17 5d ff 00 51 fa f7 e1 4f 0e 5a f8 6b e1 6d a5 10 d1 4d 96 f6 a3 a4 6c 17 d1 cf e1 f1 4e 23 e5 f8 39 be 3f 16 df ba fc fb fd 48 f1 c5 4e 29 e3 1b 86 f3 92 ce 72 48 fa af 0f e3 f3 6d bd 57 be 7e a3 c7 a4 c4 fe 57 b9 a6 e3 82 b8 56 f3 Data Ascii: xQzfHZ^huuBSZ0geuOhiSPA]Vq@WR5YSAW/D4{?p?(\|cW'Vhyx8O%zH]sOE]mZh4uHWog]QOZkmMlN#9?HN)rHmW~WV
2024-05-07 23:18:38 UTC	12792	IN	Data Raw: a4 75 95 71 3e 0e 65 57 01 ba d2 1c cb 8f 75 03 45 d1 04 65 36 86 b6 ec aa 61 8c bb 30 9a 98 73 2f 0c ef 80 89 87 0b a3 0a e0 21 77 9d d5 11 f1 60 c7 65 90 3f 12 06 c8 33 e2 37 ce 10 10 b8 8e a8 0c 5c 13 39 fa ca 09 17 07 ae ea 09 f3 e7 ae 15 04 6b ce fb 7b a0 cf 37 28 27 cc 28 23 9d 06 73 fb e7 dd 06 73 fd 42 08 e7 f7 fa 2a 30 bf ec a0 02 e9 5a 10 5d 1f ec b2 20 bd 00 f3 a0 ce 7c 6e 80 3c c3 9c ee 82 0d 4e 88 3e c0 fa af b0 f9 22 6e 4a 94 35 a3 da 16 57 44 02 2b 39 65 15 3c bd 65 04 86 e3 2a 08 73 15 09 73 22 55 09 a8 d0 7a 2d 25 56 a8 20 e3 64 42 1e d3 3e cb 5a 84 b9 b9 3d fb aa 15 11 d5 69 96 03 95 43 58 72 a2 ae 51 76 54 a3 63 41 d8 ec b9 ab 61 46 a6 ca 2a f5 1a a2 37 95 8a ab b4 eb 4a c5 55 96 d5 33 ec b3 43 d9 55 30 58 a5 53 df 2a 06 8a 9e f8 50 17 Data Ascii: uq>eWuEe6a0s/!w`e?37\9k{7('(#ssB0Z] \|n<N>"nJ5WD+9e<ess"Uz-%V dB>Z=iCXrQvTcAaF7JU3CU0XSP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49796	99.86.38.13	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:37 UTC	725	OUT	GET /eh96rkuu9740/e5eb7c23d4bf4c0db739751135d7bc72/bc48a7154c6ffcc3fef26c56a0793b39/GMullins_GreyBackground.jpg?f=top&fit=thumb&w=300&h=300 HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:38 UTC	505	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 20316 Connection: close ETag: "ff9a20b1dc2da3d8b3fa7972af35833d" Last-Modified: Mon, 22 Apr 2024 03:12:36 GMT Date: Tue, 07 May 2024 23:18:37 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 60b744e5b364d04abea9fa6686121242.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: ZlQGlsri6U2Q-GsrGLoEHjQyMX2zXI1gzIDHS-p3LkhbLHss1mvJGw==
2024-05-07 23:18:38 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 c2 01 c2 00 00 ff e2 0b e0 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0b d0 6e 6f 6e 65 02 00 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d4 00 07 00 15 00 13 00 0b 00 21 61 63 73 70 00 00 00 00 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 01 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 64 65 73 63 00 00 01 44 00 00 00 74 62 58 59 5a 00 00 01 b8 00 00 00 14 62 54 52 43 00 00 01 cc 00 00 08 0c 64 6d 64 64 00 00 09 d8 00 00 00 88 67 58 59 5a 00 00 0a 60 00 00 00 14 67 54 52 43 00 00 01 cc 00 00 08 0c 6c 75 6d 69 00 00 0a 74 00 00 00 14 6d Data Ascii: JFIFICC_PROFILEnonemntrRGB XYZ !acspIEC sRGB-HP descDtbXYZbTRCdmddgXYZ`gTRClumitm
2024-05-07 23:18:38 UTC	3932	IN	Data Raw: d3 f3 3b b8 fa 9b 74 0b c3 e7 e4 fb 99 ee 7a 77 f1 e3 db 1c bd d1 82 e3 7f a8 16 5c ad c9 10 c1 b5 f5 5c 05 90 7e 38 dd d3 71 ec 88 51 a9 34 6e 84 83 a1 cf 90 34 db b2 0e 8d 92 73 d5 76 5c c4 a9 2b 70 fa b9 68 ab a9 de 1f 1c f0 3c b5 ed 3e 85 5f 48 fa 09 c0 3f 8c dc 37 37 43 4d 82 e7 69 a2 c3 b1 7b 06 33 12 b0 64 13 9e 5e 7e 8c 77 af dd 3e 9c 96 c9 97 e5 1e 98 91 ad 91 8d 73 1c 1e c7 0b 87 03 70 42 c8 41 9e 1b a8 a8 72 c5 e8 88 87 2c 76 57 d8 87 33 36 ba 08 ce 6e fb a2 36 31 b6 ca 32 4a 8a 3b a2 27 c3 15 96 4a 9b 04 37 53 6a 9d 0c 1c 96 23 07 c5 6f 88 2c 85 c1 48 40 cc f8 dc 70 57 39 ba a3 c3 a9 c7 8b 52 f1 d0 e8 1f 74 1e 85 d6 1e aa 0f 22 f1 47 fb 4d eb a7 64 d4 d9 13 00 8f 0f 66 e0 57 e2 a4 4b 29 f5 11 b7 ca d3 ee 5c a5 bf 84 79 3b 88 5f 11 b9 eb 89 52 Data Ascii: ;tzw\\~8qQ4n4sv\+ph<>_H?77CMi{3d^~w>spBAr,vW36n612J;'J7Sj#o,H@pW9Rt"GMdfWK)\y;_R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49797	99.86.38.13	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:37 UTC	733	OUT	GET /eh96rkuu9740/7bafdfe337c247b38eb5a0949fd1c4aa/96659b8dc33ff89b04e2419e6c74fd49/BButvick_GreyBackground_website.jpg?f=top&fit=thumb&w=300&h=300 HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:37 UTC	505	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 21008 Connection: close ETag: "746669dd061f6b4f0d221d91773354d0" Last-Modified: Thu, 25 Apr 2024 18:20:29 GMT Date: Tue, 07 May 2024 23:18:37 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 1570d93226c1bbca2ebaad510cff3e0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: mSzukI7YnqDSmdfmn7-LsGxj0Aohw8pfGmANk4F7Hjlp4nHotpxLbw==
2024-05-07 23:18:37 UTC	15879	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 2c 01 2c 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIF,,XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-05-07 23:18:37 UTC	5129	IN	Data Raw: 20 c3 a1 78 d3 13 6f 2c 87 6d 4e e6 e2 57 b9 c1 85 61 82 84 7e 0f 9d 72 73 cb 3e 47 92 5f 27 93 7d af f8 de ee 2e f1 46 bc 52 54 19 30 1c 29 ee a2 a0 6b 4f 81 cd 69 b3 e5 1e 7a dc 2f 7f 20 d5 e8 f0 e3 58 e1 fc 9c 77 2e cd c8 e7 7a e9 6c 1d bf 35 b6 df c1 89 1c 90 19 64 dd 60 4a 74 67 43 4c 0c 42 f6 b8 e9 e6 84 7a 62 55 c7 dc c6 e7 10 1d 72 02 c6 5e 02 c4 74 c2 50 4c 7f 76 ef 5e 45 55 d6 fc 2c f0 d8 1c 26 e3 ce 6d e0 ce 28 26 c2 2b 5c da 57 3a f3 50 4f e2 82 51 ea de 87 d4 6e aa 9c 14 b5 24 16 9d c4 ef 8e 0a 76 b9 ca 1c 59 64 14 55 33 37 01 c7 dc 00 34 75 4f 1a 24 77 ff 00 6d fc 8f b1 b1 5a 13 c2 e3 b5 b2 f8 e4 4d d3 d1 bd 01 ea 16 b9 69 71 ae ba 02 a4 00 80 10 15 0e 88 0a be 68 06 64 00 80 44 06 a0 ed 0d da 07 0f e0 a6 5f 05 a1 95 78 dd 48 22 9a 90 bb ff Data Ascii: xo,mNWa~rs>G_'}.FRT0)kOiz/ Xw.zl5d`JtgCLBzbUr^tPLv^EU,&m(&+\W:POQn$vYdU374uO$wmZMiqhdD_xH"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49799	99.86.38.13	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:37 UTC	724	OUT	GET /eh96rkuu9740/7cd77d1eff7c4f0fb2fbf364f4597505/248b9d293a526fa545e2b3f8b71c6f2e/PCrudo_GreyBackground2.jpg?f=top&fit=thumb&w=300&h=300 HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:37 UTC	505	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 20439 Connection: close ETag: "437d876c85f222c91ab0efd6449c7b35" Last-Modified: Wed, 17 Apr 2024 18:51:53 GMT Date: Tue, 07 May 2024 23:18:37 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 34f8ef0e4c880df0650a814412a26ea6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: lHMAj5ng3miXdYtBlGJekJZPrMEYK0pri02RcAMRqzANDto6v8b0nQ==
2024-05-07 23:18:37 UTC	15879	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 c2 01 c2 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-05-07 23:18:37 UTC	3309	IN	Data Raw: 08 a8 29 f9 37 59 cb 9e 7c 1a d1 bb 8f a0 41 cc dd a4 7d b2 e6 9f be a3 e1 1a 4f 84 8f 76 fc 7d 5b 43 a4 3e 6d 67 26 fb e7 d0 22 7b 5c cd c4 fc 73 73 e2 4a e9 6a ae 35 d3 d6 d5 49 f7 a5 9d e5 ee 3e e7 f2 52 ce 23 4c 5e a6 a5 cf 3c f2 4f 8a 84 a8 64 97 3b 1e 78 41 08 19 41 47 72 04 52 4a 46 da 5b a8 7b 6e b1 9f 08 5c 1a ec b5 a7 6d c2 c9 21 19 f5 41 2d e1 48 97 a7 2a 10 85 80 97 64 f4 d9 06 f8 fb 2f 76 93 ff 00 2f 71 21 e1 ea e9 71 6d ba b8 36 22 f7 6d 1d 47 26 9f 47 7d d3 e7 a7 c1 74 3a 5c bd b6 ec 9f 12 a7 9e 9b 8e e8 77 0f 0e b9 d4 b3 c7 ab e5 d2 40 c7 2e ab a9 30 a1 e5 b7 2c ae a7 bc d0 fc 25 5c 6d 96 19 1b a5 cd 78 c8 23 1b ed ee b4 5e 91 68 d4 c6 e1 15 b5 a9 31 6a ce a5 a5 bb 5b fb 3b 4d 6c 92 4b cd 8a 23 3d 0e 35 49 4e c1 97 c6 3c 7c c7 e2 17 88 fa Data Ascii: )7Y\|A}Ov}[C>mg&"{\ssJj5I>R#L^<Od;xAAGrRJF[{n\m!A-H*d/v/q!qm6"mG&G}t:\w@.0,%\mx#^h1j[;MlK#=5IN<\|
2024-05-07 23:18:37 UTC	1251	IN	Data Raw: 12 4e ee 84 82 63 3e d8 73 7f f8 84 6a f1 3a 6f 24 48 80 83 e3 eb 25 c3 06 39 f9 28 86 d4 c0 7a 9e aa 50 8d ad db 27 df 28 3d d8 3b f2 41 e9 19 ea 76 41 e8 18 1c fc 91 0f 48 db 64 1e 39 b8 df 98 52 25 bf 07 fa a8 16 cb ad 11 ab a5 7b 01 c1 3c 8a c6 d1 b8 12 78 6a e4 e9 58 68 a7 da 78 76 df ab 7a 2c 69 3e d2 95 f0 8d c7 8f a2 da 0e 6f 23 f8 21 b0 0f 3f 44 42 23 d4 a0 81 c3 1e ea 04 2d f9 4f fa 22 5b eb ec 83 da b5 47 66 fd a5 c3 13 65 2d a6 af c4 65 a4 e0 17 8d db f5 19 1e a4 2e 87 49 68 9b 4e 39 f7 fe aa 5d 4d 7e de f8 f6 7d 7b e1 9b e5 1f 16 59 a9 ab 23 70 7c 52 b4 13 e4 4f 55 9d a2 d8 ed a5 3e 2d 0b bc 2c 7d 23 bb a3 bb 79 34 ac 6d 31 6e 60 8f b7 89 4b ab a2 64 ac cb 46 fd 42 ce 97 d4 b1 b5 5a ee cd c3 cf a2 af bf 55 48 06 2a 6b 9e f8 c0 ea 30 07 e6 16 Data Ascii: Nc>sj:o$H%9(zP'(=;AvAHd9R%{<xjXhxvz,i>o#!?DB#-O"[Gfe-e.IhN9]M~}{Y#p\|ROU>-,}#y4m1n`KdFBZUH*k0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49800	99.86.38.13	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:37 UTC	728	OUT	GET /eh96rkuu9740/799b781401cb477b80a677fefce37de9/767bd69590f2106f78073c5d343560b3/LMcDermott_GreyBackground2.jpg?f=top&fit=thumb&w=300&h=300 HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:37 UTC	505	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 27573 Connection: close ETag: "f191ba7ceab64e6c1cc5ba22b9d61e0f" Last-Modified: Wed, 20 Mar 2024 10:39:08 GMT Date: Tue, 07 May 2024 23:18:37 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 ef6538ee7be7b17c84d06edb0f4c0a1a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: xz-okCBOrHw2lwfa6xwKHARBqDJXNZuPgAH0p_eR7RsVZKX1T8QEAA==
2024-05-07 23:18:37 UTC	15879	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 c2 01 c2 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-05-07 23:18:37 UTC	3315	IN	Data Raw: 79 e9 4b b8 9d e9 31 60 84 d8 9d e3 21 9e c0 d4 20 02 00 20 02 00 20 02 00 20 02 00 20 0f 15 03 28 d4 fd d0 c3 cb 02 e5 28 2a 03 bc db 68 af 9a 5c 20 d9 36 28 f2 9a 47 13 4f 25 52 68 24 84 a1 b1 94 a8 9b 0b 8d fd 22 b7 8c d4 b1 a6 fa 44 f9 d3 59 1a 5d b2 1e e2 a6 20 fe 2e e9 94 96 4a 5d 95 23 22 54 54 47 32 c2 ea b1 00 e9 b7 b4 71 3c ac df 2e 57 4f 48 ec f8 b8 7e 3c 7b ed 95 9f 16 b4 cd 29 64 a9 6d 97 ca 48 4a ae 02 94 a2 4d d2 07 e1 03 a9 36 b4 44 9a f4 4e d5 0d 59 77 57 2d 4b 5b 8e b8 54 06 60 b7 1b 22 e5 24 dc f9 13 70 00 f1 bf 48 d9 fd 23 44 46 f3 74 e9 ec 53 5f 79 86 1a 09 4b 88 36 0a 36 6d 96 d2 2d 72 7b 87 7c 5c 8c a3 08 26 ca 72 8b 9c 9a 3a 25 29 f2 d5 32 f5 2e 9f da 6e 4d 90 b9 70 a1 ab a4 1e da 8f 8a b7 03 b8 01 19 da fc df b3 0a 9f e0 bd 0d da Data Ascii: yK1`! ((*h\ 6(GO%Rh$"DY] .J]#"TTG2q<.WOH~<{)dmHJM6DNYwW-K[T`"$pH#DFtS_yK66m-r{\|\&r:%)2.nMp
2024-05-07 23:18:37 UTC	2742	IN	Data Raw: 86 00 ae 4c 61 aa f4 b6 1d 98 7d 73 14 b9 d0 7f 87 3e e5 ae 87 00 ba 98 24 78 6a 3f 77 d2 55 25 cb df b0 94 b1 c9 41 f4 fa 2c 65 20 38 99 5c 8a 46 6b 8d 2e 0c 45 c9 99 92 4c eb 43 40 25 47 96 8b 13 6d 45 cf bc 61 b3 2a 86 e6 29 9a 53 52 4a 69 23 2a 95 a1 09 16 f7 d2 09 99 a2 03 fb 45 62 03 47 c0 13 52 cd 1c 8e 4d a5 32 e9 01 5a d9 46 c7 f5 8b 1e 34 79 65 4c 83 cd 9f 0c 0d 2f 7a 2a b2 0a 7f 88 a8 b8 6c 44 b2 1c db c7 30 3e f1 d8 ad 1e 7a f6 39 b0 ec f2 dd 9b 94 69 c3 70 12 0b 9e 1f b3 68 ac bb 2d 7a 42 85 5a 77 25 36 60 25 27 3a 9d 52 5b b6 e0 0d bf 7e 3e 31 6a 25 59 31 b1 23 2d 37 58 9c 76 56 51 19 9e 52 94 84 a9 29 d0 24 8d cd bc 73 1f 73 1a ca bb 34 56 dd 1b 27 29 c9 66 61 b6 5a d6 5a 4c a4 e6 23 55 00 6d 7f 55 1b ff 00 e5 11 c5 dd b2 46 aa 89 97 03 cf Data Ascii: La}s>$xj?wU%A,e 8\Fk.ELC@%GmEa)SRJi#EbGRM2ZF4yeL/z*lD0>z9iph-zBZw%6`%':R[~>1j%Y1#-7XvVQR)$ss4V')faZZL#UmUF
2024-05-07 23:18:37 UTC	2742	IN	Data Raw: 77 29 4a 92 3c ba db ce 20 8f a2 56 95 0a 18 71 2a 33 6a 6f 2e 66 64 ce 54 35 7f c2 4f 6b 5f 3f d6 34 6a e4 4a 9d 21 fc 99 91 21 56 a6 ad d4 73 da 69 69 19 ad 7c c8 cd a1 f6 df db 7d b5 5f 6b b3 32 fa 7d 12 31 9f a9 62 3c 56 c4 91 69 2d d3 64 e4 c4 b4 82 d0 06 57 73 58 a9 cd f4 b0 b8 f3 f4 31 3e 4c d7 15 12 be 3c 54 db 2c dd 0a 82 dc b5 3a 94 ea db 42 27 65 d8 69 bb a0 dc 00 13 62 91 e1 a9 8e ee 2c 4a 2a 32 f6 71 72 65 6d ca 3e 87 10 da 2e a2 a9 98 da 06 ac 20 02 00 20 02 00 20 02 00 09 b4 01 89 81 b0 95 88 6b d2 f8 7a 9a e4 e4 ca 80 09 1d 94 de d9 8f 74 65 2b 30 dd 15 c3 13 e3 e5 e2 6a d2 d4 17 99 5d 0a b4 49 17 d0 0b ec 05 89 d6 26 4a 8d 50 80 33 39 31 70 94 ad 39 ad 95 21 44 dc 83 72 91 d0 83 ae d7 b6 a3 61 1b 51 b9 b2 5a 9a 1c 28 78 26 5d e4 96 c1 6d Data Ascii: w)J< Vq3jo.fdT5Ok_?4jJ!!Vsii\|}_k2}1b<Vi-dWsX1>L<T,:B'eib,J2qrem>. kzte+0j]I&JP391p9!DraQZ(x&]m
2024-05-07 23:18:37 UTC	2895	IN	Data Raw: 3c 78 72 f3 ae 34 c1 4a 0a 4a 53 9f 2f 51 6d 00 f7 24 c4 58 f1 39 e4 48 96 79 38 63 6c 94 65 50 89 ca 4b 6f 39 70 e3 57 40 9a 23 e5 bd b7 1a 6a 3a 5e fe 31 dd a7 2f c6 3f ea 71 ad 47 f2 90 f6 a3 ba 89 39 34 36 ca 43 a8 42 b3 e6 1a f6 87 5b 8f 33 17 30 e3 55 45 6c 93 6d d8 e4 a2 62 33 21 34 db fa b8 52 42 8a 45 81 ca 6c 9c bb 6a 75 db c2 26 e3 f4 43 77 d9 2c a1 69 71 01 69 21 49 3a 82 22 23 6e cd 80 de 06 a1 00 10 01 00 10 06 27 78 1b 0d fc 6f 8b e4 f0 4e 1e 99 aa 4e 2c 04 a0 65 6d 17 d5 c7 0f ca 91 04 0a 77 8d b1 04 dd 5e ae b5 cc 2f 96 fb eb 0a 75 79 bf 11 df d0 11 f4 89 2f 46 b4 25 ca 3a 5e 7b 22 54 1e 98 2a 52 d6 a5 ba 91 71 ea 0f 89 f1 d6 09 1b 8a 34 4a 6b 89 69 d6 ae 59 2a dd 29 00 da d7 26 d7 b5 b6 1a 9d 06 87 a0 89 17 66 68 55 c3 f4 a6 df a4 bd 51 Data Ascii: <xr4JJS/Qm$X9Hy8clePKo9pW@#j:^1/?qG946CB[30UElmb3!4RBElju&Cw,iqi!I:"#n'xoNN,emw^/uy/F%:^{"TRq4JkiY)&fhUQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49798	99.86.38.13	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:37 UTC	727	OUT	GET /eh96rkuu9740/ade2c395500d4139b3f3a5c76f74c11d/cc3ddea162b4fddd32a1bf5c9aa49bc5/MFerguson_GreyBackground2.jpg?f=top&fit=thumb&w=300&h=300 HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:38 UTC	505	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 26590 Connection: close ETag: "c6440a826a99c1ecfcf5a612b7f3cc57" Last-Modified: Wed, 24 Apr 2024 22:45:57 GMT Date: Tue, 07 May 2024 23:18:37 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 4c48e9fb20d53d40e9fe273dbdae1098.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: DL9xF9EHcmCb6_3W6UD2Q0zmTrgB37MnJ5TeQlotVZbs33DKWHj-rQ==
2024-05-07 23:18:38 UTC	15879	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 c2 01 c2 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-05-07 23:18:38 UTC	9705	IN	Data Raw: 4b 66 0f 29 92 80 e2 c0 90 a2 b5 ea 49 33 b8 49 20 7b a6 2b e6 df 2c fa 45 c2 13 e2 a9 52 ec 43 0c 20 66 b8 77 96 84 84 84 8c 89 d5 44 4c 00 00 49 d7 60 01 98 13 4f 03 c9 1f c4 6f d1 8f f1 1d a5 8d a2 00 c3 2c de 05 4e 46 ab e4 a7 72 08 d1 21 64 24 26 26 7c c4 6b 09 8e 8b 50 9b 13 b9 ce 6e 92 a3 97 98 e7 26 41 ff 00 12 92 4e 9b fc 07 f3 ac 7d ce 92 0d c7 6e 37 7f 89 e2 dc d2 44 be d9 31 af 95 24 00 67 e5 f8 57 56 37 52 47 2e 45 71 62 2c 33 07 73 96 80 00 39 50 11 03 f8 c9 0b 54 f4 04 4a c7 cf 7e db b9 59 82 8d 0b af 70 dc b8 1b ea 39 45 b3 51 01 43 e1 84 09 f6 f3 2c 7d 3e 62 98 ff 00 b9 7c 88 a4 30 dc 2c dc dd e2 84 66 53 9c d2 7e 85 52 7d c9 20 7c e6 ba e4 f8 47 3e 28 72 d8 f5 81 ba bc 3a e7 92 bd 02 8e 84 f4 35 95 9d 55 45 d1 c0 7c 48 96 5c 65 85 a8 a3 Data Ascii: Kf)I3I {+,ERC fwDLI`Oo,NFr!d$&&\|kPn&AN}n7D1$gWV7RG.Eqb,3s9PTJ~Yp9EQC,}>b\|0,fS~R} \|G>(r:5UE\|H\e
2024-05-07 23:18:38 UTC	1006	IN	Data Raw: 6f ec 63 32 8a b5 24 fe 35 0c bd d9 c9 ff 00 6d df 0a ed b8 83 c3 e7 f8 81 ac 8d 62 18 31 37 08 74 e9 99 b2 40 52 3e 7a 47 a8 ae bc 12 6a 54 79 3a d8 29 42 fd 8e 0e c3 2f c8 52 54 34 5a 0e a3 d6 bd 74 7c dd fb 16 86 09 88 a7 1b c3 20 9f fc 4b 23 fe e4 d5 8b 76 59 7f 67 2b f1 82 78 e7 c3 77 e9 84 37 76 1c c3 6e b5 d4 87 1b 50 68 ff 00 ea 06 d3 f4 a2 ec ca 6a d1 df a0 d6 a6 06 60 cd 01 ed 01 90 33 52 80 54 80 a0 0a 00 a0 0a 03 e2 f7 e1 3d eb 9c e8 3c 56 c2 84 1e 24 fa fb d0 1b d1 be 82 4d 09 36 11 29 a0 34 28 6b 3b 8a 03 5f c2 4f f3 a0 14 36 a8 11 3a 46 d4 24 54 85 73 1b 5a 35 92 34 ef ed 40 21 5a be 93 42 05 76 4e 42 c7 4e f4 24 52 ea 82 4a 63 a6 b2 68 0c 9e 48 75 b0 62 0f ad 00 cb 89 d9 97 9a 56 59 ce 3c c9 3d aa 1a 2a cd d8 65 e0 ba b7 4a bf 7c 18 23 b1 Data Ascii: oc2$5mb17t@R>zGjTy:)B/RT4Zt\| K#vYg+xw7vnPhj`3RT=<V$M6)4(k;_O6:F$TsZ54@!ZBvNBN$RJchHubVY<=*eJ\|#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	49801	99.86.38.13	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:38 UTC	724	OUT	GET /eh96rkuu9740/fa838bb1ec4d42f79e62f841fffa0d0e/a88f6c1acfbf2ebc98c4e0a421288468/DBurke_GreyBackground2.jpg?f=top&fit=thumb&w=300&h=300 HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:38 UTC	505	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 25202 Connection: close ETag: "2026f1676838a116f899c477cc8ec533" Last-Modified: Sun, 21 Apr 2024 16:13:10 GMT Date: Tue, 07 May 2024 23:18:38 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 aa623e134417515bd2496cb01d5e5626.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: uw7SnGm_GEbqZLCagHzM-S9BDW1Z74BA1v1wkDxEhRG3fmWnJ7JZdw==
2024-05-07 23:18:38 UTC	15879	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 c2 01 c2 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-05-07 23:18:38 UTC	9323	IN	Data Raw: 13 36 65 c1 1c d9 c7 6f e9 59 99 1d 4f ec f9 af 8d 1b da 64 16 d2 72 ac 3a 94 0f 6c 4b 0c 61 c7 f1 10 e3 a1 dd 31 be c3 9b 3b 90 05 74 38 39 72 e5 af 53 5f 32 b8 59 ea 6b 8b 41 2c 1e 65 1c b9 e4 f3 60 a8 3b 8c 6f 84 cf bc bb 67 03 6e cc 6b bc 68 15 4e 25 e1 c8 75 8b 43 0c eb cc 5b 6c b0 24 f6 e8 08 c9 e8 0e cb b9 18 c6 70 a3 5f 24 14 d5 32 e8 ca 8e 1b 3e 8d 79 ec d7 5a 79 25 8d e6 d0 e6 6c be 37 f0 7d 5b 1f dd fc b1 be e3 24 f9 4e 3f 81 7f 9e 27 7f 82 e2 f9 1f 2c b6 37 78 87 42 6b 41 16 b1 a7 e6 6b 47 dc bc 7b e0 fa 8a f3 f1 9d 3e 59 1d c9 e3 b5 cf 13 00 d5 8c f6 a1 b2 1f 99 70 db f5 1e bf ad 5b c9 5a a2 97 3b 5a 98 b8 7b 88 26 e1 fb d3 b9 e4 e6 c8 df b6 46 ff 00 bf 5a 89 e3 e6 44 e2 cb e5 c8 ed bc 37 c5 b0 c9 c9 3c 6e 0b 32 e7 0b d0 e3 1d 07 ca b9 d3 c6 Data Ascii: 6eoYOdr:lKa1;t89rS_2YkA,e`;ognkhN%uC[l$p_$2>yZy%l7}[$N?',7xBkAkG{>Yp[Z;Z{&FZD7<n2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49802	99.86.38.11	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:38 UTC	498	OUT	GET /eh96rkuu9740/7bafdfe337c247b38eb5a0949fd1c4aa/96659b8dc33ff89b04e2419e6c74fd49/BButvick_GreyBackground_website.jpg?f=top&fit=thumb&w=300&h=300 HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:38 UTC	512	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 21008 Connection: close ETag: "746669dd061f6b4f0d221d91773354d0" Last-Modified: Thu, 25 Apr 2024 18:20:29 GMT Date: Tue, 07 May 2024 23:18:37 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 efcf7b9d0f917f9ebf314db03e52d9b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: X4esrEKE9tPYGjxIVn4SzkqagjbGs9XTqcNRM6E10a6FhMktqwgwJA== Age: 1
2024-05-07 23:18:38 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 2c 01 2c 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIF,,XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-05-07 23:18:38 UTC	4624	IN	Data Raw: 03 48 07 7d c2 a3 69 97 5a 6a cc dc 37 06 2d 00 00 46 fc 94 b5 61 7a 4b b0 ac 25 cd 7c 4e ee ff 00 10 e8 2c b1 ea cc 9c b4 4b a3 c2 9a c8 9a df 1e fb dd 67 d7 54 51 de dd 96 e9 30 99 2a ea 44 10 42 65 91 c6 c0 34 6e 54 63 c7 2c 92 eb 15 b2 72 66 8e 28 77 9b a3 6e 65 7c ad 0e 58 a0 1b 07 d7 48 db 49 2f 90 ff 00 da 3d 17 ac e2 f1 63 c7 8f f2 fd 3c 3f 33 97 2e 54 ff 00 f6 af 0e 77 ed d9 c7 61 c2 9e 1a 3b 03 c3 6a 34 66 3c c2 c7 d3 c7 a0 f8 e0 a7 b5 a4 93 d0 9b e9 07 cc 93 d1 77 b8 d8 bb cb b7 c2 38 99 a5 ff 00 a5 1e 58 4b 17 78 dd 43 67 7e 55 d9 48 d5 19 71 32 1b 11 16 20 f9 79 28 7e 83 06 96 10 ff 00 19 09 56 0c c0 d0 d6 72 e7 ba ca 81 83 89 30 77 4d e4 2e ff 00 8f 25 8b 05 10 b0 c5 1f 9a 82 59 54 ad 64 d1 86 c8 d0 47 43 d4 28 6a c8 ba 30 1d 04 b4 2e 12 31 Data Ascii: H}iZj7-FazK%\|N,KgTQ0*DBe4nTc,rf(wne\|XHI/=c<?3.Twa;j4f<w8XKxCg~UHq2 y(~Vr0wM.%YTdGC(j0.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49803	99.86.38.11	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:38 UTC	493	OUT	GET /eh96rkuu9740/799b781401cb477b80a677fefce37de9/767bd69590f2106f78073c5d343560b3/LMcDermott_GreyBackground2.jpg?f=top&fit=thumb&w=300&h=300 HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:38 UTC	512	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 27573 Connection: close ETag: "f191ba7ceab64e6c1cc5ba22b9d61e0f" Last-Modified: Wed, 20 Mar 2024 10:39:08 GMT Date: Tue, 07 May 2024 23:18:37 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 27a84054de24e45f952ea4056a821764.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: hphbwBJW1s2nnuqHgu2SLUEt33zTpzg8CTFK8XRmEziRSUKqydIgTQ== Age: 1
2024-05-07 23:18:38 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 c2 01 c2 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-05-07 23:18:38 UTC	11189	IN	Data Raw: e2 5c 6f 56 ca cd f6 99 e2 6c ca b0 45 69 d9 37 94 cb 01 95 34 87 10 6c 54 a5 76 6e 0f 76 b1 7f c6 8f e6 91 c6 f3 25 ff 00 8a 52 ff 00 62 8b e1 f4 99 79 17 5d 1a 76 b2 a6 fe 3a 5b da 3b 19 5f e4 91 c0 c2 aa 0d 9e d6 a5 4c ba 9b 36 b8 09 1a 9f 31 61 f9 46 d8 dd a2 3c 8a 98 fb c0 13 89 2e 99 57 4e 76 de 4d c5 fa de e0 83 e9 78 a9 92 25 bc 52 f4 3a a9 d8 65 da 3c c4 d4 ab 97 52 15 30 5e 6a db e5 24 65 23 c6 ca 4c 47 2b 74 d1 24 55 5a 1f b8 79 92 8a 88 b9 ca f2 7e f0 10 77 50 3d de 36 3e c6 34 6e 9d 9b a5 65 c6 c1 55 44 d5 70 dc 8c c2 4e a5 b0 95 0e a0 8d e3 d2 78 d3 f9 31 a6 79 df 22 1f 1e 46 87 0a 0c 5a 2b 1b 44 64 19 40 d4 20 02 00 20 02 00 20 02 00 20 02 00 20 00 8b 88 04 21 62 da b1 a5 d3 00 6d a5 3c eb ab 4a 52 da 4d b3 6a 34 bf 8e de b1 ce f3 5b e0 a2 Data Ascii: \oVlEi74lTvnv%Rby]v:[;_L61aF<.WNvMx%R:e<R0^j$e#LG+t$UZy~wP=6>4neUDpNx1y"FZ+Dd@ !bm<JRMj4[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49804	99.86.38.11	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:38 UTC	489	OUT	GET /eh96rkuu9740/7cd77d1eff7c4f0fb2fbf364f4597505/248b9d293a526fa545e2b3f8b71c6f2e/PCrudo_GreyBackground2.jpg?f=top&fit=thumb&w=300&h=300 HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:38 UTC	512	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 20439 Connection: close ETag: "437d876c85f222c91ab0efd6449c7b35" Last-Modified: Wed, 17 Apr 2024 18:51:53 GMT Date: Tue, 07 May 2024 23:18:37 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 1570d93226c1bbca2ebaad510cff3e0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: 5wmbrmVXKCb0GvENYATFRHzGk-2ZSrKk029PbrMOMS1uDLi8AxYQqA== Age: 1
2024-05-07 23:18:38 UTC	15872	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 c2 01 c2 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-05-07 23:18:38 UTC	4567	IN	Data Raw: 59 78 26 dc 6b af 57 08 a8 29 f9 37 59 cb 9e 7c 1a d1 bb 8f a0 41 cc dd a4 7d b2 e6 9f be a3 e1 1a 4f 84 8f 76 fc 7d 5b 43 a4 3e 6d 67 26 fb e7 d0 22 7b 5c cd c4 fc 73 73 e2 4a e9 6a ae 35 d3 d6 d5 49 f7 a5 9d e5 ee 3e e7 f2 52 ce 23 4c 5e a6 a5 cf 3c f2 4f 8a 84 a8 64 97 3b 1e 78 41 08 19 41 47 72 04 52 4a 46 da 5b a8 7b 6e b1 9f 08 5c 1a ec b5 a7 6d c2 c9 21 19 f5 41 2d e1 48 97 a7 2a 10 85 80 97 64 f4 d9 06 f8 fb 2f 76 93 ff 00 2f 71 21 e1 ea e9 71 6d ba b8 36 22 f7 6d 1d 47 26 9f 47 7d d3 e7 a7 c1 74 3a 5c bd b6 ec 9f 12 a7 9e 9b 8e e8 77 0f 0e b9 d4 b3 c7 ab e5 d2 40 c7 2e ab a9 30 a1 e5 b7 2c ae a7 bc d0 fc 25 5c 6d 96 19 1b a5 cd 78 c8 23 1b ed ee b4 5e 91 68 d4 c6 e1 15 b5 a9 31 6a ce a5 a5 bb 5b fb 3b 4d 6c 92 4b cd 8a 23 3d 0e 35 49 4e c1 97 c6 Data Ascii: Yx&kW)7Y\|A}Ov}[C>mg&"{\ssJj5I>R#L^<Od;xAAGrRJF[{n\m!A-H*d/v/q!qm6"mG&G}t:\w@.0,%\mx#^h1j[;MlK#=5IN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49805	44.209.29.87	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:38 UTC	699	OUT	GET /site/v3/7792/99885/1/1/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/our-team HTTP/1.1 Host: l.evidon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:39 UTC	231	IN	HTTP/1.1 204 No Content Date: Tue, 07 May 2024 23:18:39 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 10 Connection: close X-Powered-By: Express ETag: W/"a-bAsFyilMr4Ra1hIU5PyoyFRunpI" Vary: Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49809	99.86.38.11	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:38 UTC	492	OUT	GET /eh96rkuu9740/ade2c395500d4139b3f3a5c76f74c11d/cc3ddea162b4fddd32a1bf5c9aa49bc5/MFerguson_GreyBackground2.jpg?f=top&fit=thumb&w=300&h=300 HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:39 UTC	512	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 26590 Connection: close ETag: "c6440a826a99c1ecfcf5a612b7f3cc57" Last-Modified: Wed, 24 Apr 2024 22:45:57 GMT Date: Tue, 07 May 2024 23:18:37 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 34f8ef0e4c880df0650a814412a26ea6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: 1wbDuKStbnBafmK-Z5imlW4ExqJMdZmTpJdW8SQuTQeLbeTYxC712g== Age: 1
2024-05-07 23:18:39 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 c2 01 c2 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-05-07 23:18:39 UTC	10206	IN	Data Raw: 5c 85 dc 65 53 5b 89 43 49 9f 91 ca 07 bc d5 91 49 3a 27 be 07 8e 4f 11 5b a1 b2 a5 27 28 cc 4e a4 04 a6 3f 1c aa 33 d7 5a cd f2 cb 74 8e 87 3b eb 5f 6d 8e 3b 21 18 fb 23 e2 32 4b 7c e5 2f 76 79 5a 14 0a 00 a0 0a 00 a0 0a 00 a0 0a 00 a0 0a 00 a0 0a 03 1a a8 22 3e 20 e2 8b b4 b2 0c a4 84 85 82 49 29 27 a7 d0 c0 93 06 7a 69 5e 56 bb 23 51 51 47 ad a0 82 6d c9 95 1d ed e2 b3 23 ef 29 28 6f 30 86 f3 13 9b 29 da 7b 00 35 f4 48 ea 45 78 4c f7 51 17 e2 de 22 46 1f 66 00 09 55 ca bc ce 14 69 91 01 29 59 4e 87 e1 f8 7d f4 f6 a1 28 67 e1 bb 9f b8 59 2a ed 5e 75 a5 0a 24 6d 95 6a 52 8a c0 f4 0a 40 1f ea 3b d1 f0 59 72 37 e2 f8 98 e4 b0 82 ac cb 2f 9f 87 a1 48 32 3f fd 8f d6 b1 46 ec 83 e3 f8 a4 63 97 e7 99 2f b8 b5 94 24 40 ca 0e 51 20 ee 23 26 91 10 75 d2 35 e8 5c Data Ascii: \eS[CII:'O['(N?3Zt;_m;!#2K\|/vyZ"> I)'zi^V#QQGm#)(o0){5HExLQ"FfUi)YN}(gY*^u$mjR@;Yr7/H2?Fc/$@Q #&u5\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49806	44.209.29.87	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:38 UTC	699	OUT	GET /site/v3/7792/99885/1/2/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/our-team HTTP/1.1 Host: l.evidon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:39 UTC	231	IN	HTTP/1.1 204 No Content Date: Tue, 07 May 2024 23:18:39 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 10 Connection: close X-Powered-By: Express ETag: W/"a-bAsFyilMr4Ra1hIU5PyoyFRunpI" Vary: Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49810	99.86.38.11	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:38 UTC	490	OUT	GET /eh96rkuu9740/e5eb7c23d4bf4c0db739751135d7bc72/bc48a7154c6ffcc3fef26c56a0793b39/GMullins_GreyBackground.jpg?f=top&fit=thumb&w=300&h=300 HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:39 UTC	512	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 20316 Connection: close ETag: "ff9a20b1dc2da3d8b3fa7972af35833d" Last-Modified: Mon, 22 Apr 2024 03:12:36 GMT Date: Tue, 07 May 2024 23:18:37 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 44cd593d82a2d200a94217033c614c6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: Yg-y6ZOIB0FAnVXjGr_hvGr1KLD1VaKNojraTGlsksbmtrEs0U-_3w== Age: 1
2024-05-07 23:18:39 UTC	15872	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 c2 01 c2 00 00 ff e2 0b e0 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0b d0 6e 6f 6e 65 02 00 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d4 00 07 00 15 00 13 00 0b 00 21 61 63 73 70 00 00 00 00 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 01 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 64 65 73 63 00 00 01 44 00 00 00 74 62 58 59 5a 00 00 01 b8 00 00 00 14 62 54 52 43 00 00 01 cc 00 00 08 0c 64 6d 64 64 00 00 09 d8 00 00 00 88 67 58 59 5a 00 00 0a 60 00 00 00 14 67 54 52 43 00 00 01 cc 00 00 08 0c 6c 75 6d 69 00 00 0a 74 00 00 00 14 6d Data Ascii: JFIFICC_PROFILEnonemntrRGB XYZ !acspIEC sRGB-HP descDtbXYZbTRCdmddgXYZ`gTRClumitm
2024-05-07 23:18:39 UTC	4444	IN	Data Raw: 11 64 8d 64 23 c8 c1 65 43 04 6f c9 34 8d 74 4c ba c1 92 4b 19 ba 09 50 c5 e8 a9 b4 d8 61 d9 04 b8 a1 e5 b2 9b 22 6c 54 fe 8a 2a 5c 74 f7 e8 81 e2 d6 43 1b 9f 23 9b 1b 1a 2e e7 38 d8 01 dc 94 1c 8b 88 5f 17 1c 2b e1 a0 92 3a ec cd 06 25 5a cd 8d 1e 13 6a 97 df b1 70 3a 01 f7 70 44 79 c7 3e ff 00 6a 4d 2d 24 72 45 94 f2 85 e4 fd ca 9c 5e a2 e3 e7 1c 7f ff 00 6b 1d c5 79 53 89 9f 1b 1c 51 e2 2b a5 6d 6e 68 aa a2 a3 7d c7 d8 b0 c7 7d 96 20 3b 1d 16 2e 1f e6 25 4d d4 70 8c 57 34 d5 e2 0e 2e 7c cf 7b 8d c9 2e 37 25 45 67 aa 6a 1f 33 81 7b b6 f5 58 aa 46 1b 87 99 dc 25 78 f2 8d c3 6d cc ac a4 1f 52 3f b3 87 82 6e cb bc 33 c4 b3 cd 64 3a 71 0c c8 f3 4b 46 e2 3c cc a3 89 d6 79 1f e7 90 1d bf ed b4 8e 6b db e8 f8 f5 8d ce b9 79 72 f3 a6 fb 8b d5 52 49 5b 2c 31 b4 Data Ascii: dd#eCo4tLKPa"lT*\tC#.8_+:%Zjp:pDy>jM-$rE^kySQ+mnh}} ;.%MpW4.\|{.7%Egj3{XF%xmR?n3d:qKF<ykyrRI[,1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49808	44.209.29.87	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:38 UTC	699	OUT	GET /site/v3/7792/99885/1/4/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/our-team HTTP/1.1 Host: l.evidon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:39 UTC	231	IN	HTTP/1.1 204 No Content Date: Tue, 07 May 2024 23:18:39 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 10 Connection: close X-Powered-By: Express ETag: W/"a-bAsFyilMr4Ra1hIU5PyoyFRunpI" Vary: Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49811	99.86.38.11	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:39 UTC	477	OUT	GET /eh96rkuu9740/2a73440ea1134e808185dce447956100/6e0e997e957c3a30053bcbab7637e3b7/OurTeam.jpg?w=1920&h=850&fit=fill&f=center HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:39 UTC	513	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 194431 Connection: close ETag: "9f6ccc60756df965a3e16a50c10677d4" Last-Modified: Fri, 12 Apr 2024 18:05:28 GMT Date: Tue, 07 May 2024 23:18:38 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 0cf6c59c77f0fff670ae085179adc458.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: eUn4V3qY1TMNC1z2HDrt6JOiy-PFxAxjoQqLwBLmhVH8_cENNWz9ug== Age: 1
2024-05-07 23:18:39 UTC	15871	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 2c 01 2c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 03 52 07 80 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 02 03 01 04 00 05 06 07 08 09 ff c4 00 47 10 00 01 03 03 02 04 04 05 02 03 06 05 04 01 02 07 01 00 02 11 03 04 21 05 31 06 12 41 51 07 13 22 61 14 71 81 91 a1 08 32 23 42 Data Ascii: JFIF,,CCRG!1AQ"aq2#B
2024-05-07 23:18:40 UTC	16384	IN	Data Raw: 11 58 02 20 9a d4 53 5a d8 52 a9 9c aa 00 73 7e aa 85 39 aa c4 01 08 88 41 07 74 11 12 80 9a c4 06 d6 c2 03 02 51 75 05 a8 52 2b 33 0a a3 5d 74 c2 06 c8 cd 68 b5 19 0d 2a 38 f4 e1 38 8d ff 00 c3 78 56 47 1a f0 8f 10 44 32 a9 e9 95 b8 cc fb 78 1f 15 b6 68 d4 56 ba 57 99 30 11 7e 7e 6a 47 6e 5e 87 c3 3b 37 ae cb 4e cf 48 d2 5b e9 6a 25 74 96 82 23 2a c6 2b 6b 49 b0 36 fa ad c6 52 f6 c0 22 15 62 a8 d7 1b ae 91 ce b5 b7 1b 1f 75 dd e7 aa 0e c1 df 65 a4 41 08 21 00 b8 a0 17 6d b2 a1 55 0f d1 5c 0a 71 27 ea aa 36 fa 6e 21 71 ab 1d 76 98 24 35 79 fa 7a 23 ab d3 9b 3c b3 85 ca bb 47 45 68 dd a1 61 d2 36 f6 cc 98 59 69 b0 63 60 29 ac d1 47 d1 4d 64 2e 6c 65 58 06 3e 88 01 e3 08 b0 97 31 55 25 cc c1 28 a0 73 51 00 e6 89 40 04 2b aa 96 b4 9f 9a a9 8c 70 fb a2 16 ee Data Ascii: X SZRs~9AtQuR+3]th88xVGD2xhVW0~~jGn^;7NH[j%t#+kI6R"bueA!mU\q'6n!qv$5yz#<GEha6Yic`)GMd.leX>1U%(sQ@+p
2024-05-07 23:18:40 UTC	16384	IN	Data Raw: f5 d3 c6 f5 be 3a 6d 57 b9 de 67 e5 7a 24 73 dd 71 1a d7 1a 34 b5 c3 cc 95 ac 57 9c f1 0f 16 0a 81 d0 e9 9f 75 ac 6e 47 9c eb 3a cf 38 77 a9 5c f9 76 97 1c 26 b3 7f e6 92 d6 ad 48 34 70 31 ee ba ab 69 a7 1e 57 36 3b ab 18 ae e3 40 be 34 4b 17 48 e1 dc d7 a6 70 f7 10 16 72 e6 3e ab 58 f3 d9 9f 6f 4a d1 38 a7 95 8d 3c c9 8e 7f 55 d7 da 71 50 81 ea 58 f5 5d 5f 1c 4b 20 43 be e9 ea ba 5d 5e 26 31 fb d3 d0 d6 be e3 8a 5c 24 f3 1f a1 59 f4 5d 6b ae 38 bd cd 07 d4 7e ea 7a 51 ad b9 e3 87 b6 61 c7 ee a7 a0 d5 5c f1 e5 50 72 e3 f7 53 d1 5a cb 8e 3d a9 fe 22 b3 ea 62 85 4f 10 2a 83 fb 8f dd 4f 56 bd 69 5f fb 87 50 6e e3 f7 57 d4 f5 59 b7 f1 1d e1 df b8 9f aa b3 96 71 d6 68 7e 29 ba 9b 9b cd 53 f2 a5 8e 79 8f 46 e1 ff 00 15 58 43 66 a8 fb ac a6 d9 f6 ef f4 9f 13 e8 Data Ascii: :mWgz$sq4WunG:8w\v&H4p1iW6;@4KHpr>XoJ8<UqPX]_K C]^&1\$Y]k8~zQa\PrSZ="bO*OVi_PnWYqh~)SyFXCf
2024-05-07 23:18:40 UTC	14872	IN	Data Raw: 50 06 ca a2 01 50 13 56 d2 9c de 88 41 9c 85 95 2c 99 2a 29 6e 71 56 91 81 e5 45 d4 87 7b c2 28 db 52 15 0c 6d 63 b2 32 36 d4 3d d6 83 5b 54 a0 2f 31 10 2e a9 2a 5a b4 97 3f dd 40 b3 52 54 44 38 ca 28 49 0a a2 01 ce e8 08 0f aa d2 18 d2 02 06 10 21 14 2e 10 89 a5 93 ca 88 90 e9 40 6d 72 a0 c3 f6 54 1b 6a 42 a1 ad a9 28 1a da 91 84 0d 15 10 41 a9 95 1a 43 9f 2d 52 b5 14 2e 9d 33 d1 67 5a 68 af df 82 a6 ab 8d d6 df e9 72 ba d6 3c ab 8b 4f 37 3f 55 86 a3 c8 38 8f 05 eb 51 6f d3 cb b5 48 f8 af ae 17 48 c4 75 7c 31 b3 3b aa db d2 f4 61 e9 6e 11 b8 ea ec e2 02 b1 8a da d1 d9 6e 32 79 1e 99 5b 73 aa b5 ff 00 ee 17 6e 5c 7a 6b 2e 7a fb ae fc b8 56 ba a1 82 bb 39 80 9f ca 08 fc 20 17 1c ce e8 04 94 0a 71 c9 57 50 a7 6f d7 0b 5f 68 bf a6 1f 50 f7 5c 3b 58 ed f4 7f Data Ascii: PPVA,)nqVE{(Rmc26=[T/1.Z?@RTD8(I!.@mrTjB(AC-R.3gZhr<O7?U8QoHHu\|1;ann2y[sn\zk.zV9 qWPo_hP\;X
2024-05-07 23:18:40 UTC	1124	IN	Data Raw: e3 32 a6 02 f3 e1 00 fc 4c 67 aa 01 35 fb 22 81 d5 fe 5e e8 85 ba b4 f5 40 06 be 37 41 06 b8 fa a0 07 57 45 03 aa a2 16 6b 7b a0 07 54 40 26 a2 05 9a 99 f7 40 2e ac 01 32 81 4f a8 10 03 aa 6e 80 3c cd e4 84 02 ea 93 39 45 0f 99 d9 00 9a a8 01 cf 03 74 01 e6 02 37 44 0f 3c a0 5f 38 cc 22 e9 6e 7c a2 00 bf de 3d d1 7e 9e b2 1a 70 bf 63 5f 9d c3 1a 09 85 95 90 e6 0c 6c b3 5b 39 ac 58 5c 38 32 31 0b 1a d6 0d b4 f2 a6 b4 9f 2f ba 68 83 47 d9 34 c1 06 11 9c a8 98 20 f2 c4 50 54 b8 c4 a0 a1 73 5f 05 6a 46 6d 68 af de 5e d3 d5 76 e6 33 5c ed dd 3e 63 ec bd 3c b8 d5 07 51 85 d7 58 15 3a 39 08 36 96 94 76 8d 97 3a b1 d1 e9 cd e5 21 79 ba 76 8e 97 4f 79 6c 2f 3d 74 74 16 95 8c 05 c7 ae 5a 8d c5 bd 49 5c 6c 69 79 9d 16 54 e6 e5 03 58 e8 40 f6 98 50 3d 95 21 66 c5 35 Data Ascii: 2Lg5"^@7AWEk{T@&@.2On<9Et7D<_8"n\|=~pc_l[9X\821/hG4 PTs_jFmh^v3\>c<QX:96v:!yvOyl/=ttZI\liyTX@P=!f5
2024-05-07 23:18:40 UTC	16384	IN	Data Raw: 8f b6 1e 1e 5a 54 a9 5a f5 ac 2c 1b 73 2e b7 c3 c4 e7 db b7 2e bc 9e bf 1c fd be 64 e2 4f fd 46 b5 9a 75 ea d3 d1 29 0a c0 12 03 de 31 f3 5f 17 cb e5 e3 ab 9c 47 5e 3c 3f 93 e4 f9 dc 8f 13 e2 ff 00 d4 bf 1e 78 91 76 fa da 86 b7 5a d6 9f 4a 54 9d ca 00 f9 2f 2d e2 77 fe a7 b7 c7 ff 00 a7 f1 6f b7 9a eb 8f b3 f1 cb 8d f8 4a fc 55 d3 38 9a f5 84 19 83 50 90 b9 df c6 f1 5f af 87 6b f8 7e 1f ae 66 3d cb c3 7f fd 43 78 c3 46 ab 46 df 88 43 75 1b 79 00 d5 8c c2 cf f0 f9 38 ff 00 47 5b 1c 3b fc 6f 27 13 78 eb 7f d9 f5 df 87 df a9 cd 0b c4 6b 06 54 b7 ae da 55 9c 3f 61 77 55 ed f1 5b d7 c5 78 7f 97 e7 3a 99 5d 2d df 17 36 a3 b1 53 1e c5 7b a7 0c 5e c9 67 13 81 fc e1 6a f0 9e f0 47 8a 9a 07 f7 81 4f 45 f7 01 e2 96 99 1c e3 ee a7 a5 3d e2 b5 6e 29 6c 61 ea ce 0f 78 Data Ascii: ZTZ,s..dOFu)1_G^<?xvZJT/-woJU8P_k~f=CxFFCuy8G[;o'xkTU?awU[x:]-6S{^gjGOE=n)lax
2024-05-07 23:18:40 UTC	16384	IN	Data Raw: 9d 96 93 10 5d 01 6a 21 2f 32 57 58 cd 28 b2 4a ba 86 53 a5 f6 59 f6 17 ed e9 f2 c4 2c 5a b8 dc 59 37 96 17 3b 5b 8e 82 c9 d1 0b 9d 69 bc b5 7c b4 65 71 ad c6 d2 8b a3 e4 b9 34 b6 c7 44 04 0f 6b fd 94 0e 6b b0 b2 1c d7 49 40 d6 b8 04 0c 15 32 b3 54 5c ff 00 74 31 20 e5 40 41 c1 0a 20 fe a8 27 9f 38 44 10 a9 1d 50 41 aa 24 c1 53 04 1a aa ae 20 d5 f7 53 0c 67 9d 95 71 71 3e 72 62 63 3c e4 c3 04 2a 88 ee 98 63 3c e5 4c 41 ac 86 33 ce 1f 24 c3 11 e7 76 57 0c 41 aa 98 04 d5 8e aa a3 3c dc 6e 8a 59 ad ee a8 8f 3f dd 43 52 2b ab 88 2f 38 ee a2 a4 d6 ee aa 30 55 54 48 ab ee 88 31 57 1b a8 62 7c c1 3b aa 98 91 53 75 50 62 b0 f9 2c d6 a0 c5 c0 9d f0 a0 31 70 3b e5 15 3f 10 d5 31 00 ea 8d 7a aa 45 50 d3 2a c5 54 ab 40 3b e4 b4 8a 75 ac 81 1b 2d ca 8d 65 e6 9c d2 0e Data Ascii: ]j!/2WX(JSY,ZY7;[i\|eq4DkkI@2T\t1 @A '8DPA$S Sgqq>rbc<c<LA3$vWA<nY?CR+/80UTH1Wb\|;SuPb,1p;?1zEPT@;u-e
2024-05-07 23:18:40 UTC	16384	IN	Data Raw: 97 be 9d f6 95 a5 3a 8b 5a 40 21 7b 7d 27 e9 e6 b7 5d 1d a3 ea 5b 81 18 f9 29 66 39 6b 6d 63 c4 f5 2d ea 80 5d 00 2c e3 53 ac 77 9a 07 17 87 35 a0 be 7e ab 37 97 6f 6d 77 7a 67 12 32 a0 07 9d 70 bc 37 2b a3 b3 d6 5a e1 fb 97 0b cb 72 eb 69 4b 54 06 3d 4b 9d 8d c5 a6 ea 62 30 56 70 43 b5 10 7a aa 8a f5 ee c7 29 33 85 47 0f c5 da 9b 59 42 a4 bb a2 f4 70 cf 4f 93 bc 67 d7 bd 35 9b cf dd 6b c9 d6 72 e7 cc db 8f 9d 38 62 c9 da df 15 97 fe e6 31 cb e7 71 3f 93 c8 f5 f7 7d 79 c7 da 3e 18 70 f8 b4 d2 e9 38 b6 09 0b df dd 72 f1 73 b7 5e 83 78 d1 46 dc fb 05 e7 b5 ed b1 f3 67 8b d7 ae d4 35 17 50 a6 49 1f b5 78 b7 da bc dd 5f 59 ae bf c1 1f 0f b9 d8 ca 8f a7 ea 26 66 17 da f0 f1 39 e5 f3 e5 bd 75 af a7 f4 6e 15 f8 6b 76 c3 36 1d 94 ee 4a f4 c0 df e9 b5 28 92 40 c2 Data Ascii: :Z@!{}'][)f9kmc-],Sw5~7omwzg2p7+ZriKT=Kb0VpCz)3GYBpOg5kr8b1q?}y>p8rs^xFg5PIx_Y&f9unkv6J(@
2024-05-07 23:18:40 UTC	16384	IN	Data Raw: 75 7a 19 4e a3 29 b0 01 03 a2 ed e4 b9 f1 1d 64 da fa 27 f4 25 c0 1f f1 7f 8b 87 53 ad 4b 9e db 4c a7 2d 24 63 9d df ec b8 78 f7 bf 2c 9f d7 cb e5 fe 75 f7 ef c7 e0 9f f3 5f a8 1c 47 5c 5a 69 82 8b 7d 38 8c 76 5c bf 3b cb 93 1f 4b c1 c7 b7 92 4f d4 7e 65 7e bc f8 cb ce d4 a8 69 54 ea 4c 9e 67 00 7b 2f 93 f8 53 df c9 7a fe 9e af ca be dd ce 7f a7 c7 b6 f7 d5 6d c8 e4 79 1f 55 f7 a5 c7 92 f1 2b ee cf d1 de bd 47 87 fc 37 bb be b8 a8 1b 5e e2 b4 49 ea 16 ef 92 de 3e 5c 39 e3 36 ff 00 75 ee 8d f1 1e d2 a5 5c 55 06 62 01 2b cf 6b ab 77 5f 88 28 df d3 a4 da 64 bd c6 0b 79 37 0a ce 8e b9 8d e5 37 8a f4 1b 0c e6 a8 00 20 92 bb 4e f2 39 5e 75 b0 b0 b9 65 7a 52 de 6a b4 a9 b7 76 7f 27 b2 d6 b3 93 1b db 1b 4f 38 53 0f 02 58 26 62 09 11 20 ab ec cf a9 37 0c 75 57 b8 Data Ascii: uzN)d'%SKL-$cx,u_G\Zi}8v\;KO~e~iTLg{/SzmyU+G7^I>\96u\Ub+kw_(dy77 N9^uezRjv'O8SX&b 7uW
2024-05-07 23:18:40 UTC	16384	IN	Data Raw: d0 1f 2d c4 6e 0a 04 d4 6d 4a 79 dc 7b 20 8f 88 c7 a9 a4 20 96 b9 84 61 c7 e8 88 97 0a 6e c8 79 07 dd 11 2c 7b 69 18 11 cc 81 8c a8 4f 54 0f 6b fa 02 51 61 d4 da ea a0 c3 4e 31 24 a0 68 a3 2d 9e 62 1c 3a 22 ac db d1 6d 4e ae 01 bd 94 a1 ae 7b 3c cf 45 4a 90 3a 00 b2 86 32 b9 71 fd ef 20 6d 28 ab 76 ef 0f 69 0e c9 3b 4a 05 3a 83 da f2 0c 91 dd 41 66 95 b3 0b 5a d2 5d cc 76 94 04 e1 e4 00 1a de 62 3a a8 05 f5 6e 01 92 c8 3e dd 50 60 a8 f7 1f e2 b1 dc bd c0 41 66 95 5b 66 54 92 1e 5b d4 42 82 d9 a7 66 e2 1c 1e 03 4f be 55 52 cd c5 23 5b 96 9c 34 7b a2 06 a8 7b aa 72 83 33 d8 20 b5 4e 9d cb 58 04 48 ee a0 57 9d 59 84 35 d2 82 6a 5e 35 f5 0b 6a 63 ac 85 44 53 6d 2e 62 4d 50 d3 d1 05 8a 1f cd fc 50 40 08 87 0a f6 be 5c 3d e4 93 d0 28 aa f5 6a 31 af fe 19 71 69 Data Ascii: -nmJy{ any,{iOTkQaN1$h-b:"mN{<EJ:2q m(vi;J:AfZ]vb:n>P`Af[fT[BfOUR#[4{{r3 NXHWY5j^5jcDSm.bMPP@\=(j1qi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49812	99.86.38.11	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:40 UTC	489	OUT	GET /eh96rkuu9740/fa838bb1ec4d42f79e62f841fffa0d0e/a88f6c1acfbf2ebc98c4e0a421288468/DBurke_GreyBackground2.jpg?f=top&fit=thumb&w=300&h=300 HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:40 UTC	512	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 25202 Connection: close ETag: "2026f1676838a116f899c477cc8ec533" Last-Modified: Sun, 21 Apr 2024 16:13:10 GMT Date: Tue, 07 May 2024 23:18:38 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 b4085435efbe95a420f374958bd145be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: OFX4dlmVtP-HoxVzVHEcYT6TVd-xVLhtYiHW5M2hxYuhcxPIA_D9pg== Age: 2
2024-05-07 23:18:40 UTC	15616	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 c2 01 c2 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-05-07 23:18:40 UTC	9586	IN	Data Raw: 5a c4 d1 8f 00 86 27 6f 28 c8 ef d3 d7 e1 f0 a9 d4 db 8e 24 d6 e5 e3 4d d2 9a ef 4d fb cb 05 e5 76 0a 30 77 1b 64 fc ba f4 c6 3b 0a d8 8a 75 a9 ab 3e 48 cf 95 1a da 94 46 2c 89 a2 2d 93 ca 79 bc b8 c6 77 f8 1d ea b9 37 b1 74 21 1d cc d6 97 7e 20 08 10 aa ee 41 eb 8f de 2b 5e de c5 33 8a d9 11 1a ce bc b1 86 25 b9 86 79 71 f1 ad a8 44 e4 f1 12 51 d0 83 96 fd c7 2c 03 7b a9 4e 14 13 fb e9 9c 9f 95 5d 0c 6f 24 d4 51 cd c9 95 62 83 9c 89 bd 3a dc 5a c0 91 03 cd 8e ac 7a b1 ee 6b d3 42 0b 1c 54 51 e3 32 e4 96 59 b9 cb a9 2d 6f da ac e8 54 89 28 47 4a 20 6d a5 18 33 ad 40 1e b5 28 0b 52 02 80 28 02 80 28 02 80 46 eb 40 2d 00 50 05 00 50 05 00 13 8a 01 09 a8 b0 37 35 00 42 d4 07 93 fe d6 de dc 49 17 1c 11 a1 dc 61 10 e3 55 b8 8c fb cc 37 fb b8 3f 0d 8b 63 bf 97 Data Ascii: Z'o($MMv0wd;u>HF,-yw7t!~ A+^3%yqDQ,{N]o$Qb:ZzkBTQ2Y-oT(GJ m3@(R((F@-PP75BIaU7?c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	49794	13.107.246.70	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:41 UTC	835	OUT	GET /about-us/contact-us HTTP/1.1 Host: www.gilardi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=Lax; SameSite=Lax; _ga=GA1.2.715666436.1715123900; _gid=GA1.2.909392301.1715123900; _gat_UA-132403652-1=1; _ga_XCZNY5NT2G=GS1.2.1715123901.1.1.1715123918.0.0.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	49814	13.107.246.70	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:42 UTC	835	OUT	GET /about-us/contact-us HTTP/1.1 Host: www.gilardi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=Lax; SameSite=Lax; _ga=GA1.2.715666436.1715123900; _gid=GA1.2.909392301.1715123900; _gat_UA-132403652-1=1; _ga_XCZNY5NT2G=GS1.2.1715123901.1.1.1715123918.0.0.0
2024-05-07 23:18:42 UTC	2935	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 23:18:42 GMT Content-Type: text/html Content-Length: 15637 Connection: close Content-MD5: LXm6xGSS5NdcElXeayhzWA== Last-Modified: Tue, 07 May 2024 05:05:05 GMT ETag: "0x8DC6E53422B12AD" x-ms-request-id: cd6c6f65-101e-004e-06d4-a05ebe000000 x-ms-version: 2018-03-28 x-azure-ref: 20240507T231842Z-17c65945bcbknpw5xy9fyrvu440000000450000000008ap7 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff Referrer-Policy: strict-origin X-XSS-Protection: 1; mode=block Cache-Control: no-store no-cache Set-Cookie: SameSite=Lax;secure;HttpOnly Permissions-Policy: camera=(), microphone=() Content-Security-Policy: worker-src blob: https://.georgeson.com;script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://content-assets.computershare.com https://ui.customsearch.ai https://s508159127.t.eloqua.com https://ssl.google-analytics.com https://www.google-analytics.com https://.evidon.com https://img03.en25.com https://js.adsrvr.org https://snap.licdn.com https://view.ceros.com https://siteintercept.qualtrics.com https://.siteintercept.qualtrics.com https://secure.quantserve.com https://.pub.sfmc-content.com https://rules.quantcount.com https://.adsrvr.org https://snap.licdn.com https://widget.trustpilot.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://.crazyegg.com https://bat.bing.com;connect-src https://www.googletagmanager.com https://www.google-analytics.com https://ui.customsearch.ai https://s508159127.t.eloqua.com https://*.evidon.com https://cdn.linkedin.oribi.io https://siteintercept.qualtrics.com https://rules.quantcount.com http [TRUNCATED] X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-05-07 23:18:42 UTC	13449	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 2f 3e 3c 74 69 74 6c 65 3e 43 6f 6e 74 61 63 74 20 75 73 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 68 72 65 66 3d 22 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 70 6e 67 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 Data Ascii: <!DOCTYPE html><html><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><title>Contact us</title><link rel="icon" type="image/png" href="/img/favicon.png"/><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/><meta
2024-05-07 23:18:42 UTC	2188	IN	Data Raw: 20 64 61 74 61 2d 69 74 65 6d 3d 22 66 6f 6f 74 65 72 4d 65 6e 75 49 74 65 6d 32 22 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 2d 6c 69 6e 6b 73 5f 5f 6d 65 6e 75 2d 69 74 65 6d 20 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 2d 6c 69 6e 6b 73 5f 5f 68 65 61 64 69 6e 67 22 3e 43 61 72 65 65 72 73 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 44 6f 77 6e 41 72 72 6f 77 22 3e 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 2d 33 34 35 20 32 37 32 2e 38 20 35 30 20 35 30 22 3e 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 20 64 3d 22 4d 2d 33 31 32 2e Data Ascii: data-item="footerMenuItem2" class="footer-links__menu-item "><span class="footer-links__heading">Careers<span class="footerDownArrow"><svg version="1" xmlns="http://www.w3.org/2000/svg" viewBox="-345 272.8 50 50"><path style="fill:currentColor" d="M-312.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	49815	99.86.38.13	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:43 UTC	714	OUT	GET /eh96rkuu9740/79d72135a6c74119b571fce1437d7d3d/d2186c148b26f7b6500d6ac9203f5941/ContactUs.jpg?w=1920&h=850&fit=fill&f=center HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:44 UTC	506	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 186110 Connection: close ETag: "a424f80c09e9747a75122f10670c030c" Last-Modified: Mon, 29 Apr 2024 15:23:08 GMT Date: Tue, 07 May 2024 23:18:44 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 efcf7b9d0f917f9ebf314db03e52d9b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: nOTU8qxsMDHxUx2UgY28gbte7PjimFw6cxVtQIYac3CP84OUc8Ji-Q==
2024-05-07 23:18:44 UTC	15878	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 2c 01 2c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 03 52 07 80 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 ff c4 00 44 10 00 01 03 03 03 01 05 06 04 05 04 02 02 01 02 07 01 00 02 03 04 11 21 05 12 31 41 06 13 22 51 61 07 14 32 71 81 91 23 42 a1 b1 Data Ascii: JFIF,,CCRD!1A"Qa2q#B
2024-05-07 23:18:44 UTC	6508	IN	Data Raw: b5 db cf 7b 4b ad 52 68 90 3a 7a ca 96 40 d0 2e 6e 6e 0a f2 dd 49 db be 32 df 4f 9d fd a1 fb 7d d0 a9 e5 95 94 cc 13 4c 41 00 b4 e2 e1 24 df a7 69 8e bd d7 cf 9d a7 f6 9b ad 76 99 8f 30 bb dd e0 bd ac 1d 9b 1f 4f 35 d3 1d 4f 6b 66 dc 34 9d 9f ab af ab 98 d4 c8 e9 48 68 2e b8 3c 9e 07 cd 75 f3 d3 9f 86 d2 c7 d8 b6 c6 d6 99 1b 70 7c 86 53 f9 0f e3 5e 87 b3 51 d3 e5 ac 70 3e 80 13 f3 53 cf 6b e1 a4 8c a5 8a 00 4f 7a d6 7f f7 b8 29 b3 5b 2b 29 98 5f bd bd c8 2e 36 25 af da 6d eb 6f e8 b3 72 6a 62 b7 49 49 18 70 6b a9 a2 79 02 e0 b9 ff 00 ad ec b1 72 6e 45 a1 4f 21 37 34 f0 b2 f9 c7 2b 9d ad ea a6 20 ec 2d d8 03 b8 b8 3c a9 b5 d0 a7 74 91 b4 12 df 10 bd 86 db 7f 24 a4 58 73 bc 5f 0f cc 83 fb e1 61 a3 43 c3 18 f2 e1 b5 a3 23 39 fd d3 fc 00 94 b8 35 ad 05 c6 dd Data Ascii: {KRh:z@.nnI2O}LA$iv0O5Okf4Hh.<up\|S^Qp>SkOz)[+)_.6%morjbIIpkyrnEO!74+ -<t$Xs_aC#95
2024-05-07 23:18:44 UTC	2224	IN	Data Raw: f0 f7 10 73 62 e2 b7 b6 74 ac c8 1a c7 5b c2 01 fc b7 fe ea 9a 56 ac a7 f1 1f 0b 5a 3f e4 0f 55 a9 59 bd b3 a6 a3 0d be d7 80 00 eb 6f e6 ba cb fb 62 c4 71 51 bb 7d 9a 04 8d f3 24 0d c3 e6 af 94 63 c5 59 d0 88 65 70 3b 81 07 0e 69 b8 1f 75 bf 6c 9a df 13 fc 32 b5 97 36 b3 88 69 71 f4 f3 57 48 78 97 68 b7 74 ed e0 db 70 7d b0 a6 97 6a ce 79 74 a7 f0 8b c8 e8 0d d6 e3 05 8d f1 07 d8 48 58 e2 78 b5 fe 8a d8 44 24 b7 79 0c 61 f4 f3 3f 20 ac 65 11 74 77 36 32 30 f9 16 ff 00 45 a8 87 ba 50 76 97 3f 68 e9 cd be 85 03 9c 5c 30 e3 bb ae 7f aa d3 04 6e dd b8 b3 8f 56 de eb 4c 95 f2 11 19 36 dc 3c ac 90 46 5e 6c 79 b1 c5 95 42 bc 93 c6 6c 3a 5d 03 9c 7c 26 ed cf 0a 86 4a d7 3b c4 d6 97 74 00 f0 3f 92 81 bd d3 c5 9c 5a 03 4d 8d ed 95 52 9c 1e 59 bc 58 6e 03 08 a7 18 Data Ascii: sbt[VZ?UYobqQ}$cYep;iul26iqWHxhtp}jytHXxD$ya? etw620EPv?h\0nVL6<F^lyBl:]\|&J;t?ZMRYXn
2024-05-07 23:18:44 UTC	1371	IN	Data Raw: 01 00 80 40 20 10 08 04 02 01 00 80 40 20 ad 59 f0 22 56 0c bf 11 5b 73 40 f4 11 94 44 90 7c 48 ad 6a 5e 02 c3 a4 69 44 8a 79 e5 00 81 a7 94 11 3b 94 08 80 40 20 10 08 04 02 05 05 03 90 08 04 0a 0a 07 84 08 f4 19 d5 bf 09 52 8e 37 b4 23 f0 dd f2 5c b2 1e 25 db 01 6a 9f aa e1 5b 43 a2 e1 c1 74 8c d7 a0 68 7f 0b 56 d1 d9 69 fc 05 a8 37 29 d5 17 a2 e1 04 c1 51 9d ab d3 09 22 26 ca 2b 88 d6 a6 34 d4 b2 1b 60 2e 59 3b 63 5f 38 7b 47 d6 2a 2b b5 36 50 53 ba ce 99 db 6f 7e 17 cf ca 5c ae 9e ec 6e a3 98 d6 74 1d 27 d9 ec 70 d4 d6 4a da 89 65 f8 8b 8d f2 bd 78 f1 cc 27 6c 5c ed 79 bf 6c bb 63 4e ea a1 3e 9a 5a df 40 14 b5 97 19 51 ed 26 76 6e 6b c3 7f 65 cf 4d 79 2b cb ed 2f ba 8c ef 6e e0 47 03 a2 78 a7 9e 96 34 cf 68 b4 ed 1b 9d 73 7e 01 59 b8 b7 39 34 eb b4 ce Data Ascii: @ @ Y"V[s@D\|Hj^iDy;@ R7#\%j[CthVi7)Q"&+4`.Y;c_8{G*+6PSo~\nt'pJex'l\ylcN>Z@Q&vnkeMy+/nGx4hs~Y94
2024-05-07 23:18:44 UTC	2742	IN	Data Raw: 0c 99 95 12 9b 1c e1 7a 27 4e 15 f5 35 1d 87 cd 7a 9e 17 45 a6 f0 15 4a ea 34 de 8a c4 75 fa 49 e1 58 c3 b1 d3 38 6a a3 a8 d3 f8 08 8e 8e 87 a2 2b 6e 97 a2 0d 48 3a 2b 05 c8 95 16 e3 c5 94 58 98 2d 15 2b 56 90 f0 81 e1 03 90 38 20 54 02 06 9e 50 34 a8 18 54 a1 a5 40 85 55 84 2a 29 a3 95 af 89 4e e8 88 02 95 41 e8 91 0f 6a d0 7a 01 02 8e 10 2b 79 41 28 e8 82 41 ca 07 0e 50 3d 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 2b 56 7c 28 95 85 37 c6 e5 a7 35 77 75 54 46 79 40 f8 3e 24 1a d4 dd 16 6b a4 69 43 d1 45 48 79 40 20 6a 08 dd ca 06 a0 10 08 Data Ascii: z'N5zEJ4uIX8j+nH:+X-+V8 TP4T@U*)NAjz+yA(AP=@ @ @ @ @ @ @ @ @ @ +V\|(75wuTFy@>$kiCEHy@ j
2024-05-07 23:18:44 UTC	2742	IN	Data Raw: 73 fa 1b a9 32 34 26 a4 13 ba 6f 79 63 30 05 83 5a 7c 42 de 47 fb f0 96 e8 f8 80 53 c0 d6 77 63 74 72 39 84 0c 12 df 95 9d 7e 53 7a 34 48 60 85 8e 67 e1 3a 22 1b 70 f6 34 8d de 78 0a 5a a8 ea 69 ec db 07 3e 40 e7 e4 59 dc f9 79 12 b3 b0 b2 69 91 b5 cd 88 b4 17 5b 22 70 45 81 f2 3c 74 e2 ca ec d2 bc 54 d2 c3 3c 6f 61 73 1f c6 d7 de f6 1f 3b e3 ec a5 ab a2 c2 d7 b0 bd ef a6 63 9d b8 7e 21 90 b0 1f 90 04 85 9b da ce 99 da ac 35 2e 8a 72 ea 53 24 76 be fb b7 c3 f5 21 6b 1f db 19 39 19 63 94 86 c6 d9 43 77 7c 42 57 00 47 cb a1 fd 17 5e 9c ec ba 54 a9 a3 b1 6c 47 6c 81 c7 c4 48 16 fd b1 f7 5b f2 d3 1e 24 75 0d 54 cc 95 d0 b5 8e 11 30 9d af 70 3b be 40 dc 7d 95 97 bd 33 7a 60 36 49 1e d2 c3 b2 42 39 8e 56 dc 7d d6 e7 4c eb 68 44 20 44 49 27 68 e5 cc 76 56 fe a5 Data Ascii: s24&oyc0Z\|BGSwctr9~Sz4H`g:"p4xZi>@Yyi["pE<tT<oas;c~!5.rS$v!k9cCw\|BWG^TlGlH[$uT0p;@}3z`6IB9V}LhD DI'hvV
2024-05-07 23:18:44 UTC	2742	IN	Data Raw: bc b7 da 7f 61 e9 35 2a 19 5f 23 01 c7 92 e1 9e 3b 75 c7 2d 3c 13 49 ec d5 66 97 aa 3a 6a 18 37 46 c3 62 00 e8 b9 e1 8d de e3 a6 79 4b 13 76 ff 00 b3 12 ea 54 42 aa 38 04 8f 7b 76 bc 13 62 17 ae f1 ee 3c fb 79 a7 66 75 8d 57 b2 d5 92 52 88 5c e8 5a 6e 09 18 1f 55 24 b8 f5 57 c6 64 e8 e6 ed 66 b1 aa 48 e7 b5 c6 00 dc 34 8e 17 9f 29 37 b7 a3 0e 3f 8b 51 b6 6a bb 3e ae 57 ce eb 7e 6e 8b c7 c9 c9 37 d3 df c7 c7 d2 ad 4d 2d 8e f3 e1 68 e3 a2 f0 67 9d bd d7 b7 1c 24 f4 c0 d6 e7 87 4f 63 5c c2 1f 29 c8 17 5e 7b 94 f6 eb 23 92 ae a8 75 4d 47 7a 4d c8 17 23 c9 59 37 4b a9 15 e0 86 4d 46 a4 3d e0 b6 06 fc 2d f3 2b d1 30 d7 6f 3d cb 6e ab 40 82 47 d4 f8 db 78 ef 60 3c 95 d4 67 6e de 2a 42 d8 af d7 c9 59 05 fd 1f 4e 75 4d 7c 2c b7 27 95 ad 6f a6 77 a9 b7 b3 d2 d0 ba Data Ascii: a5_#;u-<If:j7FbyKvTB8{vb<yfuWR\ZnU$WdfH4)7?Qj>W~n7M-hg$Oc\)^{#uMGzM#Y7KMF=-+0o=n@Gx`<gnBYNuM\|,'ow
2024-05-07 23:18:44 UTC	2742	IN	Data Raw: e7 c8 0b b4 9b 8e 76 e9 4d d2 32 09 89 74 5b da e1 96 df 27 d4 11 ea ba 62 c6 57 6a d4 f2 39 c0 36 62 f3 b8 9f 09 20 e3 e6 b7 7f c7 29 bf a5 ac 91 f4 f0 0b b5 ae ce 4d ec 6c ac 9b a5 dc 85 8d ad a8 8c 6d 1b 5c 7f 29 16 77 d9 5b d5 27 71 42 79 e6 64 ae 64 cc 68 8a d8 6b 05 ec b5 27 e9 9d df aa e3 50 86 f6 61 16 02 c3 70 20 fe aa ea a7 94 3e 67 cb 1e c7 46 23 7c 60 dc 93 c9 49 ab ed 2e d2 89 24 7e eb 5a f7 cf 52 a8 aa 62 7c 75 33 10 0e d9 4d dc 09 c0 5d 2d db 96 ac 21 76 d7 06 11 6b f1 72 af c0 86 32 4d c0 b8 f3 ba 90 01 c0 82 03 85 c6 0a d3 26 c9 1e c7 17 39 c0 8d b7 b7 45 76 20 7b a2 73 4b cb b6 b7 80 ef 21 ea b6 94 c6 b4 82 4b 0e e8 ef 62 5a 6e 88 73 58 e7 1c 5c 82 30 2d 85 02 b5 ae 12 16 91 73 7b 0c db f5 40 e3 e2 f8 da 39 c3 41 c7 ce de 6a c0 fd a6 cd Data Ascii: vM2t['bWj96b )Mlm\)w['qByddhk'Pap >gF#\|`I.$~ZRb\|u3M]-!vkr2M&9Ev {sK!KbZnsX\0-s{@9Aj
2024-05-07 23:18:44 UTC	1371	IN	Data Raw: fa 5c 53 6f 1c d6 ab 25 aa d4 64 2c 7d 98 5c 4b 43 dc 3c 27 d4 f0 bc 37 ba f4 b9 2a c0 5f 3b 9a 48 73 6e 5d 71 d4 5d 76 c7 d3 95 65 4f 20 32 8d b7 39 f8 1b c8 0b b4 73 a8 5a e0 2f 90 d2 33 f3 55 9e cc 92 62 f2 dd ae 23 d1 bc dd 54 57 9a 2d af c6 0d b3 bc df ea b5 bd b2 af 24 52 16 5c 38 97 63 c2 05 d6 e5 8c 5d a4 8a 9a 47 3f 6b 5a e0 05 b7 5f 16 0b 36 c1 d3 e9 35 33 c3 33 9f 4e 4b 66 73 76 73 63 7e 9f e0 b2 e7 72 6e 47 71 a1 49 58 25 a5 92 40 e9 65 7b ae 1d d2 cd c5 cf d5 59 95 8b e2 ed 34 c9 0d 6c ae 64 85 91 4a f9 06 c2 64 20 93 6e 4d ae 7d 3c 96 fc b7 ec f1 d7 6d d6 d1 d4 44 64 33 b1 d5 0c 6d dc e2 f7 bb c2 06 79 e2 c5 6b 76 6e 55 92 7c 4d 23 1b 57 4d 1c d0 47 dd 83 60 5b 66 96 b0 63 37 17 e5 70 de fb 8d eb 5d 29 fb bb 5f 2c a6 48 18 63 1e 2e f6 2b 8f Data Ascii: \So%d,}\KC<'7*_;Hsn]q]veO 29sZ/3Ub#TW-$R\8c]G?kZ_6533NKfsvsc~rnGqIX%@e{Y4ldJd nM}<mDd3mykvnU\|M#WMG`[fc7p])_,Hc.+
2024-05-07 23:18:44 UTC	2742	IN	Data Raw: 04 3c 20 69 e1 04 47 94 02 01 00 80 40 ad 40 e0 2e 50 39 00 80 40 20 54 0e 08 11 dc 20 a7 57 c1 52 8e 57 5b 1f 86 e5 ce 8f 1a ed b0 cb d7 1a d4 60 69 1f 10 5b 89 5d ee 87 c3 56 d1 da e9 dc 35 58 37 a9 f8 0a 8d 08 b8 41 3b 56 a0 91 aa 89 02 07 04 0a 78 41 95 5e 3c 77 59 ab 18 1d a0 a6 64 d4 8e dc d1 c7 92 e7 9c 96 3a e1 75 5e 31 da 5d 12 98 ca e7 16 0d d7 f2 5f 1b 9b 1c 5f 5b 8b 3a e1 ab 68 80 94 b5 8d fa 00 bc 5e 1b af 67 9f 48 3d c5 b4 f1 97 ca 6c 7c 97 a3 19 23 8e 57 6c aa b7 4d 56 7b ba 76 96 b7 ce cb ac 73 ad 0d 33 b3 fd d8 69 78 2e 77 55 b4 74 54 d4 1b 18 00 6a b2 26 d7 a2 a2 11 b6 fb 45 96 f4 9b 5c 86 26 38 01 f0 d9 6f 18 c5 b6 2f c5 0b 77 b5 a0 5e e7 95 d3 a8 c3 d0 f4 ea 0e ea 85 8e 68 b1 68 f0 db ae 38 5e dc 31 eb 6f 26 59 6e b2 2b 65 6b a1 95 ef Data Ascii: < iG@@.P9@ T WRW[`i[]V5X7A;VxA^<wYd:u^1]__[:h^gH=l\|#WlMV{vs3ix.wUtTj&E\&8o/w^hh8^1o&Yn+ek

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	49816	44.209.29.87	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:44 UTC	701	OUT	GET /site/v3/7792/99885/1/1/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/contact-us HTTP/1.1 Host: l.evidon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:44 UTC	231	IN	HTTP/1.1 204 No Content Date: Tue, 07 May 2024 23:18:44 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 10 Connection: close X-Powered-By: Express ETag: W/"a-bAsFyilMr4Ra1hIU5PyoyFRunpI" Vary: Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49818	44.209.29.87	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:44 UTC	701	OUT	GET /site/v3/7792/99885/1/2/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/contact-us HTTP/1.1 Host: l.evidon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:44 UTC	231	IN	HTTP/1.1 204 No Content Date: Tue, 07 May 2024 23:18:44 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 10 Connection: close X-Powered-By: Express ETag: W/"a-bAsFyilMr4Ra1hIU5PyoyFRunpI" Vary: Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49821	99.86.38.11	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:45 UTC	479	OUT	GET /eh96rkuu9740/79d72135a6c74119b571fce1437d7d3d/d2186c148b26f7b6500d6ac9203f5941/ContactUs.jpg?w=1920&h=850&fit=fill&f=center HTTP/1.1 Host: content-images.computershare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:45 UTC	513	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 186110 Connection: close ETag: "a424f80c09e9747a75122f10670c030c" Last-Modified: Mon, 29 Apr 2024 15:23:08 GMT Date: Tue, 07 May 2024 23:18:44 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 deaaf0548506de20925615eb51a7ea7e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C1 X-Amz-Cf-Id: IIadyhxqvVAzqXbbtCWhJtB6evlpdw4nvytmvPu7ck2FEYSwn4-v2g== Age: 1
2024-05-07 23:18:45 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 2c 01 2c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 03 52 07 80 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 ff c4 00 44 10 00 01 03 03 03 01 05 06 04 05 04 02 02 01 02 07 01 00 02 03 04 11 21 05 12 31 41 06 13 22 51 61 07 14 32 71 81 91 23 42 a1 b1 Data Ascii: JFIF,,CCRD!1A"Qa2q#B
2024-05-07 23:18:45 UTC	16384	IN	Data Raw: 3a dc 9c ae 95 95 a8 48 b8 ba cd 58 d6 a2 9b 63 9a 42 e7 5d 31 74 31 bd 95 d4 ce 6b ac 5d c8 2b 31 6b 2e ce a7 94 83 c5 fa ac 65 8b 58 dd b6 68 6b 2e e3 e6 17 93 39 af 4f 46 35 d3 e8 fa 97 76 f1 bc f8 49 b1 5c f1 ba 74 d6 db 4e 7c 55 4c 27 97 73 6b af 46 35 8b 1c 96 af 42 23 7b cb 40 3b b3 6e 57 68 e3 5c e5 6c 22 68 1c c7 71 b4 af 46 15 e6 ca 3e a9 a2 19 f5 5e a7 89 d2 69 d8 db e8 8c d7 55 a6 74 56 33 5d 8e 93 d1 69 1d 8e 99 f9 51 1d 46 9f d1 11 d1 51 74 46 9b 74 bd 10 69 c0 b4 2e c4 82 d4 68 a9 82 b0 a9 1a b4 87 84 0f 08 1c 10 28 40 e4 08 81 0f 28 1a 54 0c 29 42 2c 86 95 43 50 04 dd 16 94 70 88 10 28 e5 50 e6 aa 1e 81 02 07 20 56 72 82 51 ca 09 07 28 1c 39 40 f4 02 01 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 80 Data Ascii: :HXcB]1t1k]+1k.eXhk.9OF5vI\tN\|UL'skF5B#{@;nWh\l"hqF>^iUtV3]iQFQtFti.h(@(T)B,CPp(P VrQ(9@@ @ @
2024-05-07 23:18:45 UTC	11977	IN	Data Raw: 6c b9 d6 94 aa 2d 7b 01 81 8c ac b4 6b 2f 62 a2 b2 b5 da 3f 7c 8b 6d ae 07 55 d3 0b a6 32 9b 73 90 e8 27 bc 18 ba de 5c 8c e3 c7 db a2 d3 f4 be ec 5b 85 e4 cb 2d bd 58 e3 a7 41 49 44 08 07 cc 2f 36 55 da 45 f8 e8 c9 68 e0 75 53 7a 6e 4d 92 68 4b 45 8e 4a d6 35 9b 0d 97 4f 12 44 5d d6 d6 b2 ef 8f b7 1c e7 4e 4f 55 1d cc d6 02 c4 2f 4c 79 f6 92 84 77 8d 17 58 ae 91 ab 14 40 fc 97 36 b6 b3 0d 35 c8 16 b9 ba ac bd 37 d9 d7 60 1f 5b b6 b2 a5 85 b0 34 dc 02 39 58 b4 7a 5d 37 21 7b df 3d bf a6 e6 cb 43 a8 d3 bf 2e 55 65 d7 69 5d 11 9a ec 34 cf ca b4 8e a3 4f e8 aa 3a 2a 2e 8a 2b 72 97 a2 a3 56 9d 20 bb 12 d0 b7 1a 8b 13 85 a8 25 6a d2 1e 10 3c 20 72 07 04 0a 80 3c a0 47 70 81 ae 50 30 a9 43 54 08 ee 15 53 51 69 1d ca 44 2a a8 14 aa 12 21 e1 68 39 02 a0 50 81 47 Data Ascii: l-{k/b?\|mU2s'\[-XAID/6UEhuSznMhKEJ5OD]NOU/LywX@657`[49Xz]7!{=C.Uei]4O:.+rV %j< r<GpP0CTSQiD!h9PG
2024-05-07 23:18:45 UTC	16384	IN	Data Raw: a7 a5 90 fe e6 51 03 bc 6d dd 7d df 94 7c d6 b7 f1 15 a9 65 ee c3 df 54 e6 6f 90 10 1b c7 e8 9a fa 77 e9 24 4e 8a 39 a1 68 db e3 01 db 4f d7 95 08 9a 00 41 7f 75 62 d2 76 97 13 8b ff 00 da 4f 67 c5 32 c7 d4 36 36 38 9b 07 65 a4 75 53 6b 16 7d d5 d1 cc 01 2d 66 fb 67 c8 1f fb 55 17 e9 e1 63 1c e0 4b 99 6b 6f 7f 5d b6 cf e8 02 b1 3d a7 82 78 a5 73 48 04 86 b6 cd 03 a8 1f e0 54 6a 52 44 c6 b8 9d b6 11 fc 23 fe 5e 67 f4 57 6b da 46 35 a5 8e c9 77 8e c4 95 15 64 53 59 ae 00 e4 9b 7d 01 c2 c7 b5 95 cb 76 a1 a4 18 d9 ea 6e a6 b4 b6 f6 e7 40 10 d4 11 ea 14 ab f1 79 9f 05 c0 ea 8c b5 f4 c6 1e f1 bc f3 d1 68 74 51 35 ce 84 8c 9d d9 ba d3 2f 46 f6 3b 4a d9 f5 c8 2f d1 eb cf 9b a4 7d a7 48 d0 ca 48 da 38 0d 0a 46 6a 0a 8c 82 a5 65 cf 6a a0 58 ae 75 b8 e1 f5 76 f8 96 Data Ascii: Qm}\|eTow$N9hOAubvOg2668euSk}-fgUcKko]=xsHTjRD#^gWkF5wdSY}vn@yhtQ5/F;J/}HH8FjejXuv
2024-05-07 23:18:45 UTC	15596	IN	Data Raw: 4f 86 ee f9 5b f9 7c 96 31 6e df d3 9e ac df 2c 10 f7 6c 6b ea 36 de 48 4d c5 88 e6 e3 83 f3 5a 9a da 76 af 54 d3 0c 4c 75 33 00 79 17 70 8d f8 f5 1e 9c 2d 4e d2 f5 e9 59 bf ed b0 9d b6 70 b9 1d 41 f9 ad 32 64 74 fb 64 79 dc e7 34 9e 0f 8a df aa 5b d1 a4 b5 1b 89 03 68 b9 c6 eb da ff 00 34 9d 33 7b 63 93 36 f7 82 1b 11 37 04 87 9b 9f a5 b9 5d fa f8 e1 da 17 89 58 1a c7 0e fc bb c2 f2 05 96 fd b3 76 4e fa 68 e4 0c a8 8c 06 83 6b 93 f6 4d 69 37 fb 39 bd f4 d1 92 f8 44 9b 0d db 23 08 3e 1b fd d1 7d a5 7c a2 08 1e 66 37 0c 23 c4 05 cd 8f 9a c7 fe 2f fe a3 6f 71 24 8e 73 27 dc c9 46 18 4d 81 23 c9 6b bd 27 d4 f3 4c c8 63 6c 9e 20 37 06 bf 17 b7 cd 21 4c aa 70 75 3b aa 29 c9 0e 88 12 49 16 bb 79 ea b5 3b ba 4b e9 1e a1 51 14 ad 3d e4 7f 1b 44 ac 77 fe d7 ca bb Data Ascii: O[\|1n,lk6HMZvTLu3yp-NYpA2dtdy4[h43{c67]XvNhkMi79D#>}\|f7#/oq$s'FM#k'Lcl 7!Lpu;)Iy;KQ=Dw
2024-05-07 23:18:45 UTC	788	IN	Data Raw: f3 5b 91 1f 48 52 d2 e9 fa 25 3c 74 f4 b1 c3 4b 0b 45 8b 00 b0 b0 5b f4 8c 6e d2 76 a6 28 dc 3b b7 0d 80 1e 3a 9e 8b 9e 59 e9 d3 18 e3 66 d5 98 e6 1b 00 01 e6 e3 9f a2 e3 79 3a d3 bc c5 45 cf a4 7b bc 51 b4 92 7a 8f ea b1 e6 df 6c aa d1 a7 d2 c7 78 d9 13 1a 3a b6 d8 0b 8f a6 e5 73 7a 8c 70 3a a2 42 d6 ee 16 c6 49 18 fa ae 77 da ed ce 56 f7 30 3c b5 e0 34 5a f7 0e 01 46 58 d2 55 c6 5c eb 99 24 17 b3 76 82 40 3d 33 c7 0a 36 cc 96 aa 49 e4 6b 9b 16 d8 8e e0 37 3a dc 5c 5f af 50 53 4c ed 03 1c ca b2 21 ef 1b 29 00 b9 cd 61 3b 5a 0f a8 f5 fe 7e 4a 55 8a ef 12 33 4f a7 73 8b 5b 70 c7 3c 62 c0 7e 5f 0d f0 08 17 ce 45 d5 9f ea 56 4d 69 33 51 d4 6d 73 83 cb f6 33 bd 04 6e 3c 5e de 77 73 b9 b7 1c ad 58 cf f8 c6 ac a8 92 69 1e 63 77 78 e7 38 8d d2 3b 2d ff 00 88 f9 Data Ascii: [HR%<tKE[nv(;:Yfy:E{Qzlx:szp:BIwV0<4ZFXU\$v@=36Ik7:\_PSL!)a;Z~JU3Os[p<b~_EVMi3Qms3n<^wsXicwx8;-
2024-05-07 23:18:45 UTC	12792	IN	Data Raw: 61 4d 2e d5 9e d1 38 6c 9b 0b ac 76 ef 69 c8 6f a8 f9 dd 6e 75 18 bd a0 a6 a1 f7 09 5d 24 64 77 75 2c c3 4f 4e b7 1f 6f dd 6a e5 b9 a4 93 4b 14 b4 3e e3 49 56 49 6b 9d 34 ce b0 dd f0 da d9 b7 95 c9 59 b9 6f 51 64 d4 56 8d d2 43 62 f6 97 b4 38 b7 1d 31 ca b6 7e 93 7f b5 f8 de 1e e6 c2 e6 1d 92 47 b9 b7 1c df 3f b5 97 3b 3e ba 4b f0 fb 03 0c 70 d9 c1 cf 8f f3 0f f8 9b 7f 45 9b fb 6f df 45 ad 89 b5 f1 48 e3 23 8c 9b 76 6e 3c dc 01 d5 6a 56 6c dc 56 2f 63 a9 e2 80 93 76 33 ee 41 e1 6b dd 67 e6 92 96 c3 53 4a 1a 18 d6 12 3b c7 0b f2 2c a7 7b 5d 4d 28 fb c0 f7 c6 37 75 c3 45 89 e4 03 d0 15 a9 3a 63 7d 95 cd 8d ed 0f 60 b3 df ce 39 2b 5a f8 ce cd 82 73 34 71 b9 c0 87 58 b0 f9 b4 ab e8 f6 63 e3 31 ed 6c 7e 1b dc 6d b5 c1 ff 00 3f 9a d4 bb 62 96 07 47 42 22 2e 7e Data Ascii: aM.8lvionu]$dwu,ONojK>IVIk4YoQdVCb81~G?;>KpEoEH#vn<jVlV/cv3AkgSJ;,{]M(7uE:c}`9+Zs4qXc1l~m?bGB".~
2024-05-07 23:18:46 UTC	6396	IN	Data Raw: d4 0e 40 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 80 40 20 10 08 04 02 0c dd 4c 60 a2 56 53 96 9c d1 b9 51 19 41 3d 3f 45 2a b5 69 b8 0b 2e 8b f1 f0 81 c7 94 11 39 03 1c 81 10 08 04 10 54 cd dd c4 4a 0e 1f b5 3a d0 82 17 0b e4 f4 5c b3 cb c6 3b 71 e1 e5 5e 6f 53 a9 1a 89 49 25 78 32 e4 7d 1c 70 d2 8d 5d 76 c6 f3 f4 5e 5c f9 1e 8c 70 65 4f 5f 60 49 2b c7 97 23 d3 8e 2c 7a dd 47 78 39 fd 57 93 2c 9e 9c 66 98 b2 cf bd c6 e7 0b cb 95 7a 64 56 96 60 c6 e0 ae 35 d2 2a b3 54 6b 1f 97 0f ba cb 4d 8a 2a 39 f5 f0 22 81 85 e4 f5 f2 5e 9e 3e 1c f9 ae b1 8f 37 27 2e 3c 5d e4 Data Ascii: @ @ @ @ @ @ @ @ @ @ L`VSQA=?Ei.9TJ:\;q^oSI%x2}p]v^\peO_`I+#,zGx9W,fzdV`5TkM*9"^>7'.<]
2024-05-07 23:18:46 UTC	16384	IN	Data Raw: 95 62 9a 9f 22 e3 aa e7 ae dd 23 56 08 6d d1 4a e9 1b 3a 44 43 de 19 8b e7 c9 16 be 85 f6 73 4e 1d 0c 78 f2 5e de 3f 4f 2e 57 b7 a8 4d 44 1f 49 62 de 8b a5 c5 cf 6f 0d f6 a7 d9 61 f8 93 c6 cc fa 05 f3 b9 f8 65 8f 67 1f 27 ed e5 5a 50 31 d4 16 3c 90 41 e1 7c 3c f0 d3 df 8d 74 71 be 32 f0 7f 30 e8 b3 1a c9 bd a7 54 78 9a db 2d 54 8f 61 f6 40 22 aa d6 5b 7b 92 c1 d5 75 fc 7f fb 5c ff 00 e5 f4 a5 0c 0d ee 58 40 dc 79 5f 5f e3 c7 6f c6 e7 7c d3 1b 58 40 fe 8b 5b 4d 32 6b fb 89 a3 7b a5 63 5c dc b5 80 8f d5 62 d9 5d f1 dc f4 e0 b5 ce cb 69 55 b4 f2 17 c2 d1 b8 d8 6d 03 2b 86 5c 78 59 dc 7b 71 e6 cf 1b d5 63 b7 b1 54 e6 06 93 b5 a2 f6 63 5a 2c 00 5c 2f 16 3a 7a 27 3e 5b 2d 0f b3 ed 3a 8e 63 25 86 e7 1e 7c fe eb cf 97 e3 e1 2e de 8c 7f 27 2b 34 e9 c7 65 e9 28 20 Data Ascii: b"#VmJ:DCsNx^?O.WMDIboaeg'ZP1<A\|<tq20Tx-Ta@"[{u\X@y__o\|X@[M2k{c\b]iUm+\xY{qcTcZ,\/:z'>[-:c%\|.'+4e(
2024-05-07 23:18:46 UTC	9200	IN	Data Raw: 7c d0 6e 82 39 4e d9 38 63 ef 81 7f 4b f4 fe 8b 5e bd 31 6e e7 69 5d a2 b2 6a 8f 75 73 5b 59 4a d7 00 e2 d2 6c 72 73 cf 52 14 f2 bf 0d 45 1a a3 51 45 3b e5 87 77 bb ba 37 b5 b2 b7 8c 5e df af ec ac b2 fb 35 63 36 2d 45 d1 51 c7 1c 1b 2c 40 7f 8d d7 6c a5 a7 00 fa 5c 5f fe d6 fc 7b ed 9d fe 98 8e a9 91 85 e5 e1 a6 a5 a4 3a f6 16 b5 ee 6d e5 8b 2e b2 39 da 3d e4 55 56 77 d6 92 11 26 ed ad 60 36 b5 ac 7d 78 fd 40 57 d7 b6 6f 6a f5 b1 ba 96 53 4a 67 12 54 ed 63 03 80 73 5f 67 bf 73 85 bc ae 7f 41 e6 ba 79 6d 8d 69 4e 6a 86 d3 57 fe 20 2f 89 d3 34 82 dc 6c b1 27 e9 7b 24 9f 52 df 8c f7 54 be 9d d2 3c bb bc 90 c6 48 24 93 77 5c 1c df d0 2d 6b 69 bd 28 54 ce e3 52 e3 50 e6 97 06 8e 7e 2b 7c be 81 35 a9 a2 a0 d4 99 1d 64 2d 2d 7d 9c 5a 6c 1b d0 db aa b8 ee 54 cb Data Ascii: \|n9N8cK^1ni]jus[YJlrsREQE;w7^5c6-EQ,@l\_{:m.9=UVw&`6}x@WojSJgTcs_gsAymiNjW /4l'{$RT<H$w\-ki(TRP~+\|5d--}ZlT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	49820	44.209.29.87	443	3132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 23:18:45 UTC	701	OUT	GET /site/v3/7792/99885/1/4/2/1/153197?consent=1&regulationid=1&regulationconsenttypeid=2&d=https://www.gilardi.com/about-us/contact-us HTTP/1.1 Host: l.evidon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gilardi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 23:18:45 UTC	231	IN	HTTP/1.1 204 No Content Date: Tue, 07 May 2024 23:18:45 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 10 Connection: close X-Powered-By: Express ETag: W/"a-bAsFyilMr4Ra1hIU5PyoyFRunpI" Vary: Accept-Encoding

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2524, Parent PID: 6012

General

Target ID:	0
Start time:	01:17:51
Start date:	08/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3132, Parent PID: 2524

General

Target ID:	2
Start time:	01:17:54
Start date:	08/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2496 --field-trial-handle=2304,i,9999863175344410500,9655413472271620124,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2612, Parent PID: 6012

General

Target ID:	3
Start time:	01:17:59
Start date:	08/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.factaclassactionsettlement.com/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.factaclassactionsettlement.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Windows Analysis Report
http://www.factaclassactionsettlement.com/